Skip to content
OpenAdvisories

Archive

10 March 2007

Vulnerabilities first published on this day (UTC), newest first.

26 results · Clear filters · Feed

  • Unscored —
    CVE-2007-1399 Public exploit EPSS 20%

    Stack-based buffer overflow in the zip:// URL wrapper in PECL ZIP 1.8.3 and earlier, as bundled with PHP 5.2.0 and 5.2.…

  • Unscored —
    CVE-2007-1394 Public exploit

    Direct static code injection vulnerability in startsession.php in Flat Chat 2.0 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2007-1401 Public exploit

    Buffer overflow in the crack extension (CrackLib), as bundled with PHP 4.4.6 and other versions before 5.0.0, might all…

  • Unscored —
    CVE-2007-1404 Public exploit EPSS 68%

    tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 allows remote attackers to cause a denial of service via a long UDP …

  • Unscored —
    CVE-2007-1391 Public exploit

    PHP remote file inclusion vulnerability in modules/abook/foldertree.php in Leo West WEBO (aka weborganizer) 1.0 allows …

  • Unscored —
    CVE-2007-1398 Public exploit

    The frag3 preprocessor in Snort 2.6.1.1, 2.6.1.2, and 2.7.0 beta, when configured for inline use on Linux without the i…

  • Unscored —
    CVE-2007-1411 Public exploit

    Buffer overflow in PHP 4.4.6 and earlier, and unspecified PHP 5 versions, allows local and possibly remote attackers to…

  • Unscored —
    CVE-2007-1397 Public exploit

    Multiple stack-based buffer overflows in the (1) ExtractRnick and (2) decrypt_topic_332 functions in FiSH allow remote …

  • Unscored —
    CVE-2007-1392 Public exploit

    Directory traversal vulnerability in down.php in netForo! 0.1g allows remote attackers to read arbitrary files via a ..…

  • Unscored —
    CVE-2007-1410 Public exploit

    SQL injection vulnerability in kategori.asp in GaziYapBoz Game Portal allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2007-1403 Public exploit EPSS 29%

    Multiple stack-based buffer overflows in an ActiveX control in SwDir.dll 10.1.4.20 in Macromedia Shockwave allow remote…

  • Unscored —
    CVE-2007-1402 Public exploit

    The Rediff Toolbar 2.0 ActiveX control in redifftoolbar.dll allows remote attackers to cause a denial of service via un…

  • Unscored —
    CVE-2007-1393 Public exploit

    PHP remote file inclusion vulnerability in mysave.php in Magic CMS 4.2.747 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2007-1365 Public exploit EPSS 21%

    Buffer overflow in kern/uipc_mbuf2.c in OpenBSD 3.9 and 4.0 allows remote attackers to execute arbitrary code via fragm…

  • Unscored —
    CVE-2007-1388 Public exploit

    The do_ipv6_setsockopt function in net/ipv6/ipv6_sockglue.c in Linux kernel before 2.6.20, and possibly other versions,…

  • Unscored —
    CVE-2007-0005 Public exploit

    Multiple buffer overflows in the (1) read and (2) write handlers in the Omnikey CardMan 4040 driver in the Linux kernel…

  • Unscored —
    CVE-2007-1377 Public exploit EPSS 18%

    AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cau…

  • Unscored —
    CVE-2007-1371 Public exploit

    Multiple buffer overflows in Conquest 8.2a and earlier (1) allow local users to gain privileges by querying a metaserve…

  • Unscored —
    CVE-2007-1375 Public exploit

    Integer overflow in the substr_compare function in PHP 5.2.1 and earlier allows context-dependent attackers to read sen…

  • Critical 9.8
    CVE-2007-1383 Public exploit EPSS 15%

    Integer overflow in the 16 bit variable reference counter in PHP 4 allows context-dependent attackers to execute arbitr…

  • Unscored —
    CVE-2007-1373 Public exploit EPSS 60%

    Stack-based buffer overflow in Mercury/32 (aka Mercury Mail Transport System) 4.01b and earlier allows remote attackers…

  • Unscored —
    CVE-2007-1376 Public exploit EPSS 10%

    The shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not verify that their arguments corresp…

  • Unscored —
    CVE-2007-1380 Public exploit

    The php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before 5.2.1, allows context…

  • Unscored —
    CVE-2007-1372 Public exploit

    PHP remote file inclusion vulnerability in styles/internal/header.php in the PostGuestbook 0.6.1 module for PHP-Nuke al…

  • Unscored —
    CVE-2007-1382 Public exploit

    The PHP COM extensions for PHP on Windows systems allow context-dependent attackers to execute arbitrary code via a WSc…

  • Unscored —
    CVE-2007-1381 Public exploit

    The wddx_deserialize function in wddx.c 1.119.2.10.2.12 and 1.119.2.10.2.13 in PHP 5, as modified in CVS on 20070224 an…