Skip to content
OpenAdvisories

Archive

28 June 2007

Vulnerabilities first published on this day (UTC), newest first.

19 results · Feed

  • Medium 6.1

    Cross-site scripting (XSS) vulnerability in search.php in Google Custom Search Engine allows remote attackers to inject…

  • Unscored —

    Research in Motion BlackBerry Enterprise Server 4.0 through 4.1 has a default configuration that permits installation o…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Yandex.Server allow remote attackers to inject arbitrary web scr…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in AltaVista search engine allows remote attackers to inject arbitrary web scr…

  • Unscored —

    The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause…

  • Unscored —

    Multiple unspecified vulnerabilities in the GIF reader in the GD Graphics Library (libgd) before 2.0.35 have unspecifie…

  • Unscored —

    PCSoft WinDEV 11 (01F110053p) allows user-assisted remote attackers to cause a denial of service (infinite loop and res…

  • Unscored —
    CVE-2007-3481 EPSS 16%

    Cross-domain vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to bypass the Same Origin Pol…

  • Unscored —
    CVE-2007-3479 Public exploit

    Stack-based buffer overflow in PCSoft WinDEV 11 (01F110053p) allows user-assisted remote attackers to execute arbitrary…

  • Unscored —
    CVE-2007-3473 Public exploit EPSS 13%

    The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to…

  • Unscored —

    Race condition in gdImageStringFTEx (gdft_draw_bitmap) in gdft.c in the GD Graphics Library (libgd) before 2.0.35 allow…

  • Unscored —

    The GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash…

  • Unscored —

    Integer overflow in gdImageCreateTrueColor function in the GD Graphics Library (libgd) before 2.0.35 allows user-assist…

  • Unscored —

    Unspecified vulnerability in the TCP Loopback/Fusion implementation in Sun Solaris 10 allows local users to cause a den…

  • Unscored —

    Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers…

  • Unscored —

    Multiple unspecified vulnerabilities in the KSSL kernel module in Sun Solaris 10, when configured with the KSSL proxy, …

  • Unscored —

    Buffer overflow in the dtsession Common Desktop Environment (CDE) Session Manager in Sun Solaris 8, 9, and 10 allows lo…

  • Unscored —

    Cross-domain vulnerability in Apple Safari for Windows 3.0.1 allows remote attackers to bypass the "same origin policy"…

  • Unscored —

    index.php in eTicket 1.5.5.1 and earlier allows remote attackers to obtain sensitive information via the (1) name[], (2…