Archive
October 2007
Vulnerabilities first published in this month (UTC), newest first.
327 results · Clear filters · Feed
-
Unscored —CVE-2003-1427 Public exploit
Directory traversal vulnerability in the web configuration interface in Netgear FM114P 1.4 allows remote attackers to r…
-
Unscored —CVE-2003-1410 Public exploit
PHP remote file inclusion vulnerability in email.php (aka email.php3) in Cedric Email Reader 0.2 and 0.3 allows remote …
-
Unscored —
guestbook.cgi in cPanel 5.0 allows remote attackers to execute arbitrary commands via the template parameter.
-
Unscored —CVE-2003-1412 Public exploit
PHP remote file inclusion vulnerability in index.php for GONiCUS System Administrator (GOsa) 1.0 allows remote attacker…
-
Unscored —CVE-2003-1407 Public exploit
Buffer overflow in cmd.exe in Windows NT 4.0 may allow local users to execute arbitrary code via a long pathname argume…
-
Unscored —CVE-2003-1409 Public exploit
TOPo 1.43 allows remote attackers to obtain sensitive information by sending an HTTP request with an invalid parameter …
-
Unscored —CVE-2003-1401 Public exploit
login.php in php-Board 1.0 stores plaintext passwords in $username.txt with insufficient access control under the web d…
-
Unscored —CVE-2003-1406 Public exploit
PHP remote file inclusion vulnerability in D-Forum 1.00 through 1.11 allows remote attackers to execute arbitrary PHP c…
-
Unscored —CVE-2003-1414 Public exploit
Directory traversal vulnerability in parse_xml.cg Apple Darwin Streaming Server 4.1.2 and Apple Quicktime Streaming Ser…
-
Unscored —CVE-2003-1405 Public exploit
DotBr 0.1 allows remote attackers to execute arbitrary shell commands via the cmd parameter to (1) exec.php3 or (2) sys…
-
Unscored —CVE-2007-5589 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.11.1.2 allow remote attackers to inject arbi…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in awzMB 4.2 beta 1 and earlier allow remote attackers to execute ar…
-
Unscored —CVE-2007-5600 Public exploit
Incomplete blacklist vulnerability in index.php in Artmedic CMS 3.4 and earlier allows remote attackers to execute arbi…
-
Unscored —CVE-2007-5587 Public exploit
Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped in Microsoft Windows XP SP2, XP Professi…
-
Unscored —CVE-2002-2306 Public exploit
Sharman Networks KaZaA Media Desktop 1.7.1 allows remote attackers to cause a denial of service (CPU consumption) by se…
-
Unscored —
Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to…
-
Unscored —CVE-2003-1381 Public exploit
Format string vulnerability in AMX 0.9.2 and earlier, a plugin for Valve Software's Half-Life Server, allows remote att…
-
Unscored —CVE-2003-1375 Public exploit
Buffer overflow in wall for HP-UX 10.20 through 11.11 may allow local users to execute arbitrary code by calling wall w…
-
Unscored —CVE-2003-1385 Public exploit
ipchat.php in Invision Power Board 1.1.1 allows remote attackers to execute arbitrary PHP code, if register_globals is …
-
Unscored —CVE-2003-1396 Public exploit
Heap-based buffer overflow in Opera 6.05 through 7.10 allows remote attackers to cause a denial of service (crash) and …
-
Unscored —
Buffer overflow in Opera 6.05 and 6.06, and possibly other versions, allows remote attackers to execute arbitrary code …
-
Unscored —CVE-2003-1400 Public exploit
Cross-site scripting (XSS) vulnerability in the Your_Account module for PHP-Nuke 5.0 through 6.0 allows remote attacker…
-
Unscored —CVE-2003-1397 Public exploit
The PluginContext object of Opera 6.05 and 7.0 allows remote attackers to cause a denial of service (crash) via an HTTP…
-
Unscored —CVE-2003-1386 Public exploit
AXIS 2400 Video Server 2.00 through 2.33 allows remote attackers to obtain sensitive information via an HTTP request to…
-
Unscored —CVE-2007-5579 Public exploit
login.php in Pligg CMS 9.5 uses a guessable confirmation code when resetting a forgotten password, which allows remote …
-
Unscored —
PHP remote file inclusion vulnerability in djpage.php in PHPDJ 0.5 allows remote attackers to execute arbitrary PHP cod…
-
Unscored —CVE-2007-5567 Public exploit
PHP remote file inclusion vulnerability in _lib/fckeditor/upload_config.php in Galmeta Post 0.11 allows remote attacker…
-
Unscored —CVE-2007-5573 Public exploit
PHP remote file inclusion vulnerability in classes/core/language.php in LimeSurvey 1.5.2 and earlier allows remote atta…
-
Unscored —CVE-2007-5562 Public exploit
Cross-site scripting (XSS) vulnerability in cgi-bin/welcome (aka the login page) in Netgear SSL312 PROSAFE SSL VPN-Conc…
-
Unscored —CVE-2002-2300 Public exploit
Buffer overflow in ftpd 5.4 in 3Com NBX 4.0.17 or ftpd 5.4.2 in 3Com NBX 4.1.4 allows remote attackers to cause a denia…
-
Unscored —
Buffer overflow in Webster HTTP Server allows remote attackers to execute arbitrary code via a long URL.
-
Unscored —CVE-2002-2296 Public exploit
Cross-site scripting (XSS) vulnerability in YaBB.pl in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 allows remote atta…
-
Unscored —CVE-2002-2288 Public exploit
Mambo Site Server 4.0.11 allows remote attackers to obtain the physical path of the server via an HTTP request to index…
-
Unscored —CVE-2002-2287 Public exploit
PHP remote file inclusion vulnerability in quick_reply.php for phpBB Advanced Quick Reply Hack 1.0.0 and 1.1.0 allows r…
-
Unscored —CVE-2002-2298 Public exploit
PHP remote file inclusion vulnerability in config.php in Thatware 0.3 through 0.5.3 allows remote attackers to execute …
-
Unscored —CVE-2002-2304 Public exploit
SQL injection vulnerability in admin/auth/checksession.php in MyPHPLinks 2.1.9 and 2.2.0 allows remote attackers to exe…
-
Unscored —
Symantec Java! JIT (Just-In-Time) Compiler for Netscape Communicator 4.0 through 4.8 allows remote attackers to execute…
-
Unscored —CVE-2002-2295 Public exploit
Buffer overflow in Pico Server (pServ) 2.0 beta 1 through beta 5 allows remote attackers to cause a denial of service (…
-
High —CVE-2002-2272 Public exploit
Apache Tomcat DoS via Malicious Get Request
Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values.
-
Unscored —CVE-2000-1244 Public exploit
Computer Associates InoculateIT Agent for Exchange Server does not recognize an e-mail virus attachment if the SMTP hea…