Skip to content
OpenAdvisories

Archive

16 October 2007

Vulnerabilities first published on this day (UTC), newest first.

← September 2007 2007 / October /16 November 2007 →
  1. 138
  2. 2 
  3. 317
  4. 416
  5. 524
  6. 676
  7. 7 
  8. 818
  9. 963
  10. 10 
  11. 1119
  12. 1242
  13. 1315
  14. 1471
  15. 158
  16. 1616
  17. 1752
  18. 1894
  19. 1945
  20. 2029
  21. 218
  22. 224
  23. 2366
  24. 2440
  25. 2534
  26. 2633
  27. 27 
  28. 284
  29. 2955
  30. 3039
  31. 3144
All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • Unscored —
    CVE-2007-4343

    Stack-based buffer overflow in IrfanView 3.99 and 4.00 allows user-assisted remote attackers to execute arbitrary code …

  • Unscored —
    CVE-2007-5485 Public exploit

    SQL injection vulnerability in index.php in the mg2 1.0 module for KwsPHP allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2007-5487 Public exploit

    Stack-based buffer overflow in COWON America jetAudio Basic 7.0.3 allows user-assisted remote attackers to execute arbi…

  • Unscored —
    CVE-2007-5481

    Distributed Checksum Clearinghouse (DCC) 1.3.65 allows remote attackers to cause a denial of service (crash) via a "SOC…

  • Unscored —
    CVE-2007-5486

    dotProject before 2.1 does not properly check privileges when invoking the Companies module, which allows remote attack…

  • Unscored —
    CVE-2007-5480 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in InnovaAge InnovaShop allow remote attackers to inject arbitrary …

  • Unscored —
    CVE-2007-5484 Public exploit

    Directory traversal vulnerability in wxis.exe in WWWISIS 7.1 allows local users to read arbitrary files via a .. (dot d…

  • Unscored —
    CVE-2007-5483

    Unspecified vulnerability in the Administrative Scripting Tools (such as wsadmin or ANT) in IBM WebSphere Application S…

  • Unscored —
    CVE-2007-5478 Public exploit

    Cross-site scripting (XSS) vulnerability in projects in Nabh Stringbeans Portal (sbportal) 3.2 allows remote attackers …

  • Unscored —
    CVE-2007-5482

    Unspecified vulnerability in the FTP service in Sun StorEdge/StorageTek 3510 FC Array with firmware before 4.21 allows …

  • Unscored —
    CVE-2007-5477

    Cross-site scripting (XSS) vulnerability in auth.w in djeyl.net WebMod 0.48 Half-Life Dedicated Server plugin allows re…

  • Unscored —
    CVE-2007-5479

    Cross-site scripting (XSS) vulnerability in Search.asp in Xcomputer allows remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2007-5470

    Microsoft Expression Media stores the catalog password in cleartext in the catalog IVC file, which allows local users t…

  • Unscored —
    CVE-2007-5468

    Cisco CallManager 5.1.1.3000-5 does not verify the Digest authentication header URI against the Request URI in SIP mess…

  • Unscored —
    CVE-2007-5469

    OpenSER 1.2.2 does not verify the Digest authentication header URI against the Request URI in SIP messages, which allow…

  • Unscored —
    CVE-2007-5471

    libgssapi before 0.6-13.7, as used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP 1, terminates upo…