CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities (CVSS score between 6 and 6.99)

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
14851 CVE-2007-4594 255 2007-08-29 2017-07-28
6.4
None Remote Low Not required Partial Partial None
Entrust Entelligence Security Provider (ESP) 8 does not properly validate certificates in certain circumstances involving (1) a chain that omits the root Certification Authority (CA) certificate, or an application that specifies disregarding (2) unknown revocation statuses during path validation or (3) certain errors in the certification path, which might allow context-dependent attackers to spoof certificate authentication. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
14852 CVE-2007-4593 DoS 2007-08-29 2008-11-15
6.9
Admin Local Medium Not required Complete Complete Complete
Unspecified vulnerability in vstor2-ws60.sys in VMWare Workstation 6.0 allows local users to cause a denial of service (host operating system crash) via unspecified vectors, as demonstrated by the DC2 test suite, possibly a related issue to CVE-2007-4591. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
14853 CVE-2007-4591 DoS +Priv 2007-08-29 2017-07-28
6.9
Admin Local Medium Not required Complete Complete Complete
vstor-ws60.sys in VMWare Workstation 6.0 allows local users to cause a denial of service (host operating system crash) and possibly gain privileges by sending a small file buffer size value to the FsSetVolumeInformation IOCTL handler with an FsSetFileInformation subcode.
14854 CVE-2007-4578 189 DoS Exec Code 2007-08-28 2018-10-15
6.8
None Remote Medium Not required Partial Partial Partial
Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UPX packed file, resulting from an "integer cast around". NOTE: as of 20070828, the vendor says this is a DoS and the researcher says this allows code execution, but the researcher is reliable.
14855 CVE-2007-4569 264 Bypass 2007-09-21 2017-09-28
6.8
Admin Local Low Single system Complete Complete Complete
backend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is configured and "shutdown with password" is enabled, allows remote attackers to bypass the password requirement and login to arbitrary accounts via unspecified vectors.
14856 CVE-2007-4568 119 Exec Code Overflow 2007-10-05 2018-10-15
6.8
None Remote Medium Not required Partial Partial Partial
Integer overflow in the build_range function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values, which triggers a heap-based buffer overflow.
14857 CVE-2007-4559 22 Dir. Trav. 2007-08-27 2008-09-05
6.8
User Remote Medium Not required Partial Partial Partial
Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.
14858 CVE-2007-4556 DoS Exec Code 2007-08-27 2018-10-26
6.8
User Remote Medium Not required Partial Partial Partial
Struts support in OpenSymphony XWork before 1.2.3, and 2.x before 2.0.4, as used in WebWork and Apache Struts, recursively evaluates all input as an Object-Graph Navigation Language (OGNL) expression when altSyntax is enabled, which allows remote attackers to cause a denial of service (infinite loop) or execute arbitrary code via form input beginning with a "%{" sequence and ending with a "}" character.
14859 CVE-2007-4549 119 Exec Code Overflow 2007-08-27 2017-11-21
6.8
User Remote Medium Not required Partial Partial Partial
Multiple buffer overflows in ALPass 2.7 English and 3.02 Korean allow user-assisted remote attackers to execute arbitrary code via an ALPass DB (APW) file containing (1) a long file-key or (2) a "Site Information and Folder entry" with a ciphertext_length value much larger than the plaintext_length value.
14860 CVE-2007-4545 22 Dir. Trav. 2007-08-27 2018-10-15
6.8
User Remote Medium Not required Partial Partial Partial
Multiple directory traversal vulnerabilities in Unreal Commander 0.92 build 565 and 573 allow user-assisted remote attackers to create or overwrite arbitrary files via a .. (dot dot) in a filename within a (1) ZIP or (2) RAR archive.
14861 CVE-2007-4537 Exec Code Overflow 2007-08-27 2018-10-15
6.8
None Remote Medium Not required Partial Partial Partial
Heap-based buffer overflow in the Huffman decompression algorithm implemented in Skulltag 0.97d-beta4.1 and earlier allows remote attackers to execute arbitrary code via a crafted UDP packet.
14862 CVE-2007-4533 Exec Code 2007-08-24 2017-07-28
6.8
User Remote Medium Not required Partial Partial Partial
Format string vulnerability in the Say command in sv_main.cpp in Vavoom 1.24 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a chat message, related to a call to the BroadcastPrintf function.
14863 CVE-2007-4522 Exec Code Sql XSS 2007-08-24 2018-10-15
6.0
User Remote Medium Single system Partial Partial Partial
Multiple SQL injection vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via one or more of the following vectors: the (1) id parameter to (a) pages/delete_page.php, (b) navigation/delete_menu.php, and (c) navigation/delete_item.php in admin/; the (2) menu_id, (3) name, (3) page_id, and (4) url parameters in (d) admin/navigation/do_new_item.php; the (5) new_menuname parameter in (e) admin/navigation/do_new_nav.php; and (6) area1, name, and url parameters to (f) admin/pages/do_new_page.php. NOTE: some vectors might be reachable through the url and name parameters to (g) admin/navigation/new_nav_item.php. NOTE: the original disclosure does not precisely state which vectors are associated with SQL injection versus XSS.
14864 CVE-2007-4517 119 Exec Code Overflow 2007-11-08 2018-10-15
6.0
User Remote Medium Single system Partial Partial Partial
Buffer overflow in the XDB.XDB_PITRIG_PKG.PITRIG_DROPMETADATA procedure in Oracle 10g R2 allows remote authenticated users to execute arbitrary code via a long (1) OWNER or (2) NAME argument.
14865 CVE-2007-4508 Exec Code Overflow 2007-08-23 2018-10-15
6.8
User Remote Medium Not required Partial Partial Partial
Stack-based buffer overflow in Rebellion Asura engine, as used for the server in Rogue Trooper 1.0 and earlier and Prism 1.1.1.0 and earlier, allows remote attackers to execute arbitrary code via a long string in a 0xf007 packet for the challenge B query.
14866 CVE-2007-4507 DoS Exec Code Overflow 2007-08-23 2017-09-28
6.8
User Remote Medium Not required Partial Partial Partial
Multiple buffer overflows in the php_ntuser component for PHP 5.2.3 allow context-dependent attackers to cause a denial of service or execute arbitrary code via long arguments to the (1) ntuser_getuserlist, (2) ntuser_getuserinfo, (3) ntuser_getusergroups, or (4) ntuser_getdomaincontroller functions.
14867 CVE-2007-4501 +Info 2007-08-23 2008-09-05
6.9
Admin Local Medium Not required Complete Complete Complete
Unspecified vulnerability in PassphraseRequester in SSHKeychain before 0.8.2 beta allows attackers to obtain sensitive information (passwords) via unknown vectors, related to "poor protection."
14868 CVE-2007-4500 +Priv 2007-08-23 2008-09-05
6.9
Admin Local Medium Not required Complete Complete Complete
Unspecified vulnerability in TunnelRunner in SSHKeychain before 0.8.2 beta, and possibly later versions, allows local users to gain privileges via unspecified vectors.
14869 CVE-2007-4499 Exec Code 2007-08-23 2008-11-15
6.8
User Remote Medium Not required Partial Partial Partial
Unrestricted file upload vulnerability in output.php in American Financing eMail Image Upload 4.1 allows remote attackers to upload and execute arbitrary code via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
14870 CVE-2007-4496 399 Exec Code 2007-09-21 2019-08-01
6.5
Admin Local Network High Single system Complete Complete Complete
Unspecified vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows authenticated users with administrative privileges on a guest operating system to corrupt memory and possibly execute arbitrary code on the host operating system via unspecified vectors.
14871 CVE-2007-4489 Exec Code Overflow 2007-08-22 2017-09-28
6.8
User Remote Medium Not required Partial Partial Partial
Buffer overflow in the IUAComFormX ActiveX control in uacomx.ocx 2.0.1 in the eCentrex VOIP Client module allows remote attackers to execute arbitrary code via a long Username argument to the ReInit method.
14872 CVE-2007-4485 Exec Code File Inclusion 2007-08-22 2018-10-15
6.8
User Remote Medium Not required Partial Partial Partial
PHP remote file inclusion vulnerability in visitor.php in Butterfly online visitors counter 1.08, when used with certain older versions of PHP with improper SERVER superglobal handling, allows remote attackers to execute arbitrary PHP code via a URL in the _SERVER[DOCUMENT_ROOT] parameter. NOTE: it could be argued that this vulnerability is caused by a problem in PHP and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in Butterfly online visitors counter.
14873 CVE-2007-4466 119 Exec Code Overflow 2007-10-09 2017-07-28
6.8
None Remote Medium Not required Partial Partial Partial
Multiple stack-based buffer overflows in Electronic Arts (EA) SnoopyCtrl ActiveX control (NPSnpy.dll) allow remote attackers to execute arbitrary code via unspecified methods and parameters.
14874 CVE-2007-4457 22 Dir. Trav. 2007-08-21 2018-10-15
6.4
None Remote Low Not required Partial Partial None
Directory traversal vulnerability in forumreply.php in Dalai Forum 1.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the chemin parameter.
14875 CVE-2007-4454 Exec Code 2007-08-21 2018-10-15
6.8
User Remote Medium Not required Partial Partial Partial
Eval injection vulnerability in environment.php in Olate Download (od) 3.4.1 allows context-dependent attackers to execute arbitrary code via a crafted version string, as referenced by the (1) PDO::ATTR_SERVER_VERSION or (2) PDO::ATTR_CLIENT_VERSION attribute.
14876 CVE-2007-4438 287 2007-08-20 2017-07-28
6.8
None Remote Medium Not required Partial Partial Partial
Session fixation vulnerability in Ampache before 3.3.3.5 allows remote attackers to hijack web sessions via unspecified vectors.
14877 CVE-2007-4437 Exec Code Sql 2007-08-20 2017-07-28
6.8
None Remote Medium Not required Partial Partial Partial
SQL injection vulnerability in albums.php in Ampache before 3.3.3.5 allows remote attackers to execute arbitrary SQL commands via the match parameter. NOTE: some details are obtained from third party information.
14878 CVE-2007-4431 Bypass 2007-08-20 2008-11-15
6.8
None Remote Medium Not required Partial Partial Partial
Cross-domain vulnerability in Apple Safari for Windows 3.0.3 and earlier allows remote attackers to bypass the Same Origin Policy, with access from local zones to external domains, via a certain body.innerHTML property value, aka "classic JavaScript frame hijacking."
14879 CVE-2007-4428 Exec Code 2007-08-20 2017-07-28
6.8
None Remote Medium Not required Partial Partial Partial
Lhaz 1.33 allows remote attackers to execute arbitrary code via unknown vectors, as actively exploited in August 2007 by the Exploit-LHAZ.a gzip file, a different issue than CVE-2006-4116.
14880 CVE-2007-4425 DoS Exec Code Overflow 2007-08-20 2018-10-15
6.0
None Remote Medium Single system Partial Partial Partial
Multiple buffer overflows in Live for Speed (LFS) demo, S1, and S2 allow remote authenticated users to (1) cause a denial of service (server crash) and probably execute arbitrary code via an ID 3 packet with a long nickname field, and (2) cause a denial of service (server crash) via an ID 10 packet containing a long string corresponding to an unavailable track.
14881 CVE-2007-4417 2007-08-18 2017-07-28
6.0
None Remote Medium Single system Partial Partial Partial
IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 does not properly revoke privileges on methods, which allows remote authenticated users to execute a method after revocation until the routine auth cache is flushed.
14882 CVE-2007-4415 +Priv 2007-08-18 2018-10-15
6.8
Admin Local Low Single system Complete Complete Complete
Cisco VPN Client on Windows before 5.0.01.0600, and the 5.0.01.0600 InstallShield (IS) release, uses weak permissions for cvpnd.exe (Modify granted to Interactive Users), which allows local users to gain privileges via a modified cvpnd.exe.
14883 CVE-2007-4414 +Priv 2007-08-18 2017-07-28
6.8
Admin Local Low Single system Complete Complete Complete
Cisco VPN Client on Windows before 4.8.02.0010 allows local users to gain privileges by enabling the "Start Before Logon" (SBL) and Microsoft Dial-Up Networking options, and then interacting with the dial-up networking dialog box.
14884 CVE-2007-4410 2007-08-18 2018-10-15
6.0
User Remote Medium Single system Partial Partial Partial
ircu 2.10.12.05 and earlier does not properly synchronize a kick action in certain cross scenarios, which allows remote authenticated operators to prevent later kick or de-op actions from non-local ops.
14885 CVE-2007-4407 2007-08-18 2018-10-15
6.4
None Remote Low Not required None Partial Partial
ircu 2.10.12.03 and 2.10.12.04 does not associate a timestamp with ops privilege on an unused channel (zannel), which allows remote attackers to (1) set or remove certain channel modes via a "netriding" attack or (2) take over a channel by joining an unlinked server with the A/Upass and then setting a new Apass.
14886 CVE-2007-4403 264 Exec Code 2007-08-18 2018-10-15
6.8
User Remote Medium Not required Partial Partial Partial
The mIRC Control Plug-in for Winamp allows user-assisted remote attackers to execute arbitrary code via the '|' (pipe) shell metacharacter in the name of the song in a .mp3 file.
14887 CVE-2007-4402 Exec Code 2007-08-18 2018-10-15
6.8
User Remote Medium Not required Partial Partial Partial
Multiple unspecified scripts in mIRC allow user-assisted remote attackers to execute arbitrary code via the '|' (pipe) shell metacharacter in the name of the song in a .mp3 file.
14888 CVE-2007-4401 Exec Code 2007-08-18 2018-10-15
6.8
User Remote Medium Not required Partial Partial Partial
Multiple CRLF injection vulnerabilities in the Advanced mIRC Integration Plugin and possibly other unspecified scripts in mIRC allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.
14889 CVE-2007-4400 Exec Code 2007-08-18 2018-10-15
6.8
User Remote Medium Not required Partial Partial Partial
CRLF injection vulnerability in the included media script in Konversation allows user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.
14890 CVE-2007-4399 Exec Code 2007-08-18 2018-10-15
6.8
User Remote Medium Not required Partial Partial Partial
CRLF injection vulnerability in the xmms.bx 1.0 script for BitchX allows user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.
14891 CVE-2007-4398 Exec Code 2007-08-18 2018-10-15
6.8
User Remote Medium Not required Partial Partial Partial
Multiple CRLF injection vulnerabilities in the (1) now-playing.rb and (2) xmms.pl 1.1 scripts for WeeChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.
14892 CVE-2007-4397 Exec Code 2007-08-18 2018-10-15
6.8
User Remote Medium Not required Partial Partial Partial
Multiple CRLF injection vulnerabilities in (1) xmms-thing 1.0, (2) XMMS Remote Control Script 1.07, (3) Disrok 1.0, (4) a2x 0.0.1, (5) Another xmms-info script 1.0, (6) XChat-XMMS 0.8.1, and other unspecified scripts for XChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.
14893 CVE-2007-4386 Exec Code Sql 2007-08-17 2017-09-28
6.0
None Remote Medium Single system Partial Partial Partial
SQL injection vulnerability in search.php in GetMyOwnArcade allows remote attackers to execute arbitrary SQL commands via the query parameter.
14894 CVE-2007-4385 Bypass 2007-08-17 2018-10-15
6.8
User Remote Medium Not required Partial Partial Partial
OWASP Stinger before 2.5 allows remote attackers to bypass input validation routines by using multipart encoded requests instead of form-urlencoded requests. NOTE: this might be used to expose vulnerabilities in applications that would otherwise be protected by the validation routines.
14895 CVE-2007-4384 Exec Code File Inclusion 2007-08-17 2018-10-15
6.8
None Remote Medium Not required Partial Partial Partial
Multiple PHP remote file inclusion vulnerabilities in depouilg.php3 in Stephane Pineau VOTE 1c allow remote attackers to execute arbitrary PHP code via a URL in the (1) NomVote and (2) FilePalHex parameters.
14896 CVE-2007-4383 Exec Code File Inclusion 2007-08-17 2018-10-15
6.8
None Remote Medium Not required Partial Partial Partial
** DISPUTED ** PHP remote file inclusion vulnerability in tracking.php in Trackeur 1 allows remote attackers to execute arbitrary PHP code via a URL in the header parameter. NOTE: CVE and a third party dispute this vulnerability because header is defined before use. The researcher is known to be unreliable.
14897 CVE-2007-4378 Exec Code 2007-08-16 2018-10-15
6.8
User Remote Medium Not required Partial Partial Partial
Multiple format string vulnerabilities in Babo Violent 2 2.08.00 and earlier allow remote attackers to execute arbitrary code via format string specifiers in (1) a message or (2) certain data associated with an admin login.
14898 CVE-2007-4377 Exec Code Overflow 2007-08-16 2017-10-18
6.0
User Remote Medium Single system Partial Partial Partial
Stack-based buffer overflow in the IMAP service in SurgeMail 38k allows remote authenticated users to execute arbitrary code via a long argument to the SEARCH command. NOTE: this might overlap CVE-2007-4372.
14899 CVE-2007-4376 2007-08-16 2018-10-15
6.8
User Remote Medium Not required Partial Partial Partial
Unrestricted file upload vulnerability in banner-upload.php in Szymon Kosok Best Top List allows remote attackers to upload and execute arbitrary PHP files in banners/.
14900 CVE-2007-4373 Bypass 2007-08-16 2018-10-15
6.8
User Remote Medium Not required Partial Partial Partial
The server in Babo Violent 2 2.08.00 and earlier does not properly implement password protection, which might allow remote attackers to bypass authentication by reconnecting after a connection closes.
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.