Archive
August 2007
Vulnerabilities first published in this month (UTC), newest first.
529 results · Feed
-
Unscored —CVE-2007-4528 Public exploit
The Foreign Function Interface (ffi) extension in PHP 5.0.5 does not follow safe_mode restrictions, which allows contex…
-
Unscored —
Directory traversal vulnerability in the contains_dot_dot function in src/names.c in GNU tar allows user-assisted remot…
-
Unscored —
Soldat game server 1.4.2 and earlier, and dedicated server 2.6.2 and earlier, allows remote attackers to cause a denial…
-
Unscored —CVE-2007-3847 EPSS 13%
The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows rem…
-
Unscored —CVE-2007-4505 Public exploit
SQL injection vulnerability in index.php in the RemoSitory component (com_remository) for Mambo allows remote attackers…
-
Unscored —
Unspecified vulnerability in PassphraseRequester in SSHKeychain before 0.8.2 beta allows attackers to obtain sensitive …
-
Unscored —CVE-2007-4508 Public exploit
Stack-based buffer overflow in Rebellion Asura engine, as used for the server in Rogue Trooper 1.0 and earlier and Pris…
-
Unscored —CVE-2007-4509 Public exploit
SQL injection vulnerability in index.php in the EventList component (com_eventlist) 0.8 and earlier for Joomla! allows …
-
Unscored —CVE-2007-4503 Public exploit
SQL injection vulnerability in index.php in the Nice Talk component (com_nicetalk) 0.9.3 and earlier for Joomla! allows…
-
Unscored —
ClamAV before 0.91.2, as used in Kolab Server 2.0 through 2.2beta1 and other products, allows remote attackers to cause…
-
Unscored —CVE-2007-4502 Public exploit
SQL injection vulnerability in index.php in the BibTeX component (com_jombib) 1.3 and earlier for Joomla! allows remote…
-
Unscored —
The Grandstream SIP Phone GXV-3000 with firmware 1.0.1.7, Loader 1.0.0.6, and Boot 1.0.0.18 allows remote attackers to …
-
Unscored —
Unspecified vulnerability in TunnelRunner in SSHKeychain before 0.8.2 beta, and possibly later versions, allows local u…
-
Unscored —CVE-2007-4506 Public exploit
SQL injection vulnerability in index.php in the NeoRecruit component (com_neorecruit) 1.4 and earlier for Joomla! allow…
-
Unscored —
Directory traversal vulnerability in index.php in the RSfiles component (com_rsfiles) 1.0.2 and earlier for Joomla! all…
-
Unscored —
Unrestricted file upload vulnerability in output.php in American Financing eMail Image Upload 4.1 allows remote attacke…
-
Unscored —CVE-2007-4507 Public exploit
Multiple buffer overflows in the php_ntuser component for PHP 5.2.3 allow context-dependent attackers to cause a denial…
-
Unscored —
The Sun Admin Console in Sun Application Server 9.0_0.1 does not apply certain configuration changes persistently, whic…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Kai Blankenhorn Bitfolge simple and nice index file (aka snif) before 1.2.7…
-
Unscored —
Directory traversal vulnerability in Kai Blankenhorn Bitfolge simple and nice index file (aka snif) before 1.2.5 allows…
-
Unscored —
The tipafriend function in eZ publish before 3.8.9, and 3.9 before 3.9.3, does not limit access by anonymous users, whi…
-
Unscored —
Unspecified vulnerability in the ata disk driver in Sun Solaris 10 on the x86 platform before 20070821 allows local use…
-
Unscored —
eZ publish before 3.8.9, and 3.9 before 3.9.3, does not properly check permissions on module views that lack a policy f…
-
Unscored —CVE-2007-4491 Public exploit
SQL injection vulnerability in uyeler2.php in Gurur haber 2.0 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —
Multiple unspecified vulnerabilities in the ata disk driver in Sun Solaris 8, 9, and 10 on the x86 platform before 2007…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in the WordPress Classic 1.5 theme in WordPress before 2.1.3 allo…
-
Unscored —
PHP remote file inclusion vulnerability in visitor.php in Butterfly online visitors counter 1.08, when used with certai…
-
Unscored —CVE-2007-4486 Public exploit
Multiple PHP remote file inclusion vulnerabilities in index.php in Linkliste 1.2 allow remote attackers to execute arbi…
-
Unscored —CVE-2007-4478 EPSS 11%
Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6.0 and 7 allows user-assisted remote attackers…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in the Sirius 1.0 theme for WordPress allows remote attackers to …
-
Unscored —CVE-2007-4479 Public exploit
Cross-site scripting (XSS) vulnerability in search.html in Search Engine Builder allows remote attackers to inject arbi…
-
Unscored —CVE-2007-4219 EPSS 10%
Integer overflow in the RPCFN_SYNC_TASK function in StRpcSrv.dll, as used by the ServerProtect service (SpntSvc.exe), i…
-
Unscored —
Multiple buffer overflows in EarthAgent.exe in Trend Micro ServerProtect 5.58 for Windows before Security Patch 4 allow…
-
Unscored —CVE-2007-4489 Public exploit
Buffer overflow in the IUAComFormX ActiveX control in uacomx.ocx 2.0.1 in the eCentrex VOIP Client module allows remote…
-
Unscored —
The administration interface in the Planet VC-200M VDSL2 router allows remote attackers to cause a denial of service (a…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the Siemens Gigaset SE361 WLAN router with firmware 1.00.0 allow…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in the (1) Blix 0.9.1 and (2) Blix 0.9.1 Rus themes for WordPress…
-
Unscored —
Cross-site scripting (XSS) vulnerability in D22-Shoutbox for Invision Power Board (IPB or IP.Board) allows remote attac…
-
Unscored —CVE-2007-4218 EPSS 13%
Multiple buffer overflows in the ServerProtect service (SpntSvc.exe) in Trend Micro ServerProtect for Windows before 5.…
-
Unscored —CVE-2007-4482 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in the Pool 1.0.7 theme for WordPress allows remote attackers to …