Skip to content
OpenAdvisories

Archive

6 March 2007

Vulnerabilities first published on this day (UTC), newest first.

21 results · Clear filters · Feed

  • Unscored —
    CVE-2007-1285 Public exploit EPSS 19%

    The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (st…

  • Unscored —
    CVE-2007-1264 Public exploit

    Enigmail 0.94.2 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Enigmail…

  • Unscored —
    CVE-2007-1266 Public exploit

    Evolution 2.8.1 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Evolutio…

  • Unscored —
    CVE-2007-1263 Public exploit

    GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually distinguish signed an…

  • Unscored —
    CVE-2007-1286 Public exploit EPSS 41%

    Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a lon…

  • Unscored —
    CVE-2007-1287 Public exploit

    A regression error in the phpinfo function in PHP 4.4.3 to 4.4.6, and PHP 6.0 in CVS, allows remote attackers to conduc…

  • Unscored —
    CVE-2006-7129 Public exploit

    ISS BlackICE PC Protection 3.6 cpj and cpu, and possibly earlier versions, allows local users to bypass the protection …

  • Unscored —
    CVE-2006-7132 Public exploit

    Directory traversal vulnerability in pmd-config.php in PHPMyDesk 1.0beta allows remote attackers to include arbitrary l…

  • Unscored —
    CVE-2006-7128 Public exploit

    PHP remote file inclusion vulnerability in forum/forum.php JAF CMS 4.0 RC1 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-7116 Public exploit

    SQL injection vulnerability in includes/functions.php in Kubix 0.7 and earlier allows remote attackers to execute arbit…

  • Unscored —
    CVE-2006-7130 Public exploit

    PHP remote file inclusion vulnerability in backend/primitives/cache/media.php in Jinzora 2.1 and earlier allows remote …

  • Unscored —
    CVE-2006-7112 Public exploit

    Directory traversal vulnerability in error.php in MD-Pro 1.0.76 and earlier allows remote authenticated users to read a…

  • Unscored —
    CVE-2006-7134 Public exploit

    Unrestricted file upload vulnerability in main_user.php in Upload Tool for PHP 1.0 allows remote attackers to upload an…

  • Unscored —
    CVE-2006-7131 Public exploit

    PHP remote file inclusion vulnerability in extras/mt.php in Jinzora 2.6 allows remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2006-7118 Public exploit

    SQL injection vulnerability in index.asp in DMXReady Site Engine Manager 1.0 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-7119 Public exploit

    PHP remote file inclusion vulnerability in kernel/system/startup.php in J. He PHPGiggle 12.08 and earlier, as distribut…

  • Unscored —
    CVE-2006-7127 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in JAF CMS 4.0 and 4.0 RC2 allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-7133 Public exploit

    Directory traversal vulnerability in upload/bin/download.php in Upload Tool for PHP 1.0 allows remote attackers to read…

  • Unscored —
    CVE-2006-7117 Public exploit

    Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote attackers to (1) include and execute…

  • Unscored —
    CVE-2006-7114 Public exploit

    P-News 2.0 stores db/user.txt under the web document root with insufficient access control, which allows remote attacke…

  • Unscored —
    CVE-2006-7120 Public exploit

    PHP remote file inclusion vulnerability in lib/php/phphtmllib-2.5.4/examples/example6.php for maintain 3.0.0-RC2 allows…