Skip to content
OpenAdvisories

Archive

12 September 2007

Vulnerabilities first published on this day (UTC), newest first.

← August 2007 2007 / September /12 October 2007 →
  1. 1 
  2. 2 
  3. 3 
  4. 422
  5. 524
  6. 621
  7. 7 
  8. 812
  9. 9 
  10. 1027
  11. 1124
  12. 1231
  13. 131
  14. 1429
  15. 15 
  16. 16 
  17. 1725
  18. 1851
  19. 1919
  20. 2013
  21. 2123
  22. 22 
  23. 239
  24. 2443
  25. 251
  26. 2634
  27. 2731
  28. 288
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

31 results · Feed

  • Unscored —
    CVE-2007-4840

    PHP 5.2.4 and earlier allows context-dependent attackers to cause a denial of service (application crash) via (1) a lon…

    glibc Debian
  • Unscored —
    CVE-2007-4845 Public exploit

    Multiple SQL injection vulnerabilities in UPLOAD/index.php in RW::Download 2.0.3 lite allow remote attackers to execute…

  • Unscored —
    CVE-2007-4849

    JFFS2, as used on One Laptop Per Child (OLPC) build 542 and possibly other Linux systems, when POSIX ACL support is ena…

  • Unscored —
    CVE-2007-4842

    Directory traversal vulnerability in Enriva Development Magellan Explorer 3.32 build 2305 and earlier allows remote FTP…

  • Unscored —
    CVE-2007-4843 Public exploit

    Directory traversal vulnerability in X-Diesel Unreal Commander 0.92 build 565 and 573 allows remote FTP servers to crea…

  • Unscored —
    CVE-2007-4841

    Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and SeaMonkey before 1.1.5 allows remote attackers to execu…

  • Unscored —
    CVE-2007-4844

    X-Diesel Unreal Commander 0.92 build 565 and 573 does not properly react to an FTP server's behavior after sending a "C…

  • Unscored —
    CVE-2007-4848

    Microsoft Internet Explorer 4.0 through 7 allows remote attackers to determine the existence of local files that have a…

  • Unscored —
    CVE-2007-4847

    Google Picasa allows remote attackers to read image files stored by Picasa via unspecified vectors involving a picasa:/…

  • Unscored —
    CVE-2007-4846 Public exploit

    SQL injection vulnerability in start.php in Webace-Linkscript (wls) 1.3 Special Edition (SE) allows remote attackers to…

  • Unscored —
    CVE-2007-4834 Public exploit EPSS 59%

    Multiple PHP remote file inclusion vulnerabilities in phpRealty 0.02 allow remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2007-4839

    Unspecified vulnerability in the PD tools component in IBM WebSphere Application Server (WAS) 6.1 before Fix Pack 11 (6…

  • Unscored —
    CVE-2007-4836

    Cross-site scripting (XSS) vulnerability in index.php in phpMyQuote 0.20 allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2007-4837

    SQL injection vulnerability in anket.asp in Proxy Anket 3.0.1 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2007-4832

    Format string vulnerability in CellFactor Revolution 1.03 and earlier allows remote attackers to execute arbitrary code…

  • Unscored —
    CVE-2007-4835

    SQL injection vulnerability in index.php in phpMyQuote 0.20 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2007-4838 Public exploit

    Multiple buffer overflows in CellFactor Revolution 1.03 and earlier allow remote attackers to execute arbitrary code vi…

  • Unscored —
    CVE-2007-4833

    Unspecified vulnerability in the Edge Component in IBM WebSphere Application Server (WAS) 6.1 before Fix Pack 11 (6.1.0…

  • Unscored —
    CVE-2007-4828

    Cross-site scripting (XSS) vulnerability in the API pretty-printing mode in MediaWiki 1.8.0 through 1.8.4, 1.9.0 throug…

    mediawiki Debian
  • Unscored —
    CVE-2007-4727 EPSS 13%

    Buffer overflow in the fcgi_env_add function in mod_proxy_backend_fastcgi.c in the mod_fastcgi extension in lighttpd be…

    lighttpd Debian
  • Unscored —
    CVE-2007-4830

    Cross-site scripting (XSS) vulnerability in CMD_BANDWIDTH_BREAKDOWN in DirectAdmin 1.30.2 and earlier allows remote att…

  • Unscored —
    CVE-2007-4831

    Multiple cross-site scripting (XSS) vulnerabilities in account_settings.php in TorrentTrader 1.07 allow remote attacker…

  • Unscored —
    CVE-2007-3871

    Stampit Web uses guessable id values for online stamp purchases, which allows remote attackers to cause a denial of ser…

  • Unscored —
    CVE-2007-4826

    bgpd in Quagga before 0.99.9 allows explicitly configured BGP peers to cause a denial of service (crash) via a malforme…

  • Unscored —
    CVE-2007-4651

    Unspecified vulnerability in Adobe Connect Enterprise Server 6 allows remote attackers to read certain pages that are r…

  • Unscored —
    CVE-2007-4731

    Stack-based buffer overflow in the TMregChange function in TMReg.dll in Trend Micro ServerProtect before 5.58 Security …

  • Unscored —
    CVE-2007-4825

    Directory traversal vulnerability in PHP 5.2.4 and earlier allows attackers to bypass open_basedir restrictions and pos…

  • Unscored —
    CVE-2007-4752

    ssh in OpenSSH before 4.7 does not properly handle when an untrusted cookie cannot be created and uses a trusted X11 co…

    openssh Debian
  • Unscored —
    CVE-2007-3036

    Unspecified vulnerability in the (1) Windows Services for UNIX 3.0 and 3.5, and (2) Subsystem for UNIX-based Applicatio…

  • Unscored —
    CVE-2007-3040 Public exploit EPSS 54%

    Stack-based buffer overflow in agentdpv.dll 2.0.0.3425 in Microsoft Agent on Windows 2000 SP4 allows remote attackers t…

  • Unscored —
    CVE-2007-2930 Public exploit

    The (1) NSID_SHUFFLE_ONLY and (2) NSID_USE_POOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS …