Archive
4 December 2007
Vulnerabilities first published on this day (UTC), newest first.
34 results · Feed
-
Unscored —CVE-2007-6231 Public exploit
Multiple PHP remote file inclusion vulnerabilities in tellmatic 1.0.7 allow remote attackers to execute arbitrary PHP c…
-
Unscored —
Unspecified vulnerability in Sun Solaris 10, when 64bit mode is used on the x86 platform, allows local users in a Linux…
-
Unscored —
The American Power Conversion (APC) AP7932 0u 30amp Switched Rack Power Distribution Unit (PDU), with rpdu 3.5.5 and ao…
-
Unscored —
Unspecified vulnerability in Apple QuickTime 7.2 on Windows XP allows remote attackers to execute arbitrary code via un…
-
Unscored —CVE-2007-6239 EPSS 27%
The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attacker…
-
Unscored —CVE-2007-6229 Public exploit
PHP remote file inclusion vulnerability in common/classes/class_HeaderHandler.lib.php in Rayzz Script 2.0 allows remote…
-
Unscored —
The RealNetworks RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll, as shipped with RealPlayer 11, allows remo…
-
Unscored —
Microsoft Windows Media Player (WMP) allows remote attackers to cause a denial of service (application crash) via a cer…
-
Unscored —CVE-2007-6232 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in FTP Admin 0.1.0 allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2007-6234 Public exploit
index.php in FTP Admin 0.1.0 allows remote attackers to bypass authentication and obtain administrative access via a lo…
-
Unscored —CVE-2007-6230 Public exploit
Directory traversal vulnerability in common/classes/class_HeaderHandler.lib.php in Rayzz Script 2.0 allows remote attac…
-
Unscored —CVE-2007-6228 Public exploit
Stack-based buffer overflow in the Helper class in the yt.ythelper.2 ActiveX control in Yahoo! Toolbar 1.4.1 allows rem…
-
Unscored —CVE-2007-6237 Public exploit
cp.php in DeluxeBB 1.09 does not verify that the membercookie parameter corresponds to the authenticated member during …
-
Unscored —CVE-2007-6235 Public exploit
A certain ActiveX control in RealNetworks RealPlayer 11 allows remote attackers to cause a denial of service (applicati…
-
Unscored —CVE-2007-6227 Public exploit
QEMU 0.9.0 allows local users of a Windows XP SP2 guest operating system to overwrite the TranslationBlock (code_gen_bu…
-
Unscored —CVE-2007-6233 Public exploit
Directory traversal vulnerability in index.php in FTP Admin 0.1.0 allows remote authenticated users to include and exec…
-
Unscored —CVE-2007-6223 Public exploit
SQL injection vulnerability in garage.php in phpBB Garage 1.2.0 Beta3 allows remote attackers to execute arbitrary SQL …
-
Unscored —
The CheckCustomerAccess function in functions.php in CRM-CTT Interleave before 4.2.0 (formerly CRM-CTT) does not proper…
-
Unscored —CVE-2007-6218 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Ossigeno CMS 2.2 pre1 allow remote attackers to execute arbitrary…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM Tivoli Netcool Security Manager 1.3.0 allows remote attackers to inject…
-
Unscored —CVE-2007-6221 Public exploit
TuMusika Evolution 1.7R5 allows remote attackers to obtain configuration information via a direct request to phpinfo.ph…
-
Unscored —
typespeed before 0.6.4 allows remote attackers to cause a denial of service (application crash) via unspecified network…
-
Unscored —CVE-2007-6217 Public exploit
Multiple SQL injection vulnerabilities in login.asp in Irola My-Time (aka Timesheet) 3.5 allow remote attackers to exec…
-
Unscored —CVE-2007-6212 Public exploit
Directory traversal vulnerability in region.php in KML share 1.1 allows remote attackers to read arbitrary files via a …
-
Unscored —
Race condition in the Fibre Channel protocol (fcp) driver and Devices filesystem (devfs) in Sun Solaris 10 allows local…
-
Unscored —CVE-2007-6214 Public exploit
Directory traversal vulnerability in include/file_download.php in LearnLoop 2.0 beta7 allows remote attackers to read a…
-
Unscored —CVE-2007-6215 Public exploit
Multiple directory traversal vulnerabilities in play.php in Web-MeetMe 3.0.3 allow remote attackers to read arbitrary f…
-
Unscored —CVE-2007-6213 Public exploit
Multiple directory traversal vulnerabilities in mod/chat/index.php in WebED 0.0.9 allow remote attackers to read arbitr…
-
Unscored —CVE-2007-6210 Public exploit
zabbix_agentd 1.1.4 in ZABBIX before 1.4.3 runs "UserParameter" scripts with gid 0, which might allow local users to ga…
-
Unscored —CVE-2007-6211 Public exploit
Send ICMP Nasty Garbage (sing) on Debian GNU/Linux allows local users to append to arbitrary files and gain privileges …
-
Unscored —
sylprint.pl in claws mail tools (claws-mail-tools) allows local users to overwrite arbitrary files via a symlink attack…
-
Unscored —
Xen 3.x, possibly before 3.1.2, when running on IA64 systems, does not check the RID value for mov_to_rr, which allows …
-
Unscored —
Util/difflog.pl in zsh 4.3.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
-
Unscored —
The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, do…