Archive
November 2007
Vulnerabilities first published in this month (UTC), newest first.
167 results · Clear filters · Feed
-
Unscored —CVE-2007-6105 Public exploit
Multiple PHP remote file inclusion vulnerabilities in TalkBack 2.2.7 allow remote attackers to execute arbitrary PHP co…
-
Unscored —CVE-2007-6103 Public exploit
I Hear U (IHU) 0.5.6 and earlier allows remote attackers to cause (1) a denial of service (infinite loop) via a packet …
-
Unscored —CVE-2007-6086 Public exploit
Directory traversal vulnerability in index.php in VigileCMS 1.4 allows remote attackers to include and execute arbitrar…
-
Unscored —CVE-2007-6088 Public exploit
PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBBViet 02.03.07 and earlier allows rem…
-
Unscored —CVE-2007-6091 Public exploit
Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System (JBS) 2.0, and possibly JiRo's Upload…
-
Unscored —CVE-2007-6082 Public exploit
Direct static code injection vulnerability in acp/savenews.php in Sciurus Hosting Panel, possibly 2.0.3, allows remote …
-
Unscored —CVE-2007-6085 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in VigileCMS 1.4 allow remote attackers to inject arbi…
-
Unscored —CVE-2007-6089 Public exploit
PHP remote file inclusion vulnerability in index.php in meBiblio 0.4.5 allows remote attackers to execute arbitrary PHP…
-
Unscored —CVE-2007-6083 Public exploit
SQL injection vulnerability in admin/index.php in IceBB 1.0-rc6 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2007-6084 Public exploit
SQL injection vulnerability in software-description.php in HotScripts Clone Script allows remote attackers to execute a…
-
Unscored —CVE-2007-6087 Public exploit
Cross-site request forgery (CSRF) vulnerability in index.php in VigileCMS 1.4 allows remote attackers to change the adm…
-
Unscored —CVE-2007-6078 Public exploit
Multiple SQL injection vulnerabilities in SkyPortal RC6 allow remote attackers to execute arbitrary SQL commands via un…
-
Unscored —CVE-2007-6079 Public exploit
Directory traversal vulnerability in include/common.php in bcoos 1.0.10 allows remote attackers to include and execute …
-
Unscored —CVE-2007-6080 Public exploit
SQL injection vulnerability in modules/banners/click.php in the banners module for bcoos 1.0.10 allows remote attackers…
-
Unscored —CVE-2007-6054 Public exploit
Cross-site scripting (XSS) vulnerability in the login page in the management interface in the Aruba 800 Mobility Contro…
-
Unscored —CVE-2007-6057 Public exploit
PHP remote file inclusion vulnerability in index.php in datecomm Social Networking Script (aka Myspace Clone Script) al…
-
Unscored —CVE-2007-6056 Public exploit
frame.html in Aida-Web (Aida Web) allows remote attackers to bypass a protection mechanism and obtain comment and task …
-
Unscored —CVE-2007-6055 Public exploit
Cross-site scripting (XSS) vulnerability in c/portal/login in Liferay Portal 4.1.0 and 4.1.1 allows remote attackers to…
-
Unscored —CVE-2007-6058 Public exploit
Multiple SQL injection vulnerabilities in index.php in ProfileCMS 1.0 and earlier allow remote attackers to execute arb…
-
Unscored —CVE-2007-6041 Public exploit
Buffer overflow in the Sequencer::queueMessage function in sequencer.cpp in the server in Rigs of Rods (RoR) before 0.3…
-
Unscored —CVE-2007-6039 Public exploit
PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a long st…
-
Unscored —
PHP remote file inclusion vulnerability in xajax_functions.php in the JUser (com_juser) 1.0.14 component for Joomla! al…
-
Unscored —CVE-2007-6036 Public exploit
The parseRTSPRequestString function in LIVE555 Media Server 2007.11.01 and earlier allows remote attackers to cause a d…
-
Unscored —CVE-2007-6037 Public exploit
Cross-site scripting (XSS) vulnerability in ws/generic_api_call.pl in Citrix NetScaler 8.0 build 47.8 allows remote att…
-
Unscored —CVE-2007-6032 Public exploit
SQL injection vulnerability in calendar/page.asp in Aleris Web Publishing Server 3.0 allows remote attackers to execute…
-
Unscored —CVE-2004-2756 Public exploit
Cross-site scripting (XSS) vulnerability in viewtopic.php in Xoops 2.x, possibly 2 through 2.0.5, allows remote attacke…
-
Unscored —CVE-2007-6028 Public exploit
Multiple stack-based buffer overflows in the VSFlexGrid.VSFlexGridL ActiveX control in ComponentOne FlexGrid 7.1 Light …
-
Unscored —CVE-2007-6027 Public exploit
PHP remote file inclusion vulnerability in admin.jjgallery.php in the Carousel Flash Image Gallery (com_jjgallery) comp…
-
Unscored —
Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in M…
-
Unscored —CVE-2004-2754 Public exploit
SQL injection vulnerability in SSI.php in YaBB SE 1.5.4, 1.5.3, and possibly other versions before 1.5.5 allows remote …
-
Unscored —CVE-2007-6001 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Bandersnatch 0.4 allow remote attackers to inject a…
-
Unscored —CVE-2007-6005 Public exploit
Unspecified vulnerability in the GpcContainer.GpcContainer.1 ActiveX control in WebEx allows remote attackers to cause …
-
Unscored —CVE-2007-6003 Public exploit
Cross-site scripting (XSS) vulnerability in cgi/b/ic/connect in the Thomson SpeedTouch 716 with firmware 5.4.0.14 allow…
-
Unscored —CVE-2007-6004 Public exploit
Multiple SQL injection vulnerabilities in index.php in Toko Instan 7.6 allow remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2007-6000 Public exploit
KDE Konqueror 3.5.6 and earlier allows remote attackers to cause a denial of service (crash) via large HTTP cookie para…
-
Unscored —CVE-2007-5992 Public exploit
SQL injection vulnerability in index.php in datecomm Social Networking Script (aka Myspace Clone Script) allows remote …
-
Unscored —CVE-2007-5995 Public exploit
PHP remote file inclusion vulnerability in examples/patExampleGen/bbcodeSource.php in patBBcode 1.0 allows remote attac…
-
Unscored —CVE-2007-5993 Public exploit
Cross-site scripting (XSS) vulnerability in Visionary Technology in Library Solutions (VTLS) vtls.web.gateway before 48…
-
Unscored —CVE-2007-5996 Public exploit
SQL injection vulnerability in searchresult.php in Softbiz Link Directory Script allows remote attackers to execute arb…
-
Unscored —CVE-2007-5997 Public exploit
SQL injection vulnerability in campaign_stats.php in Softbiz Banner Exchange Network Script 1.0 allows remote authentic…