Skip to content
OpenAdvisories

Archive

July 2007

Vulnerabilities first published in this month (UTC), newest first.

587 results · Feed

  • Unscored —

    Unspecified vulnerability in Cisco Unified Communications Manager (CUCM, formerly CallManager) and Unified Presence Ser…

  • Unscored —

    PHP local file inclusion vulnerability in gpg_pop_init.php in the G/PGP (GPG) Plugin before 20070707 for Squirrelmail a…

  • Unscored —

    Off-by-one error in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Communications…

  • Unscored —

    The mirror mechanism in SurgeFTP 2.3a1 allows user-assisted, remote FTP servers to cause a denial of service (restart) …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the mirrored server management interface in SurgeFTP 2.3a1 allows user-assi…

  • Unscored —

    archive_read_support_format_tar.c in libarchive before 2.2.4 allows user-assisted remote attackers to cause a denial of…

  • Unscored —

    The terminal_helper_execute function in terminal/terminal.c in Xfce Terminal 0.2.6 allows user-assisted remote attacker…

  • Unscored —
    CVE-2007-3673 Public exploit

    Symantec symtdi.sys before 7.0.0, as distributed in Symantec AntiVirus Corporate Edition 9 through 10.1 and Client Secu…

  • Unscored —

    Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary cod…

  • Unscored —

    QuickTime for Java in Apple Quicktime before 7.2 does not perform sufficient "access control," which allows remote atta…

  • Unscored —
    CVE-2007-2417 EPSS 16%

    Heap-based buffer overflow in _mprosrv.exe in Progress Software Progress 9.1E and OpenEdge 10.1x, as used by the RSA Au…

  • Unscored —
    CVE-2007-2394 Public exploit EPSS 12%

    Integer overflow in Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to e…

  • Unscored —

    The design of QuickTime for Java in Apple Quicktime before 7.2 allows remote attackers to bypass certain security contr…

  • Unscored —

    QuickTime for Java in Apple Quicktime before 7.2 does not properly check permissions, which allows remote attackers to …

  • Unscored —

    The JDirect support in QuickTime for Java in Apple Quicktime before 7.2 exposes certain dangerous interfaces, which all…

  • Unscored —

    archive_read_support_format_tar.c in libarchive before 2.2.4 allows user-assisted remote attackers to cause a denial of…

  • Unscored —

    archive_read_support_format_tar.c in libarchive before 2.2.4 does not properly compute the length of a certain buffer w…

  • Unscored —

    Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3_U1 and 4.1.4, have unspecified atta…

  • Unscored —

    Buffer overflow in lib/silcclient/client_notify.c of SILC Client and SILC Toolkit before 1.1.2 allows remote attackers …

  • Unscored —

    Multiple unspecified vulnerabilities in Webmatic before 2.7 have unknown impact and attack vectors, related to the "adm…

  • Unscored —

    The default configuration of the POP server in TCP/IP Services 5.6 for HP OpenVMS 8.3 generates different responses dep…

  • Unscored —

    The default configuration of the POP server in TCP/IP Services 5.6 for HP OpenVMS 8.3 does not log the source IP addres…

  • Unscored —

    The 4BSD process scheduler in the FreeBSD kernel performs scheduling based on CPU billing gathered from periodic proces…

  • Unscored —

    The process scheduler in the Linux kernel 2.6.16 gives preference to "interactive" processes that perform voluntary sle…

  • Unscored —

    The process scheduler in the Sun Solaris kernel does not make use of the process statistics kept by the kernel and perf…

  • Unscored —

    Multiple unspecified vulnerabilities in the SVG parsing engine in Apple Safari 3 Beta for Windows have unspecified remo…

  • Unscored —

    The process scheduler in the Linux kernel 2.4 performs scheduling based on CPU billing gathered from periodic process s…

  • Unscored —
    CVE-2007-3725 Public exploit

    The RAR VM (unrarvm.c) in Clam Antivirus (ClamAV) before 0.91 allows user-assisted remote attackers to cause a denial o…

  • Unscored —

    The process scheduler in the Microsoft Windows XP kernel does not make use of the process statistics kept by the kernel…

  • Unscored —

    rcp on Sun Solaris 8, 9, and 10 before 20070710 does not properly call certain helper applications, which allows local …

  • Unscored —

    Integer signedness error in the SET_VALUE function in rarvm.cpp in unrar 3.70 beta 3, as used in products including Win…

  • Unscored —

    The ULE process scheduler in the FreeBSD kernel gives preference to "interactive" processes that perform voluntary slee…

  • Unscored —

    Heap-based buffer overflow in the RPC subsystem in Symantec Backup Exec for Windows Servers 10.0, 10d, and 11d allows r…

  • Unscored —

    Integer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management…

  • Unscored —

    Heap-based buffer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common …

  • Unscored —

    Stack-based buffer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common…

  • Unscored —

    Integer underflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Managemen…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in CodeIgniter 1.5.3 before 20070626 allows remote attackers to inject arbitra…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in HiddenChest "is ve Bayi Basvuru Formu" (Yb ve Bayi Babvuru Formu…

  • Unscored —

    Sun Java System Access Manager (formerly Java System Identity Server) before 20070710, when the message debug level is …