Skip to content
OpenAdvisories

Archive

27 August 2007

Vulnerabilities first published on this day (UTC), newest first.

← July 2007 2007 / August /27 September 2007 →
  1. 112
  2. 2 
  3. 341
  4. 4 
  5. 5 
  6. 6 
  7. 711
  8. 884
  9. 922
  10. 102
  11. 11 
  12. 12 
  13. 1321
  14. 1442
  15. 1524
  16. 1610
  17. 1715
  18. 1835
  19. 19 
  20. 2018
  21. 2129
  22. 2218
  23. 2322
  24. 24 
  25. 2516
  26. 26 
  27. 2715
  28. 2823
  29. 2916
  30. 306
  31. 3147
All Critical High Medium Low Exploited only Public exploit

15 results · Feed

  • Unscored —
    CVE-2007-4544

    Cross-site scripting (XSS) vulnerability in wp-newblog.php in WordPress multi-user (MU) 1.0 and earlier allows remote a…

  • Unscored —
    CVE-2007-4548

    The login method in LoginModule implementations in Apache Geronimo 2.0 does not throw FailedLoginException for failed l…

  • Unscored —
    CVE-2007-4547

    Unreal Commander 0.92 build 565 and 573 writes portions of heap memory into local files when extracting from an archive…

  • Unscored —
    CVE-2007-4545 Public exploit

    Multiple directory traversal vulnerabilities in Unreal Commander 0.92 build 565 and 573 allow user-assisted remote atta…

  • Unscored —
    CVE-2007-4546

    Unreal Commander 0.92 build 565 and 573 lists the filenames from the Central Directory of a ZIP archive, but extracts t…

  • Unscored —
    CVE-2007-4543

    Cross-site scripting (XSS) vulnerability in enter_bug.cgi in Bugzilla 2.17.1 through 2.20.4, 2.22.x before 2.22.3, and …

  • Unscored —
    CVE-2007-4539

    The WebService (XML-RPC) interface in Bugzilla 2.23.3 through 3.0.0 does not enforce permissions for the time-tracking …

  • Unscored —
    CVE-2007-4538

    email_in.pl in Bugzilla 2.23.4 through 3.0.0 allows remote attackers to execute arbitrary commands via the -f (From add…

  • Unscored —
    CVE-2007-4542

    Multiple cross-site scripting (XSS) vulnerabilities in MapServer before 4.10.3 allow remote attackers to inject arbitra…

    mapserver Debian
  • Unscored —
    CVE-2007-4541

    Multiple cross-site scripting (XSS) vulnerabilities in Olate Download (od) 3.4.2 allow remote attackers to inject arbit…

  • Unscored —
    CVE-2007-4537 Public exploit

    Heap-based buffer overflow in the Huffman decompression algorithm implemented in Skulltag 0.97d-beta4.1 and earlier all…

  • Unscored —
    CVE-2007-4540

    Multiple SQL injection vulnerabilities in download.php in Olate Download (od) 3.4.2 allow remote attackers to execute a…

  • Unscored —
    CVE-2007-3741

    The (1) psp (aka .tub), (2) bmp, (3) pcx, and (4) psd plugins in gimp allow user-assisted remote attackers to cause a d…

    gimp Debian
  • Unscored —
    CVE-2007-2797

    xterm, including 192-7.el4 in Red Hat Enterprise Linux and 208-3.1 in Debian GNU/Linux, sets the wrong group ownership …

  • Unscored —
    CVE-2007-2958

    Format string vulnerability in the inc_put_error function in src/inc.c in Sylpheed 2.4.4, and Sylpheed-Claws (Claws Mai…

    sylpheed Debian