Archive
August 2007
Vulnerabilities first published in this month (UTC), newest first.
529 results · Feed
-
Unscored —
Buffer overflow in the Live Picture Corporation DXSurface.LivePicture.FlashPix.1 (DirectTransform FlashPix) ActiveX con…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in PHPCentral Poll Script 1.0 allow remote attackers to execute arbi…
-
Unscored —
The init script (sysstat.in) in sysstat 5.1.2 up to 7.1.6 creates /tmp/sysstat.run insecurely, which allows local users…
-
Unscored —
Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running …
-
Unscored —CVE-2007-4327 Public exploit
Multiple PHP remote file inclusion vulnerabilities in File Uploader 1.1 allow remote attackers to execute arbitrary PHP…
-
Unscored —CVE-2007-4321 Public exploit
fail2ban 0.8 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts t…
-
Unscored —
PHP remote file inclusion vulnerability in index.php in FindNix allows remote attackers to include the contents of arbi…
-
Unscored —CVE-2007-4325 Public exploit
PHP remote file inclusion vulnerability in index.php in Gaestebuch 1.5 allows remote attackers to execute arbitrary PHP…
-
Unscored —
DenyHosts 2.6 does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/…
-
Unscored —
BlockHosts before 2.0.4 does not properly parse (1) sshd and (2) vsftpd log files, which allows remote attackers to add…
-
Unscored —CVE-2007-4328 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Mapos Bilder Galerie 1.0 allow remote attackers to execute arbitr…
-
Unscored —CVE-2007-4329 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Web News 1.1 allow remote attackers to execute arbitrary PHP code…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Bilder Uploader 1.3 allow remote attackers to execute arbitrary P…
-
Unscored —
PHP remote file inclusion vulnerability in admin/addons/archive/archive.php in Ncaster 1.7.2 allows remote attackers to…
-
Unscored —
ActionScript 3 (AS3) in Adobe Flash Player 9.0.47.0, and other versions and other 9.0.124.0 and earlier versions, allow…
-
Unscored —CVE-2007-4330 Public exploit
PHP remote file inclusion vulnerability in shoutbox.php in Shoutbox 1.0 allows remote attackers to execute arbitrary PH…
-
Unscored —
The management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device allows remote authenticated administ…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.10.3 allow remote attackers to inject arbitrary web…
-
Unscored —CVE-2007-4312 Public exploit
SQL injection vulnerability in index.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary SQL …
-
Unscored —
PHP remote file inclusion vulnerability in public_includes/pub_blocks/activecontent.php in Php Blue Dragon CMS 3.0.0 al…
-
Unscored —CVE-2007-4305 Public exploit
Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in Systrace on NetBSD and OpenBSD allow …
-
Unscored —
The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel bef…
-
Unscored —
The finger daemon (in.fingerd) in Sun Solaris 7 through 9 allows remote attackers to list all accounts that have certai…
-
Unscored —
The AMD ATI atidsmxx.sys 3.0.502.0 driver on Windows Vista allows local users to bypass the driver signing policy, writ…
-
Unscored —
The management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device has a certain default password, whic…
-
Unscored —CVE-2007-4302 Public exploit
Multiple race conditions in certain system call wrappers in Generic Software Wrappers Toolkit (GSWTK) allow local users…
-
Unscored —CVE-2007-4314 Public exploit
pixlie.php in Pixlie 1.7 allows remote attackers to trigger the reading and JPEG image processing of files in a remote …
-
Unscored —
IBM Lotus Notes 5.x through 7.0.2 allows user-assisted remote authenticated administrators to obtain a cleartext notes.…
-
Unscored —CVE-2007-4318 Public exploit
Cross-site scripting (XSS) vulnerability in Forms/General_1 in the management interface in ZyNOS firmware 3.62(WK.6) on…
-
Unscored —
Multiple race conditions in (1) certain rules and (2) argument copying during VM protection, in CerbNG for FreeBSD 4.8 …
-
Unscored —
CerbNG for FreeBSD 4.8 does not properly implement VM protection when attempting to prevent system call wrapper races, …
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the management interface in ZyNOS firmware 3.62(WK.6) on …
-
Unscored —
The xfer_secondary_pool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35 performs reseed operati…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Storesprite 7 and earlier allow remote attackers to inject arbit…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the management interface in WebCart 2.20 through 2.25 allow remo…
-
Unscored —
The drm/i915 component in the Linux kernel before 2.6.22.2, when used with i965G and later chipsets, allows local users…
-
Unscored —
Stack-based buffer overflow in the readRadianceHeader function in (1) src/fileformat/rgbeio.cpp in pfstools 1.6.2 and (…
-
Unscored —
Unspecified vulnerability in assp.pl in Anti-Spam SMTP Proxy Server (ASSP) 1.3.3 has unknown impact and attack vectors.
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in yorumkaydet.asp in Dersimiz Haber Ekleme Modulu allow remote att…
-
Unscored —
The "Extended properties for entries" (entryproperties) plugin in serendipity_event_entryproperties.php in Serendipity …