Archive
10 March 2007
Vulnerabilities first published on this day (UTC), newest first.
45 results · Feed
-
Unscored —
Stack-based buffer overflow in the zip:// URL wrapper in PECL ZIP 1.8.3 and earlier, as bundled with PHP 5.2.0 and 5.2.…
-
Unscored —
The import_request_variables function in PHP 4.0.7 through 4.4.6, and 5.x before 5.2.2, when called without a prefix, d…
-
Unscored —CVE-2007-1394 Public exploit
Direct static code injection vulnerability in startsession.php in Flat Chat 2.0 allows remote attackers to execute arbi…
-
Unscored —
Incomplete blacklist vulnerability in index.php in phpMyAdmin 2.8.0 through 2.9.2 allows remote attackers to conduct cr…
-
Unscored —CVE-2007-1401 Public exploit
Buffer overflow in the crack extension (CrackLib), as bundled with PHP 4.4.6 and other versions before 5.0.0, might all…
-
Unscored —
Plash permits sandboxed processes to open /dev/tty, which allows local users to escape sandbox restrictions and execute…
-
Unscored —
tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 allows remote attackers to cause a denial of service via a long UDP …
-
Unscored —CVE-2007-1391 Public exploit
PHP remote file inclusion vulnerability in modules/abook/foldertree.php in Leo West WEBO (aka weborganizer) 1.0 allows …
-
Medium 6.1
Trac Cross-site Scripting (XSS) vulnerability
Cross-site scripting (XSS) vulnerability in the "download wiki page as text" feature in Trac before 0.10.3.1, when Microsoft Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
-
Unscored —CVE-2007-1398 Public exploit
The frag3 preprocessor in Snort 2.6.1.1, 2.6.1.2, and 2.7.0 beta, when configured for inline use on Linux without the i…
-
Unscored —CVE-2007-1411 Public exploit
Buffer overflow in PHP 4.4.6 and earlier, and unspecified PHP 5 versions, allows local and possibly remote attackers to…
-
Unscored —CVE-2007-1397 Public exploit
Multiple stack-based buffer overflows in the (1) ExtractRnick and (2) decrypt_topic_332 functions in FiSH allow remote …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in dynaliens 2.0 and 2.1 allow remote attackers to inject arbitrary…
-
Unscored —CVE-2007-1392 Public exploit
Directory traversal vulnerability in down.php in netForo! 0.1g allows remote attackers to read arbitrary files via a ..…
-
Unscored —
WordPress allows remote attackers to obtain sensitive information via a direct request for wp-admin/admin-functions.php…
-
Unscored —
Multiple vulnerabilities in (1) bank.php, (2) landfill.php, (3) outposts.php, (4) tribes.php, (5) house.php, (6) tribea…
-
Unscored —CVE-2007-1410 Public exploit
SQL injection vulnerability in kategori.asp in GaziYapBoz Game Portal allows remote attackers to execute arbitrary SQL …
-
Unscored —
Multiple stack-based buffer overflows in an ActiveX control in SwDir.dll 10.1.4.20 in Macromedia Shockwave allow remote…
-
Unscored —
dynaliens 2.0 and 2.1 allows remote attackers to bypass authentication and perform certain privileged actions via a dir…
-
Medium 5.3
Trac missing Content-Disposition HTTP header
Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors.
-
Unscored —
Unspecified vulnerability in OpenSolution Quick.Cart before 2.1 has unknown impact and attack vectors, related to a "lo…
-
Unscored —CVE-2007-1402 Public exploit
The Rediff Toolbar 2.0 ActiveX control in redifftoolbar.dll allows remote attackers to cause a denial of service via un…
-
Unscored —CVE-2007-1393 Public exploit
PHP remote file inclusion vulnerability in mysave.php in Magic CMS 4.2.747 allows remote attackers to execute arbitrary…
-
Unscored —
Buffer overflow in kern/uipc_mbuf2.c in OpenBSD 3.9 and 4.0 allows remote attackers to execute arbitrary code via fragm…
-
Unscored —
Integer overflow in the ktruser function in NetBSD-current before 20061022, NetBSD 3 and 3-0 before 20061024, and NetBS…
-
Unscored —
Format string vulnerability in Ekiga 2.0.3, and probably other versions, allows remote attackers to execute arbitrary c…
-
Unscored —CVE-2007-1388 Public exploit
The do_ipv6_setsockopt function in net/ipv6/ipv6_sockglue.c in Linux kernel before 2.6.20, and possibly other versions,…
-
Unscored —
Unspecified vulnerability in cube.exe in the GINA component for CA (Computer Associates) eTrust Admin 8.1.0 through 8.1…
-
Unscored —
chunkcounter.cpp in KTorrent before 2.1.2 allows remote attackers to cause a denial of service (crash) and heap corrupt…
-
Unscored —
Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.2 allows remote attackers to overwrite arbitrar…
-
Unscored —
DreameeSoft Password Master 1.0 stores the database in an unencrypted format when the master password is set, which all…
-
Unscored —CVE-2007-0005 Public exploit
Multiple buffer overflows in the (1) read and (2) write handlers in the Omnikey CardMan 4040 driver in the Linux kernel…
-
Unscored —
AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cau…
-
Unscored —CVE-2007-1371 Public exploit
Multiple buffer overflows in Conquest 8.2a and earlier (1) allow local users to gain privileges by querying a metaserve…
-
Unscored —CVE-2007-1375 Public exploit
Integer overflow in the substr_compare function in PHP 5.2.1 and earlier allows context-dependent attackers to read sen…
-
Critical 9.8
Integer overflow in the 16 bit variable reference counter in PHP 4 allows context-dependent attackers to execute arbitr…
-
Unscored —
The ovrimos_longreadlen function in the Ovrimos extension for PHP before 4.4.5 allows context-dependent attackers to wr…
-
Unscored —
Stack-based buffer overflow in Mercury/32 (aka Mercury Mail Transport System) 4.01b and earlier allows remote attackers…
-
Unscored —
The shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not verify that their arguments corresp…
-
Unscored —CVE-2007-1380 Public exploit
The php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before 5.2.1, allows context…