Archive
July 2007
Vulnerabilities first published in this month (UTC), newest first.
587 results · Feed
-
Unscored —CVE-2007-3957 Public exploit
Buffer overflow in Nipun Jain xserver 0.1 alpha allows remote attackers to cause a denial of service via a POST request…
-
Unscored —
Multiple unspecified vulnerabilities in IBM WebSphere Application Server (WAS) before Fix Pack 21 (6.0.2.21) have unkno…
-
Unscored —
Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service via a cert…
-
Unscored —
The OLE2 parsing in Norman Antivirus before 5.91.02 allows remote attackers to cause a denial of service via a crafted …
-
Unscored —
The OLE2 parsing in Norman Antivirus before 5.91.02 allows remote attackers to bypass the malware detection via a craft…
-
Unscored —
Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with SeaMonkey installed and c…
-
Unscored —
Multiple buffer overflows in Norman Antivirus 5.90 allow remote attackers to execute arbitrary code via a crafted (1) A…
-
Unscored —
The default access control lists (ACL) in ISC BIND 9.4.0, 9.4.1, and 9.5.0a1 through 9.5.0a5 do not set the allow-recur…
-
Unscored —
ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolv…
-
Unscored —
mod_access.c in lighttpd 1.4.15 ignores trailing / (slash) characters in the URL, which allows remote attackers to bypa…
-
Unscored —
connections.c in lighttpd before 1.4.16 might accept more connections than the configured maximum, which allows remote …
-
Unscored —
lighttpd 1.4.15, when run on 32 bit platforms, allows remote attackers to cause a denial of service (daemon crash) via …
-
Unscored —
mod_auth (http_auth.c) in lighttpd before 1.4.16 allows remote attackers to cause a denial of service (daemon crash) vi…
-
Unscored —CVE-2007-3947 Public exploit
request.c in lighttpd 1.4.15 allows remote attackers to cause a denial of service (daemon crash) by sending an HTTP req…
-
Unscored —
Rule Set Based Access Control (RSBAC) before 1.3.5 does not properly use the Linux Kernel Crypto API for the Linux kern…
-
Unscored —
Multiple heap-based buffer overflows in the Perl Compatible Regular Expressions (PCRE) library in the JavaScript engine…
-
Unscored —
Centennial Discovery 2006 Feature Pack 1, which is used by (1) Numara Asset Manager 8.0 and (2) Symantec Discovery 6.5,…
-
Unscored —
Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.1.3 allows remote attackers to include …
-
Unscored —CVE-2007-3939 Public exploit
SQL injection vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) CMS 3.4 and earli…
-
Unscored —
Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users to execute arbitrary code via a…
-
Unscored —
Use-after-free vulnerability in the BitTorrent support in Opera before 9.22 allows user-assisted remote attackers to ex…
-
Unscored —CVE-2007-3937 Public exploit
Multiple SQL injection vulnerabilities in A-shop 0.70 and earlier allow remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2007-3935 Public exploit
PHP remote file inclusion vulnerability in link_main.php in the SupaNav 1.0.0 module for phpBB allows remote attackers …
-
Unscored —
Unspecified vulnerability in the Java Runtime Environment (JRE) Applet Class Loader in Sun JDK and JRE 5.0 Update 11 an…
-
Unscored —CVE-2007-3930 EPSS 19%
Interpretation conflict between Microsoft Internet Explorer and DocuWiki before 2007-06-26b allows remote attackers to …
-
Unscored —CVE-2007-3924 EPSS 14%
Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Netscape installed and ce…
-
Unscored —CVE-2007-3932 Public exploit
uploadimg.php in the Expose RC35 and earlier (com_expose) component for Joomla! sends an error message but does not exi…
-
Unscored —
Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote a…
-
Unscored —
SQL injection vulnerability in Infinite Responder before 1.48 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —
Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers to execute arbitrary …
-
Unscored —
Ipswitch IMail Server 2006 before 2006.21 allows remote attackers to cause a denial of service (daemon crash) via unspe…
-
Unscored —
Cross-site scripting (XSS) vulnerability in profile.php in Jasmine CMS 1.0_1 allows remote authenticated users to injec…
-
Unscored —
Cross-site scripting (XSS) vulnerability in default.asp in QuickerSite 1.7.2 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2007-3934 Public exploit
PHP remote file inclusion vulnerability in postscript/postscript.php in BBS E-Market allows remote attackers to execute…
-
Unscored —CVE-2007-3936 Public exploit
Directory traversal vulnerability in admin/filebrowser.asp in A-shop 0.70 and earlier, and possibly 0.71, allows remote…
-
Unscored —
The Common Internet File System (CIFS) optimization in Cisco Wide Area Application Services (WAAS) 4.0.7 and 4.0.9, as …
-
Unscored —CVE-2007-3933 Public exploit
SQL injection vulnerability in insertorder.cfm in QuickEStore 8.2 and earlier allows remote attackers to execute arbitr…
-
Unscored —
The wrap_setuid_third_party_application function in the installation script for the Samsung SCX-4200 Driver 2.00.95 add…
-
Unscored —CVE-2007-3938 Public exploit
SQL injection vulnerability in index.php in MAXdev MDPro (MD-Pro) 1.0.8x and earlier before 20070720 allows remote atta…
-
Unscored —
The Distributed Lock Manager (DLM) in the cluster manager for Linux kernel 2.6.15 allows remote attackers to cause a de…