Skip to content
OpenAdvisories

Archive

11 October 2007

Vulnerabilities first published on this day (UTC), newest first.

← September 2007 2007 / October /11 November 2007 →
  1. 138
  2. 2 
  3. 317
  4. 416
  5. 524
  6. 676
  7. 7 
  8. 818
  9. 963
  10. 10 
  11. 1119
  12. 1242
  13. 1315
  14. 1471
  15. 158
  16. 1616
  17. 1752
  18. 1894
  19. 1945
  20. 2029
  21. 218
  22. 224
  23. 2366
  24. 2440
  25. 2534
  26. 2633
  27. 27 
  28. 284
  29. 2955
  30. 3039
  31. 3144
All Critical High Medium Low Exploited only Public exploit

19 results · Feed

  • Unscored —
    CVE-2007-3917

    The multiplayer engine in Wesnoth 1.2.x before 1.2.7 and 1.3.x before 1.3.9 allows remote servers to cause a denial of …

  • Unscored —
    CVE-2007-5373

    ldapscripts 1.4 and 1.7 sends a password as a command line argument when calling some LDAP programs, which might allow …

    ldapscripts Debian
  • Unscored —
    CVE-2007-5370 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/dnewsweb.exe in NetWin DNewsWeb (DNews News Server) 57e1…

  • Unscored —
    CVE-2007-5365 Public exploit EPSS 80%

    Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some oth…

  • Unscored —
    CVE-2007-5367

    Unspecified vulnerability in the Virtual File System (VFS) in Sun Solaris 10 allows local users to cause a denial of se…

  • Unscored —
    CVE-2007-5169 EPSS 10%

    Stack-based buffer overflow in MAIPM6.dll in Adobe PageMaker 7.0.1 and 7.0.2 on Windows allows user-assisted remote att…

  • Unscored —
    CVE-2007-5374 Public exploit

    cp_memberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when processing an admin action, w…

  • Unscored —
    CVE-2007-5366

    The Tomcat 4.1-based Servlet Service in Fujitsu Interstage Application Server 7.0 through 9.0.0 and Interstage Apworks/…

  • Unscored —
    CVE-2007-5372

    Multiple SQL injection vulnerabilities in (a) LedgerSMB 1.0.0 through 1.2.7 and (b) DWS Systems SQL-Ledger 2.x allow re…

    sql-ledger Debian
  • Unscored —
    CVE-2007-5375

    Interpretation conflict in the Sun Java Virtual Machine (JVM) allows user-assisted remote attackers to conduct a multi-…

  • Unscored —
    CVE-2007-5368

    Multiple unspecified vulnerabilities in labeld in Trusted Extensions in Sun Solaris 10 allow local users to cause a den…

  • Unscored —
    CVE-2007-5371

    Multiple SQL injection vulnerabilities in mutate_content.dynamic.php in MODx 0.9.6 allow remote attackers to execute ar…

  • Unscored —
    CVE-2007-5369

    The GetMagicNumberString function in Massive Entertainment World in Conflict 1.000 and earlier allows remote attackers …

  • Unscored —
    CVE-2007-5364

    Directory traversal vulnerability in payments/ideal_process.php in the iDEAL transaction handler in ViArt Shopping Cart…

  • Unscored —
    CVE-2007-5363 Public exploit EPSS 31%

    PHP remote file inclusion vulnerability in admin.panoramic.php in the Panoramic Picture Viewer (com_panoramic) mambot (…

  • Unscored —
    CVE-2007-5362 Public exploit EPSS 37%

    Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite (com_mosmedia) 4.5.1 comp…

  • Unscored —
    CVE-2007-4992

    Stack-based buffer overflow in the process_packet function in fbserver.exe in Firebird SQL 2.0.2 allows remote attacker…

  • Unscored —
    CVE-2007-3896 Public exploit EPSS 54%

    The URL handling in Shell32.dll in the Windows shell in Microsoft Windows XP and Server 2003, with Internet Explorer 7 …

  • Unscored —
    CVE-2007-5323

    The RepliStor Server Service in EMC Replistor 6.1.3 allows remote attackers to execute arbitrary code via a size value …