Archive
October 2007
Vulnerabilities first published in this month (UTC), newest first.
970 results · Feed
-
Unscored —CVE-2002-2360 Public exploit
The RPC module in Webmin 0.21 through 0.99, when installed without root or admin privileges, allows remote attackers to…
-
Unscored —CVE-2002-2358 Public exploit
Cross-site scripting (XSS) vulnerability in the FTP view feature in Opera 6.0 and 6.01 through 6.04 allows remote attac…
-
Unscored —
Netgear FM114P firmware 1.3 wireless firewall, when configured to backup configuration information, stores DDNS (DynDNS…
-
Unscored —
HAMweather 2.x allows remote attackers to modify administrative settings and obtain sensitive information via a direct …
-
Unscored —
Kaspersky Anti-Hacker 1.0, when configured to automatically block attacks, allows remote attackers to block IP addresse…
-
Unscored —
Cross-site scripting (XSS) vulnerability in read.php in Phorum 3.3.2a allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2002-2341 Public exploit
Cross-site scripting (XSS) vulnerability in content blocking in SonicWALL SOHO3 6.3.0.0 allows remote attackers to inje…
-
Unscored —
phpBB 2.0 through 2.0.3 generates names for uploaded avatar files with the hex-encoded IP address of the client system,…
-
Unscored —
The NBActiveX.ocx ActiveX control in NeoBook 4 allows remote attackers to install and execute arbitrary programs.
-
Unscored —CVE-2002-2353 Public exploit
tftpd32 2.50 and 2.50.2 allows remote attackers to read or write arbitrary files via a full pathname in GET and PUT req…
-
Unscored —
Bannermatic 1, 2, and 3 stores the (1) ban.log, (2) ban.bak, (3) ban.dat and (4) banmat.pwd data files under the web do…
-
Unscored —
The installer in Yahoo! Messenger 4.0, 5.0 and 5.5 does not verify package signatures which could allow remote attacker…
-
Unscored —CVE-2002-2359 Public exploit
Cross-site scripting (XSS) vulnerability in the FTP view feature in Mozilla 1.0 allows remote attackers to inject arbit…
-
Unscored —CVE-2002-2348 Public exploit
Cross-site scripting (XSS) vulnerability in athcgi.exe in Authoria HR allows remote attackers to inject arbitrary web s…
-
Unscored —
The Java Virtual Machine (JVM) in Sun Java Runtime Environment (JRE) in SDK and JRE 1.3.x through 1.3.1_20 and 1.4.x th…
-
Unscored —
ParseFTPList.cpp in Mozilla Firefox 2.0.0.7 allows remote FTP servers to cause a denial of service (application crash) …
-
Unscored —CVE-2007-5688 Public exploit
Multiple SQL injection vulnerabilities in directory.php in the Multi-Forums (aka Multi Host Forum Pro) module 1.3.3, fo…
-
Unscored —
Buffer overflow in sethdlc.c in the Asterisk Zaptel 1.4.5.1 might allow local users to gain privileges via a long devic…
-
Unscored —
(1) xenbaked and (2) xenmon.py in Xen 3.1 and earlier allow local users to truncate arbitrary files via a symlink attac…
-
Unscored —
initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain s…
-
Unscored —
Multiple buffer overflows in the rich text processing functionality in JustSystems Ichitaro 2004 through 2007, 11 throu…
-
Unscored —CVE-2007-5685 Public exploit
The safe_path function in shttp before 0.0.5 allows remote attackers to conduct directory traversal attacks and read fi…
-
Unscored —
W3Mail 1.0.2 through 1.0.5 with server side scripting (SSI) enabled in the attachments directory does not properly rest…
-
Unscored —
Eudora email client 5.1.1, with "use Microsoft viewer" enabled, allows remote attackers to execute arbitrary programs v…
-
Unscored —
Unspecified vulnerability in the environmental monitoring subsystem in Solaris 8 running on Sun Fire 280R, V480 and V88…
-
Unscored —CVE-2002-2312 Public exploit
Opera 6.0.1 allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaS…
-
Unscored —CVE-2002-2321 Public exploit
Cross-site scripting (XSS) vulnerability in (1) showcat.php and (2) addyoursite.php in phpLinkat 0.1.0 allows remote at…
-
Unscored —
Cross-site scripting (XSS) vulnerability in stat.pl in StatsPlus 1.25 allows remote attackers to inject arbitrary web s…
-
Unscored —
Buffer overflow in konqueror in KDE 2.1 through 3.0 and 3.0.2 allows remote attackers to cause a denial of service (cra…
-
Unscored —
Sun PC NetLink 1.0 through 1.2 does not properly set the access control list (ACL) for files and directories that use s…
-
Unscored —CVE-2002-2309 Public exploit
php.exe in PHP 3.0 through 4.2.2, when running on Apache, does not terminate properly, which allows remote attackers to…
-
Unscored —
Microsoft Internet Explorer 6.0 and possibly others allows remote attackers to upload arbitrary file contents when user…
-
Unscored —
Buffer overflow in Opera 6.01 allows remote attackers to cause a denial of service (crash) via an IMG tag with large wi…
-
Unscored —
Cisco Catalyst 4000 series switches running CatOS 5.5.5, 6.3.5, and 7.1.2 do not always learn MAC addresses from a sing…
-
Unscored —CVE-2002-2335 Public exploit
Killer Protection 1.0 stores the vars.inc include file under the web root with insufficient access control, which allow…
-
Unscored —CVE-2002-2314 Public exploit
Mozilla 1.0 allows remote attackers to steal cookies from other domains via a javascript: URL with a leading "//" and e…
-
Unscored —CVE-2002-2328 EPSS 17%
Active Directory in Windows 2000, when supporting Kerberos V authentication and GSSAPI, allows remote attackers to caus…
-
Unscored —CVE-2002-2319 Public exploit
Static code injection vulnerability in users.php in MySimpleNews allows remote attackers to inject arbitrary PHP code a…
-
Unscored —
Joe text editor 2.8 through 2.9.7 does not remove the group and user setuid bits for backup files, which could allow lo…
-
Unscored —
Netscape Communicator 6.2.1 allows remote attackers to cause a denial of service in client browsers via a webpage conta…