Archive
7 March 2007
Vulnerabilities first published on this day (UTC), newest first.
60 results · Feed
-
Unscored —
The default configuration of the AirPort utility in Apple AirPort Extreme creates an IPv6 tunnel but does not enable th…
-
Unscored —
PuTTY 0.59 and earlier uses weak file permissions for (1) ppk files containing private keys generated by puttygen and (…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in TKS Banking Solutions ePortfolio 1.0 Java allow remote at…
-
Unscored —
The SILC_SERVER_CMD_FUNC function in apps/silcd/command.c in silc-server 1.0.2 allows remote attackers to cause a denia…
-
Unscored —CVE-2007-1331 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in TKS Banking Solutions ePortfolio 1.0 Java allow remote attackers…
-
Unscored —
The PMA_ArrayWalkRecursive function in libraries/common.lib.php in phpMyAdmin before 2.10.0.2 does not limit recursion …
-
Unscored —
SnapGear 560, 585, 580, 640, 710, and 720 appliances before the 3.1.4u5 firmware allow remote attackers to cause a deni…
-
Unscored —CVE-2007-1330 Public exploit
Comodo Firewall Pro (CFP) (formerly Comodo Personal Firewall) 2.4.18.184 and earlier allows local users to bypass drive…
-
Unscored —
SQL injection vulnerability in index.php in Serendipity 1.1.1 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —
Directory traversal vulnerability in SQL-Ledger, and LedgerSMB before 1.1.5, allows remote attackers to read and overwr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in formulaire.php in Bernard JOLY BJ Webring allows remote attackers to inject…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Mambo 4.6.x allow remote attackers to inject arbitrary web scrip…
-
Unscored —
Untrusted search path vulnerability in the libtool-ltdl library (libltdl.so) 1.5.22-2.3 in Fedora Core 5 might allow lo…
-
Unscored —
The libike library, as used by in.iked, elfsign, and kcfd in Sun Solaris 9 and 10, when using an RSA key with exponent …
-
Unscored —CVE-2006-7156 Public exploit
PHP remote file inclusion vulnerability in addon_keywords.php in Keyword Replacer (keyword_replacer) 1.0 and earlier, a…
-
Unscored —CVE-2006-7146 Public exploit
PHP remote file inclusion vulnerability in bug.php in Leicestershire communityPortals 1.0 build 20051018 and earlier al…
-
Unscored —CVE-2006-7141 Public exploit
Absolute path traversal vulnerability in Oracle Database Server, when utl_file_dir is set to a wildcard value or "CREAT…
-
Unscored —CVE-2006-7139 Public exploit
Kmail 1.9.1 on KDE 3.5.2, with "Prefer HTML to Plain Text" enabled, allows remote attackers to cause a denial of servic…
-
Unscored —CVE-2006-7152 Public exploit
default.asp in ASP-Nuke Community 1.5 and earlier allows remote attackers to gain privileges by setting certain pseudo …
-
Unscored —
The centralized management feature for Utimaco Safeguard stores hard-coded cryptographic keys in executable programs fo…
-
Unscored —
SQL injection vulnerability in wwv_flow_utilities.gen_popup_list in the WWV_FLOW_UTILITIES package for Oracle APEX/HTML…
-
Unscored —
Iono allows remote attackers to obtain the full server path via certain requests to (1) templates/iono/admin/denied.tpl…
-
Unscored —
Multiple SQL injection vulnerabilities in Mambo 4.6.x allow remote attackers to execute arbitrary SQL commands via the …
-
Unscored —
SQL injection vulnerability in Call Center Software 0.93 and earlier allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2006-7147 Public exploit
PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBB Import Tools Mod 0.1.4 and earlier …
-
Unscored —
The Sandbox.sys driver in Outpost Firewall PRO 4.0, and possibly earlier versions, does not validate arguments to hooke…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Oracle Application Express (APEX) before 2.2.1, aka Oracle HTML DB, allows …
-
Unscored —
SQL injection vulnerability in giris_yap.asp in Hazir Site 2.0 allows remote attackers to bypass authentication via the…
-
Unscored —
Directory traversal vulnerability in include/prune_torrents.php in BTI-Tracker 1.3.2 (aka btitracker) allows remote att…
-
Unscored —CVE-2006-7148 Public exploit
PHP remote file inclusion vulnerability in includes/bb_usage_stats.php in maluinfo 206.2.38 for Brazilian PHPBB allows …
-
Unscored —CVE-2006-7157 Public exploit
Buffer overflow in Google Earth v4.0.2091 (beta) allows remote user-assisted attackers to cause a denial of service (cr…
-
Unscored —
Novell BorderManager 3.8 SP4 generates the same ISAKMP cookies for the same source IP and port number during the same d…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Call Center Software 0.93 and earlier allows remote attackers to inject arb…
-
Unscored —
PHP remote file inclusion vulnerability in index.php in MiniBB Forum 2 allows remote attackers to execute arbitrary cod…
-
Unscored —
edit_user.php in Call Center Software 0.93 and earlier allows remote attackers to obtain sensitive information such as …
-
Unscored —CVE-2006-7135 Public exploit
PHP remote file inclusion vulnerability in lib/functions.inc.php in PHP Poll Creator (phpPC) 1.04 allows remote attacke…
-
Unscored —
Cross-site scripting (XSS) vulnerability in TinyPortal before 0.8.6 allows remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2006-7136 Public exploit
Multiple PHP remote file inclusion vulnerabilities in PHP Poll Creator (phpPC) 1.04 and earlier allow remote attackers …
-
Unscored —CVE-2007-1294 Public exploit
A certain ActiveX control in the DivXBrowserPlugin (npdivx32.dll) in DivX Web Player, as distributed with DivX Player 1…
-
Unscored —CVE-2007-1292 Public exploit
SQL injection vulnerability in inlinemod.php in Jelsoft vBulletin before 3.5.8, and before 3.6.5 in the 3.6.x series, m…