Skip to content
OpenAdvisories

Archive

23 February 2007

Vulnerabilities first published on this day (UTC), newest first.

28 results · Feed

  • Unscored —

    IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 does not properly terminate certain input strings, which all…

  • Unscored —

    Stack-based buffer overflow in IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 allows local users to execute…

  • Unscored —

    IBM DB2 Universal Database (UDB) 9.1 GA through 9.1 FP1 allows local users with table SELECT privileges to perform unau…

  • Unscored —

    Unspecified binaries in IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 allow local users to create or modif…

  • Unscored —

    The enigmail extension before 0.94.2 does not properly handle large, encrypted file e-mail attachments, which allows re…

  • Unscored —
    CVE-2006-7026 Public exploit

    PHP remote file inclusion vulnerability in sources/join.php in Aardvark Topsites PHP 4.2.2 and earlier, when register_g…

  • Unscored —

    Single CPU Sun systems running Solaris 7, 8, or 9, such as Netra, allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2006-7029 EPSS 13%

    Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of service (crash) via a frames…

  • Unscored —

    Unspecified vulnerability in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of s…

  • Unscored —

    PHP remote file inclusion vulnerability in register.php for Andys Chat 4.5 allows remote attackers to execute arbitrary…

  • Medium 6.5
    CVE-2006-7031 Public exploit EPSS 18%

    Microsoft Internet Explorer 6.0.2900 SP2 and earlier allows remote attackers to cause a denial of service (crash) via a…

  • Unscored —

    The SMTP service in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service (i…

  • Unscored —

    The IMAP4 service in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service (…

  • Unscored —

    SQL injection vulnerability in admin/config.php in Bookmark4U 2.0 and 2.1 allows remote attackers to inject arbitrary S…

  • Unscored —
    CVE-2006-7027 EPSS 15%

    Microsoft Internet Security and Acceleration (ISA) Server 2004 logs unusual ASCII characters in the Host header, includ…

  • Unscored —
    CVE-2006-7030 EPSS 17%

    Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of service (crash) via certain …

  • Unscored —

    Multiple buffer overflows in MERCUR Messaging 2005 before Service Pack 4 allow remote attackers to cause a denial of se…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Super Link Exchange Script 1.0 allows remote attackers to inject arbitrary …

  • Unscored —

    SQL injection vulnerability in directory.php in Super Link Exchange Script 1.0 might allow remote attackers to execute …

  • Unscored —

    Directory traversal vulnerability in make_thumbnail.php in Super Link Exchange Script 1.0 allows remote attackers to re…

  • Unscored —

    Mathcad 12 through 13.1 allows local users to bypass the security features by directly accessing or editing the XML rep…

  • Unscored —
    CVE-2006-7032 Public exploit

    PHP remote file inclusion vulnerability in phpbb/getmsg.php in FlashBB 1.1.5 and earlier allows remote attackers to exe…

  • Unscored —

    Buffer overflow in the Update Service Agent ActiveX Control in isusweb.dll for Macrovision FLEXnet Connect (formerly In…

  • Unscored —

    Multiple buffer overflows in (a) an ActiveX control (iftw.dll) and (b) Netscape plug-in (npiftw32.dll) for Macrovision …

  • Unscored —
    CVE-2007-1085 Public exploit EPSS 11%

    Cross-site scripting (XSS) vulnerability in Google Desktop allows remote attackers to bypass protection schemes and inj…

  • Unscored —
    CVE-2007-0843 Public exploit

    The ReadDirectoryChangesW API function on Microsoft Windows 2000, XP, Server 2003, and Vista does not check permissions…

  • Unscored —

    Buffer overflow in the Configuration Checker (ConfigChk) ActiveX control in VSCnfChk.dll 2.0.0.2 for Verisign Managed P…

  • Unscored —

    Mozilla Firefox 2.0.0.1 and earlier does not prompt users before saving bookmarklets, which allows remote attackers to …