Skip to content
OpenAdvisories

Archive

7 March 2007

Vulnerabilities first published on this day (UTC), newest first.

27 results · Clear filters · Feed

  • Unscored —
    CVE-2007-1327 Public exploit EPSS 10%

    The SILC_SERVER_CMD_FUNC function in apps/silcd/command.c in silc-server 1.0.2 allows remote attackers to cause a denia…

  • Unscored —
    CVE-2007-1331 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in TKS Banking Solutions ePortfolio 1.0 Java allow remote attackers…

  • Unscored —
    CVE-2007-1330 Public exploit

    Comodo Firewall Pro (CFP) (formerly Comodo Personal Firewall) 2.4.18.184 and earlier allows local users to bypass drive…

  • Unscored —
    CVE-2006-7156 Public exploit

    PHP remote file inclusion vulnerability in addon_keywords.php in Keyword Replacer (keyword_replacer) 1.0 and earlier, a…

  • Unscored —
    CVE-2006-7146 Public exploit

    PHP remote file inclusion vulnerability in bug.php in Leicestershire communityPortals 1.0 build 20051018 and earlier al…

  • Unscored —
    CVE-2006-7141 Public exploit

    Absolute path traversal vulnerability in Oracle Database Server, when utl_file_dir is set to a wildcard value or "CREAT…

  • Unscored —
    CVE-2006-7139 Public exploit

    Kmail 1.9.1 on KDE 3.5.2, with "Prefer HTML to Plain Text" enabled, allows remote attackers to cause a denial of servic…

  • Unscored —
    CVE-2006-7152 Public exploit

    default.asp in ASP-Nuke Community 1.5 and earlier allows remote attackers to gain privileges by setting certain pseudo …

  • Unscored —
    CVE-2006-7147 Public exploit

    PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBB Import Tools Mod 0.1.4 and earlier …

  • Unscored —
    CVE-2006-7148 Public exploit

    PHP remote file inclusion vulnerability in includes/bb_usage_stats.php in maluinfo 206.2.38 for Brazilian PHPBB allows …

  • Unscored —
    CVE-2006-7157 Public exploit

    Buffer overflow in Google Earth v4.0.2091 (beta) allows remote user-assisted attackers to cause a denial of service (cr…

  • Unscored —
    CVE-2006-7135 Public exploit

    PHP remote file inclusion vulnerability in lib/functions.inc.php in PHP Poll Creator (phpPC) 1.04 allows remote attacke…

  • Unscored —
    CVE-2006-7136 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in PHP Poll Creator (phpPC) 1.04 and earlier allow remote attackers …

  • Unscored —
    CVE-2007-1294 Public exploit

    A certain ActiveX control in the DivXBrowserPlugin (npdivx32.dll) in DivX Web Player, as distributed with DivX Player 1…

  • Unscored —
    CVE-2007-1292 Public exploit

    SQL injection vulnerability in inlinemod.php in Jelsoft vBulletin before 3.5.8, and before 3.6.5 in the 3.6.x series, m…

  • Unscored —
    CVE-2007-1291 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Tyger Bug Tracking System (TygerBT) 1.1.3 allow remote attackers…

  • Unscored —
    CVE-2007-1298 Public exploit

    SQL injection vulnerability in subcat.php in AJ Auction 1.0 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2007-1306 Public exploit EPSS 21%

    Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service (crash) by sending…

  • Unscored —
    CVE-2007-1303 Public exploit

    Directory traversal vulnerability in rb.cgi in RRDBrowse 1.6 and earlier allows remote attackers to read arbitrary file…

  • Unscored —
    CVE-2007-1308 Public exploit

    ecma/kjs_html.cpp in KDE JavaScript (KJS), as used in Konqueror in KDE 3.5.5, allows remote attackers to cause a denial…

  • Unscored —
    CVE-2007-1293 Public exploit

    SQL injection vulnerability in Rigter Portal System (RPS) 6.2, when magic_quotes_gpc is disabled, allows remote attacke…

  • Unscored —
    CVE-2007-1301 Public exploit EPSS 12%

    Stack-based buffer overflow in the IMAP service in MailEnable Enterprise and Professional Editions 2.37 and earlier all…

  • Unscored —
    CVE-2007-1299 Public exploit

    PHP remote file inclusion vulnerability in index.php in Mani Stats Reader 1.2 and earlier allows remote attackers to ex…

  • Unscored —
    CVE-2007-1295 Public exploit

    SQL injection vulnerability in topic_title.php in AJ Forum 1.0 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2007-1289 Public exploit

    SQL injection vulnerability in ViewBugs.php in Tyger Bug Tracking System (TygerBT) 1.1.3 allows remote attackers to exe…

  • Unscored —
    CVE-2007-1296 Public exploit

    SQL injection vulnerability in postingdetails.php in AJ Classifieds 1.0 allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2007-1297 Public exploit

    SQL injection vulnerability in view_profile.php in AJDating 1.0 allows remote attackers to execute arbitrary SQL comman…