Archive
11 June 2007
Vulnerabilities first published on this day (UTC), newest first.
50 results · Feed
-
Unscored —
Multiple SQL injection vulnerabilities in archives.php in Particle Blogger 1.2.1 and earlier allow remote attackers to …
-
Unscored —
The random number feature in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, (1) does not properly see…
-
Unscored —
The sctp_new function in (1) ip_conntrack_proto_sctp.c and (2) nf_conntrack_proto_sctp.c in Netfilter in Linux kernel 2…
-
Unscored —
SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or …
-
Unscored —
Microsoft Internet Explorer 7, when prompting for HTTP Basic Authentication for an IDN web site, uses ACE labels for th…
-
Unscored —
Buffer overflow in a certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and…
-
Unscored —CVE-2007-3168 Public exploit
A certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions bef…
-
Unscored —
Unspecified vulnerability in Ingate Firewall and SIParator before 4.5.2 allows remote authenticated users without full …
-
Unscored —CVE-2007-3175 EPSS 17%
Multiple SQL injection vulnerabilities in W2B Online Banking allow remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2007-3170 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Uebimiau Webmail allow remote attackers to inject arbitrary web …
-
Unscored —
Directory traversal vulnerability in demo/pop3/error.php in Uebimiau Webmail allows remote attackers to determine the e…
-
Unscored —
Almnzm allows remote attackers to obtain sensitive information via an activateorder request to index.php with an invali…
-
Unscored —
Incomplete blacklist vulnerability in the filemanager in Frederico Caldeira Knabben FCKeditor 2.4.2 allows remote attac…
-
Unscored —
Ingate Firewall and SIParator before 4.5.2 allow remote attackers to bypass SIP authentication via a certain maddr para…
-
Unscored —
Unspecified vulnerability in Walter Zorn wz_tooltip.js (aka wz_tooltips) before 4.01, as used by eGroupWare before 1.2.…
-
Unscored —
c-ares before 1.4.0 uses a predictable seed for the random number generator for the DNS Transaction ID field, which mig…
-
Unscored —
Cross-site scripting (XSS) vulnerability in auth.w2b in W2B Online Banking allows remote attackers to inject arbitrary …
-
Unscored —CVE-2007-3151 Public exploit
rpttop.htm in the web management interface in Packeteer PacketShaper 7.3.0g2 and 7.5.0g1 allows remote attackers to cau…
-
Unscored —CVE-2007-3159 Public exploit
http.c in MiniWeb Http Server 0.8.x allows remote attackers to cause a denial of service (application crash) via a nega…
-
Unscored —CVE-2007-3160 Public exploit
PHP remote file inclusion vulnerability in admin/header.php in PHP Real Estate Classifieds Premium Plus allows remote a…
-
Unscored —CVE-2007-3162 Public exploit
Buffer overflow in the NotSafe function in the idaiehlp ActiveX control in idaiehlp.dll 1.9.1.74 in Internet Download A…
-
Unscored —CVE-2007-3166 Public exploit
Buffer overflow in Qualcomm Eudora 7.1.0.9 allows user-assisted, remote IMAP servers to execute arbitrary code via a lo…
-
Unscored —
The ares_init:randomize_key function in c-ares, on platforms other than Windows, uses a weak facility for producing a r…
-
Unscored —
Multiple SQL injection vulnerabilities in Zindizayn Okul Web Sistemi 1.0 allow remote attackers to execute arbitrary SQ…
-
Unscored —
Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the exit node, which might …
-
Unscored —CVE-2007-3157 Public exploit
IPSecDrv.sys 10.4.0.12 in SafeNET High Assurance Remote 1.4.0 Build 12, and SoftRemote, allows remote attackers to caus…
-
Unscored —CVE-2007-3171 Public exploit
Uebimiau Webmail allows remote attackers to obtain sensitive information via a request to demo/pop3/error.php with an i…
-
Unscored —CVE-2007-3167 Public exploit
Stack-based buffer overflow in the Vivotek Motion Jpeg ActiveX control (aka MjpegControl) in MjpegDecoder.dll 2.0.0.13 …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in pam_login.cgi in Webmin before 1.350 and Usermin before 1.280 al…
-
Unscored —
Unspecified vulnerability in eGroupWare before 1.2.107-2 has unknown impact and attack vectors related to ADOdb. NOTE: …
-
Unscored —CVE-2007-3161 Public exploit
Buffer overflow in Ace-FTP Client 1.24a allows user-assisted, remote FTP servers to execute arbitrary code via a long r…
-
Unscored —CVE-2007-3158 Public exploit
download_script.asp in ASP Folder Gallery allows remote attackers to read arbitrary files via a filename in the file pa…
-
Unscored —
Multiple stack-based buffer overflows in the Zoomify Viewer ActiveX control in ZActiveX.dll might allow remote attacker…
-
Unscored —
Integer underflow in the cpuset_tasks_read function in the Linux kernel before 2.6.20.13, and 2.6.21.x before 2.6.21.4,…
-
Unscored —CVE-2006-3974 Public exploit
Cross-site scripting (XSS) vulnerability in cgi-bin/admin in 3Com OfficeConnect Secure Router with firmware 1.04-168 al…
-
Unscored —
Google Desktop allows user-assisted remote attackers to execute arbitrary programs via a man-in-the-middle attack that …
-
Unscored —CVE-2005-4843 EPSS 11%
The SmartConnect Class control allows remote attackers to cause a denial of service (Internet Explorer crash) by creati…
-
Unscored —CVE-2005-4844 EPSS 12%
The CLSID_ApprenticeICW control allows remote attackers to cause a denial of service (Internet Explorer crash) by creat…
-
Unscored —
The Outlook Progress Ctl control allows remote attackers to cause a denial of service (Internet Explorer crash) by crea…
-
Unscored —
The Java Plug-in 1.4.2_03 and 1.4.2_04 controls, and the 1.4.2_03 and 1.4.2_04 <applet> redirector controls, allow remo…