Archive
8 February 2007
Vulnerabilities first published on this day (UTC), newest first.
34 results · Feed
-
Unscored —CVE-2007-0446 EPSS 45%
Stack-based buffer overflow in magentproc.exe for Hewlett-Packard Mercury LoadRunner Agent 8.0 and 8.1, Performance Cen…
-
Unscored —
Unspecified vulnerability in Twiki 4.0.0 through 4.1.0 allows local users to execute arbitrary Perl code via unknown ve…
-
Unscored —
The ruby handlers in the Magnatune component in Amarok do not properly quote text in certain contexts, probably includi…
-
Unscored —
3proxy 0.5 to 0.5.2, when NT-encoded passwords are being used, allows remote attackers to cause a denial of service (bl…
-
Unscored —
The magnatune.com album browser in Amarok allows attackers to cause a denial of service (application crash) via unspeci…
-
Unscored —
3proxy 0.5 to 0.5.2 does not offer NTLM authentication before basic authentication, which might cause browsers with inc…
-
Unscored —CVE-2007-0845 Public exploit
admin/index.php in Advanced Poll 2.0.0 through 2.0.5-dev allows remote attackers to bypass authentication and gain admi…
-
Unscored —
scripts/cronscript.php in SysCP 1.2.15 and earlier includes and executes arbitrary PHP scripts that are referenced by t…
-
Medium —
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin before 1.5.7 allow remote attackers to inject arbitrary web script or HTML via (1) the page info, or the page name in a (2) AttachFile, (3) RenamePage, or (4) LocalSiteMap action.
-
Unscored —
Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted r…
-
Unscored —
Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other pro…
-
Unscored —
Cross-site scripting (XSS) vulnerability in DevTrack 6.x allows remote attackers to inject arbitrary web script or HTML…
-
Unscored —CVE-2007-0848 Public exploit
PHP remote file inclusion vulnerability in classes/class_mail.inc.php in Maian Recipe 1.0 allows remote attackers to ex…
-
Unscored —CVE-2007-0847 Public exploit
SQL injection vulnerability in mod/PM/reply.php in Open Tibia Server CMS (OTSCMS) 2.1.5 and earlier allows remote attac…
-
Unscored —
SQL injection vulnerability in DevTrack 6.0.3 allows remote attackers to execute arbitrary SQL commands via the Usernam…
-
Unscored —CVE-2007-0849 Public exploit
scripts/cronscript.php in SysCP 1.2.15 and earlier does not properly quote pathnames in user home directories, which al…
-
Unscored —
Remote file inclusion vulnerability in scripts2/objcache in cPanel WebHost Manager (WHM) allows remote attackers to exe…
-
Unscored —
TmComm.sys 1.5.0.1052 in the Trend Micro Anti-Rootkit Common Module (RCM), with the VsapiNI.sys 3.320.0.1003 scan engin…
-
Unscored —CVE-2007-0846 Public exploit
Cross-site scripting (XSS) vulnerability in forum.php in Open Tibia Server CMS (OTSCMS) 2.1.5 and earlier allows remote…
-
Unscored —
HP Network Node Manager (NNM) Remote Console 7.50, 7.51, and 7.53 assigns Everyone Full Control permission for the %PRO…
-
Critical 9.8
PHP remote file inclusion vulnerability in centipaid_class.php in CentiPaid 1.4.3 allows remote attackers to execute ar…
-
Unscored —CVE-2006-6976 Public exploit
PHP remote file inclusion vulnerability in centipaid_class.php in CentiPaid 1.4.2 and earlier allows remote attackers t…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the "Basic Toolbar Selection" in FCKEditor allows remote attackers to execu…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the "Basic Toolbar Selection" in FreeTextBox allows remote attackers to exe…
-
Unscored —
phpBB 2.0.20 does not verify user-specified input variable types before being passed to type-dependent functions, which…
-
Unscored —
phpBB 2.0.20 does not properly verify user-specified input variables used as limits to SQL queries, which allows remote…
-
Unscored —
The auth_via_key function in pam_ssh.c in pam_ssh before 1.92, when the allow_blank_passphrase option is disabled, allo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in HLstats before 1.35 allows remote attackers to inject arbitrary web script …
-
Unscored —
Multiple unspecified vulnerabilities in vbDrupal before 4.7.6.0 have unknown impact and remote attack vectors. NOTE: th…
-
Unscored —
FreeProxy before 3.92 Build 1626 allows malicious users to cause a denial of service (infinite loop) via a HOST: header…
-
Unscored —CVE-2007-0836 Public exploit
admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to include arbitr…
-
Unscored —CVE-2007-0839 Public exploit
Multiple PHP remote file inclusion vulnerabilities in index/index_album.php in Valarsoft WebMatic 2.6 allow remote atta…
-
Unscored —CVE-2007-0837 Public exploit
PHP remote file inclusion vulnerability in examples/inc/top.inc.php in AgerMenu 0.03 and earlier allows remote attacker…
-
Unscored —
admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to execute arbitr…