Archive
3 July 2007
Vulnerabilities first published on this day (UTC), newest first.
46 results · Feed
-
Unscored —
The Intel Core 2 Extreme processor X6800 and Core 2 Duo desktop processor E6000 and E4000 incorrectly set the memory pa…
-
Unscored —
Buffer overflow in bbs100 before 3.2 allows remote attackers to cause a denial of service (crash) by attempting to logi…
-
Unscored —CVE-2007-3549 Public exploit
SQL injection vulnerability in view_sub_cat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2007-3553 Public exploit
Cross-site scripting (XSS) vulnerability in Rapid Install Web Server in Oracle Application Server 11i allows remote att…
-
Unscored —CVE-2007-3550 EPSS 28%
Microsoft Internet Explorer 6.0 and 7.0 allows remote attackers to fill Zones with arbitrary domains using certain meta…
-
Unscored —
Integer overflow in the process_envvars function in elf/rtld.c in glibc before 2.5-rc4 might allow local users to execu…
-
Unscored —
Multiple unspecified vulnerabilities in bbs100 before 3.2 allow remote attackers to cause a denial of service (crash) v…
-
Unscored —CVE-2007-3548 Public exploit
Stack-based buffer overflow in W3Filer 2.1.3 allows remote FTP servers to cause a denial of service (application hang o…
-
Unscored —
SQL injection vulnerability in qtg_msg_view.php in QuickTalk guestbook 1.2 allows remote attackers to execute arbitrary…
-
Unscored —
Unrestricted file upload vulnerability in WordPress before 2.2.1 and WordPress MU before 1.2.3 allows remote authentica…
-
Unscored —CVE-2007-3539 Public exploit
Multiple SQL injection vulnerabilities in QuickTicket 1.2 build:20070621 and QuickTalk Forum 1.3 allow remote attackers…
-
Unscored —CVE-2007-3542 Public exploit
Cross-site scripting (XSS) vulnerability in admin/auth.php in Pluxml 0.3.1 allows remote attackers to inject arbitrary …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Windows GUI in Nessus Vulnerability Scanner before 3.0.6 allows remote …
-
Unscored —CVE-2007-3535 Public exploit
Multiple directory traversal vulnerabilities in GL-SH Deaf Forum 6.4.4 and earlier allow remote attackers to include an…
-
Unscored —
Unrestricted file upload vulnerability in (1) wp-app.php and (2) app.php in WordPress 2.2.1 and WordPress MU 1.2.3 allo…
-
Unscored —
Buffer overflow in Warzone 2100 Resurrection before 2.0.7 allows remote attackers to cause a denial of service (applica…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Kurinton sHTTPd 20070408 and earlier allows remote attackers to inject arbi…
-
Unscored —
Multiple buffer overflows in the AMX NetLinx VNC (AmxVnc) ActiveX control in AmxVnc.dll 1.0.13.0 allow remote attackers…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in search.asp in rwAuction Pro 5.0 allow remote attackers to inject…
-
Unscored —CVE-2007-3547 Public exploit
Directory traversal vulnerability in qti_checkname.php in QuickTicket 1.2 allows remote attackers to include and execut…
-
Unscored —
IBM OS/400 (aka i5/OS) V4R2M0 through V5R3M0 on iSeries machines sends responses to TCP SYN-FIN packets, which allows r…
-
Unscored —
The 3Com IntelliJack Switch NJ220 before 2.0.23 allows remote attackers to cause a denial of service (reboot and report…
-
Unscored —CVE-2007-3534 Public exploit
SQL injection vulnerability in login.php in WebChat 0.78 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2007-3526 Public exploit
Multiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2007-3519 Public exploit
SQL injection vulnerability in eventdisplay.php in phpEventCalendar 0.2.3 and earlier allows remote attackers to execut…
-
Unscored —CVE-2007-3515 Public exploit
SQL injection vulnerability in view_event.php in TotalCalendar 2.402 and earlier allows remote attackers to execute arb…
-
Unscored —CVE-2007-3518 Public exploit
SQL injection vulnerability in msg.php in HispaH YouTube Clone Script (youtubeclone) allows remote attackers to execute…
-
Unscored —
Integer overflow in Firebird 2.0.0 allows remote authenticated users to cause a denial of service (CPU consumption) via…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote attackers to …
-
Unscored —
Ripe Website Manager 0.8.9 and earlier allows remote attackers to obtain configuration information via a direct request…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in kayit.asp in Gorki Online Santrac Sitesi allow remote attackers …
-
Unscored —CVE-2007-3523 Public exploit
Multiple directory traversal vulnerabilities in Module/Galerie.php in XCMS 1.1 allow remote attackers to include and ex…
-
Unscored —CVE-2007-3520 Public exploit
SQL injection vulnerability in process.php in Easybe 1-2-3 Music Store allows remote attackers to execute arbitrary SQL…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in sPHPell 1.01 allow remote attackers to execute arbitrary PHP code…
-
Unscored —CVE-2007-3530 Public exploit
PHPDirector 0.21 and earlier stores the admin account name and password in config.php, which allows local users to gain…
-
Unscored —CVE-2007-3521 Public exploit
SQL injection vulnerability in ArcadeBuilder Game Portal Manager 1.7 allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2007-3517 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.8.3 allow remote attackers to inject arbitrary web s…
-
Unscored —CVE-2007-3529 Public exploit
videos.php in PHPDirector 0.21 and earlier allows remote attackers to obtain sensitive information via an empty value o…
-
Unscored —
The blowfish mode in DAR before 2.3.4 uses weak Blowfish-CBC cryptography by (1) discarding random bits by the blowfish…
-
Unscored —
The (1) getRule and (2) getChains functions in server/rules.cpp in fireflierd (fireflier-server) in FireFlier 1.1.6 all…