Skip to content
OpenAdvisories

Archive

14 September 2007

Vulnerabilities first published on this day (UTC), newest first.

← August 2007 2007 / September /14 October 2007 →
  1. 1 
  2. 2 
  3. 3 
  4. 422
  5. 524
  6. 621
  7. 7 
  8. 812
  9. 9 
  10. 1027
  11. 1124
  12. 1231
  13. 131
  14. 1429
  15. 15 
  16. 16 
  17. 1725
  18. 1851
  19. 1919
  20. 2013
  21. 2123
  22. 22 
  23. 239
  24. 2443
  25. 251
  26. 2634
  27. 2731
  28. 288
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

29 results · Feed

  • Unscored —
    CVE-2007-4894

    Multiple SQL injection vulnerabilities in Wordpress before 2.2.3 and Wordpress multi-user (MU) before 1.2.5a allow remo…

    wordpress Debian
  • Unscored —
    CVE-2007-4898

    Unspecified vulnerability in the Multiwiki plugin in XWiki before 1.1 Enterprise RC2 allows remote authenticated users,…

  • Unscored —
    CVE-2007-4899 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Boinc Forum 5.10.20 and earlier allow remote attackers to inject…

  • Unscored —
    CVE-2007-4897 Public exploit EPSS 11%

    pwlib, as used by Ekiga 2.0.5 and possibly other products, allows remote attackers to cause a denial of service (applic…

  • Unscored —
    CVE-2007-4896 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in admin/header.php in Toms Gaestebuch 1.01 and earlier allow remot…

  • Unscored —
    CVE-2007-4895 Public exploit

    Directory traversal vulnerability in dwoprn.php in Sisfo Kampus 2006 (Semarang 3) allows remote attackers to read arbit…

  • Unscored —
    CVE-2007-4893

    wp-admin/admin-functions.php in Wordpress before 2.2.3 and Wordpress multi-user (MU) before 1.2.5a does not properly ve…

    wordpress Debian
  • Unscored —
    CVE-2007-4901

    The embedded Internet Explorer server control in AOL Instant Messenger (AIM) 6.1.41.2 and 6.2.32.1, AIM Pro, and AIM Li…

  • Unscored —
    CVE-2007-4892 Public exploit

    Multiple SQL injection vulnerabilities in SWSoft Plesk 7.6.1, 8.1.0, 8.1.1, and 8.2.0 for Windows allow remote attacker…

  • Unscored —
    CVE-2007-4900

    Cross-site scripting (XSS) vulnerability in the logon page in RSA EnVision 3.3.6 Build 0115 allows remote attackers to …

  • Unscored —
    CVE-2007-4889

    The MySQL extension in PHP 5.2.4 and earlier allows remote attackers to bypass safe_mode and open_basedir restrictions …

  • Unscored —
    CVE-2007-4891 Public exploit EPSS 31%

    A certain ActiveX control in PDWizard.ocx 6.0.0.9782 and earlier in Microsoft Visual Studio 6.0 exposes dangerous (1) S…

  • Unscored —
    CVE-2007-4138

    The Winbind nss_info extension (nsswitch/idmap_ad.c) in idmap_ad.so in Samba 3.0.25 through 3.0.25c, when the "winbind …

    samba Debian
  • Unscored —
    CVE-2007-4890 Public exploit EPSS 16%

    Absolute directory traversal vulnerability in a certain ActiveX control in the VB To VSI Support Library (VBTOVSI.DLL) …

  • Unscored —
    CVE-2007-3739

    mm/mmap.c in the hugetlb kernel, when run on PowerPC systems, does not prevent stack expansion from entering into reser…

  • Unscored —
    CVE-2007-3740

    The CIFS filesystem in the Linux kernel before 2.6.22, when Unix extension support is enabled, does not honor the umask…

  • Medium —
    CVE-2006-7223

    XWiki Remote Code Execution

    PreviewAction in XWiki 0.9.543 through 0.9.1252 does not set the Author field to the identity of the user who last modified a document, which allows remote authenticated users without programming rights to execute arbitrary code by selecting a document whose …

    org.xwiki.platform:xwiki-platform-oldcore Maven
  • Unscored —
    CVE-2005-4862

    The search functionality in XWiki 0.9.793 indexes cleartext user passwords, which allows remote attackers to obtain sen…

  • Unscored —
    CVE-2007-1688

    Buffer overflow in the PhPInfo ActiveX control in PhPCtrl.dll in Callisto PhotoParade Player allows remote attackers to…

  • Unscored —
    CVE-2007-4884

    Media Player Classic (MPC) allows user-assisted remote attackers to cause a denial of service (application crash) via a…

  • Unscored —
    CVE-2007-4883

    Cross-site scripting (XSS) vulnerability in the BotQuery extension in MediaWiki 1.7.x and earlier before SVN 20070910 a…

  • Unscored —
    CVE-2007-4882

    Multiple cross-site scripting (XSS) vulnerabilities in TechExcel CustomerWise (formerly TechExcel CRM) allow remote att…

  • Unscored —
    CVE-2007-4886 Public exploit

    Incomplete blacklist vulnerability in index.php in AuraCMS 1.x and probably 2.x allows remote attackers to execute arbi…

  • Unscored —
    CVE-2007-4749

    The cmdjob utility in Autodesk Backburner 3.0.2 allows remote attackers to execute arbitrary commands on render servers…

  • Unscored —
    CVE-2007-4881

    SQL injection vulnerability in profile/myprofile.php in psi-labs.com social networking script (psisns), probably 1.0, a…

  • Unscored —
    CVE-2007-4887

    The dl function in PHP 5.2.4 and earlier allows context-dependent attackers to cause a denial of service (application c…

  • Unscored —
    CVE-2007-4885

    Avnex AV MP3 Player allows user-assisted remote attackers to cause a denial of service (application crash) via a malfor…

  • Medium 6.1
    CVE-2007-4465 EPSS 26%

    Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on…

    apache2 Debian
  • Unscored —
    CVE-2007-4888

    The "You are not allowed..." error handler in XWiki 1.0 B1 and 1.0 B2 associates the doc variable with the entire docum…