Archive
11 April 2007
Vulnerabilities first published on this day (UTC), newest first.
39 results · Feed
-
Unscored —
Race condition in the Virtual DOS Machine (VDM) in the Windows Kernel in Microsoft Windows NT 4.0 allows local users to…
-
Unscored —CVE-2007-1364 Public exploit
DropAFew before 0.2.1 does not require authorization for certain privileged actions, which allows remote attackers to (…
-
Unscored —
Unspecified vulnerability in the installer for Adobe Bridge 1.0.3 update for Apple OS X, when patching with desktop man…
-
Unscored —
Multiple stack-based buffer overflows in SonicDVDDashVRNav.dll in Roxio CinePlayer 3.2 allow remote attackers to execut…
-
Unscored —
Adobe ColdFusion MX 7 for Linux and Solaris uses insecure permissions for certain scripts and directories, which allows…
-
Unscored —CVE-2007-1363 Public exploit
Multiple SQL injection vulnerabilities in DropAFew before 0.2.1 allow remote attackers to execute arbitrary SQL command…
-
Unscored —
Cross-site scripting (XSS) vulnerability in admin/modify.php in Sam Crew MyBlog remote attackers to inject arbitrary we…
-
Unscored —
Mozilla Firefox does not warn the user about HTTP elements on an HTTPS page when the HTTP elements are dynamically crea…
-
Unscored —CVE-2007-1968 Public exploit
PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6, allows remote attack…
-
Unscored —
Unspecified vulnerability in the process_cmdent function in command.cpp in TinyMUX before 2.4 has unknown impact and at…
-
Unscored —
member.php in MyBB (aka MyBulletinBoard), when debug mode is available, allows remote authenticated users to change the…
-
Critical 9.1
Session fixation vulnerability in eXV2 CMS 2.0.4.3 and earlier allows remote attackers to hijack web sessions by settin…
-
Unscored —
Buffer overflow in TinyMUX before 2.4 allows attackers to cause a denial of service via unspecified vectors related to …
-
Unscored —CVE-2007-1960 Public exploit
SQL injection vulnerability in visit.php in the Rha7 Downloads (rha7downloads) 1.0 module for XOOPS, and possibly other…
-
Unscored —
PHP remote file inclusion vulnerability in index.php in stat12 allows remote attackers to execute arbitrary PHP code vi…
-
Unscored —CVE-2007-1963 Public exploit
SQL injection vulnerability in the create_session function in class_session.php in MyBB (aka MyBulletinBoard) 1.2.3 and…
-
Unscored —CVE-2007-1971 Public exploit
SQL injection vulnerability in fotokategori.asp in Gazi Okul Sitesi 2007 allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2007-1962 Public exploit
SQL injection vulnerability in index.php in the WF-Snippets 1.02 and earlier module for XOOPS allows remote attackers t…
-
Unscored —CVE-2007-1961 Public exploit
PHP remote file inclusion vulnerability in mutant_functions.php in the Mutant 0.9.2 portal for phpBB 2.2 allows remote …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in eXV2 CMS 2.0.4.3 and earlier allow remote attackers to inject ar…
-
Unscored —
Multiple stack-based buffer overflows in the SignKorea SKCrypAX ActiveX control module 5.4.1.2 allow remote attackers t…
-
Unscored —
IBM Tivoli Business Service Manager (TBSM) 4.1 before Interim Fix 1 logs passwords in plaintext, which allows local use…
-
Unscored —CVE-2007-1947 Public exploit
Cross-zone scripting vulnerability in the DOM templates (domplates) used by the console.log function in the Firebug ext…
-
Unscored —CVE-2007-1942 Public exploit
Integer overflow in FastStone Image Viewer 2.9 allows context-dependent attackers to cause a denial of service and poss…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Guernion Sylvain Portail Web Php (aka Gsylvain35 Portail Web, PwP…
-
Unscored —
The Java Message Service (JMS) in IBM WebSphere Application Server (WAS) before 6.1.0.7 allows attackers to cause a den…
-
Unscored —CVE-2007-1943 Public exploit
Integer overflow in ACDSee Photo Manager 9.0 allows context-dependent attackers to cause a denial of service and possib…
-
Unscored —
Unspecified vulnerability in the Servlet Engine/Web Container in IBM WebSphere Application Server (WAS) before 6.1.0.7 …
-
Unscored —CVE-2007-1948 Public exploit
Buffer overflow in IrfanView 3.99 allows context-dependent attackers to cause a denial of service and possibly execute …
-
Unscored —
Session fixation vulnerability in onelook obo Shop allows remote attackers to hijack web sessions by setting a PHPSESSI…
-
Unscored —CVE-2007-1946 EPSS 26%
Integer overflow in Windows Explorer in Microsoft Windows XP SP1 might allow user-assisted remote attackers to cause a …
-
Unscored —
Session fixation vulnerability in onelook courts on-line allows remote attackers to hijack web sessions by setting a PH…
-
Unscored —
Multiple directory traversal vulnerabilities in ArchiveXpert 2.02 build 80 allow remote attackers to create files in ar…
-
Unscored —
Session fixation vulnerability in WebBlizzard CMS allows remote attackers to hijack web sessions by setting a PHPSESSID…
-
Unscored —
Session fixation vulnerability in onelook onebyone CMS allows remote attackers to hijack web sessions by setting a PHPS…
-
Unscored —CVE-2007-1956 Public exploit
SQL injection vulnerability in ubbthreads.php in Groupee UBB.threads 6.1.1 and earlier allows remote attackers to execu…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Active Content Filter feature in Domino Web Access (DWA) in IBM Lotus N…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index_cms.php in WebBlizzard CMS allows remote attackers to inject arbitrar…
-
Unscored —
The atalk_sum_skb function in AppleTalk for Linux kernel 2.6.x before 2.6.21, and possibly 2.4.x, allows remote attacke…