Archive
20 December 2007
Vulnerabilities first published on this day (UTC), newest first.
75 results · Feed
-
Unscored —CVE-2007-6488 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Falcon Series One CMS 1.4.3 allow remote attackers to execute arb…
-
Unscored —
libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an …
-
Unscored —
Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an imag…
-
Unscored —
Asterisk Open Source 1.2.x before 1.2.26 and 1.4.x before 1.4.16, and Business Edition B.x.x before B.2.3.6 and C.x.x b…
-
Unscored —
Unspecified vulnerability in Cisco Firewall Services Module (FWSM) 3.2(3) allows remote attackers to cause a denial of …
-
Unscored —
Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW…
-
Unscored —
Off-by-one error in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MS-ZIP compresse…
-
Unscored —CVE-2007-6246 EPSS 12%
Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0, when running on Linux, uses insecure…
-
Unscored —
Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafte…
-
Unscored —CVE-2007-6242 EPSS 30%
Unspecified vulnerability in Adobe Flash Player 9.0.48.0 and earlier might allow remote attackers to execute arbitrary …
-
Unscored —
Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 does not sufficiently restrict the in…
-
Unscored —
Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 allows remote attackers to modify HTT…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Adobe Flash Player 9.x up to 9.0.48.0 and 8.x up to 8.0.35.0 all…
-
Unscored —CVE-2007-6457 Public exploit
Stack-based buffer overflow in the webmail feature in SurgeMail 38k4 allows remote attackers to cause a denial of servi…
-
Unscored —
SQL injection vulnerability in index.php in phpRPG 0.8, when magic_qutoes_gpc is disabled, allows remote attackers to e…
-
Unscored —
Unspecified vulnerability in the benchmark reporting system in Google Web Toolkit (GWT) before 1.4.61 has unknown impac…
-
Unscored —
Heap-based buffer overflow in the handshakeHTTP function in servhs.cpp in PeerCast 0.1217 and earlier, and SVN 344 and …
-
Unscored —
Buffer overflow in the HuffDecode function in hw_utils/hwrcon/huffman.c and hexenworld/Client/huffman.c in Hammer of Th…
-
Unscored —CVE-2007-6466 Public exploit
Multiple SQL injection vulnerabilities in index.php in FreeWebshop 2.2.1 allow remote attackers to execute arbitrary SQ…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Anon Proxy Server before 0.101 allow remote attackers to inject …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flyspray 0.9.9 through 0.9.9.3 allow remote attacke…
-
Unscored —CVE-2007-6470 Public exploit
phpRPG 0.8 stores sensitive information under the web root with insufficient access control, which allows remote attack…
-
Unscored —CVE-2007-6462 Public exploit
SQL injection vulnerability in fullnews.php in PHP Real Estate Classifieds allows remote attackers to execute arbitrary…
-
Unscored —
Unspecified vulnerability in OpenOffice.org code in Planamesa NeoOffice 2.2.2 before Patch 4 has unknown impact and att…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in ganglia-web in Ganglia before 3.0.6 allow remote attackers to in…
-
Unscored —CVE-2007-6459 Public exploit
Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary commands via shell metacharac…
-
Unscored —CVE-2007-6464 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Form tools 1.5.0b allow remote attackers to execute arbitrary PHP…
-
Unscored —CVE-2007-6467 Public exploit
SQL injection vulnerability in index.php in MKPortal 1.1 RC1 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2007-6471 Public exploit
Incomplete blacklist vulnerability in main.php in phPay 2.02.01 on Windows allows remote attackers to conduct directory…
-
Unscored —
Heap-based buffer overflow in Open File Manager service (ofmnt.exe) in St. Bernard Open File Manager 9.5 allows remote …
-
Unscored —CVE-2007-6453 Public exploit
Directory traversal vulnerability in raidenhttpd-admin/workspace.php in RaidenHTTPD 2.0.19, when the WebAdmin function …
-
Unscored —CVE-2007-6458 Public exploit
SQL injection vulnerability in shop/mainfile.php in 123tkShop 0.9.1 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2007-6455 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Mambo 4.6.2 allow remote attackers to inject arbitr…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the admin panel in PHP Real Estate Classifieds allow remote atta…
-
Unscored —
Integer overflow in the hrtimer_start function in kernel/hrtimer.c in the Linux kernel before 2.6.23.10 allows local us…