Archive
December 2007
Vulnerabilities first published in this month (UTC), newest first.
203 results · Clear filters · Feed
-
Unscored —CVE-2007-6311 Public exploit
SQL injection vulnerability in (1) index.php, and possibly (2) admin/index.php, in Falt4Extreme RC4 10.9.2007 allows re…
-
Unscored —CVE-2007-6309 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in webSPELL 4.1.2 allow remote attackers to inject arb…
-
Unscored —CVE-2007-6301 Public exploit
Cross-site scripting (XSS) vulnerability in compose.php in OpenNewsletter 2.5 and earlier allows remote attackers to in…
-
Unscored —CVE-2007-6292 Public exploit
SQL injection vulnerability in leggi_commenti.asp in MWOpen 1.4 and earlier allows remote attackers to execute arbitrar…
-
Unscored —CVE-2007-6290 Public exploit
Multiple directory traversal vulnerabilities in js/get_js.php in SERWeb 2.0.0 dev1 and earlier allow remote attackers t…
-
Unscored —CVE-2007-6289 Public exploit
Multiple PHP remote file inclusion vulnerabilities in SerWeb 2.0.0 dev1 and earlier allow remote attackers to execute a…
-
Unscored —CVE-2007-6297 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PHPMyChat 0.14.5 allow remote attackers to inject arbitrary web …
-
Unscored —CVE-2007-6276 Public exploit
The accept_connections function in the virtual private network daemon (vpnd) in Apple Mac OS X 10.5 before 10.5.4 allow…
-
Unscored —CVE-2007-6268 Public exploit
Directory traversal vulnerability in pages/default.aspx in Absolute News Manager.NET 5.1 allows remote attackers to rea…
-
Unscored —CVE-2007-6275 Public exploit
SQL injection vulnerability in modules/adresses/ratefile.php in bcoos 1.0.10 and earlier allows remote attackers to exe…
-
Unscored —CVE-2007-6266 Public exploit
Multiple SQL injection vulnerabilities in bcoos 1.0.10 and earlier allow remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2007-6272 Public exploit
Multiple SQL injection vulnerabilities in index.php in Joomla! 1.5 RC3 allow remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2007-6270 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Absolute News Manager.NET 5.1 allow remote attackers to inject a…
-
Unscored —CVE-2007-6269 Public exploit
Multiple SQL injection vulnerabilities in xlaabsolutenm.aspx in Absolute News Manager.NET 5.1 allow remote attackers to…
-
Unscored —CVE-2007-6273 Public exploit
Multiple format string vulnerabilities in the configuration file in SonicWALL GLobal VPN Client 3.1.556 and 4.0.0.810 a…
-
Unscored —CVE-2007-6271 Public exploit
Absolute News Manager.NET 5.1 allows remote attackers to obtain sensitive information via a direct request to getpath.a…
-
Unscored —
A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary…
-
Unscored —CVE-2007-6261 Public exploit
Integer overflow in the load_threadstack function in the Mach-O loader (mach_loader.c) in the xnu kernel in Apple Mac O…
-
Unscored —CVE-2007-6240 Public exploit
SQL injection vulnerability in active.asp in Snitz Forums 2000 3.4.06 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2007-6231 Public exploit
Multiple PHP remote file inclusion vulnerabilities in tellmatic 1.0.7 allow remote attackers to execute arbitrary PHP c…
-
Unscored —CVE-2007-6229 Public exploit
PHP remote file inclusion vulnerability in common/classes/class_HeaderHandler.lib.php in Rayzz Script 2.0 allows remote…
-
Unscored —
Microsoft Windows Media Player (WMP) allows remote attackers to cause a denial of service (application crash) via a cer…
-
Unscored —CVE-2007-6232 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in FTP Admin 0.1.0 allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2007-6234 Public exploit
index.php in FTP Admin 0.1.0 allows remote attackers to bypass authentication and obtain administrative access via a lo…
-
Unscored —CVE-2007-6230 Public exploit
Directory traversal vulnerability in common/classes/class_HeaderHandler.lib.php in Rayzz Script 2.0 allows remote attac…
-
Unscored —CVE-2007-6228 Public exploit
Stack-based buffer overflow in the Helper class in the yt.ythelper.2 ActiveX control in Yahoo! Toolbar 1.4.1 allows rem…
-
Unscored —CVE-2007-6237 Public exploit
cp.php in DeluxeBB 1.09 does not verify that the membercookie parameter corresponds to the authenticated member during …
-
Unscored —CVE-2007-6235 Public exploit
A certain ActiveX control in RealNetworks RealPlayer 11 allows remote attackers to cause a denial of service (applicati…
-
Unscored —CVE-2007-6227 Public exploit
QEMU 0.9.0 allows local users of a Windows XP SP2 guest operating system to overwrite the TranslationBlock (code_gen_bu…
-
Unscored —CVE-2007-6233 Public exploit
Directory traversal vulnerability in index.php in FTP Admin 0.1.0 allows remote authenticated users to include and exec…
-
Unscored —CVE-2007-6223 Public exploit
SQL injection vulnerability in garage.php in phpBB Garage 1.2.0 Beta3 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2007-6218 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Ossigeno CMS 2.2 pre1 allow remote attackers to execute arbitrary…
-
Unscored —CVE-2007-6221 Public exploit
TuMusika Evolution 1.7R5 allows remote attackers to obtain configuration information via a direct request to phpinfo.ph…
-
Unscored —CVE-2007-6217 Public exploit
Multiple SQL injection vulnerabilities in login.asp in Irola My-Time (aka Timesheet) 3.5 allow remote attackers to exec…
-
Unscored —CVE-2007-6212 Public exploit
Directory traversal vulnerability in region.php in KML share 1.1 allows remote attackers to read arbitrary files via a …
-
Unscored —CVE-2007-6214 Public exploit
Directory traversal vulnerability in include/file_download.php in LearnLoop 2.0 beta7 allows remote attackers to read a…
-
Unscored —CVE-2007-6215 Public exploit
Multiple directory traversal vulnerabilities in play.php in Web-MeetMe 3.0.3 allow remote attackers to read arbitrary f…
-
Unscored —CVE-2007-6213 Public exploit
Multiple directory traversal vulnerabilities in mod/chat/index.php in WebED 0.0.9 allow remote attackers to read arbitr…
-
Unscored —CVE-2007-6210 Public exploit
zabbix_agentd 1.1.4 in ZABBIX before 1.4.3 runs "UserParameter" scripts with gid 0, which might allow local users to ga…
-
Unscored —CVE-2007-6211 Public exploit
Send ICMP Nasty Garbage (sing) on Debian GNU/Linux allows local users to append to arbitrary files and gain privileges …