Skip to content
OpenAdvisories

Archive

5 October 2007

Vulnerabilities first published on this day (UTC), newest first.

← September 2007 2007 / October /5 November 2007 →
  1. 138
  2. 2 
  3. 317
  4. 416
  5. 524
  6. 676
  7. 7 
  8. 818
  9. 963
  10. 10 
  11. 1119
  12. 1242
  13. 1315
  14. 1471
  15. 158
  16. 1616
  17. 1752
  18. 1894
  19. 1945
  20. 2029
  21. 218
  22. 224
  23. 2366
  24. 2440
  25. 2534
  26. 2633
  27. 27 
  28. 284
  29. 2955
  30. 3039
  31. 3144
All Critical High Medium Low Exploited only Public exploit

24 results · Feed

  • Unscored —
    CVE-2007-5227

    Multiple cross-site scripting (XSS) vulnerabilities in messaging/course/composeMessage.jsp in BlackBoard Learning Syste…

  • Unscored —
    CVE-2007-5228

    Cross-site scripting (XSS) vulnerability in the subscription functionality in the Project issue tracking module before …

  • Unscored —
    CVE-2007-5231 Public exploit

    Unrestricted file upload vulnerability in admin/upload_files.php in Zomplog 3.8.1 and earlier allows remote authenticat…

  • Unscored —
    CVE-2007-5229 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the FeedBurner FeedSmith 2.2 plugin for WordPress allows remote atta…

    Web / CMS
  • Unscored —
    CVE-2007-5234 Public exploit EPSS 42%

    PHP remote file inclusion vulnerability in upload/common/footer.php in Ossigeno CMS 2.2 alpha3 allows remote attackers …

  • Unscored —
    CVE-2007-5230 Public exploit

    admin/upload_files.php in Zomplog 3.8.1 and earlier does not check for administrative credentials, which allows remote …

  • Unscored —
    CVE-2007-5232

    Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK an…

  • Unscored —
    CVE-2007-5233 Public exploit

    SQL injection vulnerability in index.php in Web Template Management System 1.3 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2007-3918

    Cross-site scripting (XSS) vulnerability in account/verify.php in GForge 4.6b2 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2007-0447

    Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute…

  • Unscored —
    CVE-2007-4568

    Integer overflow in the build_range function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attacke…

  • Unscored —
    CVE-2007-4990 EPSS 11%

    The swap_char2b function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitr…

  • Unscored —
    CVE-2007-3699

    The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite l…

  • Unscored —
    CVE-2007-5226

    irc_server.c in dircproxy 1.2.0 and earlier allows remote attackers to cause a denial of service (segmentation fault) v…

    dircproxy Debian
  • Unscored —
    CVE-2007-5218 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Don Barnes DRBGuestbook 1.1.13 allows remote attackers to inje…

  • Unscored —
    CVE-2007-5223

    Multiple unspecified vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to include local files …

  • Unscored —
    CVE-2007-5222 Public exploit

    SQL injection vulnerability in index.php in MAXdev MDPro (MD-Pro) 1.0.76 allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2007-5224

    inc/exif.inc.php in Original Photo Gallery 0.11.2 and earlier allows remote attackers to execute arbitrary programs via…

  • Unscored —
    CVE-2007-5220

    SQL injection vulnerability in catalog.asp in ASP Product Catalog allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2007-5221 Public exploit

    PHP remote file inclusion vulnerability in mail/childwindow.inc.php in Poppawid 2.7 allows remote attackers to execute …

  • Unscored —
    CVE-2007-5219 Public exploit EPSS 16%

    Directory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting.DLL 1.00.1829 in the CL…

  • Unscored —
    CVE-2007-5217 Public exploit EPSS 30%

    Stack-based buffer overflow in the ADM4 ActiveX control in adm4.dll in Altnet Download Manager 4.0.0.6, as used in (1) …

  • Unscored —
    CVE-2007-5078

    Multiple cross-site scripting (XSS) vulnerabilities in eGov Manager allow remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2007-5225 Public exploit

    Integer signedness error in FIFO filesystems (named pipes) on Sun Solaris 8 through 10 allows local users to read the c…