Archive
8 August 2007
Vulnerabilities first published on this day (UTC), newest first.
84 results · Feed
-
Unscored —CVE-2007-4256 Public exploit
Directory traversal vulnerability in showpage.cgi in YNP Portal System 2.2.0 allows remote attackers to read arbitrary …
-
Unscored —
Unspecified vulnerability in the server side of the Secure Copy (SCP) implementation in Cisco 12.2-based IOS allows rem…
-
Unscored —
EZPhotoSales 1.9.3 and earlier has a default "admin" account for galleries, which allows remote attackers to access arb…
-
Unscored —CVE-2007-4257 Public exploit
Multiple buffer overflows in Live for Speed (LFS) S1 and S2 allow user-assisted remote attackers to execute arbitrary c…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Search.php in DiMeMa CONTENTdm (CDM) allows remote attackers to inject arbi…
-
Unscored —
Unrestricted file upload vulnerability in EZPhotoSales 1.9.3 and earlier allows remote authenticated administrators to …
-
Unscored —
EZPhotoSales 1.9.3 and earlier allows remote attackers to download arbitrary image files via (1) a direct request for a…
-
Unscored —CVE-2007-4252 Public exploit
Absolute path traversal vulnerability in a certain ActiveX control in CkString.dll 1.1 and earlier in CHILKAT ASP Strin…
-
Unscored —
The CallCmd function in toolbar_gaming.dll in the Toolbar Gaming toolbar for Internet Explorer allows remote attackers …
-
Unscored —CVE-2007-4247 EPSS 15%
Windows Calendar on Microsoft Windows Vista allows remote attackers to cause a denial of service (NULL dereference and …
-
Unscored —
Stack-based buffer overflow in a certain ActiveX control in VDT70.DLL in Microsoft Visual Database Tools Database Desig…
-
Unscored —
The isChecked function in Toolbar.DLL in the ExportNation toolbar for Internet Explorer allows remote attackers to caus…
-
Unscored —
OpenOffice.org (OOo) 2.2 does not properly handle files with multiple extensions, which allows user-assisted remote att…
-
Unscored —CVE-2007-4253 Public exploit
SQL injection vulnerability in the News module in modules.php in Envolution 1.1.0 and earlier allows remote attackers t…
-
Unscored —CVE-2007-4258 Public exploit
SQL injection vulnerability in directory.php in Prozilla Pub Site Directory allows remote attackers to execute arbitrar…
-
Unscored —CVE-2007-4255 Public exploit
Buffer overflow in the mSQL extension in PHP 5.2.3 allows context-dependent attackers to execute arbitrary code via a l…
-
Unscored —CVE-2007-4244 Public exploit
PHP remote file inclusion vulnerability in langset.php in J! Reactions (com_jreactions) 1.8.1 and earlier, a Joomla! co…
-
Unscored —
The isChecked function in Toolbar.DLL in Advanced Searchbar before 3.33 allows remote attackers to cause a denial of se…
-
Unscored —
Unspecified vulnerability, possibly a buffer overflow, in Justsystem Ichitaro 2007 and earlier allows remote attackers …
-
Unscored —
EZPhotoSales 1.9.3 and earlier stores sensitive information under the web root with insufficient access control, which …
-
Unscored —CVE-2007-4229 Public exploit
Unspecified vulnerability in KDE Konqueror 3.5.7 and earlier allows remote attackers to cause a denial of service (fail…
-
Unscored —CVE-2007-4227 EPSS 13%
Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service via a cert…
-
Unscored —CVE-2007-4235 Public exploit
Multiple PHP remote file inclusion vulnerabilities in VietPHP allow remote attackers to execute arbitrary PHP code via …
-
Unscored —
Multiple unspecified vulnerabilities in Camera Life before 2.6 allow attackers to cause a denial of service via unknown…
-
Unscored —
Cross-site scripting (XSS) vulnerability in user/forgotPassStep2.jsp in the admin interface in C-SAM oneWallet 210_0706…
-
Unscored —
PHP remote file inclusion vulnerability in admin/inc/change_action.php in Andreas Robertz PHPNews 0.93 allows remote at…
-
Unscored —CVE-2007-4241 EPSS 11%
Buffer overflow in ldcconn in Hewlett-Packard (HP) Controller for Cisco Local Director on HP-UX 11.11i allows remote at…
-
Unscored —
Unspecified vulnerability in Camera Life before 2.6 allows remote attackers to download private photos via unspecified …
-
Unscored —
AIX 5.2 and 5.3 install pioinit with user and group ownership of bin, which allows local users with bin or possibly pri…
-
Unscored —
Buffer overflow in the atm subset in arp in devices.common.IBM.atm.rte in AIX 5.2 and 5.3 allows local users to gain ro…
-
Unscored —CVE-2007-4226 Public exploit
Directory traversal vulnerability in the BlueCat Networks Proteus IPAM appliance 2.0.2.0 (Adonis DNS/DHCP appliance 5.0…
-
Unscored —
rmpvc on IBM AIX 4.3 allows local users to cause a denial of service (system crash) via long port logical name (-l) arg…
-
Unscored —
Buffer overflow in lpd in bos.rte.printers in AIX 5.2 and 5.3 allows local users with printq group privileges to gain r…
-
Unscored —CVE-2007-4231 Public exploit
PHP remote file inclusion vulnerability in order/login.php in IDevSpot PhpHostBot 1.06 and earlier allows remote attack…
-
Unscored —
The pop3 Proxy in Astaro Security Gateway (ASG) 7 does not perform virus scanning of attachments that exceed the maximu…
-
Unscored —
BellaBiblio allows remote attackers to gain administrative privileges via a bellabiblio cookie with the value "administ…
-
Unscored —
Unspecified vulnerability in pfilter-reporter.pl in Astaro Security Gateway (ASG) 7 allows remote attackers to cause a …
-
Unscored —
The check_logout function in class/auth.php in Help Center Live (hcl) 2.1.3a sends a redirect to the web browser but do…
-
Unscored —
KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval a…
-
Unscored —
Visual truncation vulnerability in KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar via an http…