Skip to content
OpenAdvisories

Archive

14 February 2007

Vulnerabilities first published on this day (UTC), newest first.

22 results · Feed

  • Unscored —

    The dologin function in guestbook.php in KvGuestbook 1.0 Beta allows remote attackers to gain administrative privileges…

  • Unscored —
    CVE-2007-0920 Public exploit

    SQL injection vulnerability in philboard_forum.asp in Philboard 1.14 and earlier allows remote attackers to execute arb…

  • Unscored —
    CVE-2007-0927 Public exploit EPSS 45%

    Heap-based buffer overflow in uTorrent 1.6 allows remote attackers to execute arbitrary code via a torrent file with a …

  • Unscored —

    Variable extract vulnerability in Apache Stats before 0.0.3beta allows attackers to modify arbitrary variables and cond…

  • Unscored —

    Directory traversal vulnerability in php rrd browser before 0.2.1 allows remote attackers to read arbitrary files via "…

  • Unscored —

    buscador/buscador.htm in Portal Search allows remote attackers to obtain sensitive information (business logic) via a q…

  • Unscored —

    Portal Search allows remote attackers to redirect a URL to an arbitrary web site by placing the URL in the query string…

  • Unscored —

    Heap-based buffer overflow in the management interfaces in (1) Aruba Mobility Controllers 200, 800, 2400, and 6000 and …

  • Unscored —

    Virtual Calendar stores sensitive information under the web root with insufficient access control, which allows remote …

  • Unscored —
    CVE-2007-0919 Public exploit

    Directory traversal vulnerability in Nickolas Grigoriadis Mini Web server (MiniWebsvr) 0.0.6 allows remote attackers to…

  • Unscored —
    CVE-2007-0925 Public exploit

    Cross-site scripting (XSS) vulnerability in search/SearchResults.aspx in Community Server allows remote attackers to in…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in buscador/buscador.htm in Portal Search allows remote attackers to inject ar…

  • Unscored —

    The (1) Aruba Mobility Controllers 200, 600, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do…

  • Unscored —

    Till Gerken phpPolls 1.0.3 allows remote attackers to bypass authentication and perform certain administrative actions …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the administrator console for Adobe JRun 4.0, as used in ColdFusion, allows…

  • Unscored —

    The Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signa…

  • Unscored —

    Race condition in the TCP subsystem for Solaris 10 allows remote attackers to cause a denial of service (system panic) …

  • Unscored —

    Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.11 and…

  • Unscored —

    Distributed SLS daemon (SLSd) on HP-UX B.11.11 allows remote attackers to overwrite arbitrary files and gain privileges…

  • Unscored —

    The ATOMIC.TCP signature engine in the Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XA, 12.3YA, 12.3T, a…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 7 7.0 and 7.0.1, when Global Script Protection is not e…

  • Unscored —
    CVE-2007-0913 EPSS 12%

    Unspecified vulnerability in Microsoft Powerpoint allows remote user-assisted attackers to execute arbitrary code via u…