Archive
August 2007
Vulnerabilities first published in this month (UTC), newest first.
529 results · Feed
-
Unscored —
EZPhotoSales 1.9.3 and earlier stores sensitive information under the web root with insufficient access control, which …
-
Unscored —CVE-2007-4229 Public exploit
Unspecified vulnerability in KDE Konqueror 3.5.7 and earlier allows remote attackers to cause a denial of service (fail…
-
Unscored —CVE-2007-4227 EPSS 13%
Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service via a cert…
-
Unscored —CVE-2007-4235 Public exploit
Multiple PHP remote file inclusion vulnerabilities in VietPHP allow remote attackers to execute arbitrary PHP code via …
-
Unscored —
Multiple unspecified vulnerabilities in Camera Life before 2.6 allow attackers to cause a denial of service via unknown…
-
Unscored —
Cross-site scripting (XSS) vulnerability in user/forgotPassStep2.jsp in the admin interface in C-SAM oneWallet 210_0706…
-
Unscored —
PHP remote file inclusion vulnerability in admin/inc/change_action.php in Andreas Robertz PHPNews 0.93 allows remote at…
-
Unscored —CVE-2007-4241 EPSS 11%
Buffer overflow in ldcconn in Hewlett-Packard (HP) Controller for Cisco Local Director on HP-UX 11.11i allows remote at…
-
Unscored —
Unspecified vulnerability in Camera Life before 2.6 allows remote attackers to download private photos via unspecified …
-
Unscored —
AIX 5.2 and 5.3 install pioinit with user and group ownership of bin, which allows local users with bin or possibly pri…
-
Unscored —
Buffer overflow in the atm subset in arp in devices.common.IBM.atm.rte in AIX 5.2 and 5.3 allows local users to gain ro…
-
Unscored —CVE-2007-4226 Public exploit
Directory traversal vulnerability in the BlueCat Networks Proteus IPAM appliance 2.0.2.0 (Adonis DNS/DHCP appliance 5.0…
-
Unscored —
rmpvc on IBM AIX 4.3 allows local users to cause a denial of service (system crash) via long port logical name (-l) arg…
-
Unscored —
Buffer overflow in lpd in bos.rte.printers in AIX 5.2 and 5.3 allows local users with printq group privileges to gain r…
-
Unscored —CVE-2007-4231 Public exploit
PHP remote file inclusion vulnerability in order/login.php in IDevSpot PhpHostBot 1.06 and earlier allows remote attack…
-
Unscored —
The pop3 Proxy in Astaro Security Gateway (ASG) 7 does not perform virus scanning of attachments that exceed the maximu…
-
Unscored —
BellaBiblio allows remote attackers to gain administrative privileges via a bellabiblio cookie with the value "administ…
-
Unscored —
Unspecified vulnerability in pfilter-reporter.pl in Astaro Security Gateway (ASG) 7 allows remote attackers to cause a …
-
Unscored —
The check_logout function in class/auth.php in Help Center Live (hcl) 2.1.3a sends a redirect to the web browser but do…
-
Unscored —
KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval a…
-
Unscored —
Visual truncation vulnerability in KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar via an http…
-
Unscored —
Spectrum Cash Receipting System before 6.504 uses weak cryptography (static substitution) in the PASSFILE password file…
-
Unscored —
SQL injection vulnerability in admin_console/index.asp in Gallery In A Box allows remote attackers to execute arbitrary…
-
Unscored —CVE-2007-4208 Public exploit
SQL injection vulnerability in default.asp in Next Gen Portfolio Manager allows remote attackers to execute arbitrary S…
-
Unscored —
Kaspersky Anti-Spam 3.0 MP1 before Critical Fix 2 (3.0.278.4) sets incorrect permissions for application files in certa…
-
Unscored —
The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags vi…
-
Unscored —
SQL injection vulnerability in Recherche.php in Aceboard forum allows remote attackers to execute arbitrary SQL command…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the Search Module in PHP-Nuke allow remote attackers to inject a…
-
Unscored —
XHA (Linux-HA) on the BlueCat Networks Adonis DNS/DHCP Appliance 5.0.2.8 allows remote attackers to cause a denial of s…
-
Unscored —CVE-2007-4210 Public exploit
Multiple SQL injection vulnerabilities in module.php in LANAI (la-nai) CMS 1.2.14 allow remote attackers to execute arb…
-
Unscored —
Guidance Software EnCase Enterprise Edition (EEE) 6 does not properly verify the identity of the acquisition target dur…
-
Unscored —
Joomla! 1.0.12 allows remote attackers to obtain sensitive information via a direct request for (1) Stat.php (2) Output…
-
Unscored —
icat in Brian Carrier The Sleuth Kit (TSK) before 2.09 omits NULL pointer checks in certain code paths, which allows us…
-
Unscored —
Hitachi Groupmax Collaboration - Schedule, as used in Groupmax Collaboration Portal 07-32 through 07-32-/B, uCosminexus…
-
Unscored —CVE-2007-4186 Public exploit
PHP remote file inclusion vulnerability in admin.tour_toto.php in the Tour de France Pool (com_tour_toto) 1.0.1 module …
-
Unscored —
Guidance Software EnCase 6.2 and 6.5 does not properly handle a volume with more than 25 partitions, which might allow …
-
Unscored —
Session fixation vulnerability in Joomla! before 1.0.13 (aka Sunglow) allows remote attackers to hijack administrative …
-
Unscored —
ntfs.c in fsstat in Brian Carrier The Sleuth Kit (TSK) before 2.09 interprets a certain variable as a byte count rather…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Interact before 2.4 allow remote attackers to inject arbitrary w…
-
Unscored —
Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.11 and…