Skip to content
OpenAdvisories

Archive

September 2007

Vulnerabilities first published in this month (UTC), newest first.

174 results · Clear filters · Feed

  • Unscored —
    CVE-2007-4843 Public exploit

    Directory traversal vulnerability in X-Diesel Unreal Commander 0.92 build 565 and 573 allows remote FTP servers to crea…

  • Unscored —
    CVE-2007-4846 Public exploit

    SQL injection vulnerability in start.php in Webace-Linkscript (wls) 1.3 Special Edition (SE) allows remote attackers to…

  • Unscored —
    CVE-2007-4834 Public exploit EPSS 59%

    Multiple PHP remote file inclusion vulnerabilities in phpRealty 0.02 allow remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2007-4838 Public exploit

    Multiple buffer overflows in CellFactor Revolution 1.03 and earlier allow remote attackers to execute arbitrary code vi…

  • Unscored —
    CVE-2007-3040 Public exploit EPSS 54%

    Stack-based buffer overflow in agentdpv.dll 2.0.0.3425 in Microsoft Agent on Windows 2000 SP4 allows remote attackers t…

  • Unscored —
    CVE-2007-2930 Public exploit

    The (1) NSID_SHUFFLE_ONLY and (2) NSID_USE_POOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS …

  • Unscored —
    CVE-2007-4820 Public exploit

    Absolute path traversal vulnerability in blanko.preview.php in Sisfo Kampus 2006 allows remote attackers to read arbitr…

  • Unscored —
    CVE-2007-4814 Public exploit EPSS 46%

    Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.20…

  • Unscored —
    CVE-2007-4818 Public exploit EPSS 56%

    Multiple PHP remote file inclusion vulnerabilities in Txx CMS 0.2 allow remote attackers to execute arbitrary PHP code …

  • Unscored —
    CVE-2007-4817 Public exploit

    Unrestricted file upload vulnerability in the Restaurante (com_restaurante) component for Joomla! allows remote attacke…

  • Unscored —
    CVE-2007-4821 Public exploit

    Buffer overflow in a certain ActiveX control in officeviewer.ocx 5.2.218.1 in EDraw Office Viewer Component 5.2 allows …

  • Unscored —
    CVE-2007-4816 Public exploit

    Multiple buffer overflows in the BaoFeng2 storm ActiveX control in Mps.dll allow remote attackers to have an unknown im…

  • Unscored —
    CVE-2007-4815 Public exploit EPSS 39%

    Multiple PHP remote file inclusion vulnerabilities in WebED in Markus Iser ED Engine 0.8999 alpha allow remote attacker…

  • Unscored —
    CVE-2007-4819 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Txx CMS 0.2 allow remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2007-4804 Public exploit

    Multiple SQL injection vulnerabilities in AuraCMS 1.5rc allow remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2007-4812 Public exploit

    Buffer overflow in Apple Safari 3.0.3 522.15.5, and other versions before Beta Update 3.0.4, allows remote attackers to…

  • Unscored —
    CVE-2007-4806 Public exploit

    PHP remote file inclusion vulnerability in modules/Discipline/CategoryBreakdownTime.php in Focus/SIS 1.0 allows remote …

  • Unscored —
    CVE-2007-4802 Public exploit

    Multiple heap-based buffer overflows in GlobalLink 2.7.0.8 allow remote attackers to execute arbitrary code via (1) a l…

  • Unscored —
    CVE-2007-4807 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Focus/SIS 2.2 allow remote attackers to execute arbitrary PHP cod…

  • Unscored —
    CVE-2007-4808 Public exploit

    Multiple SQL injection vulnerabilities in TLM CMS 3.2 allow remote attackers to execute arbitrary SQL commands via (1) …

  • Unscored —
    CVE-2007-4803 Public exploit

    Buffer overflow in AtomixMP3 2.3 allows user-assisted remote attackers to execute arbitrary code via long strings in fi…

  • Unscored —
    CVE-2007-4805 Public exploit

    Directory traversal vulnerability in getgalldata.php in fuzzylime (cms) 3.0 and earlier allows remote attackers to incl…

  • Unscored —
    CVE-2007-4809 Public exploit EPSS 56%

    Multiple PHP remote file inclusion vulnerabilities in Online Fantasy Football League (OFFL) 0.2.6 allow remote attacker…

  • Unscored —
    CVE-2007-4776 Public exploit EPSS 49%

    Buffer overflow in Microsoft Visual Basic 6.0 and Enterprise Edition 6.0 SP6 allows user-assisted remote attackers to e…

  • Unscored —
    CVE-2007-4781 Public exploit

    administrator/index.php in the installer component (com_installer) in Joomla! 1.5 Beta1, Beta2, and RC1 allows remote a…

  • Unscored —
    CVE-2007-4790 Public exploit EPSS 55%

    Stack-based buffer overflow in certain ActiveX controls in (1) FPOLE.OCX 6.0.8450.0 and (2) Foxtlib.ocx, as used in the…

  • Unscored —
    CVE-2007-4763 Public exploit

    PHP remote file inclusion vulnerability in dbmodules/DB_adodb.class.php in PHP Object Framework (PHPOF) 20040226 and ea…

  • Unscored —
    CVE-2007-4762 Public exploit

    Multiple SQL injection vulnerabilities in embadmin/login.asp in E-SMARTCART 1.0 allow remote attackers to execute arbit…

  • Unscored —
    CVE-2007-4757 Public exploit EPSS 65%

    PHP remote file inclusion vulnerability in menu.php in phpMytourney allows remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2007-4754 Public exploit

    Format string vulnerability in the safe_bprintf function in acesrc/acebot_cmds.c in Alien Arena 2007 6.10 and earlier a…

  • Unscored —
    CVE-2007-4744 Public exploit EPSS 60%

    PHP remote file inclusion vulnerability in environment.php in AnyInventory 1.9.1 and 2.0, when register_globals is enab…

  • Unscored —
    CVE-2007-4748 Public exploit

    Buffer overflow in the PowerPlayer.dll ActiveX control in PPStream 2.0.1.3829 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2007-3913 Public exploit

    SQL injection vulnerability in Gforge before 3.1 allows remote attackers to execute arbitrary SQL commands via unspecif…

  • Unscored —
    CVE-2004-2685 Public exploit EPSS 11%

    Buffer overflow in YoungZSoft CCProxy 6.2 and earlier allows remote attackers to execute arbitrary code via a long addr…

  • Unscored —
    CVE-2007-4735 Public exploit

    Buffer overflow in Next Generation Software Virtual DJ (VDJ) 5.0 allows user-assisted remote attackers to execute arbit…

  • Unscored —
    CVE-2007-4740 Public exploit

    The HPRevolutionRegistryManager ActiveX control in Hp.Revolution.RegistryManager.dll 1 in Telecom Italy Alice Messenger…

  • Unscored —
    CVE-2007-4736 Public exploit

    SQL injection vulnerability in category.php in CartKeeper CKGold Shopping Cart 2.0 allows remote attackers to execute a…

  • Unscored —
    CVE-2007-4737 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0 allow remote attackers…

  • Unscored —
    CVE-2007-4734 Public exploit

    Buffer overflow in Ots Labs OTSTurntables 1.00 allows user-assisted remote attackers to execute arbitrary code via a lo…

  • Unscored —
    CVE-2007-4738 Public exploit EPSS 11%

    Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0 allow remote attackers…