Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 17,088

Export CSV
CVE-2007-5503

cairo integer overflow

Multiple integer overflows in Cairo before 1.4.12 might allow remote attackers to execute arbitrary code, as demonstrated using a crafted PNG image with large width and height values, which is not properly handled by the read_png function.

CVSS 2.0 · 6.8 Medium EPSS 5.5% KEV · Not listed
Vendors
Redhat
Products
Cairo Enterprise Linux
CVE-2007-5707

openldap slapd DoS via objectClasses attribute

OpenLDAP before 2.3.39 allows remote attackers to cause a denial of service (slapd crash) via an LDAP request with a malformed objectClasses attribute. NOTE: this has been reported as a double free, but the reports are inconsistent.

CVSS 2.0 · 7.1 High EPSS 3.7% KEV · Not listed
Vendors
Openldap Redhat
Products
Openldap Enterprise Linux
CVE-2007-5730

QEMU Buffer overflow via crafted "net socket listen" option

Heap-based buffer overflow in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to execute arbitrary code via crafted data in the "net socket listen" option, aka QEMU "net socket" heap overflow. NOTE: some sources have used CVE-2007-1321 to refer to this issue as part of "NE2000 network driver and the socket code," but this is the correct identifier for the individual net socket listen vulnerability.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Debian Qemu Redhat and 1 more
Products
Debian Linux Qemu Enterprise Linux and 1 more
CVE-2007-5745

openoffice.org: Quattro Pro files handling heap overflows in Attribute and Font records

Multiple heap-based buffer overflows in OpenOffice.org before 2.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Quattro Pro (QPRO) file with crafted (1) Attribute and (2) Font Description records.

CVSS 2.0 · 6.8 Medium EPSS 4.1% KEV · Not listed
Vendors
Openoffice Redhat
Products
Openoffice Enterprise Linux
CVE-2007-5746

openoffice.org: EMF files parsing EMR_BITBLT record heap overflows

Integer overflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an EMF file with a crafted EMR_STRETCHBLT record, which triggers a heap-based buffer overflow.

CVSS 2.0 · 6.8 Medium EPSS 4.6% KEV · Not listed
Vendors
Openoffice Redhat
Products
Openoffice.org Enterprise Linux
CVE-2007-5747

openoffice.org: Quattro Pro files parsing integer underflow

Integer underflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Quattro Pro (QPRO) file with crafted values that trigger an excessive loop and a stack-based buffer overflow.

CVSS 2.0 · 6.8 Medium EPSS 4.1% KEV · Not listed
Vendors
Redhat Sun
Products
Enterprise Linux Openoffice.org
CVE-2007-5760

xorg: invalid array indexing in XFree86-Misc extension

Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via a PassMessage request containing a large array index.

CVSS 2.0 · 9.3 Critical EPSS 3.3% KEV · Not listed
Vendors
Redhat X.org Xfree86 Project
Products
Enterprise Linux Xserver Xfree86-misc
CVE-2007-5770

net:: * modules

The (1) Net::ftptls, (2) Net::telnets, (3) Net::imap, (4) Net::pop, and (5) Net::smtp libraries in Ruby 1.8.5 and 1.8.6 do not verify that the commonName (CN) field in a server certificate matches the domain name in a request sent over SSL, which makes it easier for remote attackers to intercept SSL transmissions via a man-in-the-middle attack or spoofed web site, different components than CVE-2007-5162.

CVSS 2.0 · 5.0 Medium EPSS 1.9% KEV · Not listed
Vendors
Redhat Ruby-lang
Products
Enterprise Linux Ruby
CVE-2007-5794

nss_ldap randomly replying with wrong user's data

Race condition in nss_ldap, when used in applications that are linked against the pthread library and fork after a call to nss_ldap, might send user data to the wrong process because of improper handling of the LDAP connection. NOTE: this issue was originally reported for Dovecot with the wrong mailboxes being returned, but other applications might also be affected.

CVSS 2.0 · 4.3 Medium EPSS 1.2% KEV · Not listed
Vendors
Nss Ldap Redhat
Products
Nss Ldap Enterprise Linux
CVE-2007-5846

net-snmp remote DoS via udp packet

The SNMP agent (snmp_agent.c) in net-snmp before 5.4.1 allows remote attackers to cause a denial of service (CPU and memory consumption) via a GETBULK request with a large max-repeaters value.

CVSS 2.0 · 7.8 High EPSS 29.2% KEV · Not listed
Vendors
Net-snmp Redhat
Products
Net-snmp Enterprise Linux
CVE-2007-5898

php htmlentities/htmlspecialchars multibyte sequences

The (1) htmlentities and (2) htmlspecialchars functions in PHP before 5.2.5 accept partial multibyte sequences, which has unknown impact and attack vectors, a different issue than CVE-2006-5465.

CVSS 2.0 · 6.4 Medium EPSS 2.8% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux Rhel Application Stack
CVE-2007-5899

php session ID leakage

The output_add_rewrite_var function in PHP before 5.2.5 rewrites local forms in which the ACTION attribute references a non-local URL, which allows remote attackers to obtain potentially sensitive information by reading the requests for this URL, as demonstrated by a rewritten form containing a local session ID.

CVSS 2.0 · 4.3 Medium EPSS 3.4% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux Rhel Application Stack
CVE-2007-5901

krb5: use-after-free in gssapi lib

Use-after-free vulnerability in the gss_indicate_mechs function in lib/gssapi/mechglue/g_initialize.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors. NOTE: this might be the result of a typo in the source code.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Apple Mit Redhat
Products
Mac Os X Mac Os X Server Kerberos 5 and 1 more
CVE-2007-5904

Buffer overflow in CIFS VFS

Multiple buffer overflows in CIFS VFS in Linux kernel 2.6.23 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SMB responses that trigger the overflows in the SendReceive function.

CVSS 2.0 · 6.8 Medium EPSS 2.4% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux
CVE-2007-5906

kernel-xen 3.1.1 virtual guest system denial of service (hypervisor crash) possibility

Xen 3.1.1 allows virtual guest system users to cause a denial of service (hypervisor crash) by using a debug register (DR7) to set certain breakpoints.

CVSS 2.0 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Xensource Inc
Products
Enterprise Linux Xen
CVE-2007-5907

kernel-xen 3.1.1 does not prevent modification of the CR4 TSC from applications (DoS possible)

Xen 3.1.1 does not prevent modification of the CR4 TSC from applications, which allows pv guests to cause a denial of service (crash).

CVSS 2.0 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Xensource Inc
Products
Enterprise Linux Xen
CVE-2007-5925

mysql DoS in the InnoDB Engine

The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows remote authenticated users to cause a denial of service (database crash) via a certain CONTAINS operation on an indexed column, which triggers an assertion error.

CVSS 2.0 · 4.0 Medium EPSS 11.4% KEV · Not listed
Vendors
Mysql Redhat
Products
Mysql Enterprise Linux Rhel Application Stack
CVE-2007-5935

dvips -z buffer overflow with long href

Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary code via a DVI file with a long href tag.

CVSS 2.0 · 6.8 Medium EPSS 4.0% KEV · Not listed
Vendors
Redhat Tetex Tug
Products
Enterprise Linux Tetex Texlive 2007
CVE-2007-5938

NULL dereference in iwl driver

The iwl_set_rate function in compatible/iwl3945-base.c in iwlwifi 1.1.21 and earlier dereferences an iwl_get_hw_mode return value without checking for NULL, which might allow remote attackers to cause a denial of service (kernel panic) via unspecified vectors during module initialization.

CVSS 2.0 · 5.0 Medium EPSS 2.1% KEV · Not listed
Vendors
Intel Redhat
Products
Pro Wireless 3945abg Wireless Wifi Link 4965agn Enterprise Linux
CVE-2007-5947

jar: protocol XSS

The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 retrieves the inner URL regardless of its MIME type, and considers HTML documents within a jar archive to have the same origin as the inner URL, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a jar: URI.

CVSS 2.0 · 4.3 Medium EPSS 2.7% KEV · Not listed
Vendors
Mozilla Redhat
Products
Firefox Seamonkey Enterprise Linux and 1 more