Skip to content
OpenAdvisories

Archive

4 June 2007

Vulnerabilities first published on this day (UTC), newest first.

← May 2007 2007 / June /4 July 2007 →
  1. 131
  2. 2 
  3. 3 
  4. 424
  5. 510
  6. 658
  7. 722
  8. 813
  9. 9 
  10. 10 
  11. 1150
  12. 1237
  13. 131
  14. 1432
  15. 1515
  16. 16 
  17. 17 
  18. 1810
  19. 1929
  20. 2019
  21. 2136
  22. 2235
  23. 23 
  24. 24 
  25. 259
  26. 2647
  27. 2753
  28. 2819
  29. 2920
  30. 305
All Critical High Medium Low Exploited only Public exploit

24 results · Feed

  • Unscored —
    CVE-2007-1862

    The recall_headers function in mod_mem_cache in Apache 2.2.4 does not properly copy all levels of header data, which ca…

  • Unscored —
    CVE-2007-3007

    PHP 5 before 5.2.3 does not enforce the open_basedir or safe_mode restriction in certain cases, which allows context-de…

  • Unscored —
    CVE-2007-3003 Public exploit

    Multiple SQL injection vulnerabilities in myBloggie 2.1.6 and earlier allow remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2007-3000 Public exploit

    Multiple SQL injection vulnerabilities in PHP JackKnife (PHPJK) allow remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2007-3006 Public exploit

    Buffer overflow in Acoustica MP3 CD Burner 4.32 allows user-assisted remote attackers to execute arbitrary code via a .…

  • Unscored —
    CVE-2007-3002

    PHP JackKnife (PHPJK) allows remote attackers to obtain sensitive information via (1) a request to index.php with an in…

  • Unscored —
    CVE-2007-3009 Public exploit

    Format string vulnerability in the MprLogToFile::logEvent function in Mbedthis AppWeb 2.0.5-4, when the build supports …

  • Unscored —
    CVE-2007-3008

    Mbedthis AppWeb before 2.2.2 enables the HTTP TRACE method, which has unspecified impact probably related to remote inf…

  • Unscored —
    CVE-2007-3001 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in PHP JackKnife (PHPJK) allow remote attackers to inject arbitrary…

  • Unscored —
    CVE-2007-2872 Public exploit

    Multiple integer overflows in the chunk_split function in PHP 5 before 5.2.3 and PHP 4 before 4.4.8 allow remote attack…

  • Unscored —
    CVE-2007-2996

    Unspecified vulnerability in perl.rte 5.8.0.10 through 5.8.0.95 on IBM AIX 5.2, and 5.8.2.10 through 5.8.2.50 on AIX 5.…

  • Unscored —
    CVE-2007-2995

    Unspecified vulnerability in sysmgt.websm.rte in IBM AIX 5.2.0 and 5.3.0 has unknown impact and attack vectors.

  • Unscored —
    CVE-2007-2387

    Apple Xserve Lights-Out Management before Firmware Update 1.0 on Intel hardware does not require a password for remote …

  • Unscored —
    CVE-2007-2999

    Microsoft Windows Server 2003, when time restrictions are in effect for user accounts, generates different error messag…

  • Unscored —
    CVE-2007-2994

    SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2007-2997

    Multiple SQL injection vulnerabilities in cgi-bin/reorder2.asp in SalesCart Shopping Cart allow remote attackers to exe…

  • Unscored —
    CVE-2007-2998

    The Pascal run-time library (PAS$RTL.EXE) before 20070418 on OpenVMS for Integrity Servers 8.3, and PAS$RTL.EXE before …

  • Unscored —
    CVE-2007-1593

    The administrative service in Symantec Veritas Volume Replicator (VVR) for Windows 3.1 through 4.3, and VVR for Unix 3.…

  • Unscored —
    CVE-2007-2279

    The Scheduler Service (VxSchedService.exe) in Symantec Storage Foundation for Windows 5.0 allows remote attackers to by…

  • Unscored —
    CVE-2007-2991 Public exploit

    Cross-site scripting (XSS) vulnerability in includes/send.inc.php in Evenzia CMS allows remote attackers to inject arbi…

  • Unscored —
    CVE-2007-2993

    Multiple cross-site scripting (XSS) vulnerabilities in OmegaMw7.asp in OMEGA (aka Omegasoft) INterneSErvicesLosungen (I…

  • Unscored —
    CVE-2007-2452

    Heap-based buffer overflow in the visit_old_format function in locate/locate.c in locate in GNU findutils before 4.2.31…

    findutils Debian
  • Unscored —
    CVE-2007-2513

    Novell GroupWise 7 before SP2 20070524, and GroupWise 6 before 6.5 post-SP6 20070522, allows remote attackers to obtain…

  • Unscored —
    CVE-2007-2992

    Multiple SQL injection vulnerabilities in OmegaMw7.asp in OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) allow r…