Skip to content
OpenAdvisories

Archive

13 August 2007

Vulnerabilities first published on this day (UTC), newest first.

21 results · Feed

  • Unscored —

    The management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device allows remote authenticated administ…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.10.3 allow remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2007-4312 Public exploit

    SQL injection vulnerability in index.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2007-4313 Public exploit EPSS 69%

    PHP remote file inclusion vulnerability in public_includes/pub_blocks/activecontent.php in Php Blue Dragon CMS 3.0.0 al…

  • Unscored —
    CVE-2007-4305 Public exploit

    Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in Systrace on NetBSD and OpenBSD allow …

  • Unscored —

    The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel bef…

  • Unscored —

    The finger daemon (in.fingerd) in Sun Solaris 7 through 9 allows remote attackers to list all accounts that have certai…

  • Unscored —

    The AMD ATI atidsmxx.sys 3.0.502.0 driver on Windows Vista allows local users to bypass the driver signing policy, writ…

  • Unscored —

    The management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device has a certain default password, whic…

  • Unscored —
    CVE-2007-4302 Public exploit

    Multiple race conditions in certain system call wrappers in Generic Software Wrappers Toolkit (GSWTK) allow local users…

  • Unscored —
    CVE-2007-4314 Public exploit

    pixlie.php in Pixlie 1.7 allows remote attackers to trigger the reading and JPEG image processing of files in a remote …

  • Unscored —

    IBM Lotus Notes 5.x through 7.0.2 allows user-assisted remote authenticated administrators to obtain a cleartext notes.…

  • Unscored —
    CVE-2007-4318 Public exploit

    Cross-site scripting (XSS) vulnerability in Forms/General_1 in the management interface in ZyNOS firmware 3.62(WK.6) on…

  • Unscored —

    Multiple race conditions in (1) certain rules and (2) argument copying during VM protection, in CerbNG for FreeBSD 4.8 …

  • Unscored —

    CerbNG for FreeBSD 4.8 does not properly implement VM protection when attempting to prevent system call wrapper races, …

  • Unscored —

    Multiple cross-site request forgery (CSRF) vulnerabilities in the management interface in ZyNOS firmware 3.62(WK.6) on …

  • Unscored —

    The xfer_secondary_pool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35 performs reseed operati…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Storesprite 7 and earlier allow remote attackers to inject arbit…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the management interface in WebCart 2.20 through 2.25 allow remo…

  • Unscored —

    The drm/i915 component in the Linux kernel before 2.6.22.2, when used with i965G and later chipsets, allows local users…

  • Unscored —

    Stack-based buffer overflow in the readRadianceHeader function in (1) src/fileformat/rgbeio.cpp in pfstools 1.6.2 and (…