Archive
26 February 2007
Vulnerabilities first published on this day (UTC), newest first.
35 results · Feed
-
Unscored —
The CheckLoadURI function in Mozilla Firefox 1.8 lists the about: URI as a ChromeProtocol and can be loaded via JavaScr…
-
Unscored —
The child frames in Opera 9 before 9.20 inherit the default charset from the parent window when a charset is not specif…
-
Unscored —CVE-2007-1114 EPSS 12%
The child frames in Microsoft Internet Explorer 7 inherit the default charset from the parent window when a charset is …
-
Unscored —
Integer underflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox bef…
-
Unscored —CVE-2007-0009 EPSS 51%
Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by F…
-
Unscored —
The page cache feature in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 can genera…
-
Unscored —
GUI overlay vulnerability in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 a…
-
Unscored —
browser.js in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 uses the request…
-
Unscored —
Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 ignores trailing invalid HTML charac…
-
Unscored —
The JavaScript engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMo…
-
Unscored —
Multiple unspecified vulnerabilities in the layout engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Th…
-
Unscored —
Heap-based buffer overflow in the _cairo_pen_init function in Mozilla Firefox 2.x before 2.0.0.2, Thunderbird before 1.…
-
Unscored —
VirtueMart before 1.0.1 does not properly handle errors when a user is forbidden to read a requested page, which has un…
-
Unscored —CVE-2007-1104 Public exploit
PHP remote file inclusion vulnerability in top.php in PHP Module Implementation (PHP-MIP) 0.1 allows remote attackers t…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Phpwebgallery 1.4.1 allow remote attackers to inject arbitrary w…
-
Unscored —CVE-2007-1107 Public exploit
SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery (CPG) 1.3.x allows remote authenticated users…
-
Unscored —CVE-2007-1101 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Photostand 1.2.0 allow remote attackers to inject arbitrary web …
-
Unscored —
Mozilla Firefox 1.5.0.9 and 2.0.0.1, and SeaMonkey before 1.0.8 allow remote attackers to execute arbitrary code via Ja…
-
Unscored —CVE-2007-1094 EPSS 19%
Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service (NULL dereference and application cr…
-
Unscored —CVE-2007-1108 Public exploit
PHP remote file inclusion vulnerability in index.php in Christian Schneider CS-Gallery 2.0 and earlier allows remote at…
-
Unscored —CVE-2007-1106 Public exploit
PHP remote file inclusion vulnerability in includes/functions_nomoketos_rules.php in the NoMoKeTos Rules 0.0.1 module f…
-
Unscored —
Photostand 1.2.0 allows remote attackers to obtain sensitive information via a ' (quote) character in (1) a PHPSESSID c…
-
Unscored —
Cross-site scripting (XSS) vulnerability in ps_cart.php in VirtueMart before 20070116 allows remote attackers to inject…
-
Unscored —CVE-2007-1100 Public exploit
Directory traversal vulnerability in download.php in Ahmet Sacan Pickle before 20070301 allows remote attackers to read…
-
Unscored —
Unrestricted file upload vulnerability in the onAttachFiles function in the upload tool (inc/lib/attachment.lib.php) in…
-
Unscored —CVE-2007-1110 Public exploit
Directory traversal vulnerability in data/showcode.php in ActiveCalendar 1.2.0 allows remote attackers to read arbitrar…
-
Unscored —CVE-2007-1105 Public exploit
PHP remote file inclusion vulnerability in functions.php in Extreme phpBB (aka phpBB Extreme) 3.0.1 allows remote attac…
-
Unscored —
Multiple unspecified vulnerabilities in ScryMUD before 2.1.11 have unknown impact and attack vectors, possibly related …
-
Unscored —CVE-2007-1111 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary …
-
Unscored —
Multiple unspecified vulnerabilities in JP1/Cm2/Network Node Manager (NNM) before 07-10-05, and before 08-00-02 in the …
-
Unscored —
Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 do not properly implement JavaScript onUnload handlers, which…
-
Unscored —
dbclient in Dropbear SSH client before 0.49 does not sufficiently warn the user when it detects a hostkey mismatch, whi…
-
Unscored —
Tor does not verify a node's uptime and bandwidth advertisements, which allows remote attackers who operate a low resou…
-
Unscored —CVE-2007-1091 EPSS 26%
Microsoft Internet Explorer 7 allows remote attackers to prevent users from leaving a site, spoof the address bar, and …
-
Unscored —
Microsoft Windows Explorer on Windows XP and 2003 allows remote user-assisted attackers to cause a denial of service (c…