Skip to content
OpenAdvisories

Archive

21 August 2007

Vulnerabilities first published on this day (UTC), newest first.

29 results · Feed

  • Unscored —

    lib/Locale/Po4a/Po.pm in po4a before 0.32 allows local users to overwrite arbitrary files via a symlink attack on the g…

  • Unscored —

    CRLF injection vulnerability in the Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to …

  • Unscored —
    CVE-2007-4456 Public exploit

    SQL injection vulnerability in index.php in the SimpleFAQ (com_simplefaq) 2.11 component for Mambo allows remote attack…

  • Unscored —
    CVE-2007-4458 Public exploit

    PHP remote file inclusion vulnerability in includes/class/class_tpl.php in Firesoft allows remote attackers to execute …

  • Unscored —

    NuFW 2.2.3, and certain other versions after 2.0, allows remote attackers to bypass time-based packet filtering rules v…

  • Unscored —
    CVE-2007-4463 Public exploit

    The Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to cause a denial of service (unhan…

  • Unscored —

    The RenderV2ToFile function in tag_file.cpp in id3lib (aka libid3) 3.8.3 allows local users to overwrite arbitrary file…

  • Unscored —
    CVE-2007-4457 Public exploit

    Directory traversal vulnerability in forumreply.php in Dalai Forum 1.1 allows remote attackers to include and execute a…

  • Unscored —
    CVE-2007-4459 Public exploit EPSS 14%

    Cisco IP Phone 7940 and 7960 with P0S3-08-6-00 firmware, and other SIP firmware before 8.7(0), allows remote attackers …

  • Unscored —

    Stack-based buffer overflow in the NetWorker Remote Exec Service (nsrexecd.exe) in EMC Software NetWorker 7.x.x allows …

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.6.8 allow remote attackers to inject arbitrary web c…

  • Unscored —

    Eval injection vulnerability in environment.php in Olate Download (od) 3.4.1 allows context-dependent attackers to exec…

  • Unscored —

    Multiple Check Point Zone Labs ZoneAlarm products before 7.0.362, including ZoneAlarm Security Suite 5.5.062.004 and 6.…

  • Unscored —

    Palm OS on Treo 650, 680, 700p, and 755p Smart phones allows remote attackers to cause a denial of service (device rese…

  • Unscored —

    vsdatant.sys 6.5.737.0 in Check Point Zone Labs ZoneAlarm before 7.0.362 allows local users to gain privileges via a cr…

  • Unscored —
    CVE-2007-4440 Public exploit EPSS 65%

    Stack-based buffer overflow in the MercuryS SMTP server in Mercury Mail Transport System, possibly 4.51 and earlier, al…

  • Unscored —
    CVE-2007-4439 Public exploit

    PHP remote file inclusion vulnerability in popup_window.php in Squirrelcart 1.x.x and earlier allows remote attackers t…

  • Unscored —

    The server in Toribash 2.71 and earlier does not properly handle partially joined clients that are temporarily assigned…

  • Unscored —

    The client in Toribash 2.71 and earlier allows remote attackers to cause a denial of service (application hang) via a c…

  • Unscored —

    The server in Toribash 2.71 and earlier on Windows allows remote attackers to cause a denial of service (continuous bee…

  • Unscored —

    Image Space rFactor 1.250 and earlier allows remote attackers to cause a denial of service (daemon crash) via (1) an ID…

  • Unscored —

    The UCC dedicated server for the Unreal engine, possibly 2003 and 2004, on Windows allows remote attackers to cause a d…

  • Unscored —

    Multiple buffer overflows in the client in Toribash 2.71 and earlier allow remote attackers to (1) execute arbitrary co…

  • Unscored —
    CVE-2007-4444 Public exploit

    Multiple buffer overflows in Image Space rFactor 1.250 and earlier allow remote attackers to execute arbitrary code via…

  • Unscored —

    The server in Toribash 2.71 and earlier does not properly handle long commands, which allows remote attackers to trigge…

  • Unscored —
    CVE-2007-4442 Public exploit

    Stack-based buffer overflow in the logging function in the Unreal engine, possibly 2003 and 2004, as used in the intern…

  • Unscored —
    CVE-2007-4441 Public exploit

    Buffer overflow in php_win32std.dll in the win32std extension for PHP 5.2.0 and earlier allows context-dependent attack…

  • Unscored —
    CVE-2007-4446 Public exploit

    Format string vulnerability in the server in Toribash 2.71 and earlier allows remote attackers to execute arbitrary cod…

  • Unscored —

    The client in Toribash 2.71 and earlier allows remote attackers to cause a denial of service (disconnection) via a long…