Archive
30 July 2007
Vulnerabilities first published on this day (UTC), newest first.
50 results · Feed
-
Unscored —
Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (…
-
Unscored —
Buffer overflow in Tor before 0.1.2.15, when using BSD natd support, allows remote attackers to cause a denial of servi…
-
Unscored —
Tor before 0.1.2.15 does not properly distinguish "streamids from different exits," which might allow remote attackers …
-
Unscored —
Tor before 0.1.2.15 sends "destroy cells" containing the reason for tearing down a circuit, which allows remote attacke…
-
Unscored —
Tor before 0.1.2.15 can select a guard node beyond the first listed never-before-connected-to guard node, which allows …
-
Unscored —
Minb Is Not a Blog (minb) stores sensitive information under the web root with insufficient access control, which allow…
-
Unscored —CVE-2007-4095 Public exploit
SQL injection vulnerability in BSM Store Dependent Forums 1.02 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2007-4092 Public exploit
Directory traversal vulnerability in index.php in iFoto 1.0.1 and earlier allows remote attackers to list arbitrary dir…
-
Unscored —
PHP remote file inclusion vulnerability in library/authorize.php in IDevSpot PhpHostBot allows remote attackers to exec…
-
Unscored —CVE-2007-4081 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to injec…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Drupal 5.x before 5.2, and 4.7.x before 4.7.7, (1) allow remote …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to inje…
-
Unscored —CVE-2007-4076 Public exploit
Multiple SQL injection vulnerabilities in index.asp in Alisveris Sitesi Scripti allow remote attackers to execute arbit…
-
Unscored —
Webbler CMS before 3.1.6 provides the full installation path within HTML comments in certain documents, which allows re…
-
Unscored —CVE-2007-4060 Public exploit
Multiple buffer overflows in the HttpSprockMake function in http.c in Frank Yaul corehttp 0.5.3alpha allow remote attac…
-
Unscored —CVE-2007-4069 Public exploit
SQL injection vulnerability in show_cat.php in IndexScript 2.8 and earlier allows remote attackers to execute arbitrary…
-
Unscored —
AlstraSoft Video Share Enterprise allows remote attackers to obtain sensitive information (the full path) via (1) a ' (…
-
Unscored —
Unspecified vulnerability in Low Bandwidth X proxy (lbxproxy) on Sun Solaris 8 through 10 before 20070725 allows local …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web…
-
Unscored —
Multiple SQL injection vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to execute arbitrary…
-
Unscored —
Webbler CMS before 3.1.6 does not properly restrict use of "mail a friend" forms, which allows remote attackers to send…
-
Unscored —CVE-2007-4084 Public exploit
Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to execute arbitrary …
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php AlstraSoft E-Friends allows remote attackers to inject arbitrary …
-
Unscored —
Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote atta…
-
Unscored —CVE-2007-4068 Public exploit
Multiple SQL injection vulnerabilities in Webyapar 2.0 allow remote attackers to execute arbitrary SQL commands via (1)…
-
Unscored —CVE-2007-4054 Public exploit
SQL injection vulnerability in category.php in PHP123 Top Sites allows remote attackers to execute arbitrary SQL comman…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to inject arbitrary …
-
Unscored —CVE-2007-4057 Public exploit
Unrestricted file upload vulnerability in pfs.php in Neocrome Seditio 121 and earlier allows remote authenticated users…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in Drupal 5.x before 5.2 allow remote attackers to (1) delet…
-
Unscored —CVE-2007-4055 Public exploit
SQL injection vulnerability in comments_get.asp in SimpleBlog 3.0 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2007-4075 Public exploit
Cross-site scripting (XSS) vulnerability in index.asp in Alisveris Sitesi Scripti allows remote attackers to inject arb…
-
Unscored —CVE-2007-4088 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Text Ads Enterprise allow remote attackers to inject …
-
Unscored —CVE-2007-4056 Public exploit
SQL injection vulnerability in directory.php in Prozilla Adult Directory allows remote attackers to execute arbitrary S…
-
Unscored —
Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll 2.2.5.42958 in EMC VMware 6.0.0 allows…
-
Unscored —
The default configuration of Centre for Speech Technology Research (CSTR) Festival 1.95 beta (aka 2.0 beta) on Gentoo L…
-
Unscored —CVE-2007-4059 Public exploit
Absolute path traversal vulnerability in a certain ActiveX control in IntraProcessLogging.dll 5.5.3.42958 in EMC VMware…
-
Unscored —CVE-2007-4067 Public exploit
Absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control in CLINETSUITEX6.OCX in Clever Inte…
-
Unscored —CVE-2007-4062 Public exploit
The SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll in Nessus Vulnerability Scanner 3.0.6 allows remote attackers t…
-
Unscored —CVE-2007-4053 Public exploit
SQL injection vulnerability in include/img_view.class.php in LinPHA 1.3.1 and earlier allows remote attackers to execut…