Skip to content
OpenAdvisories

Archive

14 October 2007

Vulnerabilities first published on this day (UTC), newest first.

← September 2007 2007 / October /14 November 2007 →
  1. 138
  2. 2 
  3. 317
  4. 416
  5. 524
  6. 676
  7. 7 
  8. 818
  9. 963
  10. 10 
  11. 1119
  12. 1242
  13. 1315
  14. 1471
  15. 158
  16. 1616
  17. 1752
  18. 1894
  19. 1945
  20. 2029
  21. 218
  22. 224
  23. 2366
  24. 2440
  25. 2534
  26. 2633
  27. 27 
  28. 284
  29. 2955
  30. 3039
  31. 3144
All Critical High Medium Low Exploited only Public exploit

71 results · Feed

  • Unscored —
    CVE-2003-1347 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Geeklog 1.3.7 allow remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2003-1355 Public exploit

    Buffer overflow in the remote console (rcon) in Battlefield 1942 1.2 and 1.3 allows remote attackers to cause a denial …

  • Unscored —
    CVE-2003-1341 Public exploit

    The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentic…

  • Unscored —
    CVE-2003-1356

    The "file handling" in sort in HP-UX 10.01 through 10.20, and 11.00 through 11.11 is "incorrect," which allows attacker…

  • Unscored —
    CVE-2003-1357

    ProxyView has a default administrator password of Administrator for Embedded Windows NT, which allows remote attackers …

  • Unscored —
    CVE-2003-1353

    Multiple cross-site scripting (XSS) vulnerabilities in Outreach Project Tool (OPT) 0.946b allow remote attackers to inj…

  • Unscored —
    CVE-2003-1349

    Directory traversal vulnerability in NITE ftp-server (NiteServer) 1.83 allows remote attackers to list arbitrary direct…

  • Unscored —
    CVE-2003-1344 Public exploit

    Trend Micro Virus Control System (TVCS) Log Collector allows remote attackers to obtain usernames, encrypted passwords,…

  • Unscored —
    CVE-2007-5458 Public exploit

    SQL injection vulnerability in index.php in the newsletter module 1.0 for KwsPHP, when magic_quotes_gpc is disabled, al…

  • Unscored —
    CVE-2007-5459

    Cross-site scripting (XSS) vulnerability in the sidebar HTML page in the MouseoverDictionary before 0.6.2 extension for…

  • Unscored —
    CVE-2007-5457 Public exploit EPSS 38%

    Multiple PHP remote file inclusion vulnerabilities in Michael Dempfle Joomla Flash Uploader (com_jfu or com_joomla_flas…

  • Unscored —
    CVE-2007-5196

    Unspecified vulnerability in the SSL implementation in Groupwise client system in the novell-groupwise-client package i…

  • Unscored —
    CVE-2007-5446 Public exploit

    Absolute path traversal vulnerability in a certain ActiveX control in PBEmail7Ax.dll in PBEmail 7 ActiveX Edition allow…

  • Unscored —
    CVE-2007-5200

    hugin, as used on various operating systems including SUSE openSUSE 10.2 and 10.3, allows local users to overwrite arbi…

    hugin Debian
  • Unscored —
    CVE-2007-5449 Public exploit

    SQL injection vulnerability in searchresult.php in Softbiz Recipes Portal Script allows remote attackers to execute arb…

  • Unscored —
    CVE-2007-5448

    Madwifi 0.9.3.2 and earlier allows remote attackers to cause a denial of service (panic) via a beacon frame with a larg…

  • Unscored —
    CVE-2007-5454

    Directory traversal vulnerability in index.php in PHP File Sharing System 1.5.1 allows remote attackers to list or crea…

  • Unscored —
    CVE-2007-5444

    CMS Made Simple 1.1.3.1 allows remote attackers to obtain the full path via a direct request for unspecified files.

  • Unscored —
    CVE-2007-5443

    Multiple cross-site scripting (XSS) vulnerabilities in CMS Made Simple 1.1.3.1 allow remote attackers to inject arbitra…

  • Unscored —
    CVE-2007-5441

    CMS Made Simple 1.1.3.1 does not check the permissions assigned to users in some situations, which allows remote authen…

  • Unscored —
    CVE-2007-5445

    Buffer overflow in the DB Software Laboratory VImpX (VImpAX1) ActiveX control in VImpX.ocx 4.7.3.0 allows remote attack…

  • Unscored —
    CVE-2007-5450 Public exploit

    Unspecified vulnerability in Safari on the Apple iPod touch (aka iTouch) and iPhone 1.1.1 allows user-assisted remote a…

  • Unscored —
    CVE-2007-5455 Public exploit

    Cross-site scripting (XSS) vulnerability in wxis.exe in WWWISIS 7.1 and earlier allows remote attackers to inject arbit…

  • Unscored —
    CVE-2007-5447 Public exploit

    ioncube_loader_win_5.2.dll in the ionCube Loader 6.5 extension for PHP 5.2.4 does not follow safe_mode and disable_func…

  • Unscored —
    CVE-2007-5456 EPSS 20%

    Microsoft Internet Explorer 7 and earlier allows remote attackers to bypass the "File Download - Security Warning" dial…

  • Unscored —
    CVE-2007-5452 Public exploit

    Multiple SQL injection vulnerabilities in php-stats.recjs.php in Php-Stats 0.1.9.2 allow remote attackers to execute ar…

  • Unscored —
    CVE-2007-5451 Public exploit EPSS 31%

    PHP remote file inclusion vulnerability in admin.color.php in the com_colorlab (aka com_color) 1.0 component for Joomla…

  • Unscored —
    CVE-2007-5195

    Unspecified vulnerability in the SSL implementation in Groupwise client system in the novell-groupwise-client package i…

  • Unscored —
    CVE-2007-5442

    CMS Made Simple 1.1.3.1 does not check the permissions assigned to users who attempt uploads, which allows remote authe…

  • Unscored —
    CVE-2007-5453 Public exploit

    Multiple eval injection vulnerabilities in Php-Stats 0.1.9.2 allow remote authenticated administrators to execute arbit…

  • Unscored —
    CVE-2007-5440 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in CRS Manager allow remote attackers to execute arbitrary PHP code …