Archive
January 2007
Vulnerabilities first published in this month (UTC), newest first.
725 results · Feed
-
Unscored —
Integer underflow in the DecodeGRE function in src/decode.c in Snort 2.6.1.2 allows remote attackers to trigger derefer…
-
Unscored —
Unspecified vulnerability in easy-content filemanager allows remote attackers to upload or modify arbitrary files via u…
-
Unscored —
Unspecified vulnerability in Total Commander before 6.5.6 allows user-assisted remote attackers to delete arbitrary fil…
-
Unscored —
WordPress 2.0.6, and 2.1Alpha 3 (SVN:4662), does not properly verify that the m parameter value has the string data typ…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Ezboxx Portal System Beta 0.7.6 and earlier allow remote attacke…
-
Unscored —
VideoLAN VLC 0.8.6a allows remote attackers to cause a denial of service (application crash) via a crafted .wmv file.
-
Unscored —
index.php in Nwom topsites 3.0 allows remote attackers to obtain potentially sensitive information via a ' (quote) char…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in (1) Fastilo 2.0 and (2) Open Solution Quick.Cart 2.0 allows re…
-
Unscored —CVE-2006-5171 EPSS 17%
Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates (CA) Brightstor ARCserve Backup…
-
Unscored —CVE-2006-5172 EPSS 15%
Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates (CA) Brightstor ARCserve Backup…
-
Unscored —CVE-2006-6487 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in DT Guestbook (dt_guestbook) 1.0f, when register_globals is ena…
-
Unscored —CVE-2006-6767 Public exploit
oftpd before 0.3.7 allows remote attackers to cause a denial of service (daemon abort) via a (1) LPRT or (2) LPASV comm…
-
Unscored —
The soup_headers_parse function in soup-headers.c for libsoup HTTP library before 2.2.99 allows remote attackers to cau…
-
Unscored —
Double free vulnerability in the _ATPsndrsp function in Apple Mac OS X 10.4.8, and possibly other versions, allows remo…
-
Unscored —
squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via craf…
-
Unscored —
The aclMatchExternal function in Squid before 2.6.STABLE7 allows remote attackers to cause a denial of service (crash) …
-
Unscored —CVE-2007-0235 Public exploit
Stack-based buffer overflow in the glibtop_get_proc_map_s function in libgtop before 2.14.6 (libgtop2) allows local use…
-
Unscored —CVE-2006-6924 Public exploit
bitweaver 1.3.1 and earlier allows remote attackers to obtain sensitive information via a sort_mode=-98 query string to…
-
Unscored —CVE-2006-6925 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in bitweaver 1.3.1 and earlier allow remote attackers to inject arb…
-
Unscored —
Buffer overflow in eXtremail 2.1 has unknown impact and attack vectors, as demonstrated by VulnDisco Pack. NOTE: The pr…
-
Unscored —CVE-2006-6930 Public exploit
SQL injection vulnerability in viewad.asp in Rapid Classified 3.1 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2006-6923 Public exploit
SQL injection vulnerability in newsletters/edition.php in bitweaver 1.3.1 and earlier allows remote attackers to execut…
-
Unscored —
SQL injection vulnerability in Deadlock User Management System (phpdeadlock) 0.64 and earlier allows remote attackers t…
-
Unscored —CVE-2006-6927 Public exploit
Multiple SQL injection vulnerabilities in Rialto 1.6 allow remote attackers to execute arbitrary SQL commands via (1) t…
-
Unscored —CVE-2006-6929 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Rapid Classified 3.1 allow remote attackers to inject arbitrary …
-
Unscored —CVE-2006-6928 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Rialto 1.6 allow remote attackers to inject arbitrary web script…
-
Unscored —CVE-2007-0225 Public exploit
Cross-site scripting (XSS) vulnerability in shopcustadmin.asp in VP-ASP Shopping Cart 6.09 and earlier allows remote at…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Movable Type (MT) 3.33, when nofollow is disabled and unmoderated comments …
-
Unscored —
PHP remote file inclusion vulnerability in install.php in CS-Cart 1.3.3 allows remote attackers to execute arbitrary PH…
-
Unscored —CVE-2007-0228 Public exploit
The DataCollector service in EIQ Networks Network Security Analyzer allows remote attackers to cause a denial of servic…
-
Unscored —CVE-2007-0229 Public exploit
Integer overflow in the ffs_mountfs function in Mac OS X 10.4.8 and FreeBSD 6.1 allows local users to cause a denial of…
-
Unscored —
wp-trackback.php in WordPress 2.0.6 and earlier does not properly unset variables when the input data includes a numeri…
-
Unscored —CVE-2007-0224 Public exploit
SQL injection vulnerability in shopgiftregsearch.asp in VP-ASP Shopping Cart 6.09 and earlier allows remote attackers t…
-
Unscored —
slocate 3.1 does not properly manage database entries that specify names of files in protected directories, which allow…
-
Unscored —CVE-2007-0226 Public exploit
SQL injection vulnerability in wbsearch.aspx in uniForum 4 and earlier allows remote attackers to execute arbitrary SQL…
-
Unscored —
SQL injection vulnerability in shared/code/cp_functions_downloads.php in Nicola Asuni All In One Control Panel (AIOCP) …
-
Unscored —CVE-2007-0232 Public exploit
PHP remote file inclusion vulnerability in routines/fieldValidation.php in Jshop Server 1.3 allows remote attackers to …
-
Unscored —
Unspecified versions of the Linux kernel allow local users to cause a denial of service (unrecoverable zombie process) …
-
Unscored —CVE-2005-4823 EPSS 13%
Buffer overflow in the HP HTTP Server 5.0 through 5.95 of the HP Web-enabled Management Software allows remote attacker…
-
Unscored —
Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 6.20, 6.4x, 7.01, and 7.50 allows remote attacke…