Archive
23 February 2007
Vulnerabilities first published on this day (UTC), newest first.
28 results · Feed
-
Unscored —
IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 does not properly terminate certain input strings, which all…
-
Unscored —
Stack-based buffer overflow in IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 allows local users to execute…
-
Unscored —
IBM DB2 Universal Database (UDB) 9.1 GA through 9.1 FP1 allows local users with table SELECT privileges to perform unau…
-
Unscored —
Unspecified binaries in IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 allow local users to create or modif…
-
Unscored —
The enigmail extension before 0.94.2 does not properly handle large, encrypted file e-mail attachments, which allows re…
-
Unscored —CVE-2006-7026 Public exploit
PHP remote file inclusion vulnerability in sources/join.php in Aardvark Topsites PHP 4.2.2 and earlier, when register_g…
-
Unscored —
Single CPU Sun systems running Solaris 7, 8, or 9, such as Netra, allows remote attackers to cause a denial of service …
-
Unscored —CVE-2006-7029 EPSS 13%
Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of service (crash) via a frames…
-
Unscored —
Unspecified vulnerability in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of s…
-
Unscored —
PHP remote file inclusion vulnerability in register.php for Andys Chat 4.5 allows remote attackers to execute arbitrary…
-
Medium 6.5
Microsoft Internet Explorer 6.0.2900 SP2 and earlier allows remote attackers to cause a denial of service (crash) via a…
-
Unscored —
The SMTP service in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service (i…
-
Unscored —
The IMAP4 service in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service (…
-
Unscored —
SQL injection vulnerability in admin/config.php in Bookmark4U 2.0 and 2.1 allows remote attackers to inject arbitrary S…
-
Unscored —CVE-2006-7027 EPSS 15%
Microsoft Internet Security and Acceleration (ISA) Server 2004 logs unusual ASCII characters in the Host header, includ…
-
Unscored —CVE-2006-7030 EPSS 17%
Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of service (crash) via certain …
-
Unscored —
Multiple buffer overflows in MERCUR Messaging 2005 before Service Pack 4 allow remote attackers to cause a denial of se…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Super Link Exchange Script 1.0 allows remote attackers to inject arbitrary …
-
Unscored —
SQL injection vulnerability in directory.php in Super Link Exchange Script 1.0 might allow remote attackers to execute …
-
Unscored —
Directory traversal vulnerability in make_thumbnail.php in Super Link Exchange Script 1.0 allows remote attackers to re…
-
Unscored —
Mathcad 12 through 13.1 allows local users to bypass the security features by directly accessing or editing the XML rep…
-
Unscored —CVE-2006-7032 Public exploit
PHP remote file inclusion vulnerability in phpbb/getmsg.php in FlashBB 1.1.5 and earlier allows remote attackers to exe…
-
Unscored —
Buffer overflow in the Update Service Agent ActiveX Control in isusweb.dll for Macrovision FLEXnet Connect (formerly In…
-
Unscored —
Multiple buffer overflows in (a) an ActiveX control (iftw.dll) and (b) Netscape plug-in (npiftw32.dll) for Macrovision …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Google Desktop allows remote attackers to bypass protection schemes and inj…
-
Unscored —CVE-2007-0843 Public exploit
The ReadDirectoryChangesW API function on Microsoft Windows 2000, XP, Server 2003, and Vista does not check permissions…
-
Unscored —
Buffer overflow in the Configuration Checker (ConfigChk) ActiveX control in VSCnfChk.dll 2.0.0.2 for Verisign Managed P…
-
Unscored —
Mozilla Firefox 2.0.0.1 and earlier does not prompt users before saving bookmarklets, which allows remote attackers to …