Archive
30 October 2007
Vulnerabilities first published on this day (UTC), newest first.
39 results · Feed
-
Unscored —
The FlashUpload component in Korean GHBoard uses a client-side protection mechanism to prevent uploading of dangerous f…
-
Unscored —
Unrestricted file upload vulnerability in eFileMan 7.1.0.87-88 allows remote attackers to upload arbitrary files, with …
-
Unscored —CVE-2007-5733 Public exploit
Unrestricted file upload vulnerability in upload/upload.php in Japanese PHP Gallery Hosting, when Open directory mode i…
-
Unscored —
Unrestricted file upload vulnerability in upload.php in SeeBlick 1.0 Beta allows remote attackers to upload arbitrary f…
-
Unscored —CVE-2007-5731 Public exploit
Absolute path traversal vulnerability in Apache Jakarta Slide 2.1 and earlier allows remote authenticated users to read…
-
Unscored —CVE-2007-5737 Public exploit
Unrestricted file upload vulnerability in component/upload.jsp in Korean GHBoard allows remote attackers to upload arbi…
-
Unscored —
eFileMan 7.1.0.87-88 stores sensitive information under the web root with insufficient access control, which allows rem…
-
Unscored —CVE-2007-5739 Public exploit
Directory traversal vulnerability in component/flashupload/download.jsp in the FlashUpload component in Korean GHBoard …
-
Unscored —
Directory traversal vulnerability in downloadfile.php in eLouai's Force Download of media files script, as available on…
-
Unscored —
Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local…
-
Unscored —
The Trend Micro AntiVirus scan engine before 8.550-1001, as used in Trend Micro PC-Cillin Internet Security 2007, and T…
-
Unscored —
Heap-based buffer overflow in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to execute arb…
-
Unscored —
The NE2000 emulator in QEMU 0.8.2 allows local users to execute arbitrary code by writing Ethernet frames with a size l…
-
Unscored —CVE-2007-4862 Public exploit
Cross-site scripting (XSS) vulnerability in admin/menu.php in SAXON 5.4 allows remote attackers to inject arbitrary web…
-
Unscored —
SAXON 5.4, with display_errors enabled, allows remote attackers to obtain sensitive information via (1) a direct reques…
-
Unscored —CVE-2007-4863 Public exploit
SQL injection vulnerability in example.php in SAXON 5.4 allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —
Unspecified vulnerability in Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager (ELOM) on x86 before firmware 2…
-
Unscored —
Cross-site scripting (XSS) vulnerability in phpPgAdmin 3.5 to 4.1.1, and possibly 4.1.2, allows remote attackers to inj…
-
Unscored —CVE-2007-5725 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Smart-Shop allow remote attackers to inject arbitrary web script…
-
Unscored —CVE-2007-5721 Public exploit
PHP remote file inclusion vulnerability in _theme/breadcrumb.php in MySpacePros MySpace Resource Script (MSRS) 1.21 all…
-
Unscored —
Unspecified vulnerability in the Internet Protocol (IP) functionality in Sun Solaris 10 allows local users to cause a d…
-
Unscored —
vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink a…
-
Unscored —CVE-2007-5724 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Omnistar Live allow remote attackers to inject arbitrary web scr…
-
Unscored —
Stack-based buffer overflow in a certain ActiveX control in GLChat.ocx 2.5.1.32 in GlobalLink 2.7.0.8, as used in Ourga…
-
Unscored —
Unspecified vulnerability in the Stream Control Transmission Protocol (sctp) functionality in Sun Solaris 10, when at l…
-
Unscored —CVE-2007-5720 Public exploit
Unrestricted file upload vulnerability in the profiles script in ProfileCMS 1.0 allows remote attackers to upload and e…
-
Unscored —
Incomplete blacklist vulnerability in the stripScripts function in common.php in OneOrZero Helpdesk 1.6.5.4, 1.6.4.2, a…
-
Unscored —CVE-2007-5719 Public exploit
SQL injection vulnerability in bb_func_search.php in miniBB 2.1 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —
Heap-based buffer overflow in the samp_send function in nuauth/sasl.c in NuFW before 2.2.7 allows remote attackers to c…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the CAD service in IBM Tivoli Storage Manager (TSM) Client 5.3.5.3 and 5.4.…
-
Unscored —
OpenLDAP before 2.3.39 allows remote attackers to cause a denial of service (slapd crash) via an LDAP request with a ma…
-
Unscored —
The Gentoo ebuild of MLDonkey before 2.9.0-r3 has a p2p user account with an empty default password and valid login she…
-
Medium 5.9
Django vulnerable to Denial of Service via i18n middleware component
The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory consumpt…
-
Unscored —
Stack-based buffer overflow in Sony SonicStage CONNECT Player (CP) 4.3 allows remote attackers to execute arbitrary cod…
-
Unscored —
Off-by-one error in the GeoIP module in the AMX Mod X 1.76d plugin for Half-Life Server might allow attackers to execut…
-
Unscored —
DenyHosts 2.6 processes OpenSSH sshd "not listed in AllowUsers" log messages with an incorrect regular expression that …
-
Unscored —
slapo-pcache (overlays/pcache.c) in slapd in OpenLDAP before 2.3.39, when running as a proxy-caching server, allocates …
-
Unscored —CVE-2007-5710 Public exploit
Cross-site scripting (XSS) vulnerability in wp-admin/edit-post-rows.php in WordPress 2.3 allows remote attackers to inj…
-
Unscored —
Massive Entertainment World in Conflict 1.001 and earlier allows remote attackers to cause a denial of service (failed …