Skip to content
OpenAdvisories

Archive

20 October 2007

Vulnerabilities first published on this day (UTC), newest first.

← September 2007 2007 / October /20 November 2007 →
  1. 138
  2. 2 
  3. 317
  4. 416
  5. 524
  6. 676
  7. 7 
  8. 818
  9. 963
  10. 10 
  11. 1119
  12. 1242
  13. 1315
  14. 1471
  15. 158
  16. 1616
  17. 1752
  18. 1894
  19. 1945
  20. 2029
  21. 218
  22. 224
  23. 2366
  24. 2440
  25. 2534
  26. 2633
  27. 27 
  28. 284
  29. 2955
  30. 3039
  31. 3144
All Critical High Medium Low Exploited only Public exploit

29 results · Feed

  • Unscored —
    CVE-2007-5601 Public exploit EPSS 42%

    Stack-based buffer overflow in the Database Component in MPAMedia.dll in RealNetworks RealPlayer 10.5 and 11 beta, and …

  • Unscored —
    CVE-2003-1419 Public exploit

    Netscape 7.0 allows remote attackers to cause a denial of service (crash) via a web page with an invalid regular expres…

  • Unscored —
    CVE-2003-1423

    Petitforum stores the liste.txt data file under the web document root with insufficient access control, which allows re…

  • Unscored —
    CVE-2003-1411 Public exploit

    PHP remote file inclusion vulnerability in emailreader_execute_on_each_page.inc.php in Cedric Email Reader 0.4 allows r…

  • Unscored —
    CVE-2003-1416

    BisonFTP Server 4 release 2 allows remote attackers to cause a denial of service (CPU consumption) via a long (1) ls or…

  • Unscored —
    CVE-2003-1427 Public exploit

    Directory traversal vulnerability in the web configuration interface in Netgear FM114P 1.4 allows remote attackers to r…

  • Unscored —
    CVE-2003-1417

    nCipher Support Software 6.00, when using generatekey KeySafe to import keys, does not delete the temporary copies of t…

  • Unscored —
    CVE-2003-1410 Public exploit

    PHP remote file inclusion vulnerability in email.php (aka email.php3) in Cedric Email Reader 0.2 and 0.3 allows remote …

  • Unscored —
    CVE-2003-1422

    Multiple unspecified vulnerabilities in the installer for SYSLINUX 2.01, when running setuid root, allow local users to…

  • Unscored —
    CVE-2003-1403

    foo.php3 in DotBr 0.1 allows remote attackers to obtain sensitive information via a direct request, which calls the php…

  • Unscored —
    CVE-2003-1424

    message.php in Petitforum does not properly authenticate users, which allows remote attackers to impersonate forum user…

  • Unscored —
    CVE-2003-1404

    DotBr 0.1 stores config.inc with insufficient access control under the web document root, which allows remote attackers…

  • Unscored —
    CVE-2003-1428

    Gallery 1.3.3 creates directories with insecure permissions, which allows local users to read, modify, or delete photos.

  • Unscored —
    CVE-2003-1415

    NetCharts XBRL Server 4.0.0 allows remote attackers to obtain sensitive information via an HTTP request with an invalid…

  • Unscored —
    CVE-2003-1408

    Lotus Domino Server 5.0 and 6.0 allows remote attackers to read the source code for files via an HTTP request with a fi…

  • Unscored —
    CVE-2003-1425 Public exploit EPSS 11%

    guestbook.cgi in cPanel 5.0 allows remote attackers to execute arbitrary commands via the template parameter.

  • Unscored —
    CVE-2003-1426

    Openwebmail in cPanel 5.0, when run using suid Perl, adds the directory in the SCRIPT_FILENAME environment variable to …

  • Unscored —
    CVE-2003-1418

    Apache HTTP Server 1.3.22 through 1.3.27 on OpenBSD allows remote attackers to obtain sensitive information via (1) the…

  • Unscored —
    CVE-2003-1412 Public exploit

    PHP remote file inclusion vulnerability in index.php for GONiCUS System Administrator (GOsa) 1.0 allows remote attacker…

  • Unscored —
    CVE-2003-1407 Public exploit

    Buffer overflow in cmd.exe in Windows NT 4.0 may allow local users to execute arbitrary code via a long pathname argume…

  • Unscored —
    CVE-2003-1402

    PHP remote file inclusion vulnerability in hit.php for Kietu 2.0 and 2.3 allows remote attackers to execute arbitrary P…

  • Unscored —
    CVE-2003-1409 Public exploit

    TOPo 1.43 allows remote attackers to obtain sensitive information by sending an HTTP request with an invalid parameter …

  • Unscored —
    CVE-2003-1413

    parse_xml.cgi in Apple Darwin Streaming Server 4.1.1 allows remote attackers to determine the existence of arbitrary fi…

  • Unscored —
    CVE-2003-1401 Public exploit

    login.php in php-Board 1.0 stores plaintext passwords in $username.txt with insufficient access control under the web d…

  • Unscored —
    CVE-2003-1421

    Unspecified vulnerability in mod_mysql_logger shared object in SuckBot 0.006 allows remote attackers to cause a denial …

  • Unscored —
    CVE-2003-1406 Public exploit

    PHP remote file inclusion vulnerability in D-Forum 1.00 through 1.11 allows remote attackers to execute arbitrary PHP c…

  • Unscored —
    CVE-2003-1414 Public exploit

    Directory traversal vulnerability in parse_xml.cg Apple Darwin Streaming Server 4.1.2 and Apple Quicktime Streaming Ser…

  • Unscored —
    CVE-2003-1420

    Cross-site scripting (XSS) vulnerability in Opera 6.0 through 7.0 with automatic redirection disabled allows remote att…

  • Unscored —
    CVE-2003-1405 Public exploit

    DotBr 0.1 allows remote attackers to execute arbitrary shell commands via the cmd parameter to (1) exec.php3 or (2) sys…