Archive
24 September 2007
Vulnerabilities first published on this day (UTC), newest first.
43 results · Feed
-
Unscored —CVE-2007-5070 Public exploit
Heap-based buffer overflow in the EasyMailMessagePrinter ActiveX control in emprint.DLL 6.0.1.0 in the Quiksoft EasyMai…
-
Unscored —
Incomplete blacklist vulnerability in upload_img_cgi.php in Simple PHP Blog before 0.5.1 allows remote attackers to upl…
-
Unscored —CVE-2007-5068 Public exploit
SQL injection vulnerability in index.php in phpFullAnnu (PFA) 6.0 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2007-5069 Public exploit
Directory traversal vulnerability in data/compatible.php in the Nuke Mobile Entertainment 1 addon for PHP-Nuke allows r…
-
Unscored —
Multiple buffer overflows in iMatix Xitami Web Server 2.5c2 allow remote attackers to execute arbitrary code via a long…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog (SPHPBlog) before 0.5.1, when register_globals i…
-
Unscored —
Unspecified vulnerability in Webmin before 1.370 on Windows allows remote authenticated users to execute arbitrary comm…
-
Unscored —
Off-by-one error in the ReadBlobString function in blob.c in ImageMagick before 6.3.5-9 allows context-dependent attack…
-
Unscored —
ImageMagick before 6.3.5-9 allows context-dependent attackers to cause a denial of service via a crafted image file tha…
-
Unscored —
Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to e…
-
Unscored —CVE-2007-4573 Public exploit
The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x86_6…
-
Unscored —
Multiple integer overflows in ImageMagick before 6.3.5-9 allow context-dependent attackers to execute arbitrary code vi…
-
Unscored —CVE-2007-5055 Public exploit
Multiple directory traversal vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to include and exe…
-
Unscored —CVE-2007-5053 Public exploit
Multiple incomplete blacklist vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitr…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute a…
-
Unscored —
PHP remote file inclusion vulnerability in admin.slideshow1.php in the Flash Slide Show (com_slideshow) component for J…
-
Unscored —CVE-2007-5062 Public exploit
account.php in Adam Scheinberg Flip 3.0 and earlier allows remote attackers to create administrative accounts via the u…
-
Unscored —CVE-2007-5064 Public exploit
Buffer overflow in a certain ActiveX control in Xunlei Web Thunder 5.6.9.344, possibly the DapPlayer ActiveX control in…
-
Unscored —CVE-2007-5063 Public exploit
Adam Scheinberg Flip 3.0 and earlier stores sensitive information under the web root with insufficient access control, …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in GreenSQL allow remote attackers to inject arbitrary web script o…
-
Unscored —CVE-2007-5061 Public exploit
SQL injection vulnerability in mods/banners/navlist.php in Clansphere 2007.4 allows remote attackers to execute arbitra…
-
Unscored —CVE-2007-5060 Public exploit
Cross-site request forgery (CSRF) vulnerability in the cpass functionality in an admin action in index.php in XCMS allo…
-
Unscored —
NetSupport Manager Client before 10.20.0004 allows remote attackers to bypass the (1) basic and (2) authentication sche…
-
Unscored —
Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Web administration interface in Barracuda Spam Firewall before firmware…
-
Unscored —
The main function in skkdic-expr.c in SKK Tools 1.2 allows local users to overwrite or delete arbitrary files via a sym…
-
Unscored —CVE-2007-5050 Public exploit
Directory traversal vulnerability in index.php in Neuron News 1.0 allows remote attackers to include and execute arbitr…
-
Unscored —
PHP remote file inclusion vulnerability in html/modules/extranet_profile/main.php in openEngine 1.9 beta1 allows remote…
-
Unscored —
Buffer overflow in the inotifytools_snprintf function in src/inotifytools.c in the inotify-tools library before 3.11 al…
-
Unscored —
Argument injection vulnerability in Apple QuickTime 7.1.5 and earlier, when running on systems with Mozilla Firefox bef…
-
Unscored —
The offer_account_by_email function in User.pm in the WebService for Bugzilla before 3.0.2, and 3.1.x before 3.1.2, doe…
-
Unscored —
Outpost Firewall Pro 4.0.1025.7828 does not properly validate certain parameters to System Service Descriptor Table (SS…
-
Unscored —
Ghost Security Suite beta 1.110 does not properly validate certain parameters to System Service Descriptor Table (SSDT)…
-
Unscored —
Heap-based buffer overflow in Lhaplus before 1.55 allows remote attackers to execute arbitrary code via a long filename…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Webmail interface for IceWarp Merak Mail Server before 9.0.0 allows rem…
-
Unscored —
G DATA InternetSecurity 2007 does not properly validate certain parameters to System Service Descriptor Table (SSDT) fu…
-
Unscored —CVE-2007-5052 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Vigile CMS 1.8 allow remote attackers to inject arb…
-
Unscored —
Norton Internet Security 2008 15.0.0.60 does not properly validate certain parameters to System Service Descriptor Tabl…
-
Unscored —
ZoneAlarm Pro 7.0.362.000 does not properly validate certain parameters to System Service Descriptor Table (SSDT) funct…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in PhpGedView 4.1.1 allow remote attackers to inject arbitrary web …