Archive
August 2007
Vulnerabilities first published in this month (UTC), newest first.
529 results · Feed
-
Unscored —
The Skinny channel driver (chan_skinny) in Asterisk Open Source before 1.4.10, AsteriskNOW before beta7, Appliance Deve…
-
Unscored —
Sun Java System Portal Server 7.0 does not properly process XSLT stylesheets in XSLT transforms in XML signatures, whic…
-
Unscored —
Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows remote attackers to execute arbitrary code via a malfor…
-
Unscored —
Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (device crash) via (1) "abnormal" MGCP…
-
Unscored —
Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service via (1) a malformed MGCP packet, which…
-
Unscored —
Cross-site scripting (XSS) vulnerability in KnowledgeTree Open Source 3.4 and 3.4.1 allows remote attackers to inject a…
-
Unscored —
Microsoft Windows Media Player 11 (wmplayer.exe) allows user-assisted remote attackers to cause a denial of service (ap…
-
Unscored —
Buffer overflow in the Next Hop Resolution Protocol (NHRP) functionality in Cisco IOS 12.0 through 12.4 allows remote a…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified MeetingPlace Web Conferencing (MP) 5.3.235.0 and e…
-
Critical 9.8
Multiple PHP remote file inclusion vulnerabilities in Guestbook Script 1.9 allow remote attackers to execute arbitrary …
-
Unscored —
Multiple memory leaks in Cisco IOS 12.0 through 12.4 allow remote attackers to cause a denial of service (device crash)…
-
Unscored —
Unspecified vulnerability in Cisco IOS and Cisco IOS XR 12.x up to 12.3, including some versions before 12.3(15) and 12…
-
Unscored —
PHP remote file inclusion vulnerability in config.php in FrontAccounting 1.12 Build 31 allows remote attackers to execu…
-
Unscored —CVE-2007-4283 Public exploit
PHP remote file inclusion vulnerability in bridge/yabbse.inc.php in Coppermine Photo Gallery (CPG) 1.3.1 allows remote …
-
Unscored —CVE-2007-4287 Public exploit
PHP remote file inclusion vulnerability in fc_functions/fc_example.php in FishCart 3.2 RC2 and earlier allows remote at…
-
Unscored —
Unspecified vulnerability in Cisco Unified Communications Manager (CUCM) 5.0, 5.1, and 6.0, and IOS 12.0 through 12.4, …
-
Unscored —
The Linux kernel before 2.6.23-rc1 checks the wrong global variable for the CIFS sec mount option, which might allow re…
-
Unscored —
Multiple unspecified "input validation error" vulnerabilities in multiple ActiveX controls in NavComUI.dll, as used in …
-
Unscored —
Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP OpenView Operations A.07.50 …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in VisionProject 3.1 and earlier allow remote attackers to inject a…
-
Unscored —CVE-2007-4264 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kai Blankenhorn Bitfolge simple and nice index file…
-
Unscored —CVE-2007-4256 Public exploit
Directory traversal vulnerability in showpage.cgi in YNP Portal System 2.2.0 allows remote attackers to read arbitrary …
-
Unscored —
Unspecified vulnerability in the server side of the Secure Copy (SCP) implementation in Cisco 12.2-based IOS allows rem…
-
Unscored —
EZPhotoSales 1.9.3 and earlier has a default "admin" account for galleries, which allows remote attackers to access arb…
-
Unscored —CVE-2007-4257 Public exploit
Multiple buffer overflows in Live for Speed (LFS) S1 and S2 allow user-assisted remote attackers to execute arbitrary c…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Search.php in DiMeMa CONTENTdm (CDM) allows remote attackers to inject arbi…
-
Unscored —
Unrestricted file upload vulnerability in EZPhotoSales 1.9.3 and earlier allows remote authenticated administrators to …
-
Unscored —
EZPhotoSales 1.9.3 and earlier allows remote attackers to download arbitrary image files via (1) a direct request for a…
-
Unscored —CVE-2007-4252 Public exploit
Absolute path traversal vulnerability in a certain ActiveX control in CkString.dll 1.1 and earlier in CHILKAT ASP Strin…
-
Unscored —
The CallCmd function in toolbar_gaming.dll in the Toolbar Gaming toolbar for Internet Explorer allows remote attackers …
-
Unscored —CVE-2007-4247 EPSS 15%
Windows Calendar on Microsoft Windows Vista allows remote attackers to cause a denial of service (NULL dereference and …
-
Unscored —
Stack-based buffer overflow in a certain ActiveX control in VDT70.DLL in Microsoft Visual Database Tools Database Desig…
-
Unscored —
The isChecked function in Toolbar.DLL in the ExportNation toolbar for Internet Explorer allows remote attackers to caus…
-
Unscored —
OpenOffice.org (OOo) 2.2 does not properly handle files with multiple extensions, which allows user-assisted remote att…
-
Unscored —CVE-2007-4253 Public exploit
SQL injection vulnerability in the News module in modules.php in Envolution 1.1.0 and earlier allows remote attackers t…
-
Unscored —CVE-2007-4258 Public exploit
SQL injection vulnerability in directory.php in Prozilla Pub Site Directory allows remote attackers to execute arbitrar…
-
Unscored —CVE-2007-4255 Public exploit
Buffer overflow in the mSQL extension in PHP 5.2.3 allows context-dependent attackers to execute arbitrary code via a l…
-
Unscored —CVE-2007-4244 Public exploit
PHP remote file inclusion vulnerability in langset.php in J! Reactions (com_jreactions) 1.8.1 and earlier, a Joomla! co…
-
Unscored —
The isChecked function in Toolbar.DLL in Advanced Searchbar before 3.33 allows remote attackers to cause a denial of se…
-
Unscored —
Unspecified vulnerability, possibly a buffer overflow, in Justsystem Ichitaro 2007 and earlier allows remote attackers …