Skip to content
OpenAdvisories

Archive

21 September 2007

Vulnerabilities first published on this day (UTC), newest first.

23 results · Feed

  • Unscored —

    ELinks before 0.11.3, when sending a POST request for an https URL, appends the body and content headers of the POST re…

  • Unscored —

    Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server in EMC VMware Workstat…

  • Unscored —

    The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.…

  • Unscored —
    CVE-2007-0063 EPSS 20%

    Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 5501…

  • Unscored —

    lib/vorbisfile.c in libvorbisfile in Xiph.Org libvorbis before 1.2.0 allows context-dependent attackers to cause a deni…

  • Unscored —

    Unspecified vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player b…

  • Unscored —

    Multiple buffer overflows in Xiph.Org libvorbis before 1.2.0 allow context-dependent attackers to cause a denial of ser…

  • Unscored —

    backend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is configured and "shutdown with password" is enabl…

  • Unscored —
    CVE-2007-4991 EPSS 16%

    The SOCKS4 Proxy in Microsoft Internet Security and Acceleration (ISA) Server 2004 SP1 and SP2 allows remote attackers …

  • Unscored —

    Unspecified vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player b…

  • Unscored —

    Dibbler 0.6.0 does not verify that certain length parameters are appropriate for buffer sizes, which allows remote atta…

  • Unscored —

    Multiple integer overflows in Dibbler 0.6.0 allow remote attackers to cause a denial of service (daemon crash) via pack…

  • Unscored —

    EMC VMware Server before 1.0.4 Build 56528 writes passwords in cleartext to unspecified log files, which allows local u…

  • Unscored —
    CVE-2007-5026 Public exploit

    dBlog CMS, probably 2.0, stores sensitive information under the web root with insufficient access control, which allows…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in profile.php in phpBB XS 2 allows remote attackers to inject arbitrary web s…

  • Unscored —

    Unspecified vulnerability in EMC VMware ACE before 1.0.3 Build 54075 allows attackers to have an unknown impact via an …

  • Unscored —
    CVE-2007-5027 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/ddns in the web management panel for the WBR3404TX broad…

  • Unscored —

    Unquoted Windows search path vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Buil…

  • Unscored —

    The TSrvOptIA_NA::rebind method in SrvOptions/SrvOptIA_NA.cpp in Dibbler 0.6.0 allows remote attackers to cause a denia…

  • Unscored —

    Dibbler 0.6.0 on Linux uses weak world-writable permissions for unspecified files in /var/lib/dibbler, which has unknow…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attackers to add…

  • Unscored —
    CVE-2007-5020 EPSS 20%

    Unspecified vulnerability in Adobe Acrobat and Reader 8.1 on Windows allows remote attackers to execute arbitrary code …

  • Unscored —

    Unspecified vulnerability in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5…