Skip to content
OpenAdvisories

Archive

29 June 2007

Vulnerabilities first published on this day (UTC), newest first.

← May 2007 2007 / June /29 July 2007 →
  1. 131
  2. 2 
  3. 3 
  4. 424
  5. 510
  6. 658
  7. 722
  8. 813
  9. 9 
  10. 10 
  11. 1150
  12. 1237
  13. 131
  14. 1432
  15. 1515
  16. 16 
  17. 17 
  18. 1810
  19. 1929
  20. 2019
  21. 2136
  22. 2235
  23. 23 
  24. 24 
  25. 259
  26. 2647
  27. 2753
  28. 2819
  29. 2920
  30. 305
All Critical High Medium Low Exploited only Public exploit

20 results · Feed

  • Unscored —
    CVE-2006-7214

    Multiple unspecified vulnerabilities in Firebird 1.5 allow remote attackers to (1) cause a denial of service (applicati…

  • Unscored —
    CVE-2006-7213

    Firebird 1.5 allows remote authenticated users without SYSDBA and owner permissions to overwrite a database by creating…

  • Unscored —
    CVE-2006-7211

    fb_lock_mgr in Firebird 1.5 uses weak permissions (0666) for the semaphore array, which allows local users to cause a d…

  • Unscored —
    CVE-2006-7212

    Multiple buffer overflows in Firebird 1.5, one of which affects WNET, have unknown impact and attack vectors. NOTE: thi…

  • Unscored —
    CVE-2005-4848

    Buffer overflow in the decompression algorithm in Research in Motion BlackBerry Enterprise Server 4.0 SP1 and earlier b…

  • Unscored —
    CVE-2007-3487 Public exploit

    Absolute path traversal in a certain ActiveX control in hpqxml.dll 2.0.0.133 in Hewlett-Packard (HP) Photo Digital Imag…

  • Unscored —
    CVE-2007-3496

    Cross-site scripting (XSS) vulnerability in SAP Web Dynpro Java (BC-WD-JAV) in SAP NetWeaver Nw04 SP15 through SP19 and…

  • Unscored —
    CVE-2007-3489

    Cross-site request forgery (CSRF) vulnerability in pop/WizU.html in the management interface in Check Point VPN-1 Edge …

  • Unscored —
    CVE-2007-3490 Public exploit EPSS 37%

    Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown impact via unspecified…

  • Unscored —
    CVE-2007-3497

    Microsoft Internet Explorer 7 allows remote attackers to determine the existence of page history via the history.length…

  • Unscored —
    CVE-2007-3492 Public exploit

    Conti FtpServer 1.0 allows remote authenticated users to cause a denial of service (daemon crash) via a certain string …

  • Unscored —
    CVE-2007-3491

    Buffer overflow in _mprosrv in Progress Software OpenEdge before 9.1E0422, and 10.x before 10.1B01, allows remote attac…

  • Unscored —
    CVE-2007-3499

    SlackRoll before 8 accepts gpg exit codes other than 0 and 1 as evidence of a valid signature, which allows remote Slac…

  • Unscored —
    CVE-2007-3500

    Xeweb XEForum allows remote attackers to gain privileges via a modified xeforum cookie.

  • Unscored —
    CVE-2007-3378

    The (1) session_save_path, (2) ini_set, and (3) error_log functions in PHP 4.4.7 and earlier, and PHP 5 5.2.3 and earli…

  • Unscored —
    CVE-2007-3494

    Papoo CMS 3.6, and possibly earlier, does not verify user privileges when accessing the backend administration plugins,…

  • Unscored —
    CVE-2007-3488 Public exploit EPSS 16%

    Heap-based buffer overflow in the viewer ActiveX control in Sony Network Camera SNC-RZ25N before 1.30; SNC-P1 and SNC-P…

  • Unscored —
    CVE-2007-3493 Public exploit EPSS 31%

    A certain ActiveX control in NCTWavChunksEditor2.dll 2.6.1.148 in NCTAudioStudio (NCTAudioStudio2) 2.7, as used by Sien…

  • Medium 6.1
    CVE-2007-3498

    HTML Purifier Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in smoketests/configForm.php in HTML Purifier before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "unescaped print_r output."

    ezyang/htmlpurifier Packagist
  • Unscored —
    CVE-2007-3495

    Multiple cross-site scripting (XSS) vulnerabilities in the SAP Internet Communication Framework (BC-MID-ICF) in the SAP…