Skip to content
OpenAdvisories

Archive

26 October 2007

Vulnerabilities first published on this day (UTC), newest first.

← September 2007 2007 / October /26 November 2007 →
  1. 138
  2. 2 
  3. 317
  4. 416
  5. 524
  6. 676
  7. 7 
  8. 818
  9. 963
  10. 10 
  11. 1119
  12. 1242
  13. 1315
  14. 1471
  15. 158
  16. 1616
  17. 1752
  18. 1894
  19. 1945
  20. 2029
  21. 218
  22. 224
  23. 2366
  24. 2440
  25. 2534
  26. 2633
  27. 27 
  28. 284
  29. 2955
  30. 3039
  31. 3144
All Critical High Medium Low Exploited only Public exploit

33 results · Feed

  • Unscored —
    CVE-2002-2331

    W3Mail 1.0.2 through 1.0.5 with server side scripting (SSI) enabled in the attachments directory does not properly rest…

  • Unscored —
    CVE-2002-2313

    Eudora email client 5.1.1, with "use Microsoft viewer" enabled, allows remote attackers to execute arbitrary programs v…

  • Unscored —
    CVE-2002-2327

    Unspecified vulnerability in the environmental monitoring subsystem in Solaris 8 running on Sun Fire 280R, V480 and V88…

  • Unscored —
    CVE-2002-2312 Public exploit

    Opera 6.0.1 allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaS…

  • Unscored —
    CVE-2002-2321 Public exploit

    Cross-site scripting (XSS) vulnerability in (1) showcat.php and (2) addyoursite.php in phpLinkat 0.1.0 allows remote at…

  • Unscored —
    CVE-2002-2330

    Cross-site scripting (XSS) vulnerability in stat.pl in StatsPlus 1.25 allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2002-2333

    Buffer overflow in konqueror in KDE 2.1 through 3.0 and 3.0.2 allows remote attackers to cause a denial of service (cra…

  • Unscored —
    CVE-2002-2323

    Sun PC NetLink 1.0 through 1.2 does not properly set the access control list (ACL) for files and directories that use s…

  • Unscored —
    CVE-2002-2309 Public exploit

    php.exe in PHP 3.0 through 4.2.2, when running on Apache, does not terminate properly, which allows remote attackers to…

  • Unscored —
    CVE-2002-2311

    Microsoft Internet Explorer 6.0 and possibly others allows remote attackers to upload arbitrary file contents when user…

  • Unscored —
    CVE-2002-2332

    Buffer overflow in Opera 6.01 allows remote attackers to cause a denial of service (crash) via an IMG tag with large wi…

  • Unscored —
    CVE-2002-2316

    Cisco Catalyst 4000 series switches running CatOS 5.5.5, 6.3.5, and 7.1.2 do not always learn MAC addresses from a sing…

  • Unscored —
    CVE-2002-2335 Public exploit

    Killer Protection 1.0 stores the vars.inc include file under the web root with insufficient access control, which allow…

  • Unscored —
    CVE-2002-2314 Public exploit

    Mozilla 1.0 allows remote attackers to steal cookies from other domains via a javascript: URL with a leading "//" and e…

  • Unscored —
    CVE-2002-2328 EPSS 17%

    Active Directory in Windows 2000, when supporting Kerberos V authentication and GSSAPI, allows remote attackers to caus…

  • Unscored —
    CVE-2002-2319 Public exploit

    Static code injection vulnerability in users.php in MySimpleNews allows remote attackers to inject arbitrary PHP code a…

  • Unscored —
    CVE-2002-2334

    Joe text editor 2.8 through 2.9.7 does not remove the group and user setuid bits for backup files, which could allow lo…

  • Unscored —
    CVE-2002-2308

    Netscape Communicator 6.2.1 allows remote attackers to cause a denial of service in client browsers via a webpage conta…

  • Unscored —
    CVE-2002-2310

    ClickCartPro 4.0 stores the admin_user.db data file under the web document root with insufficient access control on ser…

  • Unscored —
    CVE-2002-2307

    The default configuration of BenHur Firewall release 3 update 066 fix 2 allows remote attackers to access arbitrary ser…

  • Unscored —
    CVE-2002-2326

    The default configuration of Mail.app in Mac OS X 10.0 through 10.0.4 and 10.1 through 10.1.5 sends iDisk authenticatio…

  • Unscored —
    CVE-2002-2318 Public exploit

    Cross-site scripting (XSS) vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to …

  • Unscored —
    CVE-2002-2325 Public exploit

    The c-client library in Internet Message Access Protocol (IMAP) dated before 2002 RC2, as used by Pine 4.20 through 4.4…

  • Unscored —
    CVE-2002-2322

    Ultimate PHP Board (UPB) 1.0b stores the users.dat data file under the web root with insufficient access control, which…

  • Unscored —
    CVE-2002-2324

    The "System Restore" directory and subdirectories, and possibly other subdirectories in the "System Volume Information"…

  • Unscored —
    CVE-2002-2317

    Memory leak in the (1) httpd, (2) nntpd, and (3) vpn driver in VelociRaptor 1.0 allows remote attackers to cause a deni…

  • Unscored —
    CVE-2002-2315 Public exploit

    Cisco IOS 11.2.x and 12.0.x does not limit the size of its redirect table, which allows remote attackers to cause a den…

  • Unscored —
    CVE-2002-2329

    ICQ client 2001b, 2002a and 2002b allows remote attackers to cause a denial of service (CPU consumption or crash) via a…

  • Unscored —
    CVE-2002-2320

    MySimpleNews 1.0 allows remote attackers to delete arbitrary email messages via a direct request to vider.php3.

  • Unscored —
    CVE-2003-1527

    BlackICE Defender 2.9.cap and Server Protection 3.5.cdf, when configured to automatically block attacks, allows remote …

  • Unscored —
    CVE-2007-5683

    Multiple cross-site scripting (XSS) vulnerabilities in TikiWiki 1.9.8.1 and earlier allow remote attackers to inject ar…

  • Unscored —
    CVE-2007-5682

    Incomplete blacklist vulnerability in tiki-graph_formula.php in TikiWiki before 1.9.8.2 allows remote attackers to exec…

  • Unscored —
    CVE-2007-5684 Public exploit

    Multiple directory traversal vulnerabilities in TikiWiki 1.9.8.1 and earlier allow remote attackers to include and exec…