Skip to content
OpenAdvisories

Archive

20 June 2007

Vulnerabilities first published on this day (UTC), newest first.

19 results · Feed

  • Unscored —

    Format string vulnerability in Logger.cc for Spey 0.3.3 allows attackers to cause a denial of service (crash) and possi…

  • Unscored —

    Unspecified vulnerability in Spey 0.3.3 has unknown impact and attack vectors related to "A number of security holes wh…

  • Unscored —
    CVE-2007-3301 Public exploit

    SQL injection vulnerability in forum/include/error/autherror.cfm in FuseTalk allows remote attackers to execute arbitra…

  • Unscored —

    Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by …

  • Unscored —

    Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070619 allow remote attackers to bypass …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in AWFFull before 3.7.4, when AllSearchStr (aka the All Search Terms report) i…

  • Unscored —

    Apache httpd 2.0.59 and 2.2.4, with the Prefork MPM module, allows local users to cause a denial of service via certain…

  • Unscored —

    SQL injection vulnerability in Spey before 0.4.1 allows remote attackers to execute arbitrary SQL commands via unspecif…

  • Unscored —
    CVE-2007-3294 Public exploit

    Multiple buffer overflows in libtidy, as used in the Tidy extension for PHP 5.2.3 and possibly other products, allow co…

  • Unscored —
    CVE-2007-3289 Public exploit EPSS 12%

    PHP remote file inclusion vulnerability in spaw/spaw_control.class.php in the WiwiMod 0.4 module for XOOPS allows remot…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the skeltoac stats (Automattic Stats) 1.0 plugin for WordPress allows remot…

  • Unscored —
    CVE-2007-3290 Public exploit

    categoria.php in LiveCMS 3.4 and earlier allows remote attackers to obtain sensitive information via a ' (quote) charac…

  • Unscored —
    CVE-2007-3291 Public exploit

    Cross-site scripting (XSS) vulnerability in LiveCMS 3.4 and earlier allows remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2007-3292 Public exploit

    Unrestricted file upload vulnerability in LiveCMS 3.4 and earlier allows remote attackers to upload and execute arbitra…

  • Unscored —
    CVE-2007-3293 Public exploit

    SQL injection vulnerability in categoria.php in LiveCMS 3.4 and earlier allows remote attackers to execute arbitrary SQ…

  • Unscored —

    The ThunderServer.webThunder.1 ActiveX control in xunlei Web Thunderbolt 1.7.3.109 allows remote attackers to download …

  • Unscored —

    Directory traversal vulnerability in Yet another Bulletin Board (YaBB) 2.1 and earlier allows remote authenticated user…

  • Unscored —
    CVE-2007-3297 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Musoo 0.21 allow remote attackers to execute arbitrary PHP code v…

  • Unscored —

    Mozilla Firefox before 2.0.0.5, when run on Windows, allows remote attackers to bypass file type checks and possibly ex…