Skip to content
OpenAdvisories

Archive

6 March 2007

Vulnerabilities first published on this day (UTC), newest first.

36 results · Feed

  • Unscored —
    CVE-2007-1285 Public exploit EPSS 19%

    The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (st…

  • Unscored —
    CVE-2007-1264 Public exploit

    Enigmail 0.94.2 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Enigmail…

  • Unscored —
    CVE-2007-1266 Public exploit

    Evolution 2.8.1 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Evolutio…

  • Unscored —

    Mutt 1.5.13 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Mutt from vi…

  • Unscored —

    GNUMail 1.1.2 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents GNUMail fr…

  • Unscored —

    KMail 1.9.5 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents KMail from v…

  • Unscored —
    CVE-2007-1263 Public exploit

    GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually distinguish signed an…

  • Unscored —
    CVE-2007-1286 Public exploit EPSS 41%

    Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a lon…

  • Unscored —

    Sylpheed 2.2.7 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Sylpheed …

  • Unscored —
    CVE-2007-1287 Public exploit

    A regression error in the phpinfo function in PHP 4.4.3 to 4.4.6, and PHP 6.0 in CVS, allows remote attackers to conduc…

  • Unscored —

    Integer overflow in Mozilla Thunderbird before 1.5.0.10 and SeaMonkey before 1.0.8 allows remote attackers to trigger a…

  • Unscored —
    CVE-2006-7129 Public exploit

    ISS BlackICE PC Protection 3.6 cpj and cpu, and possibly earlier versions, allows local users to bypass the protection …

  • Unscored —
    CVE-2006-7132 Public exploit

    Directory traversal vulnerability in pmd-config.php in PHPMyDesk 1.0beta allows remote attackers to include arbitrary l…

  • Unscored —
    CVE-2006-7128 Public exploit

    PHP remote file inclusion vulnerability in forum/forum.php JAF CMS 4.0 RC1 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-7116 Public exploit

    SQL injection vulnerability in includes/functions.php in Kubix 0.7 and earlier allows remote attackers to execute arbit…

  • Unscored —
    CVE-2006-7130 Public exploit

    PHP remote file inclusion vulnerability in backend/primitives/cache/media.php in Jinzora 2.1 and earlier allows remote …

  • Unscored —
    CVE-2006-7112 Public exploit

    Directory traversal vulnerability in error.php in MD-Pro 1.0.76 and earlier allows remote authenticated users to read a…

  • Unscored —
    CVE-2006-7134 Public exploit

    Unrestricted file upload vulnerability in main_user.php in Upload Tool for PHP 1.0 allows remote attackers to upload an…

  • Unscored —
    CVE-2006-7131 Public exploit

    PHP remote file inclusion vulnerability in extras/mt.php in Jinzora 2.6 allows remote attackers to execute arbitrary PH…

  • Unscored —

    The HTTP server in Linksys SPA-921 VoIP Desktop Phone allows remote attackers to cause a denial of service (reboot) via…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the IP Address Lookup functionality in BSQ Sitestats (component for Joomla)…

  • Unscored —
    CVE-2006-7118 Public exploit

    SQL injection vulnerability in index.asp in DMXReady Site Engine Manager 1.0 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-7119 Public exploit

    PHP remote file inclusion vulnerability in kernel/system/startup.php in J. He PHPGiggle 12.08 and earlier, as distribut…

  • Unscored —

    SQL injection vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to execute arbitrary SQL co…

  • Unscored —

    Multiple SQL injection vulnerabilities in BSQ Sitestats (component for Joomla) 1.8.0, and possibly other versions befor…

  • Unscored —
    CVE-2006-7127 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in JAF CMS 4.0 and 4.0 RC2 allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-7133 Public exploit

    Directory traversal vulnerability in upload/bin/download.php in Upload Tool for PHP 1.0 allows remote attackers to read…

  • Unscored —

    PHP remote file inclusion vulnerability in external/rssfeeds.php in BSQ Sitestats (component for Joomla) 1.8.0, and pos…

  • Unscored —

    Unrestricted file upload vulnerability in P-News 2.0 allows remote attackers to upload and execute arbitrary files via …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2006-7117 Public exploit

    Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote attackers to (1) include and execute…

  • Unscored —
    CVE-2006-7114 Public exploit

    P-News 2.0 stores db/user.txt under the web document root with insufficient access control, which allows remote attacke…

  • Unscored —

    SQL injection vulnerability in PHPKit 1.6.1 RC2 allows remote attackers to inject arbitrary SQL commands via the catid …

  • Unscored —
    CVE-2006-7120 Public exploit

    PHP remote file inclusion vulnerability in lib/php/phphtmllib-2.5.4/examples/example6.php for maintain 3.0.0-RC2 allows…

  • Unscored —

    Kaspersky AntiVirus Engine 6.0.1.411 for Windows and 5.5-10 for Linux allows remote attackers to cause a denial of serv…

  • Unscored —

    A regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.…