NVD-CWE-noinfo

Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a “field offset overflow” that triggers an “illegal memory access,” a different vulnerability than CVE-2007-6354.

Multiple unspecified vulnerabilities in Lyris ListManager 8.x before 8.95d, 9.2 before 9.2c, and 9.3 before 9.3b allow remote attackers to (1) gain list administrator privileges or (2) access arbitrary mailing lists via unknown vectors related to modification of client-side information; and (3) allow remote authenticated administrators to modify other account data by creating “new accounts that collide with existing accounts.”

Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 3 R3.7 allow attackers to gain privileges via “some HMC commands.”

PHP remote file inclusion vulnerability in users_popupL.php3 in phpMyChat 0.14.5 allows remote attackers to execute arbitrary PHP code via a URL in the From parameter.