Archive
16 March 2007
Vulnerabilities first published on this day (UTC), newest first.
38 results · Feed
-
Unscored —
The Tape Engine in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attacker…
-
Unscored —CVE-2007-1447 EPSS 15%
The Tape Engine in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attacker…
-
Medium —
Apache Tomcat Directory Traversal
Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_proxy, mod_rewrite, mod_jk), allows remote attackers to read arbitrary files via a .. (dot dot) sequence with com…
-
Unscored —
Apache Tomcat in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allows connections from external interfac…
-
Unscored —
Cross-site scripting (XSS) vulnerability in NukeSentinel before 2.5.06 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2007-1493 Public exploit
nukesentinel.php in NukeSentinel 2.5.06 and earlier uses a permissive regular expression to validate an IP address, whi…
-
Unscored —
winmm.dll in Microsoft Windows XP allows user-assisted remote attackers to cause a denial of service (infinite loop) vi…
-
Unscored —
nfnetlink_log in netfilter in the Linux kernel before 2.6.20.3 allows attackers to cause a denial of service (crash) vi…
-
Unscored —
The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.1.7, and possibly other products using symeve…
-
Unscored —
nf_conntrack in netfilter in the Linux kernel before 2.6.20.3 does not set nfctinfo during reassembly of fragmented pac…
-
Unscored —
Unspecified maintenance web pages in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allow remote authenti…
-
Unscored —
Multiple stack-based buffer overflows in the SiteManager.SiteMgr.1 ActiveX control (SiteManager.dll) in the ePO managem…
-
Unscored —
Multiple heap-based buffer overflows in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allow user-assiste…
-
Unscored —
Integer overflow in the WP6GeneralTextPacket::_readContents function in WordPerfect Document importer/exporter (libwpd)…
-
Unscored —CVE-2007-1469 Public exploit
SQL injection vulnerability in gallery.asp in Absolute Image Gallery 2.0 allows remote attackers to execute arbitrary S…
-
Unscored —
Multiple buffer overflows in LIBFtp 5.0 allow user-assisted remote attackers to execute arbitrary code via certain long…
-
Unscored —CVE-2007-1483 Public exploit
Multiple PHP remote file inclusion vulnerabilities in WebCalendar 0.9.45 allow remote attackers to execute arbitrary PH…
-
Unscored —CVE-2007-1475 Public exploit
Multiple buffer overflows in the (1) ibase_connect and (2) ibase_pconnect functions in the interbase extension in PHP 4…
-
Unscored —
Buffer overflow in the set_umask function in QFTP in LIBFtp 3.1-1 allows local users to execute arbitrary code via a lo…
-
Unscored —CVE-2007-1472 Public exploit
Variable overwrite vulnerability in groupit/base/groupit.start.inc in Groupit 2.00b5 allows remote attackers to conduct…
-
Unscored —
PHP remote file inclusion vulnerability in template.class.php in Carbonize Lazarus Guestbook before 1.7.3 allows remote…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM Rational ClearQuest (CQ) Web 7.0.0.0 allows remote attackers to inject …
-
Unscored —CVE-2007-1476 Public exploit
The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security …
-
Unscored —CVE-2007-1484 Public exploit
The array_user_key_compare function in PHP 4.4.6 and earlier, and 5.x up to 5.2.1, makes erroneous calls to zval_dtor, …
-
Unscored —
Unspecified vulnerability in Sun Java System Web Server 6.0 and 6.1 before 20070315 allows remote attackers to "gain un…
-
Unscored —CVE-2007-1480 Public exploit
Creative Guestbook 1.0 allows remote attackers to add an administrative account via a direct request to createadmin.php…
-
Unscored —CVE-2007-1487 Public exploit
Directory traversal vulnerability in index.php in Sascha Schroeder (aka CyberTeddy or Cyber-inside) WebLog allows remot…
-
Unscored —
Unspecified vulnerability in web-app.org Web Automated Perl Portal (WebAPP) 0.9.9.4 to 0.9.9.6 allows remote attackers …
-
Unscored —
Directory traversal vulnerability in index.php in PHP Point Of Sale for osCommerce 1.1 allows remote attackers to inclu…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Acces…
-
Unscored —CVE-2007-1474 Public exploit
Argument injection vulnerability in the cleanup cron script in Horde Project Horde and IMP before Horde Application Fra…
-
Unscored —CVE-2007-1482 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in WBBlog allows remote attackers to inject arbitrary web script …
-
Unscored —CVE-2007-1481 Public exploit
SQL injection vulnerability in index.php in WBBlog allows remote attackers to execute arbitrary SQL commands via the e_…
-
Unscored —CVE-2007-1471 Public exploit
admin/default.asp in Orion-Blog 2.0 allows remote attackers to bypass authentication controls and gain privileges via a…
-
Unscored —CVE-2007-1473 Public exploit
Cross-site scripting (XSS) vulnerability in framework/NLS/NLS.php in Horde Framework before 3.1.4 RC1, when the login p…
-
Unscored —CVE-2007-1478 Public exploit
download.php in McGallery 0.5b allows remote attackers to read arbitrary files and obtain script source code via the fi…
-
Unscored —CVE-2007-1479 Public exploit
Cross-site scripting (XSS) vulnerability in Guestbook.php in Creative Guestbook 1.0 allows remote attackers to inject a…
-
Unscored —CVE-2007-1278 EPSS 23%
Unspecified vulnerability in the IIS connector in Adobe JRun 4.0 Updater 6, and ColdFusion MX 6.1 and 7.0 Enterprise, w…