Archive
August 2007
Vulnerabilities first published in this month (UTC), newest first.
162 results · Clear filters · Feed
-
Critical 9.8
Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allow…
-
Unscored —CVE-2007-4553 Public exploit
The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service (device hang) v…
-
Unscored —CVE-2007-4545 Public exploit
Multiple directory traversal vulnerabilities in Unreal Commander 0.92 build 565 and 573 allow user-assisted remote atta…
-
Unscored —CVE-2007-4537 Public exploit
Heap-based buffer overflow in the Huffman decompression algorithm implemented in Skulltag 0.97d-beta4.1 and earlier all…
-
Unscored —CVE-2007-4524 Public exploit
PHP remote file inclusion vulnerability in adisplay.php in PhPress 0.2.0 allows remote attackers to execute arbitrary P…
-
Unscored —
Buffer overflow in the VThinker::BroadcastPrintf function in p_thinker.cpp in Vavoom 1.24 and earlier allows remote att…
-
Unscored —CVE-2007-4527 Public exploit
Unrestricted file upload vulnerability in phUploader.php in phphq.Net phUploader 1.2 allows remote attackers to upload …
-
Unscored —CVE-2007-4533 Public exploit
Format string vulnerability in the Say command in sv_main.cpp in Vavoom 1.24 and earlier allows remote attackers to exe…
-
Unscored —CVE-2007-4535 Public exploit
The VStr::Resize function in str.cpp in Vavoom 1.24 and earlier allows remote attackers to cause a denial of service (d…
-
Unscored —CVE-2007-4522 Public exploit
Multiple SQL injection vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote authenticated users to ex…
-
Unscored —CVE-2007-4531 Public exploit
Soldat game server 1.4.2 and earlier, and dedicated server 2.6.2 and earlier, allows remote attackers to cause a client…
-
Unscored —CVE-2007-4528 Public exploit
The Foreign Function Interface (ffi) extension in PHP 5.0.5 does not follow safe_mode restrictions, which allows contex…
-
Unscored —CVE-2007-4505 Public exploit
SQL injection vulnerability in index.php in the RemoSitory component (com_remository) for Mambo allows remote attackers…
-
Unscored —CVE-2007-4508 Public exploit
Stack-based buffer overflow in Rebellion Asura engine, as used for the server in Rogue Trooper 1.0 and earlier and Pris…
-
Unscored —CVE-2007-4509 Public exploit
SQL injection vulnerability in index.php in the EventList component (com_eventlist) 0.8 and earlier for Joomla! allows …
-
Unscored —CVE-2007-4503 Public exploit
SQL injection vulnerability in index.php in the Nice Talk component (com_nicetalk) 0.9.3 and earlier for Joomla! allows…
-
Unscored —CVE-2007-4502 Public exploit
SQL injection vulnerability in index.php in the BibTeX component (com_jombib) 1.3 and earlier for Joomla! allows remote…
-
Unscored —
The Grandstream SIP Phone GXV-3000 with firmware 1.0.1.7, Loader 1.0.0.6, and Boot 1.0.0.18 allows remote attackers to …
-
Unscored —CVE-2007-4506 Public exploit
SQL injection vulnerability in index.php in the NeoRecruit component (com_neorecruit) 1.4 and earlier for Joomla! allow…
-
Unscored —
Directory traversal vulnerability in index.php in the RSfiles component (com_rsfiles) 1.0.2 and earlier for Joomla! all…
-
Unscored —CVE-2007-4507 Public exploit
Multiple buffer overflows in the php_ntuser component for PHP 5.2.3 allow context-dependent attackers to cause a denial…
-
Unscored —CVE-2007-4491 Public exploit
SQL injection vulnerability in uyeler2.php in Gurur haber 2.0 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2007-4486 Public exploit
Multiple PHP remote file inclusion vulnerabilities in index.php in Linkliste 1.2 allow remote attackers to execute arbi…
-
Unscored —CVE-2007-4479 Public exploit
Cross-site scripting (XSS) vulnerability in search.html in Search Engine Builder allows remote attackers to inject arbi…
-
Unscored —CVE-2007-4489 Public exploit
Buffer overflow in the IUAComFormX ActiveX control in uacomx.ocx 2.0.1 in the eCentrex VOIP Client module allows remote…
-
Unscored —CVE-2007-4482 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in the Pool 1.0.7 theme for WordPress allows remote attackers to …
-
Unscored —CVE-2007-4456 Public exploit
SQL injection vulnerability in index.php in the SimpleFAQ (com_simplefaq) 2.11 component for Mambo allows remote attack…
-
Unscored —CVE-2007-4458 Public exploit
PHP remote file inclusion vulnerability in includes/class/class_tpl.php in Firesoft allows remote attackers to execute …
-
Unscored —CVE-2007-4463 Public exploit
The Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to cause a denial of service (unhan…
-
Unscored —CVE-2007-4457 Public exploit
Directory traversal vulnerability in forumreply.php in Dalai Forum 1.1 allows remote attackers to include and execute a…
-
Unscored —
Cisco IP Phone 7940 and 7960 with P0S3-08-6-00 firmware, and other SIP firmware before 8.7(0), allows remote attackers …
-
Unscored —
Stack-based buffer overflow in the MercuryS SMTP server in Mercury Mail Transport System, possibly 4.51 and earlier, al…
-
Unscored —CVE-2007-4439 Public exploit
PHP remote file inclusion vulnerability in popup_window.php in Squirrelcart 1.x.x and earlier allows remote attackers t…
-
Unscored —CVE-2007-4444 Public exploit
Multiple buffer overflows in Image Space rFactor 1.250 and earlier allow remote attackers to execute arbitrary code via…
-
Unscored —CVE-2007-4442 Public exploit
Stack-based buffer overflow in the logging function in the Unreal engine, possibly 2003 and 2004, as used in the intern…
-
Unscored —CVE-2007-4441 Public exploit
Buffer overflow in php_win32std.dll in the win32std extension for PHP 5.2.0 and earlier allows context-dependent attack…
-
Unscored —CVE-2007-4446 Public exploit
Format string vulnerability in the server in Toribash 2.71 and earlier allows remote attackers to execute arbitrary cod…
-
Unscored —CVE-2007-4434 Public exploit
Cross-site scripting (XSS) vulnerability in textfilesearch.asp in the Text File Search ASP (Classic) edition allows rem…
-
Unscored —
Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows context-dependent attackers to cause a denial of servic…
-
Unscored —CVE-2007-4420 Public exploit
Absolute path traversal vulnerability in a certain ActiveX control in officeviewer.ocx 5.1.199.1 in EDraw Office Viewer…