Archive
15 November 2007
Vulnerabilities first published on this day (UTC), newest first.
75 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in Symantec Web Security 2.5, 3.0.0, and 3.0.1 before build 62 allows remote a…
-
Unscored —CVE-2004-2754 Public exploit
SQL injection vulnerability in SSI.php in YaBB SE 1.5.4, 1.5.3, and possibly other versions before 1.5.5 allows remote …
-
Unscored —
Unspecified vulnerability in pioneers (formerly gnocatan) 0.11.3 allows remote attackers to cause a denial of service (…
-
Unscored —
Multiple input validation errors in ACD ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, and Photo E…
-
Unscored —CVE-2007-6001 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Bandersnatch 0.4 allow remote attackers to inject a…
-
Unscored —
Integer overflow in the ID_PSP.apl plug-in for ACD ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, …
-
Unscored —
TestLink before 1.7.1 does not enforce an unspecified authorization mechanism, which has unknown impact and attack vect…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Fenriru (1) Sleipnir 2.5.17 R2 and earlier and (2) Grani 3.0 and earlier al…
-
Unscored —CVE-2007-6005 Public exploit
Unspecified vulnerability in the GpcContainer.GpcContainer.1 ActiveX control in WebEx allows remote attackers to cause …
-
Unscored —CVE-2007-6003 Public exploit
Cross-site scripting (XSS) vulnerability in cgi/b/ic/connect in the Thomson SpeedTouch 716 with firmware 5.4.0.14 allow…
-
Unscored —CVE-2007-6004 Public exploit
Multiple SQL injection vulnerabilities in index.php in Toko Instan 7.6 allow remote attackers to execute arbitrary SQL …
-
Unscored —
Heap-based buffer overflow in emlsr.dll before 2.0.0.4 in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export…
-
Unscored —CVE-2007-6000 Public exploit
KDE Konqueror 3.5.6 and earlier allows remote attackers to cause a denial of service (crash) via large HTTP cookie para…
-
Unscored —
Multiple buffer overflows in ACD products allow user-assisted remote attackers to execute arbitrary code via a long sec…
-
Unscored —
SQL injection vulnerability in index.php in ExoPHPdesk allows remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2007-5992 Public exploit
SQL injection vulnerability in index.php in datecomm Social Networking Script (aka Myspace Clone Script) allows remote …
-
Unscored —CVE-2007-5995 Public exploit
PHP remote file inclusion vulnerability in examples/patExampleGen/bbcodeSource.php in patBBcode 1.0 allows remote attac…
-
Unscored —CVE-2007-5993 Public exploit
Cross-site scripting (XSS) vulnerability in Visionary Technology in Library Solutions (VTLS) vtls.web.gateway before 48…
-
Unscored —CVE-2007-5996 Public exploit
SQL injection vulnerability in searchresult.php in Softbiz Link Directory Script allows remote attackers to execute arb…
-
Unscored —CVE-2007-5997 Public exploit
SQL injection vulnerability in campaign_stats.php in Softbiz Banner Exchange Network Script 1.0 allows remote authentic…
-
Unscored —CVE-2007-5998 Public exploit
SQL injection vulnerability in ads.php in Softbiz Ad Management plus Script 1 allows remote authenticated users to exec…
-
Unscored —
PHP remote file inclusion vulnerability in check_noimage.php in Fritz Berger yet another php photo album - next generat…
-
Unscored —
Cross-site scripting (XSS) vulnerability in ExoPHPdesk allows remote attackers to inject arbitrary web script or HTML v…
-
Unscored —CVE-2007-5999 Public exploit
SQL injection vulnerability in product_desc.php in Softbiz Auctions Script allows remote attackers to execute arbitrary…
-
Unscored —
The Application Firewall in Apple Mac OS X 10.5 does not prevent a root process from accepting incoming connections, ev…
-
Unscored —
The Application Firewall in Apple Mac OS X 10.5 does not apply changed settings to processes that are started by launch…
-
Unscored —
The Application Firewall in Apple Mac OS X 10.5, when "Block all incoming connections" is enabled, does not prevent roo…
-
Unscored —
The tcp_sacktag_write_queue function in net/ipv4/tcp_input.c in Linux kernel 2.6.21 through 2.6.23.7, and 2.6.24-rc thr…
-
Unscored —CVE-2007-5905 EPSS 13%
Adobe ColdFusion 8 and MX 7 allows remote attackers to hijack sessions via unspecified vectors that trigger establishme…
-
Unscored —
Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate the amount of memory needed fo…
-
Unscored —
The default configuration of Safari in Apple Mac OS X 10.4 through 10.4.10 adds a private key to the keychain with perm…
-
Unscored —
WebKit on Apple Mac OS X 10.4 through 10.4.10 does not create temporary files securely when Safari is previewing a PDF …
-
Unscored —
Unspecified vulnerability in WebKit on Apple Mac OS X 10.4 through 10.4.10 allows remote attackers to use Safari as an …
-
Unscored —
The SecurityAgent component in Mac OS X 10.4 through 10.4.10 allows attackers with physical access to bypass the authen…
-
Unscored —
Stack-based buffer overflow in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local users to ex…
-
Unscored —
Race condition in WebCore in Apple Mac OS X 10.4 through 10.4.10 allows remote attackers to obtain information for form…
-
Unscored —
Unspecified vulnerability in WebCore in Apple Mac OS X 10.4 through 10.4.10 allows remote attackers to cause a denial o…
-
Unscored —
The NSURL component in Apple Mac OS X 10.4 through 10.4.10 performs case-sensitive comparisons that allow attackers to …
-
Unscored —
The Networking component in Apple Mac OS X 10.4 through 10.4.10 allows remote attackers to obtain all addresses for a h…
-
Unscored —
AppleRAID in Apple Mac OS X 10.3.9 and 10.4 through 10.4.10 allows attackers to cause a denial of service (crash) via a…