Skip to content
OpenAdvisories

Archive

27 February 2007

Vulnerabilities first published on this day (UTC), newest first.

69 results · Feed

  • Unscored —

    index.php in WebMplayer before 0.6.1-Alpha allows remote attackers to execute arbitrary code via shell metacharacters i…

  • Unscored —

    PHP remote file inclusion vulnerability in function.php in arabhost allows remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2007-1152 Public exploit

    Multiple directory traversal vulnerabilities in Pyrophobia 2.1.3.1 allow remote attackers to read arbitrary files via a…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in jmx-console/HtmlAdaptor in JBoss allows remote attackers to perform …

  • Unscored —

    Check Point Firewall-1 4.1 up to NG AI R55 allows remote attackers to obtain potentially sensitive information by sendi…

  • Unscored —

    Unspecified vulnerability in HP Tru64 UNIX 5.1B PK2(BL22) and PK3(BL24), and 5.1A PK6(BL24), when using IPsec/IKE (Inte…

  • Unscored —

    Buffer overflow in NetScreen-Remote 8.0 allows remote attackers to cause a denial of service and possibly execute arbit…

  • Unscored —

    isakmpd/message.c in isakmpd in FreeBSD before isakmpd-20020403_1, and in OpenBSD 3.1, allows remote attackers to cause…

  • Unscored —

    Buffer overflow in PGPFreeware 7.03 running on Windows NT 4.0 SP6 allows remote attackers to cause a denial of service …

  • Unscored —

    SafeNet VPN client allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted…

  • Unscored —

    SonicWALL firmware before 6.4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary c…

  • Unscored —

    The child frames in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 inherit the defa…

  • Unscored —

    shopkitplus allows remote attackers to obtain sensitive information via a request to (1) events.php with a curmonth[]=0…

  • Unscored —

    Multiple PHP remote file inclusion vulnerabilities in ZPanel 2.0 allow remote attackers to execute arbitrary PHP code v…

  • Unscored —
    CVE-2007-1118 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in eFiction 3.1.1 and earlier allow remote attackers to execute arbi…

  • Unscored —
    CVE-2007-1130 Public exploit

    PHP remote file inclusion vulnerability in sinagb.php in Sinapis Gastebuch 2.2 allows remote attackers to execute arbit…

  • Unscored —

    Unspecified vulnerability in Novell ZENworks 7 Desktop Management Support Pack 1 before Hot patch 3 (ZDM7SP1HP3) allows…

  • Unscored —

    The (1) Import.LoadFromURL and (2) Export.asText.SaveToFile functions in TeeChart Pro ActiveX control (TeeChart7.ocx) a…

  • Unscored —
    CVE-2007-1125 Public exploit

    Cross-site scripting (XSS) vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote attackers to i…

  • Unscored —

    Multiple SQL injection vulnerabilities in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued (ABC) 1.00 a…

  • Unscored —
    CVE-2007-1122 EPSS 15%

    Multiple SQL injection vulnerabilities in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued (ABC) 1.00 a…

  • Unscored —
    CVE-2007-1127 Public exploit

    Directory traversal vulnerability in enc/stylecss.php in shopkitplus allows remote attackers to read arbitrary files vi…

  • Unscored —
    CVE-2007-1126 Public exploit

    Directory traversal vulnerability in index.php in xtcommerce allows remote attackers to read arbitrary files via a .. (…

  • Unscored —
    CVE-2007-1133 Public exploit

    PHP remote file inclusion vulnerability in fcring.php in FCRing 1.3 allows remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2007-1124 Public exploit

    Directory traversal vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote attackers to read arb…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the "Contact Us" functionality in MTCMS 2.2 allow remote attacke…

  • Unscored —

    Multiple unrestricted file upload vulnerabilities in MTCMS 3.2 allow remote attackers to upload and execute files via (…

  • Unscored —
    CVE-2007-1117 EPSS 18%

    Unspecified vulnerability in Publisher 2007 in Microsoft Office 2007 allows remote attackers to execute arbitrary code …

  • Unscored —
    CVE-2007-1131 Public exploit

    PHP remote file inclusion vulnerability in sinapis.php in Sinapis Forum 2.2 allows remote attackers to execute arbitrar…