CVEs published in January 2007
594 vulnerabilities, 54 critical, 0 exploited.
- bloodshed software dev-c\+\+ Stack-based buffer overflow in Bloodshed Dev-C++ 4.9.9.2 allows user-assisted remote attackers to... 4.3 Medium
- rbl tforum SQL injection vulnerability in tForum 2.00 in the Raymond BERTHOU script collection (aka RBL -... 7.5 High
- shaffer solutions corp dapcnfsd.dll Buffer overflow in the EnumPrintersA function in dapcnfsd.dll 0.6.4.0 in Shaffer Solutions (SSC)... 7.5 High
- zabbix Buffer overflow in ZABBIX before 1.1.5 has unknown impact and attack vectors related to "SNMP IP... 10.0 High
- guppy Multiple static code injection vulnerabilities in error.php in GuppY 4.5.16 and earlier allow... 7.5 High
- vlad alexa mancini phpfootball show.php in Vlad Alexa Mancini PHPFootball 1.6 allows remote attackers to obtain sensitive... 5.0 Medium
- galeria zdjec zdjec Directory traversal vulnerability in zd_numer.php in Galeria Zdjec 3.0 and earlier allows remote... 7.5 High
- inotify incron Unspecified vulnerability in inotify before 0.3.5 has unknown impact and attack vectors, related... 2.1 Low
- encapscms Multiple PHP remote file inclusion vulnerabilities in EncapsCMS 0.3.6 allow remote attackers to... 7.5 High
- sun solaris Unspecified vulnerability in Sun Solaris 10 before 20070130 allows remote attackers to cause a... 7.8 High
- t-systems solutions for research gmbh mynews PHP remote file inclusion vulnerability in include/themes/themefunc.php in MyNews 4.2.2 and... 7.5 High
- asp edge edge SQL injection vulnerability in artreplydelete.asp in ASP EDGE 1.3a and earlier allows remote... 7.5 High
- eclectic designs cascadianfaq SQL injection vulnerability in index.php in Eclectic Designs CascadianFAQ 4.1 and earlier allows... 7.5 High
- x-dev xnews Multiple SQL injection vulnerabilities in the generate_csv function in classes/class.news.php in... 7.5 High
- plain black webgui The www_purgeList method in Plain Black WebGUI before 7.3.8 does not properly check user... 6.4 Medium
- sun java system access manager Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Access Manager 6.1, 6.2, 6... 4.3 Medium
- michael still gtalkbot Michael Still gtalkbot before 1.2 places username and password arguments on the command line,... 4.9 Medium
- drupal The comment_form_add_preview function in comment.module in Drupal before 4.7.6, and 5.x before 5... 6.5 Medium
- nomachine nx server nxconfigure.sh in NoMachine NX Server before 2.1.0-18 does not validate the invoking user, which... 4.9 Medium
- maxdev mdpro user.php in MAXdev MDPro 1.0.76 allows remote attackers to obtain the full path via a ' (quote)... 5.0 Medium
- maxdev mdpro SQL injection vulnerability in index.php in MAXdev MDPro 1.0.76 allows remote attackers to... 7.5 High
- mybb Cross-site request forgery (CSRF) vulnerability in MyBB (aka MyBulletinBoard) 1.2.2 allows remote... 5.0 Medium
- vlad leont fd script download.php in FD Script 1.3.2 and earlier allows remote attackers to read source of files under... 5.0 Medium
- chmlib chmlib before 0.39 allows user-assisted remote attackers to execute arbitrary code via a crafted... 9.3 High
- ibm aix Unspecified vulnerability in (1) pop3d, (2) pop3ds, (3) imapd, and (4) imapds in IBM AIX 5.3.0... 7.5 High
- earthlink total access The SpamBlocker.dll ActiveX control in Earthlink TotalAccess is marked "safe for scripting,"... 6.8 Medium
- zenphoto Directory traversal vulnerability in zen/template-functions.php in zenphoto 1.0.4 up to 1.0.6... 7.8 High
- hitachi hibun advanced edition server, jpi hibun advanced edition server +1 more Unspecified vulnerability in Hitachi JP1/HIBUN Advanced Edition Management Server and Log Server... 7.8 High
- apple ichat, mac os x, instant message framework +2 more The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in... 7.8 High
- apple ichat, mdnsresponder, instant message framework +2 more The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in... 5.0 Medium
- microsoft ie, internet explorer +1 more Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers... 7.8 High
- apple mac os x crashdump in Apple Mac OS X 10.4.8 allows local users in the admin group to modify arbitrary... 6.2 Medium
- free lan intra internet portal lan intra internet portal Multiple cross-site scripting (XSS) vulnerabilities in Free LAN In(tra|ter)net Portal (FLIP)... 6.8 Medium
- cmsmadesimple cms made simple Cross-site scripting (XSS) vulnerability in the mailform feature in CMSimple 2.7 fix1 allows... 6.8 Medium
- telestream flip4mac windows media components for quicktime Telestream Flip4Mac Windows Media Components for Quicktime 2.1.0.33 allows remote attackers to... 10.0 High
- apple installer, mac os x +1 more Format string vulnerability in Apple Installer 2.1.5 on Mac OS X 10.4.8 allows user-assisted... 7.6 High
- linux kernel The dev_queue_xmit function in Linux kernel 2.6 can fail before calling the local_bh_disable... 9.4 High
- linux kernel The aio_setup_ring function in Linux kernel does not properly initialize a variable, which allows... 4.9 Medium
- linux kernel, redhat enterprise linux, enterprise linux desktop +2 more Unspecified vulnerability in the listxattr system call in Linux kernel, when a "bad inode" is... 7.2 High
- six apart ltd movable type Cross-site scripting (XSS) vulnerability in Movable Type (MT) before 3.34 allows remote attackers... 6.8 Medium
- pgp corporate desktop PGP Desktop before 9.5.1 does not validate data objects received over the (1) \pipe\pgpserv named... 7.1 High
- trend micro viruswall Buffer overflow in libvsapi.so in the VSAPI library in Trend Micro VirusWall 3.81 for Linux, as... 6.9 Medium
- aztek forum forum common/safety.php in Aztek Forum 4.00 allows remote attackers to enter certain data containing ... 7.5 High
- makit newsposter script SQL injection vulnerability in news_page.asp in Martyn Kilbryde Newsposter Script (aka makit news... 7.5 High
- aztek forum forum Variable overwrite vulnerability in common/config.php in Aztek Forum 4.00 allows remote attackers... 7.5 High
- aztek forum forum SQL injection vulnerability in forum/load.php in Aztek Forum 4.00 allows remote attackers to... 7.5 High
- aztek forum forum Aztek Forum 4.00 allows remote attackers to obtain sensitive information via a direct request to... 5.0 Medium
- aztek forum forum PHP remote file inclusion vulnerability in index/main.php in Aztek Forum 4.00 allows remote... 6.0 Medium
- designmind high5 review script Cross-site scripting (XSS) vulnerability in search in High 5 Review Site allows remote attackers... 4.3 Medium
- siteman Siteman 2.0.x2 stores sensitive information under the web root with insufficient access control,... 5.0 Medium
- Show olderLoading…