Skip to content
OpenAdvisories

Archive

28 March 2007

Vulnerabilities first published on this day (UTC), newest first.

24 results · Feed

  • Unscored —

    Heap-based buffer overflow in the LDAP server in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote a…

  • Unscored —

    Mozilla Firefox 2.0.0.3 does not check URLs embedded in (1) object or (2) iframe HTML tags against the phishing site bl…

  • Unscored —
    CVE-2007-1733 Public exploit EPSS 11%

    Buffer overflow in InterVations NaviCOPA HTTP Server 2.01 allows remote attackers to execute arbitrary code via a long …

  • Unscored —
    CVE-2007-1738 Public exploit

    TrueCrypt 4.3, when installed setuid root, allows local users to cause a denial of service (filesystem unavailability) …

  • Unscored —

    Opera 9.10 does not check URLs embedded in (1) object or (2) iframe HTML tags against the phishing site blacklist, whic…

  • Unscored —
    CVE-2007-1735 Public exploit

    Stack-based buffer overflow in Corel WordPerfect Office X3 (13.0.0.565) allows user-assisted remote attackers to execut…

  • Unscored —
    CVE-2007-1734 Public exploit

    The DCCP support in the do_dccp_getsockopt function in net/dccp/proto.c in Linux kernel 2.6.20 and later does not verif…

  • Unscored —
    CVE-2007-1675 Public exploit EPSS 62%

    Buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server (nimap.exe) in IBM Lotus Domino before 6.5.…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in an mt import in wp-admin/admin.php in WordPress 2.1.2 allows remote authent…

  • Unscored —
    CVE-2007-1725 Public exploit

    SQL injection vulnerability in index.php in IceBB 1.0-rc5 allows remote authenticated users to execute arbitrary SQL co…

  • Unscored —
    CVE-2007-1726 Public exploit

    Unrestricted file upload vulnerability in index.php in IceBB 1.0-rc5 allows remote authenticated users to upload arbitr…

  • Unscored —
    CVE-2007-1730 Public exploit

    Integer signedness error in the DCCP support in the do_dccp_getsockopt function in net/dccp/proto.c in Linux kernel 2.6…

  • Unscored —

    Multiple stack-based buffer overflows in High Performance Anonymous FTP Server (hpaftpd) 1.01 allow remote attackers to…

  • Unscored —

    SQL injection vulnerability in includes/start.php in Flexbb 1.0.0 10005 Beta Release 1 allows remote attackers to execu…

  • Unscored —

    The Remote Play feature in Sony Playstation 3 (PS3) 1.60 and Playstation Portable (PSP) 3.10 OE-A allows remote attacke…

  • Unscored —

    Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 6.20, 6.4x, 7.01, 7.50, and 7.51 allows remote a…

  • Unscored —

    Unspecified vulnerability in ReactOS 0.3.1 has unknown impact and attack vectors, related to a fix for "dozens of win32…

  • Unscored —
    CVE-2007-1718 Public exploit

    CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows remote atta…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the administration console in Secure Computing CipherTrust IronM…

  • Unscored —
    CVE-2007-1719 Public exploit

    Buffer overflow in eject.c in Jason W. Bacon mcweject 0.9 on FreeBSD, and possibly other versions, allows local users t…

  • Unscored —
    CVE-2007-1721 Public exploit EPSS 14%

    Multiple PHP remote file inclusion vulnerabilities in C-Arbre 0.6PR7 and earlier allow remote attackers to execute arbi…

  • Unscored —
    CVE-2007-1720 Public exploit

    Directory traversal vulnerability in addressbook.php in the Addressbook 1.2 module for PHP-Nuke allows remote attackers…

  • Unscored —
    CVE-2007-1717 Public exploit

    The mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 truncates e-mail messages at the first ASCIIZ ('\0…

  • Unscored —

    Buffer overflow in the DownloadCertificateExt function in SignKorea SKCommAX ActiveX control module 7.2.0.2 and 3280 6.…