Archive
June 2007
Vulnerabilities first published in this month (UTC), newest first.
575 results · Feed
-
Unscored —
Integer underflow in the cpuset_tasks_read function in the Linux kernel before 2.6.20.13, and 2.6.21.x before 2.6.21.4,…
-
Unscored —CVE-2006-3974 Public exploit
Cross-site scripting (XSS) vulnerability in cgi-bin/admin in 3Com OfficeConnect Secure Router with firmware 1.04-168 al…
-
Unscored —
Google Desktop allows user-assisted remote attackers to execute arbitrary programs via a man-in-the-middle attack that …
-
Unscored —CVE-2005-4843 EPSS 11%
The SmartConnect Class control allows remote attackers to cause a denial of service (Internet Explorer crash) by creati…
-
Unscored —CVE-2005-4844 EPSS 12%
The CLSID_ApprenticeICW control allows remote attackers to cause a denial of service (Internet Explorer crash) by creat…
-
Unscored —
The Outlook Progress Ctl control allows remote attackers to cause a denial of service (Internet Explorer crash) by crea…
-
Unscored —
The Java Plug-in 1.4.2_03 and 1.4.2_04 controls, and the 1.4.2_03 and 1.4.2_04 <applet> redirector controls, allow remo…
-
Unscored —
The System Monitor Source Properties control allows remote attackers to cause a denial of service (Internet Explorer cr…
-
Unscored —
Visual truncation vulnerability in Mozilla 1.7.12 allows remote attackers to spoof the address bar and possibly conduct…
-
Unscored —
Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows…
-
Unscored —
Visual truncation vulnerability in Opera 9.21 allows remote attackers to spoof the address bar and possibly conduct phi…
-
Unscored —
Visual truncation vulnerability in Konqueror 3.5.5 allows remote attackers to spoof the address bar and possibly conduc…
-
Unscored —
Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows…
-
Unscored —
sudo, when linked with MIT Kerberos 5 (krb5), does not properly check whether a user can currently authenticate to Kerb…
-
Unscored —
Visual truncation vulnerability in Galeon 2.0.1 allows remote attackers to spoof the address bar and possibly conduct p…
-
Unscored —
Zen Help Desk 2.1 stores sensitive information under the web root with insufficient access control, which allows remote…
-
Unscored —CVE-2007-3141 Public exploit
PHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 allows remote attackers to execute arb…
-
Unscored —
Buffer overflow in k9filter.exe in BlueCoat K9 Web Protection 3.2.36, and probably other versions before 3.2.44, allows…
-
Unscored —CVE-2007-3138 Public exploit
Directory traversal vulnerability in index.php in Open Solution Quick.Cart 2.2 and earlier allows remote attackers to i…
-
Unscored —CVE-2007-3133 Public exploit
SQL injection vulnerability in urunbak.asp in W1L3D4 WEBmarket 0.1 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2007-3136 Public exploit
PHP remote file inclusion vulnerability in inc/nuke_include.php in newsSync 1.5.0rc6 allows remote attackers to execute…
-
Unscored —CVE-2007-3139 Public exploit
config/general.php in Quick.Cart 2.2 and earlier uses a default username and password, which allows remote attackers to…
-
Unscored —
Multiple vulnerabilities in Symantec Ghost Solution Suite 2.0.0 and earlier, with Ghost 8.0.992 and possibly other vers…
-
Unscored —CVE-2007-3140 Public exploit
SQL injection vulnerability in xmlrpc.php in WordPress 2.2 allows remote authenticated users to execute arbitrary SQL c…
-
Unscored —CVE-2007-3137 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in 4print.asp in WmsCMS 2.0 and earlier allow remote attackers to i…
-
Unscored —
Cross-site scripting (XSS) vulnerability in add_comment.php in Light Blog 4.1 before 20070606 allows remote attackers t…
-
Unscored —
Cross-site scripting (XSS) vulnerability in atomPhotoBlog.php in Atom Photoblog 1.0.9 and earlier allows remote attacke…
-
Unscored —CVE-2007-3130 Public exploit
Multiple PHP remote file inclusion vulnerabilities in the OpenWiki (formerly JD-Wiki) component (com_jd-wiki) 1.0.2, an…
-
Unscored —CVE-2007-3134 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in atomPhotoBlog.php in Atom PhotoBlog 1.0.9 and earlier allow remo…
-
Unscored —
Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an Info…
-
Unscored —
libclamav/others.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 uses insecure permissions for temporary files that a…
-
Unscored —
Buffer overflow in backup/src/vmsbackup.c (aka the backup utility) in FreeVMS before 0.3.6 might allow local users to g…
-
Unscored —
Unspecified vulnerability in libclamav/phishcheck.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1, when running on So…
-
Unscored —CVE-2005-4840 EPSS 12%
The Outlook Express Address Book control, when using Internet Explorer 6, allows remote attackers to cause a denial of …
-
Unscored —
unrar.c in libclamav in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to cause a denial of servi…
-
Unscored —
The parsing engine in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to bypass scanning via a RAR…
-
Unscored —
Buffer overflow in the CCdecode function in contrib/ntsc-cc.c in the zvbi-ntsc-cc tool in Zapping VBI Library (ZVBI) be…
-
Unscored —
unsp.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 does not properly calculate the end of a certain buffer, with un…
-
Unscored —
graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of se…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Andy Frank Beatnik 1.0 extension for Firefox allows remote attackers to…