Skip to content
OpenAdvisories

Archive

4 September 2007

Vulnerabilities first published on this day (UTC), newest first.

← August 2007 2007 / September /4 October 2007 →
  1. 1 
  2. 2 
  3. 3 
  4. 422
  5. 524
  6. 621
  7. 7 
  8. 812
  9. 9 
  10. 1027
  11. 1124
  12. 1231
  13. 131
  14. 1429
  15. 15 
  16. 16 
  17. 1725
  18. 1851
  19. 1919
  20. 2013
  21. 2123
  22. 22 
  23. 239
  24. 2443
  25. 251
  26. 2634
  27. 2731
  28. 288
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

22 results · Feed

  • Unscored —
    CVE-2007-4659

    The zend_alter_ini_entry function in PHP before 5.2.4 does not properly handle an interruption to the flow of execution…

  • Unscored —
    CVE-2007-4661

    The chunk_split function in string.c in PHP 5.2.3 does not properly calculate the needed buffer size due to precision l…

  • Unscored —
    CVE-2007-4669

    The Services API in Firebird before 2.0.2 allows remote authenticated users without SYSDBA privileges to read the serve…

  • Unscored —
    CVE-2007-4657

    Multiple integer overflows in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to obtain sensitive in…

  • Unscored —
    CVE-2007-4660

    Unspecified vulnerability in the chunk_split function in PHP before 5.2.4 has unknown impact and attack vectors, relate…

  • Unscored —
    CVE-2007-4662

    Buffer overflow in the php_openssl_make_REQ function in PHP before 5.2.4 has unknown impact and attack vectors.

  • Unscored —
    CVE-2007-4666

    Unspecified vulnerability in the server in Firebird before 2.0.2, when a Superserver/TCP/IP environment is configured, …

  • Unscored —
    CVE-2007-4655

    Multiple directory traversal vulnerabilities in CGI RESCUE Shopping Basket Professional 7.51 and earlier allow remote a…

  • Unscored —
    CVE-2007-4654

    Unspecified vulnerability in SSHield 1.6.1 with OpenSSH 3.0.2p1 on Cisco WebNS 8.20.0.1 on Cisco Content Services Switc…

  • Unscored —
    CVE-2007-4667

    Unspecified vulnerability in the Services API in Firebird before 2.0.2 allows remote attackers to cause a denial of ser…

  • Unscored —
    CVE-2007-4664

    Unspecified vulnerability in the (1) attach database and (2) create database functionality in Firebird before 2.0.2, wh…

  • Unscored —
    CVE-2007-4663

    Directory traversal vulnerability in PHP before 5.2.4 allows attackers to bypass open_basedir restrictions via unspecif…

  • Unscored —
    CVE-2007-4668

    Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to determine the existence of …

  • Unscored —
    CVE-2007-4665

    Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to cause a denial of service (…

  • Unscored —
    CVE-2007-4656

    backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaint…

    backup-manager Debian
  • Unscored —
    CVE-2007-4653 Public exploit

    SQL injection vulnerability in links.php in the Links MOD 1.2.2 and earlier for phpBB 2.0.22 and earlier allows remote …

  • Unscored —
    CVE-2007-4658

    The money_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple (1) %i and (2) %n tokens, whi…

  • Unscored —
    CVE-2007-4652 Public exploit

    The session extension in PHP before 5.2.4 might allow local users to bypass open_basedir restrictions via a session fil…

  • Unscored —
    CVE-2007-3998

    The wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the breakcharlen variable, w…

  • Unscored —
    CVE-2007-3996

    Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (applicatio…

    libgd2 libwmf racket Debian
  • Unscored —
    CVE-2007-3997 Public exploit EPSS 14%

    The (1) MySQL and (2) MySQLi extensions in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to bypass…

  • Unscored —
    CVE-2007-4650

    Multiple unspecified vulnerabilities in Gallery before 2.2.3 allow attackers to (1) rename items, (2) read and modify i…