Skip to content
OpenAdvisories

Archive

24 September 2007

Vulnerabilities first published on this day (UTC), newest first.

18 results · Clear filters · Feed

  • Unscored —
    CVE-2007-5070 Public exploit

    Heap-based buffer overflow in the EasyMailMessagePrinter ActiveX control in emprint.DLL 6.0.1.0 in the Quiksoft EasyMai…

  • Unscored —
    CVE-2007-5068 Public exploit

    SQL injection vulnerability in index.php in phpFullAnnu (PFA) 6.0 allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2007-5069 Public exploit

    Directory traversal vulnerability in data/compatible.php in the Nuke Mobile Entertainment 1 addon for PHP-Nuke allows r…

  • Unscored —
    CVE-2007-5067 Public exploit EPSS 73%

    Multiple buffer overflows in iMatix Xitami Web Server 2.5c2 allow remote attackers to execute arbitrary code via a long…

  • Unscored —
    CVE-2007-4573 Public exploit

    The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x86_6…

  • Unscored —
    CVE-2007-5055 Public exploit

    Multiple directory traversal vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to include and exe…

  • Unscored —
    CVE-2007-5053 Public exploit

    Multiple incomplete blacklist vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitr…

  • Unscored —
    CVE-2007-5054 Public exploit EPSS 42%

    Multiple PHP remote file inclusion vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute a…

  • Unscored —
    CVE-2007-5065 Public exploit EPSS 42%

    PHP remote file inclusion vulnerability in admin.slideshow1.php in the Flash Slide Show (com_slideshow) component for J…

  • Unscored —
    CVE-2007-5062 Public exploit

    account.php in Adam Scheinberg Flip 3.0 and earlier allows remote attackers to create administrative accounts via the u…

  • Unscored —
    CVE-2007-5064 Public exploit

    Buffer overflow in a certain ActiveX control in Xunlei Web Thunder 5.6.9.344, possibly the DapPlayer ActiveX control in…

  • Unscored —
    CVE-2007-5063 Public exploit

    Adam Scheinberg Flip 3.0 and earlier stores sensitive information under the web root with insufficient access control, …

  • Unscored —
    CVE-2007-5061 Public exploit

    SQL injection vulnerability in mods/banners/navlist.php in Clansphere 2007.4 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2007-5060 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the cpass functionality in an admin action in index.php in XCMS allo…

  • Unscored —
    CVE-2007-5056 Public exploit EPSS 28%

    Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including…

  • Unscored —
    CVE-2007-5050 Public exploit

    Directory traversal vulnerability in index.php in Neuron News 1.0 allows remote attackers to include and execute arbitr…

  • Unscored —
    CVE-2007-5052 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in Vigile CMS 1.8 allow remote attackers to inject arb…

  • Unscored —
    CVE-2007-5036 Public exploit

    Multiple buffer overflows in the AirDefense Airsensor M520 with firmware 4.3.1.1 and 4.4.1.4 allow remote authenticated…