Archive
July 2007
Vulnerabilities first published in this month (UTC), newest first.
587 results · Feed
-
Unscored —
The Linux Access Gateway in Novell Access Manager before 3.0 SP1 Release Candidate 1 (RC1) allows remote attackers to b…
-
Unscored —CVE-2007-3569 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Oliver Library Management System allow remote attackers to injec…
-
Unscored —
The _LoadBMP function in imlib 1.9.15 and earlier allows context-dependent attackers to cause a denial of service (infi…
-
Unscored —
The Apache Web Server as used in Novell NetWare 6.5 and GroupWise allows remote attackers to obtain sensitive informati…
-
Unscored —CVE-2007-3011 Public exploit
The DBAsciiAccess CGI Script in the web interface in Fujitsu-Siemens Computers ServerView before 4.50.09 allows remote …
-
Unscored —
The web interface in Fujitsu-Siemens Computers PRIMERGY BX300 Switch Blade allows remote attackers to obtain sensitive …
-
Unscored —
Multiple unspecified vulnerabilities in Esqlanelapse before 2.6 have unknown impact and attack vectors.
-
Unscored —
Cross-site scripting (XSS) vulnerability in infusions/shoutbox_panel/shoutbox_panel.php in PHP-Fusion 6.01.10 and 6.01.…
-
Unscored —CVE-2007-3563 Public exploit
SQL injection vulnerability in includes/view_page.php in AV Arcade 2.1b allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2007-3562 Public exploit
SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary…
-
Unscored —CVE-2007-3558 Public exploit
SQL injection vulnerability in Coppermine Photo Gallery (CPG) before 1.4.11 allows remote attackers to execute arbitrar…
-
Unscored —
Cross-site scripting (XSS) vulnerability in ara.asp in Efendy Blog 1.0 allows remote attackers to inject arbitrary web …
-
Unscored —
SQL injection vulnerability in admin/login.php in Wheatblog (wB) 1.1, when magic_quotes_gpc is disabled, allows remote …
-
Unscored —
Stack-based buffer overflow in the HPSDDX Class (SDD) ActiveX control in sdd.dll in HP Instant Support - Driver Check b…
-
Unscored —CVE-2007-3556 Public exploit
Liesbeth base CMS stores sensitive information under the web root with insufficient access control, which allows remote…
-
Unscored —CVE-2007-3555 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Moodle 1.7.1 allows remote attackers to inject arbitrary web s…
-
Unscored —
Integer overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attacker…
-
Unscored —
The Intel Core 2 Extreme processor X6800 and Core 2 Duo desktop processor E6000 and E4000 incorrectly set the memory pa…
-
Unscored —
Buffer overflow in bbs100 before 3.2 allows remote attackers to cause a denial of service (crash) by attempting to logi…
-
Unscored —CVE-2007-3549 Public exploit
SQL injection vulnerability in view_sub_cat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2007-3553 Public exploit
Cross-site scripting (XSS) vulnerability in Rapid Install Web Server in Oracle Application Server 11i allows remote att…
-
Unscored —CVE-2007-3550 EPSS 28%
Microsoft Internet Explorer 6.0 and 7.0 allows remote attackers to fill Zones with arbitrary domains using certain meta…
-
Unscored —
Integer overflow in the process_envvars function in elf/rtld.c in glibc before 2.5-rc4 might allow local users to execu…
-
Unscored —
Multiple unspecified vulnerabilities in bbs100 before 3.2 allow remote attackers to cause a denial of service (crash) v…
-
Unscored —CVE-2007-3548 Public exploit
Stack-based buffer overflow in W3Filer 2.1.3 allows remote FTP servers to cause a denial of service (application hang o…
-
Unscored —
SQL injection vulnerability in qtg_msg_view.php in QuickTalk guestbook 1.2 allows remote attackers to execute arbitrary…
-
Unscored —
Unrestricted file upload vulnerability in WordPress before 2.2.1 and WordPress MU before 1.2.3 allows remote authentica…
-
Unscored —CVE-2007-3539 Public exploit
Multiple SQL injection vulnerabilities in QuickTicket 1.2 build:20070621 and QuickTalk Forum 1.3 allow remote attackers…
-
Unscored —CVE-2007-3542 Public exploit
Cross-site scripting (XSS) vulnerability in admin/auth.php in Pluxml 0.3.1 allows remote attackers to inject arbitrary …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Windows GUI in Nessus Vulnerability Scanner before 3.0.6 allows remote …
-
Unscored —CVE-2007-3535 Public exploit
Multiple directory traversal vulnerabilities in GL-SH Deaf Forum 6.4.4 and earlier allow remote attackers to include an…
-
Unscored —
Unrestricted file upload vulnerability in (1) wp-app.php and (2) app.php in WordPress 2.2.1 and WordPress MU 1.2.3 allo…
-
Unscored —
Buffer overflow in Warzone 2100 Resurrection before 2.0.7 allows remote attackers to cause a denial of service (applica…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Kurinton sHTTPd 20070408 and earlier allows remote attackers to inject arbi…
-
Unscored —
Multiple buffer overflows in the AMX NetLinx VNC (AmxVnc) ActiveX control in AmxVnc.dll 1.0.13.0 allow remote attackers…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in search.asp in rwAuction Pro 5.0 allow remote attackers to inject…
-
Unscored —CVE-2007-3547 Public exploit
Directory traversal vulnerability in qti_checkname.php in QuickTicket 1.2 allows remote attackers to include and execut…
-
Unscored —
IBM OS/400 (aka i5/OS) V4R2M0 through V5R3M0 on iSeries machines sends responses to TCP SYN-FIN packets, which allows r…
-
Unscored —
The 3Com IntelliJack Switch NJ220 before 2.0.23 allows remote attackers to cause a denial of service (reboot and report…
-
Unscored —CVE-2007-3534 Public exploit
SQL injection vulnerability in login.php in WebChat 0.78 allows remote attackers to execute arbitrary SQL commands via …