CVEs published in November 2007
421 vulnerabilities, 72 critical, 0 exploited.
- vbtubeCross-site scripting (XSS) vulnerability in vBTube.php in vBTube 1.1 Beta allows remote attackers...4.3 Medium
- dora emlak emlakMultiple SQL injection vulnerabilities in Dora Emlak 2.0 allow remote attackers to execute...7.5 High
- mp3 toolboxPHP remote file inclusion vulnerability in index.php in Mp3 ToolBox 1.0 beta 5 allows remote...6.8 Medium
- vu mass mailerSQL injection vulnerability in redir.asp in VU Mass Mailer allows remote attackers to execute...7.5 High
- p3mbo content injectorSQL injection vulnerability in news.php in Content Injector 1.52 allows remote attackers to...7.5 High
- m2scripts my space scripts poll creatorMultiple cross-site scripting (XSS) vulnerabilities in index.php in M2Scripts MySpace Scripts...4.3 Medium
- phpslideshowCross-site scripting (XSS) vulnerability in phpslideshow.php in PHPSlideShow 0.9.9.2, and...4.3 Medium
- phpkitSQL injection vulnerability in pkinc/public/article.php in PHPKIT 1.6.4pl1 allows remote...7.5 High
- devmass cartPHP remote file inclusion vulnerability in admin/kfm/initialise.php in DevMass Shopping Cart 1.0...5.8 Medium
- mozilla firefox, seamonkey +1 moreMozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 sets the Referer header to the window...4.3 Medium
- mozilla firefox, seamonkey +1 moreMultiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1...9.3 High
- redhat fedora corebuttonpressed.sh in scanbuttond 0.2.3 allows local users to overwrite arbitrary files via a...2.1 Low
- gnu gnump3dgnump3d 2.9final does not apply password protection to its plugins, which might allow remote...5.0 Medium
- amber script scriptDirectory traversal vulnerability in scripts/include/show_content.php in Amber Script 1.0 allows...5.8 Medium
- flor de utopia workingonwebSQL injection vulnerability in events.php in WorkingOnWeb 2.0.1400 allows remote attackers to...7.5 High
- project alumni alumniMultiple SQL injection vulnerabilities in project alumni 1.0.9 and earlier allow remote attackers...7.5 High
- project alumni alumniMultiple cross-site scripting (XSS) vulnerabilities in project alumni 1.0.9 and earlier allow...4.3 Medium
- softbizscripts freelancers scriptSQL injection vulnerability in search_form.php in Softbiz Freelancers Script 1 allows remote...7.5 High
- softbizscripts freelancers scriptCross-site scripting (XSS) vulnerability in signin.php in Softbiz Freelancers Script 1 allows...4.3 Medium
- irc services servicesUnspecified vulnerability in IRC Services 5.1.8 has unknown impact and attack vectors.10.0 High
- irc services servicesThe default_encrypt function in encrypt.c in IRC Services before 5.0.63, and 5.1.x before 5.1.7,...5.0 Medium
- ethereal group ethereal, wireshark +1 moreWireshark (formerly Ethereal) 0.8.16 to 0.99.6 allows remote attackers to cause a denial of...5.0 Medium
- ethereal group ethereal, wireshark +1 moreThe Bluetooth SDP dissector Wireshark (formerly Ethereal) 0.99.2 to 0.99.6 allows remote...5.0 Medium
- wiresharkThe DCP ETSI dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a...7.8 High
- ethereal group ethereal, wireshark +1 moreThe MEGACO dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to...7.8 High
- wiresharkUnspecified vulnerability in the HTTP dissector for Wireshark (formerly Ethereal) 0.10.14 to 0.99...5.0 Medium
- wiresharkThe Firebird/Interbase dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers...5.0 Medium
- wiresharkBuffer overflow in the ANSI MAP dissector for Wireshark (formerly Ethereal) 0.99.5 to 0.99.6,...10.0 High
- wiresharkMultiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 through 0.99.6 allow remote...10.0 High
- wiresharkInteger signedness error in the DNP3 dissector in Wireshark (formerly Ethereal) 0.10.12 to 0.99.6...4.3 Medium
- wiresharkBuffer overflow in the PPP dissector Wireshark (formerly Ethereal) 0.99.6 allows remote attackers...10.0 High
- ethereal group ethereal, wireshark +1 moreMultiple unspecified vulnerabilities in Wireshark (formerly Ethereal) allow remote attackers to...7.1 High
- htdigCross-site scripting (XSS) vulnerability in htsearch in htdig 3.2.0b6 allows remote attackers to...4.3 Medium
- alstrasoft e-friendsSQL injection vulnerability in index.php in AlstraSoft E-Friends 4.98 and earlier allows remote...7.5 High
- talkbackMultiple PHP remote file inclusion vulnerabilities in TalkBack 2.2.7 allow remote attackers to...6.8 Medium
- filemaker, filemaker server +1 moreCross-site scripting (XSS) vulnerability in the Instant Web Publishing feature in FileMaker Pro 7...4.3 Medium
- ihu i hear uI Hear U (IHU) 0.5.6 and earlier allows remote attackers to cause (1) a denial of service ...5.0 Medium
- feed2jsCross-site scripting (XSS) vulnerability in Feed to JavaScript (Feed2JS) 1.91 allows remote...4.3 Medium
- code-crafters ability mail serverAbility Mail Server before 2.61 allows remote authenticated users to cause a denial of service ...4.0 Medium
- phpmyadminCross-site scripting (XSS) vulnerability in libraries/auth/cookie.auth.lib.php in phpMyAdmin...2.6 Low
- ingate firewall, siparator +1 moreUnspecified vulnerability in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 might leave ...10.0 High
- ingate firewall, siparator +1 moreIngate Firewall before 4.6.0 and SIParator before 4.6.0 do not log truncated (1) ICMP, (2) UDP,...7.5 High
- ingate firewall, siparator +1 moreUnspecified vulnerability in the ICMP implementation in Ingate Firewall before 4.6.0 and...10.0 High
- ingate firewall, siparator +1 moreIngate Firewall before 4.6.0 and SIParator before 4.6.0 use cleartext storage for passwords of ...5.0 Medium
- ingate firewall, siparator +1 moreThe SIP component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0, when Remote NAT...4.0 Medium
- ingate firewall, siparator +1 moreThe IPsec module in the VPN component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0...4.3 Medium
- ingate firewall, siparator +1 moreThe SRTP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote...7.1 High
- ingate firewall, siparator +1 moreBuffer overflow in libsrtp in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown...10.0 High
- jiro banner systemMultiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System (JBS) 2.0, and...7.5 High
- nuked-klanCross-site scripting (XSS) vulnerability in index.php in Nuked-Klan 1.7.5 allows remote attackers...4.3 Medium
- Show moreLoading…