Skip to content
OpenAdvisories

Archive

17 October 2007

Vulnerabilities first published on this day (UTC), newest first.

13 results · Clear filters · Feed

  • Unscored —
    CVE-2007-5488 Public exploit

    Multiple SQL injection vulnerabilities in cdr_addon_mysql in Asterisk-Addons before 1.2.8, and 1.4.x before 1.4.4, allo…

  • Unscored —
    CVE-2007-5508 Public exploit

    Multiple SQL injection vulnerabilities in the CTXSYS Intermedia application for the Oracle Text component (CTX_DOC) in …

  • Unscored —
    CVE-2007-5511 Public exploit EPSS 32%

    SQL injection vulnerability in Workspace Manager for Oracle Database before OWM 10.2.0.4.1, OWM 10.1.0.8.0, and OWM 9.2…

  • Unscored —
    CVE-2007-5490 Public exploit

    SQL injection vulnerability in default.asp in Okul Otomasyon Portal 2.0 allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2007-5489 Public exploit

    Directory traversal vulnerability in index.php in Artmedic CMS 3.4 and earlier allows remote attackers to include and e…

  • Unscored —
    CVE-2003-1371 Public exploit

    Nuked-Klan 1.3b, and possibly earlier versions, allows remote attackers to obtain sensitive server information via an o…

  • Unscored —
    CVE-2003-1372 Public exploit

    Cross-site scripting (XSS) vulnerability in links.php script in myPHPNuke 1.8.8, and possibly earlier versions, allows …

  • Unscored —
    CVE-2003-1366 Public exploit

    chpass in OpenBSD 2.0 through 3.2 allows local users to read portions of arbitrary files via a hard link attack on a te…

  • Unscored —
    CVE-2003-1358 Public exploit

    rs.F300 for HP-UX 10.0 through 11.22 uses the PATH environment variable to find and execute programs such as rm while o…

  • Unscored —
    CVE-2003-1359 Public exploit

    Buffer overflow in stmkfont utility of HP-UX 10.0 through 11.22 allows local users to gain privileges via a long comman…

  • Unscored —
    CVE-2003-1369 Public exploit

    Buffer overflow in ByteCatcher FTP client 1.04b allows remote attackers to cause a denial of service (crash) and possib…

  • Unscored —
    CVE-2003-1368 Public exploit

    Buffer overflow in the 32bit FTP client 9.49.1 allows remote attackers to cause a denial of service (crash) and possibl…

  • Unscored —
    CVE-2003-1364 Public exploit

    Aprelium Technologies Abyss Web Server 1.1.2, and possibly other versions before 1.1.4, allows remote attackers to caus…