Skip to content
OpenAdvisories

Archive

18 October 2007

Vulnerabilities first published on this day (UTC), newest first.

← September 2007 2007 / October /18 November 2007 →
  1. 138
  2. 2 
  3. 317
  4. 416
  5. 524
  6. 676
  7. 7 
  8. 818
  9. 963
  10. 10 
  11. 1119
  12. 1242
  13. 1315
  14. 1471
  15. 158
  16. 1616
  17. 1752
  18. 1894
  19. 1945
  20. 2029
  21. 218
  22. 224
  23. 2366
  24. 2440
  25. 2534
  26. 2633
  27. 27 
  28. 284
  29. 2955
  30. 3039
  31. 3144
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • Unscored —
    CVE-2007-5579 Public exploit

    login.php in Pligg CMS 9.5 uses a guessable confirmation code when resetting a forgotten password, which allows remote …

  • Unscored —
    CVE-2007-5574 Public exploit EPSS 28%

    PHP remote file inclusion vulnerability in djpage.php in PHPDJ 0.5 allows remote attackers to execute arbitrary PHP cod…

  • Unscored —
    CVE-2007-5567 Public exploit

    PHP remote file inclusion vulnerability in _lib/fckeditor/upload_config.php in Galmeta Post 0.11 allows remote attacker…

  • Unscored —
    CVE-2007-5573 Public exploit

    PHP remote file inclusion vulnerability in classes/core/language.php in LimeSurvey 1.5.2 and earlier allows remote atta…

  • Unscored —
    CVE-2007-5562 Public exploit

    Cross-site scripting (XSS) vulnerability in cgi-bin/welcome (aka the login page) in Netgear SSL312 PROSAFE SSL VPN-Conc…

  • Unscored —
    CVE-2002-2300 Public exploit

    Buffer overflow in ftpd 5.4 in 3Com NBX 4.0.17 or ftpd 5.4.2 in 3Com NBX 4.1.4 allows remote attackers to cause a denia…

  • Unscored —
    CVE-2002-2268 Public exploit EPSS 52%

    Buffer overflow in Webster HTTP Server allows remote attackers to execute arbitrary code via a long URL.

  • Unscored —
    CVE-2002-2296 Public exploit

    Cross-site scripting (XSS) vulnerability in YaBB.pl in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 allows remote atta…

  • Unscored —
    CVE-2002-2288 Public exploit

    Mambo Site Server 4.0.11 allows remote attackers to obtain the physical path of the server via an HTTP request to index…

  • Unscored —
    CVE-2002-2287 Public exploit

    PHP remote file inclusion vulnerability in quick_reply.php for phpBB Advanced Quick Reply Hack 1.0.0 and 1.1.0 allows r…

  • Unscored —
    CVE-2002-2298 Public exploit

    PHP remote file inclusion vulnerability in config.php in Thatware 0.3 through 0.5.3 allows remote attackers to execute …

  • Unscored —
    CVE-2002-2304 Public exploit

    SQL injection vulnerability in admin/auth/checksession.php in MyPHPLinks 2.1.9 and 2.2.0 allows remote attackers to exe…

  • Unscored —
    CVE-2002-2281 Public exploit EPSS 10%

    Symantec Java! JIT (Just-In-Time) Compiler for Netscape Communicator 4.0 through 4.8 allows remote attackers to execute…

  • Unscored —
    CVE-2002-2295 Public exploit

    Buffer overflow in Pico Server (pServ) 2.0 beta 1 through beta 5 allows remote attackers to cause a denial of service (…

  • High —
    CVE-2002-2272 Public exploit

    Apache Tomcat DoS via Malicious Get Request

    Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values.

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2000-1244 Public exploit

    Computer Associates InoculateIT Agent for Exchange Server does not recognize an e-mail virus attachment if the SMTP hea…