Skip to content
OpenAdvisories

Archive

20 March 2007

Vulnerabilities first published on this day (UTC), newest first.

63 results · Feed

  • Unscored —
    CVE-2007-1536 Public exploit EPSS 14%

    Integer underflow in the file_printf function in the "file" program before 4.20 allows user-assisted attackers to execu…

  • Unscored —

    The LLTD Responder in Microsoft Windows Vista does not send the Mapper a response to a DISCOVERY packet if another host…

  • Unscored —

    IBM WebSphere Application Server (WAS) 5.1.1.9 and earlier allows remote attackers to obtain JSP source code and other …

  • Unscored —

    product_review.php in Koan Software Mega Mall allows remote attackers to obtain the installation path via a request wit…

  • Unscored —
    CVE-2006-7170 Public exploit

    Multiple SQL injection vulnerabilities in Koan Software Mega Mall allow remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2006-7168 Public exploit

    PHP remote file inclusion vulnerability in includes/not_mem.php in the Add Name module for PHP allows remote attackers …

  • Unscored —

    IBM WebSphere Application Server (WAS) 5.0 through 5.1.1.0 allows remote attackers to obtain JSP source code and other …

  • Unscored —
    CVE-2006-7167 Public exploit

    Unspecified vulnerability in ProRat Server 1.9 Fix2 allows remote attackers to bypass the authentication mechanism for …

  • Unscored —

    SimpleFileServlet in IBM WebSphere Application Server 5.0.1 through 5.0.2.7 on Linux and UNIX does not block certain in…

  • Unscored —
    CVE-2006-7169 Public exploit

    PHP remote file inclusion vulnerability in includes/header_simple.php in Ultimate PHP Board (UPB) 2.0 and earlier allow…

  • Unscored —

    IBM WebSphere Application Server (WAS) 6.0 before 20050201, when serving pages in an Application WAR or an Extended Doc…

  • Unscored —

    IBM WebSphere Application Server (WAS) 5.0.2.5 through 5.1.1.3 allows remote attackers to obtain JSP source code and ot…

  • Unscored —

    The VNC server implementation in QEMU, as used by Xen and possibly other environments, allows local users of a guest op…

  • Unscored —
    CVE-2007-1515 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP H3 4.1.3, and possibly earlier, allow remote attackers…

  • Unscored —
    CVE-2007-1512 EPSS 12%

    Stack-based buffer overflow in the AfxOleSetEditMenu function in the MFC component in Microsoft Windows 2000 SP4, XP SP…

  • Unscored —
    CVE-2007-1508 Public exploit

    Cross-site scripting (XSS) vulnerability in CMD_USER_STATS in DirectAdmin allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2007-1511 Public exploit

    Buffer overflow in FrontBase Relational Database Server 4.2.7 and earlier allows remote authenticated users, with privi…

  • Unscored —
    CVE-2007-1516 Public exploit

    PHP remote file inclusion vulnerability in functions/update.php in Cicoandcico CcMail 1.0 allows remote attackers to ex…

  • Unscored —
    CVE-2007-1510 Public exploit

    SQL injection vulnerability in post.php in Particle Blogger 1.0.0 through 1.2.0 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2007-1514 Public exploit

    PHP remote file inclusion vulnerability in index.php in ViperWeb Portal alpha 0.1 allows remote attackers to execute ar…

  • Unscored —

    The default configuration in OpenAFS 1.4.x before 1.4.4 and 1.5.x before 1.5.17 supports setuid programs within the loc…

  • Unscored —
    CVE-2007-1509 Public exploit

    Directory traversal vulnerability in enkrypt.php in Sascha Schroeder krypt (aka Holtstraeter Rot 13) allows remote atta…

  • Unscored —
    CVE-2007-1513 Public exploit

    PHP remote file inclusion vulnerability in comanda.php in GraFX Company WebSite Builder (CWB) PRO 1.9.8, when register_…