Archive
July 2007
Vulnerabilities first published in this month (UTC), newest first.
587 results · Feed
-
Unscored —
Guidance Software EnCase allows user-assisted attackers to trigger a buffer over-read and application crash via a malfo…
-
Critical 9.8
Argument injection vulnerability involving Mozilla, when certain URIs are registered, allows remote attackers to conduc…
-
Unscored —
The CUPS service, as used in SUSE Linux before 20070720 and other Linux distributions, allows remote attackers to cause…
-
Unscored —CVE-2007-4032 Public exploit
Buffer overflow in CrystalPlayer Pro 1.98 allows user-assisted remote attackers to execute arbitrary code via a long st…
-
Unscored —
NVIDIA drivers (nvidia-drivers) before 1.0.7185, 1.0.9639, and 100.14.11, as used in Gentoo Linux and possibly other di…
-
Unscored —
The Access Control functionality (JMXOpsAccessControlFilter) in JMX Console in JBoss Application Server 4.0.2 and 4.0.5…
-
Unscored —
Stack-based buffer overflow in the random number generator (RNG) implementation in the Linux kernel before 2.6.22 might…
-
Unscored —
Buffer overflow in the wpa_printf function in the debugging code in wpa_supplicant in the Fedora NetworkManager package…
-
Unscored —CVE-2007-4004 Public exploit
Buffer overflow in the ftp client in IBM AIX 5.3 SP6 and 5.2.0 allows local users to execute arbitrary code via unspeci…
-
Unscored —CVE-2007-4003 Public exploit
pioout in IBM AIX 5.3 SP6 allows local users to execute arbitrary code by specifying a malicious library with the -R (P…
-
Unscored —
libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of serv…
-
Unscored —CVE-2007-3333 Public exploit
Stack-based buffer overflow in capture in IBM AIX 5.3 SP6 and 5.2.0 allows remote attackers to execute arbitrary code v…
-
Unscored —
lib/info.c in libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in login.php in Brain Book Software Secure 1.0.20070629 and earlier…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the login CGI program in Aruba Mobility Controller 2.5.4.18 and earlier, an…
-
Unscored —
Absolute path traversal vulnerability in index.php in Webspell 4.01.02 allows remote attackers to include and execute a…
-
Unscored —
Unspecified vulnerability in Sun Java System (SJS) Application Server 8.1 through 9.0 before 20070724 on Windows allows…
-
Unscored —
Buffer overflow in cli32 in Areca CLI 1.72.250 and earlier might allow local users to gain privileges via a long argume…
-
Unscored —CVE-2007-4024 Public exploit
Cross-site scripting (XSS) vulnerability in W1L3D4_aramasonuc.asp in W1L3D4 Philboard 0.3 allows remote attackers to in…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in login.php in AdMan 1.0.20051202 FF 3 patch and earlier allow rem…
-
Unscored —
epesi framework before 0.8.6 does not properly verify file extensions, which allows remote attackers to upload and exec…
-
Unscored —CVE-2007-4022 Public exploit
Cross-site scripting (XSS) vulnerability in frontend/x/htaccess/changepro.html in cPanel 10.9.1 allows remote attackers…
-
Unscored —
Stack-based buffer overflow in the database service (ibserver.exe) in Borland InterBase 2007 before SP2 allows remote a…
-
Unscored —
Multiple unspecified vulnerabilities in (1) Net6Helper.DLL (aka Net6Launcher Class) 4.5.2 and earlier, (2) npCtxCAO.dll…
-
Unscored —
Citrix Access Gateway Advanced Edition before firmware 4.5.5 allows attackers to redirect users to arbitrary web sites …
-
Unscored —
Cross-site scripting (XSS) vulnerability in a certain index.php installation script related to the (1) Blix 0.9.1, (2) …
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the web-based administration console in Citrix Access Gateway before…
-
Unscored —
Unspecified vulnerability in the client components in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced …
-
Unscored —CVE-2007-0060 EPSS 24%
Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuin…
-
Unscored —
Stack-based buffer overflow in Mike Dubman Windows RSH daemon (rshd) 1.7 allows remote attackers to execute arbitrary c…
-
Unscored —CVE-2007-4010 Public exploit
The win32std extension in PHP 5.2.3 does not follow safe_mode and disable_functions restrictions, which allows remote a…
-
Unscored —
Buffer overflow in Mike Dubman Windows RSH daemon (rshd) 1.7 has unknown impact and remote attack vectors, aka ZD-00000…
-
Unscored —
Cisco 4100 and 4400, Airespace 4000, and Catalyst 6500 and 3750 Wireless LAN Controller (WLC) software 4.1 before 4.1.1…
-
Unscored —CVE-2007-4007 Public exploit
PHP remote file inclusion vulnerability in index.php in Article Directory (Article Site Directory) allows remote attack…
-
Unscored —CVE-2007-4009 Public exploit
PHP remote file inclusion vulnerability in admin/business_inc/saveserver.php in SWSoft Confixx Pro 2.0.12 through 3.3.1…
-
Unscored —CVE-2007-4008 Public exploit
Directory traversal vulnerability in custom.php in Entertainment Media Sharing CMS allows remote attackers to include a…
-
Unscored —
Cisco 4100 and 4400, Airespace 4000, and Catalyst 6500 and 3750 Wireless LAN Controller (WLC) software before 3.2 20070…
-
Unscored —CVE-2007-3302 EPSS 11%
The CallCode ActiveX control in caller.dll 3.0 before 20070713, and 3.0 SP1 before 3.0.5.81, in CA (formerly Computer A…
-
Unscored —
arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote at…
-
Unscored —
Directory traversal vulnerability in file.cgi in Secure Computing SecurityReporter (aka Network Security Analyzer) 4.6.…