Archive
February 2007
Vulnerabilities first published in this month (UTC), newest first.
630 results · Feed
-
Unscored —
Les News 2.2 allows remote attackers to bypass authentication and gain administrative access via a direct request for a…
-
Unscored —
Multiple buffer overflows in STLport before 5.0.3 allow remote attackers to execute arbitrary code via unspecified vect…
-
Unscored —
PHP remote file inclusion vulnerability in Mina Ajans Script allows remote attackers to execute arbitrary PHP code via …
-
Unscored —CVE-2007-0805 Public exploit
The ps (/usr/ucb/ps) command on HP Tru64 UNIX 5.1 1885 allows local users to obtain sensitive information, including en…
-
Unscored —CVE-2007-0809 Public exploit
PHP remote file inclusion vulnerability in includes/class_template.php in Categories hierarchy (aka CH or mod-CH) 2.1.2…
-
Unscored —
Cross-site scripting (XSS) vulnerability in info.php in flashChat 4.7.8 allows remote attackers to inject arbitrary web…
-
Unscored —
Microsoft Internet Explorer 6.0 SP1 on Windows 2000, and 6.0 SP2 on Windows XP, allows remote attackers to cause a deni…
-
Unscored —CVE-2007-0817 Public exploit
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion web server allows remote attackers to inject arbitrary HTM…
-
Unscored —
SGI ProPack 3 SP6 kernel displays the frame buffer contents of the last session after a reboot, which might allow local…
-
Unscored —
PHP remote file inclusion vulnerability in controller.php in Simple Invoices before 20070202 allows remote attackers to…
-
Unscored —
The mod_perl initialization script in Bugzilla 2.23.3 does not set the Bugzilla Apache configuration to allow .htaccess…
-
Unscored —CVE-2007-0786 Public exploit
SQL injection vulnerability in view.php in Noname Media Photo Galerie Standard 1.1.1 and earlier allows remote attacker…
-
Unscored —CVE-2007-0790 Public exploit
Heap-based buffer overflow in SmartFTP 2.0.1002 allows remote FTP servers to execute arbitrary code via a large banner.
-
Unscored —CVE-2007-0797 Public exploit
PHP remote file inclusion vulnerability in theme/settings.php in bluevirus-design SMA-DB 0.3.9 and earlier allows remot…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Atom feeds in Bugzilla 2.20.3, 2.22.1, and 2.23.3, and earlier versions dow…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Wap Portal Server 1.x allow remote attackers to execute arbitrary…
-
Unscored —
SQL injection vulnerability in inc/common.php in GlobalMegaCorp dvddb 0.6 allows remote attackers to execute arbitrary …
-
Unscored —
PHP remote file inclusion vulnerability in inc/common.php in GlobalMegaCorp dvddb 0.6 allows remote attackers to execut…
-
Unscored —
SQL injection vulnerability in Mambo before 4.5.5 allows remote attackers to execute arbitrary SQL commands via unspeci…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to inject arbitrary we…
-
Unscored —
SQL injection vulnerability in badword.asp in Ublog Reload 1.0.5 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —
PHP remote file inclusion vulnerability in previewtheme.php in Flipsource Flip 2.01-final 1.0 and earlier allows remote…
-
Unscored —CVE-2007-0796 EPSS 13%
Blue Coat Systems WinProxy 6.1a and 6.0 r1c, and possibly earlier, allows remote attackers to cause a denial of service…
-
Unscored —
The key serial number collision avoidance code in the key_alloc_serial function in Linux kernel 2.6.9 up to 2.6.20 allo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in MediaWiki 1.9.x before 1.9.2 allows remote attackers to inject arbitrary we…
-
Unscored —
SQL injection vulnerability in login.asp for tPassword in the Raymond BERTHOU script collection (aka RBL - ASP) allows …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the group moderation control center page in Phorum before 5.1.19 might allo…
-
Unscored —CVE-2007-0768 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the Contact Details functionality in Yahoo! Messenger 8.1.0.209 …
-
Unscored —CVE-2007-0760 Public exploit
EQdkp 1.3.1 and earlier authenticates administrative requests by verifying that the HTTP Referer header specifies an ad…
-
Unscored —CVE-2007-0757 Public exploit
PHP remote file inclusion vulnerability in index.php in Miguel Nunes Call of Duty 2 (CoD2) DreamStats System 4.2 and ea…
-
Unscored —
smbd in Samba 3.0.6 through 3.0.23d allows remote authenticated users to cause a denial of service (memory and CPU exha…
-
Unscored —CVE-2007-0761 Public exploit
PHP remote file inclusion vulnerability in config.php in phpBB ezBoard converter (ezconvert) 0.2 allows remote attacker…
-
Unscored —CVE-2007-0764 Public exploit
Unrestricted file upload vulnerability in F3Site 2.1 and earlier allows remote authenticated administrators to upload a…
-
Unscored —CVE-2007-0759 Public exploit
Multiple SQL injection vulnerabilities in EasyMoblog 0.5.1 allow remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2007-0763 Public exploit
Cross-site scripting (XSS) vulnerability in the news comment functionality in F3Site 2.1 and earlier allows remote atta…
-
Unscored —CVE-2007-0756 Public exploit
Chicken of the VNC (cotv) 2.0 allows remote attackers to cause a denial of service (application crash) via a large comp…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the core in Phorum before 5.1.18 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2007-0758 Public exploit
PHP remote file inclusion vulnerability in lang.php in PHPProbid 5.24 allows remote attackers to execute arbitrary PHP …
-
Unscored —
Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependent attacke…
-
Unscored —
Cross-site scripting (XSS) vulnerability in register.php in Phorum 5.1.18 allows remote attackers to inject arbitrary w…