Archive
December 2007
Vulnerabilities first published in this month (UTC), newest first.
203 results · Clear filters · Feed
-
Unscored —CVE-2007-6396 Public exploit
Direct static code injection vulnerability in index.php in Flat PHP Board 1.2 and earlier allows remote attackers to in…
-
Unscored —CVE-2007-6394 Public exploit
SQL injection vulnerability in index.php in Content Injector 1.53 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2007-6400 Public exploit
Directory traversal vulnerability in download_file.php in PolDoc CMS (aka PDDMS) 0.96 allows remote attackers to read a…
-
Unscored —
Multiple stack-based buffer overflows in the awApi4.AnswerWorks.1 ActiveX control in awApi4.dll 4.0.0.42, as used by Va…
-
Unscored —CVE-2007-6359 Public exploit
The cs_validate_page function in bsd/kern/ubc_subr.c in the xnu kernel 1228.0 and earlier in Apple Mac OS X 10.5.1 allo…
-
Unscored —CVE-2007-6366 Public exploit
Multiple SQL injection vulnerabilities in SineCMS 2.3.4 and earlier allow remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2007-6368 Public exploit
Directory traversal vulnerability in index.php in ezContents 1.4.5 allows remote attackers to read arbitrary files via …
-
Unscored —
Stack-based buffer overflow in the PassThru functionality in ext.dll in BadBlue 2.72b and earlier allows remote attacke…
-
Unscored —CVE-2007-6369 Public exploit
Multiple directory traversal vulnerabilities in resize.php in the PictPress 0.91 and earlier plugin for WordPress allow…
-
Unscored —CVE-2007-6362 Public exploit
SQL injection vulnerability in index.php in the RSGallery (com_rsgallery) 2.0 beta 5 and earlier component for Mambo an…
-
Unscored —CVE-2007-6367 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the guestbook in SineCMS 2.3.4 and earlier allow remote attacker…
-
Unscored —CVE-2007-6376 Public exploit
Directory traversal vulnerability in autohtml.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to include an…
-
Unscored —CVE-2007-6375 Public exploit
Multiple SQL injection vulnerabilities in Bitweaver 2.0.0 and earlier allow remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2007-6380 Public exploit
Multiple SQL injection vulnerabilities in e-Xoops (exoops) 1.08, and 1.05 Rev 1 through 3, allow remote attackers to ex…
-
Unscored —CVE-2007-6374 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Bitweaver 2.0.0 and earlier allow remote attackers to inject arb…
-
Unscored —CVE-2007-6378 Public exploit
Directory traversal vulnerability in upload.dll in BadBlue 2.72b and earlier allows remote attackers to create or overw…
-
Unscored —CVE-2007-6379 Public exploit
BadBlue 2.72b and earlier allows remote attackers to obtain sensitive information via an invalid browse parameter, whic…
-
Unscored —CVE-2007-6344 Public exploit
Directory traversal vulnerability in modules/cms/index.php in Mcms Easy Web Make 1.3, allows remote attackers to includ…
-
Unscored —CVE-2007-6347 Public exploit
PHP remote file inclusion vulnerability in blocks/block_site_map.php in ViArt (1) CMS 3.3.2, (2) HelpDesk 3.3.2, (3) Sh…
-
Unscored —
Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logo…
-
Unscored —
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allow remote at…
-
Unscored —CVE-2007-6322 Public exploit
Directory traversal vulnerability in filedownload.php in xml2owl 0.1.1 allows remote attackers to read arbitrary files …
-
Unscored —
Buffer overflow in a certain ActiveX control in Online Media Technologies AVSMJPEGFILE.DLL 1.1.1.102 allows remote atta…
-
Unscored —
PHP remote file inclusion vulnerability in adminbereich/designconfig.php in Fastpublish CMS 1.9999 allows remote attack…
-
Unscored —CVE-2007-6326 Public exploit
Sergey Lyubka Simple HTTPD (shttpd) 1.3 on Windows allows remote attackers to cause a denial of service via a request t…
-
Unscored —
Absolute path traversal vulnerability in the HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with H…
-
Unscored —CVE-2007-6333 Public exploit
The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 …
-
Unscored —CVE-2007-6324 Public exploit
PHP remote file inclusion vulnerability in head.php in CityWriter 0.9.7 allows remote attackers to execute arbitrary PH…
-
Unscored —CVE-2007-6332 Public exploit
The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 …
-
Unscored —CVE-2007-6323 Public exploit
Multiple directory traversal vulnerabilities in MMS Gallery PHP 1.0 allow remote attackers to read arbitrary files via …
-
Unscored —CVE-2007-6321 Public exploit
Cross-site scripting (XSS) vulnerability in RoundCube webmail 0.1rc2, 2007-12-09, and earlier versions, when using Inte…
-
Unscored —CVE-2007-6314 Public exploit
BarracudaDrive Web Server before 3.8 allows remote attackers to read the source code for web scripts by appending a (1)…
-
Unscored —CVE-2007-6315 Public exploit
Group Chat in BarracudaDrive Web Server before 3.8 allows remote authenticated users to cause a denial of service (cras…
-
Unscored —CVE-2007-6316 Public exploit
Cross-site scripting (XSS) vulnerability in BarracudaDrive Web Server before 3.8 allows remote attackers to inject arbi…
-
Unscored —CVE-2007-6318 Public exploit
SQL injection vulnerability in wp-includes/query.php in WordPress 2.3.1 and earlier allows remote attackers to execute …
-
Unscored —CVE-2007-6317 Public exploit
Multiple directory traversal vulnerabilities in BarracudaDrive Web Server before 3.8 allow (1) remote attackers to read…
-
Unscored —
Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windo…
-
Unscored —
Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI) parser in quartz.dll for…
-
Unscored —CVE-2007-6310 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Falt4Extreme RC4 10.9.2007 allow remote attackers to inject arbi…
-
Unscored —CVE-2007-6307 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in clickstats.php in wwwstats 3.21 allow remote attackers to inject…