Archive
June 2007
Vulnerabilities first published in this month (UTC), newest first.
575 results · Feed
-
Unscored —
Directory traversal vulnerability in the PersistenceService in Sun Java Web Start in JDK and JRE 5.0 Update 11 and earl…
-
Unscored —
Cross-site scripting (XSS) vulnerability in CMD_USER_STATS in DirectAdmin 1.30.1 and earlier allows remote attackers to…
-
Unscored —
The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML documentation pages that contain cross-site scrip…
-
Unscored —
Unspecified vulnerability in the web-based product configuration system in Kaspersky Anti-Spam before 3.0 MP1 allows re…
-
Unscored —CVE-2007-2801 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in open.php in eTicket 1.5.5 and 1.5.5.1, when register_globals is …
-
Unscored —
Multiple unspecified vulnerabilities in Firebird 1.5 allow remote attackers to (1) cause a denial of service (applicati…
-
Unscored —
Firebird 1.5 allows remote authenticated users without SYSDBA and owner permissions to overwrite a database by creating…
-
Unscored —
fb_lock_mgr in Firebird 1.5 uses weak permissions (0666) for the semaphore array, which allows local users to cause a d…
-
Unscored —
Multiple buffer overflows in Firebird 1.5, one of which affects WNET, have unknown impact and attack vectors. NOTE: thi…
-
Unscored —
Buffer overflow in the decompression algorithm in Research in Motion BlackBerry Enterprise Server 4.0 SP1 and earlier b…
-
Unscored —CVE-2007-3487 Public exploit
Absolute path traversal in a certain ActiveX control in hpqxml.dll 2.0.0.133 in Hewlett-Packard (HP) Photo Digital Imag…
-
Unscored —
Cross-site scripting (XSS) vulnerability in SAP Web Dynpro Java (BC-WD-JAV) in SAP NetWeaver Nw04 SP15 through SP19 and…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in pop/WizU.html in the management interface in Check Point VPN-1 Edge …
-
Unscored —
Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown impact via unspecified…
-
Unscored —
Microsoft Internet Explorer 7 allows remote attackers to determine the existence of page history via the history.length…
-
Unscored —CVE-2007-3492 Public exploit
Conti FtpServer 1.0 allows remote authenticated users to cause a denial of service (daemon crash) via a certain string …
-
Unscored —
Buffer overflow in _mprosrv in Progress Software OpenEdge before 9.1E0422, and 10.x before 10.1B01, allows remote attac…
-
Unscored —
SlackRoll before 8 accepts gpg exit codes other than 0 and 1 as evidence of a valid signature, which allows remote Slac…
-
Unscored —
Xeweb XEForum allows remote attackers to gain privileges via a modified xeforum cookie.
-
Unscored —
The (1) session_save_path, (2) ini_set, and (3) error_log functions in PHP 4.4.7 and earlier, and PHP 5 5.2.3 and earli…
-
Unscored —
Papoo CMS 3.6, and possibly earlier, does not verify user privileges when accessing the backend administration plugins,…
-
Unscored —
Heap-based buffer overflow in the viewer ActiveX control in Sony Network Camera SNC-RZ25N before 1.30; SNC-P1 and SNC-P…
-
Unscored —
A certain ActiveX control in NCTWavChunksEditor2.dll 2.6.1.148 in NCTAudioStudio (NCTAudioStudio2) 2.7, as used by Sien…
-
Medium 6.1
HTML Purifier Cross-site Scripting vulnerability
Cross-site scripting (XSS) vulnerability in smoketests/configForm.php in HTML Purifier before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "unescaped print_r output."
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the SAP Internet Communication Framework (BC-MID-ICF) in the SAP…
-
Medium 6.1
Cross-site scripting (XSS) vulnerability in search.php in Google Custom Search Engine allows remote attackers to inject…
-
Unscored —
Research in Motion BlackBerry Enterprise Server 4.0 through 4.1 has a default configuration that permits installation o…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Yandex.Server allow remote attackers to inject arbitrary web scr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in AltaVista search engine allows remote attackers to inject arbitrary web scr…
-
Unscored —
The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause…
-
Unscored —
Multiple unspecified vulnerabilities in the GIF reader in the GD Graphics Library (libgd) before 2.0.35 have unspecifie…
-
Unscored —
PCSoft WinDEV 11 (01F110053p) allows user-assisted remote attackers to cause a denial of service (infinite loop and res…
-
Unscored —CVE-2007-3481 EPSS 16%
Cross-domain vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to bypass the Same Origin Pol…
-
Unscored —CVE-2007-3479 Public exploit
Stack-based buffer overflow in PCSoft WinDEV 11 (01F110053p) allows user-assisted remote attackers to execute arbitrary…
-
Unscored —
The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to…
-
Unscored —
Race condition in gdImageStringFTEx (gdft_draw_bitmap) in gdft.c in the GD Graphics Library (libgd) before 2.0.35 allow…
-
Unscored —
The GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash…
-
Unscored —
Integer overflow in gdImageCreateTrueColor function in the GD Graphics Library (libgd) before 2.0.35 allows user-assist…
-
Unscored —
Unspecified vulnerability in the TCP Loopback/Fusion implementation in Sun Solaris 10 allows local users to cause a den…
-
Unscored —
Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers…