Archive
August 2007
Vulnerabilities first published in this month (UTC), newest first.
162 results · Clear filters · Feed
-
Unscored —CVE-2007-4419 Public exploit
Admin.php in Olate Download (od) 3.4.1 uses an MD5 hash of the admin username, user id, and group id, to compose the OD…
-
Unscored —CVE-2007-4389 Public exploit
Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, with 3.17.5…
-
Unscored —CVE-2007-4391 Public exploit
Heap-based buffer overflow in Kakadu kdu_v32m.dll in Yahoo! Messenger 8.1.0.413 allows remote attackers to cause a deni…
-
Unscored —CVE-2007-4386 Public exploit
SQL injection vulnerability in search.php in GetMyOwnArcade allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2007-4390 Public exploit
The Command Line Interface (CLI), aka Adonis Administration Console, on the BlueCat Networks Adonis DNS/DHCP appliance …
-
Unscored —CVE-2007-4387 Public exploit
Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5 and 5.29…
-
Unscored —CVE-2007-4384 Public exploit
Multiple PHP remote file inclusion vulnerabilities in depouilg.php3 in Stephane Pineau VOTE 1c allow remote attackers t…
-
Unscored —CVE-2007-4381 Public exploit
Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and J…
-
Unscored —CVE-2007-4385 Public exploit
OWASP Stinger before 2.5 allows remote attackers to bypass input validation routines by using multipart encoded request…
-
Unscored —CVE-2007-4382 Public exploit
CounterPath X-Lite 3.0 34025, and possibly eyeBeam, allows remote attackers to cause a denial of service (device crash)…
-
Unscored —CVE-2007-4377 Public exploit
Stack-based buffer overflow in the IMAP service in SurgeMail 38k allows remote authenticated users to execute arbitrary…
-
Unscored —CVE-2007-4375 Public exploit
The administrative interface (aka DkService.exe) in Diskeeper 9 Professional, 2007 Pro Premier, and probably other vers…
-
Unscored —CVE-2007-4368 Public exploit
SQL injection vulnerability in /main in IBM Rational ClearQuest (CQ) Web 7.0.0.0-IFIX02 and 7.0.0.1 allows remote attac…
-
Unscored —CVE-2007-4369 Public exploit
Directory traversal vulnerability in go/_files in SOTEeSKLEP before 4.0 allows remote attackers to read arbitrary files…
-
Unscored —
Multiple buffer overflows in the (1) client and (2) server in Racer 0.5.3 beta 5 allow remote attackers to execute arbi…
-
Unscored —CVE-2007-4366 Public exploit
WengoPhone 2.1 allows remote attackers to cause a denial of service (device crash) via a SIP INVITE message without a C…
-
Unscored —CVE-2007-4358 Public exploit
Zoidcom 0.6.7 and earlier allows remote attackers to cause a denial of service (application crash) via a JOIN packet (a…
-
Unscored —CVE-2007-4359 Public exploit
Multiple SQL injection vulnerabilities in SkilMatch Staffing Systems JobLister3 allow remote attackers to execute arbit…
-
Unscored —CVE-2007-4362 Public exploit
SQL injection vulnerability in category.php in Prozilla Webring allows remote attackers to execute arbitrary SQL comman…
-
Unscored —
Integer underflow in the CDownloadSink class code in the Vector Markup Language (VML) component (VGX.DLL), as used in I…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5…
-
Medium —
Apache Tomcat treats single quotes as delimiters in cookies
Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes ("'") as delimiters in cookies, which might cause sensitive information such as session IDs to be leaked and allow remote attackers to cond…
-
Unscored —
Integer overflow in the AttemptWrite function in Graphics Rendering Engine (GDI) on Microsoft Windows 2000 SP4, XP SP2,…
-
Unscored —
The tblinf32.dll (aka vstlbinf.dll) ActiveX control for Internet Explorer 5.01, 6 SP1, and 7 uses an incorrect IObjects…
-
Unscored —
Microsoft XML Core Services (MSXML) 3.0 through 6.0 allows remote attackers to execute arbitrary code via the substring…
-
Unscored —CVE-2007-4338 Public exploit
index.php in Ryan Haudenschilt Family Connections (FCMS) before 0.9 allows remote attackers to access an arbitrary acco…
-
Unscored —CVE-2007-4334 Public exploit
Cross-site scripting (XSS) vulnerability in whois.php in Php-stats 0.1.9.2 allows remote attackers to inject arbitrary …
-
Unscored —CVE-2007-4341 Public exploit
PHP remote file inclusion vulnerability in adm/my_statistics.php in Omnistar Lib2 PHP 0.2 allows remote attackers to ex…
-
Unscored —
Buffer overflow in the Live Picture Corporation DXSurface.LivePicture.FlashPix.1 (DirectTransform FlashPix) ActiveX con…
-
Unscored —CVE-2007-4327 Public exploit
Multiple PHP remote file inclusion vulnerabilities in File Uploader 1.1 allow remote attackers to execute arbitrary PHP…
-
Unscored —CVE-2007-4321 Public exploit
fail2ban 0.8 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts t…
-
Unscored —CVE-2007-4325 Public exploit
PHP remote file inclusion vulnerability in index.php in Gaestebuch 1.5 allows remote attackers to execute arbitrary PHP…
-
Unscored —CVE-2007-4328 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Mapos Bilder Galerie 1.0 allow remote attackers to execute arbitr…
-
Unscored —CVE-2007-4329 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Web News 1.1 allow remote attackers to execute arbitrary PHP code…
-
Unscored —
PHP remote file inclusion vulnerability in admin/addons/archive/archive.php in Ncaster 1.7.2 allows remote attackers to…
-
Unscored —CVE-2007-4330 Public exploit
PHP remote file inclusion vulnerability in shoutbox.php in Shoutbox 1.0 allows remote attackers to execute arbitrary PH…
-
Unscored —CVE-2007-4312 Public exploit
SQL injection vulnerability in index.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary SQL …
-
Unscored —
PHP remote file inclusion vulnerability in public_includes/pub_blocks/activecontent.php in Php Blue Dragon CMS 3.0.0 al…
-
Unscored —CVE-2007-4305 Public exploit
Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in Systrace on NetBSD and OpenBSD allow …
-
Unscored —CVE-2007-4302 Public exploit
Multiple race conditions in certain system call wrappers in Generic Software Wrappers Toolkit (GSWTK) allow local users…