Archive
13 February 2007
Vulnerabilities first published on this day (UTC), newest first.
29 results · Feed
-
Unscored —
Buffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via unspecified vectors involving th…
-
Unscored —
Cross-Site Request Forgery (CSRF) vulnerability in admin/admin.adm.php in Jportal 2.3.1, and possibly earlier, allows r…
-
Unscored —
The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not properly initialize t…
-
Unscored —CVE-2007-0219 EPSS 40%
Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from (1) Msb1fren.dll, (2) Htmlmm.ocx, and (3) Blnm…
-
Unscored —CVE-2007-0911 Public exploit
Off-by-one error in the str_ireplace function in PHP 5.2.1 might allow context-dependent attackers to cause a denial of…
-
Unscored —
Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecif…
-
Unscored —
PHP before 5.2.1 allows attackers to bypass safe_mode and open_basedir restrictions via unspecified vectors in the sess…
-
Unscored —
Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execute arbitra…
-
Unscored —
Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format s…
-
Unscored —CVE-2006-4697 EPSS 32%
Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from Imjpcksid.dll as ActiveX controls, which allow…
-
Unscored —
The wininet.dll FTP client code in Microsoft Internet Explorer 5.01 and 6 might allow remote attackers to execute arbit…
-
Unscored —CVE-2007-0209 EPSS 29%
Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac allows us…
-
Unscored —CVE-2007-0208 EPSS 31%
Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac does not …
-
Unscored —CVE-2006-1311 EPSS 32%
The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1; Office 2000 SP3, XP SP3, 2003 SP2, and Offi…
-
Unscored —CVE-2006-3448 EPSS 38%
Buffer overflow in the Step-by-Step Interactive Training in Microsoft Windows 2000 SP4, XP SP2 and Professional, and Se…
-
Unscored —CVE-2006-5270 EPSS 30%
Integer overflow in the Microsoft Malware Protection Engine (mpengine.dll), as used by Windows Live OneCare, Antigen, D…
-
Unscored —
The Window Image Acquisition (WIA) Service in Microsoft Windows XP SP2 allows local users to gain privileges via unspec…
-
Unscored —CVE-2007-0025 EPSS 37%
The MFC component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 and Visual Studio .NET 2000, 2002 SP1, 2003, and …
-
Unscored —CVE-2007-0026 EPSS 25%
The OLE Dialog component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 allows user-assisted remote attackers to e…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register_globals …
-
Unscored —CVE-2007-0214 EPSS 27%
The HTML Help ActiveX control (Hhctrl.ocx) in Microsoft Windows 2000 SP3, XP SP2 and Professional, 2003 SP1 allows remo…
-
Unscored —CVE-2007-0904 Public exploit
SQL injection vulnerability in projects.php in LightRO CMS 1.0 allows remote attackers to execute arbitrary SQL command…
-
Medium —
MoinMoin Insertion of Sensitive Information into Log File
Unspecified vulnerability in the "Show debugging information" feature in MoinMoin 1.5.7 allows remote attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
-
Unscored —
The hardware detection functionality in the Windows Shell in Microsoft Windows XP SP2 and Professional, and Server 2003…
-
Unscored —
Unspecified vulnerability in the mod_roster_odbc module in ejabberd before 1.1.3 has unknown impact and attack vectors.
-
Medium —
MoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parameters
Multiple cross-site scripting (XSS) vulnerabilities in Info pages in MoinMoin 1.5.7 allow remote attackers to inject arbitrary web script or HTML via the (1) hitcounts and (2) general parameters, different vectors than CVE-2007-0857. NOTE: the provenance of t…
-
Unscored —
The 64-bit versions of Microsoft Visual C++ 8.0 standard library (MSVCR80.DLL) time functions, including (1) localtime,…
-
Unscored —CVE-2007-0896 Public exploit
Cross-site scripting (XSS) vulnerability in the (1) Sage before 1.3.10, and (2) Sage++ extensions for Firefox, allows r…
-
Unscored —
Race condition in recursive directory deletion with the (1) -r or (2) -R option in rm in Solaris 8 through 10 before 20…