Archive
March 2007
Vulnerabilities first published in this month (UTC), newest first.
300 results · Clear filters · Feed
-
Unscored —CVE-2007-0005 Public exploit
Multiple buffer overflows in the (1) read and (2) write handlers in the Omnikey CardMan 4040 driver in the Linux kernel…
-
Unscored —
AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cau…
-
Unscored —CVE-2007-1371 Public exploit
Multiple buffer overflows in Conquest 8.2a and earlier (1) allow local users to gain privileges by querying a metaserve…
-
Unscored —CVE-2007-1375 Public exploit
Integer overflow in the substr_compare function in PHP 5.2.1 and earlier allows context-dependent attackers to read sen…
-
Critical 9.8
Integer overflow in the 16 bit variable reference counter in PHP 4 allows context-dependent attackers to execute arbitr…
-
Unscored —
Stack-based buffer overflow in Mercury/32 (aka Mercury Mail Transport System) 4.01b and earlier allows remote attackers…
-
Unscored —
The shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not verify that their arguments corresp…
-
Unscored —CVE-2007-1380 Public exploit
The php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before 5.2.1, allows context…
-
Unscored —CVE-2007-1372 Public exploit
PHP remote file inclusion vulnerability in styles/internal/header.php in the PostGuestbook 0.6.1 module for PHP-Nuke al…
-
Unscored —CVE-2007-1382 Public exploit
The PHP COM extensions for PHP on Windows systems allow context-dependent attackers to execute arbitrary code via a WSc…
-
Unscored —CVE-2007-1381 Public exploit
The wddx_deserialize function in wddx.c 1.119.2.10.2.12 and 1.119.2.10.2.13 in PHP 5, as modified in CVS on 20070224 an…
-
Unscored —CVE-2007-1369 Public exploit
ini_modifier (sgid-zendtech) in Zend Platform 2.2.3 and earlier allows local users to modify the system php.ini file by…
-
Unscored —CVE-2007-1359 Public exploit
Interpretation conflict in ModSecurity (mod_security) 2.1.0 and earlier allows remote attackers to bypass request rules…
-
Unscored —
Microsoft Windows Explorer on Windows 2000 SP4 FR and XP SP2 FR, and possibly other versions and platforms, allows remo…
-
Unscored —CVE-2007-1340 Public exploit
PHP remote file inclusion vulnerability in eintrag.php in Weltennetz News-Letterman 1.1 allows remote attackers to exec…
-
Unscored —CVE-2007-1339 Public exploit
SQL injection vulnerability in index.php in Links Management Application 1.0 allows remote attackers to execute arbitra…
-
Unscored —
The SILC_SERVER_CMD_FUNC function in apps/silcd/command.c in silc-server 1.0.2 allows remote attackers to cause a denia…
-
Unscored —CVE-2007-1331 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in TKS Banking Solutions ePortfolio 1.0 Java allow remote attackers…
-
Unscored —CVE-2007-1330 Public exploit
Comodo Firewall Pro (CFP) (formerly Comodo Personal Firewall) 2.4.18.184 and earlier allows local users to bypass drive…
-
Unscored —CVE-2006-7156 Public exploit
PHP remote file inclusion vulnerability in addon_keywords.php in Keyword Replacer (keyword_replacer) 1.0 and earlier, a…
-
Unscored —CVE-2006-7146 Public exploit
PHP remote file inclusion vulnerability in bug.php in Leicestershire communityPortals 1.0 build 20051018 and earlier al…
-
Unscored —CVE-2006-7141 Public exploit
Absolute path traversal vulnerability in Oracle Database Server, when utl_file_dir is set to a wildcard value or "CREAT…
-
Unscored —CVE-2006-7139 Public exploit
Kmail 1.9.1 on KDE 3.5.2, with "Prefer HTML to Plain Text" enabled, allows remote attackers to cause a denial of servic…
-
Unscored —CVE-2006-7152 Public exploit
default.asp in ASP-Nuke Community 1.5 and earlier allows remote attackers to gain privileges by setting certain pseudo …
-
Unscored —CVE-2006-7147 Public exploit
PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBB Import Tools Mod 0.1.4 and earlier …
-
Unscored —CVE-2006-7148 Public exploit
PHP remote file inclusion vulnerability in includes/bb_usage_stats.php in maluinfo 206.2.38 for Brazilian PHPBB allows …
-
Unscored —CVE-2006-7157 Public exploit
Buffer overflow in Google Earth v4.0.2091 (beta) allows remote user-assisted attackers to cause a denial of service (cr…
-
Unscored —CVE-2006-7135 Public exploit
PHP remote file inclusion vulnerability in lib/functions.inc.php in PHP Poll Creator (phpPC) 1.04 allows remote attacke…
-
Unscored —CVE-2006-7136 Public exploit
Multiple PHP remote file inclusion vulnerabilities in PHP Poll Creator (phpPC) 1.04 and earlier allow remote attackers …
-
Unscored —CVE-2007-1294 Public exploit
A certain ActiveX control in the DivXBrowserPlugin (npdivx32.dll) in DivX Web Player, as distributed with DivX Player 1…
-
Unscored —CVE-2007-1292 Public exploit
SQL injection vulnerability in inlinemod.php in Jelsoft vBulletin before 3.5.8, and before 3.6.5 in the 3.6.x series, m…
-
Unscored —CVE-2007-1291 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Tyger Bug Tracking System (TygerBT) 1.1.3 allow remote attackers…
-
Unscored —CVE-2007-1298 Public exploit
SQL injection vulnerability in subcat.php in AJ Auction 1.0 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —
Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service (crash) by sending…
-
Unscored —CVE-2007-1303 Public exploit
Directory traversal vulnerability in rb.cgi in RRDBrowse 1.6 and earlier allows remote attackers to read arbitrary file…
-
Unscored —CVE-2007-1308 Public exploit
ecma/kjs_html.cpp in KDE JavaScript (KJS), as used in Konqueror in KDE 3.5.5, allows remote attackers to cause a denial…
-
Unscored —CVE-2007-1293 Public exploit
SQL injection vulnerability in Rigter Portal System (RPS) 6.2, when magic_quotes_gpc is disabled, allows remote attacke…
-
Unscored —
Stack-based buffer overflow in the IMAP service in MailEnable Enterprise and Professional Editions 2.37 and earlier all…
-
Unscored —CVE-2007-1299 Public exploit
PHP remote file inclusion vulnerability in index.php in Mani Stats Reader 1.2 and earlier allows remote attackers to ex…
-
Unscored —CVE-2007-1295 Public exploit
SQL injection vulnerability in topic_title.php in AJ Forum 1.0 allows remote attackers to execute arbitrary SQL command…