Archive
September 2007
Vulnerabilities first published in this month (UTC), newest first.
174 results · Clear filters · Feed
-
Unscored —CVE-2007-5139 Public exploit
PHP remote file inclusion vulnerability in admin/include/header.php in chupix 0.2.3, when register_globals is enabled, …
-
Unscored —CVE-2007-5138 Public exploit
PHP remote file inclusion vulnerability in forum/forum.php in lustig.cms BETA 2.5 allows remote attackers to execute ar…
-
Unscored —CVE-2007-5140 Public exploit
PHP remote file inclusion vulnerability in includes/archive/archive_topic.php in IntegraMOD Nederland 1.4.2 allows remo…
-
Unscored —CVE-2007-5142 Public exploit
Cross-site scripting (XSS) vulnerability in buscar.asp in Solidweb Novus 1.0 allows remote attackers to inject arbitrar…
-
Unscored —
Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.…
-
Unscored —CVE-2007-5127 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in SimpGB 1.46.02 allow remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2007-5131 Public exploit
SQL injection vulnerability in index.php in Interspire ActiveKB NX 2.x allows remote attackers to execute arbitrary SQL…
-
Unscored —
Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service (CPU consu…
-
Unscored —CVE-2007-4993 Public exploit
pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest domain, allows local users with elevated privi…
-
Unscored —CVE-2007-5122 Public exploit
SQL injection vulnerability in store_info.php in SoftBiz Classifieds PLUS allows remote attackers to execute arbitrary …
-
Unscored —CVE-2007-5123 Public exploit
SQL injection vulnerability in notas.asp in Novus 1.0 allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2007-5120 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in JSPWiki 2.4.103 and 2.5.139-beta allow remote attackers to injec…
-
Unscored —CVE-2007-5117 Public exploit
Multiple PHP remote file inclusion vulnerabilities in FrontAccounting (FA) 1.13, when register_globals is enabled, allo…
-
Unscored —CVE-2007-5112 Public exploit
Cross-site scripting (XSS) vulnerability in session.cgi (aka the login page) in Google Urchin 5 5.7.03 and earlier allo…
-
Unscored —CVE-2007-5111 Public exploit
A certain ActiveX control in EBCRYPT.DLL 2.0 in EB Design ebCrypt allows remote attackers to cause a denial of service …
-
Unscored —CVE-2007-5113 Public exploit
report.cgi in Google Urchin allows remote attackers to bypass authentication and obtain sensitive information (web serv…
-
Unscored —CVE-2007-5108 Public exploit
Unspecified vulnerability in IAC Search & Media ask.com toolbar has unknown impact and remote attack vectors. NOTE: thi…
-
Unscored —CVE-2007-5110 Public exploit
Absolute path traversal vulnerability in the EbCrypt.eb_c_PRNGenerator.1 ActiveX control in EBCRYPT.DLL 2.0.0.2087 and …
-
Unscored —
Stack-based buffer overflow in the AskJeevesToolBar.SettingsPlugin.1 ActiveX control in askBar.dll in IAC Search & Medi…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in DFD Cart 1.1.4 and earlier, when register_globals is enabled, all…
-
Unscored —
PHP remote file inclusion vulnerability in show.php in David Watters Helplink 0.1.0 allows remote attackers to execute …
-
Unscored —CVE-2007-5105 Public exploit
Cross-site scripting (XSS) vulnerability in wp-register.php in WordPress 2.0 and 2.0.1 allows remote attackers to injec…
-
Unscored —CVE-2007-5094 Public exploit
Heap-based buffer overflow in iaspam.dll in the SMTP Server in Ipswitch IMail Server 8.01 through 8.11 allows remote at…
-
Unscored —
PHP remote file inclusion vulnerability in config.inc.php in Wordsmith 1.0 RC1, when register_globals is enabled, allow…
-
Unscored —CVE-2007-4874 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in SimpNews 2.41.03 allow remote attackers to inject arbitrary web …
-
Unscored —CVE-2007-5092 Public exploit
Directory traversal vulnerability in index.php in the Dance Music module for phpNuke, when register_globals is enabled,…
-
Unscored —CVE-2007-5089 Public exploit
PHP remote file inclusion vulnerability in php-inc/log.inc.php in sk.log 0.5.3 and earlier allows remote attackers to e…
-
Unscored —CVE-2007-4571 Public exploit
The snd_mem_proc_read function in sound/core/memalloc.c in the Advanced Linux Sound Architecture (ALSA) in the Linux ke…
-
Unscored —CVE-2007-5070 Public exploit
Heap-based buffer overflow in the EasyMailMessagePrinter ActiveX control in emprint.DLL 6.0.1.0 in the Quiksoft EasyMai…
-
Unscored —CVE-2007-5068 Public exploit
SQL injection vulnerability in index.php in phpFullAnnu (PFA) 6.0 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2007-5069 Public exploit
Directory traversal vulnerability in data/compatible.php in the Nuke Mobile Entertainment 1 addon for PHP-Nuke allows r…
-
Unscored —
Multiple buffer overflows in iMatix Xitami Web Server 2.5c2 allow remote attackers to execute arbitrary code via a long…
-
Unscored —CVE-2007-4573 Public exploit
The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x86_6…
-
Unscored —CVE-2007-5055 Public exploit
Multiple directory traversal vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to include and exe…
-
Unscored —CVE-2007-5053 Public exploit
Multiple incomplete blacklist vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitr…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute a…
-
Unscored —
PHP remote file inclusion vulnerability in admin.slideshow1.php in the Flash Slide Show (com_slideshow) component for J…
-
Unscored —CVE-2007-5062 Public exploit
account.php in Adam Scheinberg Flip 3.0 and earlier allows remote attackers to create administrative accounts via the u…
-
Unscored —CVE-2007-5064 Public exploit
Buffer overflow in a certain ActiveX control in Xunlei Web Thunder 5.6.9.344, possibly the DapPlayer ActiveX control in…
-
Unscored —CVE-2007-5063 Public exploit
Adam Scheinberg Flip 3.0 and earlier stores sensitive information under the web root with insufficient access control, …