Archive
October 2007
Vulnerabilities first published in this month (UTC), newest first.
327 results · Clear filters · Feed
-
Unscored —CVE-2007-5488 Public exploit
Multiple SQL injection vulnerabilities in cdr_addon_mysql in Asterisk-Addons before 1.2.8, and 1.4.x before 1.4.4, allo…
-
Unscored —CVE-2007-5508 Public exploit
Multiple SQL injection vulnerabilities in the CTXSYS Intermedia application for the Oracle Text component (CTX_DOC) in …
-
Unscored —
SQL injection vulnerability in Workspace Manager for Oracle Database before OWM 10.2.0.4.1, OWM 10.1.0.8.0, and OWM 9.2…
-
Unscored —CVE-2007-5490 Public exploit
SQL injection vulnerability in default.asp in Okul Otomasyon Portal 2.0 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2007-5489 Public exploit
Directory traversal vulnerability in index.php in Artmedic CMS 3.4 and earlier allows remote attackers to include and e…
-
Unscored —CVE-2003-1371 Public exploit
Nuked-Klan 1.3b, and possibly earlier versions, allows remote attackers to obtain sensitive server information via an o…
-
Unscored —CVE-2003-1372 Public exploit
Cross-site scripting (XSS) vulnerability in links.php script in myPHPNuke 1.8.8, and possibly earlier versions, allows …
-
Unscored —CVE-2003-1366 Public exploit
chpass in OpenBSD 2.0 through 3.2 allows local users to read portions of arbitrary files via a hard link attack on a te…
-
Unscored —CVE-2003-1358 Public exploit
rs.F300 for HP-UX 10.0 through 11.22 uses the PATH environment variable to find and execute programs such as rm while o…
-
Unscored —CVE-2003-1359 Public exploit
Buffer overflow in stmkfont utility of HP-UX 10.0 through 11.22 allows local users to gain privileges via a long comman…
-
Unscored —CVE-2003-1369 Public exploit
Buffer overflow in ByteCatcher FTP client 1.04b allows remote attackers to cause a denial of service (crash) and possib…
-
Unscored —CVE-2003-1368 Public exploit
Buffer overflow in the 32bit FTP client 9.49.1 allows remote attackers to cause a denial of service (crash) and possibl…
-
Unscored —CVE-2003-1364 Public exploit
Aprelium Technologies Abyss Web Server 1.1.2, and possibly other versions before 1.1.4, allows remote attackers to caus…
-
Unscored —CVE-2007-5485 Public exploit
SQL injection vulnerability in index.php in the mg2 1.0 module for KwsPHP allows remote attackers to execute arbitrary …
-
Unscored —CVE-2007-5487 Public exploit
Stack-based buffer overflow in COWON America jetAudio Basic 7.0.3 allows user-assisted remote attackers to execute arbi…
-
Unscored —CVE-2007-5480 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in InnovaAge InnovaShop allow remote attackers to inject arbitrary …
-
Unscored —CVE-2007-5484 Public exploit
Directory traversal vulnerability in wxis.exe in WWWISIS 7.1 allows local users to read arbitrary files via a .. (dot d…
-
Unscored —CVE-2007-5478 Public exploit
Cross-site scripting (XSS) vulnerability in projects in Nabh Stringbeans Portal (sbportal) 3.2 allows remote attackers …
-
Unscored —CVE-2007-5465 Public exploit
Directory traversal vulnerability in doop CMS 1.3.7 and earlier allows remote attackers to include and execute arbitrar…
-
Unscored —
Multiple buffer overflows in eXtremail 2.1.1 and earlier allow remote attackers to (1) have an unknown impact by sendin…
-
Unscored —
Integer overflow in eXtremail 2.1.1 and earlier allows remote attackers to cause a denial of service, and possibly exec…
-
Unscored —CVE-2007-5464 Public exploit
Stack-based buffer overflow in Live for Speed 0.5X10 and earlier allows remote authenticated users to cause a denial of…
-
Low —
Apache Tomcat Path Traversal Vulnerability
Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that s…
-
Unscored —CVE-2002-2258 Public exploit
Moby NetSuite allows remote attackers to cause a denial of service (crash) via an HTTP POST request with a (1) large in…
-
Unscored —CVE-2002-2246 Public exploit
Cross-site scripting (XSS) vulnerability in VisNetic Website before 3.5.15 allows remote attackers to inject arbitrary …
-
Unscored —CVE-2002-2247 Public exploit
The administrator/phpinfo.php script in Mambo Site Server 4.0.11 allows remote attackers to obtain sensitive informatio…
-
Unscored —CVE-2002-2249 Public exploit
PHP remote file inclusion vulnerability in News Evolution 2.0 allows remote attackers to execute arbitrary PHP commands…
-
Unscored —CVE-2002-2255 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in phpBB 2.0.3 and possibly earlier versions allows remote attac…
-
Unscored —CVE-2002-2235 Public exploit
member2.php in vBulletin 2.2.9 and earlier does not properly restrict the $perpage variable to be an integer, which cau…
-
Unscored —CVE-2002-2232 Public exploit
Buffer overflow in Enceladus Server Suite 3.9 allows remote attackers to execute arbitrary code via a long CD (CWD) com…
-
Unscored —CVE-2002-2251 Public exploit
Buffer overflow in the changevalue function in libcgi.h for Marcos Luiz Onisto Lib CGI 0.1 allows remote attackers to e…
-
Unscored —CVE-2003-1348 Public exploit
Cross-site scripting (XSS) vulnerability in guestbook.cgi in ftls.org Guestbook 1.1 allows remote attackers to inject a…
-
Unscored —CVE-2003-1350 Public exploit
List Site Pro 2.0 allows remote attackers to hijack user accounts by inserting a "|" (pipe), which is used as a field d…
-
Unscored —CVE-2003-1342 Public exploit
Trend Micro Virus Control System (TVCS) 1.8 running with IIS allows remote attackers to cause a denial of service (memo…
-
Unscored —CVE-2003-1343 Public exploit
Trend Micro ScanMail for Exchange (SMEX) before 3.81 and before 6.1 might install a back door account in smg_Smxcfg30.e…
-
Unscored —CVE-2003-1354 Public exploit
Multiple GameSpy 3D 2.62 compatible gaming servers generate very large UDP responses to small requests, which allows re…
-
Unscored —CVE-2003-1347 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Geeklog 1.3.7 allow remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2003-1355 Public exploit
Buffer overflow in the remote console (rcon) in Battlefield 1942 1.2 and 1.3 allows remote attackers to cause a denial …
-
Unscored —CVE-2003-1341 Public exploit
The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentic…
-
Unscored —CVE-2003-1344 Public exploit
Trend Micro Virus Control System (TVCS) Log Collector allows remote attackers to obtain usernames, encrypted passwords,…