261291
|
- |
|
av_scripts
|
av_tutorial_script
|
Multiple SQL injection vulnerabilities in changePW.php in AV Tutorial Script (avtutorial) 1.0, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) …
|
NVD-CWE-Other
|
CVE-2007-3691
|
2017-07-29 10:32 |
2007-07-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261292
|
- |
|
av_scripts
|
av_tutorial_script
|
Successful exploitation allows e.g. to change the administrator's password but requires that "magic_quotes_gpc" is disabled.
|
NVD-CWE-Other
|
CVE-2007-3691
|
2017-07-29 10:32 |
2007-07-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261293
|
- |
|
kddi
|
ezfactory_download_cgi
|
Directory traversal vulnerability in download.cgi in EZFactory KDDI Download CGI 1.x allows remote attackers to read and download arbitrary files via a .. (dot dot) in the name parameter.
|
NVD-CWE-Other
|
CVE-2007-3692
|
2017-07-29 10:32 |
2007-07-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261294
|
- |
|
sun
|
java_system_access_manager
|
Sun Java System Access Manager (formerly Java System Identity Server) before 20070710, when the message debug level is configured in the com.iplanet.services.debug.level property in AMConfig.properti…
|
NVD-CWE-Other
|
CVE-2007-3700
|
2017-07-29 10:32 |
2007-07-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261295
|
- |
|
silc
|
silc_client silc_toolkit
|
Buffer overflow in lib/silcclient/client_notify.c of SILC Client and SILC Toolkit before 1.1.2 allows remote attackers to cause a denial of service via "NICK_CHANGE" notifications.
|
NVD-CWE-Other
|
CVE-2007-3728
|
2017-07-29 10:32 |
2007-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261296
|
- |
|
hp
|
openvms
|
The default configuration of the POP server in TCP/IP Services 5.6 for HP OpenVMS 8.3 generates different responses depending on whether or not a username is valid, which allows remote attackers to e…
|
NVD-CWE-Other
|
CVE-2007-3729
|
2017-07-29 10:32 |
2007-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261297
|
- |
|
apple
|
safari
|
WebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before 1.0.1, does not properly handle the interaction between International Domain Name (IDN) support and Unicode fonts, which allows re…
|
CWE-59 CWE-16
Link Following Configuration
|
CVE-2007-3742
|
2017-07-29 10:32 |
2007-08-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261298
|
- |
|
apple
|
safari
|
Stack-based buffer overflow in bookmark handling in Apple Safari 3 Beta before Update 3.0.3 on Windows allows user-assisted remote attackers to cause a denial of service (application crash) or execut…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2007-3743
|
2017-07-29 10:32 |
2007-08-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261299
|
- |
|
apple
|
mac_os_x mac_os_x_server
|
Heap-based buffer overflow in the UPnP IGD (Internet Gateway Device Standardized Device Control Protocol) implementation in mDNSResponder on Apple Mac OS X 10.4.10 before 20070731 allows network-adja…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2007-3744
|
2017-07-29 10:32 |
2007-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
261300
|
- |
|
apple
|
core_audio_technologies
|
The Java interface to CoreAudio on Apple Mac OS X 10.3.9 and 10.4.10 contains an unsafe interface that is exposed by JDirect, which allows remote attackers to free arbitrary memory and thereby execut…
|
NVD-CWE-Other
|
CVE-2007-3745
|
2017-07-29 10:32 |
2007-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|