CVEs published in July 2007
570 vulnerabilities, 71 critical, 0 exploited.
- apache derbyApache Derby SQL Injection4.0 Medium
- apache derbyApache Derby before 10.2.1.6 does not determine privilege requirements for lock table statements...4.0 Medium
- novell groupwiseThe Apache Web Server as used in Novell NetWare 6.5 and GroupWise allows remote attackers to...4.3 Medium
- novell access managerThe Linux Access Gateway in Novell Access Manager before 3.0 SP1 Release Candidate 1 (RC1) allows...7.5 High
- softlink europe oliver library management systemMultiple cross-site scripting (XSS) vulnerabilities in Oliver Library Management System allow...4.3 Medium
- imlibThe _LoadBMP function in imlib 1.9.15 and earlier allows context-dependent attackers to cause a...5.0 Medium
- mysqldumperMySQLDumper 1.21b through 1.23 REV227 uses a "Limit GET" statement in the .htaccess...7.5 High
- fujitsu primergy bx300The web interface in Fujitsu-Siemens Computers PRIMERGY BX300 Switch Blade allows remote...5.0 Medium
- fujitsu serverviewThe DBAsciiAccess CGI Script in the web interface in Fujitsu-Siemens Computers ServerView before...7.5 High
- debian gfaxgfax 0.4.2 and probably other versions creates temporary files insecurely, which allows local...7.2 High
- avscripts av arcadeSQL injection vulnerability in includes/view_page.php in AV Arcade 2.1b allows remote attackers...7.5 High
- php director directorSQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote...7.5 High
- webixir efendy blogCross-site scripting (XSS) vulnerability in ara.asp in Efendy Blog 1.0 allows remote attackers to...4.3 Medium
- esqlanelapseMultiple unspecified vulnerabilities in Esqlanelapse before 2.6 have unknown impact and attack...7.5 High
- php-fusionCross-site scripting (XSS) vulnerability in infusions/shoutbox_panel/shoutbox_panel.php in PHP...3.5 Low
- coppermine photo gallerySQL injection vulnerability in Coppermine Photo Gallery (CPG) before 1.4.11 allows remote...7.5 High
- wheatblogSQL injection vulnerability in admin/login.php in Wheatblog (wB) 1.1, when magic_quotes_gpc is...6.8 Medium
- doubleflex liesbeth base cmsLiesbeth base CMS stores sensitive information under the web root with insufficient access...5.0 Medium
- moodleCross-site scripting (XSS) vulnerability in index.php in Moodle 1.7.1 allows remote attackers to...4.3 Medium
- hp instant supportStack-based buffer overflow in the HPSDDX Class (SDD) ActiveX control in sdd.dll in HP Instant...7.6 High
- gimp, canonical ubuntu linux +1 moreInteger overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15...6.8 Medium
- oracle application server, rapid install web server +1 moreCross-site scripting (XSS) vulnerability in Rapid Install Web Server in Oracle Application Server...4.3 Medium
- bbs100Multiple unspecified vulnerabilities in bbs100 before 3.2 allow remote attackers to cause a...7.8 High
- bbs100Buffer overflow in bbs100 before 3.2 allows remote attackers to cause a denial of service (crash)...6.1 Medium
- microsoft internet explorer, ie +1 more** DISPUTED ** Microsoft Internet Explorer 6.0 and 7.0 allows remote attackers to fill Zones...7.8 High
- vastal i-tech buddy zoneSQL injection vulnerability in view_sub_cat.php in Buddy Zone 1.5 allows remote attackers to...7.5 High
- w3filerStack-based buffer overflow in W3Filer 2.1.3 allows remote FTP servers to cause a denial of...7.1 High
- gentoo glibc** DISPUTED ** Integer overflow in the process_envvars function in elf/rtld.c in glibc before 2...7.2 High
- intel core 2 duo e4000, core 2 duo e6000, core 2 extreme x6800 +2 moreThe Intel Core 2 Extreme processor X6800 and Core 2 Duo desktop processor E6000 and E4000...2.1 Low
- qt-cute quickticketDirectory traversal vulnerability in qti_checkname.php in QuickTicket 1.2 allows remote attackers...7.8 High
- nessusCross-site scripting (XSS) vulnerability in the Windows GUI in Nessus Vulnerability Scanner...4.3 Medium
- warzone 2100 resurrectionBuffer overflow in Warzone 2100 Resurrection before 2.0.7 allows remote attackers to cause a...7.1 High
- wordpress, wordpress mu +1 moreUnrestricted file upload vulnerability in (1) wp-app.php and (2) app.php in WordPress 2.2.1 and...6.5 Medium
- wordpress, wordpress mu +1 moreUnrestricted file upload vulnerability in WordPress before 2.2.1 and WordPress MU before 1.2.3...6.0 Medium
- pluxmlCross-site scripting (XSS) vulnerability in admin/auth.php in Pluxml 0.3.1 allows remote...4.3 Medium
- kurinton shttpdCross-site scripting (XSS) vulnerability in Kurinton sHTTPd 20070408 and earlier allows remote...4.3 Medium
- rainworx rwauction proMultiple cross-site scripting (XSS) vulnerabilities in search.asp in rwAuction Pro 5.0 allow...4.3 Medium
- qt-cute quicktalk forum, quickticket +1 moreMultiple SQL injection vulnerabilities in QuickTicket 1.2 build:20070621 and QuickTalk Forum 1.3...7.5 High
- qt-cute quicktalk guestbookSQL injection vulnerability in qtg_msg_view.php in QuickTalk guestbook 1.2 allows remote...7.5 High
- ibm os 400IBM OS/400 (aka i5/OS) V4R2M0 through V5R3M0 on iSeries machines sends responses to TCP SYN-FIN...7.8 High
- amx netlinx vnc activex controlMultiple buffer overflows in the AMX NetLinx VNC (AmxVnc) ActiveX control in AmxVnc.dll 1.0.13.0...7.6 High
- frank karau gl-sh deaf forumMultiple directory traversal vulnerabilities in GL-SH Deaf Forum 6.4.4 and earlier allow remote...6.4 Medium
- daniel toma webchatSQL injection vulnerability in login.php in WebChat 0.78 allows remote attackers to execute...7.5 High
- 3com 3cnj220The 3Com IntelliJack Switch NJ220 before 2.0.23 allows remote attackers to cause a denial of...5.0 Medium
- phpdirectorPHPDirector 0.21 and earlier stores the admin account name and password in config.php, which...7.2 High
- phpdirectorvideos.php in PHPDirector 0.21 and earlier allows remote attackers to obtain sensitive...7.8 High
- darThe blowfish mode in DAR before 2.3.4 uses weak Blowfish-CBC cryptography by (1) discarding...5.0 Medium
- firebirdsql firebirdInteger overflow in Firebird 2.0.0 allows remote authenticated users to cause a denial of service...6.8 Medium
- vastal i-tech buddy zoneMultiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote attackers to...7.5 High
- ripe website manager website managerRipe Website Manager 0.8.9 and earlier allows remote attackers to obtain configuration...7.8 High
- Show moreLoading…