Archive
March 2007
Vulnerabilities first published in this month (UTC), newest first.
632 results · Feed
-
Unscored —CVE-2007-1524 Public exploit
Directory traversal vulnerability in themes/default/ in ZomPlog 3.7.6 and earlier allows remote attackers to include ar…
-
Unscored —CVE-2007-1528 EPSS 11%
The LLTD Mapper in Microsoft Windows Vista allows remote attackers to spoof hosts, and nonexistent bridge relationships…
-
Unscored —CVE-2007-1533 EPSS 11%
The Teredo implementation in Microsoft Windows Vista uses the same nonce for communication with different UDP ports wit…
-
Unscored —CVE-2007-1521 Public exploit
Double free vulnerability in PHP before 4.4.7, and 5.x before 5.2.2, allows context-dependent attackers to execute arbi…
-
Unscored —
Direct static code injection vulnerability in postpost.php in Dayfox Blog (dfblog) 4 allows remote attackers to execute…
-
Unscored —CVE-2007-1532 EPSS 11%
The neighbor discovery implementation in Microsoft Windows Vista allows remote attackers to conduct a redirect attack b…
-
Unscored —CVE-2007-1527 EPSS 11%
The LLTD Mapper in Microsoft Windows Vista does not verify that an IP address in a TLV type 0x07 field in a HELLO packe…
-
Unscored —
Heap-based buffer overflow in the kernel in NetBSD 3.0, certain versions of FreeBSD and OpenBSD, and possibly other BSD…
-
Unscored —CVE-2007-1530 EPSS 15%
The LLTD Mapper in Microsoft Windows Vista does not properly gather responses to EMIT packets, which allows remote atta…
-
Unscored —
Sun Java System Web Server 6.1 before 20070314 allows remote authenticated users with revoked client certificates to by…
-
Unscored —
Integer underflow in the file_printf function in the "file" program before 4.20 allows user-assisted attackers to execu…
-
Unscored —
The LLTD Responder in Microsoft Windows Vista does not send the Mapper a response to a DISCOVERY packet if another host…
-
Unscored —
IBM WebSphere Application Server (WAS) 5.1.1.9 and earlier allows remote attackers to obtain JSP source code and other …
-
Unscored —
product_review.php in Koan Software Mega Mall allows remote attackers to obtain the installation path via a request wit…
-
Unscored —CVE-2006-7170 Public exploit
Multiple SQL injection vulnerabilities in Koan Software Mega Mall allow remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2006-7168 Public exploit
PHP remote file inclusion vulnerability in includes/not_mem.php in the Add Name module for PHP allows remote attackers …
-
Unscored —
IBM WebSphere Application Server (WAS) 5.0 through 5.1.1.0 allows remote attackers to obtain JSP source code and other …
-
Unscored —CVE-2006-7167 Public exploit
Unspecified vulnerability in ProRat Server 1.9 Fix2 allows remote attackers to bypass the authentication mechanism for …
-
Unscored —
SimpleFileServlet in IBM WebSphere Application Server 5.0.1 through 5.0.2.7 on Linux and UNIX does not block certain in…
-
Unscored —CVE-2006-7169 Public exploit
PHP remote file inclusion vulnerability in includes/header_simple.php in Ultimate PHP Board (UPB) 2.0 and earlier allow…
-
Unscored —
IBM WebSphere Application Server (WAS) 6.0 before 20050201, when serving pages in an Application WAR or an Extended Doc…
-
Unscored —
IBM WebSphere Application Server (WAS) 5.0.2.5 through 5.1.1.3 allows remote attackers to obtain JSP source code and ot…
-
Unscored —
The VNC server implementation in QEMU, as used by Xen and possibly other environments, allows local users of a guest op…
-
Unscored —CVE-2007-1515 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP H3 4.1.3, and possibly earlier, allow remote attackers…
-
Unscored —CVE-2007-1512 EPSS 12%
Stack-based buffer overflow in the AfxOleSetEditMenu function in the MFC component in Microsoft Windows 2000 SP4, XP SP…
-
Unscored —CVE-2007-1508 Public exploit
Cross-site scripting (XSS) vulnerability in CMD_USER_STATS in DirectAdmin allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2007-1511 Public exploit
Buffer overflow in FrontBase Relational Database Server 4.2.7 and earlier allows remote authenticated users, with privi…
-
Unscored —CVE-2007-1516 Public exploit
PHP remote file inclusion vulnerability in functions/update.php in Cicoandcico CcMail 1.0 allows remote attackers to ex…
-
Unscored —CVE-2007-1510 Public exploit
SQL injection vulnerability in post.php in Particle Blogger 1.0.0 through 1.2.0 allows remote attackers to execute arbi…
-
Unscored —CVE-2007-1514 Public exploit
PHP remote file inclusion vulnerability in index.php in ViperWeb Portal alpha 0.1 allows remote attackers to execute ar…
-
Unscored —
The default configuration in OpenAFS 1.4.x before 1.4.4 and 1.5.x before 1.5.17 supports setuid programs within the loc…
-
Unscored —CVE-2007-1509 Public exploit
Directory traversal vulnerability in enkrypt.php in Sascha Schroeder krypt (aka Holtstraeter Rot 13) allows remote atta…
-
Unscored —CVE-2007-1513 Public exploit
PHP remote file inclusion vulnerability in comanda.php in GraFX Company WebSite Builder (CWB) PRO 1.9.8, when register_…
-
Unscored —CVE-2003-1321 Public exploit
Buffer overflow in Avant Browser 8.02 allows remote attackers to cause a denial of service (crash) and possibly execute…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Servlet Service in Fujitsu Interstage Application Server (IJServer) 8.0…
-
Unscored —
Fujitsu FENCE-Pro before V5L01, and Systemwalker Desktop Encryption V12.0L10, V12.0L10A, V12.0L10B, V12.0L20 and V13.0.…
-
Unscored —
The Linux Security Auditing Tool (LSAT) allows local users to overwrite arbitrary files via a symlink attack on tempora…
-
Unscored —
Multiple format string vulnerabilities in comm.c in Rhapsody IRC 0.28b allow remote attackers to execute arbitrary code…
-
Unscored —
Unspecified vulnerability in the IOPCServer::RemoveGroup function in the OPCDA interface in Takebishi Electric DeviceXP…
-
Unscored —CVE-2007-1506 Public exploit
Cross-site scripting (XSS) vulnerability in PORTAL.wwv_main.render_warning_screen in the Oracle Portal 10g allows remot…