Skip to content
OpenAdvisories

Archive

17 August 2007

Vulnerabilities first published on this day (UTC), newest first.

15 results · Feed

  • Unscored —

    Multiple unspecified vulnerabilities in the Role Based Access Control (RBAC) functionality in Sun Solaris 8 allow remot…

  • Unscored —
    CVE-2007-4389 Public exploit

    Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, with 3.17.5…

  • Unscored —
    CVE-2007-4391 Public exploit

    Heap-based buffer overflow in Kakadu kdu_v32m.dll in Yahoo! Messenger 8.1.0.413 allows remote attackers to cause a deni…

  • Unscored —
    CVE-2007-4386 Public exploit

    SQL injection vulnerability in search.php in GetMyOwnArcade allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —

    Winamp 5.35 allows remote attackers to cause a denial of service (program stack overflow and application crash) via an …

  • Unscored —

    The installation script for orarun on SUSE Linux before 20070810 places the oracle user into the disk group, which allo…

  • Unscored —
    CVE-2007-4390 Public exploit

    The Command Line Interface (CLI), aka Adonis Administration Console, on the BlueCat Networks Adonis DNS/DHCP appliance …

  • Unscored —
    CVE-2007-4387 Public exploit

    Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5 and 5.29…

  • Unscored —

    Unspecified vulnerability in a "core clean" cron job created by the findutils-locate package on SUSE Linux 10.0 and 10.…

  • Unscored —

    2wire 1701HG and 2071 Gateway routers, with 5.29.51 and possibly 3.17.5 software, have a blank password by default.

  • Unscored —

    PHP remote file inclusion vulnerability in tracking.php in Trackeur 1 allows remote attackers to execute arbitrary PHP …

  • Unscored —
    CVE-2007-4384 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in depouilg.php3 in Stephane Pineau VOTE 1c allow remote attackers t…

  • Unscored —
    CVE-2007-4381 Public exploit

    Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and J…

  • Unscored —
    CVE-2007-4385 Public exploit

    OWASP Stinger before 2.5 allows remote attackers to bypass input validation routines by using multipart encoded request…

  • Unscored —
    CVE-2007-4382 Public exploit

    CounterPath X-Lite 3.0 34025, and possibly eyeBeam, allows remote attackers to cause a denial of service (device crash)…