Skip to content
OpenAdvisories

Archive

26 June 2007

Vulnerabilities first published on this day (UTC), newest first.

16 results · Clear filters · Feed

  • Unscored —
    CVE-2006-7208 Public exploit

    PHP remote file inclusion vulnerability in download.php in the Adam van Dongen Forum (com_forum) component (aka phpBB c…

  • Unscored —
    CVE-2007-3410 Public exploit EPSS 36%

    Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in smlprstime.cpp in RealNetworks RealPl…

  • Unscored —
    CVE-2007-3406 Public exploit EPSS 11%

    Multiple absolute path traversal vulnerabilities in Microsoft Internet Explorer 6 on Windows XP SP2 allow remote attack…

  • Unscored —
    CVE-2007-3407 Public exploit

    Sergey Lyubka Simple HTTPD (shttpd) 1.38 allows remote attackers to obtain sensitive information (script source code) v…

  • Unscored —
    CVE-2007-3396 Public exploit

    Cross-site scripting (XSS) vulnerability in index.wkf in KeyFocus (KF) web server 3.1.0 allows remote attackers to inje…

  • Unscored —
    CVE-2007-3404 Public exploit

    Directory traversal vulnerability in ShowImage.php in SiteDepth CMS 3.44 allows remote attackers to read arbitrary file…

  • Unscored —
    CVE-2007-3401 Public exploit EPSS 74%

    PHP remote file inclusion vulnerability in footer.inc.php in B1G b1gBB 2.24 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2007-3402 Public exploit

    SQL injection vulnerability in index.php in pagetool 1.07 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2007-3400 Public exploit

    The NCTAudioEditor2 ActiveX control in NCTWMAFile2.dll 2.6.2.157, as distributed in NCTAudioEditor and NCTAudioStudio 2…

  • Unscored —
    CVE-2007-3398 Public exploit

    LiteWEB 2.7 allows remote attackers to cause a denial of service (hang) via a large number of requests for nonexistent …

  • Unscored —
    CVE-2007-3394 Public exploit

    Multiple SQL injection vulnerabilities in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2007-3403 Public exploit

    Unrestricted file upload vulnerability in upload.php in dreamLog (aka dreamblog) 0.5 allows remote attackers to upload …

  • Unscored —
    CVE-2007-3182 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Calendarix 0.7.20070307, when register_globals is enabled, allow…

  • Unscored —
    CVE-2007-3183 Public exploit

    Multiple SQL injection vulnerabilities in Calendarix 0.7.20070307, when magic_quotes_gpc is disabled, allow remote atta…

  • Unscored —
    CVE-2007-2520 Public exploit

    SQL injection vulnerability in admin.php in MyNews 0.10, when magic_quotes_gpc is disabled, allows remote attackers to …

  • Unscored —
    CVE-2007-3389 Public exploit EPSS 16%

    Wireshark before 0.99.6 allows remote attackers to cause a denial of service (crash) via a crafted chunked encoding in …