Archive
November 2007
Vulnerabilities first published in this month (UTC), newest first.
167 results · Clear filters · Feed
-
Unscored —CVE-2007-5998 Public exploit
SQL injection vulnerability in ads.php in Softbiz Ad Management plus Script 1 allows remote authenticated users to exec…
-
Unscored —CVE-2007-5999 Public exploit
SQL injection vulnerability in product_desc.php in Softbiz Auctions Script allows remote attackers to execute arbitrary…
-
Unscored —CVE-2007-4684 Public exploit
Integer overflow in the kernel in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via …
-
Unscored —CVE-2007-5973 Public exploit
SQL injection vulnerability in articles.php in JPortal 2.3.1 and earlier allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2007-5974 Public exploit
SQL injection vulnerability in mailer.php in JPortal 2 allows remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2007-5984 Public exploit
classes/Url.php in Justin Hagstrom AutoIndex PHP Script before 2.2.4 allows remote attackers to cause a denial of servi…
-
Unscored —CVE-2007-5979 Public exploit
Cross-site scripting (XSS) vulnerability in download_plugin.php3 in F5 Firepass 4100 SSL VPN 5.4 through 5.5.2 and 6.0 …
-
Unscored —CVE-2007-5983 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Justin Hagstrom AutoIndex PHP Script before 2.2.3 allows remot…
-
Unscored —CVE-2007-5978 Public exploit
SQL injection vulnerability in brokenlink.php in the mylinks module for XOOPS allows remote attackers to execute arbitr…
-
Unscored —CVE-2007-5982 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in X7 Chat 2.0.4, 2.0.5, and possibly other versions allow remote a…
-
Unscored —CVE-2007-3694 Public exploit
Cross-site scripting (XSS) vulnerability in login.php in Miro Project Broadcast Machine 0.9.9.9 allows remote attackers…
-
Unscored —CVE-2004-2750 Public exploit
Directory traversal vulnerability in browser.php in JBrowser 1.0 through 2.1 allows remote attackers to read arbitrary …
-
Unscored —CVE-2004-2749 Public exploit
Directory traversal vulnerability in wra/public/wralogin in 2Wire Gateway, possibly as used in HomePortal and other pro…
-
Unscored —
The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when…
-
Unscored —CVE-2007-5952 Public exploit
Cross-site scripting (XSS) vulnerability in admin/index.php in Helios Calendar 1.2.1 Beta allows remote attackers to in…
-
Unscored —
Multiple stack-based buffer overflows in the AOL AmpX ActiveX control in AmpX.dll 2.6.1.11 in AOL Radio allow remote at…
-
Unscored —CVE-2007-5944 Public exploit
Cross-site scripting (XSS) vulnerability in Servlet Engine / Web Container in IBM WebSphere Application Server (WAS) 5.…
-
Medium 6.1CVE-2007-5954 Public exploit
Cross-site scripting (XSS) vulnerability in buscador.php in JLMForo System allows remote attackers to inject arbitrary …
-
Unscored —CVE-2007-5951 Public exploit
SQL injection vulnerability in articles.php in E-Vendejo 0.2 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —
Stack-based buffer overflow in the SWCtl.SWCtl ActiveX control in Adobe Shockwave allows remote attackers to cause a de…
-
Unscored —CVE-2007-5918 Public exploit
Cross-site request forgery (CSRF) vulnerability in edit.php in the MS TopSites add-on for PHP-Nuke does not verify that…
-
Unscored —CVE-2007-5914 Public exploit
Direct static code injection vulnerability in dirsys/modules/config/post.php in JBC Explorer 7.20 RC1 and earlier allow…
-
Unscored —CVE-2007-5915 Public exploit
Directory traversal vulnerability in index.php in phphelpdesk 0.6.16 allows remote attackers to include and execute arb…
-
Unscored —
The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows…
-
Unscored —CVE-2007-5926 Public exploit
OpenBase 10.0.5 and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in…
-
Unscored —CVE-2007-5913 Public exploit
dirsys/modules/auth.php in JBC Explorer 7.20 RC1 and earlier does not require authentication, which allows remote attac…
-
Unscored —CVE-2007-5923 Public exploit
Cross-site scripting (XSS) vulnerability in forms/smpwservices.fcc in CA (formerly Computer Associates) eTrust SiteMind…
-
Unscored —CVE-2007-5912 Public exploit
SQL injection vulnerability in mailer.php in jPORTAL 2 allows remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2007-5911 Public exploit
Multiple stack-based buffer overflows in the AxMetaStream ActiveX control in AxMetaStream.dll 3.3.2.26 in Viewpoint Med…
-
Unscored —CVE-2004-2746 Public exploit
SQL injection vulnerability in adminlogin.asp in XTREME ASP Photo Gallery 2.0 allows remote attackers to execute arbitr…
-
Unscored —CVE-2004-2748 Public exploit
viewreport.pl in NetIQ WebTrends Reporting Center Enterprise Edition 6.1a allows remote attackers to determine the inst…
-
Unscored —CVE-2003-1530 Public exploit
SQL injection vulnerability in privmsg.php in phpBB 2.0.3 and earlier allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2003-1532 Public exploit
SQL injection vulnerability in compte.php in PhpMyShop 1.00 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2003-1533 Public exploit
SQL injection vulnerability in accesscontrol.php in PhpPass 2 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2003-1536 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Codeworx Technologies DCP-Portal 5.3.1 allow remote attackers to…
-
Unscored —CVE-2003-1535 Public exploit
Justice Guestbook 1.3 allows remote attackers to obtain the full installation path via a direct request to cfooter.php3…
-
Unscored —CVE-2007-4517 Public exploit
Buffer overflow in the XDB.XDB_PITRIG_PKG.PITRIG_DROPMETADATA procedure in Oracle 10g R2 allows remote authenticated us…
-
Unscored —CVE-2007-5890 Public exploit
Directory traversal vulnerability in index.php in easyGB 2.1.1 allows remote attackers to include arbitrary files via t…
-
Unscored —CVE-2007-5887 Public exploit
SQL injection vulnerability in boards/printer.asp in ASP Message Board 2.2.1c allows remote attackers to execute arbitr…
-
Unscored —CVE-2007-5844 Public exploit
Directory traversal vulnerability in inc/includes.inc in GuppY 4.6.3 allows remote attackers to include and execute arb…