Archive
January 2007
Vulnerabilities first published in this month (UTC), newest first.
725 results · Feed
-
Unscored —CVE-2007-0019 Public exploit
Multiple heap-based buffer overflows in rumpusd in Rumpus 5.1 and earlier (1) allow remote authenticated users to execu…
-
Unscored —
Rumpus 5.1 and earlier has weak permissions for certain files and directories under /usr/local/Rumpus, including the co…
-
Unscored —CVE-2007-0364 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to i…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.009 and earlier allow remot…
-
Unscored —CVE-2006-6942 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PhpMyAdmin before 2.9.1.1 allow remote attackers to inject arbit…
-
Unscored —
phpMyAdmin before 2.9.1.1 allows remote attackers to bypass Allow/Deny access rules that use IP addresses via false hea…
-
Unscored —CVE-2006-6943 Public exploit
PhpMyAdmin before 2.9.1.1 allows remote attackers to obtain the full server path via direct requests to (a) scripts/che…
-
Unscored —
Directory traversal vulnerability in PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221 allows user-assisted remote attack…
-
Unscored —
choShilA.bpl in PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221 allows local users, and user-assisted remote attackers …
-
Unscored —CVE-2003-1318 Public exploit
Twilight Webserver 1.3.3.0 allows remote attackers to cause a denial of service (application crash) via a GET request f…
-
Unscored —CVE-2007-0353 Public exploit
Cross-site scripting (XSS) vulnerability in (1) index.php and (2) login.php in myBloggie 2.1.5 allows remote attackers …
-
Unscored —CVE-2007-0355 Public exploit
Buffer overflow in the Apple Minimal SLP v2 Service Agent (slpd) in Mac OS X 10.4.11 and earlier, including 10.4.8, all…
-
Unscored —CVE-2007-0360 Public exploit
PHP remote file inclusion vulnerability in lang/index.php in Oreon 1.2.3 RC4 and earlier allows remote attackers to exe…
-
Unscored —CVE-2007-0354 Public exploit
SQL injection vulnerability in email.php in MGB OpenSource Guestbook 0.5.4.5 and earlier allows remote attackers to exe…
-
Unscored —
The Common Controls Replacement Project (CCRP) FolderTreeview (FTV) ActiveX control (ccrpftv6.ocx) allows remote attack…
-
Unscored —CVE-2007-0359 Public exploit
PHP remote file inclusion vulnerability in frontpage.php in Uberghey CMS 0.3.1 allows remote attackers to execute arbit…
-
Unscored —
Multiple SQL injection vulnerabilities in (a) index.php and (b) dl.php in SmE FileMailer 1.21 and earlier allow remote …
-
Unscored —
Unspecified vulnerability in the FTP server implementation in HP Jetdirect firmware x.20.nn through x.24.nn allows remo…
-
Unscored —
Microsoft Windows XP and Windows Server 2003 do not properly handle user logoff, which might allow local users to gain …
-
Unscored —
Cross-site scripting (XSS) vulnerability in admin-search.php in (1) Openads for PostgreSQL (aka phpPgAds) before 2.0.10…
-
Unscored —CVE-2007-0357 Public exploit
Directory traversal vulnerability in the AVM IGD CTRL Service in Fritz!DSL 02.02.29 allows remote attackers to read arb…
-
Unscored —
Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbit…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the RSS feed component in FreshReader before 1.0.07010600 allows remote att…
-
Unscored —CVE-2007-0361 Public exploit
PHP remote file inclusion vulnerability in mep/frame.php in PHPMyphorum 1.5a allows remote attackers to execute arbitra…
-
Unscored —CVE-2006-6941 Public exploit
index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to obtain sensitive information via an invalid actio…
-
Unscored —
Directory traversal vulnerability in upgrade.php in nicecoder.com INDEXU 5.x allows remote attackers to include arbitra…
-
Unscored —
The SISCO OSI stack, as used in SISCO MMS-EASE, ICCP Toolkit for MMS-EASE, AX-S4 MMS and AX-S4 ICCP, and possibly other…
-
Unscored —CVE-2007-0338 Public exploit
Heap-based buffer overflow in Dream FTP Server allows remote attackers to execute arbitrary code via a USER command wit…
-
Unscored —
OpenBSD before 20070116 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via ce…
-
Unscored —
Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.1 and earlier, when Microsoft Internet Explorer 6 is used, a…
-
Unscored —
(1) admin/adminlien.php3 and (2) admin/modif.php3 in liens_dynamiques 2.1 do not require authentication, which allows r…
-
Unscored —
The (1) Activity Monitor.app/Contents/Resources/pmTool, (2) Keychain Access.app/Contents/Resources/kcproxy, and (3) ODB…
-
Unscored —CVE-2007-0333 Public exploit
Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse drivers into …
-
Unscored —
Unspecified vulnerability in the SIP module in InGate Firewall and SIParator before 4.5.1 allows remote attackers to co…
-
Unscored —
Cross-site scripting (XSS) vulnerability in liens.php3 in liens_dynamiques 2.1 allows remote attackers to inject arbitr…
-
Unscored —CVE-2007-0337 Public exploit
Directory traversal vulnerability in sesskglogadmin.php in KGB 1.9 and earlier allows remote attackers to include and e…
-
Unscored —CVE-2007-0335 Public exploit
Multiple directory traversal vulnerabilities in Jax Petition Book 1.0.3.06 allow remote attackers to include and execut…
-
Unscored —
SQL injection vulnerability in index.php (aka the login form) in Scriptme SMe FileMailer 1.21 allows remote attackers t…
-
Unscored —
SQL injection vulnerability in index.php in SmE FileMailer 1.21 allows remote attackers to execute arbitrary SQL comman…
-
High 7.5CVE-2007-0342 Public exploit
WebCore in Apple WebKit build 18794 allows remote attackers to cause a denial of service (null dereference and applicat…