Skip to content
OpenAdvisories

Archive

8 October 2007

Vulnerabilities first published on this day (UTC), newest first.

← September 2007 2007 / October /8 November 2007 →
  1. 138
  2. 2 
  3. 317
  4. 416
  5. 524
  6. 676
  7. 7 
  8. 818
  9. 963
  10. 10 
  11. 1119
  12. 1242
  13. 1315
  14. 1471
  15. 158
  16. 1616
  17. 1752
  18. 1894
  19. 1945
  20. 2029
  21. 218
  22. 224
  23. 2366
  24. 2440
  25. 2534
  26. 2633
  27. 27 
  28. 284
  29. 2955
  30. 3039
  31. 3144
All Critical High Medium Low Exploited only Public exploit

18 results · Feed

  • Unscored —
    CVE-2007-5270

    Unspecified vulnerability in the Boost module before 4.7.x-1.0, and 5.x before 5.x-1.0, for Drupal allows remote attack…

  • Unscored —
    CVE-2007-5275

    The Adobe Macromedia Flash 9 plug-in allows remote attackers to cause a victim machine to establish TCP sessions with a…

  • Unscored —
    CVE-2007-5276

    Opera 9 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers …

  • Unscored —
    CVE-2007-5272 Public exploit

    SQL injection vulnerability in kategori.asp in Furkan Tastan Blog allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2007-5278 Public exploit

    Zomplog 3.8.1 and earlier stores potentially sensitive information under the web root with insufficient access control,…

  • Unscored —
    CVE-2007-5273

    Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK an…

  • Unscored —
    CVE-2007-5274

    Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK an…

  • Unscored —
    CVE-2007-5271 Public exploit EPSS 29%

    Multiple PHP remote file inclusion vulnerabilities in Trionic Cite CMS 1.2 rev9 and earlier allow remote attackers to e…

  • Unscored —
    CVE-2007-5277

    Microsoft Internet Explorer 6 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier…

  • Unscored —
    CVE-2007-4924 Public exploit EPSS 11%

    The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows rem…

  • Unscored —
    CVE-2007-5267

    Off-by-one error in ICC profile chunk handling in the png_set_iCCP function in pngset.c in libpng before 1.2.22 beta1 a…

  • Unscored —
    CVE-2007-5269

    Certain chunk handlers in libpng before 1.0.29 and 1.2.x before 1.2.21 allow remote attackers to cause a denial of serv…

  • Unscored —
    CVE-2007-5265 Public exploit

    Multiple format string vulnerabilities in websrv.cpp in Dawn of Time 1.69s beta4 and earlier allow remote attackers to …

  • Unscored —
    CVE-2007-5266

    Off-by-one error in ICC profile chunk handling in the png_set_iCCP function in pngset.c in libpng before 1.0.29 beta1 a…

  • Unscored —
    CVE-2007-5262

    Multiple format string vulnerabilities in Battlefront Dropteam 1.3.3 and earlier allow remote attackers to execute arbi…

  • Unscored —
    CVE-2007-5263

    Multiple buffer overflows in Battlefront Dropteam 1.3.3 and earlier allow remote attackers to execute arbitrary code vi…

  • Unscored —
    CVE-2007-5264 Public exploit

    Battlefront Dropteam 1.3.3 and earlier sends the client's online account name and password to the game server, which al…

  • Unscored —
    CVE-2007-5268

    pngrtran.c in libpng before 1.0.29 and 1.2.x before 1.2.21 use (1) logical instead of bitwise operations and (2) incorr…