Skip to content
OpenAdvisories

Archive

29 October 2007

Vulnerabilities first published on this day (UTC), newest first.

← September 2007 2007 / October /29 November 2007 →
  1. 138
  2. 2 
  3. 317
  4. 416
  5. 524
  6. 676
  7. 7 
  8. 818
  9. 963
  10. 10 
  11. 1119
  12. 1242
  13. 1315
  14. 1471
  15. 158
  16. 1616
  17. 1752
  18. 1894
  19. 1945
  20. 2029
  21. 218
  22. 224
  23. 2366
  24. 2440
  25. 2534
  26. 2633
  27. 27 
  28. 284
  29. 2955
  30. 3039
  31. 3144
All Critical High Medium Low Exploited only Public exploit

55 results · Feed

  • Unscored —
    CVE-2002-2356

    HAMweather 2.x allows remote attackers to modify administrative settings and obtain sensitive information via a direct …

  • Unscored —
    CVE-2002-2337

    Kaspersky Anti-Hacker 1.0, when configured to automatically block attacks, allows remote attackers to block IP addresse…

  • Unscored —
    CVE-2002-2340

    Cross-site scripting (XSS) vulnerability in read.php in Phorum 3.3.2a allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2002-2341 Public exploit

    Cross-site scripting (XSS) vulnerability in content blocking in SonicWALL SOHO3 6.3.0.0 allows remote attackers to inje…

  • Unscored —
    CVE-2002-2346

    phpBB 2.0 through 2.0.3 generates names for uploaded avatar files with the hex-encoded IP address of the client system,…

  • Unscored —
    CVE-2002-2352

    The NBActiveX.ocx ActiveX control in NeoBook 4 allows remote attackers to install and execute arbitrary programs.

  • Unscored —
    CVE-2002-2353 Public exploit

    tftpd32 2.50 and 2.50.2 allows remote attackers to read or write arbitrary files via a full pathname in GET and PUT req…

  • Unscored —
    CVE-2002-2342

    Bannermatic 1, 2, and 3 stores the (1) ban.log, (2) ban.bak, (3) ban.dat and (4) banmat.pwd data files under the web do…

  • Unscored —
    CVE-2002-2361

    The installer in Yahoo! Messenger 4.0, 5.0 and 5.5 does not verify package signatures which could allow remote attacker…

  • Unscored —
    CVE-2002-2359 Public exploit

    Cross-site scripting (XSS) vulnerability in the FTP view feature in Mozilla 1.0 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2002-2348 Public exploit

    Cross-site scripting (XSS) vulnerability in athcgi.exe in Authoria HR allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2007-5689

    The Java Virtual Machine (JVM) in Sun Java Runtime Environment (JRE) in SDK and JRE 1.3.x through 1.3.1_20 and 1.4.x th…

  • Unscored —
    CVE-2007-5691

    ParseFTPList.cpp in Mozilla Firefox 2.0.0.7 allows remote FTP servers to cause a denial of service (application crash) …

  • Unscored —
    CVE-2007-5688 Public exploit

    Multiple SQL injection vulnerabilities in directory.php in the Multi-Forums (aka Multi Host Forum Pro) module 1.3.3, fo…

  • Unscored —
    CVE-2007-5690

    Buffer overflow in sethdlc.c in the Asterisk Zaptel 1.4.5.1 might allow local users to gain privileges via a long devic…