Archive
January 2007
Vulnerabilities first published in this month (UTC), newest first.
725 results · Feed
-
Unscored —CVE-2006-6856 Public exploit
Direct static code injection vulnerability in WebText CMS 0.4.5.2 and earlier allows remote attackers to inject arbitra…
-
Unscored —
Eval injection vulnerability in tDiary 2.0.3 and 2.1.4.200 61127 allows remote authenticated users to execute arbitrary…
-
Unscored —CVE-2006-6853 Public exploit
Buffer overflow in Durian Web Application Server 3.02 freeware on Windows allows remote attackers to execute arbitrary …
-
Unscored —
The isdn_ppp_ccp_reset_alloc_state function in drivers/isdn/isdn_ppp.c in the Linux 2.4 kernel before 2.4.34-rc4 does n…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in The Address Book 1.04e allow remote attackers to inject arbitrar…
-
Unscored —
Unrestricted file upload vulnerability in The Address Book 1.04e validates the Content-Type header but not the file ext…
-
Unscored —
export.php in The Address Book 1.04e writes username and password hash information into a publicly accessible file when…
-
Unscored —
Directory traversal vulnerability in users.php in The Address Book 1.04e allows remote attackers to include arbitrary f…
-
Unscored —
Cross-site scripting (XSS) vulnerability in The Address Book 1.04e allows remote attackers to inject arbitrary web scri…
-
Unscored —
Multiple SQL injection vulnerabilities in The Address Book 1.04e allow remote attackers to execute arbitrary SQL comman…
-
Unscored —
register.php in The Address Book 1.04e allows remote attackers to bypass the "Allow User Self-Registration" setting and…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in The Address Book 1.04e allows remote attackers to perform unauthoriz…
-
Unscored —CVE-2006-6488 Public exploit
Stack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control (DlgWrapper.dll) befor…
-
Unscored —
Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attac…
-
Unscored —
CRLF injection vulnerability in Adobe Acrobat Reader Plugin before 8.0.0, when used with the Microsoft.XMLHTTP ActiveX …
-
Unscored —CVE-2007-0048 EPSS 34%
Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x b…
-
Unscored —CVE-2007-0045 EPSS 47%
Multiple cross-site scripting (XSS) vulnerabilities in Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugi…
-
Unscored —
Double free vulnerability in the Adobe Acrobat Reader Plugin before 8.0.0, as used in Mozilla Firefox 1.5.0.7, allows r…
-
Unscored —
Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to "criteria for …
-
Unscored —CVE-2006-6850 Public exploit
PHP remote file inclusion vulnerability in include.php in the Roster Module (character_roster) in Shadowed Portal 5.7 a…
-
Unscored —CVE-2006-6846 Public exploit
Multiple SQL injection vulnerabilities in While You Were Out (WYWO) InOut Board 1.0 allow remote attackers to execute a…
-
Unscored —
PHP remote file inclusion vulnerability in the BE IT EasyPartner 0.0.9 beta component for Joomla! allows remote attacke…
-
Unscored —CVE-2006-6838 Public exploit
Rediff Bol Downloader ActiveX (OCX) control allows remote attackers to execute arbitrary files, and obtain sensitive in…
-
Unscored —CVE-2006-6847 Public exploit
An ActiveX control in ierpplug.dll for RealNetworks RealPlayer 10.5 allows remote attackers to cause a denial of servic…
-
Unscored —CVE-2006-6848 Public exploit
SQL injection vulnerability in admin.asp in ASPTicker 1.0 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the optional user comment module in CMS Made Simple 1.0.2 allows remote att…
-
Unscored —CVE-2006-6842 Public exploit
SQL injection vulnerability in admin/admin_acronyms.php in the Acronym Mod 0.9.5 for phpBB2 Plus 1.53 allows remote att…
-
Unscored —
Certain forms in phpBB before 2.0.22 lack session checks, which has unknown impact and remote attack vectors.
-
Unscored —
Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to a "negative st…
-
Unscored —CVE-2006-6845 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in CMS Made Simple 1.0.2 allows remote attackers to inject arbitr…
-
Unscored —CVE-2006-6849 Public exploit
administration/index.php in Cahier de texte (CDT) 2.2 does not properly exit when authentication fails, which allows re…
-
Unscored —
Multiple stack-based buffer overflows in the (1) LoadTree, (2) ReadHeader, and (3) LoadXBOXTree functions in the ISO (i…
-
Unscored —
Multiple format string vulnerabilities in (1) the cdio_log_handler function in modules/access/cdda/access.c in the CDDA…
-
Unscored —CVE-2007-0016 Public exploit
Stack-based buffer overflow in MoviePlay 4.76 allows remote attackers to execute arbitrary code via a long filename in …
-
Unscored —
com_categories in Joomla! before 1.0.12 does not validate input, which has unknown impact and remote attack vectors.
-
Unscored —
Multiple SQL injection vulnerabilities in Efkan Forum 1.0 and earlier allow remote attackers to execute arbitrary SQL c…
-
Unscored —
Multiple unspecified vulnerabilities in osp-cert in IBM OS/400 V5R3M0 have unspecified impact and attack vectors, relat…
-
Unscored —CVE-2006-6831 Public exploit
SQL injection vulnerability in faqDsp.asp in aFAQ 1.0 allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —
Multiple unspecified vulnerabilities in Joomla! before 1.0.12 have unknown impact and attack vectors related to (1) "un…
-
Unscored —CVE-2006-6830 Public exploit
PHP remote file inclusion vulnerability in b2verifauth.php in b2 Blog 0.5 and earlier allows remote attackers to execut…