Archive
10 April 2007
Vulnerabilities first published on this day (UTC), newest first.
49 results · Feed
-
Unscored —CVE-2005-4837 EPSS 10%
snmp_api.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2, when running in mast…
-
Unscored —CVE-2007-1909 Public exploit
SQL injection vulnerability in login.php in Ryan Haudenschilt Battle.net Clan Script for PHP 1.5.1 and earlier allows r…
-
Unscored —
Directory traversal vulnerability in AOL Instant Messenger (AIM) 5.9 and earlier, and ICQ 5.1 and probably earlier, all…
-
Unscored —
The Impulse Tracker (IT) and ScreamTracker 3 (S3M) modules in IN_MOD.DLL in AOL Nullsoft Winamp 5.33 allows remote atta…
-
Unscored —CVE-2007-1905 Public exploit
Cross-site scripting (XSS) vulnerability in auth.php in Pineapple Technologies QuizShock 1.6.1 and earlier allows remot…
-
Unscored —
Multiple unspecified vulnerabilities in Microsoft Word 2007 allow remote attackers to cause a denial of service (CPU co…
-
Unscored —CVE-2007-1933 Public exploit
Multiple directory traversal vulnerabilities in PcP-Guestbook (PcP-Book) 3.0 allow remote attackers to include and exec…
-
Unscored —
Heap-based buffer overflow in Microsoft Windows allows user-assisted remote attackers to have an unknown impact via a c…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in phpContact allow remote attackers to execute arbitrary PHP code v…
-
Unscored —CVE-2007-1907 Public exploit
PHP remote file inclusion vulnerability in warn.php in Pathos Content Management System (CMS) 0.92-2 allows remote atta…
-
Unscored —CVE-2007-1928 Public exploit
Directory traversal vulnerability in index.php in witshare 0.9 allows remote attackers to include and execute arbitrary…
-
Unscored —CVE-2007-1908 Public exploit
PHP file inclusion vulnerability in php121db.php in PHP121 Instant Messenger 2.2 allows remote attackers to execute arb…
-
Unscored —
Buffer overflow in the SYSTEM_CREATE_INSTANCE function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remo…
-
Unscored —
Ichitaro 2005 through 2007, and possibly related products, allows remote attackers to have an unknown impact via unspec…
-
Unscored —CVE-2007-1931 Public exploit
SQL injection vulnerability in index.php in the slownik module in SmodCMS 2.10 and earlier allows remote attackers to e…
-
Unscored —CVE-2007-1932 Public exploit
Directory traversal vulnerability in scarnews.inc.php in ScarNews 1.2.1 allows remote attackers to include and execute …
-
Unscored —
LIBSNDFILE.DLL, as used by AOL Nullsoft Winamp 5.33 and possibly other products, allows remote attackers to execute arb…
-
Unscored —CVE-2007-1920 Public exploit
SQL injection vulnerability in index.php in the aktualnosci module in SmodBIP 1.06 and earlier allows remote attackers …
-
Unscored —
PHP remote file inclusion vulnerability in scaradcontrol.php in ScarAdControl (ScarAdController) 1.1 allows remote atta…
-
Unscored —
Cross-site scripting (XSS) vulnerability in JBMC Software DirectAdmin before 1.293 does not properly display log files,…
-
Unscored —CVE-2007-1937 Public exploit
PHP remote file inclusion vulnerability in smilies.php in Scorp Book 1.0 allows remote attackers to execute arbitrary P…
-
Unscored —
Cross-site scripting (XSS) vulnerability in signup.asp in CmailServer WebMail 5.3.4 and earlier allows remote attackers…
-
Unscored —
Buffer overflow in the RFC_START_GUI function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attack…
-
Unscored —CVE-2007-1929 Public exploit
Directory traversal vulnerability in downloadpic.php in Beryo 2.0, and possibly other versions including 2.4, allows re…
-
Unscored —CVE-2007-1930 Public exploit
Directory traversal vulnerability in download2.php in cattaDoc 2.21, and possibly other versions including 3.0, allows …
-
Unscored —
Buffer overflow in wwlib.dll in Microsoft Word 2007 allows remote attackers to cause a denial of service (application c…
-
Unscored —CVE-2007-1919 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Arizona Dream Livre d'or (livor) 2.5 allows remote attackers t…
-
Unscored —CVE-2007-1934 Public exploit
Directory traversal vulnerability in member.php in the eBoard 1.0.7 module for PHP-Nuke allows remote attackers to incl…
-
Unscored —
The RFC_SET_REG_SERVER_PROPERTY function in the SAP RFC Library 6.40 and 7.00 before 20070109 implements an option for …
-
Unscored —
The borrado function in modules/Your_Account/index.php in Tru-Zone Nuke ET 3.4 before fix 7 does not verify that accoun…
-
Unscored —CVE-2007-1906 Public exploit
Directory traversal vulnerability in richedit/keyboard.php in eCardMAX HotEditor (Hot Editor) 4.0, and the HotEditor pl…
-
Unscored —
The RFC_START_PROGRAM function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to obtain s…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the embedded webserver in Daniel Naber LanguageTool before 0.8.9 allows rem…
-
Unscored —
PHP file inclusion vulnerability in admin/index.php in ScarAdControl (ScarAdController) 1.1 allows remote attackers to …
-
Unscored —
The TRUSTED_SYSTEM_SECURITY function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to ve…
-
Unscored —
Buffer overflow in the RFC_START_PROGRAM function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote at…
-
Unscored —CVE-2006-7192 EPSS 23%
Microsoft ASP .NET Framework 2.0.50727.42 does not properly handle comment (/* */) enclosures, which allows remote atta…
-
Unscored —
fsck, as used by the AirPort Disk feature of the AirPort Extreme Base Station with 802.11n before Firmware Update 7.1, …
-
Unscored —
The isakmp_info_recv function in src/racoon/isakmp_inf.c in racoon in Ipsec-tools before 0.6.7 allows remote attackers …
-
Unscored —CVE-2007-0939 EPSS 17%
Cross-site scripting (XSS) vulnerability in Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 allows rem…