Skip to content
OpenAdvisories

Archive

September 2007

Vulnerabilities first published in this month (UTC), newest first.

← August 2007 2007 / September October 2007 →
  1. 1 
  2. 2 
  3. 3 
  4. 422
  5. 524
  6. 621
  7. 7 
  8. 812
  9. 9 
  10. 1027
  11. 1124
  12. 1231
  13. 131
  14. 1429
  15. 15 
  16. 16 
  17. 1725
  18. 1851
  19. 1919
  20. 2013
  21. 2123
  22. 22 
  23. 239
  24. 2443
  25. 251
  26. 2634
  27. 2731
  28. 288
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium —
    CVE-2006-7223

    XWiki Remote Code Execution

    PreviewAction in XWiki 0.9.543 through 0.9.1252 does not set the Author field to the identity of the user who last modified a document, which allows remote authenticated users without programming rights to execute arbitrary code by selecting a document whose …

    org.xwiki.platform:xwiki-platform-oldcore Maven
  • Medium 6.1
    CVE-2007-4465 EPSS 26%

    Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on…

    apache2 Debian
  • Medium 5.3
    CVE-2007-4786

    Cisco Adaptive Security Appliance (ASA) running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8…

  • Medium —
    CVE-2007-4724

    Apache Tomcat Example Application CSRF and XSS Vulnerabilities

    Cross-site request forgery (CSRF) vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbitrary users via the time and description parameters.

    org.apache.tomcat:tomcat Maven