Skip to content
OpenAdvisories

Archive

26 July 2007

Vulnerabilities first published on this day (UTC), newest first.

← June 2007 2007 / July /26 August 2007 →
  1. 1 
  2. 24
  3. 346
  4. 411
  5. 533
  6. 638
  7. 7 
  8. 8 
  9. 911
  10. 1048
  11. 1139
  12. 1220
  13. 13 
  14. 142
  15. 1544
  16. 166
  17. 1739
  18. 1840
  19. 196
  20. 201
  21. 2122
  22. 22 
  23. 233
  24. 2417
  25. 2538
  26. 2631
  27. 2720
  28. 28 
  29. 29 
  30. 3050
  31. 3118
All Critical High Medium Low Exploited only Public exploit

31 results · Feed

  • Unscored —
    CVE-2007-4004 Public exploit

    Buffer overflow in the ftp client in IBM AIX 5.3 SP6 and 5.2.0 allows local users to execute arbitrary code via unspeci…

  • Unscored —
    CVE-2007-4003 Public exploit

    pioout in IBM AIX 5.3 SP6 allows local users to execute arbitrary code by specifying a malicious library with the -R (P…

  • Unscored —
    CVE-2007-4029

    libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of serv…

    libvorbis libvorbisidec Debian
  • Unscored —
    CVE-2007-3333 Public exploit

    Stack-based buffer overflow in capture in IBM AIX 5.3 SP6 and 5.2.0 allows remote attackers to execute arbitrary code v…

  • Unscored —
    CVE-2007-3106

    lib/info.c in libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a …

    libvorbis libvorbisidec Debian
  • Unscored —
    CVE-2007-4021

    Multiple cross-site scripting (XSS) vulnerabilities in login.php in Brain Book Software Secure 1.0.20070629 and earlier…

  • Unscored —
    CVE-2007-4023

    Cross-site scripting (XSS) vulnerability in the login CGI program in Aruba Mobility Controller 2.5.4.18 and earlier, an…

  • Unscored —
    CVE-2007-4028

    Absolute path traversal vulnerability in index.php in Webspell 4.01.02 allows remote attackers to include and execute a…

  • Unscored —
    CVE-2007-4025

    Unspecified vulnerability in Sun Java System (SJS) Application Server 8.1 through 9.0 before 20070724 on Windows allows…

  • Unscored —
    CVE-2007-4027

    Buffer overflow in cli32 in Areca CLI 1.72.250 and earlier might allow local users to gain privileges via a long argume…

  • Unscored —
    CVE-2007-4024 Public exploit

    Cross-site scripting (XSS) vulnerability in W1L3D4_aramasonuc.asp in W1L3D4 Philboard 0.3 allows remote attackers to in…

  • Unscored —
    CVE-2007-4020

    Multiple cross-site scripting (XSS) vulnerabilities in login.php in AdMan 1.0.20051202 FF 3 patch and earlier allow rem…

  • Unscored —
    CVE-2007-4026

    epesi framework before 0.8.6 does not properly verify file extensions, which allows remote attackers to upload and exec…

  • Unscored —
    CVE-2007-4022 Public exploit

    Cross-site scripting (XSS) vulnerability in frontend/x/htaccess/changepro.html in cPanel 10.9.1 allows remote attackers…

  • Unscored —
    CVE-2007-3566 Public exploit EPSS 66%

    Stack-based buffer overflow in the database service (ibserver.exe) in Borland InterBase 2007 before SP2 allows remote a…

  • Unscored —
    CVE-2007-4013

    Multiple unspecified vulnerabilities in (1) Net6Helper.DLL (aka Net6Launcher Class) 4.5.2 and earlier, (2) npCtxCAO.dll…

  • Unscored —
    CVE-2007-4018

    Citrix Access Gateway Advanced Edition before firmware 4.5.5 allows attackers to redirect users to arbitrary web sites …

  • Unscored —
    CVE-2007-4014

    Cross-site scripting (XSS) vulnerability in a certain index.php installation script related to the (1) Blix 0.9.1, (2) …

  • Unscored —
    CVE-2007-4017

    Cross-site request forgery (CSRF) vulnerability in the web-based administration console in Citrix Access Gateway before…

  • Unscored —
    CVE-2007-4016

    Unspecified vulnerability in the client components in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced …

  • Unscored —
    CVE-2007-0060 EPSS 24%

    Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuin…

  • Unscored —
    CVE-2007-4005 Public exploit EPSS 11%

    Stack-based buffer overflow in Mike Dubman Windows RSH daemon (rshd) 1.7 allows remote attackers to execute arbitrary c…

  • Unscored —
    CVE-2007-4010 Public exploit

    The win32std extension in PHP 5.2.3 does not follow safe_mode and disable_functions restrictions, which allows remote a…

  • Unscored —
    CVE-2007-4006 Public exploit EPSS 34%

    Buffer overflow in Mike Dubman Windows RSH daemon (rshd) 1.7 has unknown impact and remote attack vectors, aka ZD-00000…

  • Unscored —
    CVE-2007-4012

    Cisco 4100 and 4400, Airespace 4000, and Catalyst 6500 and 3750 Wireless LAN Controller (WLC) software 4.1 before 4.1.1…

  • Unscored —
    CVE-2007-4007 Public exploit

    PHP remote file inclusion vulnerability in index.php in Article Directory (Article Site Directory) allows remote attack…

  • Unscored —
    CVE-2007-4009 Public exploit

    PHP remote file inclusion vulnerability in admin/business_inc/saveserver.php in SWSoft Confixx Pro 2.0.12 through 3.3.1…

  • Unscored —
    CVE-2007-4008 Public exploit

    Directory traversal vulnerability in custom.php in Entertainment Media Sharing CMS allows remote attackers to include a…

  • Unscored —
    CVE-2007-4011

    Cisco 4100 and 4400, Airespace 4000, and Catalyst 6500 and 3750 Wireless LAN Controller (WLC) software before 3.2 20070…

  • Unscored —
    CVE-2007-3302 EPSS 11%

    The CallCode ActiveX control in caller.dll 3.0 before 20070713, and 3.0 SP1 before 3.0.5.81, in CA (formerly Computer A…

  • Unscored —
    CVE-2007-3875

    arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote at…