Archive
October 2007
Vulnerabilities first published in this month (UTC), newest first.
970 results · Feed
-
Unscored —CVE-2004-2745 Public exploit
Directory traversal vulnerability in Anteco Visual Technologies OwnServer 1.0 and earlier allows remote attackers to re…
-
Unscored —
Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote attackers to cause a denial of ser…
-
Unscored —
Integer overflow in McAfee E-Business Server before 8.5.3 for Solaris, and before 8.1.2 for Linux, HP-UX, and AIX, allo…
-
Unscored —
The Globe7 soft phone client 7.3 sends username and password information in cleartext, which allows remote attackers to…
-
Unscored —
Stack-based buffer overflow in RealNetworks RealPlayer 10 and possibly 10.5, and RealOne Player 1 and 2, for Windows al…
-
Unscored —
Buffer overflow in IMail Client 9.22, as shipped with IPSwitch IMail Server 2006.22, allows remote attackers to execute…
-
Unscored —
Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; and RealP…
-
Unscored —
Heap-based buffer overflow in RealNetworks RealPlayer 10.0, 10.1, and possibly 10.5, RealOne Player, and RealPlayer Ent…
-
Unscored —CVE-2007-5752 Public exploit
adduser.php in PHP-AGTC Membership (AGTC-Membership) System 1.1a does not require authentication, which allows remote a…
-
Unscored —
Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; and RealP…
-
Unscored —
Liferea before 1.4.6 uses weak permissions (0644) for the feedlist.opml backup file, which allows local users to obtain…
-
Unscored —
Integer overflow in RealNetworks RealPlayer 10 and 10.5, RealOne Player 1, and RealPlayer Enterprise for Windows allows…
-
Unscored —
Unspecified vulnerability in Light FMan PHP (lfman or lightfman) before 2.0rc1 has unknown impact and attack vectors re…
-
Unscored —CVE-2007-5754 Public exploit
PHP remote file inclusion vulnerability in urlinn_includes/config.php in phpFaber URLInn 2.0.5 allows remote attackers …
-
Unscored —CVE-2002-2379 Public exploit
Cisco AS5350 IOS 12.2(11)T with access control lists (ACLs) applied and possibly with ssh running allows remote attacke…
-
Unscored —
Linksys WET11 firmware 1.31 and 1.32 allows remote attackers to cause a denial of service (crash) via a packet containi…
-
Unscored —
Simple WAIS (SWAIS) 1.11 allows remote attackers to execute arbitrary commands via the shell metacharacters in the sear…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Quizz module for XOOPS 1.0, when allowing on-line question development,…
-
Unscored —
Cross-site scripting (XSS) vulnerability in addentry.cgi in ZAP 1.0.3 allows remote attackers to inject arbitrary SSi d…
-
Unscored —
SQL injection vulnerability in f2html.pl 0.1 through 0.4 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —
Buffer overflow in INweb POP3 mail server 2.01 allows remote attackers to cause a denial of service (crash) via a long …
-
Unscored —
The telnet server in Infoprint 21 running controller software before 1.056007 allows remote attackers to cause a denial…
-
Unscored —CVE-2002-2370 Public exploit
SWS web server 0.0.4, 0.0.3 and 0.1.0 allows remote attackers to cause a denial of service (crash) via a URL request th…
-
Unscored —
Directory traversal vulnerability in CommuniGate Pro 4.0b4 and possibly earlier versions allows remote attackers to lis…
-
Unscored —
cvsupd.sh in CVSup 1.2 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on /var…
-
Unscored —
SQL injection vulnerability in index.php of WebChat 1.5 included in XOOPS 1.0 allows remote attackers to execute arbitr…
-
Unscored —
Multiple buffer overflows in (1) tetrinet_inmessage, (2) speclist_add and (3) config-getthemeinfo of GTetrinet 0.4.3 an…
-
Unscored —
Buffer overflow in the XML parser of Trillian 0.6351, 0.725 and 0.73 allows remote attackers to cause a denial of servi…
-
Unscored —
Serv-U FTP server 3.0, 3.1 and 4.0.0.4 does not accept new connections while validating user folder access rights, whic…
-
Unscored —
hotfoon4.exe in Hotfoon 4.00 stores user names and passwords in cleartext in the hotfoon2 registry key, which allows lo…
-
Unscored —CVE-2002-2385 Public exploit
Buffer overflow in hotfoon4.exe in Hotfoon 4.0 allows remote attackers to cause a denial of service (crash) and possibl…
-
Unscored —
Cross-site scripting (XSS) vulnerability in AN HTTP 1.41d allows remote attackers to inject arbitrary web script or HTM…
-
Unscored —
The default configuration of the TCP/IP printer configuration utility in Apple LaserWriter 12/640 PS printer contains a…
-
Unscored —
Winamp 2.65 through 3.0 stores skin files in a predictable file location, which allows remote attackers to execute arbi…
-
Unscored —
Buffer overflow in the IDENT daemon (identd) in Trillian 0.6351, 0.725, 0.73, 0.74 and 1.0 pro allows remote attackers …
-
Unscored —
Perception LiteServe 2.0 allows remote attackers to read password protected files via a leading "/./" in a URL.
-
Unscored —CVE-2002-2376 Public exploit
Cross-site scripting (XSS) vulnerability in E-Guest_sign.pl in E-Guest 1.1 allows remote attackers to inject arbitrary …
-
Unscored —
Off-by-one buffer overflow in NEC SOCKS5 1.0 r11 and earlier allows remote attackers to cause a denial of service and p…
-
Unscored —
TheServer 1.74 web server stores server.ini under the web document root with insufficient access control, which allows …
-
Unscored —CVE-2002-2380 EPSS 11%
NetDSL ADSL Modem 800 with Microsoft Network firmware 5.5.11 allows remote attackers to gain access to configuration me…