Archive
August 2007
Vulnerabilities first published in this month (UTC), newest first.
529 results · Feed
-
Unscored —
SSL libraries in BEA WebLogic Server 6.1 Gold through SP7, 7.0 Gold through SP7, and 8.1 Gold through SP5 might allow r…
-
Unscored —
eyeOS uses predictable checksum values in the checknum parameter for access control, which allows remote attackers to r…
-
Unscored —
The SSL server implementation in BEA WebLogic Server 7.0 Gold through SP7, 8.1 Gold through SP6, 9.0, 9.1, 9.2 Gold thr…
-
Unscored —
Unspecified vulnerability in BEA WebLogic Server 6.1 Gold through SP7 and 7.0 Gold through SP7 allows remote attackers …
-
Unscored —CVE-2007-4611 Public exploit
SQL injection vulnerability in viewevent.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to execute a…
-
Unscored —
Unspecified vulnerability in BEA WebLogic Server 6.1 Gold through SP7, 7.0 Gold through SP7, and 8.1 Gold through SP4 a…
-
Unscored —
CRLF injection vulnerability in contact.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to add arbitr…
-
Unscored —
Unspecified vulnerability in Red Hat Network Satellite Server 5.0.0 allows remote authenticated users to execute arbitr…
-
Unscored —
A regression error in tcp-wrappers 7.6.dbs-10 and 7.6.dbs-11 might allow remote attackers to bypass intended access res…
-
Unscored —
Directory traversal vulnerability in extract.c in star before 1.5a84 allows user-assisted remote attackers to overwrite…
-
Unscored —CVE-2007-4596 Public exploit
The perl extension in PHP does not follow safe_mode restrictions, which allows context-dependent attackers to execute a…
-
Unscored —
IBM SurePOS 500 has (1) a default password of "12345" for the manager and (2) blank default passwords for operator acco…
-
Unscored —CVE-2007-4597 Public exploit
SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 RC 6 allows remote attackers to e…
-
Unscored —
Unspecified vulnerability in vstor2-ws60.sys in VMWare Workstation 6.0 allows local users to cause a denial of service …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Mayaa before 1.1.12 allows remote attackers to inject arbitrary web script …
-
Unscored —
Entrust Entelligence Security Provider (ESP) 8 does not properly validate certificates in certain circumstances involvi…
-
Unscored —
vstor-ws60.sys in VMWare Workstation 6.0 allows local users to cause a denial of service (host operating system crash) …
-
Unscored —CVE-2007-4585 Public exploit
Directory traversal vulnerability in activateuser.php in 2532|Gigs 1.2.1 allows remote attackers to include and execute…
-
Unscored —CVE-2007-4586 Public exploit
Multiple buffer overflows in php_iisfunc.dll in the iisfunc extension for PHP 5.2.0 and earlier allow context-dependent…
-
Unscored —
Multiple buffer overflows in Motorola Timbuktu Pro before 8.6.5 for Windows allow remote attackers to cause a denial of…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Easy Software Cafeteria escafeWeb (aka Tuigwaa) 1.0 through 1.0.4 allows re…
-
Unscored —CVE-2007-4582 Public exploit
Buffer overflow in the nvUnifiedControl.AUnifiedControl.1 ActiveX control in nvUnifiedControl.dll 1.1.45.0 in ACTi Netw…
-
Unscored —
The get_system_info command in Ignite-UX C.7.0 through C.7.3, and DynRootDisk (DRD) A.1.0.16.417 through A.2.0.0.592, o…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in InterWorx Hosting Control Panel (InterWorx-CP) Server Admin Leve…
-
Unscored —CVE-2007-4581 Public exploit
SQL injection vulnerability in acrotxt.php in WBB2-Addon: Acrotxt 1 allows remote attackers to execute arbitrary SQL co…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in InterWorx Hosting Control Panel (InterWorx-CP) Webmaster Level (…
-
Unscored —
Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a long string i…
-
Unscored —CVE-2007-4220 Public exploit
Directory traversal vulnerability in Motorola Timbuktu Pro before 8.6.5 for Windows allows remote attackers to create o…
-
Unscored —CVE-2007-4583 Public exploit
Multiple absolute path traversal vulnerabilities in the nvUtility.Utility.1 ActiveX control in nvUtility.dll 1.0.14.0 i…
-
Unscored —
Buffer underflow in redlight.sys in BufferZone 2.1 and 2.5 allows local users to cause a denial of service (crash) and …
-
Unscored —
Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (cr…
-
Unscored —
Sophos Anti-Virus for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (infinite loop) via…
-
Unscored —
Directory traversal vulnerability in Subversion before 1.4.5, as used by TortoiseSVN before 1.4.5 and possibly other pr…
-
Unscored —CVE-2006-7222 Public exploit
Buffer overflow in the CFLICStream::_deltachunk function in FLICSource.cpp in Media Player Classic (MPC) 6.4.9.0 allows…
-
Unscored —
Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to …
-
Medium —
OpenSymphony XWork vulnerable to improper input validation
Struts support in OpenSymphony XWork before 1.2.3, and 2.x before 2.0.4, as used in WebWork and Apache Struts, recursively evaluates all input as an Object-Graph Navigation Language (OGNL) expression when altSyntax is enabled, which allows remote attackers to…
-
Unscored —
Cosminexus Manager in Cosminexus Application Server 07-00 and later might assign the wrong user's group permissions to …
-
Unscored —
Unspecified vulnerability in Hitachi DABroker before 03-02-/D and Cosminexus DABroker before 02-04-/C and 03-05-/E allo…
-
Unscored —
clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary comman…
-
Unscored —
Asterisk Open Source 1.4.5 through 1.4.11, when configured to use an IMAP voicemail storage backend, allows remote atta…