Skip to content
OpenAdvisories

Archive

14 August 2007

Vulnerabilities first published on this day (UTC), newest first.

← July 2007 2007 / August /14 September 2007 →
  1. 112
  2. 2 
  3. 341
  4. 4 
  5. 5 
  6. 6 
  7. 711
  8. 884
  9. 922
  10. 102
  11. 11 
  12. 12 
  13. 1321
  14. 1442
  15. 1524
  16. 1610
  17. 1715
  18. 1835
  19. 19 
  20. 2018
  21. 2129
  22. 2218
  23. 2322
  24. 24 
  25. 2516
  26. 26 
  27. 2715
  28. 2823
  29. 2916
  30. 306
  31. 3147
All Critical High Medium Low Exploited only Public exploit

42 results · Feed

  • Unscored —
    CVE-2007-0948 EPSS 12%

    Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, …

  • Unscored —
    CVE-2007-1749 Public exploit EPSS 42%

    Integer underflow in the CDownloadSink class code in the Vector Markup Language (VML) component (VGX.DLL), as used in I…

  • Unscored —
    CVE-2007-3891 EPSS 25%

    Unspecified vulnerability in Windows Vista Weather Gadgets in Windows Vista allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2007-3386 Public exploit EPSS 59%

    Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5…

  • Medium —
    CVE-2007-3385 EPSS 17%

    Apache Tomcat Mishandles Character Sequence in Cookies

    Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attacke…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2007-3032 EPSS 25%

    Unspecified vulnerability in Windows Vista Contacts Gadget in Windows Vista allows user-assisted remote attackers to ex…

  • Unscored —
    CVE-2007-3033 EPSS 28%

    Cross-site scripting (XSS) vulnerability in Windows Vista Feed Headlines Gadget (aka Sidebar RSS Feeds Gadget) in Windo…

  • Medium —
    CVE-2007-3382 Public exploit EPSS 37%

    Apache Tomcat treats single quotes as delimiters in cookies

    Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes ("'") as delimiters in cookies, which might cause sensitive information such as session IDs to be leaked and allow remote attackers to cond…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2007-0943 EPSS 27%

    Unspecified vulnerability in Internet Explorer 5.01 and 6 SP1 allows remote attackers to execute arbitrary code via cra…

  • Unscored —
    CVE-2007-3037 EPSS 22%

    Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WM…

  • Unscored —
    CVE-2007-3041 EPSS 29%

    Unspecified vulnerability in the pdwizard.ocx ActiveX object for Internet Explorer 5.01, 6 SP1, and 7 allows remote att…

  • Unscored —
    CVE-2007-3890 EPSS 29%

    Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to …

  • Unscored —
    CVE-2007-3034 Public exploit EPSS 52%

    Integer overflow in the AttemptWrite function in Graphics Rendering Engine (GDI) on Microsoft Windows 2000 SP4, XP SP2,…

  • Unscored —
    CVE-2007-3035 EPSS 25%

    Unspecified vulnerability in Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2007-2224 EPSS 35%

    Object linking and embedding (OLE) Automation, as used in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, …

  • Unscored —
    CVE-2007-2216 Public exploit EPSS 41%

    The tblinf32.dll (aka vstlbinf.dll) ActiveX control for Internet Explorer 5.01, 6 SP1, and 7 uses an incorrect IObjects…

  • Unscored —
    CVE-2007-2223 Public exploit EPSS 49%

    Microsoft XML Core Services (MSXML) 3.0 through 6.0 allows remote attackers to execute arbitrary code via the substring…

  • Unscored —
    CVE-2007-4332

    SQL injection vulnerability in article.php in Article Dashboard, when magic_quotes_gpc is disabled, allows remote attac…

  • Unscored —
    CVE-2007-4338 Public exploit

    index.php in Ryan Haudenschilt Family Connections (FCMS) before 0.9 allows remote attackers to access an arbitrary acco…

  • Unscored —
    CVE-2007-4334 Public exploit

    Cross-site scripting (XSS) vulnerability in whois.php in Php-stats 0.1.9.2 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2007-4335

    Format string vulnerability in the SMTP server component in Qbik WinGate 5.x and 6.x before 6.2.2 allows remote attacke…

  • Unscored —
    CVE-2007-4333

    Multiple cross-site scripting (XSS) vulnerabilities in signup.php in Article Dashboard allow remote attackers to inject…

  • Unscored —
    CVE-2007-4342

    PHP remote file inclusion vulnerability in include.php in PHPCentral Login 1.0 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2007-4340

    PHP remote file inclusion vulnerability in index.php in phpDVD 1.0.4 allows remote attackers to execute arbitrary PHP c…

  • Unscored —
    CVE-2007-4341 Public exploit

    PHP remote file inclusion vulnerability in adm/my_statistics.php in Omnistar Lib2 PHP 0.2 allows remote attackers to ex…

  • Unscored —
    CVE-2007-4337

    Multiple buffer overflows in the httplib_parse_sc_header function in lib/http.c in Streamripper before 1.62.2 allow rem…

    streamripper Debian
  • Unscored —
    CVE-2007-4336 Public exploit EPSS 51%

    Buffer overflow in the Live Picture Corporation DXSurface.LivePicture.FlashPix.1 (DirectTransform FlashPix) ActiveX con…

  • Unscored —
    CVE-2007-4339

    Multiple PHP remote file inclusion vulnerabilities in PHPCentral Poll Script 1.0 allow remote attackers to execute arbi…

  • Unscored —
    CVE-2007-3852

    The init script (sysstat.in) in sysstat 5.1.2 up to 7.1.6 creates /tmp/sysstat.run insecurely, which allows local users…

  • Unscored —
    CVE-2007-3848

    Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running …

  • Unscored —
    CVE-2007-4327 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in File Uploader 1.1 allow remote attackers to execute arbitrary PHP…

  • Unscored —
    CVE-2007-4321 Public exploit

    fail2ban 0.8 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts t…

    fail2ban Debian
  • Unscored —
    CVE-2007-4331

    PHP remote file inclusion vulnerability in index.php in FindNix allows remote attackers to include the contents of arbi…

  • Unscored —
    CVE-2007-4325 Public exploit

    PHP remote file inclusion vulnerability in index.php in Gaestebuch 1.5 allows remote attackers to execute arbitrary PHP…

  • Unscored —
    CVE-2007-4323

    DenyHosts 2.6 does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/…

  • Unscored —
    CVE-2007-4322

    BlockHosts before 2.0.4 does not properly parse (1) sshd and (2) vsftpd log files, which allows remote attackers to add…

  • Unscored —
    CVE-2007-4328 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Mapos Bilder Galerie 1.0 allow remote attackers to execute arbitr…

  • Unscored —
    CVE-2007-4329 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Web News 1.1 allow remote attackers to execute arbitrary PHP code…

  • Unscored —
    CVE-2007-4326

    Multiple PHP remote file inclusion vulnerabilities in Bilder Uploader 1.3 allow remote attackers to execute arbitrary P…

  • Unscored —
    CVE-2007-4320 Public exploit EPSS 72%

    PHP remote file inclusion vulnerability in admin/addons/archive/archive.php in Ncaster 1.7.2 allows remote attackers to…