Archive
October 2007
Vulnerabilities first published in this month (UTC), newest first.
970 results · Feed
-
Unscored —
Buffer overflow in mIRC 6.12, when the DCC get dialog window has been minimized and the user opens the minimized window…
-
Unscored —
mod_throttle 3.0 allows local users with Apache privileges to access shared memory that points to a file that is writab…
-
Unscored —CVE-2003-1512 Public exploit
Buffer overflow in mIRC 6.1 and 6.11 allows remote attackers to cause a denial of service (crash) via a long DCC SEND r…
-
Unscored —
Planet Technology WGSD-1020 and WSW-2401 Ethernet switches use a default "superuser" account with the "planet" password…
-
Unscored —
eMule 0.29c allows remote attackers to cause a denial of service (crash) via a long password, possibly due to a buffer …
-
Unscored —CVE-2003-1522 Public exploit
Cross-site scripting (XSS) vulnerability in PSCS VPOP3 Web Mail server 2.0e and 2.0f allows remote attackers to inject …
-
Unscored —CVE-2003-1518 Public exploit
Adiscon WinSyslog 4.21 SP1 allows remote attackers to cause a denial of service (CPU consumption) via a long syslog mes…
-
Unscored —CVE-2007-2983 Public exploit
Multiple buffer overflows in the British Telecommunications Consumer webhelper ActiveX control before 2.0.0.8 in btwebc…
-
Unscored —CVE-2007-5679 Public exploit
SQL injection vulnerability in index.php in DeeEmm.com DM CMS 0.7.0.Beta allows remote attackers to execute arbitrary S…
-
Unscored —
Unspecified vulnerability in Phorum 3.4 through 3.4.2 allows remote attackers to use Phorum as a connection proxy to ot…
-
Unscored —
MDaemon POP server 6.0.7 and earlier allows remote authenticated users to cause a denial of service (crash) via a (1) D…
-
Unscored —
Netscape Navigator 7.0.2 and Mozilla allows remote attackers to access cookie information in a different domain via an …
-
Unscored —CVE-2003-1463 Public exploit
Absolute path traversal vulnerability in Alt-N Technologies WebAdmin 2.0.0 through 2.0.2 allows remote attackers with a…
-
Unscored —CVE-2003-1484 EPSS 11%
Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) by creating a DHTML li…
-
Unscored —
Buffer overflow in IMAP service in MDaemon 6.7.5 and earlier allows remote authenticated users to cause a denial of ser…
-
Unscored —CVE-2003-1472 Public exploit
Buffer overflow in 3D-FTP client 4.0 allows remote FTP servers to cause a denial of service (crash) and possibly execut…
-
Unscored —
The backup configuration file for Microsoft MN-500 wireless base station stores administrative passwords in plaintext, …
-
Unscored —
Phorum 3.4 through 3.4.2 allows remote attackers to obtain the full path of the web server via an incorrect HTTP reques…
-
Unscored —
Buffer overflow in Siemens 45 series mobile phones allows remote attackers to cause a denial of service (disconnect and…
-
Unscored —CVE-2003-1473 Public exploit
Buffer overflow in LTris 1.0.1 of FreeBSD Ports Collection 2003-02-25 and earlier allows local users to execute arbitra…
-
Unscored —CVE-2003-1488 Public exploit
The (1) verif_admin.php and (2) check_admin.php scripts in Truegalerie 1.0 allow remote attackers to gain administrator…
-
Unscored —
SonicWall Pro running firmware 6.4.0.1 allows remote attackers to cause a denial of service (device reset) via a long H…
-
Unscored —
Kerio Personal Firewall (KPF) 2.1.4 has a default rule to accept incoming packets from DNS (UDP port 53), which allows …
-
Unscored —CVE-2003-1481 Public exploit
CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which all…
-
Unscored —
Cross-site scripting (XSS) vulnerability in webcamXP 1.02.432 and 1.02.535 allows remote attackers to inject arbitrary …
-
Unscored —
Unspecified vulnerability in HP OpenView Network Node Manager (NNM) 6.2 and 6.4 allows remote attackers to cause a deni…
-
Unscored —
mod_survey 3.0.0 through 3.0.15-pre6 does not check whether a survey exists before creating a subdirectory for it, whic…
-
Unscored —CVE-2003-1478 Public exploit
Konqueror in KDE 3.0.3 allows remote attackers to cause a denial of service (core dump) via a web page that begins with…
-
Unscored —
MAILsweeper for SMTP 4.3.6 and 4.3.7 allows remote attackers to cause a denial of service (CPU consumption) via a Power…
-
Unscored —
Netbus 1.5 through 1.7 allows more than one client to be connected at the same time, but only prompts the first connect…
-
Unscored —CVE-2003-1468 Public exploit
The Web_Links module in PHP-Nuke 6.0 through 6.5 final allows remote attackers to obtain the full web server path via a…
-
Unscored —
Directory traversal vulnerability in download.php in Phorum 3.4 through 3.4.2 allows remote attackers to read arbitrary…
-
Unscored —
upload.php in Truegalerie 1.0 allows remote attackers to read arbitrary files by specifying the target filename in the …
-
Unscored —
Multiple "command injection" vulnerabilities in Phorum 3.4 through 3.4.2 allow remote attackers to execute arbitrary co…
-
Unscored —
Memory leak in HP OpenView Network Node Manager (NNM) 6.2 and 6.4 allows remote attackers to cause a denial of service …
-
Unscored —
Cerberus FTP Server 2.1 stores usernames and passwords in plaintext, which could allow local users to gain access.
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in (1) login.php, (2) register.php, (3) post.php, and (4) common.ph…
-
Unscored —
slashem-tty in the FreeBSD Ports Collection is installed with write permissions for the games group, which allows local…
-
Unscored —CVE-2003-1480 Public exploit
MySQL 3.20 through 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for attackers to decrypt the…
-
Unscored —
Clearswift MAILsweeper 4.0 through 4.3.7 allows remote attackers to bypass filtering via a file attachment that contain…