Archive
November 2007
Vulnerabilities first published in this month (UTC), newest first.
478 results · Feed
-
Unscored —
SQL injection vulnerability in admin/index2.asp in GOUAE DWD Realty allows remote attackers to execute arbitrary SQL co…
-
Unscored —
index.php in Tilde CMS 4.x and earlier allows remote attackers to obtain sensitive information via a certain search par…
-
Unscored —
Mail in Apple Mac OS X Leopard (10.5.1) allows user-assisted remote attackers to execute arbitrary code via an AppleDou…
-
Unscored —
An "integer arithmetic" error in Apple QuickTime 7.2 allows remote attackers to execute arbitrary code via a crafted mo…
-
Unscored —CVE-2007-6141 Public exploit
Cross-site scripting (XSS) vulnerability in vBTube.php in vBTube 1.1 Beta allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2007-6139 Public exploit
PHP remote file inclusion vulnerability in index.php in Mp3 ToolBox 1.0 beta 5 allows remote attackers to execute arbit…
-
Unscored —CVE-2007-6136 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in M2Scripts MySpace Scripts Poll Creator allow remote…
-
Unscored —
Multiple SQL injection vulnerabilities in Dora Emlak 2.0 allow remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2007-6147 Public exploit
Multiple PHP remote file inclusion vulnerabilities in IAPR COMMENCE 1.3 allow remote attackers to execute arbitrary PHP…
-
Unscored —
SQL injection vulnerability in default.asp (aka the Login Page) in VU Case Manager allows remote attackers to execute a…
-
Unscored —
Heap-based buffer overflow in the PPlayer.XPPlayer.1 ActiveX control in pplayer.dll_1_work in Xunlei Thunder 5.7.4.401 …
-
Unscored —CVE-2007-6138 Public exploit
SQL injection vulnerability in redir.asp in VU Mass Mailer allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2007-6133 Public exploit
PHP remote file inclusion vulnerability in admin/kfm/initialise.php in DevMass Shopping Cart 1.0 and earlier allows rem…
-
Unscored —
Unspecified vulnerability in Hitachi JP1/File Transmission Server/FTP 01-00 through 08-10-01 allows remote attackers to…
-
Unscored —CVE-2007-6134 Public exploit
SQL injection vulnerability in pkinc/public/article.php in PHPKIT 1.6.4pl1 allows remote attackers to execute arbitrary…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in ph03y3nk just another flat file (JAF) CMS 4.0 RC2 allow remote a…
-
Unscored —CVE-2007-6137 Public exploit
SQL injection vulnerability in news.php in Content Injector 1.52 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2007-6135 Public exploit
Cross-site scripting (XSS) vulnerability in phpslideshow.php in PHPSlideShow 0.9.9.2, and possibly earlier, allows remo…
-
Unscored —
Hitachi JP1/File Transmission Server/FTP 01-00 through 08-10-02 on Windows might allow remote attackers to cause a deni…
-
Unscored —
Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 sets the Referer header to the window or frame in which scri…
-
Unscored —
Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 allow remote attacke…
-
Unscored —CVE-2007-6127 Public exploit
Multiple SQL injection vulnerabilities in project alumni 1.0.9 and earlier allow remote attackers to execute arbitrary …
-
Unscored —
gnump3d 2.9final does not apply password protection to its plugins, which might allow remote attackers to bypass intend…
-
Unscored —CVE-2007-6128 Public exploit
SQL injection vulnerability in events.php in WorkingOnWeb 2.0.1400 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2007-6126 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in project alumni 1.0.9 and earlier allow remote attackers to injec…
-
Unscored —
The default_encrypt function in encrypt.c in IRC Services before 5.0.63, and 5.1.x before 5.1.7, allows remote attacker…
-
Unscored —CVE-2007-6124 Public exploit
Cross-site scripting (XSS) vulnerability in signin.php in Softbiz Freelancers Script 1 allows remote attackers to injec…
-
Unscored —
buttonpressed.sh in scanbuttond 0.2.3 allows local users to overwrite arbitrary files via a symlink attack on the (1) s…
-
Unscored —CVE-2007-6129 Public exploit
Directory traversal vulnerability in scripts/include/show_content.php in Amber Script 1.0 allows remote attackers to in…
-
Unscored —CVE-2007-6125 Public exploit
SQL injection vulnerability in search_form.php in Softbiz Freelancers Script 1 allows remote attackers to execute arbit…
-
Unscored —
Unspecified vulnerability in IRC Services 5.1.8 has unknown impact and attack vectors.
-
Unscored —
Multiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 through 0.99.6 allow remote attackers to cause a deni…
-
Unscored —
Unspecified vulnerability in the HTTP dissector for Wireshark (formerly Ethereal) 0.10.14 to 0.99.6 allows remote attac…
-
Unscored —CVE-2007-6110 Public exploit
Cross-site scripting (XSS) vulnerability in htsearch in htdig 3.2.0b6 allows remote attackers to inject arbitrary web s…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Feed to JavaScript (Feed2JS) 1.91 allows remote attackers to inject arbitra…
-
Unscored —
The Firebird/Interbase dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of s…
-
Unscored —
Ability Mail Server before 2.61 allows remote authenticated users to cause a denial of service (daemon crash) via (1) m…
-
Unscored —CVE-2007-6106 Public exploit
SQL injection vulnerability in index.php in AlstraSoft E-Friends 4.98 and earlier allows remote attackers to execute ar…
-
Unscored —
The Bluetooth SDP dissector Wireshark (formerly Ethereal) 0.99.2 to 0.99.6 allows remote attackers to cause a denial of…
-
Unscored —
Buffer overflow in the ANSI MAP dissector for Wireshark (formerly Ethereal) 0.99.5 to 0.99.6, when running on unspecifi…