Browse CVEs

MEDIUM 5.0 CVE-2007-3477 The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU cons… Gd Graphics Library after 2.0.35 Fix from $1,6002007-06-28 HIGH 7.8 CVE-2007-3185 Apple Safari Beta 3.0.1 for Windows public beta allows remote attackers to cause a denial of service (crash) via unspecified DHTML manipulations that… Safari Mitigation only Fix from $1,9502007-06-12 MEDIUM 5.0 CVE-2007-3114 Memory leak in server/MaraDNS.c in MaraDNS before 1.2.12.05, and 1.3.x before 1.3.03, allows remote attackers to cause a denial of service (memory co… Maradns Patch available Fix from $1,6002007-06-07 HIGH 7.8 CVE-2007-3115 Multiple memory leaks in server/MaraDNS.c in MaraDNS before 1.2.12.06, and 1.3.x before 1.3.05, allow remote attackers to cause a denial of service (… Maradns Patch available Fix from $1,9502007-06-07 MEDIUM 5.0 CVE-2007-3116 Memory leak in server/MaraDNS.c in MaraDNS 1.2.12.06 and 1.3.05 allows remote attackers to cause a denial of service (memory consumption) via unspeci… Maradns Patch available Fix from $1,6002007-06-07 MEDIUM 5.0 CVE-2007-1593 The administrative service in Symantec Veritas Volume Replicator (VVR) for Windows 3.1 through 4.3, and VVR for Unix 3.5 through 5.0, in Symantec Sto… Veritas Volume Replicator Patch available Fix from $1,6002007-06-04 HIGH 9.3 CVE-2007-2884EPSS 36% Multiple stack-based buffer overflows in Microsoft Visual Basic 6 allow user-assisted remote attackers to cause a denial of service (CPU consumption)… Visual Basic No fix yet Fix from $1,9502007-05-30 HIGH 7.8 CVE-2007-1673 unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a … Amavis after 7.3.0.5 Fix from $1,9502007-05-09 HIGH 9.3 CVE-2007-1747EPSS 32% Unspecified vulnerability in MSO.dll in Microsoft Office 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and 2007 allows user-assisted remote attackers t… Office Mitigation only Fix from $1,9502007-05-08 MEDIUM 5.0 CVE-2007-2415 Pi3Web Web Server 2.0.3 PL1 allows remote attackers to cause a denial of service (application exit) via a long URI. NOTE: this issue was originally … Pi3web Web Server Patch available Fix from $1,6002007-05-01 HIGH 7.8 CVE-2007-2029 File descriptor leak in the PDF handler in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service via a crafted PDF file. Clamav Patch available Fix from $1,9502007-04-30 HIGH 7.8 CVE-2007-2276 3Com TippingPoint IPS allows remote attackers to cause a denial of service (device hang) via a flood of packets on TCP port 80 with sequentially incr… Tippingpoint Ips Mitigation only Fix from $1,9502007-04-25 HIGH 7.8 CVE-2007-2246 Unspecified vulnerability in HP-UX B.11.00 and B.11.11, when running sendmail 8.9.3 or 8.11.1; and HP-UX B.11.23 when running sendmail 8.11.1; allows… Sendmail Patch available Fix from $1,9502007-04-25 HIGH 7.8 CVE-2007-2120 The Oracle Discoverer servlet in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0 allows remote attackers to shut down an Oracle TNS Lis… Application Server Mitigation only Fix from $1,9502007-04-18 MEDIUM 6.1 CVE-2007-2039 The Network Processing Unit (NPU) in the Cisco Wireless LAN Controller (WLC) before 3.2.171.5, 4.0.x before 4.0.206.0, and 4.1.x allows remote attack… Wireless Lan Controller Software 3.2.171.5 / 4.0.206.0+ Fix from $1,6002007-04-16 HIGH 7.1 CVE-2007-1211EPSS 29% Unspecified kernel GDI functions in Microsoft Windows 2000 SP4; XP SP2; and Server 2003 Gold, SP1, and SP2 allows user-assisted remote attackers to c… Windows 2000 Mitigation only Fix from $1,9502007-04-04 HIGH 7.1 CVE-2007-1082 FTP Explorer 1.0.1 Build 047, and other versions before 1.0.1.52, allows remote servers to cause a denial of service (CPU consumption) via a long res… Ftp Explorer Patch available Fix from $1,9502007-02-22 HIGH 7.8 CVE-2007-0772 The Linux kernel 2.6.13 and other versions before 2.6.20.1 allows remote attackers to cause a denial of service (oops) via a crafted NFSACL 2 ACCESS … Linux Kernel after 2.6.20 Fix from $1,9502007-02-20 MEDIUM 5.0 CVE-2007-0842EPSS 6% The 64-bit versions of Microsoft Visual C++ 8.0 standard library (MSVCR80.DLL) time functions, including (1) localtime, (2) localtime_s, (3) gmtime, … Visual C\+\+ Patch available Fix from $1,6002007-02-13 HIGH 7.5 CVE-2007-0342 WebCore in Apple WebKit build 18794 allows remote attackers to cause a denial of service (null dereference and application crash) via a TD element wi… Safari No fix yet Fix from $1,9502007-01-18 MEDIUM 6.6 CVE-2007-0267 The ufs_lookup function in the Mac OS X 10.4.8 and FreeBSD 6.1 kernels allows local users to cause a denial of service (kernel panic) and possibly co… FreeBSD Mitigation only Fix from $1,6002007-01-17 MEDIUM 5.0 CVE-2007-0247EPSS 20% squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory listing resp… Squid Mitigation only Fix from $1,6002007-01-16 MEDIUM 6.8 CVE-2007-0197EPSS 8% Finder 10.4.6 on Apple Mac OS X 10.4.8 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a l… Mac Os X No fix yet Fix from $1,6002007-01-11 HIGH 9.3 CVE-2006-5857EPSS 9% Adobe Reader and Acrobat 7.0.8 and earlier allows user-assisted remote attackers to execute code via a crafted PDF file that triggers memory corrupti… Acrobat after 7.0.8 Fix from $1,9502006-12-31 HIGH 7.5 CVE-2006-6681 Pedro Lineu Orso chetcpasswd 2.3.3 does not have a rate limit for client requests, which might allow remote attackers to determine passwords via a di… Chetcpasswd Patch available Fix from $1,9502006-12-21 HIGH 7.5 CVE-2006-6304 The do_coredump function in fs/exec.c in the Linux kernel 2.6.19 sets the flag variable to O_EXCL but does not use it, which allows context-dependent… Linux Kernel Patch available Fix from $1,9502006-12-14 MEDIUM 5.0 CVE-2006-6303 The read_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries in MIME multipart content, which allows remote atta… Ruby Patch available Fix from $1,6002006-12-06 MEDIUM 5.0 CVE-2006-6297 Stack consumption vulnerability in the KFILE JPEG (kfile_jpeg) plugin in kdegraphics 3, as used by konqueror, digikam, and other KDE image browsers, … Kdegraphics Mitigation only Fix from $1,6002006-12-05 MEDIUM 6.4 CVE-2006-5966 Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to (1) reboot the system using the Reinicializar method in the A… Activescan Patch available Fix from $1,6002006-11-17 MEDIUM 5.0 CVE-2006-5656 Memory leak in the push_align function in src/util.c in Vilistextum before 2.6.9 allows remote attackers to cause a denial of service (memory consump… Vilistextum Patch available Fix from $1,6002006-11-03