Skip to content
OpenAdvisories

Archive

16 February 2007

Vulnerabilities first published on this day (UTC), newest first.

13 results · Clear filters · Feed

  • Unscored —
    CVE-2007-0710 Public exploit

    The Bonjour functionality in iChat in Apple Mac OS X 10.3.9 allows remote attackers to cause a denial of service (persi…

  • Unscored —
    CVE-2007-0982 Public exploit

    Cross-site scripting (XSS) vulnerability in error.php in TaskFreak! 0.5.5 allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2007-0984 Public exploit

    SQL injection vulnerability in admin_poll.asp in PollMentor 2.0 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2007-0983 Public exploit

    PHP remote file inclusion vulnerability in _admin/nav.php in AT Contenator 1.0 and earlier allows remote attackers to e…

  • Unscored —
    CVE-2007-0986 Public exploit

    PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5, when PHP 5.0.0 or later is used, allows remo…

  • Unscored —
    CVE-2007-0987 Public exploit

    Directory traversal vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to include and execute arbi…

  • Unscored —
    CVE-2007-0985 Public exploit

    SQL injection vulnerability in nickpage.php in phpCC 4.2 beta and earlier allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2007-0977 Public exploit EPSS 20%

    IBM Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores HTTPPassword hashes from names.…

  • Unscored —
    CVE-2007-0972 Public exploit

    Unrestricted file upload vulnerability in modules/emoticons.php in Jupiter CMS 1.1.5 allows remote attackers to upload …

  • Unscored —
    CVE-2007-0981 Public exploit EPSS 13%

    Mozilla based browsers, including Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8, allow rem…

  • Unscored —
    CVE-2007-0976 Public exploit

    Buffer overflow in the ActSoft DVD-Tools ActiveX control (dvdtools.ocx) allows remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2007-0970 Public exploit

    Multiple SQL injection vulnerabilities in WebTester 5.0.20060927 and earlier allow remote attackers to execute arbitrar…

  • Unscored —
    CVE-2007-0971 Public exploit

    Multiple SQL injection vulnerabilities in Jupiter CMS 1.1.5 allow remote attackers to execute arbitrary SQL commands vi…