Archive
January 2007
Vulnerabilities first published in this month (UTC), newest first.
725 results · Feed
-
Unscored —CVE-2007-0119 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in EditTag 1.2 allow remote attackers to inject arbitrary web scrip…
-
Unscored —
Unrestricted file upload vulnerability in Uber Uploader 4.2 allows remote attackers to upload and execute arbitrary PHP…
-
Unscored —CVE-2007-0118 Public exploit
Multiple absolute path traversal vulnerabilities in EditTag 1.2 allow remote attackers to read arbitrary files via an a…
-
Unscored —
Linux kernel before 2.6.18, when running on x86_64 systems, does not properly save or restore EFLAGS during a context s…
-
Unscored —
Heap-based buffer overflow in the Mail Management Server (MAILMA.exe) in Eudora WorldMail 3.1.x allows remote attackers…
-
Unscored —
fetchmail 6.3.5 and 6.3.6 before 6.3.6-rc4, when refusing a message delivered via the mda option, allows remote attacke…
-
Unscored —
fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords over unsecured links if c…
-
Unscored —
Sun Java System Content Delivery Server 5.0 and 5.0 PU1 allows remote attackers to obtain sensitive information regardi…
-
Unscored —
The Adobe PDF specification 1.3, as implemented by Adobe Acrobat before 8.0.0, allows remote attackers to have an unkno…
-
Unscored —
The Adobe PDF specification 1.3, as implemented by Apple Mac OS X Preview, allows remote attackers to have an unknown i…
-
Unscored —CVE-2007-0110 Public exploit
Cross-site scripting (XSS) vulnerability in nidp/idff/sso in Novell Access Manager Identity Server before 3.0.0-1013 al…
-
Unscored —
Buffer overflow in Resco Photo Viewer for PocketPC 4.11 and 6.01, as used in mobile devices running Windows Mobile 5.0,…
-
Unscored —
WordPress before 2.0.6, when mbstring is enabled for PHP, decodes alternate character sets after escaping the SQL query…
-
Unscored —
The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before 3.5.5, (c) poppler be…
-
Unscored —
nwgina.dll in Novell Client 4.91 SP3 for Windows 2000/XP/2003 does not delete user profiles during a Terminal Service o…
-
Unscored —CVE-2007-0112 Public exploit
SQL injection vulnerability in cats.asp in createauction allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2007-0113 Public exploit
Buffer overflow in Packeteer PacketShaper PacketWise 8.x allows remote authenticated users to cause a denial of service…
-
Unscored —CVE-2007-0105 EPSS 11%
Stack-based buffer overflow in the CSAdmin service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 a…
-
Unscored —
wp-login.php in WordPress 2.0.5 and earlier displays different error messages if a user exists or not, which allows rem…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the CSRF protection scheme in WordPress before 2.0.6 allows remote attacker…
-
Unscored —CVE-2006-4098 EPSS 13%
Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 …
-
Unscored —
Multiple unspecified vulnerabilities in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows be…
-
Unscored —
The Bluetooth stack in the Plantronic Headset does not properly implement Non-pairable mode, which allows remote attack…
-
Unscored —
Multiple unspecified vulnerabilities in SPINE before 1.2 have unknown impact and attack vectors, related to (1) "Placeh…
-
Unscored —
Unspecified vulnerability in the Broadcom Bluetooth stack allows remote attackers to gain administrative access (aka Re…
-
Unscored —
Tor allows remote attackers to discover the IP address of a hidden service by accessing this service at a high rate, th…
-
Unscored —CVE-2006-6908 EPSS 31%
Buffer overflow in the Bluetooth Stack COM Server in the Widcomm Bluetooth stack, as packaged as Widcomm Stack 3.x and …
-
Unscored —
Unspecified vulnerability in the Bluesoil Bluetooth stack has unknown impact and attack vectors.
-
Unscored —
Directory traversal vulnerability in Widcomm Bluetooth for Windows (BTW) 3.0.1.905 allows remote attackers to conduct u…
-
Unscored —
Widcomm Bluetooth for Windows (BTW) before 4.0.1.1500 allows remote attackers to listen to and record conversations, ak…
-
Unscored —
Unspecified vulnerability in the Bluetooth stack in Apple Mac OS 10.4 has unknown impact and attack vectors, related to…
-
Unscored —
Unspecified vulnerability in the Widcomm Bluetooth stack allows remote attackers to gain administrative access (aka Rem…
-
Unscored —CVE-2006-6902 EPSS 15%
Unspecified vulnerability in the Bluetooth stack in Microsoft Windows Mobile Pocket PC edition allows remote attackers …
-
Unscored —
Unspecified vulnerability in the Bluetooth stack on Mac OS 10.4.7 and earlier has unknown impact and local attack vecto…
-
Unscored —CVE-2006-6899 Public exploit
hidd in BlueZ (bluez-utils) before 2.25 allows remote attackers to obtain control of the (1) Mouse and (2) Keyboard Hum…
-
Unscored —CVE-2006-6901 EPSS 15%
Unspecified vulnerability in the Bluetooth stack in Microsoft Windows allows remote attackers to gain administrative ac…
-
Unscored —
Unspecified vulnerability in the Toshiba Bluetooth stack allows remote attackers to gain administrative access (aka Rem…
-
Unscored —
The Bluetooth stack in the Sony Ericsson T60 does not properly implement "Limited discoverable" mode, which allows remo…
-
Unscored —
The Perforce client does not restrict the set of files that it overwrites upon receiving a request from the server, whi…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in SPINE allows remote attackers to perform unauthorized actions as adm…