CVEs published in June 2007
564 vulnerabilities, 95 critical, 0 exploited.
- web-app.org webappThe displaypost function in cgi-bin/cgi-lib/forum_display.pl in web-app.org WebAPP before 0.9.9.7...6.5 Medium
- web-app.org webappMultiple cross-site scripting (XSS) vulnerabilities in cgi-bin/cgi-lib/search.pl in web-app.org...4.3 Medium
- web-app.org webappMultiple cross-site request forgery (CSRF) vulnerabilities in the administration of (1) polls, (2...5.0 Medium
- phpraiderMultiple SQL injection vulnerabilities in index.php in phpRaider 1.0.0 rc8 allow remote attackers...7.5 High
- access2aspMultiple cross-site scripting (XSS) vulnerabilities in access2asp 4.5 and earlier allow remote...4.3 Medium
- bitego bosdatagridMultiple cross-site scripting (XSS) vulnerabilities in bosDataGrid 2.50 and earlier allow remote...4.3 Medium
- clicktech clickgalleryCross-site scripting (XSS) vulnerability in edit_image.asp in ClickGallery Server 5.1 and earlier...4.3 Medium
- clicktech clickgallerySQL injection vulnerability in edit_image.asp in ClickGallery Server 5.1 and earlier allows...7.5 High
- adam van dongen phpbb component, com forum +1 morePHP remote file inclusion vulnerability in download.php in the Adam van Dongen Forum (com_forum)...6.8 Medium
- realnetworks helix player, realone player, realplayer +1 more +3 moreStack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in smlprstime.cpp...9.3 High
- canonical ubuntu linux, debian linux, mit kerberos 5 +2 moreStack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1...9.0 High
- mit kerberos 5, canonical ubuntu linux, debian linux +2 moreInteger signedness error in the gssrpc__svcauth_unix function in svc_auth_unix.c in the RPC...8.3 High
- mit kerberos 5, canonical ubuntu linux, debian linux +2 moreThe gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier...10.0 High
- canonical ubuntu linux, debian linux, net-dns net\ +2 moreNet::DNS before 0.60, a Perl module, allows remote attackers to cause a denial of service (stack...7.5 High
- diaMultiple unspecified vulnerabilities in Dia before 0.96.1-6 have unspecified attack vectors and...7.5 High
- sergey lyubka simple httpdSergey Lyubka Simple HTTPD (shttpd) 1.38 allows remote attackers to obtain sensitive information ...5.0 Medium
- microsoft internet explorerMultiple absolute path traversal vulnerabilities in Microsoft Internet Explorer 6 on Windows XP...4.3 Medium
- linux kernelThe sysfs_readdir function in the Linux kernel 2.6, as used in Red Hat Enterprise Linux (RHEL) 4...4.9 Medium
- kvirc irc clientThe parseIrcUrl function in src/kvirc/kernel/kvi_ircurl.cpp in KVIrc 3.2.0 allows user-assisted...9.3 High
- redhat enterprise linux, enterprise linux desktop +1 moreThe Linux kernel before 2.6.9-42.0.8 in Red Hat 4.4 allows local users to cause a denial of...4.6 Medium
- lebisoft zdefterMultiple cross-site scripting (XSS) vulnerabilities in defter_yaz.asp in Lebisoft zdefter 4.0...4.3 Medium
- sitedepth cmsDirectory traversal vulnerability in ShowImage.php in SiteDepth CMS 3.44 allows remote attackers...5.0 Medium
- dreamlogUnrestricted file upload vulnerability in upload.php in dreamLog (aka dreamblog) 0.5 allows...7.5 High
- pagetoolSQL injection vulnerability in index.php in pagetool 1.07 allows remote attackers to execute...7.5 High
- b1g b1gbbPHP remote file inclusion vulnerability in footer.inc.php in B1G b1gBB 2.24 allows remote...7.5 High
- nctsoft nctaudioeditor, nctaudiostudio +1 moreThe NCTAudioEditor2 ActiveX control in NCTWMAFile2.dll 2.6.2.157, as distributed in...9.3 High
- phpee power phloggerSQL injection vulnerability in include/get_userdata.php in Power Phlogger (PPhlogger) 2.2.5 and...7.5 High
- perception litewebLiteWEB 2.7 allows remote attackers to cause a denial of service (hang) via a large number of...5.0 Medium
- ibm websphere application serverThe web container in IBM WebSphere Application Server (WAS) before 6.0.2.21, and 6.1.x before 6.1...5.0 Medium
- key focus kf web serverCross-site scripting (XSS) vulnerability in index.wkf in KeyFocus (KF) web server 3.1.0 allows...4.3 Medium
- endonesiaMultiple SQL injection vulnerabilities in eNdonesia 8.4 allow remote attackers to execute...7.5 High
- vincent hor calendarixCalendarix 0.7.20070307 allows remote attackers to obtain sensitive information via (1) an...5.0 Medium
- vincent hor calendarixMultiple SQL injection vulnerabilities in Calendarix 0.7.20070307, when magic_quotes_gpc is...6.8 Medium
- vincent hor calendarixMultiple cross-site scripting (XSS) vulnerabilities in Calendarix 0.7.20070307, when...4.3 Medium
- frank mancuso mynewsSQL injection vulnerability in admin.php in MyNews 0.10, when magic_quotes_gpc is disabled,...6.8 Medium
- wiresharkOff-by-one error in the DHCP/BOOTP dissector in Wireshark before 0.99.6 allows remote attackers...5.0 Medium
- wiresharkWireshark before 0.99.6 allows remote attackers to cause a denial of service via malformed (1)...5.0 Medium
- wiresharkWireshark 0.99.5 allows remote attackers to cause a denial of service (memory consumption) via a...7.8 High
- wiresharkWireshark 0.99.5 and 0.10.x up to 0.10.14, when running on certain systems, allows remote...5.0 Medium
- wiresharkWireshark before 0.99.6 allows remote attackers to cause a denial of service (crash) via a...5.0 Medium
- nlnet labs net dnsHeader.pm in Net::DNS before 0.60, a Perl module, (1) generates predictable sequence IDs with a...4.3 Medium
- apple safariBuffer overflow in Apple Safari 3.0.2 on Windows XP SP2 allows user-assisted remote attackers to...9.3 High
- lhaca file archiverStack-based buffer overflow in Lhaca File Archiver before 1.21 allows user-assisted remote...6.8 Medium
- redhat cluster suiteBuffer overflow in cluster/cman/daemon/daemon.c in cman (redhat-cluster-suite) before 20070622...4.6 Medium
- redhat cluster suitedaemon.c in cman (redhat-cluster-suite) before 20070622 does not clear a buffer for reading...5.0 Medium
- apple mac os x, mac os x server +1 moreCRLF injection vulnerability in WebCore in Apple Mac OS X 10.3.9, 10.4.9 and later, and iPhone...4.3 Medium
- apple safari, iphone os +1 moreRace condition in Apple Safari 3 Beta before 3.0.2 on Mac OS X, Windows XP, Windows Vista, and...4.3 Medium
- apple mac os x, mac os x server +1 moreWebKit in Apple Mac OS X 10.3.9, 10.4.9 and later, and iPhone before 1.0.1 performs an "invalid...9.3 High
- ekgMemory leak in the token OCR functionality in ekg before 1:1.7~rc2-1etch1 on Debian GNU/Linux...5.0 Medium
- ekgekg before 1:1.7~rc2-1etch1 on Debian GNU/Linux Etch allows remote attackers to cause a denial of...5.0 Medium
- Show moreLoading…