Archive
August 2007
Vulnerabilities first published in this month (UTC), newest first.
162 results · Clear filters · Feed
-
Unscored —CVE-2007-4314 Public exploit
pixlie.php in Pixlie 1.7 allows remote attackers to trigger the reading and JPEG image processing of files in a remote …
-
Unscored —CVE-2007-4318 Public exploit
Cross-site scripting (XSS) vulnerability in Forms/General_1 in the management interface in ZyNOS firmware 3.62(WK.6) on…
-
Unscored —
Microsoft Windows Media Player 11 (wmplayer.exe) allows user-assisted remote attackers to cause a denial of service (ap…
-
Unscored —
Buffer overflow in the Next Hop Resolution Protocol (NHRP) functionality in Cisco IOS 12.0 through 12.4 allows remote a…
-
Unscored —
PHP remote file inclusion vulnerability in config.php in FrontAccounting 1.12 Build 31 allows remote attackers to execu…
-
Unscored —CVE-2007-4283 Public exploit
PHP remote file inclusion vulnerability in bridge/yabbse.inc.php in Coppermine Photo Gallery (CPG) 1.3.1 allows remote …
-
Unscored —CVE-2007-4287 Public exploit
PHP remote file inclusion vulnerability in fc_functions/fc_example.php in FishCart 3.2 RC2 and earlier allows remote at…
-
Unscored —
Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP OpenView Operations A.07.50 …
-
Unscored —CVE-2007-4264 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kai Blankenhorn Bitfolge simple and nice index file…
-
Unscored —CVE-2007-4256 Public exploit
Directory traversal vulnerability in showpage.cgi in YNP Portal System 2.2.0 allows remote attackers to read arbitrary …
-
Unscored —CVE-2007-4257 Public exploit
Multiple buffer overflows in Live for Speed (LFS) S1 and S2 allow user-assisted remote attackers to execute arbitrary c…
-
Unscored —CVE-2007-4252 Public exploit
Absolute path traversal vulnerability in a certain ActiveX control in CkString.dll 1.1 and earlier in CHILKAT ASP Strin…
-
Unscored —
Stack-based buffer overflow in a certain ActiveX control in VDT70.DLL in Microsoft Visual Database Tools Database Desig…
-
Unscored —CVE-2007-4253 Public exploit
SQL injection vulnerability in the News module in modules.php in Envolution 1.1.0 and earlier allows remote attackers t…
-
Unscored —CVE-2007-4258 Public exploit
SQL injection vulnerability in directory.php in Prozilla Pub Site Directory allows remote attackers to execute arbitrar…
-
Unscored —CVE-2007-4255 Public exploit
Buffer overflow in the mSQL extension in PHP 5.2.3 allows context-dependent attackers to execute arbitrary code via a l…
-
Unscored —CVE-2007-4244 Public exploit
PHP remote file inclusion vulnerability in langset.php in J! Reactions (com_jreactions) 1.8.1 and earlier, a Joomla! co…
-
Unscored —CVE-2007-4229 Public exploit
Unspecified vulnerability in KDE Konqueror 3.5.7 and earlier allows remote attackers to cause a denial of service (fail…
-
Unscored —CVE-2007-4235 Public exploit
Multiple PHP remote file inclusion vulnerabilities in VietPHP allow remote attackers to execute arbitrary PHP code via …
-
Unscored —
PHP remote file inclusion vulnerability in admin/inc/change_action.php in Andreas Robertz PHPNews 0.93 allows remote at…
-
Unscored —CVE-2007-4226 Public exploit
Directory traversal vulnerability in the BlueCat Networks Proteus IPAM appliance 2.0.2.0 (Adonis DNS/DHCP appliance 5.0…
-
Unscored —CVE-2007-4231 Public exploit
PHP remote file inclusion vulnerability in order/login.php in IDevSpot PhpHostBot 1.06 and earlier allows remote attack…
-
Unscored —CVE-2007-4208 Public exploit
SQL injection vulnerability in default.asp in Next Gen Portfolio Manager allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2007-4210 Public exploit
Multiple SQL injection vulnerabilities in module.php in LANAI (la-nai) CMS 1.2.14 allow remote attackers to execute arb…
-
Unscored —CVE-2007-4186 Public exploit
PHP remote file inclusion vulnerability in admin.tour_toto.php in the Tour de France Pool (com_tour_toto) 1.0.1 module …
-
Unscored —CVE-2007-4183 Public exploit
SQL injection vulnerability in main.php in paBugs 2.0 Beta 3 and earlier allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2007-4178 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in WebDirector 2.2 and earlier allows remote attackers to inject …
-
Unscored —CVE-2007-4191 Public exploit
Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which…
-
Unscored —CVE-2007-3845 Public exploit
Mozilla Firefox before 2.0.0.6, Thunderbird before 1.5.0.13 and 2.x before 2.0.0.6, and SeaMonkey before 1.1.4 allow re…
-
Unscored —CVE-2007-3844 Public exploit
Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows remote attackers to conduc…
-
Unscored —CVE-2007-4171 Public exploit
SQL injection vulnerability in komentar.php in the Forum Module for auraCMS (Modul Forum Sederhana) allows remote attac…
-
Unscored —CVE-2007-4174 Public exploit
Tor before 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051, which all…
-
Unscored —CVE-2007-4173 Public exploit
SQL injection vulnerability in duyuruoku.asp in Hunkaray Okul Portali 1.1 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2007-4155 Public exploit
Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll in EMC VMware 6.0.0 allows remote atta…
-
Unscored —CVE-2007-4156 Public exploit
Multiple SQL injection vulnerabilities in wolioCMS allow remote attackers to execute arbitrary SQL commands via (1) the…
-
Unscored —CVE-2007-4146 Public exploit
Cross-site scripting (XSS) vulnerability in webevent.cgi in WebEvent 2.61 through 4.03 allows remote attackers to injec…
-
Unscored —CVE-2007-4143 Public exploit
user.php in the Billing Control Panel in phpCoupon allows remote authenticated users to obtain Premium Member status, a…
-
Unscored —CVE-2007-4145 Public exploit
Heap-based buffer overflow in the BlueSkychat (BlueSkyCat) ActiveX control (V2.V2Ctrl.1) in v2.ocx 8.1.2.0 and earlier …
-
Unscored —CVE-2007-4140 Public exploit
Buffer overflow in Live for Speed (LFS) S2 ALPHA PATCH 0.5x allows user-assisted remote attackers to execute arbitrary …
-
Unscored —CVE-2007-4127 Public exploit
PHP remote file inclusion vulnerability in check_entry.php in Ralf Image Gallery (RIG), aka Raphael Moll RIG Image Gall…