Archive
24 October 2007
Vulnerabilities first published on this day (UTC), newest first.
40 results · Feed
-
Unscored —
Unspecified vulnerability in Phorum 3.4 through 3.4.2 allows remote attackers to use Phorum as a connection proxy to ot…
-
Unscored —
MDaemon POP server 6.0.7 and earlier allows remote authenticated users to cause a denial of service (crash) via a (1) D…
-
Unscored —
Netscape Navigator 7.0.2 and Mozilla allows remote attackers to access cookie information in a different domain via an …
-
Unscored —CVE-2003-1463 Public exploit
Absolute path traversal vulnerability in Alt-N Technologies WebAdmin 2.0.0 through 2.0.2 allows remote attackers with a…
-
Unscored —CVE-2003-1484 EPSS 11%
Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) by creating a DHTML li…
-
Unscored —
Buffer overflow in IMAP service in MDaemon 6.7.5 and earlier allows remote authenticated users to cause a denial of ser…
-
Unscored —CVE-2003-1472 Public exploit
Buffer overflow in 3D-FTP client 4.0 allows remote FTP servers to cause a denial of service (crash) and possibly execut…
-
Unscored —
The backup configuration file for Microsoft MN-500 wireless base station stores administrative passwords in plaintext, …
-
Unscored —
Phorum 3.4 through 3.4.2 allows remote attackers to obtain the full path of the web server via an incorrect HTTP reques…
-
Unscored —
Buffer overflow in Siemens 45 series mobile phones allows remote attackers to cause a denial of service (disconnect and…
-
Unscored —CVE-2003-1473 Public exploit
Buffer overflow in LTris 1.0.1 of FreeBSD Ports Collection 2003-02-25 and earlier allows local users to execute arbitra…
-
Unscored —CVE-2003-1488 Public exploit
The (1) verif_admin.php and (2) check_admin.php scripts in Truegalerie 1.0 allow remote attackers to gain administrator…
-
Unscored —
SonicWall Pro running firmware 6.4.0.1 allows remote attackers to cause a denial of service (device reset) via a long H…
-
Unscored —
Kerio Personal Firewall (KPF) 2.1.4 has a default rule to accept incoming packets from DNS (UDP port 53), which allows …
-
Unscored —CVE-2003-1481 Public exploit
CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which all…
-
Unscored —
Cross-site scripting (XSS) vulnerability in webcamXP 1.02.432 and 1.02.535 allows remote attackers to inject arbitrary …
-
Unscored —
Unspecified vulnerability in HP OpenView Network Node Manager (NNM) 6.2 and 6.4 allows remote attackers to cause a deni…
-
Unscored —
mod_survey 3.0.0 through 3.0.15-pre6 does not check whether a survey exists before creating a subdirectory for it, whic…
-
Unscored —CVE-2003-1478 Public exploit
Konqueror in KDE 3.0.3 allows remote attackers to cause a denial of service (core dump) via a web page that begins with…
-
Unscored —
MAILsweeper for SMTP 4.3.6 and 4.3.7 allows remote attackers to cause a denial of service (CPU consumption) via a Power…
-
Unscored —
Netbus 1.5 through 1.7 allows more than one client to be connected at the same time, but only prompts the first connect…
-
Unscored —CVE-2003-1468 Public exploit
The Web_Links module in PHP-Nuke 6.0 through 6.5 final allows remote attackers to obtain the full web server path via a…
-
Unscored —
Directory traversal vulnerability in download.php in Phorum 3.4 through 3.4.2 allows remote attackers to read arbitrary…
-
Unscored —
upload.php in Truegalerie 1.0 allows remote attackers to read arbitrary files by specifying the target filename in the …
-
Unscored —
Multiple "command injection" vulnerabilities in Phorum 3.4 through 3.4.2 allow remote attackers to execute arbitrary co…
-
Unscored —
Memory leak in HP OpenView Network Node Manager (NNM) 6.2 and 6.4 allows remote attackers to cause a denial of service …
-
Unscored —
Cerberus FTP Server 2.1 stores usernames and passwords in plaintext, which could allow local users to gain access.
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in (1) login.php, (2) register.php, (3) post.php, and (4) common.ph…
-
Unscored —
slashem-tty in the FreeBSD Ports Collection is installed with write permissions for the games group, which allows local…
-
Unscored —CVE-2003-1480 Public exploit
MySQL 3.20 through 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for attackers to decrypt the…
-
Unscored —
Clearswift MAILsweeper 4.0 through 4.3.7 allows remote attackers to bypass filtering via a file attachment that contain…
-
Unscored —CVE-2003-1469 Public exploit
The default configuration of ColdFusion MX has the "Enable Robust Exception Information" option selected, which allows …
-
Unscored —
FlashFXP 1.4 uses a weak encryption algorithm for user passwords, which allows attackers to decrypt the passwords and g…
-
Unscored —
SQL injection vulnerability in the Music module in phpBasic allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2007-5677 Public exploit
Cross-site scripting (XSS) vulnerability in shoutbox/blocco.php in Hackish BETA 1.1 allows remote attackers to inject a…
-
Unscored —CVE-2007-5674 Public exploit
Directory traversal vulnerability in index.php in InstaGuide Weather (aka Weather for PHP) 1.0, when magic_quotes_gpc i…
-
Unscored —CVE-2007-5676 Public exploit
PHP remote file inclusion vulnerability in modules/Forums/favorites.php in PHP-Nuke Platinum 7.6.b.5 allows remote atta…
-
Unscored —
Stack-based buffer overflow in the DebugPrint function in MultiXTpm Application Server before 4.0.2d allows remote atta…
-
Unscored —
Cross-site scripting (XSS) vulnerability in cgi-bin/webif.exe in ifnet WebIf allows remote attackers to inject arbitrar…
-
Unscored —
Mozilla Firefox 2.0 before 2.0.0.8 allows remote attackers to obtain sensitive system information by using the addMicro…