Archive
January 2007
Vulnerabilities first published in this month (UTC), newest first.
725 results · Feed
-
Unscored —
BEA WebLogic Server 6.1 through 6.1 SP7, 7.0 through 7.0 SP7, and 8.1 through 8.1 SP5 allows remote attackers to read a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Operation/User.pm in Plain Black WebGUI before 7.3.5 (beta) allows remote a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in admin/edit_member.php in Easebay Resources Paypal Subscription Manager allo…
-
Unscored —CVE-2007-0399 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Simple Machines Forum (SMF) 1.1 RC3 allow remote au…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in forum.php3 in Arnaud Guyonne (aka Arnotic) a-forum allow remote …
-
Unscored —
SQL injection vulnerability in admin/memberlist.php in Easebay Resources Login Manager 3.0 allows remote attackers to e…
-
Unscored —
Cross-site scripting (XSS) vulnerability in admin/memberlist.php in Easebay Resources Login Manager 3.0 allows remote a…
-
Unscored —
SQL injection vulnerability in admin/memberlist.php in Easebay Resources Paypal Subscription Manager allows remote atta…
-
Unscored —
The Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.3 and Adaptive Security Device Manager…
-
Unscored —
SQL injection vulnerability in Virtuemart 1.0.7 allows remote attackers to execute arbitrary SQL commands via unspecifi…
-
Unscored —
DocMan 1.3 RC2 allows remote attackers to obtain sensitive information (the full path) via unspecified vectors.
-
Unscored —CVE-2007-0368 Public exploit
Stack-based buffer overflow in mbse-bbs 0.70 and earlier allows local users to execute arbitrary code via a long string…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Virtuemart 1.0.7 allows remote attackers to inject arbitrary web script or …
-
Unscored —
Sun Solaris 9 does not properly verify the status of file descriptors before setuid execution, which allows local users…
-
Unscored —
Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 7.9 allow remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2007-0371 Public exploit
A certain ActiveX control in the Common Controls Replacement Project (CCRP) CCRP BrowseDialog Server (ccrpbds6.dll) all…
-
Unscored —
WDaemon 9.5.4 allows remote attackers to access the /WorldClient.dll URI on TCP port 3000, which has unknown impact. NO…
-
Unscored —CVE-2007-0369 Public exploit
SQL injection vulnerability in phpBP RC3 (2.204) and earlier allows remote attackers to execute arbitrary SQL commands …
-
Unscored —
Cross-site scripting (XSS) vulnerability in preview in the reviews section in PostNuke 0.764 allows remote attackers to…
-
Unscored —CVE-2007-0370 Public exploit
Unrestricted file upload vulnerability in index.php in phpBP RC3 (2.204) and earlier allows remote administrators to in…
-
Unscored —
Multiple SQL injection vulnerabilities in DocMan 1.3 RC2 allow attackers to execute arbitrary SQL commands via unspecif…
-
Unscored —
Unspecified vulnerability in the rating section in PostNuke 0.764 has unknown impact and attack vectors, related to "an…
-
Unscored —
The faq section in PostNuke 0.764 allows remote attackers to obtain sensitive information (the full path) via "unvalida…
-
Unscored —
IBM AIX 5.3 does not properly verify the status of file descriptors before setuid execution, which allows local users t…
-
Unscored —CVE-2007-0389 Public exploit
Directory traversal vulnerability in ArsDigita Community System (ACS) 3.4.10 and earlier, and ArsDigita Community Educa…
-
Unscored —
Multiple SQL injection vulnerabilities in Xoops 2.0.16 allow remote attackers to execute arbitrary SQL commands via (1)…
-
Unscored —CVE-2007-0388 Public exploit
SQL injection vulnerability in search.php in Woltlab Burning Board (wBB) 1.0.2 and earlier, and 2.3.6 and earlier in th…
-
Unscored —
Cross-site scripting (XSS) vulnerability in DocMan 1.3 RC2 allows remote attackers to inject arbitrary web script or HT…
-
Unscored —
Multiple SQL injection vulnerabilities in letterman.class.php in the Letterman 1.2.3 (com_letterman) component for Joom…
-
Unscored —
Multiple SQL injection vulnerabilities in ATutor 1.5.3.2 allow remote attackers to execute arbitrary SQL commands via u…
-
Unscored —
SQL injection vulnerability in models/category.php in the Weblinks component for Joomla! SVN 20070118 (com_weblinks) al…
-
Unscored —
Unspecified vulnerability in HP-UX B.11.23, when running IPFilter in combination with PHNE_34474, allows remote attacke…
-
Unscored —
Format string vulnerability in the log creation functionality of BitDefender Client Professional Plus 8.02 allows attac…
-
Unscored —
HP HP-UX B11.11 does not properly verify the status of file descriptors before setuid execution, which allows local use…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in sabros.us 1.7 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2007-0373 EPSS 12%
Multiple SQL injection vulnerabilities in Joomla! 1.5.0 Beta allow remote attackers to execute arbitrary SQL commands v…
-
Unscored —
Joomla! 1.5.0 Beta allows remote attackers to obtain sensitive information via a direct request for (1) plugins/user/ex…
-
Unscored —
SQL injection vulnerability in (1) Joomla! 1.0.11 and 1.5 Beta, and (2) Mambo 4.6.1, allows remote attackers to execute…
-
Unscored —CVE-2007-0395 Public exploit
PHP remote file inclusion vulnerability in libraries/grab_globals.lib.php in ComVironment 4.0 allows remote attackers t…
-
Unscored —
Untrusted search path vulnerability in Rumpus 5.1 and earlier allows local users to gain privileges via a modified PATH…