Skip to content
OpenAdvisories

Archive

15 August 2007

Vulnerabilities first published on this day (UTC), newest first.

24 results · Feed

  • Unscored —

    Unrestricted file upload vulnerability in admin/pages/blog-add.php in Neuron Blog 1.1 allows remote attackers to upload…

  • Unscored —
    CVE-2007-4368 Public exploit

    SQL injection vulnerability in /main in IBM Rational ClearQuest (CQ) Web 7.0.0.0-IFIX02 and 7.0.0.1 allows remote attac…

  • Unscored —

    Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual fun…

  • Unscored —
    CVE-2007-4369 Public exploit

    Directory traversal vulnerability in go/_files in SOTEeSKLEP before 4.0 allows remote attackers to read arbitrary files…

  • Unscored —
    CVE-2007-4370 Public exploit EPSS 59%

    Multiple buffer overflows in the (1) client and (2) server in Racer 0.5.3 beta 5 allow remote attackers to execute arbi…

  • Unscored —

    Stack-based buffer overflow in the giomgr process in ESRI ArcSDE service 9.2, as used with ArcGIS, allows remote attack…

  • Unscored —

    Multiple stack-based buffer overflows in the Motive ActiveEmailTest.EmailData (ActiveUtils EmailData) ActiveX control i…

  • Unscored —

    Unspecified vulnerability in Dell Remote Access Card 4 (DRAC4) with firmware 1.50 Build 02.16 allows remote attackers t…

  • Unscored —
    CVE-2007-4366 Public exploit

    WengoPhone 2.1 allows remote attackers to cause a denial of service (device crash) via a SIP INVITE message without a C…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in eXV2 CMS 2.0.5 and earlier allows remote attackers to inject arbitrary web …

  • Unscored —

    NETGEAR (formerly Infrant) ReadyNAS RAIDiator before 4.00b2-p2-T1 beta creates a default SSH root password derived from…

  • Unscored —
    CVE-2007-4358 Public exploit

    Zoidcom 0.6.7 and earlier allows remote attackers to cause a denial of service (application crash) via a JOIN packet (a…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the nodereference module in Drupal Content Construction Kit (CCK…

  • Unscored —
    CVE-2007-4359 Public exploit

    Multiple SQL injection vulnerabilities in SkilMatch Staffing Systems JobLister3 allow remote attackers to execute arbit…

  • Unscored —
    CVE-2007-4362 Public exploit

    SQL injection vulnerability in category.php in Prozilla Webring allows remote attackers to execute arbitrary SQL comman…

  • Unscored —

    Fedora Commons before 2.2.1 does not properly handle certain authentication requests involving Java Naming and Director…

  • Unscored —

    The IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibl…

  • Unscored —

    The IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibl…

  • Unscored —

    Format string vulnerability in the IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller…

  • Unscored —

    Mozilla Firefox 2.0.0.6 and earlier allows remote attackers to spoof the contents of the status bar via a link to a dat…

  • Unscored —

    Buffer overflow in the at program on IBM AIX 5.3 allows local users to gain privileges via unspecified vectors.

  • Unscored —

    Buffer overflow in fileplace in bos.perf.tools in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspeci…

  • Unscored —

    Microsoft Internet Explorer 6 and 7 embeds FTP credentials in HTML files that are retrieved during an FTP session, whic…

  • Unscored —

    Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users in the system group to gain root privileges via unsp…