Archive
May 2007
Vulnerabilities first published in this month (UTC), newest first.
570 results · Feed
-
Unscored —
The DHCP relay agent in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 allows remote attackers to cause a denial o…
-
Unscored —
Unspecified vulnerability in Sun Solaris 9, when Solaris Auditing (BSM) is enabled for file read, write, attribute modi…
-
Unscored —
Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.1 before 7.1(2)49 and 7.2 before 7.2(2)1…
-
Unscored —
Heap-based buffer overflow in the Rendezvous / Extensible Messaging and Presence Protocol (XMPP) component (plugins\ren…
-
Unscored —
Unspecified vulnerability in the LDAP Software Development Kit (SDK) for C, as used in Sun Java System Directory Server…
-
Unscored —
Unspecified vulnerability in HP OpenVMS for Integrity Servers 8.2-1 and 8.3 allows local users to cause a denial of ser…
-
Unscored —
Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 before 7.2(2)8, when using Layer 2 Tun…
-
Unscored —
Race condition in Cisco Adaptive Security Appliance (ASA) and PIX 7.1 before 7.1(2)49 and 7.2 before 7.2(2)19, when usi…
-
Unscored —
The Apple Security Update 2007-004 uses an incorrect configuration file for FTPServer in Apple Mac OS X Server 10.4.9, …
-
Unscored —
The sandbox for vim allows dangerous functions such as (1) writefile, (2) feedkeys, and (3) system, which might allow u…
-
Unscored —
XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the…
-
Unscored —
The virtual machine process (VMX) in VMware Workstation before 5.5.4 does not properly read state information when movi…
-
Unscored —
Directory traversal vulnerability in the Shared Folders feature for VMware Workstation before 5.5.4, when a folder is s…
-
Unscored —
The memory management in VMware Workstation before 5.5.4 allows attackers to cause a denial of service (Windows virtual…
-
Unscored —
VMware Workstation before 5.5.4, when running a 64-bit Windows guest on a 64-bit host, allows local users to "corrupt t…
-
Unscored —
VMware Workstation before 5.5.4 allows attackers to cause a denial of service against the guest OS by causing the virtu…
-
Unscored —
The MicroWorld Agent service (MWAGENT.EXE) in MicroWorld Technologies eScan 8.0.671.1, and possibly other versions, all…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Pixaria Gallery before 1.4.3 allow remote attackers to execute ar…
-
Unscored —
PHP remote file inclusion vulnerability in modules/admin/include/config.php in FireFly 1.1.01 and earlier allows remote…
-
Unscored —
PHP remote file inclusion vulnerability in resources/includes/class.Smarty.php in Pixaria Gallery before 1.4.3 allows r…
-
Unscored —
Heap-based buffer overflow in the BMP reader (bmp.c) in Imager perl module (libimager-perl) 0.45 through 0.56 allows re…
-
Unscored —
Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2…
-
Unscored —
QEMU 0.8.2 allows local users to crash a virtual machine via the divisor operand to the aam instruction, as demonstrate…
-
Unscored —
QEMU 0.8.2 allows local users to halt a virtual machine by executing the icebp instruction.
-
Unscored —CVE-2007-2456 Public exploit
Multiple PHP remote file inclusion vulnerabilities in FireFly 1.1.01 allow remote attackers to execute arbitrary PHP co…
-
Unscored —
Parallels allows local users to cause a denial of service (virtual machine abort) via (1) certain INT instructions, as …
-
Unscored —
Heap-based buffer overflow in the VGA device in Parallels allows local users, with root access to the guest operating s…
-
Unscored —
Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, al…
-
Unscored —
Buffer overflow in asnsp.dll in Aventail Connect 4.1.2.13 allows remote attackers to cause a denial of service (applica…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in Ariadne 2.4.1 allows remote attackers to inject arbitrary web …
-
Unscored —
Unspecified vulnerability in query.c in ISC BIND 9.4.0, and 9.5.0a1 through 9.5.0a3, when recursion is enabled, allows …
-
Unscored —CVE-2007-2437 Public exploit
The X render (Xrender) extension in X.org X Window System 7.0, 7.1, and 7.2, with Xserver 1.3.0 and earlier, allows rem…
-
Unscored —
Cross-site scripting (XSS) vulnerability in utilities/search.asp in nukedit 4.9.7b allows remote attackers to inject ar…
-
Unscored —CVE-2007-2423 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in MoinMoin 1.5.7 allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2007-2424 Public exploit
PHP remote file inclusion vulnerability in help/index.php in The Merchant (themerchant) 2.2 allows remote attackers to …
-
Unscored —CVE-2007-2429 Public exploit
ManageEngine PasswordManager Pro (PMP) allows remote attackers to obtain administrative access to a database by injecti…
-
Unscored —CVE-2007-2430 Public exploit
shared/code/tce_tmx.php in TCExam 4.0.011 and earlier allows remote attackers to create arbitrary PHP files in cache/ b…
-
Unscored —
Buffer overflow in Hitachi Groupmax Mobile Option for Mobile-Phone 07-00 through 07-30, 5 for i-mode 05-11 through 05-2…
-
Unscored —CVE-2007-2420 Public exploit
SQL injection vulnerability in bry.asp in Burak Yilmaz Blog 1.0 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2007-2427 Public exploit
SQL injection vulnerability in index.php in the pnFlashGames 1.5 module for PostNuke allows remote attackers to execute…