Archive
October 2007
Vulnerabilities first published in this month (UTC), newest first.
970 results · Feed
-
Unscored —
ClickCartPro 4.0 stores the admin_user.db data file under the web document root with insufficient access control on ser…
-
Unscored —
The default configuration of BenHur Firewall release 3 update 066 fix 2 allows remote attackers to access arbitrary ser…
-
Unscored —
The default configuration of Mail.app in Mac OS X 10.0 through 10.0.4 and 10.1 through 10.1.5 sends iDisk authenticatio…
-
Unscored —CVE-2002-2318 Public exploit
Cross-site scripting (XSS) vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to …
-
Unscored —CVE-2002-2325 Public exploit
The c-client library in Internet Message Access Protocol (IMAP) dated before 2002 RC2, as used by Pine 4.20 through 4.4…
-
Unscored —
Ultimate PHP Board (UPB) 1.0b stores the users.dat data file under the web root with insufficient access control, which…
-
Unscored —
The "System Restore" directory and subdirectories, and possibly other subdirectories in the "System Volume Information"…
-
Unscored —
Memory leak in the (1) httpd, (2) nntpd, and (3) vpn driver in VelociRaptor 1.0 allows remote attackers to cause a deni…
-
Unscored —CVE-2002-2315 Public exploit
Cisco IOS 11.2.x and 12.0.x does not limit the size of its redirect table, which allows remote attackers to cause a den…
-
Unscored —
ICQ client 2001b, 2002a and 2002b allows remote attackers to cause a denial of service (CPU consumption or crash) via a…
-
Unscored —
MySimpleNews 1.0 allows remote attackers to delete arbitrary email messages via a direct request to vider.php3.
-
Unscored —
BlackICE Defender 2.9.cap and Server Protection 3.5.cdf, when configured to automatically block attacks, allows remote …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in TikiWiki 1.9.8.1 and earlier allow remote attackers to inject ar…
-
Unscored —
Incomplete blacklist vulnerability in tiki-graph_formula.php in TikiWiki before 1.9.8.2 allows remote attackers to exec…
-
Unscored —CVE-2007-5684 Public exploit
Multiple directory traversal vulnerabilities in TikiWiki 1.9.8.1 and earlier allow remote attackers to include and exec…
-
Unscored —
Unspecified vulnerability in the non-SSL web agent in various HP Management Agent products allows local users or remote…
-
Unscored —
Unspecified vulnerability in My Photo Gallery 3.5, and possibly earlier versions, has unknown impact and attack vectors.
-
Unscored —CVE-2003-1506 Public exploit
Cross-site scripting (XSS) vulnerability in dansguardian.pl in Adelix CensorNet 3.0 through 3.2 allows remote attackers…
-
Unscored —CVE-2003-1513 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in example scripts in Caucho Technology Resin 2.0 through 2.1.2 all…
-
Unscored —CVE-2003-1519 Public exploit
Cross-site scripting (XSS) vulnerability in Vivisimo clustering engine allows remote attackers to inject arbitrary web …
-
Unscored —
TinyWeb 1.9 allows remote attackers to cause a denial of service (CPU consumption) via a ".%00." in an HTTP GET request…
-
Unscored —CVE-2003-1517 Public exploit
cart.pl in Dansie shopping cart allows remote attackers to obtain the installation path via an invalid db parameter, wh…
-
Unscored —
Buffer overflow in the system log viewer of Linksys BEFSX41 1.44.3 allows remote attackers to cause a denial of service…
-
Unscored —
PGPi PGPDisk 6.0.2i does not unmount a PGP partition when the switch user function in Windows XP is used, which could a…
-
Unscored —
Buffer overflow in AOL Instant Messenger (AIM) 5.2.3292 allows remote attackers to execute arbitrary code via an aim:ge…
-
Unscored —
Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (crash) by creating a web page or …
-
Unscored —
Real Networks RealOne Enterprise Desktop 6.0.11.774, RealOne Player 2.0, and RealOne Player 6.0.11.818 through RealOne …
-
Unscored —CVE-2003-1498 Public exploit
Cross-site scripting (XSS) vulnerability in search.php for WRENSOFT Zoom Search Engine 2.0 Build 1018 and earlier allow…
-
Unscored —CVE-2003-1520 Public exploit
SQL injection vulnerability in FuzzyMonkey My Classifieds 2.11 allows remote attackers to execute arbitrary SQL command…
-
Unscored —
Origo ASR-8100 ADSL Router 3.21 has an administration service running on port 254 that does not require a password, whi…
-
Unscored —CVE-2003-1516 Public exploit
The org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.2_01 allows signed and unsigned applets to…
-
Unscored —CVE-2003-1499 Public exploit
Directory traversal vulnerability in index.php in Bytehoard 0.7 allows remote attackers to read arbitrary files via a .…
-
Unscored —
PHP remote file inclusion vulnerability in _functions.php in cpCommerce 0.5f allows remote attackers to execute arbitra…
-
Unscored —
SQL injection vulnerability in the IMAP daemon in dbmail 1.1 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —
Unspecified vulnerability in CDE dtmailpr of HP Tru64 4.0F through 5.1B allows local users to gain privileges via unkno…
-
Unscored —
Directory traversal vulnerability in the file upload CGI of Gast Arbeiter 1.3 allows remote attackers to write arbitrar…
-
Unscored —CVE-2003-1511 Public exploit
Cross-site scripting (XSS) vulnerability in Bajie Java HTTP Server 0.95 through 0.95zxv4 allows remote attackers to inj…
-
Unscored —CVE-2003-1521 Public exploit
Sun Java Plug-In 1.4 through 1.4.2_02 allows remote attackers to repeatedly access the floppy drive via the createXmlDo…
-
Unscored —
PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such as (1) ", (2) ', or (3…
-
Unscored —CVE-2003-1504 Public exploit
SQL injection vulnerability in variables.php in Goldlink 3.0 allows remote attackers to execute arbitrary SQL commands …