Archive
29 October 2007
Vulnerabilities first published on this day (UTC), newest first.
55 results · Feed
-
Unscored —
libpurple in Pidgin 2.1.0 through 2.2.1, when using HTML logging, allows remote attackers to cause a denial of service …
-
Unscored —
Buffer overflow in the TagAttributeListCopy function in nnotes.dll in IBM Lotus Notes before 7.0.3 allows user-assisted…
-
Unscored —
httpd.tkd in Radia Integration Server in Hewlett-Packard (HP) OpenView Configuration Management (CM) Infrastructure 4.0…
-
Unscored —
Unspecified vulnerability in the Settings component in the administration system in Jeebles Directory 2.9.60 allows rem…
-
Unscored —
Multiple SQL injection vulnerabilities in CodeWidgets.com Online Event Registration Template allow remote attackers to …
-
Unscored —CVE-2007-5706 Public exploit
Absolute path traversal vulnerability in download.php in Jeebles Directory 2.9.60 allows remote attackers to read arbit…
-
Unscored —
Cross-site scripting (XSS) vulnerability in swamp/action/LoginActions (aka the login box) in the Novell OpenSUSE SWAMP …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in (1) Request-spk.xuda and (2) Add-msie-request.xuda in RSA KEON R…
-
Unscored —
Buffer overflow in the IMAP service in IBM Lotus Domino before 6.5.6 FP2, and 7.x before 7.0.3, allows remote authentic…
-
Unscored —
GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attac…
-
Unscored —CVE-2007-5699 Public exploit
Stack-based buffer overflow in eIQNetworks Enterprise Security Analyzer (ESA) 2.5 allows remote attackers to execute ar…
-
Unscored —
Cross-site scripting (XSS) vulnerability in default.asp in CREApark GOLD KOY PORTALI allows remote attackers to inject …
-
Unscored —
Incomplete blacklist vulnerability in the Certificate Authority (CA) in IBM Lotus Domino before 7.0.3 allows local user…
-
Unscored —
The Evaluate LotusScript method in IBM Lotus Domino before 7.0.3 uses an incorrect security context for @ formula comma…
-
Unscored —CVE-2007-5697 Public exploit
Multiple PHP remote file inclusion vulnerabilities in PHP Image 1.2 allow remote attackers to execute arbitrary PHP cod…
-
Unscored —
IBM Lotus Notes before 6.5.6, and 7.x before 7.0.3; and Domino before 6.5.5 FP3, and 7.x before 7.0.2 FP1; uses weak pe…
-
Unscored —
Double free vulnerability in the ftpprchild function in ftppr in 3proxy 0.5 through 0.5.3i allows remote attackers to c…
-
Unscored —
PHP remote file inclusion vulnerability in includes.php in phpBasic allows remote attackers to execute arbitrary PHP co…
-
Unscored —CVE-2007-5692 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in SiteBar 3.3.8 allow remote attackers to inject arbitrary web scr…
-
Unscored —
Open redirect vulnerability in command.php in SiteBar 3.3.8 allows remote attackers to redirect users to arbitrary web …
-
Unscored —CVE-2007-5693 Public exploit
Eval injection vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated us…
-
Unscored —CVE-2007-5694 Public exploit
Absolute path traversal vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authent…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Oracle Java Server Page (OJSP) demo files (1) hellouser.jsp, (2) welcomeuse…
-
Unscored —
Ensim WEBppliance 3.0 and 3.1 allows remote attackers to read mail intended for other users by defining an alias that i…
-
Unscored —
VJE.VJE-RUN in HP-UX 11.00 adds bin to /etc/PATH, which could allow local users to gain privileges.
-
Unscored —
Cross-site scripting (XSS) vulnerability in z_user_show.php in dbtreelistproperty_method.php in Zorum 2.4 allows remote…
-
Unscored —CVE-2002-2336 Public exploit
Norton Personal Firewall 2002 4.0, when configured to automatically block attacks, allows remote attackers to block IP …
-
Unscored —
Oracle 9i Application Server 9.0.2 stores the web cache administrator interface password in plaintext, which allows rem…
-
Unscored —CVE-2002-2338 Public exploit
The POP3 mail client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier, allows remote attackers to …
-
Unscored —
Cross-site scripting (XSS) vulnerability in PHP Ticket 0.5 and earlier allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2002-2362 Public exploit
Cross-site scripting (XSS) vulnerability in form_header.php in MyMarket 1.71 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2002-2357 Public exploit
MailEnable 1.5 015 through 1.5 018 allows remote attackers to cause a denial of service (crash) via a long USER string,…
-
Unscored —CVE-2002-2351 Public exploit
Eudora 5.1 allows remote attackers to bypass security warnings and possibly execute arbitrary code via attachments with…
-
Unscored —CVE-2002-2339 Public exploit
Cross-site scripting (XSS) vulnerability in configure.asp in Script-Shed GuestBook 1.0 allows remote attackers to injec…
-
Unscored —CVE-2002-2349 Public exploit
phpinfo.php in phpBBmod 1.3.3 executes the phpinfo function, which allows remote attackers to obtain sensitive environm…
-
Unscored —CVE-2002-2343 Public exploit
Cross-site scripting (XSS) vulnerability in NOCC 0.9 through 0.9.5 allows remote attackers to inject arbitrary web scri…
-
Unscored —
Netgear FM114P firmware 1.3 wireless firewall allows remote attackers to cause a denial of service (crash or hang) via …
-
Unscored —CVE-2002-2360 Public exploit
The RPC module in Webmin 0.21 through 0.99, when installed without root or admin privileges, allows remote attackers to…
-
Unscored —CVE-2002-2358 Public exploit
Cross-site scripting (XSS) vulnerability in the FTP view feature in Opera 6.0 and 6.01 through 6.04 allows remote attac…
-
Unscored —
Netgear FM114P firmware 1.3 wireless firewall, when configured to backup configuration information, stores DDNS (DynDNS…