Skip to content
OpenAdvisories

Archive

6 October 2007

Vulnerabilities first published on this day (UTC), newest first.

← September 2007 2007 / October /6 November 2007 →
  1. 138
  2. 2 
  3. 317
  4. 416
  5. 524
  6. 676
  7. 7 
  8. 818
  9. 963
  10. 10 
  11. 1119
  12. 1242
  13. 1315
  14. 1471
  15. 158
  16. 1616
  17. 1752
  18. 1894
  19. 1945
  20. 2029
  21. 218
  22. 224
  23. 2366
  24. 2440
  25. 2534
  26. 2633
  27. 27 
  28. 284
  29. 2955
  30. 3039
  31. 3144
All Critical High Medium Low Exploited only Public exploit

76 results · Feed

  • Unscored —
    CVE-2005-4869 Public exploit

    The (1) to_char and (2) to_date function in IBM DB2 8.1 allows local users to cause a denial of service (application cr…

  • Unscored —
    CVE-2005-4868 Public exploit

    Shared memory sections and events in IBM DB2 8.1 have default permissions of read and write for the Everyone group, whi…

  • Unscored —
    CVE-2004-2691 Public exploit EPSS 39%

    Unspecified vulnerability in 3Com SuperStack 3 4400 switches with firmware version before 3.31 allows remote attackers …

  • Unscored —
    CVE-2004-2692 Public exploit

    The exec_dir PHP patch (php-exec-dir) 4.3.2 through 4.3.7 with safe mode disabled allows remote attackers to bypass res…

  • Unscored —
    CVE-2004-2689

    NewsPHP allows remote attackers to gain unauthorized administrative access by setting a cookie to the "autorized=admin;…

  • Unscored —
    CVE-2004-2688

    Cross-site scripting (XSS) vulnerability in index.php in NewsPHP allows remote attackers to inject arbitrary web script…

  • Unscored —
    CVE-2004-2693

    HP-UX B.11.00 and B.11.11 with B6848AB GTK+ Support Libraries installed uses insecure directory permissions, which allo…

  • Unscored —
    CVE-2004-2694

    Microsoft Outlook Express 6.0 allows remote attackers to bypass intended access restrictions, load content from arbitra…

  • Unscored —
    CVE-2004-2690

    Unrestricted file upload vulnerability in the Administration Panel for NewsPHP allows remote authenticated administrato…

  • Unscored —
    CVE-2007-5245

    Multiple stack-based buffer overflows in Firebird LI 1.5.3.4870 and 1.5.4.4910, and WI 1.5.3.4870 and 1.5.4.4910, allow…

  • Unscored —
    CVE-2007-5246

    Multiple stack-based buffer overflows in Firebird LI 2.0.0.12748 and 2.0.1.12855, and WI 2.0.0.12748 and 2.0.1.12855, a…

  • Unscored —
    CVE-2007-5254

    VirusBlokAda Vba32 AntiVirus 3.12.2 uses weak permissions (Everyone:Write) for its installation directory, which allows…

  • Unscored —
    CVE-2007-5260

    ASP-CMS 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attac…

  • Unscored —
    CVE-2007-5247

    Multiple format string vulnerabilities in the Monolith Lithtech engine, as used by First Encounter Assault Recon (F.E.A…

  • Unscored —
    CVE-2007-5261 Public exploit

    Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2007-5255 Public exploit

    Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance 3.4.14 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2007-5248 Public exploit

    Multiple format string vulnerabilities in the ID Software Doom 3 engine, as used by Doom 3 1.3.1 and earlier, Quake 4 1…

  • Unscored —
    CVE-2007-5257 Public exploit EPSS 15%

    Stack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in EDraw Office Viewer Compon…

  • Unscored —
    CVE-2007-5244 Public exploit EPSS 38%

    Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versi…

  • Unscored —
    CVE-2007-5250

    The Windows dedicated server for the Unreal engine, as used by America's Army and America's Army Special Forces 2.8.2 a…

  • Unscored —
    CVE-2007-5256 Public exploit

    Multiple stack-based buffer overflows in FSD 2.052 d9 and earlier, and FSFDT FSD 3.000 d9 and earlier, allow (1) remote…

  • Unscored —
    CVE-2007-5251

    Multiple cross-site scripting (XSS) vulnerabilities in Helm 3.2.16 allow remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2007-5252

    Buffer overflow in NetSupport Manager (NSM) Client 10.00 and 10.20, and NetSupport School Student (NSS) 9.00, allows re…

  • Unscored —
    CVE-2007-5243 Public exploit EPSS 40%

    Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.…

  • Unscored —
    CVE-2007-5253 Public exploit

    c32web.exe in McMurtrey/Whitaker Cart32 before 6.4 allows remote attackers to read arbitrary files via the ImageName pa…

  • Unscored —
    CVE-2007-5258

    PHP remote file inclusion vulnerability in log.php in phpFreeLog alpha 0.2.0 allows remote attackers to include and exe…

  • Unscored —
    CVE-2007-5259

    Cross-site request forgery (CSRF) vulnerability in Ilient SysAid 4.5.03 and 4.5.04 allows remote attackers to perform s…

  • Unscored —
    CVE-2007-5249

    Multiple buffer overflows in the logging function in the Unreal engine, as used by America's Army and America's Army Sp…

  • Unscored —
    CVE-2007-5242

    Unspecified vulnerability in (1) SYS$EI1000.EXE and (2) SYS$EI1000_MON.EXE in HP OpenVMS 8.3 and earlier allows remote …

  • Unscored —
    CVE-2007-5241

    Buffer overflow in NET$CSMACD.EXE in HP OpenVMS 8.3 and earlier allows local users to cause a denial of service (machin…

  • Unscored —
    CVE-2007-5237

    Java Web Start in Sun JDK and JRE 6 Update 2 and earlier does not properly enforce access restrictions for untrusted ap…

  • Unscored —
    CVE-2007-5236

    Java Web Start in Sun JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier, on Windows does not …

  • Unscored —
    CVE-2007-5239

    Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 a…

  • Unscored —
    CVE-2007-5240

    Visual truncation vulnerability in the Java Runtime Environment in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE …

  • Unscored —
    CVE-2007-5235 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Uebimiau 2.7.2 through 2.7.10 allows remote attackers to injec…

  • Unscored —
    CVE-2007-5238

    Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_…