Archive
May 2007
Vulnerabilities first published in this month (UTC), newest first.
570 results · Feed
-
Unscored —CVE-2007-2710 Public exploit
PHP remote file inclusion vulnerability in functions/prepend_adm.php in NagiosQL 2.00-P00 and earlier allows remote att…
-
Unscored —
Stack-based buffer overflow in TinyIdentD 2.2 and earlier allows remote attackers to execute arbitrary code via a long …
-
Unscored —
Admin/users.php in Snaps! Gallery 1.4.4 allows remote attackers to change arbitrary usernames and passwords via the (1)…
-
Unscored —
PHP remote file inclusion vulnerability in newsadmin.php in Feindt Computerservice News (News-Script) 2.0 allows remote…
-
Unscored —
ifdate 2.x sends a redirect to the web browser but does not exit when administrative credentials are missing, which all…
-
Unscored —CVE-2007-2709 Public exploit
PHP remote file inclusion vulnerability in functions/prepend_adm.php in NagiosQL 2005 2.00 allows remote attackers to e…
-
Unscored —
Directory traversal vulnerability in the Test View Console in BEA WebLogic Integration 9.2 before SP1 and WebLogic Work…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the GroupSpace application in BEA WebLogic Portal 9.2 GA allows remote auth…
-
Unscored —
The WLST script generated by the configToScript command in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does no…
-
Unscored —
MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE …
-
Unscored —
MySQL before 5.1.18 allows remote authenticated users without SELECT privileges to obtain sensitive information from pa…
-
Unscored —
The Cisco Intrusion Prevention System (IPS) and IOS with Firewall/IPS Feature Set do not properly handle certain full-w…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Express and WebLogic Server 6.1 through SP7, 7.0 th…
-
Unscored —
The JMS Server in BEA WebLogic Server 6.1 through SP7, 7.0 through SP6, and 8.1 through SP5 enforces security access po…
-
Unscored —
BEA WebLogic Portal 9.2 GA can corrupt a visitor entitlements role if an administrator provides a long role description…
-
Unscored —
The HttpClusterServlet and HttpProxyServlet in BEA WebLogic Express and WebLogic Server 6.1 through SP7, 7.0 through SP…
-
Unscored —
The JMS Message Bridge in BEA WebLogic Server 7.0 through SP7 and 8.1 through Service Pack 6, when configured without a…
-
Unscored —
Multiple IBM ISS Proventia Series products, including the A, G, and M series, do not properly handle certain full-width…
-
Unscored —
BEA WebLogic Server 9.0 through 9.2 allows remote attackers to cause a denial of service (SSL port unavailability) by a…
-
Unscored —CVE-2007-2699 EPSS 29%
The Administration Console in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not properly enforce certain Do…
-
Unscored —
Check Point Web Intelligence does not properly handle certain full-width and half-width Unicode character encodings, wh…
-
Unscored —
The mysql_change_db function in MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18 does not restore THD::db_access privi…
-
Unscored —
The Administration Console in BEA WebLogic Server 9.0 may show plaintext Web Service attributes during configuration cr…
-
Unscored —
The embedded LDAP server in BEA WebLogic Express and WebLogic Server 7.0 through SP6, 8.1 through SP5, 9.0, and 9.1, wh…
-
Unscored —CVE-2007-2683 Public exploit
Buffer overflow in Mutt 1.4.2 might allow local users to execute arbitrary code via "&" characters in the GECOS field, …
-
Unscored —
Buffer overflow in the SockPrintf function in wu-ftpd 2.6.2 and earlier, when compiled with MAIL_ADMIN option enabled o…
-
Unscored —
PHP file inclusion vulnerability in index.php in Ivan Peevski gallery 0.3 in Simple PHP Scripts (sphp) allows remote at…
-
Unscored —CVE-2007-2678 Public exploit
Buffer overflow in the isChecked function in toolbar.dll in Netsprint Toolbar 1.1 might allow remote attackers to execu…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the management interface in Canon Network Camera Server VB100 and VB101 wit…
-
Unscored —
Directory traversal vulnerability in blogs/index.php in b2evolution 1.6 allows remote attackers to include and execute …
-
Unscored —CVE-2007-2673 Public exploit
SQL injection vulnerability in includes/funcs_vendors.php in Censura 1.15.04, and other versions before 1.16.04, allows…
-
Unscored —CVE-2007-2660 Public exploit
PHP remote file inclusion vulnerability in pcltrace.lib.php in the PclTar module in Vincent Blavet PhpConcept Library, …
-
Unscored —CVE-2007-2659 Public exploit
Directory traversal vulnerability in index.php in PHP Advanced Transfer Manager (phpATM) 1.30 allows remote attackers t…
-
Unscored —CVE-2007-2663 Public exploit
PHP remote file inclusion vulnerability in language/1/splash.lang.php in Beacon 0.2.0 allows remote attackers to execut…
-
Unscored —CVE-2007-2671 Public exploit
Mozilla Firefox 2.0.0.3 allows remote attackers to cause a denial of service (application crash) via a long hostname in…
-
Unscored —CVE-2007-2657 Public exploit
Unspecified vulnerability in the PrecisionID Barcode 1.3 ActiveX control in PrecisionID_DataMatrix.DLL allows remote at…
-
Unscored —CVE-2007-2662 Public exploit
SQL injection vulnerability in EfesTECH Haber 5.0 allows remote attackers to execute arbitrary SQL commands via the id …
-
Unscored —CVE-2007-2675 Public exploit
SQL injection vulnerability in search.php in Pre Classifieds Listings 1.0 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2007-2664 Public exploit
PHP remote file inclusion vulnerability in includes/common.php in Yaap 1.5 and earlier allows remote attackers to execu…
-
Unscored —CVE-2007-2674 Public exploit
SQL injection vulnerability in detail.php in Pre Shopping Mall 1.0 allows remote attackers to execute arbitrary SQL com…