Archive
February 2007
Vulnerabilities first published in this month (UTC), newest first.
630 results · Feed
-
Unscored —
Heap-based buffer overflow in the _cairo_pen_init function in Mozilla Firefox 2.x before 2.0.0.2, Thunderbird before 1.…
-
Unscored —
VirtueMart before 1.0.1 does not properly handle errors when a user is forbidden to read a requested page, which has un…
-
Unscored —CVE-2007-1104 Public exploit
PHP remote file inclusion vulnerability in top.php in PHP Module Implementation (PHP-MIP) 0.1 allows remote attackers t…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Phpwebgallery 1.4.1 allow remote attackers to inject arbitrary w…
-
Unscored —CVE-2007-1107 Public exploit
SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery (CPG) 1.3.x allows remote authenticated users…
-
Unscored —CVE-2007-1101 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Photostand 1.2.0 allow remote attackers to inject arbitrary web …
-
Unscored —
Mozilla Firefox 1.5.0.9 and 2.0.0.1, and SeaMonkey before 1.0.8 allow remote attackers to execute arbitrary code via Ja…
-
Unscored —CVE-2007-1094 EPSS 19%
Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service (NULL dereference and application cr…
-
Unscored —CVE-2007-1108 Public exploit
PHP remote file inclusion vulnerability in index.php in Christian Schneider CS-Gallery 2.0 and earlier allows remote at…
-
Unscored —CVE-2007-1106 Public exploit
PHP remote file inclusion vulnerability in includes/functions_nomoketos_rules.php in the NoMoKeTos Rules 0.0.1 module f…
-
Unscored —
Photostand 1.2.0 allows remote attackers to obtain sensitive information via a ' (quote) character in (1) a PHPSESSID c…
-
Unscored —
Cross-site scripting (XSS) vulnerability in ps_cart.php in VirtueMart before 20070116 allows remote attackers to inject…
-
Unscored —CVE-2007-1100 Public exploit
Directory traversal vulnerability in download.php in Ahmet Sacan Pickle before 20070301 allows remote attackers to read…
-
Unscored —
Unrestricted file upload vulnerability in the onAttachFiles function in the upload tool (inc/lib/attachment.lib.php) in…
-
Unscored —CVE-2007-1110 Public exploit
Directory traversal vulnerability in data/showcode.php in ActiveCalendar 1.2.0 allows remote attackers to read arbitrar…
-
Unscored —CVE-2007-1105 Public exploit
PHP remote file inclusion vulnerability in functions.php in Extreme phpBB (aka phpBB Extreme) 3.0.1 allows remote attac…
-
Unscored —
Multiple unspecified vulnerabilities in ScryMUD before 2.1.11 have unknown impact and attack vectors, possibly related …
-
Unscored —CVE-2007-1111 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary …
-
Unscored —
Multiple unspecified vulnerabilities in JP1/Cm2/Network Node Manager (NNM) before 07-10-05, and before 08-00-02 in the …
-
Unscored —
Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 do not properly implement JavaScript onUnload handlers, which…
-
Unscored —
dbclient in Dropbear SSH client before 0.49 does not sufficiently warn the user when it detects a hostkey mismatch, whi…
-
Unscored —
Tor does not verify a node's uptime and bandwidth advertisements, which allows remote attackers who operate a low resou…
-
Unscored —CVE-2007-1091 EPSS 26%
Microsoft Internet Explorer 7 allows remote attackers to prevent users from leaving a site, spoof the address bar, and …
-
Unscored —
Microsoft Windows Explorer on Windows XP and 2003 allows remote user-assisted attackers to cause a denial of service (c…
-
Unscored —
Scriptsez.net E-Dating System stores data files with predictable names under the web document root with insufficient ac…
-
Unscored —CVE-2006-7063 Public exploit
Directory traversal vulnerability in profile.php in TinyPHPforum 3.6 and earlier allows remote attackers to include and…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net E-Dating System allow remote attackers to inject a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in forum/admin.php for Invision Power Board (IPB) 2.1.6 and earlier allows rem…
-
Unscored —
calendar.php in Kamgaing Email System (kmail) 2.3 and earlier allows remote attackers to obtain the full path of the se…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Sphider before 1.3.1c allow remote attackers to inject arbitrary…
-
Unscored —
SQL injection vulnerability in search.php in Sphider before 1.3.1c allows remote attackers to execute arbitrary SQL com…
-
Unscored —
cindex.php in Scriptsez.net E-Dating System allows remote attackers to obtain the full path via an invalid id parameter…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in DreamCost HostAdmin 3.1 and earlier allow remote attackers to exe…
-
Unscored —
PHP remote file inclusion vulnerability in comment.core.inc.php in Clan Manager Pro (CMPRO) 1.11 and earlier allows rem…
-
Unscored —CVE-2006-7055 Public exploit
PHP remote file inclusion vulnerability in index.php in TotalCalendar 2.30 and earlier allows remote attackers to execu…
-
Unscored —CVE-2006-7042 Public exploit
Cross-site scripting (XSS) vulnerability in directory/index.php in Chipmunk directory allows remote attackers to inject…
-
Unscored —CVE-2006-7052 Public exploit
Multiple PHP remote file inclusion vulnerabilities in DotWidget For Articles (dotwidgeta) 0.2 allow remote attackers to…
-
Unscored —CVE-2006-7051 Public exploit
The sys_timer_create function in posix-timers.c for Linux kernel 2.6.x allows local users to cause a denial of service …
-
Unscored —CVE-2006-7048 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP c…
-
Unscored —
PHP remote file inclusion vulnerability in Clan Manager Pro (CMPRO) 1.1.0 and earlier allows remote attackers to execut…