Skip to content
OpenAdvisories

Archive

10 July 2007

Vulnerabilities first published on this day (UTC), newest first.

48 results · Feed

  • Unscored —
    CVE-2007-0043 EPSS 31%

    The Just In Time (JIT) Compiler service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003…

  • Unscored —
    CVE-2007-0040 EPSS 39%

    The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4, Server 2003 SP1 and SP2, Server 2003…

  • Unscored —
    CVE-2007-0042 Public exploit EPSS 76%

    Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and…

  • Unscored —
    CVE-2007-0041 EPSS 31%

    The PE Loader service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows…

  • Unscored —
    CVE-2007-1754 EPSS 33%

    PUBCONV.DLL in Microsoft Office Publisher 2007 does not properly clear memory when transferring data from disk to memor…

  • Unscored —
    CVE-2007-1756 EPSS 32%

    Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and Office Excel 2007 does not properly validate version inf…

  • Unscored —

    The signal handling in the Linux kernel before 2.6.22, including 2.6.2, when running on PowerPC systems using HTX, allo…

  • Unscored —
    CVE-2007-3028 EPSS 40%

    The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4 does not properly check "the number o…

  • Unscored —
    CVE-2007-3038 EPSS 35%

    The Teredo interface in Microsoft Windows Vista and Vista x64 Edition does not properly handle certain network traffic,…

  • Unscored —
    CVE-2007-3029 EPSS 31%

    Unspecified vulnerability in Microsoft Excel 2002 SP3 and 2003 SP2 allows user-assisted remote attackers to execute arb…

  • Unscored —
    CVE-2007-3030 EPSS 25%

    Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrar…

  • Unscored —

    Multiple unspecified vulnerabilities in NMSDVDXU.DLL in NuMedia NMSDVDX allow remote attackers to cause a denial of ser…

  • Unscored —

    Eltima Software Virtual Serial Port (VSPAX) ActiveX control (VSPort.DLL) allows remote attackers to cause a denial of s…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in ecrire/tools.php in DotClear 1.2.6 allows remote attackers to inject arbitr…

  • Unscored —

    Multiple unspecified vulnerabilities in FileBackup.DLL in Symantec Norton Ghost 12.0 allow remote attackers to cause a …

  • Unscored —
    CVE-2007-3655 Public exploit EPSS 12%

    Stack-based buffer overflow in javaws.exe in Sun Java Web Start in JRE 5.0 Update 11 and earlier, and 6.0 Update 1 and …

  • Unscored —

    Mozilla Firefox 2.0.0.4 allows remote attackers to cause a denial of service by opening multiple tabs in a popup window…

  • Unscored —

    Unspecified vulnerability in the kernel in Microsoft Windows Vista has unspecified remote attack vectors and impact, as…

  • Unscored —

    Multiple unspecified vulnerabilities in Eltima Software RunService ActiveX control (RunService.dll) allow remote attack…

  • Unscored —

    Buffer overflow in the doBrowserAction function in FreeWRL 1.19.3 allows local users to execute arbitrary code via a cr…

  • Unscored —

    Multiple unspecified vulnerabilities in the Innovasys DockStudioXP InnovaDSXP2.OCX ActiveX Control have unspecified att…

  • Unscored —

    Media Player Classic (MPC) 6.4.9.0 allows user-assisted remote attackers to cause a denial of service or possibly execu…

  • Unscored —

    Buffer overflow in RemoteCommand.DLL in Symantec Norton Ghost 12.0 allows remote attackers to execute arbitrary code vi…

  • Unscored —

    Unspecified vulnerability in EXCLEXPT.DLL in ActiveReportsExcelReport allows remote attackers to cause a denial of serv…

  • Unscored —

    The Nonnoi ASP/Barcode ActiveX control (nonnoi_ASPBarcode.dll) allows remote attackers to overwrite arbitrary files via…

  • Unscored —

    Divide-by-zero error in Media Player Classic (MPC) 6.4.9.0 allows user-assisted remote attackers to cause a denial of s…

  • Unscored —

    Mozilla Firefox before 1.8.0.13 and 1.8.1.x before 1.8.1.5 does not perform a security zone check when processing a wyc…

  • Unscored —
    CVE-2007-3670 Public exploit EPSS 29%

    Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Firefox installed and cer…

  • Unscored —

    Unspecified vulnerability in Microsoft Register Server (REGSVR) allows attackers to cause a denial of service via a cra…

  • Unscored —

    Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to e…

  • Unscored —

    SQL injection vulnerability in Webmatic before 2.6.2, and possibly other versions before 2.7, allows remote attackers t…

  • Unscored —

    The isloggedin function in Php/login.inc.php in phpTrafficA 1.4.3 and earlier allows remote attackers to bypass authent…

  • Unscored —
    CVE-2007-3649 Public exploit

    Absolute path traversal vulnerability in a certain ActiveX control in hpqvwocx.dll 2.1.0.556 in Hewlett-Packard (HP) Di…

  • Unscored —
    CVE-2007-3646 Public exploit

    SQL injection vulnerability in index.php in FlashGameScript 1.7 and earlier allows remote attackers to execute arbitrar…

  • Unscored —

    The decode_choice function in net/netfilter/nf_conntrack_h323_asn1.c in the Linux kernel before 2.6.20.15, 2.6.21.x bef…

  • Unscored —

    admin/index.php in AV Arcade 2.1b grants administrative privileges when the ava_userid cookie value is 1, which allows …

  • Unscored —

    Unspecified vulnerability in SAP SAPLPD and SAPSPRINT allows remote attackers to cause a denial of service (application…

  • Unscored —

    Unspecified vulnerability in the G/PGP (GPG) Plugin 2.0 for Squirrelmail 1.4.10a allows remote authenticated users to e…

  • Unscored —

    WordPress before 2.2.2 allows remote attackers to redirect visitors to other websites and potentially obtain sensitive …

  • Unscored —

    Adobe Integrated Runtime (AIR, aka Apollo) allows context-dependent attackers to modify arbitrary files within an execu…