Archive
18 October 2007
Vulnerabilities first published on this day (UTC), newest first.
94 results · Feed
-
Unscored —CVE-2007-5579 Public exploit
login.php in Pligg CMS 9.5 uses a guessable confirmation code when resetting a forgotten password, which allows remote …
-
Unscored —
Basic Analysis and Security Engine (BASE) before 1.3.8 sends a redirect to the web browser but does not exit, which all…
-
Unscored —
PHP remote file inclusion vulnerability in djpage.php in PHPDJ 0.5 allows remote attackers to execute arbitrary PHP cod…
-
Unscored —
Cisco Firewall Services Module (FWSM) 3.1(6), and 3.2(2) and earlier, does not properly enforce edited ACLs, which migh…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in 1024 CMS 1.2.5 allows remote attackers to perform some actions as ad…
-
Critical 9.8
PHP remote file inclusion vulnerability in includes/functions.php in phpSCMS 0.0.1-Alpha1 allows remote attackers to ex…
-
Unscored —
BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleart…
-
Unscored —
Cisco Firewall Services Module (FWSM) 3.2(1), and 3.1(5) and earlier, allows remote attackers to cause a denial of serv…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in PHPBlog 0.1 Alpha allow remote attackers to execute arbitrary PHP…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in Simple PHP Blog (SPHPBlog) 0.4.9 allow remote attackers t…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.13 (aka Sunglow) allow remote attackers to in…
-
Unscored —
Cisco PIX and ASA appliances with 7.0 through 8.0 software, and Cisco Firewall Services Module (FWSM) 3.1(5) and earlie…
-
Unscored —CVE-2007-5567 Public exploit
PHP remote file inclusion vulnerability in _lib/fckeditor/upload_config.php in Galmeta Post 0.11 allows remote attacker…
-
Unscored —
Cisco PIX and ASA appliances with 7.1 and 7.2 software, when configured for TLS sessions to the device, allow remote at…
-
Unscored —CVE-2007-5573 Public exploit
PHP remote file inclusion vulnerability in classes/core/language.php in LimeSurvey 1.5.2 and earlier allows remote atta…
-
Unscored —
The "Protect Worksheet" functionality in Mathsoft Mathcad 12 through 13.1, and PTC Mathcad 14, implements file access r…
-
Unscored —
Unspecified vulnerability in the linux_audit_record_event function in OpenSSH 4.3p2, as used on Fedora Core 6 and possi…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in NSSboard (formerly Simple PHP Forum) 6.1 allow remote attackers …
-
Unscored —
Unspecified vulnerability in VirtueMart before 1.0.13 allows remote attackers to execute arbitrary PHP code via unspeci…
-
Unscored —
Off-by-one error in Cisco IOS allows remote attackers to execute arbitrary code via unspecified vectors that trigger a …
-
Unscored —
Multiple stack-based buffer overflows in Command EXEC in Cisco IOS allow local users to gain privileges via unspecified…
-
Unscored —
Heap-based buffer overflow in the IBM ThinkVantage TPM Service allows remote attackers to execute arbitrary code via a …
-
Unscored —
Oracle allows remote attackers to obtain server memory contents via crafted packets, aka Oracle reference number 789271…
-
Unscored —
Unspecified vulnerability in Symantec Altiris Deployment Solution allows attackers to obtain authentication credentials…
-
Unscored —
Unspecified vulnerability in Cisco IOS allows remote attackers to obtain the IOS version via unspecified vectors involv…
-
Unscored —
Multiple stack-based buffer overflows in TIBCO SmartPGM FX allow remote attackers to execute arbitrary code or cause a …
-
Unscored —
Heap-based buffer overflow in the Juniper HTTP Service allows remote attackers to execute arbitrary code via a crafted …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Cisco IOS allows remote attackers to inject arbitrary web script or HTML, a…
-
Unscored —
Integer overflow in the LG Mobile handset allows remote attackers to cause a denial of service (reboot) via a crafted H…
-
Unscored —
Unspecified vulnerability in the Avaya VoIP Handset allows remote attackers to cause a denial of service (reboot) via c…
-
Unscored —CVE-2007-5562 Public exploit
Cross-site scripting (XSS) vulnerability in cgi-bin/welcome (aka the login page) in Netgear SSL312 PROSAFE SSL VPN-Conc…
-
Unscored —
Unspecified vulnerability in Command EXEC in Cisco IOS allows local users to bypass command restrictions and obtain sen…
-
Unscored —
Unspecified vulnerability in the NEC mobile handset allows remote attackers to cause a denial of service (reboot) via c…
-
Unscored —
Format string vulnerability in TIBCO SmartPGM FX allows remote attackers to execute arbitrary code via format string sp…
-
Unscored —
Integer overflow in Cisco IOS allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: as of 20…
-
Unscored —
Format string vulnerability in the logging function in the Oracle OPMN daemon, as used on Oracle Enterprise Grid Consol…
-
Unscored —
StaticFileHandler.cs in System.Web in Mono before 1.2.5.2, when running on Windows, allows remote attackers to obtain s…
-
Unscored —
Fortres 101 4.1 allows local users to bypass Fortres by pressing the Windows and "F" key together for 30 seconds, which…
-
Unscored —CVE-2002-2300 Public exploit
Buffer overflow in ftpd 5.4 in 3Com NBX 4.0.17 or ftpd 5.4.2 in 3Com NBX 4.1.4 allows remote attackers to cause a denia…
-
Unscored —
NetScreen ScreenOS 2.8 through 4.0, when forwarding H.323 or Netmeeting traffic, allows remote attackers to cause a den…