Skip to content
OpenAdvisories

Archive

17 September 2007

Vulnerabilities first published on this day (UTC), newest first.

← August 2007 2007 / September /17 October 2007 →
  1. 1 
  2. 2 
  3. 3 
  4. 422
  5. 524
  6. 621
  7. 7 
  8. 812
  9. 9 
  10. 1027
  11. 1124
  12. 1231
  13. 131
  14. 1429
  15. 15 
  16. 16 
  17. 1725
  18. 1851
  19. 1919
  20. 2013
  21. 2123
  22. 22 
  23. 239
  24. 2443
  25. 251
  26. 2634
  27. 2731
  28. 288
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

18 results · Clear filters · Feed

  • Unscored —
    CVE-2007-4919 Public exploit

    Multiple SQL injection vulnerabilities in JBlog 1.0 allow (1) remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2007-4922 Public exploit

    SQL injection vulnerability in play.php in the jeuxflash 1.0 module for KwsPHP allows remote authenticated users to exe…

  • Unscored —
    CVE-2007-4911 Public exploit

    JSMP3OGGWt.dll in JetCast Server 2.0.0.4308 allows remote attackers to cause a denial of service (daemon crash) via a l…

  • Unscored —
    CVE-2007-4917 Public exploit

    Cross-site scripting (XSS) vulnerability in tracking.php in PHP-Stats 0.1.9.2 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2007-4920 Public exploit

    SQL injection vulnerability in soporte_derecha_w.php in PHP Webquest 2.5 and earlier allows remote attackers to execute…

  • Unscored —
    CVE-2007-4916 Public exploit EPSS 20%

    Heap-based buffer overflow in the FileFind::FindFile method in (1) MFC42.dll, (2) MFC42u.dll, (3) MFC71.dll, and (4) MF…

  • Unscored —
    CVE-2007-4909 Public exploit

    Interpretation conflict in WinSCP before 4.0.4 allows remote attackers to perform arbitrary file transfers with a remot…

  • Unscored —
    CVE-2007-4921 Public exploit EPSS 53%

    PHP remote file inclusion vulnerability in _includes/settings.inc.php in Ajax File Browser 3 Beta allows remote attacke…

  • Unscored —
    CVE-2007-4918 Public exploit

    SQL injection vulnerability in classes/gelato.class.php in Gelato allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2007-4923 Public exploit EPSS 42%

    PHP remote file inclusion vulnerability in admin.joomlaradiov5.php in the Joomla Radio 5 (com_joomlaradiov5) component …

  • Unscored —
    CVE-2007-4915 Public exploit EPSS 68%

    The Intersil isl3893 extensions for Boa 0.93.15, as used on the FreeLan RO80211G-AP and other devices, do not prevent s…

  • Unscored —
    CVE-2007-4904 Public exploit

    RealNetworks RealPlayer 10.1.0.3114 and earlier, and Helix Player 1.0.6.778 on Fedora Core 6 (FC6) and possibly other p…

  • Unscored —
    CVE-2007-4903 Public exploit

    Multiple buffer overflows in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component all…

  • Unscored —
    CVE-2007-4907 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in X-Cart allow remote attackers to execute arbitrary PHP code via a…

  • Unscored —
    CVE-2007-4906 Public exploit EPSS 38%

    PHP remote file inclusion vulnerability in tasks/send_queued_emails.php in NuclearBB Alpha 2, when register_globals is …

  • Unscored —
    CVE-2007-4905 Public exploit

    Unrestricted file upload vulnerability in mod/contak.php in AuraCMS 2.1 allows remote attackers to upload and execute a…

  • Unscored —
    CVE-2007-4908 Public exploit

    Directory traversal vulnerability in index.php in AuraCMS 2.1 and earlier allows remote attackers to include and execut…

  • Unscored —
    CVE-2007-4902 Public exploit

    Absolute path traversal vulnerability in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto C…