Archive
20 March 2007
Vulnerabilities first published on this day (UTC), newest first.
63 results · Feed
-
Unscored —CVE-2006-7173 Public exploit
Direct static code injection vulnerability in admin.php in PHP-Stats 0.1.9.1b and earlier allows remote attackers to ex…
-
Unscored —CVE-2006-7172 Public exploit
Multiple SQL injection vulnerabilities in php-stats.recphp.php in PHP-Stats 0.1.9.1b and earlier allow remote attackers…
-
Unscored —
Array index error in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to cause a denial of servic…
-
Unscored —CVE-2007-1548 Public exploit
SQL injection vulnerability in functions/functions_filters.asp in Web Wiz Forums before 8.05a (MySQL version) does not …
-
Unscored —
Unrestricted file upload vulnerability in gallery.php in phpx 3.5.15 allows remote attackers to upload and execute arbi…
-
Unscored —CVE-2007-1553 Public exploit
admin/configuration.php in Guestbara 1.2 and earlier allows remote attackers to modify the e-mail, name, and password o…
-
Unscored —CVE-2007-1542 Public exploit
Unspecified vulnerability in the Cisco IP Phone 7940 and 7960 running firmware before POS8-6-0 allows remote attackers …
-
Unscored —
Direct static code injection vulnerability in admin/configuration.php in Guestbara 1.2 and earlier allows remote authen…
-
Unscored —CVE-2007-1552 Public exploit
Unrestricted file upload vulnerability in usercp.php in MetaForum 0.513 Beta restricts file types based on the MIME typ…
-
Unscored —CVE-2007-1540 Public exploit
Directory traversal vulnerability in am.pl in (1) SQL-Ledger 2.6.27 and earlier, and (2) LedgerSMB before 1.2.0, allows…
-
Unscored —CVE-2007-1550 Public exploit
Multiple SQL injection vulnerabilities in phpx 3.5.15 allow remote attackers to execute arbitrary SQL commands via the …
-
Unscored —
Stack-based buffer overflow in the accept_att_local function in server/os/connection.c in Network Audio System (NAS) be…
-
Unscored —
Directory traversal vulnerability in am.pl in SQL-Ledger 2.6.27 only checks for the presence of a NULL (%00) character …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in phpx 3.5.15 allow remote attackers to inject arbitrary web scrip…
-
Unscored —
The ReadRequestFromClient function in server/os/io.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote at…
-
Unscored —
Integer overflow in the ProcAuWriteElement function in server/dia/audispatch.c in Network Audio System (NAS) before 1.8…
-
Unscored —CVE-2007-1555 Public exploit
SQL injection vulnerability in forum.php in the Minerva mod 2.0.21 build 238a and earlier for phpBB allows remote attac…
-
Unscored —
The AddResource function in server/dia/resource.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote attac…
-
Unscored —
McAfee VirusScan Enterprise 8.5.0.i uses insecure permissions for certain Windows Registry keys, which allows local use…
-
Unscored —
\Device\NdisTapi (NDISTAPI.sys) in Microsoft Windows XP SP2 and 2003 SP1 uses weak permissions, which allows local user…
-
Unscored —CVE-2007-1539 Public exploit
Directory traversal vulnerability in inc/map.func.php in pragmaMX Landkarten 2.1 module allows remote attackers to incl…
-
Unscored —
W-Agora (Web-Agora) 4.2.1, when register_globals is enabled, stores globals.inc under the web document root with insuff…
-
Unscored —CVE-2007-1517 Public exploit
SQL injection vulnerability in comments.php in WSN Guest 1.02 and 1.21 allows remote attackers to execute arbitrary SQL…
-
Unscored —
Cross-site scripting (XSS) vulnerability in modules.php in PHP-Nuke 8.0 and earlier allows remote attackers to inject a…
-
Unscored —CVE-2007-1522 Public exploit
Double free vulnerability in the session extension in PHP 5.2.0 and 5.2.1 allows context-dependent attackers to execute…
-
Unscored —CVE-2007-1534 EPSS 13%
DFSR.exe in Windows Meeting Space in Microsoft Windows Vista remains available for remote connections on TCP port 5722 …
-
Unscored —CVE-2007-1518 Public exploit
SQL injection vulnerability in usergroups.php in Woltlab Burning Board (wBB) 2.x allows remote attackers to execute arb…
-
Unscored —
Microsoft Windows XP and Vista overwrites ARP table entries included in gratuitous ARP, which allows remote attackers t…
-
Unscored —CVE-2007-1535 EPSS 12%
Microsoft Windows Vista establishes a Teredo address without user action upon connection to the Internet, contrary to d…
-
Unscored —
The cross-site request forgery (CSRF) protection in PHP-Nuke 8.0 and earlier does not ensure the SERVER superglobal is …
-
Unscored —CVE-2007-1524 Public exploit
Directory traversal vulnerability in themes/default/ in ZomPlog 3.7.6 and earlier allows remote attackers to include ar…
-
Unscored —CVE-2007-1528 EPSS 11%
The LLTD Mapper in Microsoft Windows Vista allows remote attackers to spoof hosts, and nonexistent bridge relationships…
-
Unscored —CVE-2007-1533 EPSS 11%
The Teredo implementation in Microsoft Windows Vista uses the same nonce for communication with different UDP ports wit…
-
Unscored —CVE-2007-1521 Public exploit
Double free vulnerability in PHP before 4.4.7, and 5.x before 5.2.2, allows context-dependent attackers to execute arbi…
-
Unscored —
Direct static code injection vulnerability in postpost.php in Dayfox Blog (dfblog) 4 allows remote attackers to execute…
-
Unscored —CVE-2007-1532 EPSS 11%
The neighbor discovery implementation in Microsoft Windows Vista allows remote attackers to conduct a redirect attack b…
-
Unscored —CVE-2007-1527 EPSS 11%
The LLTD Mapper in Microsoft Windows Vista does not verify that an IP address in a TLV type 0x07 field in a HELLO packe…
-
Unscored —
Heap-based buffer overflow in the kernel in NetBSD 3.0, certain versions of FreeBSD and OpenBSD, and possibly other BSD…
-
Unscored —CVE-2007-1530 EPSS 15%
The LLTD Mapper in Microsoft Windows Vista does not properly gather responses to EMIT packets, which allows remote atta…
-
Unscored —
Sun Java System Web Server 6.1 before 20070314 allows remote authenticated users with revoked client certificates to by…