28 December 2007

51 results · Feed

• Unscored —
  CVE-2007-6594

  IBM Lotus Notes 8 for Linux before 8.0.1 uses (1) unspecified weak permissions for the installation kit obtained throug…

  Dec 28, 2007
• Unscored —
  CVE-2007-6586 Public exploit

  SQL injection vulnerability in sezione_news.php in nicLOR-CMS allows remote attackers to execute arbitrary SQL commands…

  Dec 28, 2007
• Unscored —
  CVE-2007-6584 Public exploit

  Multiple directory traversal vulnerabilities in 1024 CMS 1.3.1 allow remote attackers to include and execute arbitrary …

  Dec 28, 2007
• Unscored —
  CVE-2007-6569

  Cross-site scripting (XSS) vulnerability in the View Error Log functionality in Sun Java System Web Proxy Server 4.x be…

  Dec 28, 2007
• Unscored —
  CVE-2007-6581 Public exploit

  Multiple directory traversal vulnerabilities in Social Engine 2.0 allow remote attackers to include and execute arbitra…

  Dec 28, 2007
• Unscored —
  CVE-2007-6570

  Cross-site scripting (XSS) vulnerability in the View URL Database functionality in Sun Java System Web Proxy Server 4.x…

  Dec 28, 2007
• Unscored —
  CVE-2007-6576 Public exploit

  Multiple SQL injection vulnerabilities in Adult Script 1.6.5 and earlier allow remote attackers to execute arbitrary SQ…

  Dec 28, 2007
• Unscored —
  CVE-2007-6566 Public exploit

  SQL injection vulnerability in post.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to e…

  Dec 28, 2007
• Unscored —
  CVE-2007-6568 Public exploit

  PHP remote file inclusion vulnerability in config.inc.php in XZero Community Classifieds 4.95.11 and earlier allows rem…

  Dec 28, 2007
• Unscored —
  CVE-2007-6583 Public exploit

  SQL injection vulnerability in admin/ops/findip/ajax/search.php in 1024 CMS 1.3.1 allows remote attackers to execute ar…

  Dec 28, 2007
• Unscored —
  CVE-2007-6567 Public exploit

  Directory traversal vulnerability in index.php in XZero Community Classifieds 4.95.11 and earlier allows remote attacke…

  Dec 28, 2007
• Unscored —
  CVE-2007-6591

  KDE Konqueror 3.5.5 and 3.95.00, when a user accepts an SSL server certificate on the basis of the CN domain name in th…

  Dec 28, 2007
• Unscored —
  CVE-2007-6572

  Cross-site scripting (XSS) vulnerability in Sun Java System Web Server 6.1 before SP8 and 7.0 before Update 1 allows re…

  Dec 28, 2007
• Unscored —
  CVE-2007-6589

  The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 does not update the origin domai…

  Dec 28, 2007
• Unscored —
  CVE-2007-6585 Public exploit

  PHP remote file inclusion vulnerability in confirmUnsubscription.php in NmnNewsletter 1.0.7 allows remote attackers to …

  Dec 28, 2007
• Unscored —
  CVE-2007-6575 Public exploit

  SQL injection vulnerability in default.php in MMSLamp allows remote attackers to execute arbitrary SQL commands via the…

  Dec 28, 2007
• Unscored —
  CVE-2007-6593 Public exploit

  Multiple stack-based buffer overflows in l123sr.dll in Autonomy (formerly Verity) KeyView SDK, as used by IBM Lotus Not…

  Dec 28, 2007
• Unscored —
  CVE-2007-6571

  Cross-site scripting (XSS) vulnerability in Sun Java System Web Proxy Server 3.6 before SP11 on Windows allows remote a…

  Dec 28, 2007
• Unscored —
  CVE-2007-6587 Public exploit

  SQL injection vulnerability in plog-rss.php in Plogger 1.0 Beta 3.0 allows remote attackers to execute arbitrary SQL co…

  Dec 28, 2007
• Unscored —
  CVE-2007-6573

  QK SMTP Server 3 allows remote attackers to cause a denial of service (daemon crash) via a long (1) HELO, (2) MAIL FROM…

  Dec 28, 2007
• Unscored —
  CVE-2007-6565 Public exploit

  Multiple SQL injection vulnerabilities in Blakord Portal 1.3.A Beta and earlier allow remote attackers to execute arbit…

  Dec 28, 2007
• Unscored —
  CVE-2007-6579 Public exploit

  Multiple SQL injection vulnerabilities in Ip Reg 0.3 allow remote attackers to execute arbitrary SQL commands via the v…

  Dec 28, 2007
• Unscored —
  CVE-2007-6580 Public exploit

  Multiple SQL injection vulnerabilities in Wallpaper Site 1.0.09 allow remote attackers to execute arbitrary SQL command…

  Dec 28, 2007
• Unscored —
  CVE-2007-6578 Public exploit

  SQL injection vulnerability in go.php in PHP ZLink 0.3 allows remote attackers to execute arbitrary SQL commands via th…

  Dec 28, 2007
• Unscored —
  CVE-2007-6592

  Apple Safari 2, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regar…

  Dec 28, 2007
• Unscored —
  CVE-2007-6588

  Cross-site scripting (XSS) vulnerability in PHCDownload 1.10 allows remote attackers to inject arbitrary web script or …

  Dec 28, 2007
• Unscored —
  CVE-2007-6577 Public exploit

  Multiple SQL injection vulnerabilities in index.php in zBlog 1.2 allow remote attackers to execute arbitrary SQL comman…

  Dec 28, 2007
• Unscored —
  CVE-2007-6582 Public exploit

  Directory traversal vulnerability in index.php in mBlog 1.2 allows remote attackers to read arbitrary files via a .. (d…

  Dec 28, 2007
• Unscored —
  CVE-2007-6574 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.4 and earlier allow remote attackers to inject arbitr…

  Dec 28, 2007
• Unscored —
  CVE-2007-6559 Public exploit

  Multiple SQL injection vulnerabilities in Logaholic before 2.0 RC8 allow remote attackers to execute arbitrary SQL comm…

  Dec 28, 2007
• Unscored —
  CVE-2007-6556 Public exploit

  Multiple SQL injection vulnerabilities in websihirbazi 5.1.1 allow remote attackers to execute arbitrary SQL commands v…

  Dec 28, 2007
• Unscored —
  CVE-2007-6548 Public exploit

  Multiple direct static code injection vulnerabilities in RunCMS before 1.6.1 allow remote authenticated administrators …

  Dec 28, 2007
• Unscored —
  CVE-2007-6563

  Heap-based buffer overflow in WinAce 2.65 and earlier, and possibly other versions before 2.69, allows user-assisted re…

  Dec 28, 2007
• Unscored —
  CVE-2007-6549

  Unspecified vulnerability in RunCMS before 1.6.1 has unknown impact and attack vectors, related to "pagetype using."

  Dec 28, 2007
• Unscored —
  CVE-2007-6554 Public exploit

  Multiple directory traversal vulnerabilities in TeamCal Pro 3.1.000 and earlier allow remote attackers to include and e…

  Dec 28, 2007
• Unscored —
  CVE-2007-6544 Public exploit

  Multiple SQL injection vulnerabilities in RunCMS before 1.6.1 allow remote attackers to execute arbitrary SQL commands …

  Dec 28, 2007
• Unscored —
  CVE-2007-6547 Public exploit

  RunCMS before 1.6.1 does not require entry of the old password during a password change, which allows context-dependent…

  Dec 28, 2007
• Unscored —
  CVE-2007-6561 Public exploit

  Multiple stack-based buffer overflows in PDFLib allow user-assisted remote attackers to execute arbitrary code via a lo…

  Dec 28, 2007
• Unscored —
  CVE-2007-6562

  Multiple stack-based buffer overflows in the use of FD_SET in TCPreen before 1.4.4 allow remote attackers to cause a de…

  tcpreen Debian
  Dec 28, 2007
• Unscored —
  CVE-2007-6553 Public exploit

  Multiple PHP remote file inclusion vulnerabilities in TeamCal Pro 3.1.000 and earlier allow remote attackers to execute…

  Dec 28, 2007