Archive
18 October 2007
Vulnerabilities first published on this day (UTC), newest first.
94 results · Feed
-
Unscored —
Buffer overflow in Webster HTTP Server allows remote attackers to execute arbitrary code via a long URL.
-
Unscored —
3D3.Com ShopFactory 5.5 through 5.8 allows remote attackers to modify the prices in their shopping carts by modifying t…
-
Unscored —
syslogd on OpenBSD 2.9 through 3.2 does not change the source IP address of syslog packets when the machine's IP addres…
-
Unscored —
Mambo Site Server 4.0.11 installs with a default username and password of admin, which allows remote attackers to gain …
-
Unscored —CVE-2002-2296 Public exploit
Cross-site scripting (XSS) vulnerability in YaBB.pl in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 allows remote atta…
-
Unscored —CVE-2002-2288 Public exploit
Mambo Site Server 4.0.11 allows remote attackers to obtain the physical path of the server via an HTTP request to index…
-
Unscored —
Unspecified vulnerability in Internet Group Management Protocol (IGMP) of HP Tru64 4.0F through 5.1A allows remote atta…
-
Unscored —
soinfo.php in BadBlue 1.7.1 calls the phpinfo function, which allows remote attackers to gain sensitive information inc…
-
Unscored —CVE-2002-2287 Public exploit
PHP remote file inclusion vulnerability in quick_reply.php for phpBB Advanced Quick Reply Hack 1.0.0 and 1.1.0 allows r…
-
Unscored —
Directory traversal vulnerability in Webster HTTP Server allows remote attackers to read arbitrary files via a .. (dot …
-
Unscored —
Unspecified vulnerability in the bind function in config.inc of aldap 0.09 allows remote attackers to authenticate with…
-
Unscored —
bogopass in bogofilter 0.9.0.4 allows local users to overwrite arbitrary files via a symlink attack on the bogopass tem…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Webster HTTP Server allows remote attackers to inject arbitrary web script …
-
Unscored —
The installation program for HP-UX Visualize Conference B.11.00.11 running on HP-UX 11.00 and 11.11 installs /etc/dt an…
-
Unscored —CVE-2002-2298 Public exploit
PHP remote file inclusion vulnerability in config.php in Thatware 0.3 through 0.5.3 allows remote attackers to execute …
-
Unscored —
SQL injection vulnerability in agentadmin.php in Immobilier allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —
PHP remote file inclusion vulnerability in artlist.php in Thatware 0.5.2 and 0.5.3 allows remote attackers to execute a…
-
Unscored —
Sendmail 8.9.0 through 8.12.6 allows remote attackers to bypass relaying restrictions enforced by the 'check_relay' fun…
-
Unscored —CVE-2002-2304 Public exploit
SQL injection vulnerability in admin/auth/checksession.php in MyPHPLinks 2.1.9 and 2.2.0 allows remote attackers to exe…
-
Unscored —
Buffer overflow in BigFun 1.51b IRC client, when the Direct Client Connection (DCC) option is used, allows remote attac…
-
Unscored —
Lawson Financials 8.0, when configured to use a third party relational database, stores usernames and passwords in a wo…
-
Unscored —
SQL injection vulnerability in mod_search/index.php in PortailPHP 0.99 allows remote attackers to execute arbitrary SQL…
-
Unscored —
akfingerd 0.5 allows local users to read arbitrary files as the akfingerd user (nobody) via a symlink attack on the .pl…
-
Unscored —
eTrust InoculateIT 6.0 with the "Incremental Scan" option enabled may certify that a file is free of viruses before the…
-
Unscored —
McAfee VirusScan 4.5.1, when the WebScanX.exe module is enabled, searches for particular DLLs from the user's home dire…
-
Unscored —
Calisto Internet Talker 0.04 and earlier allows remote attackers to cause a denial of service (hang) via a long request…
-
Unscored —
Unspecified vulnerability in the ied command in HP-UX 10.10, 10.20, and 11.0 allows local users to view "normally invis…
-
Unscored —
Cross-site scripting (XSS) vulnerability in mod_search/index.php in PortailPHP 0.99 allows remote attackers to inject a…
-
Unscored —
3D3.Com ShopFactory 5.8 uses client-side encryption and decryption for sensitive price data, which allows remote attack…
-
Unscored —
Unspecified vulnerability in LDAP Module in System Authentication of Open Source Internet Solutions (OSIS) 5.4 running …
-
Unscored —
Directory traversal vulnerability in Remote Console Applet in Halycon Software iASP 1.0.9 allows remote attackers to re…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the quips feature in Mozilla Bugzilla 2.10 through 2.17 allows remote attac…
-
Unscored —
Symantec Java! JIT (Just-In-Time) Compiler for Netscape Communicator 4.0 through 4.8 allows remote attackers to execute…
-
Unscored —
Unspecified vulnerability in xntpd of HP-UX 10.20 through 11.11 allows remote attackers to cause a denial of service (h…
-
Unscored —
The parse-get function in utils.c for apt-www-proxy 0.1 allows remote attackers to cause a denial of service (crash) vi…
-
Unscored —
Buffer overflow in the French documentation patch for Gnuplot 3.7 in SuSE Linux before 8.0 allows local users to execut…
-
Unscored —
Netscape Communicator 4.0 through 4.79 allows remote attackers to bypass JVM security and execute arbitrary Java code v…
-
Unscored —
Ultimate PHP Board (UPB) 1.0 allows remote attackers to view the physical path of the message board via a direct reques…
-
Unscored —
Microsoft Windows XP with Fast User Switching (FUS) enabled does not remove the "show processes from all users" privile…
-
Unscored —
PHP remote file inclusion vulnerability in thatfile.php in Thatware 0.3 through 0.5.2 allows remote attackers to execut…