Latest CVE Feed
-
10.0
HIGHCVE-2007-4566
Multiple buffer overflows in the login mechanism in sidvault in Alpha Centauri Software SIDVault LDAP Server before 2.0f allow remote attackers to execute arbitrary code via crafted LDAP packets, as demonstrated by a long dc entry in an LDAP bind.... Read more
Affected Products : sidvault_ldap_server- EPSS Score: %54.45
- Published: Aug. 28, 2007
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2007-4561
Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote attackers to execute arbitrary code via an RSTP command containing multiple Require headers.... Read more
Affected Products : helix_dna_server- EPSS Score: %13.89
- Published: Aug. 28, 2007
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2007-4221
Multiple buffer overflows in Motorola Timbuktu Pro before 8.6.5 for Windows allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via (1) a long user name and (2) certain malformed requests; and (3) allow re... Read more
Affected Products : timbuktu- EPSS Score: %16.76
- Published: Aug. 29, 2007
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2007-4218
Multiple buffer overflows in the ServerProtect service (SpntSvc.exe) in Trend Micro ServerProtect for Windows before 5.58 Security Patch 4 allow remote attackers to execute arbitrary code via certain RPC requests to certain TCP ports that are processed by... Read more
- EPSS Score: %58.48
- Published: Aug. 22, 2007
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2007-3993
Unspecified vulnerability in the attachment filter in Kerio MailServer before 6.4.1 has unknown impact and remote attack vectors.... Read more
Affected Products : kerio_mailserver- EPSS Score: %0.81
- Published: Jul. 25, 2007
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2007-3455
cgiChkMasterPwd.exe before 8.0.0.142 in Trend Micro OfficeScan Corporate Edition 8.0 allows remote attackers to bypass the password requirement and gain access to the Management Console via an empty hash and empty encrypted password string, related to "st... Read more
- EPSS Score: %1.53
- Published: Jun. 27, 2007
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2007-3279
PostgreSQL 8.1 and probably later versions, when the PL/pgSQL (plpgsql) language has been created, grants certain plpgsql privileges to the PUBLIC domain, which allows remote attackers to create and execute functions, as demonstrated by functions that per... Read more
Affected Products : postgresql- EPSS Score: %2.40
- Published: Jun. 19, 2007
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2007-3263
Unspecified vulnerability in the Default Messaging Component in IBM WebSphere Application Server (WAS) 6.1.0.7 and earlier has unknown impact and attack vectors, related to "incorrect authorization on a remote interface to the SDO repository."... Read more
Affected Products : websphere_application_server- EPSS Score: %1.35
- Published: Jun. 19, 2007
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2007-2954
Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2 through SP4 for Windows allow remote attackers to execute arbitrary code via certain long arguments to the (1) RpcAddPrinterDriver, (2) RpcGetPrinterDrive... Read more
Affected Products : client- EPSS Score: %20.71
- Published: Aug. 31, 2007
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2007-2687
Stack-based buffer overflow in the MicroWorld Agent service (MWAGENT.EXE) in MicroWorld Technologies eScan before 9.0.718.1 allows remote attackers to execute arbitrary code via a long command.... Read more
Affected Products : escan- EPSS Score: %23.04
- Published: May. 24, 2007
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2007-2582
Multiple buffer overflows in the DB2 JDBC Applet Server (DB2JDS) service in IBM DB2 9.x and earlier allow remote attackers to (1) execute arbitrary code via a crafted packet to the DB2JDS service on tcp/6789; and cause a denial of service via (2) an inval... Read more
Affected Products : db2- EPSS Score: %7.33
- Published: May. 10, 2007
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2007-2528
Buffer overflow in AgRpcCln.dll for Trend Micro ServerProtect 5.58 for Windows before Security Patch 3 Build 1176 allows remote attackers to execute arbitrary code via unknown vectors related to RPC requests. NOTE: this is probably a different vulnerabili... Read more
- EPSS Score: %4.30
- Published: May. 08, 2007
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2007-2522
Stack-based buffer overflow in the inoweb Console Server in CA Anti-Virus for the Enterprise r8, Threat Manager r8, Anti-Spyware for the Enterprise r8, and Protection Suites r3 allows remote attackers to execute arbitrary code via a long (1) username or (... Read more
Affected Products : etrust_integrated_threat_management etrust_pestpatrol antispyware_for_the_enterprise- EPSS Score: %44.39
- Published: May. 11, 2007
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2007-2500
server/parser/sprite_definition.cpp in GNU Gnash (aka GNU Flash Player) 0.7.2 allows remote attackers to execute arbitrary code via a large number of SHOWFRAME elements within a DEFINESPRITE element, which triggers memory corruption and enables the attack... Read more
Affected Products : flash_player- EPSS Score: %13.26
- Published: May. 04, 2007
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2007-2476
Unspecified vulnerability in Novell SecureLogin (NSL) 6 SP1 before 6.0.106 has unknown impact and remote attack vectors, related to Active Directory (AD) password changes.... Read more
Affected Products : securelogin- EPSS Score: %0.71
- Published: May. 02, 2007
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2007-2390
Buffer overflow in iChat in Apple Mac OS X 10.3.9 and 10.4.9 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted UPnP Internet Gateway Device (IGD) packet.... Read more
- EPSS Score: %28.53
- Published: May. 24, 2007
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2007-2129
Unspecified vulnerability in the Agent component in Oracle Enterprise Manager 9.2.0.8 has unknown impact and remote attack vectors, aka EM01.... Read more
Affected Products : enterprise_manager- EPSS Score: %1.12
- Published: Apr. 18, 2007
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2007-2121
Unspecified vulnerability in the COREid Access component in Oracle Application Server 7.0.4.4 has unknown impact and attack vectors, aka AS02.... Read more
Affected Products : application_server- EPSS Score: %1.12
- Published: Apr. 18, 2007
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2007-2059
Multiple buffer overflows in the ESA protocol implementation in eIQnetworks Enterprise Security Analyzer (ESA) 2.5 allow remote attackers to execute arbitrary code via a long parameter to the (1) DELETESEARCHFOLDER, (2) DELTASK, (3) HMGR_CHECKHOSTSCSV, (4... Read more
Affected Products : enterprise_security_analyzer- EPSS Score: %5.63
- Published: Apr. 18, 2007
- Modified: Apr. 09, 2025
-
10.0
HIGHCVE-2007-2031
Buffer overflow in the HTTP proxy service for 3proxy 0.5 to 0.5.3g, and 0.6b-devel before 20070413, might allow remote attackers to execute arbitrary code via crafted transparent requests.... Read more
Affected Products : 3proxy- EPSS Score: %48.14
- Published: Apr. 16, 2007
- Modified: Apr. 09, 2025