Skip to content
OpenAdvisories

Archive

2 May 2007

Vulnerabilities first published on this day (UTC), newest first.

  1. 15
  2. 255
  3. 313
  4. 417
  5. 5 
  6. 6 
  7. 73
  8. 824
  9. 979
  10. 10 
  11. 1147
  12. 12 
  13. 1316
  14. 1441
  15. 156
  16. 1655
  17. 1722
  18. 1812
  19. 19 
  20. 20 
  21. 2125
  22. 2237
  23. 231
  24. 2434
  25. 253
  26. 26 
  27. 27 
  28. 28 
  29. 299
  30. 3039
  31. 3127

55 results · Feed

  • Unscored —

    SQL injection vulnerability in index.php in FileRun 1.0 and earlier allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2007-2474 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart 4.0 allow remote attacker…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to injec…

  • Unscored —

    Unspecified vulnerability in the ADSCHEMA utility in Novell SecureLogin (NSL) 6 SP1 before 6.0.106 has unknown impact a…

  • Unscored —
    CVE-2007-2473 Public exploit

    SQL injection vulnerability in stylesheet.php in CMS Made Simple 1.0.5 and earlier allows remote attackers to execute a…

  • Unscored —
    CVE-2007-2471 Public exploit

    Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to read arbitra…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in FileRun 1.0 and earlier allow remote attackers to i…

  • Unscored —

    Unspecified vulnerability in Novell SecureLogin (NSL) 6 SP1 before 6.0.106 has unknown impact and remote attack vectors…

  • Unscored —

    The utrace support in Linux kernel 2.6.18, and other versions, allows local users to cause a denial of service (system …

  • Unscored —

    ZoneAlarm Pro 6.5.737.000, 6.1.744.001, and possibly earlier versions and other products, allows local users to cause a…

  • Unscored —

    The DHCP relay agent in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 allows remote attackers to cause a denial o…

  • Unscored —

    Unspecified vulnerability in Sun Solaris 9, when Solaris Auditing (BSM) is enabled for file read, write, attribute modi…

  • Unscored —

    Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.1 before 7.1(2)49 and 7.2 before 7.2(2)1…

  • Unscored —

    Heap-based buffer overflow in the Rendezvous / Extensible Messaging and Presence Protocol (XMPP) component (plugins\ren…

  • Unscored —

    Unspecified vulnerability in the LDAP Software Development Kit (SDK) for C, as used in Sun Java System Directory Server…

  • Unscored —

    Unspecified vulnerability in HP OpenVMS for Integrity Servers 8.2-1 and 8.3 allows local users to cause a denial of ser…

  • Unscored —

    Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 before 7.2(2)8, when using Layer 2 Tun…

  • Unscored —

    Race condition in Cisco Adaptive Security Appliance (ASA) and PIX 7.1 before 7.1(2)49 and 7.2 before 7.2(2)19, when usi…

  • Unscored —

    The Apple Security Update 2007-004 uses an incorrect configuration file for FTPServer in Apple Mac OS X Server 10.4.9, …

  • Unscored —

    The sandbox for vim allows dangerous functions such as (1) writefile, (2) feedkeys, and (3) system, which might allow u…

  • Unscored —

    XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the…

  • Unscored —

    The virtual machine process (VMX) in VMware Workstation before 5.5.4 does not properly read state information when movi…

  • Unscored —

    Directory traversal vulnerability in the Shared Folders feature for VMware Workstation before 5.5.4, when a folder is s…

  • Unscored —

    The memory management in VMware Workstation before 5.5.4 allows attackers to cause a denial of service (Windows virtual…

  • Unscored —

    VMware Workstation before 5.5.4, when running a 64-bit Windows guest on a 64-bit host, allows local users to "corrupt t…

  • Unscored —

    VMware Workstation before 5.5.4 allows attackers to cause a denial of service against the guest OS by causing the virtu…

  • Unscored —

    The MicroWorld Agent service (MWAGENT.EXE) in MicroWorld Technologies eScan 8.0.671.1, and possibly other versions, all…

  • Unscored —
    CVE-2007-2458 Public exploit EPSS 10%

    Multiple PHP remote file inclusion vulnerabilities in Pixaria Gallery before 1.4.3 allow remote attackers to execute ar…

  • Unscored —

    PHP remote file inclusion vulnerability in modules/admin/include/config.php in FireFly 1.1.01 and earlier allows remote…

  • Unscored —
    CVE-2007-2457 Public exploit EPSS 12%

    PHP remote file inclusion vulnerability in resources/includes/class.Smarty.php in Pixaria Gallery before 1.4.3 allows r…

  • Unscored —

    Heap-based buffer overflow in the BMP reader (bmp.c) in Imager perl module (libimager-perl) 0.45 through 0.56 allows re…

  • Unscored —

    Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2…

  • Unscored —

    QEMU 0.8.2 allows local users to crash a virtual machine via the divisor operand to the aam instruction, as demonstrate…

  • Unscored —

    QEMU 0.8.2 allows local users to halt a virtual machine by executing the icebp instruction.

  • Unscored —
    CVE-2007-2456 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in FireFly 1.1.01 allow remote attackers to execute arbitrary PHP co…

  • Unscored —

    Parallels allows local users to cause a denial of service (virtual machine abort) via (1) certain INT instructions, as …

  • Unscored —

    Heap-based buffer overflow in the VGA device in Parallels allows local users, with root access to the guest operating s…

  • Unscored —

    Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, al…

  • Unscored —
    CVE-2007-2434 Public exploit EPSS 14%

    Buffer overflow in asnsp.dll in Aventail Connect 4.1.2.13 allows remote attackers to cause a denial of service (applica…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in index.php in Ariadne 2.4.1 allows remote attackers to inject arbitrary web …