Archive
1 November 2007
Vulnerabilities first published on this day (UTC), newest first.
55 results · Feed
-
Unscored —
Sygate personal firewall 5.0 could allow remote attackers to bypass firewall filters via spoofed (1) source IP address …
-
Unscored —CVE-2002-2417 Public exploit
acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows…
-
Unscored —
Cross-site scripting (XSS) vulnerability in acFreeProxy (aka acFP) 1.33 beta 7 allows remote attackers to inject arbitr…
-
Unscored —
Photon microGUI in QNX Neutrino realtime operating system (RTOS) 6.1.0 and 6.2.0 allows attackers to read user clipboar…
-
Unscored —
Check Point FireWall-1 4.1 and Next Generation (NG), with UserAuth configured to proxy HTTP traffic only, allows remote…
-
Unscored —CVE-2002-2420 Public exploit
site_searcher.cgi in Super Site Searcher allows remote attackers to execute arbitrary commands via shell metacharacters…
-
Unscored —CVE-2002-2400 Public exploit
Buffer overflow in the httpdProcessRequest function in LibHTTPD 1.2 allows remote attackers to cause a denial of servic…
-
Unscored —
InterScan VirusWall 3.6 for Linux and 3.52 for Windows allows remote attackers to bypass virus protection and possibly …
-
Unscored —
WebSite Pro 3.1.11.0 on Windows allows remote attackers to read script source code for files with extensions greater th…
-
Unscored —
Allied Telesyn AT-8024 1.3.1 and Rapier 24 switches allow remote authenticated users to cause a denial of service in th…
-
Unscored —
Buffer overflow in badmin.c in BannerWheel 1.0 allows remote attackers to execute arbitrary code via a long rcmd comman…
-
Unscored —CVE-2002-2403 Public exploit
Directory traversal vulnerability in KeyFocus web server 1.0.8 allows remote attackers to read arbitrary files for reco…
-
Unscored —
SURECOM broadband router EP-4501 uses a default SNMP read community string of "public" and a default SNMP read/write co…
-
Unscored —
Certain patches for QNX Neutrino realtime operating system (RTOS) 6.2.0 set insecure permissions for the files (1) /sbi…
-
Unscored —
NT Virtual DOS Machine (NTVDM.EXE) in Windows 2000, NT and XP does not verify user execution permissions for 16-bit exe…
-
Unscored —
openwebmail.pl in Open WebMail 1.7 and 1.71 reveals sensitive information in error messages and generates different res…
-
Unscored —
The new thread posting page in APBoard 2.02 and 2.03 allows remote attackers to post messages to protected forums by mo…
-
Unscored —
acWEB 1.14 allows remote attackers to cause a denial of service (crash) via an HTTP request for a MS-DOS device name su…
-
Unscored —CVE-2002-2404 Public exploit
Buffer overflow in IISPop email server 1.161 and 1.181 allows remote attackers to cause a denial of service (crash) via…
-
Unscored —CVE-2002-2422 Public exploit
Cross-site scripting (XSS) vulnerability in Compaq Insight Management Agents 2.0, 2.1, 3.6.0, 4.2 and 4.3.7 allows remo…
-
Unscored —
InterScan VirusWall 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary …
-
Unscored —
Gordano Messaging Server (GMS) Mail 8 (a.k.a. NTMail) only filters email messages for the first recipient, which allows…
-
Unscored —
Winamp 2.80 stores authentication credentials in plaintext in the (1) [HTTP-AUTH] and (2) [winamp] sections in winamp.i…
-
Unscored —CVE-2002-2416 Public exploit
Directory traversal vulnerability in Zeroo web server 1.5 allows remote attackers to read arbitrary files via a .. (dot…
-
Unscored —CVE-2002-2425 Public exploit
Sun AnswerBook2 1.2 through 1.4.2 allows remote attackers to execute administrative scripts such as (1) AdminViewError …
-
Unscored —
Buffer overflow in Advanced TFTP (atftp) 0.5 and 0.6, if installed setuid or setgid, may allow local users to execute a…
-
Unscored —
Opera 6.0.3, when using Squid 2.4 for HTTPS proxying, does not properly handle when accepting a non-global certificate …
-
Unscored —CVE-2002-2424 Public exploit
Cross-site scripting (XSS) vulnerability in PHP(Reactor) 1.2.7 pl1 allows remote attackers to inject arbitrary web scri…
-
Unscored —
Buffer overflow in HTTP server in LiteServe 2.0, 2.0.1 and 2.0.2 allows remote attackers to cause a denial of service (…
-
Unscored —
Sendmail 8.12.0 through 8.12.6 truncates log messages longer than 100 characters, which allows remote attackers to prev…
-
Unscored —CVE-2002-2399 Public exploit
Directory traversal vulnerability in viewAttachment.cgi in W3Mail 1.0.6 allows remote attackers to read arbitrary files…
-
Unscored —
Direct connect text client (DCTC) client 0.83.3 allows remote attackers to cause a denial of service (crash) via a stri…
-
Unscored —
Stonesoft StoneGate IPS before 4.0 does not properly decode Fullwidth/Halfwidth Unicode encoded data, which makes it ea…
-
Unscored —
The Grandstream HT-488 0.1 allows remote attackers to cause a denial of service (device crash) via a flood of fragmente…
-
Unscored —
Micro Login System 1.0 stores sensitive information under the web root with insufficient access control, which allows r…
-
Unscored —CVE-2007-5785 Public exploit
SQL injection vulnerability in file.php in JobSite Professional 2.0 allows remote attackers to execute arbitrary SQL co…
-
Unscored —
PHP remote file inclusion vulnerability in inc/sige_init.php in Sige 0.1 allows remote attackers to execute arbitrary P…
-
Unscored —
The Globe7 soft phone client 7.3 uses weak cryptography (reversed sequence of binary values) for the password, which mi…
-
Unscored —CVE-2007-5782 Public exploit
Directory traversal vulnerability in dl.php in FireConfig 0.5 allows remote attackers to read arbitrary files via a .. …
-
Unscored —CVE-2007-5774 Public exploit
index.php in the File Manager module in Flatnuke 3 allows remote attackers to obtain sensitive information via an inval…