Archive
October 2007
Vulnerabilities first published in this month (UTC), newest first.
970 results · Feed
-
Unscored —CVE-2003-1469 Public exploit
The default configuration of ColdFusion MX has the "Enable Robust Exception Information" option selected, which allows …
-
Unscored —
FlashFXP 1.4 uses a weak encryption algorithm for user passwords, which allows attackers to decrypt the passwords and g…
-
Unscored —
SQL injection vulnerability in the Music module in phpBasic allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2007-5677 Public exploit
Cross-site scripting (XSS) vulnerability in shoutbox/blocco.php in Hackish BETA 1.1 allows remote attackers to inject a…
-
Unscored —CVE-2007-5674 Public exploit
Directory traversal vulnerability in index.php in InstaGuide Weather (aka Weather for PHP) 1.0, when magic_quotes_gpc i…
-
Unscored —CVE-2007-5676 Public exploit
PHP remote file inclusion vulnerability in modules/Forums/favorites.php in PHP-Nuke Platinum 7.6.b.5 allows remote atta…
-
Unscored —
Stack-based buffer overflow in the DebugPrint function in MultiXTpm Application Server before 4.0.2d allows remote atta…
-
Unscored —
Cross-site scripting (XSS) vulnerability in cgi-bin/webif.exe in ifnet WebIf allows remote attackers to inject arbitrar…
-
Unscored —
Mozilla Firefox 2.0 before 2.0.0.8 allows remote attackers to obtain sensitive system information by using the addMicro…
-
Unscored —CVE-2007-5643 Public exploit
Multiple SQL injection vulnerabilities in Lussumo Vanilla 1.1.3 and earlier allow remote attackers to execute arbitrary…
-
Unscored —CVE-2007-5649 Public exploit
Cross-site scripting (XSS) vulnerability in lostpwd.php in Creative Digital Resources SocketMail 2.2.1 allows remote at…
-
Unscored —CVE-2007-5646 Public exploit
SQL injection vulnerability in Sources/Search.php in Simple Machines Forum (SMF) 1.1.3, when MySQL 5 is used, allows re…
-
Unscored —CVE-2007-5648 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in rnote.php in rNote 0.9.7.5 allow remote attackers to inject arbi…
-
Unscored —
Unspecified vulnerability in the Extensible Authentication Protocol (EAP) implementation in Cisco IOS 12.3 and 12.4 on …
-
Unscored —
LiteSpeed Web Server before 3.2.4 allows remote attackers to trigger use of an arbitrary MIME type for a file via a "%0…
-
Unscored —CVE-2007-5653 Public exploit
The Component Object Model (COM) functions in PHP 5.x on Windows do not follow safe_mode and disable_functions restrict…
-
Unscored —CVE-2007-5644 Public exploit
Lussumo Vanilla 1.1.3 and earlier does not require admin privileges for (1) ajax/sortcategories.php and (2) ajax/sortro…
-
Unscored —CVE-2007-5650 Public exploit
Directory traversal vulnerability in system.php in ReloadCMS 1.2.7 allows remote attackers to include and execute arbit…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in PHP Project Management 0.8.10 and earlier allow remote attackers …
-
Unscored —CVE-2007-5647 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in SocketKB 1.1.5 allow remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2007-5642 Public exploit
Multiple directory traversal vulnerabilities in PHP Project Management 0.8.10 and earlier allow remote attackers to inc…
-
Unscored —
IBM DB2 UDB 9.1 before Fixpak 4 does not properly manage storage of a list containing authentication information, which…
-
Unscored —
Multiple unspecified vulnerabilities in the kernel in Sun Solaris 8 through 10 allow local users to cause a denial of s…
-
Unscored —CVE-2007-5630 Public exploit
SQL injection vulnerability in tnews.php in BBsProcesS BBPortalS 1.5.10 through 2.0 allows remote attackers to execute …
-
Unscored —
Multiple unspecified vulnerabilities in Salford Software Support Incident Tracker (SiT!) before 3.30 have unknown impac…
-
Unscored —
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Commun…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in PeopleAggregator 1.2pre6, when register_globals is enabled, allow…
-
Unscored —CVE-2007-5636 Public exploit
Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service (applicati…
-
Unscored —CVE-2007-5637 Public exploit
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Commun…
-
Unscored —
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets…
-
Unscored —CVE-2007-5633 Public exploit
Speedfan.sys in Alfredo Milani Comparetti SpeedFan 4.33, when used on Microsoft Windows Vista x64, allows local users t…
-
Unscored —
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Commun…
-
Unscored —
Speedfan.sys in Alfredo Milani Comparetti SpeedFan 4.33, when used on Microsoft Windows Vista x64, does not properly ch…
-
Unscored —
PHP remote file inclusion vulnerability in src/scripture.php in The Online Web Library Site (TOWels) 0.1 allows remote …
-
Unscored —CVE-2007-5625 Public exploit
Cross-site scripting (XSS) vulnerability in filename.asp in ASP Site Search SearchSimon Lite 1.0 allows remote attacker…
-
Unscored —
Buffer overflow in the check_snmp function in Nagios Plugins (nagios-plugins) 1.4.10 allows remote attackers to cause a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Nagios 2.x before 2.10 allows remote attackers to inject arbitrary web scri…
-
Unscored —
make_catalog_backup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command line argument, and somet…
-
Unscored —
Cross-site scripting (XSS) vulnerability in admin/logon.asp in ShoppingTree CandyPress Store 4.1 allows remote attacker…
-
Unscored —CVE-2007-5627 Public exploit
PHP remote file inclusion vulnerability in content/fnc-readmail3.php in SocketMail 2.2.8 allows remote attackers to exe…