Archive
February 2007
Vulnerabilities first published in this month (UTC), newest first.
224 results · Clear filters · Feed
-
Unscored —CVE-2007-1104 Public exploit
PHP remote file inclusion vulnerability in top.php in PHP Module Implementation (PHP-MIP) 0.1 allows remote attackers t…
-
Unscored —CVE-2007-1107 Public exploit
SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery (CPG) 1.3.x allows remote authenticated users…
-
Unscored —CVE-2007-1101 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Photostand 1.2.0 allow remote attackers to inject arbitrary web …
-
Unscored —CVE-2007-1108 Public exploit
PHP remote file inclusion vulnerability in index.php in Christian Schneider CS-Gallery 2.0 and earlier allows remote at…
-
Unscored —CVE-2007-1106 Public exploit
PHP remote file inclusion vulnerability in includes/functions_nomoketos_rules.php in the NoMoKeTos Rules 0.0.1 module f…
-
Unscored —CVE-2007-1100 Public exploit
Directory traversal vulnerability in download.php in Ahmet Sacan Pickle before 20070301 allows remote attackers to read…
-
Unscored —CVE-2007-1110 Public exploit
Directory traversal vulnerability in data/showcode.php in ActiveCalendar 1.2.0 allows remote attackers to read arbitrar…
-
Unscored —CVE-2007-1105 Public exploit
PHP remote file inclusion vulnerability in functions.php in Extreme phpBB (aka phpBB Extreme) 3.0.1 allows remote attac…
-
Unscored —CVE-2007-1111 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary …
-
Unscored —
Microsoft Windows Explorer on Windows XP and 2003 allows remote user-assisted attackers to cause a denial of service (c…
-
Unscored —CVE-2006-7063 Public exploit
Directory traversal vulnerability in profile.php in TinyPHPforum 3.6 and earlier allows remote attackers to include and…
-
Unscored —CVE-2006-7055 Public exploit
PHP remote file inclusion vulnerability in index.php in TotalCalendar 2.30 and earlier allows remote attackers to execu…
-
Unscored —CVE-2006-7042 Public exploit
Cross-site scripting (XSS) vulnerability in directory/index.php in Chipmunk directory allows remote attackers to inject…
-
Unscored —CVE-2006-7052 Public exploit
Multiple PHP remote file inclusion vulnerabilities in DotWidget For Articles (dotwidgeta) 0.2 allow remote attackers to…
-
Unscored —CVE-2006-7051 Public exploit
The sys_timer_create function in posix-timers.c for Linux kernel 2.6.x allows local users to cause a denial of service …
-
Unscored —CVE-2006-7048 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP c…
-
Unscored —CVE-2006-7026 Public exploit
PHP remote file inclusion vulnerability in sources/join.php in Aardvark Topsites PHP 4.2.2 and earlier, when register_g…
-
Medium 6.5
Microsoft Internet Explorer 6.0.2900 SP2 and earlier allows remote attackers to cause a denial of service (crash) via a…
-
Unscored —CVE-2006-7032 Public exploit
PHP remote file inclusion vulnerability in phpbb/getmsg.php in FlashBB 1.1.5 and earlier allows remote attackers to exe…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Google Desktop allows remote attackers to bypass protection schemes and inj…
-
Unscored —CVE-2007-0843 Public exploit
The ReadDirectoryChangesW API function on Microsoft Windows 2000, XP, Server 2003, and Vista does not check permissions…
-
Unscored —CVE-2007-1080 Public exploit
Multiple heap-based buffer overflows in TurboFTP 5.30 Build 572 allow remote servers to cause a denial of service via (…
-
Unscored —CVE-2007-1082 Public exploit
FTP Explorer 1.0.1 Build 047, and other versions before 1.0.1.52, allows remote servers to cause a denial of service (C…
-
Unscored —CVE-2007-1079 Public exploit
Stack-based buffer overflow in Rhino Software, Inc. FTP Voyager 14.0.0.3 and earlier allows remote servers to cause a d…
-
Unscored —CVE-2007-1077 Public exploit
SQL injection vulnerability in page.asp in Design4Online UserPages2 2.0 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2007-1078 Public exploit
PHP remote file inclusion vulnerability in index.php in FlashGameScript 1.5.4 allows remote attackers to execute arbitr…
-
Unscored —CVE-2007-1076 Public exploit
Multiple directory traversal vulnerabilities in phpTrafficA 1.4.1, and possibly earlier, allow remote attackers to incl…
-
Unscored —CVE-2004-2677 Public exploit
Format string vulnerability in qwik-smtpd.c in QwikMail SMTP (qwik-smtpd) 0.3 and earlier allows remote attackers to ex…
-
Unscored —CVE-2007-1075 Public exploit
TurboFTP 5.30 Build 572 allows remote servers to cause a denial of service (CPU consumption) via a response with a larg…
-
Unscored —
Integer overflow in the gifGetBandProc function in ImageIO in Apple Mac OS X 10.4.8 allows remote attackers to cause a …
-
Unscored —CVE-2007-1074 Public exploit
Multiple buffer overflows in NewsBin Pro 5.33 and NewsBin Pro 4.x allow user-assisted remote attackers to execute arbit…
-
Unscored —
SQL injection vulnerability in index.php in Francisco Burzi PHP-Nuke 8.0 Final and earlier, when the "HTTP Referers" bl…
-
Unscored —CVE-2007-1060 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Interspire SendStudio 2004.14 and earlier, when register_globals …
-
Unscored —CVE-2007-1059 Public exploit
PHP remote file inclusion vulnerability in function.php in Ultimate Fun Book 1.02 allows remote attackers to execute ar…
-
Unscored —CVE-2007-1050 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in AbleDesign MyCalendar allow remote attackers to inj…
-
Unscored —CVE-2007-1057 Public exploit
The Net Direct client for Linux before 6.0.5 in Nortel Application Switch 2424, VPN 3050 and 3070, and SSL VPN Module 1…
-
Unscored —CVE-2007-1058 Public exploit
SQL injection vulnerability in user_pages/page.asp in Online Web Building 2.0 allows remote attackers to execute arbitr…
-
Unscored —CVE-2007-1044 Public exploit
Pearson Education PowerSchool 4.3.6 allows remote attackers to list the contents of the admin folder via a URI composed…
-
Unscored —CVE-2007-1043 Public exploit
Ezboo webstats, possibly 3.0.3, allows remote attackers to bypass authentication and gain access via a direct request t…
-
Unscored —CVE-2007-1040 Public exploit
Directory traversal vulnerability in archives.php in Xpression News (X-News) 1.0.1 allows remote attackers to include a…