Archive
September 2007
Vulnerabilities first published in this month (UTC), newest first.
448 results · Feed
-
Unscored —
Unspecified vulnerability in Webmin before 1.370 on Windows allows remote authenticated users to execute arbitrary comm…
-
Unscored —
Off-by-one error in the ReadBlobString function in blob.c in ImageMagick before 6.3.5-9 allows context-dependent attack…
-
Unscored —
ImageMagick before 6.3.5-9 allows context-dependent attackers to cause a denial of service via a crafted image file tha…
-
Unscored —
Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to e…
-
Unscored —CVE-2007-4573 Public exploit
The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x86_6…
-
Unscored —
Multiple integer overflows in ImageMagick before 6.3.5-9 allow context-dependent attackers to execute arbitrary code vi…
-
Unscored —CVE-2007-5055 Public exploit
Multiple directory traversal vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to include and exe…
-
Unscored —CVE-2007-5053 Public exploit
Multiple incomplete blacklist vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitr…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute a…
-
Unscored —
PHP remote file inclusion vulnerability in admin.slideshow1.php in the Flash Slide Show (com_slideshow) component for J…
-
Unscored —CVE-2007-5062 Public exploit
account.php in Adam Scheinberg Flip 3.0 and earlier allows remote attackers to create administrative accounts via the u…
-
Unscored —CVE-2007-5064 Public exploit
Buffer overflow in a certain ActiveX control in Xunlei Web Thunder 5.6.9.344, possibly the DapPlayer ActiveX control in…
-
Unscored —CVE-2007-5063 Public exploit
Adam Scheinberg Flip 3.0 and earlier stores sensitive information under the web root with insufficient access control, …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in GreenSQL allow remote attackers to inject arbitrary web script o…
-
Unscored —CVE-2007-5061 Public exploit
SQL injection vulnerability in mods/banners/navlist.php in Clansphere 2007.4 allows remote attackers to execute arbitra…
-
Unscored —CVE-2007-5060 Public exploit
Cross-site request forgery (CSRF) vulnerability in the cpass functionality in an admin action in index.php in XCMS allo…
-
Unscored —
NetSupport Manager Client before 10.20.0004 allows remote attackers to bypass the (1) basic and (2) authentication sche…
-
Unscored —
Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Web administration interface in Barracuda Spam Firewall before firmware…
-
Unscored —
The main function in skkdic-expr.c in SKK Tools 1.2 allows local users to overwrite or delete arbitrary files via a sym…
-
Unscored —CVE-2007-5050 Public exploit
Directory traversal vulnerability in index.php in Neuron News 1.0 allows remote attackers to include and execute arbitr…
-
Unscored —
PHP remote file inclusion vulnerability in html/modules/extranet_profile/main.php in openEngine 1.9 beta1 allows remote…
-
Unscored —
Buffer overflow in the inotifytools_snprintf function in src/inotifytools.c in the inotify-tools library before 3.11 al…
-
Unscored —
Argument injection vulnerability in Apple QuickTime 7.1.5 and earlier, when running on systems with Mozilla Firefox bef…
-
Unscored —
The offer_account_by_email function in User.pm in the WebService for Bugzilla before 3.0.2, and 3.1.x before 3.1.2, doe…
-
Unscored —
Outpost Firewall Pro 4.0.1025.7828 does not properly validate certain parameters to System Service Descriptor Table (SS…
-
Unscored —
Ghost Security Suite beta 1.110 does not properly validate certain parameters to System Service Descriptor Table (SSDT)…
-
Unscored —
Heap-based buffer overflow in Lhaplus before 1.55 allows remote attackers to execute arbitrary code via a long filename…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Webmail interface for IceWarp Merak Mail Server before 9.0.0 allows rem…
-
Unscored —
G DATA InternetSecurity 2007 does not properly validate certain parameters to System Service Descriptor Table (SSDT) fu…
-
Unscored —CVE-2007-5052 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Vigile CMS 1.8 allow remote attackers to inject arb…
-
Unscored —
Norton Internet Security 2008 15.0.0.60 does not properly validate certain parameters to System Service Descriptor Tabl…
-
Unscored —
ZoneAlarm Pro 7.0.362.000 does not properly validate certain parameters to System Service Descriptor Table (SSDT) funct…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in PhpGedView 4.1.1 allow remote attackers to inject arbitrary web …
-
Unscored —
Kaspersky Internet Security 7.0.0.125 does not properly validate certain parameters to System Service Descriptor Table …
-
Unscored —CVE-2007-5036 Public exploit
Multiple buffer overflows in the AirDefense Airsensor M520 with firmware 4.3.1.1 and 4.4.1.4 allow remote authenticated…
-
Unscored —
Ghost Security Suite alpha 1.200 does not properly validate certain parameters to System Service Descriptor Table (SSDT…
-
Unscored —
distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote a…
-
Unscored —CVE-2004-2686 Public exploit
Directory traversal vulnerability in the vfs_getvfssw function in Solaris 2.6, 7, 8, and 9 allows local users to load a…
-
Unscored —
lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request wi…