Archive
6 June 2007
Vulnerabilities first published on this day (UTC), newest first.
58 results · Feed
-
Unscored —
Unspecified vulnerability in Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Syman…
-
Unscored —CVE-2007-3096 Public exploit
Directory traversal vulnerability in login.php in PBLang (PBL) 4.67.16.a and earlier, when magic_quotes_gpc is disabled…
-
Unscored —CVE-2007-3098 Public exploit
The SNMPc Server (crserv.exe) process in Castle Rock Computing SNMPc before 7.0.19 allows remote attackers to cause a d…
-
Unscored —
my.activation.php3 in F5 FirePass 4100 SSL VPN allows remote attackers to execute arbitrary shell commands via shell me…
-
Unscored —
Multiple stack-based buffer overflows in the FViewerLoading ActiveX control (FlipViewerX.dll) in E-Book Systems FlipVie…
-
Unscored —
IBM Lotus Domino 7.0.x before 7.0.3 does not revalidate the signature on a signed scheduled agent after the agent is mo…
-
Unscored —
Unspecified vulnerability in the authentication mechanism in Solaris Management Console (SMC) on Sun Solaris 8 through …
-
Unscored —CVE-2007-3092 EPSS 20%
Microsoft Internet Explorer 6 allows remote attackers to spoof the URL bar, and page properties including SSL certifica…
-
Unscored —CVE-2007-3091 EPSS 28%
Race condition in Microsoft Internet Explorer 6 SP1; 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7…
-
Unscored —
Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or…
-
Unscored —
Unspecified vulnerability in the logging mechanism in Solaris Management Console (SMC) on Sun Solaris 8 through 10 befo…
-
Unscored —
Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Assoc…
-
Unscored —CVE-2007-2863 EPSS 23%
Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Assoc…
-
Unscored —
Microsoft Windows Graphics Device Interface (GDI+, GdiPlus.dll) allows context-dependent attackers to cause a denial of…
-
Unscored —
Privacy leak in Dansie Shopping Cart 3.04, and probably earlier versions, sends sensitive information such as user cred…
-
Unscored —CVE-2007-0067 EPSS 14%
Unspecified vulnerability in the Lotus Domino Web Server 6.0, 6.5.x before 6.5.6, and 7.0.x before 7.0.3 allows remote …
-
Unscored —CVE-2007-3076 Public exploit
A certain ActiveX control in sasatl.dll in Zenturi ProgramChecker allows remote attackers to download arbitrary files t…
-
Unscored —CVE-2007-3077 Public exploit
SQL injection vulnerability in listmembers.php in EQdkp 1.3.2 and earlier allows remote attackers to execute arbitrary …
-
Unscored —
Directory traversal vulnerability in Mozilla Firefox 2.0.0.4 and earlier on Mac OS X and Unix allows remote attackers t…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in PBSite allow remote attackers to execute arbitrary PHP code via a…
-
Unscored —
Z-Blog 1.7 stores sensitive information under the web root with insufficient access control, which allows remote attack…
-
Unscored —
Mozilla Firefox 2.0.0.4 and earlier allows remote attackers to read files in the local Firefox installation directory v…
-
Unscored —
Directory traversal vulnerability in Mozilla Firefox before 2.0.0.4 on Windows allows remote attackers to read arbitrar…
-
Unscored —CVE-2007-3075 EPSS 16%
Directory traversal vulnerability in Microsoft Internet Explorer allows remote attackers to read arbitrary files via di…
-
Unscored —CVE-2007-3080 Public exploit
SQL injection vulnerability in haberoku.asp in Hunkaray Okul Portaly 1.1 allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2007-3088 Public exploit
SQL injection vulnerability in index.php in Comicsense allows remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2007-3082 Public exploit
Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to include and …
-
Unscored —
PHP remote file inclusion vulnerability in sampleecommerce.php in Comdev eCommerce 4.1 allows remote attackers to execu…
-
Unscored —
PHP remote file inclusion vulnerability in sampleblogger.php in Comdev Web Blogger 4.1 allows remote attackers to execu…
-
Unscored —
Peercast places a cleartext password in a query string, which might allow attackers to obtain sensitive information by …
-
Unscored —
xscreensaver in Sun Solaris 10 before 20070604, when a GNOME session with Assistive Technology support is running, allo…
-
Unscored —CVE-2007-3071 Public exploit
Buffer overflow in the GetWebStoreURL function in a certain ActiveX control in eSellerateControl365.dll 3.6.5.0 in eSel…
-
Unscored —CVE-2007-3086 Public exploit
Unrestricted critical resource lock in Agnitum Outpost Firewall PRO 4.0 1007.591.145 and earlier allows local users to …
-
Unscored —
listmembers.php in EQdkp 1.3.2c and earlier allows remote attackers to obtain sensitive information via an invalid comp…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Aigaion before 1.3.3 allow remote attackers to inject arbitrary …
-
Unscored —CVE-2007-3070 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in BDigital Web Solutions WebStudio allows remote attackers to in…
-
Unscored —
Multiple buffer overflows in an ActiveX control (boisweb.dll) in Macrovision FLEXnet Connect 6.0 and Update Service 3.x…
-
Unscored —
Stack-based buffer overflow in XferWan.exe as used in multiple products including (1) Symantec Discovery 6.5, (2) Numar…
-
Unscored —
SendCard 3.3.0 allows remote attackers to obtain sensitive information via an invalid sc_language parameter to sendcard…
-
Unscored —CVE-2007-3052 Public exploit
SQL injection vulnerability in index.php in the PNphpBB2 1.2i and earlier module for PostNuke allows remote attackers t…