9 January 2008

34 results · Feed

• Unscored —
  CVE-2007-0012

  Sun JRE 5.0 before update 14 allows remote attackers to cause a denial of service (Internet Explorer crash) via an obje…

  Jan 9, 2008
• Unscored —
  CVE-2007-6531

  Stack-based buffer overflow in the Panel (xfce4-panel) component in Xfce before 4.4.2 might allow remote attackers to e…

  xfce4-panel Debian
  Jan 9, 2008
• Unscored —
  CVE-2007-6250 EPSS 26%

  Stack-based buffer overflow in AOL AOLMediaPlaybackControl (AOLMediaPlaybackControl.exe), as used by AmpX ActiveX contr…

  Jan 9, 2008
• Unscored —
  CVE-2007-6532

  Double free vulnerability in the Widget Library (libxfcegui4) in Xfce before 4.4.2 might allow remote attackers to exec…

  Jan 9, 2008
• Unscored —
  CVE-2008-0184 Public exploit

  Absolute path traversal vulnerability in index.php in Sys-Hotel on Line System allows remote attackers to read arbitrar…

  Jan 9, 2008
• Unscored —
  CVE-2008-0186 Public exploit

  Cross-site scripting (XSS) vulnerability in index.php in NetRisk 1.9.7 and possibly earlier allows remote attackers to …

  Jan 9, 2008
• Unscored —
  CVE-2008-0187 Public exploit

  SQL injection vulnerability in songinfo.php in SAM Broadcaster samPHPweb, possibly 4.2.2 and earlier, allows remote att…

  Jan 9, 2008
• Unscored —
  CVE-2008-0185 Public exploit

  SQL injection vulnerability in index.php in NetRisk 1.9.7 and possibly earlier versions allows remote attackers to exec…

  Jan 9, 2008
• Unscored —
  CVE-2007-5762 Public exploit

  NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by ope…

  Jan 9, 2008
• Unscored —
  CVE-2007-4772

  The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 befo…

  Jan 9, 2008
• Unscored —
  CVE-2007-4769

  The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 befo…

  Jan 9, 2008
• Unscored —
  CVE-2007-6600

  PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21 uses superu…

  Jan 9, 2008
• Unscored —
  CVE-2007-6067

  Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 b…

  Jan 9, 2008
• Unscored —
  CVE-2007-6601

  The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 befo…

  Jan 9, 2008
• Unscored —
  CVE-2007-5616

  ssh-signer in SSH Tectia Client and Server 5.x before 5.2.4, and 5.3.x before 5.3.6, on Unix and Linux allows local use…

  Jan 9, 2008
• Unscored —
  CVE-2007-5401

  Unrestricted file upload vulnerability in uploadrequest.asp in Layton HelpBox 3.7.1 allows remote authenticated users t…

  Jan 9, 2008
• Unscored —
  CVE-2007-5403

  Multiple cross-site scripting (XSS) vulnerabilities in Layton HelpBox 3.7.1 allow remote authenticated users to inject …

  Jan 9, 2008
• Unscored —
  CVE-2007-5404

  Layton HelpBox 3.7.1 generates different responses depending on whether or not a username is valid in a failed login at…

  Jan 9, 2008
• Unscored —
  CVE-2007-5402

  Multiple SQL injection vulnerabilities in Layton HelpBox 3.7.1 allow (1) remote attackers to execute arbitrary SQL comm…

  Jan 9, 2008
• Unscored —
  CVE-2008-0151 Public exploit

  Heap-based buffer overflow in Foxit WAC Server 2.1.0.910, 2.0 Build 3503, and earlier allows remote attackers to cause …

  Jan 9, 2008
• Unscored —
  CVE-2008-0153 Public exploit EPSS 13%

  telnetd.exe in Pragma TelnetServer 7.0.4.589 allows remote attackers to cause a denial of service (process crash and re…

  Jan 9, 2008
• Unscored —
  CVE-2008-0158 Public exploit

  Directory traversal vulnerability in index.php in Shop-Script 2.0 and possibly other versions allows remote attackers t…

  Jan 9, 2008
• Unscored —
  CVE-2008-0155 Public exploit

  Cross-site scripting (XSS) vulnerability in index.php in EvilBoard 0.1a (Alpha) allows remote attackers to inject arbit…

  Jan 9, 2008
• Unscored —
  CVE-2008-0149 Public exploit

  TUTOS 1.3 allows remote attackers to read system information via a direct request to php/admin/phpinfo.php, which calls…

  Jan 9, 2008
• Unscored —
  CVE-2008-0157 Public exploit

  SQL injection vulnerability in FlexBB 0.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via t…

  Jan 9, 2008
• Unscored —
  CVE-2008-0159 Public exploit

  SQL injection vulnerability in index.php in eggBlog 3.1.0 and earlier allows remote attackers to execute arbitrary SQL …

  Jan 9, 2008
• Unscored —
  CVE-2008-0150

  Unspecified vulnerability in the LDAP authentication feature in Aruba Mobility Controller 2.3.6.15, 2.5.2.11, 2.5.4.25,…

  Jan 9, 2008
• Unscored —
  CVE-2008-0152

  SLnet.exe in SeattleLab SLNet RF Telnet Server 4.1.1.3758 and earlier allows user-assisted remote attackers to cause a …

  Jan 9, 2008
• Unscored —
  CVE-2008-0147 Public exploit

  SQL injection vulnerability in index.php in SmallNuke 2.0.4 and earlier, when magic_quotes_gpc is disabled, allows remo…

  Jan 9, 2008
• Unscored —
  CVE-2008-0156

  Absolute path traversal vulnerability in index.php in Million Dollar Script 2.0.14 allows remote attackers to read arbi…

  Jan 9, 2008
• Unscored —
  CVE-2008-0154 Public exploit

  SQL injection vulnerability in index.php in EvilBoard 0.1a (Alpha) allows remote attackers to execute arbitrary SQL com…

  Jan 9, 2008
• Unscored —
  CVE-2008-0148 Public exploit

  TUTOS 1.3 does not restrict access to php/admin/cmd.php, which allows remote attackers to execute arbitrary shell comma…

  Jan 9, 2008
• Unscored —
  CVE-2007-5761

  The NantSys device 5.0.0.115 in Motorola netOctopus 5.1.2 build 1011 has weak permissions for the \\.\NantSys device in…

  Jan 9, 2008
• Unscored —
  CVE-2007-5665

  STEngine.exe 3.5.0.20 in Novell ZENworks Endpoint Security Management (ESM) 3.5, and other ESM versions before 3.5.0.82…

  Jan 9, 2008