Skip to content
OpenAdvisories

Archive

28 August 2007

Vulnerabilities first published on this day (UTC), newest first.

← July 2007 2007 / August /28 September 2007 →
  1. 112
  2. 2 
  3. 341
  4. 4 
  5. 5 
  6. 6 
  7. 711
  8. 884
  9. 922
  10. 102
  11. 11 
  12. 12 
  13. 1321
  14. 1442
  15. 1524
  16. 1610
  17. 1715
  18. 1835
  19. 19 
  20. 2018
  21. 2129
  22. 2218
  23. 2322
  24. 24 
  25. 2516
  26. 26 
  27. 2715
  28. 2823
  29. 2916
  30. 306
  31. 3147
All Critical High Medium Low Exploited only Public exploit

23 results · Feed

  • Unscored —
    CVE-2007-4580

    Buffer underflow in redlight.sys in BufferZone 2.1 and 2.5 allows local users to cause a denial of service (crash) and …

  • Unscored —
    CVE-2007-4578

    Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (cr…

  • Unscored —
    CVE-2007-4577

    Sophos Anti-Virus for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (infinite loop) via…

  • Unscored —
    CVE-2007-3846

    Directory traversal vulnerability in Subversion before 1.4.5, as used by TortoiseSVN before 1.4.5 and possibly other pr…

  • Unscored —
    CVE-2006-7222 Public exploit

    Buffer overflow in the CFLICStream::_deltachunk function in FLICSource.cpp in Media Player Classic (MPC) 6.4.9.0 allows…

  • Unscored —
    CVE-2007-4563

    Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to …

  • Medium —
    CVE-2007-4556 EPSS 26%

    OpenSymphony XWork vulnerable to improper input validation

    Struts support in OpenSymphony XWork before 1.2.3, and 2.x before 2.0.4, as used in WebWork and Apache Struts, recursively evaluates all input as an Object-Graph Navigation Language (OGNL) expression when altSyntax is enabled, which allows remote attackers to…

    opensymphony:xwork Maven
  • Unscored —
    CVE-2007-4564

    Cosminexus Manager in Cosminexus Application Server 07-00 and later might assign the wrong user's group permissions to …

  • Unscored —
    CVE-2007-4562

    Unspecified vulnerability in Hitachi DABroker before 03-02-/D and Cosminexus DABroker before 02-04-/C and 03-05-/E allo…

  • Unscored —
    CVE-2007-4560 Public exploit EPSS 84%

    clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary comman…

    clamav Debian
  • Unscored —
    CVE-2007-4521

    Asterisk Open Source 1.4.5 through 1.4.11, when configured to use an IMAP voicemail storage backend, allows remote atta…

  • Unscored —
    CVE-2007-4565

    sink.c in fetchmail before 6.3.9 allows context-dependent attackers to cause a denial of service (NULL dereference and …

    fetchmail Debian
  • Unscored —
    CVE-2007-4561

    Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote attackers to execute arb…

  • Unscored —
    CVE-2007-4557

    Cross-site scripting (XSS) vulnerability in the webacc servlet in Novell GroupWise 6.5 WebAccess allows remote attacker…

  • Unscored —
    CVE-2007-4566 Public exploit EPSS 15%

    Multiple buffer overflows in the login mechanism in sidvault in Alpha Centauri Software SIDVault LDAP Server before 2.0…

  • Unscored —
    CVE-2007-4552 Public exploit

    SQL injection vulnerability in index.php in Agares Media Arcadem 2.01 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2007-4549

    Multiple buffer overflows in ALPass 2.7 English and 3.02 Korean allow user-assisted remote attackers to execute arbitra…

  • Unscored —
    CVE-2007-4555

    Cross-site scripting (XSS) vulnerability in Ipswitch WS_FTP allows remote attackers to inject arbitrary web script or H…

  • Unscored —
    CVE-2007-4551 Public exploit

    PHP remote file inclusion vulnerability in index.php in Agares Media Arcadem 2.01 allows remote attackers to execute ar…

  • Unscored —
    CVE-2007-4554

    Cross-site scripting (XSS) vulnerability in tiki-remind_password.php in Tikiwiki (aka Tiki CMS/Groupware) 1.9.7 allows …

  • Critical 9.8
    CVE-2007-4559 Public exploit EPSS 27%

    Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allow…

    python3.4 python3.5 python2.7 python3.6 Ubuntu
  • Unscored —
    CVE-2007-4553 Public exploit

    The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service (device hang) v…

  • Unscored —
    CVE-2007-4550

    Format string vulnerability in ALPass 2.7 English and 3.02 Korean might allow user-assisted remote attackers to execute…