Skip to content
OpenAdvisories

Archive

26 September 2007

Vulnerabilities first published on this day (UTC), newest first.

← August 2007 2007 / September /26 October 2007 →
  1. 1 
  2. 2 
  3. 3 
  4. 422
  5. 524
  6. 621
  7. 7 
  8. 812
  9. 9 
  10. 1027
  11. 1124
  12. 1231
  13. 131
  14. 1429
  15. 15 
  16. 16 
  17. 1725
  18. 1851
  19. 1919
  20. 2013
  21. 2123
  22. 22 
  23. 239
  24. 2443
  25. 251
  26. 2634
  27. 2731
  28. 288
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • Unscored —
    CVE-2007-5112 Public exploit

    Cross-site scripting (XSS) vulnerability in session.cgi (aka the login page) in Google Urchin 5 5.7.03 and earlier allo…

  • Unscored —
    CVE-2007-5111 Public exploit

    A certain ActiveX control in EBCRYPT.DLL 2.0 in EB Design ebCrypt allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2007-5113 Public exploit

    report.cgi in Google Urchin allows remote attackers to bypass authentication and obtain sensitive information (web serv…

  • Unscored —
    CVE-2007-5108 Public exploit

    Unspecified vulnerability in IAC Search & Media ask.com toolbar has unknown impact and remote attack vectors. NOTE: thi…

  • Unscored —
    CVE-2007-5110 Public exploit

    Absolute path traversal vulnerability in the EbCrypt.eb_c_PRNGenerator.1 ActiveX control in EBCRYPT.DLL 2.0.0.2087 and …

  • Unscored —
    CVE-2007-5107 Public exploit EPSS 36%

    Stack-based buffer overflow in the AskJeevesToolBar.SettingsPlugin.1 ActiveX control in askBar.dll in IAC Search & Medi…

  • Unscored —
    CVE-2007-5098 Public exploit EPSS 46%

    Multiple PHP remote file inclusion vulnerabilities in DFD Cart 1.1.4 and earlier, when register_globals is enabled, all…

  • Unscored —
    CVE-2007-5099 Public exploit EPSS 53%

    PHP remote file inclusion vulnerability in show.php in David Watters Helplink 0.1.0 allows remote attackers to execute …

  • Unscored —
    CVE-2007-5105 Public exploit

    Cross-site scripting (XSS) vulnerability in wp-register.php in WordPress 2.0 and 2.0.1 allows remote attackers to injec…

    wordpress Debian
  • Unscored —
    CVE-2007-5094 Public exploit

    Heap-based buffer overflow in iaspam.dll in the SMTP Server in Ipswitch IMail Server 8.01 through 8.11 allows remote at…

  • Unscored —
    CVE-2007-5102 Public exploit EPSS 39%

    PHP remote file inclusion vulnerability in config.inc.php in Wordsmith 1.0 RC1, when register_globals is enabled, allow…

  • Unscored —
    CVE-2007-4874 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in SimpNews 2.41.03 allow remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2007-5092 Public exploit

    Directory traversal vulnerability in index.php in the Dance Music module for phpNuke, when register_globals is enabled,…

  • Unscored —
    CVE-2007-5089 Public exploit

    PHP remote file inclusion vulnerability in php-inc/log.inc.php in sk.log 0.5.3 and earlier allows remote attackers to e…

  • Unscored —
    CVE-2007-4571 Public exploit

    The snd_mem_proc_read function in sound/core/memalloc.c in the Advanced Linux Sound Architecture (ALSA) in the Linux ke…