Skip to content
OpenAdvisories

Archive

23 August 2007

Vulnerabilities first published on this day (UTC), newest first.

22 results · Feed

  • Unscored —
    CVE-2007-3847 EPSS 13%

    The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows rem…

  • Unscored —
    CVE-2007-4505 Public exploit

    SQL injection vulnerability in index.php in the RemoSitory component (com_remository) for Mambo allows remote attackers…

  • Unscored —

    Unspecified vulnerability in PassphraseRequester in SSHKeychain before 0.8.2 beta allows attackers to obtain sensitive …

  • Unscored —
    CVE-2007-4508 Public exploit

    Stack-based buffer overflow in Rebellion Asura engine, as used for the server in Rogue Trooper 1.0 and earlier and Pris…

  • Unscored —
    CVE-2007-4509 Public exploit

    SQL injection vulnerability in index.php in the EventList component (com_eventlist) 0.8 and earlier for Joomla! allows …

  • Unscored —
    CVE-2007-4503 Public exploit

    SQL injection vulnerability in index.php in the Nice Talk component (com_nicetalk) 0.9.3 and earlier for Joomla! allows…

  • Unscored —

    ClamAV before 0.91.2, as used in Kolab Server 2.0 through 2.2beta1 and other products, allows remote attackers to cause…

  • Unscored —
    CVE-2007-4502 Public exploit

    SQL injection vulnerability in index.php in the BibTeX component (com_jombib) 1.3 and earlier for Joomla! allows remote…

  • Unscored —
    CVE-2007-4498 Public exploit EPSS 14%

    The Grandstream SIP Phone GXV-3000 with firmware 1.0.1.7, Loader 1.0.0.6, and Boot 1.0.0.18 allows remote attackers to …

  • Unscored —

    Unspecified vulnerability in TunnelRunner in SSHKeychain before 0.8.2 beta, and possibly later versions, allows local u…

  • Unscored —
    CVE-2007-4506 Public exploit

    SQL injection vulnerability in index.php in the NeoRecruit component (com_neorecruit) 1.4 and earlier for Joomla! allow…

  • Unscored —
    CVE-2007-4504 Public exploit Scanner template

    Directory traversal vulnerability in index.php in the RSfiles component (com_rsfiles) 1.0.2 and earlier for Joomla! all…

  • Unscored —

    Unrestricted file upload vulnerability in output.php in American Financing eMail Image Upload 4.1 allows remote attacke…

  • Unscored —
    CVE-2007-4507 Public exploit

    Multiple buffer overflows in the php_ntuser component for PHP 5.2.3 allow context-dependent attackers to cause a denial…

  • Unscored —

    The Sun Admin Console in Sun Application Server 9.0_0.1 does not apply certain configuration changes persistently, whic…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Kai Blankenhorn Bitfolge simple and nice index file (aka snif) before 1.2.7…

  • Unscored —

    Directory traversal vulnerability in Kai Blankenhorn Bitfolge simple and nice index file (aka snif) before 1.2.5 allows…

  • Unscored —

    The tipafriend function in eZ publish before 3.8.9, and 3.9 before 3.9.3, does not limit access by anonymous users, whi…

  • Unscored —

    Unspecified vulnerability in the ata disk driver in Sun Solaris 10 on the x86 platform before 20070821 allows local use…

  • Unscored —

    eZ publish before 3.8.9, and 3.9 before 3.9.3, does not properly check permissions on module views that lack a policy f…

  • Unscored —
    CVE-2007-4491 Public exploit

    SQL injection vulnerability in uyeler2.php in Gurur haber 2.0 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —

    Multiple unspecified vulnerabilities in the ata disk driver in Sun Solaris 8, 9, and 10 on the x86 platform before 2007…