Skip to content
OpenAdvisories

Archive

24 July 2007

Vulnerabilities first published on this day (UTC), newest first.

17 results · Feed

  • Unscored —

    The IM Server (aka IMserve or IMserver) 2.0.5.30 and probably earlier in Ipswitch Instant Messaging before 2.07 in Ipsw…

  • Unscored —
    CVE-2007-3955 Public exploit

    Buffer overflow in the IEToolbar.IEContextMenu.1 ActiveX control in LinkedInIEToolbar.dll in the LinkedIn Toolbar 3.0.2…

  • Unscored —
    CVE-2007-3956 Public exploit

    TeamSpeak WebServer 2.0 for Windows does not validate parameter value lengths and does not expire TCP sessions, which a…

  • Unscored —
    CVE-2007-3957 Public exploit

    Buffer overflow in Nipun Jain xserver 0.1 alpha allows remote attackers to cause a denial of service via a POST request…

  • Unscored —

    Multiple unspecified vulnerabilities in IBM WebSphere Application Server (WAS) before Fix Pack 21 (6.0.2.21) have unkno…

  • Unscored —
    CVE-2007-3958 Public exploit EPSS 23%

    Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service via a cert…

  • Unscored —

    The OLE2 parsing in Norman Antivirus before 5.91.02 allows remote attackers to cause a denial of service via a crafted …

  • Unscored —

    The OLE2 parsing in Norman Antivirus before 5.91.02 allows remote attackers to bypass the malware detection via a craft…

  • Unscored —

    Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with SeaMonkey installed and c…

  • Unscored —

    Multiple buffer overflows in Norman Antivirus 5.90 allow remote attackers to execute arbitrary code via a crafted (1) A…

  • Unscored —

    The default access control lists (ACL) in ISC BIND 9.4.0, 9.4.1, and 9.5.0a1 through 9.5.0a5 do not set the allow-recur…

  • Unscored —
    CVE-2007-2926 Public exploit EPSS 13%

    ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolv…

  • Unscored —

    mod_access.c in lighttpd 1.4.15 ignores trailing / (slash) characters in the URL, which allows remote attackers to bypa…

  • Unscored —

    connections.c in lighttpd before 1.4.16 might accept more connections than the configured maximum, which allows remote …

  • Unscored —

    lighttpd 1.4.15, when run on 32 bit platforms, allows remote attackers to cause a denial of service (daemon crash) via …

  • Unscored —

    mod_auth (http_auth.c) in lighttpd before 1.4.16 allows remote attackers to cause a denial of service (daemon crash) vi…

  • Unscored —
    CVE-2007-3947 Public exploit

    request.c in lighttpd 1.4.15 allows remote attackers to cause a denial of service (daemon crash) by sending an HTTP req…