30 April 2007

14 results · Clear filters · Feed

• Unscored —
  CVE-2007-2372 Public exploit

  admin/send_mod.php in Gregory Kokanosky phpMyNewsletter 0.8 beta5 and earlier prints a Location header but does not exi…

  Apr 30, 2007
• Unscored —
  CVE-2007-2373 Public exploit

  SQL injection vulnerability in viewcat.php in the WF-Links (wflinks) 1.03 and earlier module for XOOPS allows remote at…

  Apr 30, 2007
• Unscored —
  CVE-2007-2368 Public exploit

  picture.php in WebSPELL 4.01.02 and earlier allows remote attackers to read arbitrary files via the file parameter.

  Apr 30, 2007
• Unscored —
  CVE-2007-2371 Public exploit

  admin/index.php in Gregory Kokanosky phpMyNewsletter 0.8 beta5 and earlier provides access to configuration modificatio…

  Apr 30, 2007
• Unscored —
  CVE-2007-2369 Public exploit

  Directory traversal vulnerability in picture.php in WebSPELL 4.01.02 and earlier, when PHP before 4.3.0 is used, allows…

  Apr 30, 2007
• Unscored —
  CVE-2007-2367 Public exploit

  Buffer overflow in wserve_console.exe in Wserve HTTP Server (whttp) 4.6 allows remote attackers to cause a denial of se…

  Apr 30, 2007
• Unscored —
  CVE-2007-2370 Public exploit

  SQL injection vulnerability in index.php in the John Mordo Jobs 2.4 and earlier module for XOOPS allows remote attacker…

  Apr 30, 2007
• Unscored —
  CVE-2007-2366 Public exploit EPSS 34%

  Buffer overflow in Corel Paint Shop Pro 11.20 allows user-assisted remote attackers to execute arbitrary code via a cra…

  Apr 30, 2007
• Unscored —
  CVE-2007-2365 Public exploit EPSS 41%

  Buffer overflow in Adobe Photoshop CS2 and CS3, Photoshop Elements 5.0, Illustrator CS3, and GoLive 9 allows user-assis…

  Apr 30, 2007
• Unscored —
  CVE-2007-2363 Public exploit

  Buffer overflow in IrfanView 4.00 and earlier allows user-assisted remote attackers to execute arbitrary code via a cra…

  Apr 30, 2007
• Unscored —
  CVE-2007-2356 Public exploit EPSS 16%

  Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user…

  gimp Debian
  Apr 30, 2007
• Medium 5.3
  CVE-2007-2353 Public exploit EPSS 28%

  Apache Axis allows Exposure of Sensitive Information to an Unauthorized Actor

  Apache Axis 1.0 allows remote attackers to obtain sensitive information by requesting a non-existent WSDL file, which reveals the installation path in the resulting exception message.

  axis org.apache.axis:axis Debian Maven
  Apr 30, 2007
• Unscored —
  CVE-2007-2364 Public exploit

  Multiple PHP remote file inclusion vulnerabilities in burnCMS 0.2 and earlier allow remote attackers to execute arbitra…

  Apr 30, 2007
• Unscored —
  CVE-2007-2362 Public exploit EPSS 16%

  Multiple buffer overflows in MyDNS 1.1.0 allow remote attackers to (1) cause a denial of service (daemon crash) and pos…

  Apr 30, 2007