Archive
September 2007
Vulnerabilities first published in this month (UTC), newest first.
448 results · Feed
-
Unscored —
Buffer overflow in fcstat in devices.common.IBM.fc.rte in IBM AIX 5.2 and 5.3 allows local users to gain privileges via…
-
Unscored —
Sony Micro Vault Fingerprint Access Software, as distributed with Sony Micro Vault USM-F USB flash drives, installs a d…
-
Unscored —
PHP before 5.2.3 allows context-dependent attackers to cause a denial of service (application crash) via (1) a long str…
-
Unscored —
The iconv_substr function in PHP 5.2.4 and earlier allows context-dependent attackers to cause (1) a denial of service …
-
Unscored —
The perfstat kernel extension in bos.perf.perfstat in AIX 5.3 does not verify privileges when processing a SET call, wh…
-
Unscored —
Unspecified vulnerability in invscout in Inventory Scout in invscout.rte in IBM AIX 5.2 and 5.3 allows local users to d…
-
Unscored —
Multiple stack-based buffer overflows in the Earth Resource Mapping NCSView ActiveX control before 3.4.0.242 in NCSView…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Sophos Anti-Virus for Windows 6.x before 6.5.8 and 7.x before 7.0.1 allows …
-
Unscored —
checkrestart in debian-goodies before 0.34 allows local users to gain privileges via shell metacharacters in the name o…
-
Unscored —
Unrestricted file upload vulnerability in upload.php in Barbo91 1.1 allows remote attackers to upload and execute arbit…
-
Unscored —
Multiple unspecified vulnerabilities in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus …
-
Unscored —
The javadoc tool in Cosminexus Developer's Kit for Java in Cosminexus 7 and 7.5 can generate HTML documents that contai…
-
Unscored —
Multiple buffer overflows in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7…
-
Unscored —CVE-2007-4763 Public exploit
PHP remote file inclusion vulnerability in dbmodules/DB_adodb.class.php in PHP Object Framework (PHPOF) 20040226 and ea…
-
Unscored —CVE-2007-4762 Public exploit
Multiple SQL injection vulnerabilities in embadmin/login.asp in E-SMARTCART 1.0 allow remote attackers to execute arbit…
-
Unscored —
Directory traversal vulnerability in pawfaliki.php in Pawfaliki 0.5.1 allows remote attackers to list arbitrary files v…
-
Unscored —
PHP remote file inclusion vulnerability in menu.php in phpMytourney allows remote attackers to execute arbitrary PHP co…
-
Unscored —
Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service (client disconnect) by sending a…
-
Unscored —CVE-2007-4754 Public exploit
Format string vulnerability in the safe_bprintf function in acesrc/acebot_cmds.c in Alien Arena 2007 6.10 and earlier a…
-
Unscored —
Directory traversal vulnerability in the FTP client in Total Commander before 7.02 allows remote FTP servers to create …
-
Unscored —
The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service (device hang) v…
-
Unscored —
PHP remote file inclusion vulnerability in environment.php in AnyInventory 1.9.1 and 2.0, when register_globals is enab…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the AkoBook 3.42 and earlier component (com_akobook) for Mambo a…
-
Unscored —
The Cisco Video Surveillance IP Gateway Encoder/Decoder (Standalone and Module) firmware 1.8.1 and earlier, Video Surve…
-
Unscored —CVE-2007-4748 Public exploit
Buffer overflow in the PowerPlayer.dll ActiveX control in PPStream 2.0.1.3829 allows remote attackers to execute arbitr…
-
Unscored —
Multiple buffer overflows in the Broderbund Expressit 3DGreetings Player ActiveX control could allow remote attackers t…
-
Unscored —
The telnet service in Cisco Video Surveillance IP Gateway Encoder/Decoder (Standalone and Module) firmware 1.8.1 and ea…
-
Unscored —
The original patch for CVE-2007-3999 in svc_auth_gss.c in the RPCSEC_GSS RPC library in MIT Kerberos 5 (krb5) 1.4 throu…
-
Unscored —CVE-2007-3913 Public exploit
SQL injection vulnerability in Gforge before 3.1 allows remote attackers to execute arbitrary SQL commands via unspecif…
-
Unscored —
Heap-based buffer overflow in Apple iTunes before 7.4 allows remote attackers to cause a denial of service (application…
-
Unscored —
Buffer overflow in YoungZSoft CCProxy 6.2 and earlier allows remote attackers to execute arbitrary code via a long addr…
-
Unscored —
reprepro 1.3.0 through 2.2.3 does not properly verify signatures when updating repositories, which allows remote attack…
-
Unscored —CVE-2007-4735 Public exploit
Buffer overflow in Next Generation Software Virtual DJ (VDJ) 5.0 allows user-assisted remote attackers to execute arbit…
-
Unscored —
Cross-site scripting (XSS) vulnerability in admin/adminusers.php in Claroline before 1.8.6 allows remote authenticated …
-
Unscored —
Claroline before 1.8.6 allows remote authenticated administrators to obtain sensitive information via an invalid value …
-
Unscored —
The Aztech DSL600EU router, when WAN access to the web interface is disabled, does not properly block inbound traffic o…
-
Unscored —CVE-2007-4740 Public exploit
The HPRevolutionRegistryManager ActiveX control in Hp.Revolution.RegistryManager.dll 1 in Telecom Italy Alice Messenger…
-
Unscored —CVE-2007-4736 Public exploit
SQL injection vulnerability in category.php in CartKeeper CKGold Shopping Cart 2.0 allows remote attackers to execute a…
-
Unscored —CVE-2007-4737 Public exploit
Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0 allow remote attackers…
-
Unscored —CVE-2007-4734 Public exploit
Buffer overflow in Ots Labs OTSTurntables 1.00 allows user-assisted remote attackers to execute arbitrary code via a lo…