Archive
January 2007
Vulnerabilities first published in this month (UTC), newest first.
273 results · Clear filters · Feed
-
Unscored —
Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 1…
-
Unscored —
Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup R11.5 Server before SP2 allows remote …
-
Unscored —CVE-2007-0200 Public exploit
PHP remote file inclusion vulnerability in template.php in Geoffrey Golliher Axiom Photo/News Gallery (axiompng) 0.8.6 …
-
Unscored —CVE-2007-0202 Public exploit
SQL injection vulnerability in index.php in @lex Guestbook 4.0.2 and earlier, when magic_quotes_gpc is disabled, allows…
-
Unscored —CVE-2007-0197 Public exploit
Finder 10.4.6 on Apple Mac OS X 10.4.8 allows user-assisted remote attackers to cause a denial of service and possibly …
-
Unscored —CVE-2007-0196 Public exploit
SQL injection vulnerability in admin_check_user.asp in Motionborg Web Real Estate 2.1 and earlier allows remote attacke…
-
Unscored —CVE-2007-0181 Public exploit
PHP remote file inclusion vulnerability in include/common_function.php in magic photo storage website allows remote att…
-
Unscored —CVE-2007-0190 Public exploit
PHP remote file inclusion vulnerability in edit_address.php in edit-x ecommerce allows remote attackers to execute arbi…
-
Unscored —CVE-2007-0182 Public exploit
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arb…
-
Unscored —CVE-2007-0183 Public exploit
Cross-site scripting (XSS) vulnerability in /search in iPlanet Web Server 4.x allows remote attackers to inject arbitra…
-
Unscored —CVE-2007-0177 Public exploit
Cross-site scripting (XSS) vulnerability in the AJAX module in MediaWiki before 1.6.9, 1.7 before 1.7.2, 1.8 before 1.8…
-
Unscored —CVE-2007-0173 Public exploit
Directory traversal vulnerability in index.php in L2J Statistik Script 0.09 and earlier, when register_globals is enabl…
-
Unscored —CVE-2007-0170 Public exploit
PHP remote file inclusion vulnerability in index.php in AllMyVisitors 0.4.0 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2007-0179 Public exploit
SQL injection vulnerability in comment.php in PHPKIT 1.6.1 R2 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2007-0178 Public exploit
PHP remote file inclusion vulnerability in info.php in Easy Banner Pro 2.8 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2007-0172 Public exploit
Multiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.3.0 and earlier allow remote attackers to execute a…
-
Unscored —CVE-2007-0171 Public exploit
PHP remote file inclusion vulnerability in index.php in AllMyLinks 0.5.0 and earlier allows remote attackers to execute…
-
Unscored —
Multiple PHP file inclusion vulnerabilities in WGS-PPC (aka PPC Search Engine), as distributed with other aliases, allo…
-
Unscored —CVE-2007-0162 Public exploit
Unsanity Application Enhancer (APE) 2.0.2 installs with insecure permissions for the (1) ApplicationEnhancer binary and…
-
Unscored —CVE-2007-0165 Public exploit
Unspecified vulnerability in libnsl in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service (crash)…
-
Unscored —CVE-2007-0161 Public exploit
The PML Driver HPZ12 (HPZipm12.exe) in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVIC…
-
Unscored —
Heap-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-a…
-
Unscored —
Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, a…
-
Unscored —CVE-2004-2675 Public exploit
ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to cause a denial of service (crash) via a SITE PA…
-
Unscored —CVE-2006-6911 Public exploit
SQL injection vulnerability in search.asp in Digitizing Quote And Ordering System 1.0 allows remote authenticated users…
-
Unscored —CVE-2006-6912 Public exploit
SQL injection vulnerability in phpMyFAQ 1.6.7 and earlier allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2007-0148 Public exploit
Format string vulnerability in OmniGroup OmniWeb 5.5.1 allows remote attackers to cause a denial of service (applicatio…
-
Unscored —CVE-2007-0142 Public exploit
SQL injection vulnerability in orange.asp in ShopStoreNow E-commerce Shopping Cart allows remote attackers to execute a…
-
Unscored —CVE-2007-0144 Public exploit
Cross-site scripting (XSS) vulnerability in search.asp in Digitizing Quote And Ordering System 1.0 allows remote authen…
-
Unscored —CVE-2007-0143 Public exploit
Multiple PHP remote file inclusion vulnerabilities in NUNE News Script 2.0pre2 allow remote attackers to execute arbitr…
-
Unscored —CVE-2007-0140 Public exploit
SQL injection vulnerability in down.asp in Kolayindir Download (Yenionline) allows remote attackers to execute arbitrar…
-
Unscored —CVE-2006-6910 Public exploit
formbankcgi.exe in Fersch Formbankserver 1.9, when the PATH_INFO begins with Abfrage, allows remote attackers to cause …
-
Unscored —CVE-2007-0129 Public exploit
SQL injection vulnerability in main.asp in LocazoList 2.01a beta5 and earlier allows remote attackers to execute arbitr…
-
Unscored —CVE-2007-0138 Public exploit
formbankcgi.exe in Fersch Formbankserver 1.9, when the PATH_INFO begins with (1) AbfrageForm or (2) EingabeForm, allows…
-
Unscored —
Multiple eval injection vulnerabilities in iGeneric iG Shop 1.0 allow remote attackers to execute arbitrary code via th…
-
Unscored —CVE-2007-0135 Public exploit
PHP remote file inclusion vulnerability in inc/init.inc.php in Aratix 0.2.2 beta 11 and earlier, when register_globals …
-
Unscored —CVE-2007-0132 Public exploit
SQL injection vulnerability in compare_product.php in iGeneric iG Shop 1.4 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2007-0128 Public exploit
SQL injection vulnerability in info_book.asp in Digirez 3.4 and earlier allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2007-0133 Public exploit
Multiple SQL injection vulnerabilities in display_review.php in iGeneric iG Shop 1.4 and earlier allow remote attackers…
-
Unscored —CVE-2007-0130 Public exploit
SQL injection vulnerability in user.php in iGeneric iG Calendar 1.0 allows remote attackers to execute arbitrary SQL co…