Archive
August 2007
Vulnerabilities first published in this month (UTC), newest first.
529 results · Feed
-
Unscored —
IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 does not properly revoke privileges on methods, which allows rem…
-
Unscored —
Stack-based buffer overflow in the AUTH_LIST_GROUPS_FOR_AUTHID function in IBM DB2 UDB 9.1 before Fixpak 3 allows attac…
-
Unscored —
SQL injection vulnerability in Admin.php in Olate Download (od) 3.4.1 allows remote attackers to execute arbitrary SQL …
-
Unscored —
ircu 2.10.12.03 and 2.10.12.04 does not associate a timestamp with ops privilege on an unused channel (zannel), which a…
-
Unscored —
Cisco VPN Client on Windows before 5.0.01.0600, and the 5.0.01.0600 InstallShield (IS) release, uses weak permissions f…
-
Unscored —
Multiple unspecified vulnerabilities in the Role Based Access Control (RBAC) functionality in Sun Solaris 8 allow remot…
-
Unscored —CVE-2007-4389 Public exploit
Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, with 3.17.5…
-
Unscored —CVE-2007-4391 Public exploit
Heap-based buffer overflow in Kakadu kdu_v32m.dll in Yahoo! Messenger 8.1.0.413 allows remote attackers to cause a deni…
-
Unscored —CVE-2007-4386 Public exploit
SQL injection vulnerability in search.php in GetMyOwnArcade allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —
Winamp 5.35 allows remote attackers to cause a denial of service (program stack overflow and application crash) via an …
-
Unscored —
The installation script for orarun on SUSE Linux before 20070810 places the oracle user into the disk group, which allo…
-
Unscored —CVE-2007-4390 Public exploit
The Command Line Interface (CLI), aka Adonis Administration Console, on the BlueCat Networks Adonis DNS/DHCP appliance …
-
Unscored —CVE-2007-4387 Public exploit
Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5 and 5.29…
-
Unscored —
Unspecified vulnerability in a "core clean" cron job created by the findutils-locate package on SUSE Linux 10.0 and 10.…
-
Unscored —
2wire 1701HG and 2071 Gateway routers, with 5.29.51 and possibly 3.17.5 software, have a blank password by default.
-
Unscored —
PHP remote file inclusion vulnerability in tracking.php in Trackeur 1 allows remote attackers to execute arbitrary PHP …
-
Unscored —CVE-2007-4384 Public exploit
Multiple PHP remote file inclusion vulnerabilities in depouilg.php3 in Stephane Pineau VOTE 1c allow remote attackers t…
-
Unscored —CVE-2007-4381 Public exploit
Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and J…
-
Unscored —CVE-2007-4385 Public exploit
OWASP Stinger before 2.5 allows remote attackers to bypass input validation routines by using multipart encoded request…
-
Unscored —CVE-2007-4382 Public exploit
CounterPath X-Lite 3.0 34025, and possibly eyeBeam, allows remote attackers to cause a denial of service (device crash)…
-
Unscored —
Babo Violent 2 2.08.00 and earlier allows remote attackers to cause a denial of service (application crash) via (1) a v…
-
Unscored —
Aclient in Symantec Altiris Deployment Solution 6 before 6.8 SP2 (6.8.378) allows local users to gain local System priv…
-
Unscored —
Babo Violent 2 2.08.00 does not validate the sender field of a chat message composed by a client, which allows remote a…
-
Unscored —
Unrestricted file upload vulnerability in banner-upload.php in Szymon Kosok Best Top List allows remote attackers to up…
-
Unscored —
The server in Babo Violent 2 2.08.00 and earlier does not properly implement password protection, which might allow rem…
-
Unscored —
Multiple format string vulnerabilities in Babo Violent 2 2.08.00 and earlier allow remote attackers to execute arbitrar…
-
Unscored —CVE-2007-4377 Public exploit
Stack-based buffer overflow in the IMAP service in SurgeMail 38k allows remote authenticated users to execute arbitrary…
-
Unscored —
Unspecified vulnerability in NetWin SurgeMail 38k on Windows Server 2003 has unknown impact and remote attack vectors. …
-
Unscored —CVE-2007-4375 Public exploit
The administrative interface (aka DkService.exe) in Diskeeper 9 Professional, 2007 Pro Premier, and probably other vers…
-
Unscored —
Multiple off-by-one errors in the sender.c in rsync 2.6.9 might allow remote attackers to execute arbitrary code via di…
-
Unscored —
Unrestricted file upload vulnerability in admin/pages/blog-add.php in Neuron Blog 1.1 allows remote attackers to upload…
-
Unscored —CVE-2007-4368 Public exploit
SQL injection vulnerability in /main in IBM Rational ClearQuest (CQ) Web 7.0.0.0-IFIX02 and 7.0.0.1 allows remote attac…
-
Unscored —
Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual fun…
-
Unscored —CVE-2007-4369 Public exploit
Directory traversal vulnerability in go/_files in SOTEeSKLEP before 4.0 allows remote attackers to read arbitrary files…
-
Unscored —
Multiple buffer overflows in the (1) client and (2) server in Racer 0.5.3 beta 5 allow remote attackers to execute arbi…
-
Unscored —
Stack-based buffer overflow in the giomgr process in ESRI ArcSDE service 9.2, as used with ArcGIS, allows remote attack…
-
Unscored —
Multiple stack-based buffer overflows in the Motive ActiveEmailTest.EmailData (ActiveUtils EmailData) ActiveX control i…
-
Unscored —
Unspecified vulnerability in Dell Remote Access Card 4 (DRAC4) with firmware 1.50 Build 02.16 allows remote attackers t…
-
Unscored —CVE-2007-4366 Public exploit
WengoPhone 2.1 allows remote attackers to cause a denial of service (device crash) via a SIP INVITE message without a C…
-
Unscored —
Cross-site scripting (XSS) vulnerability in eXV2 CMS 2.0.5 and earlier allows remote attackers to inject arbitrary web …