Archive
6 October 2007
Vulnerabilities first published on this day (UTC), newest first.
25 results · Clear filters · Feed
-
Unscored —CVE-2004-2716 Public exploit
Multiple SQL injection vulnerabilities in usersL.php3 in PHPMyChat 0.14.5 allow remote attackers to execute arbitrary S…
-
Unscored —CVE-2004-2702 Public exploit
Cross-site scripting (XSS) vulnerability in login_up.php3 in Plesk 7.0 and 7.1 Reloaded allows remote attackers to inje…
-
Unscored —CVE-2004-2697 Public exploit
The Inventory Scout daemon (invscoutd) 1.3.0.0 and 2.0.2 for AIX 4.3.3 and 5.1 allows local users to gain privileges vi…
-
Unscored —CVE-2004-2698 Public exploit
Race condition in IMWheel 1.0.0pre11 and earlier, when running with the -k option, allows local users to cause a denial…
-
Unscored —CVE-2004-2719 Public exploit
Buffer overflow in the UrlToLocal function in PunyLib.dll of Foxmail 5.0.300 allows remote attackers to execute arbitra…
-
Unscored —CVE-2004-2699 Public exploit
deleteicon.aspx in AspDotNetStorefront 3.3 allows remote attackers to delete arbitrary product images via a modified Pr…
-
Unscored —CVE-2004-2718 Public exploit
PHPMyChat 0.14.5 does not remove or protect setup.php3 after installation, which allows attackers to obtain sensitive i…
-
Unscored —CVE-2004-2701 Public exploit
Cross-site scripting (XSS) vulnerability in signin.aspx for AspDotNetStorefront 3.3 allows remote attackers to inject a…
-
Unscored —CVE-2004-2725 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Aztek Forum 4.0 allow remote attackers to inject arbitrary web s…
-
Unscored —CVE-2004-2715 Public exploit
edituser.php3 in PHPMyChat 0.14.5 allow remote attackers to bypass authentication and gain administrative privileges by…
-
Unscored —CVE-2004-2720 Public exploit
Cross-site scripting (XSS) vulnerability in register.asp in Snitz Forums 2000 3.4.04 and earlier allows remote attacker…
-
Unscored —CVE-2004-2717 Public exploit
Multiple directory traversal vulnerabilities in admin.php3 in PHPMyChat 0.14.5 allow remote attackers with administrati…
-
Unscored —CVE-2005-4869 Public exploit
The (1) to_char and (2) to_date function in IBM DB2 8.1 allows local users to cause a denial of service (application cr…
-
Unscored —CVE-2005-4868 Public exploit
Shared memory sections and events in IBM DB2 8.1 have default permissions of read and write for the Everyone group, whi…
-
Unscored —
Unspecified vulnerability in 3Com SuperStack 3 4400 switches with firmware version before 3.31 allows remote attackers …
-
Unscored —CVE-2004-2692 Public exploit
The exec_dir PHP patch (php-exec-dir) 4.3.2 through 4.3.7 with safe mode disabled allows remote attackers to bypass res…
-
Unscored —CVE-2007-5261 Public exploit
Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2007-5255 Public exploit
Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance 3.4.14 allows remote attackers to inject arbit…
-
Unscored —CVE-2007-5248 Public exploit
Multiple format string vulnerabilities in the ID Software Doom 3 engine, as used by Doom 3 1.3.1 and earlier, Quake 4 1…
-
Unscored —
Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Compon…
-
Unscored —
Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versi…
-
Unscored —CVE-2007-5256 Public exploit
Multiple stack-based buffer overflows in FSD 2.052 d9 and earlier, and FSFDT FSD 3.000 d9 and earlier, allow (1) remote…
-
Unscored —
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.…
-
Unscored —CVE-2007-5253 Public exploit
c32web.exe in McMurtrey/Whitaker Cart32 before 6.4 allows remote attackers to read arbitrary files via the ImageName pa…
-
Unscored —CVE-2007-5235 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Uebimiau 2.7.2 through 2.7.10 allows remote attackers to injec…