Archive
25 October 2007
Vulnerabilities first published on this day (UTC), newest first.
34 results · Feed
-
Unscored —
Unspecified vulnerability in the non-SSL web agent in various HP Management Agent products allows local users or remote…
-
Unscored —
Unspecified vulnerability in My Photo Gallery 3.5, and possibly earlier versions, has unknown impact and attack vectors.
-
Unscored —CVE-2003-1506 Public exploit
Cross-site scripting (XSS) vulnerability in dansguardian.pl in Adelix CensorNet 3.0 through 3.2 allows remote attackers…
-
Unscored —CVE-2003-1513 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in example scripts in Caucho Technology Resin 2.0 through 2.1.2 all…
-
Unscored —CVE-2003-1519 Public exploit
Cross-site scripting (XSS) vulnerability in Vivisimo clustering engine allows remote attackers to inject arbitrary web …
-
Unscored —
TinyWeb 1.9 allows remote attackers to cause a denial of service (CPU consumption) via a ".%00." in an HTTP GET request…
-
Unscored —CVE-2003-1517 Public exploit
cart.pl in Dansie shopping cart allows remote attackers to obtain the installation path via an invalid db parameter, wh…
-
Unscored —
Buffer overflow in the system log viewer of Linksys BEFSX41 1.44.3 allows remote attackers to cause a denial of service…
-
Unscored —
PGPi PGPDisk 6.0.2i does not unmount a PGP partition when the switch user function in Windows XP is used, which could a…
-
Unscored —
Buffer overflow in AOL Instant Messenger (AIM) 5.2.3292 allows remote attackers to execute arbitrary code via an aim:ge…
-
Unscored —
Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (crash) by creating a web page or …
-
Unscored —
Real Networks RealOne Enterprise Desktop 6.0.11.774, RealOne Player 2.0, and RealOne Player 6.0.11.818 through RealOne …
-
Unscored —CVE-2003-1498 Public exploit
Cross-site scripting (XSS) vulnerability in search.php for WRENSOFT Zoom Search Engine 2.0 Build 1018 and earlier allow…
-
Unscored —CVE-2003-1520 Public exploit
SQL injection vulnerability in FuzzyMonkey My Classifieds 2.11 allows remote attackers to execute arbitrary SQL command…
-
Unscored —
Origo ASR-8100 ADSL Router 3.21 has an administration service running on port 254 that does not require a password, whi…
-
Unscored —CVE-2003-1516 Public exploit
The org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.2_01 allows signed and unsigned applets to…
-
Unscored —CVE-2003-1499 Public exploit
Directory traversal vulnerability in index.php in Bytehoard 0.7 allows remote attackers to read arbitrary files via a .…
-
Unscored —
PHP remote file inclusion vulnerability in _functions.php in cpCommerce 0.5f allows remote attackers to execute arbitra…
-
Unscored —
SQL injection vulnerability in the IMAP daemon in dbmail 1.1 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —
Unspecified vulnerability in CDE dtmailpr of HP Tru64 4.0F through 5.1B allows local users to gain privileges via unkno…
-
Unscored —
Directory traversal vulnerability in the file upload CGI of Gast Arbeiter 1.3 allows remote attackers to write arbitrar…
-
Unscored —CVE-2003-1511 Public exploit
Cross-site scripting (XSS) vulnerability in Bajie Java HTTP Server 0.95 through 0.95zxv4 allows remote attackers to inj…
-
Unscored —CVE-2003-1521 Public exploit
Sun Java Plug-In 1.4 through 1.4.2_02 allows remote attackers to repeatedly access the floppy drive via the createXmlDo…
-
Unscored —
PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such as (1) ", (2) ', or (3…
-
Unscored —CVE-2003-1504 Public exploit
SQL injection vulnerability in variables.php in Goldlink 3.0 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —
Buffer overflow in mIRC 6.12, when the DCC get dialog window has been minimized and the user opens the minimized window…
-
Unscored —
mod_throttle 3.0 allows local users with Apache privileges to access shared memory that points to a file that is writab…
-
Unscored —CVE-2003-1512 Public exploit
Buffer overflow in mIRC 6.1 and 6.11 allows remote attackers to cause a denial of service (crash) via a long DCC SEND r…
-
Unscored —
Planet Technology WGSD-1020 and WSW-2401 Ethernet switches use a default "superuser" account with the "planet" password…
-
Unscored —
eMule 0.29c allows remote attackers to cause a denial of service (crash) via a long password, possibly due to a buffer …
-
Unscored —CVE-2003-1522 Public exploit
Cross-site scripting (XSS) vulnerability in PSCS VPOP3 Web Mail server 2.0e and 2.0f allows remote attackers to inject …
-
Unscored —CVE-2003-1518 Public exploit
Adiscon WinSyslog 4.21 SP1 allows remote attackers to cause a denial of service (CPU consumption) via a long syslog mes…
-
Unscored —CVE-2007-2983 Public exploit
Multiple buffer overflows in the British Telecommunications Consumer webhelper ActiveX control before 2.0.0.8 in btwebc…
-
Unscored —CVE-2007-5679 Public exploit
SQL injection vulnerability in index.php in DeeEmm.com DM CMS 0.7.0.Beta allows remote attackers to execute arbitrary S…