Skip to content
OpenAdvisories

Archive

4 October 2007

Vulnerabilities first published on this day (UTC), newest first.

← September 2007 2007 / October /4 November 2007 →
  1. 138
  2. 2 
  3. 317
  4. 416
  5. 524
  6. 676
  7. 7 
  8. 818
  9. 963
  10. 10 
  11. 1119
  12. 1242
  13. 1315
  14. 1471
  15. 158
  16. 1616
  17. 1752
  18. 1894
  19. 1945
  20. 2029
  21. 218
  22. 224
  23. 2366
  24. 2440
  25. 2534
  26. 2633
  27. 27 
  28. 284
  29. 2955
  30. 3039
  31. 3144
All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • Unscored —
    CVE-2007-4133

    The (1) hugetlb_vmtruncate_list and (2) hugetlb_vmtruncate functions in fs/hugetlbfs/inode.c in the Linux kernel before…

  • Unscored —
    CVE-2007-4673

    Argument injection vulnerability in Apple QuickTime 7.2 for Windows XP SP2 and Vista allows remote attackers to execute…

  • Unscored —
    CVE-2007-5216

    Multiple PHP remote file inclusion vulnerabilities in eArk (e-Ark) 1.0 allow remote attackers to execute arbitrary PHP …

  • Unscored —
    CVE-2007-5213

    Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and …

  • Unscored —
    CVE-2007-5209

    Stack-based buffer overflow in DriveLock.exe in CenterTools DriveLock 5.0 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2007-5212

    Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware before 2.43 allo…

  • Unscored —
    CVE-2007-5211

    Multiple cross-site scripting (XSS) vulnerabilities in Arbor Networks Peakflow SP 3.5.1 before patch 14, and 3.6.1 befo…

  • Unscored —
    CVE-2007-5215

    Multiple PHP remote file inclusion vulnerabilities in Jacob Hinkle GodSend 0.6 allow remote attackers to execute arbitr…

  • Unscored —
    CVE-2007-5210

    Arbor Networks Peakflow SP before 3.5.1 patch 14, and 3.6.x before 3.6.1 patch 5, allows remote authenticated users to …

  • Unscored —
    CVE-2007-5214

    Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier…

  • Unscored —
    CVE-2007-5207

    guilt 0.27 allows local users to overwrite arbitrary files via a symlink attack on a guilt.log.[PID] temporary file.

    guilt Debian
  • Unscored —
    CVE-2007-5194

    The Chroot server in rMake 1.0.11 creates a /dev/zero device file with read/write permissions for the rMake user and th…

  • Medium —
    CVE-2007-5201

    FTP backend for Duplicity Discloses Passwords to Process Listing

    The FTP backend for Duplicity before 0.4.9 sends the password as a command line argument when calling ncftp, which might allow local users to read the password by listing the process and its arguments.

    duplicity duplicity Debian PyPI
  • Unscored —
    CVE-2007-5198 Public exploit

    Buffer overflow in the redir function in check_http.c in Nagios Plugins before 1.4.10, when running with the -f (follow…

  • Unscored —
    CVE-2007-5191

    mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not ch…

    util-linux Debian
  • Unscored —
    CVE-2007-5193

    The default configuration for twiki 4.1.2 on Debian GNU/Linux, and possibly other operating systems, specifies the work…