Total
22706 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2016-5553 | 1 Oracle | 1 Solaris | 2017-07-28 | 4.7 MEDIUM | 5.0 MEDIUM |
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect availability via unknown vectors. | |||||
CVE-2016-5519 | 1 Oracle | 1 Glassfish Server | 2017-07-28 | 6.5 MEDIUM | 8.8 HIGH |
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to Java Server Faces. | |||||
CVE-2007-6186 | 1 Phpdevshell | 1 Phpdevshell | 2017-07-28 | 10.0 HIGH | N/A |
Unspecified vulnerability in PHPDevShell before 0.7.0 has unknown impact and attack vectors, involving a "minor security bug in repair & optimize database." | |||||
CVE-2007-6194 | 1 Hp | 1 Select Identity | 2017-07-28 | 10.0 HIGH | N/A |
Unspecified vulnerability in HP Select Identity 4.01 before 4.01.012 and 4.1x before 4.13.003 allows remote attackers to obtain unspecified access via unknown vectors. | |||||
CVE-2007-6201 | 1 Wesnoth | 1 Wesnoth | 2017-07-28 | 7.5 HIGH | N/A |
Unspecified vulnerability in Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows attackers to cause a denial of service (hang) via a "faulty add-on" and possibly execute other commands via unknown vectors related to the turn_cmd option. | |||||
CVE-2007-6225 | 1 Sun | 1 Solaris | 2017-07-28 | 4.9 MEDIUM | N/A |
Unspecified vulnerability in Sun Solaris 10, when 64bit mode is used on the x86 platform, allows local users in a Linux (lx) branded zone to cause a denial of service (panic) via unspecified vectors. | |||||
CVE-2007-5942 | 1 Bandersnatch | 1 Bandersnatch | 2017-07-28 | 4.0 MEDIUM | N/A |
Bandersnatch 0.4 allows remote attackers to obtain sensitive information via a malformed request for index.php with (1) a certain func parameter value; or (2) certain func, jid, page, and limit parameter values; which reveals the path in various error messages. | |||||
CVE-2007-5957 | 1 Ibm | 1 Informix Dynamic Server | 2017-07-28 | 4.9 MEDIUM | N/A |
Unspecified vulnerability in IBM Informix Dynamic Server (IDS) 10.00.TC3TL and 11.10.TB4TL on Windows allows attackers to cause a denial of service (application crash) via unspecified SQ_ONASSIST requests. | |||||
CVE-2007-5963 | 1 Kde | 1 Kde | 2017-07-28 | 4.7 MEDIUM | N/A |
Unspecified vulnerability in kdebase allows local users to cause a denial of service (KDM login inaccessible, or resource consumption) via unknown vectors. | |||||
CVE-2007-4553 | 1 Thomson | 1 St 2030 Sip Phone | 2017-07-28 | 5.0 MEDIUM | N/A |
The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service (device hang) via an INVITE message with a Via header that contains a '/' (slash) instead of the required space following the SIP version number. | |||||
CVE-2007-4697 | 1 Apple | 2 Mac Os X, Mac Os X Server | 2017-07-28 | 6.8 MEDIUM | N/A |
Unspecified vulnerability in WebCore in Apple Mac OS X 10.4 through 10.4.10 allows remote attackers to cause a denial of service (application termination) or execute arbitrary code via unknown vectors related to browser history, which triggers memory corruption. | |||||
CVE-2007-4710 | 1 Apple | 1 Mac Os X | 2017-07-28 | 9.3 HIGH | N/A |
Unspecified vulnerability in ColorSync in Apple Mac OS X 10.4.11 allows remote attackers to cause a denial of service (application termination) or execute arbitrary code via an image with a crafted ColorSync profile, which triggers memory corruption. | |||||
CVE-2007-4788 | 1 Cisco | 2 Content Switching Module With Ssl, Content Switching Modules | 2017-07-28 | 7.8 HIGH | N/A |
Cisco Content Switching Modules (CSM) 4.2 before 4.2.3a, and Cisco Content Switching Module with SSL (CSM-S) 2.1 before 2.1.2a, allow remote attackers to cause a denial of service (CPU consumption or reboot) via sets of out-of-order TCP packets with unspecified characteristics, aka CSCsd27478. | |||||
CVE-2007-4826 | 1 Quagga | 1 Quagga | 2017-07-28 | 3.5 LOW | N/A |
bgpd in Quagga before 0.99.9 allows explicitly configured BGP peers to cause a denial of service (crash) via a malformed (1) OPEN message or (2) a COMMUNITY attribute, which triggers a NULL pointer dereference. NOTE: vector 2 only exists when debugging is enabled. | |||||
CVE-2007-4833 | 1 Ibm | 1 Websphere Application Server | 2017-07-28 | 5.0 MEDIUM | N/A |
Unspecified vulnerability in the Edge Component in IBM WebSphere Application Server (WAS) 6.1 before Fix Pack 11 (6.1.0.11) has unknown impact and attack vectors, aka PK44789. | |||||
CVE-2007-4946 | 1 Jasmine Technologies | 1 Lettergrade | 2017-07-28 | 5.0 MEDIUM | N/A |
LetterGrade allows remote attackers to obtain sensitive information (installation path or account existence) via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. | |||||
CVE-2007-5270 | 1 Bendiken | 1 Boost Module For Drupal | 2017-07-28 | 7.5 HIGH | N/A |
Unspecified vulnerability in the Boost module before 4.7.x-1.0, and 5.x before 5.x-1.0, for Drupal allows remote attackers to create or overwrite arbitrary files, and conduct cross-site scripting attacks (XSS) via unspecified vectors. | |||||
CVE-2007-5476 | 3 Adobe, Apple, Opera | 3 Flash Player, Mac Os X, Opera Browser | 2017-07-28 | 10.0 HIGH | N/A |
Unspecified vulnerability in Adobe Flash Player 9.0.47.0 and earlier, when running on Opera before 9.24 on Mac OS X, has unknown "Highly Severe" impact and unknown attack vectors. | |||||
CVE-2007-5482 | 1 Sun | 2 Storagetek 3510, Storedge | 2017-07-28 | 6.4 MEDIUM | N/A |
Unspecified vulnerability in the FTP service in Sun StorEdge/StorageTek 3510 FC Array with firmware before 4.21 allows remote attackers, with access to the Ethernet management interface, to cause a denial of service (I/O request timeout and device hang) via unspecified vectors. | |||||
CVE-2007-5483 | 1 Ibm | 1 Websphere Application Server | 2017-07-28 | 10.0 HIGH | N/A |
Unspecified vulnerability in the Administrative Scripting Tools (such as wsadmin or ANT) in IBM WebSphere Application Server 5.x and 6.0.x has unknown impact and attack vectors. |