Archive
14 February 2007
Vulnerabilities first published on this day (UTC), newest first.
22 results · Feed
-
Unscored —
The dologin function in guestbook.php in KvGuestbook 1.0 Beta allows remote attackers to gain administrative privileges…
-
Unscored —CVE-2007-0920 Public exploit
SQL injection vulnerability in philboard_forum.asp in Philboard 1.14 and earlier allows remote attackers to execute arb…
-
Unscored —
Heap-based buffer overflow in uTorrent 1.6 allows remote attackers to execute arbitrary code via a torrent file with a …
-
Unscored —
Variable extract vulnerability in Apache Stats before 0.0.3beta allows attackers to modify arbitrary variables and cond…
-
Unscored —
Directory traversal vulnerability in php rrd browser before 0.2.1 allows remote attackers to read arbitrary files via "…
-
Unscored —
buscador/buscador.htm in Portal Search allows remote attackers to obtain sensitive information (business logic) via a q…
-
Unscored —
Portal Search allows remote attackers to redirect a URL to an arbitrary web site by placing the URL in the query string…
-
Unscored —
Heap-based buffer overflow in the management interfaces in (1) Aruba Mobility Controllers 200, 800, 2400, and 6000 and …
-
Unscored —
Virtual Calendar stores sensitive information under the web root with insufficient access control, which allows remote …
-
Unscored —CVE-2007-0919 Public exploit
Directory traversal vulnerability in Nickolas Grigoriadis Mini Web server (MiniWebsvr) 0.0.6 allows remote attackers to…
-
Unscored —CVE-2007-0925 Public exploit
Cross-site scripting (XSS) vulnerability in search/SearchResults.aspx in Community Server allows remote attackers to in…
-
Unscored —
Cross-site scripting (XSS) vulnerability in buscador/buscador.htm in Portal Search allows remote attackers to inject ar…
-
Unscored —
The (1) Aruba Mobility Controllers 200, 600, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do…
-
Unscored —
Till Gerken phpPolls 1.0.3 allows remote attackers to bypass authentication and perform certain administrative actions …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the administrator console for Adobe JRun 4.0, as used in ColdFusion, allows…
-
Unscored —
The Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signa…
-
Unscored —
Race condition in the TCP subsystem for Solaris 10 allows remote attackers to cause a denial of service (system panic) …
-
Unscored —
Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.11 and…
-
Unscored —
Distributed SLS daemon (SLSd) on HP-UX B.11.11 allows remote attackers to overwrite arbitrary files and gain privileges…
-
Unscored —
The ATOMIC.TCP signature engine in the Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XA, 12.3YA, 12.3T, a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 7 7.0 and 7.0.1, when Global Script Protection is not e…
-
Unscored —CVE-2007-0913 EPSS 12%
Unspecified vulnerability in Microsoft Powerpoint allows remote user-assisted attackers to execute arbitrary code via u…