|
267141
|
- |
|
ripe_website_manager
|
ripe_website_manager
|
Cross-site scripting (XSS) vulnerability in contact/index.php in Ripe Website Manager 0.8.4 and earlier allows remote attackers to inject arbitrary web script or HTML via a leading "<"<" i…
|
CWE-79
Cross-site Scripting
|
CVE-2007-2206
|
2017-07-29 10:31 |
2007-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267142
|
- |
|
mybb
|
mybb
|
Multiple SQL injection vulnerabilities in calendar.php in MyBB (aka MyBulletinBoard) 1.2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) year or (2) month parameter…
|
NVD-CWE-Other
|
CVE-2007-2212
|
2017-07-29 10:31 |
2007-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267143
|
- |
|
microsoft
|
intelligent_application_gateway_2007
|
Multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll), as used in Microsoft Intelligent Application Gateway (IAG) before 3.7 SP2, allow remote attackers to…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2007-2238
|
2017-07-29 10:31 |
2009-04-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267144
|
- |
|
axis
|
2100_network_camera
2110_network_camera
2120_network_camera
2130_ptz_network_camera
2400_video_server
2401_video_server
2411_video_server
2420-ir_network_camera
2420_network_c…
|
Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control (aka CamImage) ActiveX control before 2.40.0.0 in AxisCamControl.ocx in AXIS 2100, 2110, 2120, 2130 PTZ, 2420, 2420-IR, 24…
|
NVD-CWE-Other
|
CVE-2007-2239
|
2017-07-29 10:31 |
2007-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267145
|
- |
|
openbsd
|
openssh
|
OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers to determine the existence of user accounts by attempting to authenticate via S/KEY, which displays a…
|
CWE-287
Improper Authentication
|
CVE-2007-2243
|
2017-07-29 10:31 |
2007-04-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267146
|
- |
|
phpmyadmin
|
phpmyadmin
|
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.10.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the fieldkey parameter to browse_foreigners.php…
|
NVD-CWE-Other
|
CVE-2007-2245
|
2017-07-29 10:31 |
2007-04-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267147
|
- |
|
xaraya
|
xaraya
|
Unspecified vulnerability in the Roles module in Xaraya 1.1.2 and earlier allows attackers to gain privileges via unspecified vectors, probably related to incorrect permission checking in xartemplate…
|
NVD-CWE-Other
|
CVE-2007-2251
|
2017-07-29 10:31 |
2007-04-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267148
|
- |
|
exponent
|
exponent_cms
|
Directory traversal vulnerability in iconspopup.php in Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain sensitive information via a .. (dot dot) in the icodir parameter.
|
NVD-CWE-Other
|
CVE-2007-2252
|
2017-07-29 10:31 |
2007-04-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267149
|
- |
|
exponent
|
exponent_cms
|
Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain path information via a direct request for (1) sdk/blanks/formcontrol.php and (2) sdk/blanks/file_modules.php.
|
CWE-200
Information Exposure
|
CVE-2007-2253
|
2017-07-29 10:31 |
2007-04-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267150
|
- |
|
sun
|
cluster
|
Unspecified vulnerability in Sun Cluster 3.1 and Solaris Cluster 3.2 before 20070424 allows remote authenticated users, operating from a different cluster node, to cause a denial of service (data cor…
|
NVD-CWE-Other
|
CVE-2007-2267
|
2017-07-29 10:31 |
2007-04-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
