Archive
23 October 2007
Vulnerabilities first published on this day (UTC), newest first.
66 results · Feed
-
Unscored —CVE-2007-5643 Public exploit
Multiple SQL injection vulnerabilities in Lussumo Vanilla 1.1.3 and earlier allow remote attackers to execute arbitrary…
-
Unscored —CVE-2007-5649 Public exploit
Cross-site scripting (XSS) vulnerability in lostpwd.php in Creative Digital Resources SocketMail 2.2.1 allows remote at…
-
Unscored —CVE-2007-5646 Public exploit
SQL injection vulnerability in Sources/Search.php in Simple Machines Forum (SMF) 1.1.3, when MySQL 5 is used, allows re…
-
Unscored —CVE-2007-5648 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in rnote.php in rNote 0.9.7.5 allow remote attackers to inject arbi…
-
Unscored —
Unspecified vulnerability in the Extensible Authentication Protocol (EAP) implementation in Cisco IOS 12.3 and 12.4 on …
-
Unscored —
LiteSpeed Web Server before 3.2.4 allows remote attackers to trigger use of an arbitrary MIME type for a file via a "%0…
-
Unscored —CVE-2007-5653 Public exploit
The Component Object Model (COM) functions in PHP 5.x on Windows do not follow safe_mode and disable_functions restrict…
-
Unscored —CVE-2007-5644 Public exploit
Lussumo Vanilla 1.1.3 and earlier does not require admin privileges for (1) ajax/sortcategories.php and (2) ajax/sortro…
-
Unscored —CVE-2007-5650 Public exploit
Directory traversal vulnerability in system.php in ReloadCMS 1.2.7 allows remote attackers to include and execute arbit…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in PHP Project Management 0.8.10 and earlier allow remote attackers …
-
Unscored —CVE-2007-5647 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in SocketKB 1.1.5 allow remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2007-5642 Public exploit
Multiple directory traversal vulnerabilities in PHP Project Management 0.8.10 and earlier allow remote attackers to inc…
-
Unscored —
IBM DB2 UDB 9.1 before Fixpak 4 does not properly manage storage of a list containing authentication information, which…
-
Unscored —
Multiple unspecified vulnerabilities in the kernel in Sun Solaris 8 through 10 allow local users to cause a denial of s…
-
Unscored —CVE-2007-5630 Public exploit
SQL injection vulnerability in tnews.php in BBsProcesS BBPortalS 1.5.10 through 2.0 allows remote attackers to execute …
-
Unscored —
Multiple unspecified vulnerabilities in Salford Software Support Incident Tracker (SiT!) before 3.30 have unknown impac…
-
Unscored —
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Commun…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in PeopleAggregator 1.2pre6, when register_globals is enabled, allow…
-
Unscored —CVE-2007-5636 Public exploit
Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service (applicati…
-
Unscored —CVE-2007-5637 Public exploit
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Commun…
-
Unscored —
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets…
-
Unscored —CVE-2007-5633 Public exploit
Speedfan.sys in Alfredo Milani Comparetti SpeedFan 4.33, when used on Microsoft Windows Vista x64, allows local users t…
-
Unscored —
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Commun…
-
Unscored —
Speedfan.sys in Alfredo Milani Comparetti SpeedFan 4.33, when used on Microsoft Windows Vista x64, does not properly ch…
-
Unscored —
PHP remote file inclusion vulnerability in src/scripture.php in The Online Web Library Site (TOWels) 0.1 allows remote …
-
Unscored —CVE-2007-5625 Public exploit
Cross-site scripting (XSS) vulnerability in filename.asp in ASP Site Search SearchSimon Lite 1.0 allows remote attacker…
-
Unscored —
Buffer overflow in the check_snmp function in Nagios Plugins (nagios-plugins) 1.4.10 allows remote attackers to cause a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Nagios 2.x before 2.10 allows remote attackers to inject arbitrary web scri…
-
Unscored —
make_catalog_backup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command line argument, and somet…
-
Unscored —
Cross-site scripting (XSS) vulnerability in admin/logon.asp in ShoppingTree CandyPress Store 4.1 allows remote attacker…
-
Unscored —CVE-2007-5627 Public exploit
PHP remote file inclusion vulnerability in content/fnc-readmail3.php in SocketMail 2.2.8 allows remote attackers to exe…
-
Unscored —
Unspecified vulnerability in the "stack unwinder fixes" in kernel in Red Hat Enterprise Linux 5, when running on AMD64 …
-
Unscored —
The eHCA driver in Linux kernel 2.6 before 2.6.22, when running on PowerPC, does not properly map userspace resources, …
-
Unscored —
Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (CPU consumption or cras…
-
Unscored —CVE-2003-1430 Public exploit
Directory traversal vulnerability in Unreal Tournament Server 436 and earlier allows remote attackers to access known f…
-
Unscored —
SpamProbe 0.8a allows remote attackers to cause a denial of service (crash) via HTML e-mail with newline characters wit…
-
Unscored —CVE-2003-1452 Public exploit
Untrusted search path vulnerability in Qualcomm qpopper 4.0 through 4.05 allows local users to execute arbitrary code b…
-
Unscored —CVE-2003-1461 Public exploit
Buffer overflow in rwrite for HP-UX 11.0 could allow local users to execute arbitrary code via a long argument. NOTE: t…
-
Unscored —
Buffer overflow in Symantec Norton AntiVirus 2002 allows remote attackers to execute arbitrary code via an e-mail attac…
-
Unscored —
SQL injection vulnerability in Profile.php in ttCMS 2.2 and ttForum allows remote attackers to execute arbitrary SQL co…