3 April 2007

35 results · Feed

• Unscored —
  CVE-2007-0242

  The UTF-8 decoder in codecs/qutfcodec.cpp in Qt 3.3.8 and 4.2.3 does not reject long UTF-8 sequences as required by the…

  Apr 3, 2007
• Unscored —
  CVE-2007-1852

  Multiple PHP remote file inclusion vulnerabilities in 2BGal 3.1.1 allow remote attackers to execute arbitrary PHP code …

  Apr 3, 2007
• Unscored —
  CVE-2007-1843 Public exploit

  PHP remote file inclusion vulnerability in gmapfactory/params.php in MapLab 2.2.1, when register_globals is enabled, al…

  Apr 3, 2007
• Unscored —
  CVE-2007-1853

  Unspecified vulnerability in Hitachi JP1/HiCommand DeviceManager, Global Link Availability Manager, Replication Monitor…

  Apr 3, 2007
• Unscored —
  CVE-2007-1845 Public exploit

  SQL injection vulnerability in show_event.php in the Expanded Calendar (calendar_panel) 2.00 module for PHP-Fusion allo…

  Apr 3, 2007
• Unscored —
  CVE-2007-1854

  Unspecified vulnerability in Hitachi Cosminexus Component Container 07-00 through 07-00-10, and 07-10 through 07-10-03,…

  Apr 3, 2007
• Unscored —
  CVE-2007-1849 Public exploit

  Directory traversal vulnerability in 404.php in Drake CMS allows remote attackers to include and execute arbitrary loca…

  Apr 3, 2007
• Unscored —
  CVE-2007-1847 Public exploit

  SQL injection vulnerability in viewcat.php in the Repository module for Xoops allows remote attackers to execute arbitr…

  Apr 3, 2007
• Unscored —
  CVE-2007-1842 Public exploit

  Directory traversal vulnerability in login.php in JSBoard before 2.0.12 allows remote attackers to include and execute …

  Apr 3, 2007
• Unscored —
  CVE-2007-1851 Public exploit

  Multiple directory traversal vulnerabilities in Really Simple PHP and Ajax (RSPA) 2007-03-23 allow remote attackers to …

  Apr 3, 2007
• Unscored —
  CVE-2007-1855

  Multiple PHP remote file inclusion vulnerabilities in smarty/smarty_class.php in Shop-Script FREE allow remote attacker…

  Apr 3, 2007
• Unscored —
  CVE-2007-1850

  Directory traversal vulnerability in classes/captcha/captcha.jpg.php in Drake CMS allows remote attackers to read arbit…

  Apr 3, 2007
• Unscored —
  CVE-2007-1848

  Cross-site scripting (XSS) vulnerability in admin/classes/ui.dta.php in Drake CMS allows remote attackers to inject arb…

  Apr 3, 2007
• Unscored —
  CVE-2007-1844

  Multiple PHP remote file inclusion vulnerabilities in Aardvark Topsites PHP 5 allow remote attackers to execute arbitra…

  Apr 3, 2007
• Unscored —
  CVE-2007-1846 Public exploit

  SQL injection vulnerability in index.php in the MyAds 2.04jp and earlier module for Xoops allows remote attackers to ex…

  Apr 3, 2007
• Unscored —
  CVE-2006-7191

  Untrusted search path vulnerability in lamdaemon.pl in LDAP Account Manager (LAM) before 1.0.0 allows local users to ga…

  ldap-account-manager Debian
  Apr 3, 2007
• Unscored —
  CVE-2006-7186

  cgi-lib/subs.pl in web-app.net WebAPP before 0.9.9.3.5 allows attackers to open list files in "profile and other functi…

  Apr 3, 2007
• Unscored —
  CVE-2006-7188

  The search function in cgi-lib/user-lib/search.pl in web-app.net WebAPP before 20060909 allows remote attackers to read…

  Apr 3, 2007
• Unscored —
  CVE-2006-7189

  Cross-site scripting (XSS) vulnerability in cgi-bin/admin/logs.cgi in web-app.net WebAPP before 20060403 allows remote …

  Apr 3, 2007
• Unscored —
  CVE-2006-7187

  Cross-site scripting (XSS) vulnerability in the show_recent_searches function in cgi-lib/user-lib/search.pl in web-app.…

  Apr 3, 2007
• Unscored —
  CVE-2006-7190

  Cross-site scripting (XSS) vulnerability in cgi-bin/user-lib/topics.pl in web-app.net WebAPP before 20060515 allows rem…

  Apr 3, 2007
• Unscored —
  CVE-2007-1833

  The Skinny Call Control Protocol (SCCP) implementation in Cisco Unified CallManager (CUCM) 3.3 before 3.3(5)SR2a, 4.1 b…

  Apr 3, 2007
• Unscored —
  CVE-2007-1829

  Multiple unspecified vulnerabilities in web-app.net WebAPP have unknown impact and attack vectors, described as "[havin…

  Apr 3, 2007
• Unscored —
  CVE-2007-1836

  The command line administration interface in Data Domain OS before 4.0.3.6 allows remote authenticated users to execute…

  Apr 3, 2007
• Unscored —
  CVE-2007-1828

  Multiple cross-site scripting (XSS) vulnerabilities in web-app.org WebAPP before 0.9.9.6 allow remote authenticated use…

  Apr 3, 2007
• Unscored —
  CVE-2007-1834

  Cisco Unified CallManager (CUCM) 5.0 before 5.0(4a)SU1 and Cisco Unified Presence Server (CUPS) 1.0 before 1.0(3) allow…

  Apr 3, 2007
• Unscored —
  CVE-2007-1837 Public exploit

  Multiple PHP remote file inclusion vulnerabilities in MangoBery CMS 0.5.5 allow remote attackers to execute arbitrary P…

  Apr 3, 2007
• Unscored —
  CVE-2007-1840

  lib/modules.inc in LDAP Account Manager (LAM) before 1.3.0 does not escape HTML special characters in LDAP data, which …

  ldap-account-manager Debian
  Apr 3, 2007
• Unscored —
  CVE-2007-1831

  web-app.org WebAPP before 0.9.9.6 allows remote authenticated users to open files and write "wrong data" via a crafted …

  Apr 3, 2007
• Unscored —
  CVE-2007-1832

  web-app.org WebAPP before 0.9.9.6 allows remote authenticated users to upload certain files (1) via a crafted filename …

  Apr 3, 2007
• Unscored —
  CVE-2007-1830

  Unspecified vulnerability in the Username Hijacking Patch 20070312 for web-app.org WebAPP 0.9.9.6 allows remote attacke…

  Apr 3, 2007
• Unscored —
  CVE-2007-1835 Public exploit

  PHP 4 before 4.4.5 and PHP 5 before 5.2.1, when using an empty session save path (session.save_path), uses the TMPDIR d…

  Apr 3, 2007
• Unscored —
  CVE-2007-1839 Public exploit

  Multiple PHP remote file inclusion vulnerabilities in CodeBB 1.1b3 and earlier allow remote attackers to execute arbitr…

  Apr 3, 2007
• Unscored —
  CVE-2007-1827

  Multiple unspecified vulnerabilities in form input validation in web-app.org WebAPP before 0.9.9.6 allow remote authent…

  Apr 3, 2007
• Unscored —
  CVE-2007-1838 Public exploit

  SQL injection vulnerability in view.php in the Friendfinder 3.3 and earlier module for Xoops allows remote attackers to…

  Apr 3, 2007