CVEs published in August 2007
522 vulnerabilities, 55 critical, 0 exploited.
- olate olatedownloadMultiple cross-site scripting (XSS) vulnerabilities in Olate Download (od) 3.4.2 allow remote...4.3 Medium
- olate olatedownloadMultiple SQL injection vulnerabilities in download.php in Olate Download (od) 3.4.2 allow remote...7.5 High
- mozilla bugzillaThe WebService (XML-RPC) interface in Bugzilla 2.23.3 through 3.0.0 does not enforce permissions...5.0 Medium
- mozilla bugzillaemail_in.pl in Bugzilla 2.23.4 through 3.0.0 allows remote attackers to execute arbitrary...5.0 Medium
- skulltag team skulltagHeap-based buffer overflow in the Huffman decompression algorithm implemented in Skulltag 0.97d...6.8 Medium
- gnu gimpThe (1) psp (aka .tub), (2) bmp, (3) pcx, and (4) psd plugins in gimp allow user-assisted remote...4.3 Medium
- sylpheed, sylpheed-claws +1 moreFormat string vulnerability in the inc_put_error function in src/inc.c in Sylpheed 2.4.4, and...6.8 Medium
- xtermxterm, including 192-7.el4 in Red Hat Enterprise Linux and 208-3.1 in Debian GNU/Linux, sets the...2.1 Low
- torrenttraderTorrentTrader 1.07 and earlier sets insecure permissions for files in the root directory, which...4.6 Medium
- vavoomThe VStr::Resize function in str.cpp in Vavoom 1.24 and earlier allows remote attackers to cause...4.3 Medium
- vavoomBuffer overflow in the VThinker::BroadcastPrintf function in p_thinker.cpp in Vavoom 1.24 and...7.5 High
- vavoomFormat string vulnerability in the Say command in sv_main.cpp in Vavoom 1.24 and earlier allows...6.8 Medium
- michal marcinkowski soldat game server, soldat dedicated server +1 moreSoldat game server 1.4.2 and earlier, and dedicated server 2.6.2 and earlier, allows remote...7.8 High
- michal marcinkowski soldat game server, soldat dedicated server +1 moreSoldat game server 1.4.2 and earlier, and dedicated server 2.6.2 and earlier, allows remote...5.0 Medium
- teamspeak web serverMultiple cross-site scripting (XSS) vulnerabilities in TeamSpeak Server 2.0.20.1 allow remote...4.3 Medium
- teamspeak web serverThe WebAdmin interface in TeamSpeak Server 2.0.20.1 allows remote authenticated users with the...8.5 High
- phpThe Foreign Function Interface (ffi) extension in PHP 5.0.5 does not follow safe_mode...4.3 Medium
- phphq phuploaderUnrestricted file upload vulnerability in phUploader.php in phphq.Net phUploader 1.2 allows...7.5 High
- netiq identity manager, novell client login extension \(cle\) +1 moreThe Client Login Extension (CLE) in Novell Identity Manager before 3.5.1 20070730 stores the...2.1 Low
- spip** DISPUTED ** PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows...7.5 High
- phpressPHP remote file inclusion vulnerability in adisplay.php in PhPress 0.2.0 allows remote attackers...7.5 High
- ripe website manager website managerMultiple cross-site scripting (XSS) vulnerabilities in Ripe Website Manager 0.8.9 and earlier...3.5 Low
- ripe website manager website managerMultiple SQL injection vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote...6.0 Medium
- gnu tarDirectory traversal vulnerability in the contains_dot_dot function in src/names.c in GNU tar...6.8 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreThe date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a...5.0 Medium
- sun java system application serverThe Sun Admin Console in Sun Application Server 9.0_0.1 does not apply certain configuration...5.0 Medium
- clam anti-virus clamav, kolab server +1 moreClamAV before 0.91.2, as used in Kolab Server 2.0 through 2.2beta1 and other products, allows...4.3 Medium
- joomla eventlistSQL injection vulnerability in index.php in the EventList component (com_eventlist) 0.8 and...7.5 High
- rebellion rogue trooper, rival interactive prism +1 moreStack-based buffer overflow in Rebellion Asura engine, as used for the server in Rogue Trooper 1...6.8 Medium
- phpMultiple buffer overflows in the php_ntuser component for PHP 5.2.3 allow context-dependent...6.8 Medium
- joomla neorecruitSQL injection vulnerability in index.php in the NeoRecruit component (com_neorecruit) 1.4 and...7.5 High
- mambo remository, mamboserver mambo +1 moreSQL injection vulnerability in index.php in the RemoSitory component (com_remository) for Mambo...7.5 High
- joomla rsfilesDirectory traversal vulnerability in index.php in the RSfiles component (com_rsfiles) 1.0.2 and...5.0 Medium
- joomla nice talkSQL injection vulnerability in index.php in the Nice Talk component (com_nicetalk) 0.9.3 and...7.5 High
- joomla bibtexSQL injection vulnerability in index.php in the BibTeX component (com_jombib) 1.3 and earlier for...7.5 High
- sshkeychainUnspecified vulnerability in PassphraseRequester in SSHKeychain before 0.8.2 beta allows...6.9 Medium
- sshkeychainUnspecified vulnerability in TunnelRunner in SSHKeychain before 0.8.2 beta, and possibly later...6.9 Medium
- american financing email image uploadUnrestricted file upload vulnerability in output.php in American Financing eMail Image Upload 4.1...6.8 Medium
- grandstream sip phoneThe Grandstream SIP Phone GXV-3000 with firmware 1.0.1.7, Loader 1.0.0.6, and Boot 1.0.0.18...7.8 High
- sun solarisUnspecified vulnerability in the ata disk driver in Sun Solaris 10 on the x86 platform before...4.9 Medium
- ez publishThe tipafriend function in eZ publish before 3.8.9, and 3.9 before 3.9.3, does not limit access...5.0 Medium
- ez publisheZ publish before 3.8.9, and 3.9 before 3.9.3, does not properly check permissions on module...10.0 High
- sun solarisMultiple unspecified vulnerabilities in the ata disk driver in Sun Solaris 8, 9, and 10 on the...4.9 Medium
- gurur haber haberSQL injection vulnerability in uyeler2.php in Gurur haber 2.0 allows remote attackers to execute...7.5 High
- trend micro serverprotectMultiple buffer overflows in EarthAgent.exe in Trend Micro ServerProtect 5.58 for Windows before...10.0 High
- ecentrex voip client moduleBuffer overflow in the IUAComFormX ActiveX control in uacomx.ocx 2.0.1 in the eCentrex VOIP...6.8 Medium
- siemens gigaset se361 wlan routerMultiple cross-site scripting (XSS) vulnerabilities in the Siemens Gigaset SE361 WLAN router with...4.3 Medium
- dscripting.com d22-shoutboxCross-site scripting (XSS) vulnerability in D22-Shoutbox for Invision Power Board (IPB or IP...4.3 Medium
- linklisteMultiple PHP remote file inclusion vulnerabilities in index.php in Linkliste 1.2 allow remote...7.5 High
- butterflyPHP remote file inclusion vulnerability in visitor.php in Butterfly online visitors counter 1.08,...6.8 Medium
- Show moreLoading…