26 September 2007

34 results · Feed

• Unscored —
  CVE-2007-5114

  PHP remote file inclusion vulnerability in include/plugin/block.t.php in Peter Schmidt phpmyProfiler 0.9.6b allows remo…

  Sep 26, 2007
• Unscored —
  CVE-2007-5112 Public exploit

  Cross-site scripting (XSS) vulnerability in session.cgi (aka the login page) in Google Urchin 5 5.7.03 and earlier allo…

  Sep 26, 2007
• Unscored —
  CVE-2007-5109

  Cross-site request forgery (CSRF) vulnerability in index.php in FlatNuke 2.6, and possibly 3, allows remote attackers t…

  flatnuke Ubuntu
  Sep 26, 2007
• Unscored —
  CVE-2007-5111 Public exploit

  A certain ActiveX control in EBCRYPT.DLL 2.0 in EB Design ebCrypt allows remote attackers to cause a denial of service …

  Sep 26, 2007
• Unscored —
  CVE-2007-5113 Public exploit

  report.cgi in Google Urchin allows remote attackers to bypass authentication and obtain sensitive information (web serv…

  Sep 26, 2007
• Unscored —
  CVE-2007-5108 Public exploit

  Unspecified vulnerability in IAC Search & Media ask.com toolbar has unknown impact and remote attack vectors. NOTE: thi…

  Sep 26, 2007
• Unscored —
  CVE-2007-5115

  Multiple PHP remote file inclusion vulnerabilities in Ekke Doerre Contenido 42VariablVersion (42VV10) in contenido_hack…

  Sep 26, 2007
• Unscored —
  CVE-2007-5110 Public exploit

  Absolute path traversal vulnerability in the EbCrypt.eb_c_PRNGenerator.1 ActiveX control in EBCRYPT.DLL 2.0.0.2087 and …

  Sep 26, 2007
• Unscored —
  CVE-2007-5107 Public exploit EPSS 36%

  Stack-based buffer overflow in the AskJeevesToolBar.SettingsPlugin.1 ActiveX control in askBar.dll in IAC Search & Medi…

  Sep 26, 2007
• Unscored —
  CVE-2007-5098 Public exploit EPSS 46%

  Multiple PHP remote file inclusion vulnerabilities in DFD Cart 1.1.4 and earlier, when register_globals is enabled, all…

  Sep 26, 2007
• Unscored —
  CVE-2007-5100

  Multiple PHP remote file inclusion vulnerabilities in phpBB Plus 1.53, and 1.53a before 20070922, when register_globals…

  Sep 26, 2007
• Unscored —
  CVE-2007-5095 EPSS 15%

  Microsoft Windows Media Player (WMP) 9 on Windows XP SP2 invokes Internet Explorer to render HTML documents contained i…

  Sep 26, 2007
• Unscored —
  CVE-2007-5104

  SQL injection vulnerability in index.php in the Arcade module in bcoos 1.0.10 allows remote attackers to execute arbitr…

  Sep 26, 2007
• Unscored —
  CVE-2007-5096

  PHP remote file inclusion vulnerability in modules/webmail2/inc/rfc822.php in guanxiCRM Business Solution 0.9.1 allows …

  Sep 26, 2007
• Unscored —
  CVE-2007-5099 Public exploit EPSS 53%

  PHP remote file inclusion vulnerability in show.php in David Watters Helplink 0.1.0 allows remote attackers to execute …

  Sep 26, 2007
• Unscored —
  CVE-2007-5106

  Cross-site scripting (XSS) vulnerability in wp-register.php in WordPress 2.0 allows remote attackers to inject arbitrar…

  wordpress Debian
  Sep 26, 2007
• Unscored —
  CVE-2007-5105 Public exploit

  Cross-site scripting (XSS) vulnerability in wp-register.php in WordPress 2.0 and 2.0.1 allows remote attackers to injec…

  wordpress Debian
  Sep 26, 2007
• Unscored —
  CVE-2007-5094 Public exploit

  Heap-based buffer overflow in iaspam.dll in the SMTP Server in Ipswitch IMail Server 8.01 through 8.11 allows remote at…

  Sep 26, 2007
• Critical 9.8
  CVE-2007-5097

  PHP remote file inclusion vulnerability in lib/classes/offl_nflteam.php in Online Fantasy Football League (OFFL) 0.2.6 …

  Sep 26, 2007
• Unscored —
  CVE-2007-5101

  ChironFS before 1.0 RC7 sets user/group ownership to the mounter account instead of the creator account when files are …

  Sep 26, 2007
• Unscored —
  CVE-2007-5102 Public exploit EPSS 39%

  PHP remote file inclusion vulnerability in config.inc.php in Wordsmith 1.0 RC1, when register_globals is enabled, allow…

  Sep 26, 2007
• Unscored —
  CVE-2007-5103

  Directory traversal vulnerability in config.inc.php in Wordsmith 1.0 RC1, when register_globals is enabled, allows remo…

  Sep 26, 2007
• Unscored —
  CVE-2007-5093

  The disconnect method in the Philips USB Webcam (pwc) driver in Linux kernel 2.6.x before 2.6.22.6 "relies on user spac…

  Sep 26, 2007
• Unscored —
  CVE-2007-4874 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in SimpNews 2.41.03 allow remote attackers to inject arbitrary web …

  Sep 26, 2007
• Unscored —
  CVE-2007-5092 Public exploit

  Directory traversal vulnerability in index.php in the Dance Music module for phpNuke, when register_globals is enabled,…

  Sep 26, 2007
• Unscored —
  CVE-2007-5090

  Unspecified vulnerability in IBM Rational ClearQuest (CQ), when a Microsoft SQL Server or an IBM DB2 database is used, …

  Sep 26, 2007
• Unscored —
  CVE-2007-5088

  Cross-site scripting (XSS) vulnerability in search/cust_bill_event.cgi in Freeside 1.7.2 allows remote attackers to inj…

  Sep 26, 2007
• Unscored —
  CVE-2007-5089 Public exploit

  PHP remote file inclusion vulnerability in php-inc/log.inc.php in sk.log 0.5.3 and earlier allows remote attackers to e…

  Sep 26, 2007
• Unscored —
  CVE-2007-5091

  Multiple cross-site scripting (XSS) vulnerabilities in eGroupWare 1.4.001 allow remote attackers to inject arbitrary we…

  Sep 26, 2007
• Unscored —
  CVE-2007-4571 Public exploit

  The snd_mem_proc_read function in sound/core/memalloc.c in the Advanced Linux Sound Architecture (ALSA) in the Linux ke…

  Sep 26, 2007
• Unscored —
  CVE-2007-5087

  The ATM module in the Linux kernel before 2.4.35.3, when CLIP support is enabled, allows local users to cause a denial …

  Sep 26, 2007
• Unscored —
  CVE-2007-5085

  Unspecified vulnerability in the management EJB (MEJB) in Apache Geronimo before 2.0.2 allows remote attackers to bypas…

  Sep 26, 2007
• Unscored —
  CVE-2007-5086

  Kaspersky Anti-Virus (KAV) and Internet Security 7.0 build 125 do not properly validate certain parameters to System Se…

  Sep 26, 2007
• Unscored —
  CVE-2002-2227

  Buffer underflow in ssldump 0.9b2 and earlier allows remote attackers to cause a denial of service (memory corruption) …

  ssldump Debian
  Sep 26, 2007