Archive
1 October 2007
Vulnerabilities first published on this day (UTC), newest first.
38 results · Feed
-
Unscored —
libpurple in Pidgin before 2.2.1 does not properly handle MSN nudge messages from users who are not on the receiver's b…
-
Unscored —
Integer overflow in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 al…
-
Unscored —
Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before …
-
Unscored —CVE-2007-5083 EPSS 19%
Multiple integer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow…
-
Unscored —
Multiple SQL injection vulnerabilities in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before…
-
Unscored —
Directory traversal vulnerability in rxRPC.dll in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and D…
-
Unscored —
Unspecified vulnerability in Quicksilver Forums before 1.4.1 allows remote attackers to delete arbitrary PMs via unspec…
-
Unscored —
Multiple stack-based buffer overflows in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r…
-
Unscored —
Unspecified vulnerability in the embedded service processor (SP) before 3.09 in Sun Fire X2100 M2 and X2200 M2 Embedded…
-
Unscored —CVE-2007-5006 EPSS 21%
Multiple command handlers in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through…
-
Unscored —
Quicksilver Forums before 1.4.1 allows remote attackers to obtain sensitive information by causing unspecified connecti…
-
Unscored —
Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 5.6 and 6.5 allow remote authenticated users to exec…
-
Unscored —CVE-2007-5145 EPSS 13%
Multiple buffer overflows in system DLL files in Microsoft Windows XP, as used by Microsoft Windows Explorer (explorer.…
-
Unscored —CVE-2007-5157 Public exploit
PHP remote file inclusion vulnerability in phfito-post.php in Alex Kocharin PHP Fidonet Tosser (PhFiTo) 1.3.0 in phpFid…
-
Unscored —
PHP remote file inclusion vulnerability in includes/functions/layout.php in Nexty 1.01.A Beta allows remote attackers t…
-
Unscored —
The focus handling for the onkeydown event in Microsoft Internet Explorer 6.0 allows remote attackers to change field f…
-
Unscored —CVE-2007-5149 Public exploit
PHP remote file inclusion vulnerability in NewsCMS/news/newstopic_inc.php in North Country Public Radio Public Media Ma…
-
Unscored —
Cross-zone scripting vulnerability in the internal browser in i-Systems Feedreader 3.10 allows remote attackers to inje…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in ClanLite 1.23.01.2005 allow remote attackers to execute arbitrary…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Puzzle Apps CMS 2.2.1 allow remote attackers to execute arbitrary…
-
Unscored —
PHP remote file inclusion vulnerability in .systeme/fonctions.php in phpLister 0.5-pre2 allows remote attackers to exec…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in SiteSys 1.0a allow remote attackers to execute arbitrary PHP code…
-
Unscored —
Session fixation vulnerability in Aipo and Aipo ASP 3.0.1.0 and earlier allows remote attackers to hijack web sessions …
-
Unscored —
PHP remote file inclusion vulnerability in init.php in Jens Tkotz myIpacNG-stats (MINGS) 0.05 allows remote attackers t…
-
Unscored —
Sun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 9.1 container, does not dema…
-
Unscored —
IceGUI.DLL in ICEOWS 4.20b invokes a function with incorrect arguments, which allows user-assisted remote attackers to …
-
Unscored —CVE-2007-5144 EPSS 17%
Buffer overflow in the GDI engine in Windows Live Messenger, as used for Windows MSN Live 8.1, allows user-assisted rem…
-
Unscored —CVE-2007-5156 Public exploit
Incomplete blacklist vulnerability in editor/filemanager/upload/php/upload.php in FCKeditor, as used in SiteX CMS 0.7.3…
-
Unscored —
The ntfs-3g package before 1.913-2.fc7 in Fedora 7, and an ntfs-3g package in Ubuntu 7.10/Gutsy, assign incorrect permi…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in dedi-group Der Dirigent 1.0 allow remote attackers to execute arb…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in FrontAccounting (FA) 1.12 allow remote attackers to execute arbit…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Thierry Leriche Restaurant Management System (ReMaSys) 0.5 allow …
-
Unscored —
F-Secure Anti-Virus for Windows Servers 7.0 64-bit edition allows local users to bypass virus scanning by using the sys…
-
Unscored —
PHP remote file inclusion vulnerability in htmls/forum/includes/topic_review.php in UniversiBO 1.3.4 allows remote atta…
-
Unscored —
SQL injection vulnerability in the is_god function in includes/nukesentinel.php in NukeSentinel 2.5.11 allows remote at…
-
Unscored —
Unspecified vulnerability in Sun Java System Access Manager 7.1, when installed in a Sun Java System Application Server…
-
Unscored —
The connect method in lib/net/http.rb in the (1) Net::HTTP and (2) Net::HTTPS libraries in Ruby 1.8.5 and 1.8.6 does no…
-
Unscored —
SQL injection vulnerability in the abget_admin function in includes/nukesentinel.php in NukeSentinel 2.5.12 allows remo…