Archive
March 2007
Vulnerabilities first published in this month (UTC), newest first.
632 results · Feed
-
Unscored —CVE-2007-1340 Public exploit
PHP remote file inclusion vulnerability in eintrag.php in Weltennetz News-Letterman 1.1 allows remote attackers to exec…
-
Unscored —
Cross-site scripting (XSS) vulnerability in admincp/index.php in Jelsoft vBulletin 3.6.5 and earlier allows remote atta…
-
Unscored —
include/auth/auth.php in Simple Invoices before 2007 03 05 does not use the login system to protect print preview pages…
-
Unscored —CVE-2007-1350 EPSS 20%
Stack-based buffer overflow in webadmin.exe in Novell NetMail 3.5.2 allows remote attackers to execute arbitrary code v…
-
Unscored —CVE-2007-1339 Public exploit
SQL injection vulnerability in index.php in Links Management Application 1.0 allows remote attackers to execute arbitra…
-
Unscored —
The default configuration of the AirPort utility in Apple AirPort Extreme creates an IPv6 tunnel but does not enable th…
-
Unscored —
PuTTY 0.59 and earlier uses weak file permissions for (1) ppk files containing private keys generated by puttygen and (…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in TKS Banking Solutions ePortfolio 1.0 Java allow remote at…
-
Unscored —
The SILC_SERVER_CMD_FUNC function in apps/silcd/command.c in silc-server 1.0.2 allows remote attackers to cause a denia…
-
Unscored —CVE-2007-1331 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in TKS Banking Solutions ePortfolio 1.0 Java allow remote attackers…
-
Unscored —
The PMA_ArrayWalkRecursive function in libraries/common.lib.php in phpMyAdmin before 2.10.0.2 does not limit recursion …
-
Unscored —
SnapGear 560, 585, 580, 640, 710, and 720 appliances before the 3.1.4u5 firmware allow remote attackers to cause a deni…
-
Unscored —CVE-2007-1330 Public exploit
Comodo Firewall Pro (CFP) (formerly Comodo Personal Firewall) 2.4.18.184 and earlier allows local users to bypass drive…
-
Unscored —
SQL injection vulnerability in index.php in Serendipity 1.1.1 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —
Directory traversal vulnerability in SQL-Ledger, and LedgerSMB before 1.1.5, allows remote attackers to read and overwr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in formulaire.php in Bernard JOLY BJ Webring allows remote attackers to inject…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Mambo 4.6.x allow remote attackers to inject arbitrary web scrip…
-
Unscored —
Untrusted search path vulnerability in the libtool-ltdl library (libltdl.so) 1.5.22-2.3 in Fedora Core 5 might allow lo…
-
Unscored —
The libike library, as used by in.iked, elfsign, and kcfd in Sun Solaris 9 and 10, when using an RSA key with exponent …
-
Unscored —CVE-2006-7156 Public exploit
PHP remote file inclusion vulnerability in addon_keywords.php in Keyword Replacer (keyword_replacer) 1.0 and earlier, a…
-
Unscored —CVE-2006-7146 Public exploit
PHP remote file inclusion vulnerability in bug.php in Leicestershire communityPortals 1.0 build 20051018 and earlier al…
-
Unscored —CVE-2006-7141 Public exploit
Absolute path traversal vulnerability in Oracle Database Server, when utl_file_dir is set to a wildcard value or "CREAT…
-
Unscored —CVE-2006-7139 Public exploit
Kmail 1.9.1 on KDE 3.5.2, with "Prefer HTML to Plain Text" enabled, allows remote attackers to cause a denial of servic…
-
Unscored —CVE-2006-7152 Public exploit
default.asp in ASP-Nuke Community 1.5 and earlier allows remote attackers to gain privileges by setting certain pseudo …
-
Unscored —
The centralized management feature for Utimaco Safeguard stores hard-coded cryptographic keys in executable programs fo…
-
Unscored —
SQL injection vulnerability in wwv_flow_utilities.gen_popup_list in the WWV_FLOW_UTILITIES package for Oracle APEX/HTML…
-
Unscored —
Iono allows remote attackers to obtain the full server path via certain requests to (1) templates/iono/admin/denied.tpl…
-
Unscored —
Multiple SQL injection vulnerabilities in Mambo 4.6.x allow remote attackers to execute arbitrary SQL commands via the …
-
Unscored —
SQL injection vulnerability in Call Center Software 0.93 and earlier allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2006-7147 Public exploit
PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBB Import Tools Mod 0.1.4 and earlier …
-
Unscored —
The Sandbox.sys driver in Outpost Firewall PRO 4.0, and possibly earlier versions, does not validate arguments to hooke…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Oracle Application Express (APEX) before 2.2.1, aka Oracle HTML DB, allows …
-
Unscored —
SQL injection vulnerability in giris_yap.asp in Hazir Site 2.0 allows remote attackers to bypass authentication via the…
-
Unscored —
Directory traversal vulnerability in include/prune_torrents.php in BTI-Tracker 1.3.2 (aka btitracker) allows remote att…
-
Unscored —CVE-2006-7148 Public exploit
PHP remote file inclusion vulnerability in includes/bb_usage_stats.php in maluinfo 206.2.38 for Brazilian PHPBB allows …
-
Unscored —CVE-2006-7157 Public exploit
Buffer overflow in Google Earth v4.0.2091 (beta) allows remote user-assisted attackers to cause a denial of service (cr…
-
Unscored —
Novell BorderManager 3.8 SP4 generates the same ISAKMP cookies for the same source IP and port number during the same d…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Call Center Software 0.93 and earlier allows remote attackers to inject arb…
-
Unscored —
PHP remote file inclusion vulnerability in index.php in MiniBB Forum 2 allows remote attackers to execute arbitrary cod…
-
Unscored —
edit_user.php in Call Center Software 0.93 and earlier allows remote attackers to obtain sensitive information such as …