Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 17,088

Export CSV
CVE-2007-0995

security flaw

Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 ignores trailing invalid HTML characters in attribute names, which allows remote attackers to bypass content filters that use regular expressions.

CVSS 2.0 · 4.3 Medium EPSS 2.2% KEV · Not listed
Vendors
Mozilla Redhat
Products
Firefox Seamonkey Enterprise Linux
CVE-2007-0996

security flaw

The child frames in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 inherit the default charset from the parent window, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated using the UTF-7 character set.

CVSS 2.0 · 5.8 Medium EPSS 2.1% KEV · Not listed
Vendors
Mozilla Redhat
Products
Firefox Seamonkey Enterprise Linux
CVE-2007-0998

HVM guest VNC server allows compromise of entire host OS by any VNC console user

The VNC server implementation in QEMU, as used by Xen and possibly other environments, allows local users of a guest operating system to read arbitrary files on the host operating system via unspecified vectors related to QEMU monitor mode, as demonstrated by mapping files to a CDROM device. NOTE: some of these details are obtained from third party information.

CVSS 2.0 · 4.3 Medium EPSS 2.0% KEV · Not listed
Vendors
Redhat Xen
Products
Enterprise Linux Fedora Core Qemu
CVE-2007-0999

security flaw

Format string vulnerability in Ekiga 2.0.3, and probably other versions, allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2007-1006.

CVSS 2.0 · 9.3 Critical EPSS 3.5% KEV · Not listed
Vendors
Gnome Redhat
Products
Ekiga Enterprise Linux
CVE-2007-1000

security flaw

The ipv6_getsockopt_sticky function in net/ipv6/ipv6_sockglue.c in the Linux kernel before 2.6.20.2 allows local users to read arbitrary kernel memory via certain getsockopt calls that trigger a NULL dereference.

CVSS 2.0 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux
CVE-2007-1001

security flaw

Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap (WBMP) images with large width or height values.

CVSS 2.0 · 6.8 Medium EPSS 8.4% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux Rhel Application Stack
CVE-2007-1002

evolution format string flaw

Format string vulnerability in the write_html function in calendar/gui/e-cal-component-memo-preview.c in Evolution Shared Memo 2.8.2.1, and possibly earlier versions, allows user-assisted remote attackers to execute arbitrary code via format specifiers in the categories of a crafted shared memo.

CVSS 2.0 · 6.8 Medium EPSS 3.4% KEV · Not listed
Vendors
Evolution Redhat
Products
Shared Memo Enterprise Linux
CVE-2007-1003

xserver XC-MISC integer overflow

Integer overflow in ALLOCATE_LOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server (xserver) 7.1-1.1.0, and other versions before 20070403, allows remote authenticated users to execute arbitrary code via a large expression, which results in memory corruption.

CVSS 2.0 · 9.0 Critical EPSS 5.3% KEV · Not listed
Vendors
Redhat X.org
Products
Enterprise Linux X11
CVE-2007-1006

Ekiga format string flaw

Multiple format string vulnerabilities in the gm_main_window_flash_message function in Ekiga before 2.0.5 allow attackers to cause a denial of service and possibly execute arbitrary code via a crafted Q.931 SETUP packet.

CVSS 2.0 · 10.0 Critical EPSS 3.7% KEV · Not listed
Vendors
Ekiga Redhat
Products
Ekiga Enterprise Linux
CVE-2007-1007

security flaw

Format string vulnerability in GnomeMeeting 1.0.2 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in the name, which is not properly handled in a call to the gnomemeeting_log_insert function.

CVSS 2.0 · 10.0 Critical EPSS 7.1% KEV · Not listed
Vendors
Ekiga Redhat
Products
Ekiga Enterprise Linux Enterprise Linux Desktop
CVE-2007-1092

security flaw

Mozilla Firefox 1.5.0.9 and 2.0.0.1, and SeaMonkey before 1.0.8 allow remote attackers to execute arbitrary code via JavaScript onUnload handlers that modify the structure of a document, wich triggers memory corruption due to the lack of a finalize hook on DOM window objects.

CVSS 2.0 · 9.3 Critical EPSS 7.1% KEV · Not listed
Vendors
Mozilla Redhat
Products
Firefox Seamonkey Enterprise Linux
CVE-2007-1095

security flaw

Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 do not properly implement JavaScript onUnload handlers, which allows remote attackers to run certain JavaScript code and access the location DOM hierarchy in the context of the next web site that is visited by a client.

CVSS 2.0 · 6.8 Medium EPSS 2.3% KEV · Not listed
Vendors
Mozilla Redhat
Products
Firefox Seamonkey Enterprise Linux
CVE-2007-1216

krb5 double free flaw

Double free vulnerability in the GSS-API library (lib/gssapi/krb5/k5unseal.c), as used by the Kerberos administration daemon (kadmind) in MIT krb5 before 1.6.1, when used with the authentication method provided by the RPCSEC_GSS RPC library, allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via a message with an "an invalid direction encoding".

CVSS 2.0 · 9.0 Critical EPSS 9.9% KEV · Not listed
Vendors
Canonical Debian Mit and 1 more
Products
Ubuntu Linux Debian Linux Kerberos 5 and 1 more
CVE-2007-1217

Kernel: CAPI overflow

Buffer overflow in the bufprint function in capiutil.c in libcapi, as used in Linux kernel 2.6.9 to 2.6.20 and isdn4k-utils, allows local users to cause a denial of service (crash) and possibly gain privileges via a crafted CAPI packet.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux
CVE-2007-1218

tcpdump denial of service

Off-by-one buffer overflow in the parse_elements function in the 802.11 printer code (print-802_11.c) for tcpdump 3.9.5 and earlier allows remote attackers to cause a denial of service (crash) via a crafted 802.11 frame. NOTE: this was originally referred to as heap-based, but it might be stack-based.

CVSS 2.0 · 6.8 Medium EPSS 2.9% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2007-1262

XSS through HTML message in squirrelmail

Multiple cross-site scripting (XSS) vulnerabilities in the HTML filter in SquirrelMail 1.4.0 through 1.4.9a allow remote attackers to inject arbitrary web script or HTML via the (1) data: URI in an HTML e-mail attachment or (2) various non-ASCII character sets that are not properly filtered when viewed with Microsoft Internet Explorer.

CVSS 2.0 · 4.3 Medium EPSS 2.5% KEV · Not listed
Vendors
Redhat Squirrelmail
Products
Enterprise Linux Squirrelmail
CVE-2007-1263

gnupg/gpgme signed message spoofing

GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually distinguish signed and unsigned portions of OpenPGP messages with multiple components, which might allow remote attackers to forge the contents of a message without detection.

CVSS 2.0 · 5.0 Medium EPSS 5.5% KEV · Not listed
Vendors
Gnu Gnupg Redhat
Products
Gpgme Gnupg Enterprise Linux
CVE-2007-1282

security flaw

Integer overflow in Mozilla Thunderbird before 1.5.0.10 and SeaMonkey before 1.0.8 allows remote attackers to trigger a buffer overflow and possibly execute arbitrary code via a text/enhanced or text/richtext e-mail message with an extremely long line.

CVSS 2.0 · 9.3 Critical EPSS 4.7% KEV · Not listed
Vendors
Mozilla Redhat
Products
Seamonkey Thunderbird Enterprise Linux and 1 more
CVE-2007-1285

security flaw

The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable destruction routines.

CVSS 3.1 · 7.5 High EPSS 18.8% KEV · Not listed
Vendors
Canonical Novell Php and 2 more
Products
Ubuntu Linux Suse Linux Php and 7 more
CVE-2007-1286

security flaw

Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unserialize function, which triggers the overflow in the ZVAL reference counter.

CVSS 2.0 · 6.8 Medium EPSS 40.9% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux Rhel Stronghold