Archive
August 2007
Vulnerabilities first published in this month (UTC), newest first.
529 results · Feed
-
Unscored —
Buffer overflow in the pop3 service in Hexamail Server 3.0.0.001 Lite allows remote attackers to cause a denial of serv…
-
Unscored —
Format string vulnerability in the Cl_GetPackets function in cl_main.c in the client in Doomsday (aka deng) 1.9.0-beta5…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) befo…
-
Unscored —CVE-2007-4641 Public exploit
Directory traversal vulnerability in index.php in Pakupaku CMS 0.4 and earlier allows remote attackers to include and e…
-
Unscored —
Multiple buffer overflows in Doomsday (aka deng) 1.9.0-beta5.1 and earlier allow remote attackers to execute arbitrary …
-
Unscored —CVE-2007-4639 Public exploit
EnterpriseDB Advanced Server 8.2 does not properly handle certain debugging function calls that occur before a call to …
-
Unscored —CVE-2007-4648 Public exploit
The nvcoaft51 driver in Norman Virus Control (NVC) 5.82 uses weak permissions (unrestricted write access) for the NvcOa…
-
Unscored —CVE-2007-4637 Public exploit
xGB.php in xGB 2.0 does not require authentication for an admin edit action, which allows remote attackers to make unsp…
-
Unscored —
Cisco IOS 12.2E, 12.2F, and 12.2S places a "no login" line into the VTY configuration when an administrator makes certa…
-
Unscored —CVE-2007-4635 Public exploit
Yahoo! Messenger 8.1.0.209 and 8.1.0.402 allows remote attackers to cause a denial of service (application crash) via c…
-
Unscored —CVE-2007-4640 Public exploit
Unrestricted file upload vulnerability in index.php in Pakupaku CMS 0.4 and earlier allows remote attackers to upload a…
-
Unscored —CVE-2007-4638 Public exploit
Blizzard Entertainment StarCraft Brood War 1.15.1 and earlier allows remote attackers to cause a denial of service (app…
-
Unscored —CVE-2007-4649 Public exploit
MicroWorld eScan Virus Control 9.0.722.1, Anti-Virus 9.0.722.1, and Internet Security 9.0.722.1 use weak permissions (E…
-
Unscored —CVE-2007-4647 Public exploit
newswire/uploadmedia.cgi in 2coolcode Our Space (Ourspace) 2.0.9 allows remote attackers to upload certain files via un…
-
Unscored —CVE-2007-4645 Public exploit
SQL injection vulnerability in index.php in NMDeluxe 2.0.0 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in phpBG 0.9.1 allow remote attackers to execute arbitrary PHP code …
-
Unscored —CVE-2007-4634 Public exploit
Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b…
-
Unscored —
Integer underflow in Doomsday (aka deng) 1.9.0-beta5.1 and earlier allows remote attackers to cause a denial of service…
-
Unscored —
The DataLoader::doStart function in dataloader.cpp in QGit 1.5.6 and other versions up to 2pre1 allows local users to o…
-
Unscored —
Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo!…
-
Unscored —
Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted re…
-
Unscored —CVE-2007-2954 EPSS 23%
Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2 through SP4 for Wi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in pframe.php in AbleDesign Dynamic Picture Frame 1.00 allows remote attackers…
-
Unscored —
Unspecified vulnerability in Polipo before 1.0.2 allows remote attackers to cause a denial of service (daemon crash) vi…
-
Unscored —CVE-2007-4628 Public exploit
SQL injection vulnerability in shownews.php in phpns 1.1 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —
Polipo before 1.0.2 allows remote HTTP servers to cause a denial of service (daemon crash) by aborting the response to …
-
Unscored —
Buffer overflow in the processLine function in maptemplate.c in MapServer before 4.10.3 allows attackers to cause a den…
-
Unscored —CVE-2007-4627 Public exploit
SQL injection vulnerability in index.php in ABC eStore 3.0 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2007-4630 Public exploit
Cross-site scripting (XSS) vulnerability in xlaapmview.asp in Absolute Poll Manager XE 4.1 allows remote attackers to i…
-
Unscored —CVE-2007-4604 Public exploit
SQL injection vulnerability in viewitem.php in DL PayCart 1.01 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2007-4602 Public exploit
SQL injection vulnerability in cms/revert-content.php in Implied by Design Micro CMS (Micro-CMS) 3.5 allows remote atta…
-
Unscored —CVE-2007-4605 Public exploit
PHP remote file inclusion vulnerability in convert/mvcw.php in Virtual War (VWar) 1.5.0 R15 and earlier allows remote a…
-
Unscored —
BEA WebLogic Server 9.1 does not properly handle propagation of an admin server's security policy change log to tempora…
-
Unscored —
Unrestricted file upload vulnerability in config/upload.php in Moonware (aka Dale Mooney Gallery) allows remote attacke…
-
Unscored —CVE-2007-4467 EPSS 21%
Multiple stack-based buffer overflows in the Oracle JInitiator ActiveX control (beans.ocx) 1.1.8.16 and earlier, as use…
-
Unscored —CVE-2007-4606 Public exploit
PHP remote file inclusion vulnerability in convert/mvcw_conver.php in the Virtual War (VWar) module for PHPNuke-Clan (P…
-
Unscored —
Buffer overflow in the EasyMailSMTPObj ActiveX control in emsmtp.dll 6.0.1 in the Quiksoft EasyMail SMTP Object, as use…
-
Unscored —
PHP remote file inclusion vulnerability in protection.php in ePersonnel RC_2004_02 allows remote attackers to execute a…
-
Unscored —
The SSL client implementation in BEA WebLogic Server 7.0 SP7, 8.1 SP2 through SP6, 9.0, 9.1, 9.2 Gold through MP2, and …
-
Unscored —CVE-2007-4603 Public exploit
Multiple SQL injection vulnerabilities in index.php in ACG News 1.0 allow remote attackers to execute arbitrary SQL com…