Archive
October 2007
Vulnerabilities first published in this month (UTC), newest first.
970 results · Feed
-
Unscored —
Unspecified vulnerability in VMware Server before 1.0.4 causes user passwords to be recorded in cleartext in server log…
-
Unscored —
Unquoted Windows search path vulnerability in the Authorization and other services in VMware Player 1.0.x before 1.0.5 …
-
Unscored —
Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allow remote attackers to execute arbitrary Javascript with u…
-
Unscored —
Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5, when running on Linux systems with gnome-vfs support, might …
-
Unscored —
Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 can hide the window's titlebar when displaying XUL markup lan…
-
Unscored —
Multiple vulnerabilities in the Javascript engine in Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and Se…
-
Unscored —
Multiple vulnerabilities in Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and SeaMonkey before 1.1.5 allo…
-
Unscored —
Stack-based buffer overflow in the Database Component in MPAMedia.dll in RealNetworks RealPlayer 10.5 and 11 beta, and …
-
Unscored —CVE-2003-1419 Public exploit
Netscape 7.0 allows remote attackers to cause a denial of service (crash) via a web page with an invalid regular expres…
-
Unscored —
Petitforum stores the liste.txt data file under the web document root with insufficient access control, which allows re…
-
Unscored —CVE-2003-1411 Public exploit
PHP remote file inclusion vulnerability in emailreader_execute_on_each_page.inc.php in Cedric Email Reader 0.4 allows r…
-
Unscored —
BisonFTP Server 4 release 2 allows remote attackers to cause a denial of service (CPU consumption) via a long (1) ls or…
-
Unscored —CVE-2003-1427 Public exploit
Directory traversal vulnerability in the web configuration interface in Netgear FM114P 1.4 allows remote attackers to r…
-
Unscored —
nCipher Support Software 6.00, when using generatekey KeySafe to import keys, does not delete the temporary copies of t…
-
Unscored —CVE-2003-1410 Public exploit
PHP remote file inclusion vulnerability in email.php (aka email.php3) in Cedric Email Reader 0.2 and 0.3 allows remote …
-
Unscored —
Multiple unspecified vulnerabilities in the installer for SYSLINUX 2.01, when running setuid root, allow local users to…
-
Unscored —
foo.php3 in DotBr 0.1 allows remote attackers to obtain sensitive information via a direct request, which calls the php…
-
Unscored —
message.php in Petitforum does not properly authenticate users, which allows remote attackers to impersonate forum user…
-
Unscored —
DotBr 0.1 stores config.inc with insufficient access control under the web document root, which allows remote attackers…
-
Unscored —
Gallery 1.3.3 creates directories with insecure permissions, which allows local users to read, modify, or delete photos.
-
Unscored —
NetCharts XBRL Server 4.0.0 allows remote attackers to obtain sensitive information via an HTTP request with an invalid…
-
Unscored —
Lotus Domino Server 5.0 and 6.0 allows remote attackers to read the source code for files via an HTTP request with a fi…
-
Unscored —
guestbook.cgi in cPanel 5.0 allows remote attackers to execute arbitrary commands via the template parameter.
-
Unscored —
Openwebmail in cPanel 5.0, when run using suid Perl, adds the directory in the SCRIPT_FILENAME environment variable to …
-
Unscored —
Apache HTTP Server 1.3.22 through 1.3.27 on OpenBSD allows remote attackers to obtain sensitive information via (1) the…
-
Unscored —CVE-2003-1412 Public exploit
PHP remote file inclusion vulnerability in index.php for GONiCUS System Administrator (GOsa) 1.0 allows remote attacker…
-
Unscored —CVE-2003-1407 Public exploit
Buffer overflow in cmd.exe in Windows NT 4.0 may allow local users to execute arbitrary code via a long pathname argume…
-
Unscored —
PHP remote file inclusion vulnerability in hit.php for Kietu 2.0 and 2.3 allows remote attackers to execute arbitrary P…
-
Unscored —CVE-2003-1409 Public exploit
TOPo 1.43 allows remote attackers to obtain sensitive information by sending an HTTP request with an invalid parameter …
-
Unscored —
parse_xml.cgi in Apple Darwin Streaming Server 4.1.1 allows remote attackers to determine the existence of arbitrary fi…
-
Unscored —CVE-2003-1401 Public exploit
login.php in php-Board 1.0 stores plaintext passwords in $username.txt with insufficient access control under the web d…
-
Unscored —
Unspecified vulnerability in mod_mysql_logger shared object in SuckBot 0.006 allows remote attackers to cause a denial …
-
Unscored —CVE-2003-1406 Public exploit
PHP remote file inclusion vulnerability in D-Forum 1.00 through 1.11 allows remote attackers to execute arbitrary PHP c…
-
Unscored —CVE-2003-1414 Public exploit
Directory traversal vulnerability in parse_xml.cg Apple Darwin Streaming Server 4.1.2 and Apple Quicktime Streaming Ser…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Opera 6.0 through 7.0 with automatic redirection disabled allows remote att…
-
Unscored —CVE-2003-1405 Public exploit
DotBr 0.1 allows remote attackers to execute arbitrary shell commands via the cmd parameter to (1) exec.php3 or (2) sys…
-
Unscored —CVE-2007-5589 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.11.1.2 allow remote attackers to inject arbi…
-
Unscored —
Multiple buffer overflows in Miranda before 0.7.1 allow remote attackers to execute arbitrary code via unspecified vect…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Weblinks for Drupal 4.7.x before 4.7.x-1.0 and 5.x before 5.x-1.8 allows re…
-
Medium —
Moderate severity vulnerability that affects rails
Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers and ActiveResource servers to determine the existence of arbitrary files and read arbitrary XML files via the Hash.from_xml (Hash#from_xml) method, which uses XmlSimple (XML::Simple) unsaf…