Archive
March 2007
Vulnerabilities first published in this month (UTC), newest first.
632 results · Feed
-
Unscored —
The channel driver in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of servic…
-
Unscored —
Konqueror 3.5.5 allows remote attackers to cause a denial of service (crash) by using JavaScript to read a child iframe…
-
Unscored —
Format string vulnerability in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code v…
-
Unscored —CVE-2007-1563 Public exploit
The FTP protocol implementation in Opera 9.10 allows remote attackers to allows remote servers to force the client to c…
-
Unscored —CVE-2007-1566 Public exploit
SQL injection vulnerability in News/page.asp in NetVIOS Portal allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2007-1564 Public exploit
The FTP protocol implementation in Konqueror 3.5.5 allows remote servers to force the client to connect to other server…
-
Unscored —
Format string vulnerability in the whiteboard Jabber protocol in Inkscape before 0.45.1 allows user-assisted remote att…
-
Unscored —CVE-2007-1560 EPSS 28%
The clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to ca…
-
Unscored —
Format string vulnerability in F-Secure Anti-Virus Client Security 6.02 allows local users to cause a denial of service…
-
Unscored —CVE-2007-1556 Public exploit
SQL injection vulnerability in kommentare.php in Creative Files 1.2 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2006-7173 Public exploit
Direct static code injection vulnerability in admin.php in PHP-Stats 0.1.9.1b and earlier allows remote attackers to ex…
-
Unscored —CVE-2006-7172 Public exploit
Multiple SQL injection vulnerabilities in php-stats.recphp.php in PHP-Stats 0.1.9.1b and earlier allow remote attackers…
-
Unscored —
Array index error in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to cause a denial of servic…
-
Unscored —CVE-2007-1548 Public exploit
SQL injection vulnerability in functions/functions_filters.asp in Web Wiz Forums before 8.05a (MySQL version) does not …
-
Unscored —
Unrestricted file upload vulnerability in gallery.php in phpx 3.5.15 allows remote attackers to upload and execute arbi…
-
Unscored —CVE-2007-1553 Public exploit
admin/configuration.php in Guestbara 1.2 and earlier allows remote attackers to modify the e-mail, name, and password o…
-
Unscored —CVE-2007-1542 Public exploit
Unspecified vulnerability in the Cisco IP Phone 7940 and 7960 running firmware before POS8-6-0 allows remote attackers …
-
Unscored —
Direct static code injection vulnerability in admin/configuration.php in Guestbara 1.2 and earlier allows remote authen…
-
Unscored —CVE-2007-1552 Public exploit
Unrestricted file upload vulnerability in usercp.php in MetaForum 0.513 Beta restricts file types based on the MIME typ…
-
Unscored —CVE-2007-1540 Public exploit
Directory traversal vulnerability in am.pl in (1) SQL-Ledger 2.6.27 and earlier, and (2) LedgerSMB before 1.2.0, allows…
-
Unscored —CVE-2007-1550 Public exploit
Multiple SQL injection vulnerabilities in phpx 3.5.15 allow remote attackers to execute arbitrary SQL commands via the …
-
Unscored —
Stack-based buffer overflow in the accept_att_local function in server/os/connection.c in Network Audio System (NAS) be…
-
Unscored —
Directory traversal vulnerability in am.pl in SQL-Ledger 2.6.27 only checks for the presence of a NULL (%00) character …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in phpx 3.5.15 allow remote attackers to inject arbitrary web scrip…
-
Unscored —
The ReadRequestFromClient function in server/os/io.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote at…
-
Unscored —
Integer overflow in the ProcAuWriteElement function in server/dia/audispatch.c in Network Audio System (NAS) before 1.8…
-
Unscored —CVE-2007-1555 Public exploit
SQL injection vulnerability in forum.php in the Minerva mod 2.0.21 build 238a and earlier for phpBB allows remote attac…
-
Unscored —
The AddResource function in server/dia/resource.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote attac…
-
Unscored —
McAfee VirusScan Enterprise 8.5.0.i uses insecure permissions for certain Windows Registry keys, which allows local use…
-
Unscored —
\Device\NdisTapi (NDISTAPI.sys) in Microsoft Windows XP SP2 and 2003 SP1 uses weak permissions, which allows local user…
-
Unscored —CVE-2007-1539 Public exploit
Directory traversal vulnerability in inc/map.func.php in pragmaMX Landkarten 2.1 module allows remote attackers to incl…
-
Unscored —
W-Agora (Web-Agora) 4.2.1, when register_globals is enabled, stores globals.inc under the web document root with insuff…
-
Unscored —CVE-2007-1517 Public exploit
SQL injection vulnerability in comments.php in WSN Guest 1.02 and 1.21 allows remote attackers to execute arbitrary SQL…
-
Unscored —
Cross-site scripting (XSS) vulnerability in modules.php in PHP-Nuke 8.0 and earlier allows remote attackers to inject a…
-
Unscored —CVE-2007-1522 Public exploit
Double free vulnerability in the session extension in PHP 5.2.0 and 5.2.1 allows context-dependent attackers to execute…
-
Unscored —CVE-2007-1534 EPSS 13%
DFSR.exe in Windows Meeting Space in Microsoft Windows Vista remains available for remote connections on TCP port 5722 …
-
Unscored —CVE-2007-1518 Public exploit
SQL injection vulnerability in usergroups.php in Woltlab Burning Board (wBB) 2.x allows remote attackers to execute arb…
-
Unscored —
Microsoft Windows XP and Vista overwrites ARP table entries included in gratuitous ARP, which allows remote attackers t…
-
Unscored —CVE-2007-1535 EPSS 12%
Microsoft Windows Vista establishes a Teredo address without user action upon connection to the Internet, contrary to d…
-
Unscored —
The cross-site request forgery (CSRF) protection in PHP-Nuke 8.0 and earlier does not ensure the SERVER superglobal is …