268081
|
- |
|
microsoft
|
windows_xp
|
The process scheduler in the Microsoft Windows XP kernel does not make use of the process statistics kept by the kernel, performs scheduling based on CPU billing gathered from periodic process sampli…
|
NVD-CWE-Other
|
CVE-2007-3724
|
2008-11-15 15:53 |
2007-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268082
|
- |
|
hp
|
openvms
|
The default configuration of the POP server in TCP/IP Services 5.6 for HP OpenVMS 8.3 does not log the source IP address or attempted username for login attempts, which might help remote attackers to…
|
NVD-CWE-Other
|
CVE-2007-3730
|
2008-11-15 15:53 |
2007-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268083
|
- |
|
avaya
|
ip_soft_phone
|
Multiple buffer overflows in unspecified ActiveX controls in COM objects in Avaya IP Softphone R5.2 before SP3, and R6.0, allow remote attackers to execute arbitrary code via unspecified vectors.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2007-3286
|
2008-11-15 15:52 |
2007-09-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268084
|
- |
|
xunlei
|
web_thunderbolt
|
The ThunderServer.webThunder.1 ActiveX control in xunlei Web Thunderbolt 1.7.3.109 allows remote attackers to download arbitrary files and conduct other unauthorized actions by invoking dangerous met…
|
NVD-CWE-Other
|
CVE-2007-3296
|
2008-11-15 15:52 |
2007-06-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268085
|
- |
|
iptel
|
serweb
|
Multiple PHP remote file inclusion vulnerabilities in SerWeb 0.9.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the _SERWEB[serwebdir] parameter to (1) html/load_apu.…
|
NVD-CWE-Other
|
CVE-2007-3359
|
2008-11-15 15:52 |
2007-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268086
|
- |
|
iptel
|
serweb
|
Successful exploitation requires that "register_globals" is enabled.
|
NVD-CWE-Other
|
CVE-2007-3359
|
2008-11-15 15:52 |
2007-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268087
|
- |
|
ibm
|
websphere_application_server
|
The web container in IBM WebSphere Application Server (WAS) before 6.0.2.21, and 6.1.x before 6.1.0.9, sends response data intended for a different request in certain circumstances after a closed con…
|
NVD-CWE-Other
|
CVE-2007-3397
|
2008-11-15 15:52 |
2007-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268088
|
- |
|
web-app.org
|
webapp
|
Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/cgi-lib/search.pl in web-app.org WebAPP before 0.9.9.7 allow remote attackers to inject arbitrary web script or HTML via a search string…
|
NVD-CWE-Other
|
CVE-2007-3417
|
2008-11-15 15:52 |
2007-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268089
|
- |
|
web-app.org
|
webapp
|
The displaypost function in cgi-bin/cgi-lib/forum_display.pl in web-app.org WebAPP before 0.9.9.7 does not display usernames in conjunction with real names, which makes it easier for remote authentic…
|
NVD-CWE-Other
|
CVE-2007-3418
|
2008-11-15 15:52 |
2007-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268090
|
- |
|
web-app.org
|
webapp
|
The editprofile3 function in cgi-bin/cgi-lib/user.pl in web-app.org WebAPP before 0.9.9.7 does not properly check the (1) themes.dat, (2) languages.dat, (3) profession.dat, (4) gen.dat, (5) marstat.d…
|
NVD-CWE-Other
|
CVE-2007-3419
|
2008-11-15 15:52 |
2007-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|