Archive
27 June 2007
Vulnerabilities first published on this day (UTC), newest first.
53 results · Feed
-
Unscored —
Integer overflow in the __status_Update function in stats.c VideoLAN VLC Media Player before 0.8.6c allows remote attac…
-
Unscored —
input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service (crash) via a c…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in Check Point SofaWare Safe@Office, with firmware before Embedded NGX …
-
Unscored —CVE-2007-3461 Public exploit
SQL injection vulnerability in property.php in elkagroup Image Gallery 1.0 allows remote attackers to execute arbitrary…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in Xythos Enterprise Document Manager (XEDM) before 5.0.25.8…
-
Unscored —CVE-2007-3460 Public exploit
Multiple PHP remote file inclusion vulnerabilities in index.php3 in EVA-Web 1.1 through 2.2 allow remote attackers to e…
-
Unscored —
Xythos Enterprise Document Manager (XEDM), Digital Locker (XDL), and possibly WebFile Server before 6.0.46.1 allow remo…
-
Unscored —
Microsoft Windows XP SP2 allows local users, who have sessions created by another user's RunAs (run as) command, to kil…
-
Unscored —
Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, has a certain default password.
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Xythos Enterprise Document Manager (XEDM) before 5.0.25.8, and 6…
-
Unscored —CVE-2007-3459 Public exploit
A certain ActiveX control in Avaxswf.dll 1.0.0.1 in Civitech Avax Vector 1.3 allows remote attackers to create or overw…
-
Unscored —
Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, does not require entry of the old passwo…
-
Unscored —
Microsoft Windows 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (cpu consumption) via …
-
Unscored —CVE-2006-5752 EPSS 28%
Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when E…
-
Unscored —CVE-2007-1863 EPSS 12%
cache_util.c in the mod_cache module in Apache HTTP Server (httpd), when caching is enabled and a threaded Multi-Proces…
-
Unscored —
libdayzero.dll in the Filter Hub Service (filter-hub.exe) in Symantec Mail Security for SMTP before 5.0.1 Patch 181 and…
-
Unscored —
calendar.php in Calendarix 0.7.20070307 allows remote attackers to obtain sensitive information via large values to the…
-
Unscored —
The libsldap library in Sun Solaris 8, 9, and 10 allows local users to cause a denial of service (Name Service Caching …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in phpTrafficA before 1.2beta2 allow remote attackers to inject arb…
-
Unscored —
Memory leak in the image message functionality in ekg before 1:1.7~rc2-1etch1 on Debian GNU/Linux Etch allows remote at…
-
Unscored —
Memory leak in the token OCR functionality in ekg before 1:1.7~rc2-1etch1 on Debian GNU/Linux Etch allows remote attack…
-
Unscored —
ekg before 1:1.7~rc2-1etch1 on Debian GNU/Linux Etch allows remote attackers to cause a denial of service (NULL pointer…
-
Unscored —
Multiple unspecified vulnerabilities in phpTrafficA before 1.4.2 allow remote attackers to have an unknown impact via t…
-
Unscored —CVE-2007-3449 Public exploit
SQL injection vulnerability in member.php in 6ALBlog allows remote attackers to execute arbitrary SQL commands via the …
-
Unscored —
The Research in Motion BlackBerry 7270 before 4.0 SP1 Bundle 108 does not properly manage transaction states, which all…
-
Unscored —
PHP remote file inclusion vulnerability in cal.func.php in Valerio Capello Dagger - The Cutting Edge r23jan2007 allows …
-
Unscored —CVE-2007-3426 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to injec…
-
Unscored —
The Snom 320 SIP Phone, running snom320 linux 3.25, snom320-SIP 6.2.3, and snom320 jffs23.36, allows remote attackers t…
-
Unscored —CVE-2007-3430 Public exploit
SQL injection vulnerability in index.php in Simple Invoices 2007 05 25 allows remote attackers to execute arbitrary SQL…
-
Unscored —
SQL injection vulnerability in Papoo 3.6, and possibly earlier, allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2007-3446 Public exploit
BugMall Shopping Cart 2.5 and earlier has a default username "demo" and password "demo," which allows remote attackers …
-
Unscored —CVE-2007-3450 Public exploit
SQL injection vulnerability in member.php in 6ALBlog allows remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2007-3427 Public exploit
SQL injection vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to execute arbitrary …
-
Unscored —
Stack-based buffer overflow in CGIOCommon.dll before 8.0.0.1042 in Trend Micro OfficeScan Corporate Edition 8.0 allows …
-
Unscored —
Buffer overflow in the SIP header parsing module in the Nortel PC Client SIP Soft Phone 4.1 3.5.208[20051015] allows re…
-
Unscored —
The Research in Motion BlackBerry 7270 with 4.0 SP1 Bundle 83 allows remote attackers to cause a denial of service (blo…
-
Unscored —
Format string vulnerability on the Research in Motion BlackBerry 7270 before 4.0 SP1 Bundle 108 allows remote attackers…
-
Unscored —
AOL Instant Messenger (AIM) 6.1.32.1 on Windows XP allows remote attackers to cause a denial of service (application cr…
-
Unscored —CVE-2007-3433 Public exploit
SQL injection vulnerability in index.php in Pharmacy System 2 and earlier allows remote attackers to execute arbitrary …
-
Unscored —CVE-2007-3434 Public exploit
index.php in Pharmacy System 2 and earlier allows remote attackers to obtain sensitive information via a ' (quote) char…