Archive
October 2007
Vulnerabilities first published in this month (UTC), newest first.
970 results · Feed
-
Unscored —
Unspecified vulnerability in the "stack unwinder fixes" in kernel in Red Hat Enterprise Linux 5, when running on AMD64 …
-
Unscored —
The eHCA driver in Linux kernel 2.6 before 2.6.22, when running on PowerPC, does not properly map userspace resources, …
-
Unscored —
Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (CPU consumption or cras…
-
Unscored —CVE-2003-1430 Public exploit
Directory traversal vulnerability in Unreal Tournament Server 436 and earlier allows remote attackers to access known f…
-
Unscored —
SpamProbe 0.8a allows remote attackers to cause a denial of service (crash) via HTML e-mail with newline characters wit…
-
Unscored —CVE-2003-1452 Public exploit
Untrusted search path vulnerability in Qualcomm qpopper 4.0 through 4.05 allows local users to execute arbitrary code b…
-
Unscored —CVE-2003-1461 Public exploit
Buffer overflow in rwrite for HP-UX 11.0 could allow local users to execute arbitrary code via a long argument. NOTE: t…
-
Unscored —
Buffer overflow in Symantec Norton AntiVirus 2002 allows remote attackers to execute arbitrary code via an e-mail attac…
-
Unscored —
SQL injection vulnerability in Profile.php in ttCMS 2.2 and ttForum allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2003-1453 Public exploit
Cross-site scripting (XSS) vulnerability in the MytextSanitizer function in XOOPS 1.3.5 through 1.3.9 and XOOPS 2.0 thr…
-
Unscored —CVE-2003-1459 Public exploit
Multiple PHP remote file inclusion vulnerabilities in ttCMS 2.2 and ttForum allow remote attackers to execute arbitrary…
-
Unscored —
IBM WebSphere Advanced Server Edition 4.0.4 uses a weak encryption algorithm (XOR and base64 encoding), which allows lo…
-
Unscored —
Multiple buffer overflows in the launch_bcrelay function in pptpctrl.c in PoPToP 1.1.4-b1 through PoPToP 1.1.4-b3 allow…
-
Unscored —
Race condition in BEA WebLogic Server and Express 5.1 through 7.0.0.1, when using in-memory session replication or repl…
-
Unscored —
Buffer overflow in Proxomitron Naoko 4.4 allows remote attackers to execute arbitrary code via a long request.
-
Unscored —
BEA WebLogic Express and WebLogic Server 7.0 and 7.0.0.1, stores passwords in plaintext when a keystore is used to stor…
-
Unscored —CVE-2003-1442 Public exploit
The web administration page for the Ericsson HM220dp ADSL modem does not require authentication, which could allow remo…
-
Unscored —
Worker Filemanager 1.0 through 2.7 sets the permissions on the destination directory to world-readable and executable w…
-
Unscored —CVE-2003-1445 Public exploit
Stack-based buffer overflow in Far Manager 1.70beta1 and earlier allows local users to cause a denial of service (crash…
-
Unscored —
Buffer overflow in the save_into_file function in save.c for Rogue 5.2-2 allows local users to execute arbitrary code w…
-
Unscored —
Aladdin Knowlege Systems eSafe Gateway 3.5.126.0 does not check the entire stream of Content Vectoring Protocol (CVP) d…
-
Unscored —CVE-2003-1435 Public exploit
SQL injection vulnerability in PHP-Nuke 5.6 and 6.0 allows remote attackers to execute arbitrary SQL commands via the d…
-
Unscored —
Secure Internet Live Conferencing (SILC) 0.9.11 and 0.9.12 stores passwords and sessions in plaintext in memory, which …
-
Unscored —CVE-2003-1450 Public exploit
BitchX 75p3 and 1.0c16 through 1.0c20cvs allows remote attackers to cause a denial of service (segmentation fault) via …
-
Unscored —CVE-2003-1448 EPSS 15%
Memory leak in the Windows 2000 kernel allows remote attackers to cause a denial of service (SMB request hang) via a Ne…
-
Unscored —CVE-2003-1436 Public exploit
PHP remote file inclusion vulnerability in nukebrowser.php in Nukebrowser 2.1 to 2.5 allows remote attackers to execute…
-
Unscored —
Auerswald COMsuite CTI ControlCenter 3.1 creates a default "runasositron" user account with an easily guessable passwor…
-
Unscored —CVE-2003-1456 Public exploit
Album.pl 6.1 allows remote attackers to execute arbitrary commands, when an alternative configuration file is used, via…
-
Unscored —
Kaspersky Antivirus (KAV) 4.0.9.0 allows local users to cause a denial of service (CPU consumption or crash) and preven…
-
Unscored —CVE-2003-1431 Public exploit
Buffer overflow in Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (cras…
-
Unscored —
Kaspersky Antivirus (KAV) 4.0.9.0 does not detect viruses in files with MS-DOS device names in their filenames, which a…
-
Unscored —
Posadis 0.50.4 through 0.50.8 allows remote attackers to cause a denial of service (crash) via a DNS message without a …
-
Unscored —
login_ldap 3.1 and 3.2 allows remote attackers to initiate unauthenticated bind requests if (1) bind_anon_dn is on, whi…
-
Unscored —
Invision Power Services Invision Board 1.0 through 1.1.1, when a forum is password protected, stores the administrator …
-
Unscored —
Epic Games Unreal Engine 226f through 436 does not validate the challenge key, which allows remote attackers to exhaust…
-
Unscored —CVE-2007-5190 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Alcatel OmniVista 4760 R4.2 and earlier allow remote attackers t…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the Token module before 4.7.x-1.5, and 5.x before 5.x-1.9, for D…
-
Unscored —CVE-2007-5620 Public exploit
Directory traversal vulnerability in admin/inc/help.php in ZZ:FlashChat 3.1 and earlier allows remote attackers to incl…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Server component in CA Host-Based Intrusion Prevention System (HIPS) be…
-
Unscored —
Unspecified vulnerability in VMware Player 1.0.x before 1.0.5 and 2.0 before 2.0.1, and Workstation 5.x before 5.5.5 an…