CVE-2007-10003 | Medium | 6.3 | 2023-10-29 | A vulnerability, which was classified as critical, has been found in The Hackers Diet Plugin up to 0.9.6b on WordPress. This issue affects some unknown process… |
CVE-2007-10002 | High | 7.3 | 2023-01-08 | A vulnerability, which was classified as critical, has been found in web-cyradm. Affected by this issue is some unknown functionality of the file auth.inc.php… |
CVE-2007-10001 | Low | 3.5 | 2023-01-05 | A vulnerability classified as problematic has been found in web-cyradm. This affects an unknown part of the file search.php. The manipulation of the argument s… |
CVE-2007-20001 | High | 7.5 | 2022-02-06 | A flaw was found in StarWind iSCSI target. An attacker could script standard iSCSI Initiator operation(s) to exhaust the StarWind service socket, which could l… |
CVE-2007-5967 | Medium | 6.5 | 2021-05-17 | A flaw in Mozilla's embedded certificate code might allow web sites to install root certificates on devices without user approval. |
CVE-2007-6758 | High | 7.5 | 2020-01-23 | Server-side request forgery (SSRF) vulnerability in feed-proxy.php in extjs 5.0.0. |
CVE-2007-4774 | Medium | 5.9 | 2020-01-15 | The Linux kernel before 2.4.36-rc1 has a race condition. It was possible to bypass systrace policies by flooding the ptraced process with SIGCONT signals, whic… |
CVE-2007-4773 | Critical | 9.8 | 2020-01-15 | Systrace before 1.6.0 has insufficient escape policy enforcement. |
CVE-2007-0158 | Critical | 9.8 | 2019-12-27 | thttpd 2007 has buffer underflow. |
CVE-2007-6745 | Critical | 9.8 | 2019-11-07 | clamav 0.91.2 suffers from a floating point exception when using ScanOLE2. |
CVE-2007-5743 | High | 7.5 | 2019-11-07 | viewvc 1.0.3 allows improper access control to files in a repository when using the "forbidden" configuration option. |
CVE-2007-3915 | Critical | 9.1 | 2019-11-07 | Mondo 2.24 has insecure handling of temporary files. |
CVE-2007-3732 | Medium | 5.5 | 2019-11-07 | In Linux 2.6 before 2.6.23, the TRACE_IRQS_ON function in iret_exc calls a C function without ensuring that the segments are set properly. The kernel's %fs nee… |
CVE-2007-0899 | Critical | 9.8 | 2019-11-06 | There is a possible heap overflow in libclamav/fsg.c before 0.100.0. |
CVE-2007-6763 | High | 8.8 | 2019-07-31 | SAS Drug Development (SDD) before 32DRG02 mishandles logout actions, which allows a user (who was previously logged in) to access resources by pressing a back… |
CVE-2007-6762 | Critical | 9.8 | 2019-07-27 | In the Linux kernel before 2.6.20, there is an off-by-one bug in net/netlabel/netlabel_cipso_v4.c where it is possible to overflow the doi_def->tags[] array. |
CVE-2007-5341 | Critical | 9.8 | 2017-08-18 | Remote code execution in the Venkman script debugger in Mozilla Firefox before 2.0.0.8. |
CVE-2007-5199 | Critical | 9.8 | 2017-08-18 | A single byte overflow in catalogue.c in X.Org libXfont 1.3.1 allows remote attackers to have unspecified impact. |
CVE-2007-6761 | High | 7.8 | 2017-04-24 | drivers/media/video/videobuf-vmalloc.c in the Linux kernel before 2.6.24 does not initialize videobuf_mapping data structures, which allows local users to trig… |
CVE-2007-6760 | Critical | 9.8 | 2017-04-07 | Dataprobe iBootBar (with 2007-09-20 and possibly later beta firmware) allows remote attackers to bypass authentication, and conduct power-cycle attacks on conn… |
CVE-2007-6759 | Critical | 9.8 | 2017-04-07 | Dataprobe iBootBar (with 2007-09-20 and possibly later released firmware) allows remote attackers to bypass authentication, and conduct power-cycle attacks on… |
CVE-2007-6757 | | | 2015-08-04 | GE Healthcare Centricity DMS 4.2, 4.1, and 4.0 has a password of Muse!Admin for the Museadmin user, which has unspecified impact and attack vectors. NOTE: it… |
CVE-2007-6756 | | | 2014-08-12 | ZOLL Defibrillator / Monitor M Series, E Series, and R Series have a default password for System Configuration mode, which allows physically proximate attacker… |
CVE-2007-6755 | | | 2013-10-11 | The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) algorithm contains point Q constants with a… |
CVE-2007-6746 | | | 2013-05-21 | telepathy-idle before 0.1.15 does not verify (1) that the issuer is a trusted CA, (2) that the server hostname matches a domain name in the subject's Common Na… |
CVE-2007-6754 | | | 2012-07-25 | The ipalloc function in libc/stdlib/malloc.c in jemalloc in libc for FreeBSD 6.4 and NetBSD does not properly allocate memory, which makes it easier for contex… |
CVE-2007-6753 | | | 2012-03-28 | Untrusted search path vulnerability in Shell32.dll in Microsoft Windows 2000, Windows XP, Windows Vista, Windows Server 2008, and Windows 7, when using an envi… |
CVE-2007-6752 | | | 2012-03-28 | Cross-site request forgery (CSRF) vulnerability in Drupal 7.12 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests… |
CVE-2007-6744 | | | 2012-01-19 | Flexera Macrovision InstallShield before 2008 sends a digital-signature password to an unintended application during certain signature operations involving .sp… |
CVE-2007-6751 | | | 2012-01-04 | Cross-site scripting (XSS) vulnerability in the MailForm plugin before 1.20 for Movable Type allows remote attackers to inject arbitrary web script or HTML via… |
CVE-2007-6750 | | | 2011-12-27 | The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris… |
CVE-2007-6743 | | | 2011-04-21 | Double free vulnerability in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0005 allows remote authenticated users to cause a denial of servic… |
CVE-2007-6742 | | | 2011-04-21 | The get_filter_list function in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0006 does not properly perform certain sub filter parsing, whic… |
CVE-2007-6741 | | | 2010-10-19 | The ftp_PORT function in FTPServer.py in pyftpdlib before 0.2.0 does not prevent TCP connections to privileged ports if the destination IP address matches the… |
CVE-2007-6740 | | | 2010-10-19 | The ftp_STOU function in FTPServer.py in pyftpdlib before 0.2.0 does not limit the number of attempts to discover a unique filename, which might allow remote a… |
CVE-2007-6739 | | | 2010-10-19 | FTPServer.py in pyftpdlib before 0.2.0 allows remote attackers to cause a denial of service via a long command. |
CVE-2007-6738 | | | 2010-10-19 | pyftpdlib before 0.1.1 does not choose a random value for the port associated with the PASV command, which makes it easier for remote attackers to obtain poten… |
CVE-2007-6737 | | | 2010-10-19 | FTPServer.py in pyftpdlib before 0.2.0 does not increment the attempted_logins count for a USER command that specifies an invalid username, which makes it easi… |
CVE-2007-6736 | | | 2010-10-19 | Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.2.0 allow remote authenticated users to access arbitrary files and directori… |
CVE-2007-6735 | | | 2010-04-05 | NWFTPD.nlm before 5.08.06 in the FTP server in Novell NetWare does not properly handle partial matches for container names in the FTPREST.TXT file, which allow… |
CVE-2007-6734 | | | 2010-04-05 | NWFTPD.nlm before 5.08.07 in the FTP server in Novell NetWare 6.5 SP7 does not properly implement the FTPREST.TXT NOREMOTE restriction, which allows remote aut… |
CVE-2007-6733 | | | 2010-03-16 | The nfs_lock function in fs/nfs/file.c in the Linux kernel 2.6.9 does not properly remove POSIX locks on files that are setgid without group-execute permission… |
CVE-2007-2281 | | | 2009-12-18 | Integer overflow in the _ncp32._NtrpTCPReceiveMsg function in rds.exe in the Cell Manager Database Service in the Application Recovery Manager component in HP… |
CVE-2007-2280 | | | 2009-12-18 | Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recovery Manager component in HP OpenView Storage Data Pr… |
CVE-2007-5475 | | | 2009-11-12 | Multiple buffer overflows in the Marvell wireless driver, as used in Linksys WAP4400N Wi-Fi access point with firmware 1.2.17 on the Marvell 88W8361P-BEM1 chip… |
CVE-2007-6732 | | | 2009-09-13 | Multiple buffer overflows in the dtt_load function in loaders/dtt_load.c Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbit… |
CVE-2007-6731 | | | 2009-09-13 | Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbitrary code via an OXM file with a negative value, which bypasses a check i… |
CVE-2007-6730 | | | 2009-09-10 | Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in the ZyXEL P-330W router allow remote attackers to hijack the auth… |
CVE-2007-6729 | | | 2009-09-10 | Cross-site scripting (XSS) vulnerability in the web management interface in the ZyXEL P-330W router allows remote attackers to inject arbitrary web script or H… |
CVE-2007-6728 | | | 2009-07-05 | Cross-site scripting (XSS) vulnerability in XMB 1.5 allows remote attackers to inject arbitrary web script or HTML via the MSN field during user registration. |
CVE-2007-6727 | | | 2009-07-05 | SQL injection vulnerability in topic.php in KerviNet Forum 1.1 allows remote attackers to execute arbitrary SQL commands via the forum parameter. |
CVE-2007-2238 | | | 2009-04-16 | Multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll), as used in Microsoft Intelligent Application Gateway (IAG) b… |
CVE-2007-4514 | | | 2009-04-15 | Unspecified vulnerability in HP ProCurve Manager and HP ProCurve Manager Plus 2.3 and earlier allows remote attackers to obtain sensitive information from the… |
CVE-2007-6726 | | | 2009-04-09 | Multiple cross-site scripting (XSS) vulnerabilities in Dojo 0.4.1 and 0.4.2, as used in Apache Struts and other products, allow remote attackers to inject arbi… |
CVE-2007-6725 | | | 2009-04-08 | The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly… |
CVE-2007-4475 | | | 2009-04-01 | Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows remote attackers to execute… |
CVE-2007-6724 | | | 2009-03-31 | Vidalia bundle before 0.1.2.18, when running on Windows, installs Privoxy with a configuration file (config.txt or config) that contains an insecure enable-rem… |
CVE-2007-6723 | | | 2009-03-31 | TorK before 0.22, when running on Windows and Mac OS X, installs Privoxy with a configuration file (config.txt or config) that contains insecure (1) enable-rem… |
CVE-2007-6722 | | | 2009-03-31 | Vidalia bundle before 0.1.2.18, when running on Windows and Mac OS X, installs Privoxy with a configuration file (config.txt or config) that contains insecure… |
CVE-2007-6721 | | | 2009-03-30 | The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack… |
CVE-2007-5543 | | | 2009-03-18 | Stack-based buffer overflow in Miranda IM 0.6.8 and 0.7.0 allows remote attackers to execute arbitrary code via a crafted Yahoo! Messenger packet. NOTE: this… |
CVE-2007-5542 | | | 2009-03-18 | Stack-based buffer overflow in Miranda IM 0.6.8 allows remote attackers to execute arbitrary code via a crafted Yahoo! Messenger packet. NOTE: this might over… |
CVE-2007-5289 | | | 2009-02-24 | HP Mercury Quality Center (QC) 9.2 and earlier, and possibly TestDirector, relies on cached client-side scripts to implement "workflow" and decisions about the… |
CVE-2007-2795 | | | 2009-01-27 | Multiple buffer overflows in Ipswitch IMail before 2006.21 allow remote attackers or authenticated users to execute arbitrary code via (1) the authentication f… |
CVE-2007-6720 | | | 2009-01-20 | libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the… |
CVE-2007-6719 | | | 2008-12-05 | SQL injection vulnerability in Wiz-Ad 1.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: the provenance of this informat… |
CVE-2007-0074 | | | 2008-11-17 | Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown… |
CVE-2007-0073 | | | 2008-11-17 | Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown… |
CVE-2007-0072 | | | 2008-11-17 | Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown… |
CVE-2007-6432 | | | 2008-10-31 | Stack-based buffer overflow in AldFs32.dll in Adobe PageMaker 7.0.1 and 7.0.2 allows user-assisted remote attackers to execute arbitrary code via a malformed… |
CVE-2007-6021 | | | 2008-10-30 | Heap-based buffer overflow in Adobe PageMaker 7.0.1 and 7.0.2 allows user-assisted remote attackers to execute arbitrary code via a .PMD file with a crafted fo… |
CVE-2007-5394 | | | 2008-10-30 | Stack-based buffer overflow in AldFs32.dll in Adobe PageMaker 7.0.1 and 7.0.2 allows user-assisted remote attackers to execute arbitrary code via a .PMD file w… |
CVE-2007-4349 | | | 2008-10-23 | The Shared Trace Service (aka OVTrace) in HP Performance Agent C.04.70 (aka 4.70), HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP O… |
CVE-2007-4350 | | | 2008-10-21 | Cross-site scripting (XSS) vulnerability in the management interface in HP SiteScope 9.0 build 911 allows remote attackers to inject arbitrary web script or HT… |
CVE-2007-6718 | | | 2008-10-20 | MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service (SIGSEGV and application crash) via (1) a malformed MP3 file, as demonstrated by… |
CVE-2007-6717 | | | 2008-09-11 | Buffer overflow in tftp in bos.net.tcp.client in IBM AIX 5.2.0 and 5.3.0 allows local users to gain privileges via unspecified vectors. |
CVE-2007-5348 | | | 2008-09-11 | Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3… |
CVE-2007-5474 | | | 2008-09-05 | The driver for the Linksys WRT350N Wi-Fi access point with firmware 2.00.17 on the Atheros AR5416-AC1E chipset does not properly parse the Atheros vendor-speci… |
CVE-2007-6716 | Medium | 5.5 | 2008-09-04 | fs/direct-io.c in the dio subsystem in the Linux kernel before 2.6.23 does not properly zero out the dio struct, which allows local users to cause a denial of… |
CVE-2007-1682 | | | 2008-08-27 | Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in SoftArtisans XFile before 2.4.0 allow remote attackers to execute a… |
CVE-2007-2952 | | | 2008-08-01 | Multiple stack-based buffer overflows in the filter service (aka k9filter.exe) in Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.32 allow (1) remote attack… |
CVE-2007-5400 | | | 2008-07-28 | Heap-based buffer overflow in the Shockwave Flash (SWF) frame handling in RealNetworks RealPlayer 10.5 Build 6.0.12.1483 might allow remote attackers to execut… |
CVE-2007-3653 | | | 2008-07-09 | Multiple cross-site scripting (XSS) vulnerabilities in Farsi Script (aka FaScript) FaName 1.0 allow remote attackers to inject arbitrary web script or HTML via… |
CVE-2007-3652 | Critical | 9.8 | 2008-07-09 | SQL injection vulnerability in class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to execute arbitrary SQL commands via the id pa… |
CVE-2007-3651 | Medium | 5.3 | 2008-07-09 | class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to obtain sensitive information via a '; (quote semicolon) sequence in the id… |
CVE-2007-3650 | Medium | 5.3 | 2008-07-09 | myWebland myBloggie 2.1.6 allow remote attackers to obtain sensitive information via (1) an invalid year parameter to calendar.php, reached through index.php… |
CVE-2007-1899 | | | 2008-07-09 | Multiple SQL injection vulnerabilities in myWebland myBloggie 2.1.6 allow remote attackers to execute arbitrary SQL commands via (1) the user_id parameter in a… |
CVE-2007-5671 | | | 2008-06-05 | HGFS.sys in the VMware Tools package in VMware Workstation 5.x before 5.5.6 build 80404, VMware Player before 1.0.6 build 80404, VMware ACE before 1.0.5 build… |
CVE-2007-5610 | | | 2008-06-04 | The DeleteSingleFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote atta… |
CVE-2007-5608 | | | 2008-06-04 | The DownloadFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attacker… |
CVE-2007-5607 | | | 2008-06-04 | Buffer overflow in the RegistryString function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 a… |
CVE-2007-5606 | | | 2008-06-04 | Buffer overflow in the MoveFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows… |
CVE-2007-5605 | | | 2008-06-04 | Buffer overflow in the GetFileTime function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allo… |
CVE-2007-5604 | | | 2008-06-04 | Buffer overflow in the ExtractCab function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allow… |
CVE-2007-5961 | | | 2008-05-23 | Cross-site scripting (XSS) vulnerability in the Red Hat Network channel search feature, as used in RHN and Red Hat Network Satellite before 5.0.2, allows remot… |
CVE-2007-5496 | | | 2008-05-23 | Cross-site scripting (XSS) vulnerability in setroubleshoot 2.0.5 allows local users to inject arbitrary web script or HTML via a crafted (1) file or (2) proces… |
CVE-2007-5495 | | | 2008-05-23 | sealert in setroubleshoot 2.0.5 allows local users to overwrite arbitrary files via a symlink attack on the sealert.log temporary file. |
CVE-2007-5962 | | | 2008-05-22 | Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux (RHEL) 5 and Fedora 6 through 8, and on Foresight Linux and rPath a… |
CVE-2007-5803 | | | 2008-05-13 | Multiple cross-site scripting (XSS) vulnerabilities in CGI programs in Nagios before 2.12 might allow remote attackers to inject arbitrary web script or HTML v… |
CVE-2007-6282 | | | 2008-05-08 | The IPsec implementation in Linux kernel before 2.6.25 allows remote routers to cause a denial of service (crash) via a fragmented ESP packet in which the firs… |