Archive
18 September 2007
Vulnerabilities first published on this day (UTC), newest first.
51 results · Feed
-
Unscored —CVE-2007-4964 Public exploit
WinImage 8.10 and earlier allows remote attackers to cause a denial of service (infinite loop) via an invalid BPB_BytsP…
-
Unscored —CVE-2007-4966 Public exploit
SQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows remote attackers to execut…
-
Unscored —
Visual truncation vulnerability in WinImage 8.10 and earlier allows remote attackers to spoof a destination filename vi…
-
Unscored —
Argument injection vulnerability in the Linden Lab Second Life secondlife:// protocol handler, as used in Internet Expl…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) 1.6.3.4 allow remote attackers to inject ar…
-
Unscored —
The login_to_simulator method in Linden Lab Second Life, as used by the secondlife:// protocol handler and possibly oth…
-
Unscored —CVE-2007-4962 Public exploit
Directory traversal vulnerability in WinImage 8.10 and earlier allows user-assisted remote attackers to create or overw…
-
Unscored —
Cross-site scripting (XSS) vulnerability in catalog_products_with_images.php in osCMax 2.0.0-RC3-0-1 allows remote atta…
-
Unscored —
Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause…
-
Unscored —
RemoteDocs R-Viewer before 1.6.3768 stores encrypted RDZ file data in unencrypted temporary files, which allows local u…
-
Unscored —
Unspecified vulnerability in RemoteDocs R-Viewer before 1.6.3768 allows user-assisted remote attackers to execute arbit…
-
Critical 9.8
masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows re…
KEV Apr 15, 2022 -
Unscored —CVE-2007-2834 EPSS 12%
Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (St…
-
Unscored —
Multiple stack-based buffer overflows in the PhotoChannel Networks PNI Digital Media Photo Upload Plugin ActiveX contro…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in php(Reactor) 1.2.7pl1 allow remote attackers to execute arbitrary…
-
Unscored —CVE-2007-4957 Public exploit
Multiple directory traversal vulnerabilities in download.php in Chupix CMS 0.2.3 allow remote attackers to read or over…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Webmedia Explorer (webmex) 3.2.2 allow remote attackers to execut…
-
Unscored —CVE-2007-4956 Public exploit
Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via (1) t…
-
Unscored —
PHP remote file inclusion vulnerability in form/db_form/employee.php in PHPortal 0.2.7 allows remote attackers to execu…
-
Unscored —
PHP remote file inclusion vulnerability in sample.php in YaPiG 0.95b allows remote attackers to execute arbitrary PHP c…
-
Unscored —CVE-2007-4952 Public exploit
SQL injection vulnerability in article.php in OmniStar Article Manager allows remote attackers to execute arbitrary SQL…
-
Unscored —
PHP remote file inclusion vulnerability in admin.joomlaflashfun.php in the Flash Fun! (com_joomlaflashfun) 1.0 componen…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in myphpPagetool 0.4.3 allow remote attackers to execute arbitrary P…
-
Unscored —CVE-2007-4953 Public exploit
SQL injection vulnerability in index.php in SimpCMS allows remote attackers to execute arbitrary SQL commands via the k…
-
Unscored —
PHP remote file inclusion vulnerability in admin.joom12pic.php in the joom12Pic (com_joom12pic) 1.0 component for Jooml…
-
Unscored —
The NFS client implementation in the kernel in Red Hat Enterprise Linux (RHEL) 3, when a filesystem is mounted with the…
-
Unscored —
Race condition in the tee (sys_tee) system call in the Linux kernel 2.6.17 through 2.6.17.6 might allow local users to …
-
Unscored —
The ipv6_getsockopt_sticky function in the kernel in Red Hat Enterprise Linux (RHEL) Beta 5.1.0 allows local users to o…
-
Unscored —
Multiple integer overflows in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone and in mympc (aka CD-S…
-
Unscored —CVE-2007-4937 Public exploit
CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote atta…
-
Unscored —
LetterGrade allows remote attackers to obtain sensitive information (installation path or account existence) via unspec…
-
Unscored —CVE-2007-4941 Public exploit
KMPlayer 2.9.3.1210 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a .avi file …
-
Unscored —
Heap-based buffer overflow in mplayerc.exe in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone and in…
-
Unscored —CVE-2007-4942 Public exploit
PHP remote file inclusion vulnerability in modules/Discipline/StudentFieldBreakdown.php in Focus/SIS 1.0 allows remote …
-
Unscored —
Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context-dependent attackers to cause …
-
Unscored —
Unspecified vulnerability in Office Efficiencies SafeSquid 4.1.x has unknown impact and attack vectors, related to a "s…
-
Unscored —
The canvas.createPattern function in Opera 9.x before 9.22 for Linux, FreeBSD, and Solaris does not clear memory before…
-
Unscored —
Multiple buffer overflows in a certain ActiveX control in sparser.dll in Baofeng Storm 2.8 and earlier allow remote att…
-
Unscored —
Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a d…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in LetterGrade allow remote attackers to inject arbitrary web scrip…