Archive
February 2007
Vulnerabilities first published in this month (UTC), newest first.
630 results · Feed
-
Unscored —
Buffer overflow in the nss_winbind.so.1 library in Samba 3.0.21 through 3.0.23d, as used in the winbindd daemon on Sola…
-
Unscored —CVE-2007-0766 Public exploit
Stack-based buffer overflow in Remotesoft .NET Explorer 2.0.1 allows user-assisted remote attackers to cause a denial o…
-
Unscored —CVE-2007-0765 Public exploit
SQL injection vulnerability in news.php in dB Masters Curium CMS 1.03 and earlier allows remote attackers to execute ar…
-
Unscored —CVE-2007-0762 Public exploit
PHP remote file inclusion vulnerability in includes/functions.php in phpBB++ Build 100 allows remote attackers to execu…
-
Unscored —
The query planner in PostgreSQL before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 does not verify that a table is c…
-
Unscored —
PostgreSQL 7.3 before 7.3.13, 7.4 before 7.4.16, 8.0 before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 allows attac…
-
Unscored —CVE-2006-6966 Public exploit
phpGraphy before 0.9.13a does not properly unset variables when the input data includes a numeric parameter with a valu…
-
Unscored —
Cross-zone scripting vulnerability in Darksky RSS bar for Internet Explorer before 1.29, RSS bar for Sleipnir before 1.…
-
Unscored —
cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.16.174 and earlier does not validate argument…
-
Unscored —CVE-2007-0704 Public exploit
PHP remote file inclusion vulnerability in install.php in Somery 0.4.6 allows remote attackers to execute arbitrary PHP…
-
Unscored —
Directory traversal vulnerability in index.php in Guernion Sylvain Portail Web Php (aka Gsylvain35 Portail Web, PwP) al…
-
Unscored —
Barron McCann X-Kryptor Driver BMS1446HRR (Xgntr BMS1351 Install BMS1472) in X-Kryptor Secure Client does not drop priv…
-
Unscored —CVE-2007-0703 Public exploit
PHP remote file inclusion vulnerability in library/StageLoader.php in WebBuilder 2.0 and earlier allows remote attacker…
-
Unscored —CVE-2007-0699 Public exploit
PHP remote file inclusion vulnerability in includes/includes.php in Guernion Sylvain Portail Web Php (aka Gsylvain35 Po…
-
Unscored —CVE-2007-0702 Public exploit
Multiple PHP remote file inclusion vulnerabilities in phpEventMan 1.0.2 allow remote attackers to execute arbitrary PHP…
-
Unscored —CVE-2007-0707 Public exploit
Stack-based buffer overflow in GOM Player 2.0.12.3375 allows user-assisted remote attackers to execute arbitrary code v…
-
Unscored —CVE-2007-0701 Public exploit
PHP remote file inclusion vulnerability in inc/common.inc.php in Epistemon 1.0 allows remote attackers to execute arbit…
-
Unscored —
Cross-zone scripting vulnerability in Sleipnir 2.49 and earlier, and Portable Sleipnir 2.45 and earlier, allows remote …
-
Unscored —CVE-2007-0708 Public exploit
cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) before 2.4.16.174 does not validate arguments tha…
-
Unscored —
The writeFile function in core/smb4kfileio.cpp in Smb4K before 0.8.0 does not preserve /etc/sudoers permissions across …
-
Unscored —
Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on…
-
Unscored —
Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipula…
-
Unscored —
Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to kill arbitrary processes, related to a…
-
Unscored —
Multiple SQL injection vulnerabilities in Free LAN In(tra|ter)net Portal (FLIP) before 1.0-RC3 allow remote attackers t…
-
Unscored —
Multiple SQL injection vulnerabilities in ACGVannu 1.3 and earlier allow remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2007-0697 Public exploit
index2.php in ACGVannu 1.3 and earlier allows remote attackers to change the password or profile of a user via a modifi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in error messages in Free LAN In(tra|ter)net Portal (FLIP) before 1.0-RC3 allo…
-
Unscored —CVE-2007-0682 Public exploit
PHP remote file inclusion vulnerability in theme/include_mode/template.php in JV2 Folder Gallery 3.0.2 and earlier allo…
-
Unscored —CVE-2007-0675 EPSS 18%
A certain ActiveX control in sapi.dll (aka the Speech API) in Speech Components in Microsoft Windows Vista, when the Sp…
-
Unscored —CVE-2007-0676 Public exploit
SQL injection vulnerability in faq.php in ExoPHPDesk 1.2.1 and earlier allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2007-0687 Public exploit
SQL injection vulnerability in i-search.php in Michelle's L2J Dropcalc 4 and earlier allows remote authenticated users …
-
Unscored —
LGSERVER.EXE in BrightStor Mobile Backup 4.0 allows remote attackers to cause a denial of service (disk consumption and…
-
Unscored —CVE-2007-0688 Public exploit
SQL injection vulnerability in oku.asp in Hunkaray Duyuru Scripti allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2007-0681 Public exploit
profile.php in ExtCalendar 2 and earlier allows remote attackers to change the passwords of arbitrary users without pro…
-
Unscored —
Internet Explorer on Windows Mobile 5.0 and Windows Mobile 2003 and 2003SE for Smartphones and PocketPC allows attacker…
-
Unscored —CVE-2007-0683 Public exploit
PHP remote file inclusion vulnerability in includes/functions.php in Omegaboard 1.0beta4 and earlier allows remote atta…
-
Unscored —CVE-2007-0674 EPSS 17%
Pictures and Videos on Windows Mobile 5.0 and Windows Mobile 2003 and 2003SE for Smartphones and PocketPC allows user-a…
-
Unscored —CVE-2007-0678 Public exploit
SQL injection vulnerability in windows.asp in Fullaspsite Asp Hosting Sitesi allows remote attackers to execute arbitra…
-
Unscored —CVE-2007-0677 Public exploit
PHP remote file inclusion vulnerability in fw/class.Quick_Config_Browser.php in Cadre PHP Framework 20020724 allows rem…
-
Unscored —CVE-2007-0686 Public exploit
The Intel 2200BG 802.11 Wireless Mini-PCI driver 9.0.3.9 (w29n51.sys) allows remote attackers to cause a denial of serv…