Skip to content
OpenAdvisories

Archive

12 February 2007

Vulnerabilities first published on this day (UTC), newest first.

15 results · Clear filters · Feed

  • Unscored —
    CVE-2006-7005 Public exploit

    SQL injection vulnerability in item.php in PSY Auction allows remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2006-7004 Public exploit

    Cross-site scripting (XSS) vulnerability in email_request.php in PSY Auction allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2006-7007 Public exploit

    Buffer overflow in Tiny FTPd 1.4 and earlier allows remote attackers to cause a denial of service (daemon crash) via a …

  • Unscored —
    CVE-2007-0888 Public exploit

    Directory traversal vulnerability in the TFTP server in Kiwi CatTools before 3.2.0 beta allows remote attackers to read…

  • Unscored —
    CVE-2007-0890 Public exploit

    Cross-site scripting (XSS) vulnerability in scripts/passwdmysql in cPanel WebHost Manager (WHM) 11.0.0 and earlier allo…

  • Unscored —
    CVE-2007-0887 Public exploit EPSS 10%

    axigen 1.2.6 through 2.0.0b1 does not properly parse login credentials, which allows remote attackers to cause a denial…

  • Unscored —
    CVE-2007-0886 Public exploit

    Heap-based buffer underflow in axigen 1.2.6 through 2.0.0b1 allows remote attackers to cause a denial of service (appli…

  • Unscored —
    CVE-2007-0885 Public exploit Scanner template

    Cross-site scripting (XSS) vulnerability in jira/secure/BrowseProject.jspa in Rainbow with the Zen (Rainbow.Zen) extens…

  • Unscored —
    CVE-2007-0882 Public exploit EPSS 99%

    Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterp…

  • Unscored —
    CVE-2007-0883 Public exploit

    Directory traversal vulnerability in portalgroups/portalgroups/getfile.cgi in IP3 NetAccess before firmware 4.1.9.6 all…

  • Unscored —
    CVE-2007-0881 Public exploit

    PHP remote file inclusion vulnerability in the Seitenschutz plugin for OPENi-CMS 1.0 allows remote attackers to execute…

  • Unscored —
    CVE-2007-0873 Public exploit

    nabopoll 1.1.2 allows remote attackers to bypass authentication and access certain administrative functionality via a d…

  • Unscored —
    CVE-2007-0872 Public exploit

    Directory traversal vulnerability in the Plain Old Webserver (POW) add-on before 0.0.9 for Mozilla Firefox allows remot…

  • Unscored —
    CVE-2007-0871 Public exploit

    Unrestricted file upload vulnerability in eXtremePow eXtreme File Hosting allows remote attackers to upload arbitrary P…

  • Unscored —
    CVE-2006-6995 Public exploit

    mycontacts.php in V3 Chat allows remote authenticated users to gain privileges as other users via a modified membername…