Skip to content
OpenAdvisories

Archive

27 July 2007

Vulnerabilities first published on this day (UTC), newest first.

20 results · Feed

  • Unscored —
    CVE-2007-4033 Public exploit EPSS 19%

    Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent a…

  • Unscored —

    Guidance Software EnCase does not properly handle (1) certain malformed MBR partition tables with many entries, which a…

  • Unscored —
    CVE-2007-4041 EPSS 20%

    Multiple argument injection vulnerabilities in Mozilla Firefox 2.0.0.5 and 3.0alpha allow remote attackers to execute a…

  • Unscored —
    CVE-2007-4034 Public exploit EPSS 13%

    Stack-based buffer overflow in the YDPCTL.YDPControl.1 (aka Yahoo! Installer Plugin for Widgets) ActiveX control before…

  • Unscored —
    CVE-2007-4031 Public exploit

    Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote atta…

  • Unscored —

    Argument injection vulnerability in Mozilla Firefox before 2.0.0.5, when running on systems with Thunderbird 1.5 instal…

  • High 8.8
    CVE-2007-4040 EPSS 13%

    Argument injection vulnerability involving Microsoft Outlook and Outlook Express, when certain URIs are registered, all…

  • Unscored —
    CVE-2007-4042 EPSS 10%

    Multiple argument injection vulnerabilities in Netscape Navigator 9 allow remote attackers to execute arbitrary command…

  • Critical 9.8

    file.cgi in Secure Computing SecurityReporter (aka Network Security Analyzer) before 4.6.3 allows remote attackers to b…

  • Unscored —
    CVE-2007-4046 Public exploit

    SQL injection vulnerability in index.php in the Pony Gallery (com_ponygallery) 1.5 and earlier component for Joomla! al…

  • Unscored —

    Guidance Software EnCase allows user-assisted remote attackers to cause a denial of service via (1) a corrupted Microso…

  • Unscored —
    CVE-2007-4047 Public exploit

    geoBlog (aka BitDamaged) 1 does not require authentication for (1) deletecomment.php, (2) deleteblog.php, and (3) listc…

  • Unscored —

    Guidance Software EnCase allows user-assisted attackers to trigger a buffer over-read and application crash via a malfo…

  • Critical 9.8

    Argument injection vulnerability involving Mozilla, when certain URIs are registered, allows remote attackers to conduc…

  • Unscored —

    The CUPS service, as used in SUSE Linux before 20070720 and other Linux distributions, allows remote attackers to cause…

  • Unscored —
    CVE-2007-4032 Public exploit

    Buffer overflow in CrystalPlayer Pro 1.98 allows user-assisted remote attackers to execute arbitrary code via a long st…

  • Unscored —

    NVIDIA drivers (nvidia-drivers) before 1.0.7185, 1.0.9639, and 100.14.11, as used in Gentoo Linux and possibly other di…

  • Unscored —

    The Access Control functionality (JMXOpsAccessControlFilter) in JMX Console in JBoss Application Server 4.0.2 and 4.0.5…

  • Unscored —

    Stack-based buffer overflow in the random number generator (RNG) implementation in the Linux kernel before 2.6.22 might…

  • Unscored —

    Buffer overflow in the wpa_printf function in the debugging code in wpa_supplicant in the Fedora NetworkManager package…