Archive
January 2007
Vulnerabilities first published in this month (UTC), newest first.
273 results · Clear filters · Feed
-
Unscored —CVE-2007-0117 Public exploit
DiskManagementTool in the DiskManagement.framework 92.29 on Mac OS X 10.4.8 does not properly validate Bill of Material…
-
Unscored —CVE-2007-0121 Public exploit
Cross-site scripting (XSS) vulnerability in search.asp in RI Blog 1.3 allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2007-0120 Public exploit
Acunetix Web Vulnerability Scanner (WVS) 4.0 Build 20060717 and earlier allows remote attackers to cause a denial of se…
-
Unscored —
Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an inva…
-
Unscored —CVE-2007-0122 Public exploit
Multiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated admini…
-
Unscored —CVE-2007-0119 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in EditTag 1.2 allow remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2007-0118 Public exploit
Multiple absolute path traversal vulnerabilities in EditTag 1.2 allow remote attackers to read arbitrary files via an a…
-
Unscored —
The Adobe PDF specification 1.3, as implemented by Adobe Acrobat before 8.0.0, allows remote attackers to have an unkno…
-
Unscored —CVE-2007-0110 Public exploit
Cross-site scripting (XSS) vulnerability in nidp/idff/sso in Novell Access Manager Identity Server before 3.0.0-1013 al…
-
Unscored —
WordPress before 2.0.6, when mbstring is enabled for PHP, decodes alternate character sets after escaping the SQL query…
-
Unscored —CVE-2007-0112 Public exploit
SQL injection vulnerability in cats.asp in createauction allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2007-0113 Public exploit
Buffer overflow in Packeteer PacketShaper PacketWise 8.x allows remote authenticated users to cause a denial of service…
-
Unscored —CVE-2006-6899 Public exploit
hidd in BlueZ (bluez-utils) before 2.25 allows remote attackers to obtain control of the (1) Mouse and (2) Keyboard Hum…
-
Unscored —CVE-2006-6890 Public exploit
Voodoo chat 1.0RC1b stores sensitive information under the web root with insufficient access control, which allows remo…
-
Unscored —CVE-2006-6888 Public exploit
P-News 1.16 and 1.17 store sensitive information under the web root with insufficient access control, which allows remo…
-
Unscored —CVE-2006-6889 Public exploit
FreeStyle Wiki (fswiki) 3.6.2 and earlier stores sensitive information under the web root with insufficient access cont…
-
Unscored —CVE-2006-6891 Public exploit
Vz (Adp) Forum 2.0.3 stores sensitive information under the web root with insufficient access control, which allows rem…
-
Unscored —CVE-2007-0091 Public exploit
newsCMSlite stores sensitive information under the web root with insufficient access control, which allows remote attac…
-
Unscored —CVE-2007-0092 Public exploit
SQL injection vulnerability in productdetail.asp in E-SMARTCART 1.0 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2007-0093 Public exploit
SQL injection vulnerability in page.php in Simple Web Content Management System allows remote attackers to execute arbi…
-
Unscored —CVE-2007-0098 Public exploit
Directory traversal vulnerability in language.php in VerliAdmin 0.3 and earlier, when magic_quotes_gpc is disabled, all…
-
Unscored —CVE-2006-6887 Public exploit
Unrestricted file upload vulnerability in logahead UNU 1.0 allows remote attackers to upload and execute arbitrary PHP …
-
Unscored —CVE-2006-6885 Public exploit
An ActiveX control in SwDir.dll in Macromedia Shockwave 10 allows remote attackers to cause a denial of service (Intern…
-
Unscored —CVE-2006-6884 Public exploit
Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for Win…
-
Unscored —CVE-2007-0085 Public exploit
Unspecified vulnerability in sys/dev/pci/vga_pci.c in the VGA graphics driver for wscons in OpenBSD 3.9 and 4.0, when t…
-
Unscored —CVE-2007-0082 Public exploit
users_adm/start1.php in IMGallery 2.5 and earlier does not properly handle files with multiple extensions, which allows…
-
Unscored —CVE-2007-0081 Public exploit
Sunbelt Kerio Personal Firewall (SKPF) 4.3.268 and 4.3.246, and possibly other versions allows local users to provide a…
-
Unscored —CVE-2004-2670 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in mod.php in eNdonesia 8.3 allow remote attackers to inject arbitr…
-
Unscored —CVE-2006-6878 Public exploit
admin/uploads.php in PHP-Update 2.7 and earlier allows remote attackers to gain privileges by setting the rights[7] par…
-
Unscored —CVE-2006-6873 Public exploit
Multiple SQL injection vulnerabilities in mod.php in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2006-6880 Public exploit
Multiple SQL injection vulnerabilities in code/guestadd.php in PHP-Update 2.7 and earlier allow remote attackers to exe…
-
Unscored —CVE-2006-6872 Public exploit
Directory traversal vulnerability in mod.php in eNdonesia 8.4 allows remote attackers to read arbitrary files via a .. …
-
Unscored —CVE-2006-6871 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in eNdonesia 8.4 allow remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2006-6879 Public exploit
Unrestricted file upload vulnerability in admin/uploads.php in PHP-Update 2.7 and earlier allows remote authenticated u…
-
Unscored —CVE-2006-6877 Public exploit
Directory traversal vulnerability in index.php in Matteo Lucarelli 3editor CMS 0.42 and earlier, when register_globals …
-
Unscored —CVE-2003-1317 Public exploit
Cross-site scripting (XSS) vulnerability in mod.php in eNdonesia 8.2 allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2007-0059 Public exploit
Cross-zone scripting vulnerability in Apple Quicktime 3 to 7.1.3 allows remote user-assisted attackers to execute arbit…
-
Unscored —CVE-2006-6866 Public exploit
STphp EasyNews PRO 4.0 stores sensitive information under the web root with insufficient access control, which allows r…
-
Critical 9.8
PHP remote file inclusion vulnerability in the Enigma2 plugin (Enigma2.php) in Enigma WordPress Bridge allows remote at…
-
Unscored —CVE-2006-6869 Public exploit
Directory traversal vulnerability in includes/search/search_mdforum.php in MAXdev MDForum 2.0.1 and earlier, when magic…