Archive
6 October 2007
Vulnerabilities first published on this day (UTC), newest first.
76 results · Feed
-
Unscored —CVE-2004-2716 Public exploit
Multiple SQL injection vulnerabilities in usersL.php3 in PHPMyChat 0.14.5 allow remote attackers to execute arbitrary S…
-
Unscored —
Unrestricted file upload vulnerability in AspDotNetStorefront 3.3 allows remote authenticated administrators to upload …
-
Unscored —CVE-2004-2702 Public exploit
Cross-site scripting (XSS) vulnerability in login_up.php3 in Plesk 7.0 and 7.1 Reloaded allows remote attackers to inje…
-
Unscored —
Multiple buffer overflows in Gyach Enhanced (Gyach-E) before 1.0.2 allow remote attackers to cause a denial of service …
-
Unscored —
Multiple buffer overflows in Gyach Enhanced (Gyach-E) before 1.0.3 allow remote attackers to cause a denial of service …
-
Unscored —
Nessus 2.0.10a stores account passwords in plaintext in .nessusrc files, which allows local users to obtain passwords. …
-
Unscored —CVE-2004-2697 Public exploit
The Inventory Scout daemon (invscoutd) 1.3.0.0 and 2.0.2 for AIX 4.3.3 and 5.1 allows local users to gain privileges vi…
-
Unscored —
Unspecified vulnerability in Player vs. Player Gaming Network (PvPGN) before 1.6.4 allows remote attackers to obtain at…
-
Unscored —CVE-2004-2698 Public exploit
Race condition in IMWheel 1.0.0pre11 and earlier, when running with the -k option, allows local users to cause a denial…
-
Unscored —
Buffer overflow in Gyach Enhanced (Gyach-E) before 1.0.0-SneakPeek-3 allows remote attackers to cause a denial of servi…
-
Unscored —CVE-2004-2719 Public exploit
Buffer overflow in the UrlToLocal function in PunyLib.dll of Foxmail 5.0.300 allows remote attackers to execute arbitra…
-
Unscored —CVE-2004-2699 Public exploit
deleteicon.aspx in AspDotNetStorefront 3.3 allows remote attackers to delete arbitrary product images via a modified Pr…
-
Unscored —CVE-2004-2718 Public exploit
PHPMyChat 0.14.5 does not remove or protect setup.php3 after installation, which allows attackers to obtain sensitive i…
-
Unscored —CVE-2004-2701 Public exploit
Cross-site scripting (XSS) vulnerability in signin.aspx for AspDotNetStorefront 3.3 allows remote attackers to inject a…
-
Unscored —
Multiple unspecified vulnerabilities in Gyach Enhanced (Gyach-E) before 1.0.5 have unknown impact and attack vectors re…
-
Unscored —
Clearswift MIMEsweeper 5.0.5, when it has been upgraded from MAILsweeper for SMTP version 4.3 or MAILsweeper Business S…
-
Unscored —CVE-2004-2725 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Aztek Forum 4.0 allow remote attackers to inject arbitrary web s…
-
Unscored —
Buffer overflow in the strip_html_tags method for Gyach Enhanced (Gyach-E) before 1.0.4 allows remote attackers to caus…
-
Unscored —
The CheckGroup function in openSkat VTMF before 2.1 generates public key pairs in which the "p" variable might not be p…
-
Unscored —
Unspecified vulnerability in Window Maker 0.80.2 and earlier allows attackers to perform unknown actions via format str…
-
Unscored —
Gyach Enhanced (Gyach-E) before 1.0.0 stores passwords in plaintext, which allows attackers to obtain user passwords by…
-
Unscored —
LionMax Software Chat Anywhere 2.72a allows remote attackers to cause a denial of service (server crash and client CPU …
-
Unscored —
Zone Alarm Pro 1.0 through 5.1 gives full access to %windir%\Internet Logs\* to the EVERYONE group, which allows local …
-
Unscored —
NessusWX 1.4.4 stores account passwords in plaintext in .session files, which allows local users to obtain passwords.
-
Unscored —CVE-2004-2715 Public exploit
edituser.php3 in PHPMyChat 0.14.5 allow remote attackers to bypass authentication and gain administrative privileges by…
-
Unscored —CVE-2004-2720 Public exploit
Cross-site scripting (XSS) vulnerability in register.asp in Snitz Forums 2000 3.4.04 and earlier allows remote attacker…
-
Unscored —
Unspecified vulnerability in Gyach Enhanced (Gyach-E) before 1.0.4 allows remote attackers to cause a denial of service…
-
Unscored —
SQL injection vulnerability in the Authorize.net callback code (subscriptions/authorize.php) in Jelsoft vBulletin 3.0 t…
-
Unscored —
Hastymail 1.0.1 and earlier (stable) and 1.1 and earlier (development) does not send the "attachment" parameter in the …
-
Unscored —
BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, when using Remote Method Invocation (RMI) over Internet Int…
-
Unscored —CVE-2004-2717 Public exploit
Multiple directory traversal vulnerabilities in admin.php3 in PHPMyChat 0.14.5 allow remote attackers with administrati…
-
Unscored —
CardBoard 2.4 greeting card CGI by Michael Barretto allows remote attackers to execute arbitrary commands via shell met…
-
Unscored —
SSH protocol 2 (aka SSH-2) public key authentication in the development snapshot of OpenSSH 2.3.1, available from 2001-…
-
Unscored —
Stack-based buffer overflow in call in IBM DB2 7.x and 8.1 allows remote attackers to execute arbitrary code via a long…
-
Unscored —
Stack-based buffer overflows in the (1) xmlvarcharfromfile, (2) xmlclobfromfile, (3) xmlfilefromvarchar, and (4) xmlfil…
-
Unscored —
Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to execute arbitrary by connec…
-
Unscored —
Stack-based buffer overflow in db2fmp in IBM DB2 7.x and 8.1 allows local users to execute arbitrary code via a long pa…
-
Unscored —
Stack-based buffer overflow in libdb2.so in IBM DB2 7.x and 8.1 allows local users to execute arbitrary code via a long…
-
Unscored —
Stack-based buffer overflow in the SATENCRYPT function in IBM DB2 8.1, when Satellite Administration (SATADMIN) is enab…
-
Unscored —
Certain XML functions in IBM DB2 8.1 run with the privileges of DB2 instead of the logged-in user, which allows remote …