Skip to content
OpenAdvisories

Archive

October 2007

Vulnerabilities first published in this month (UTC), newest first.

327 results · Clear filters · Feed

  • Unscored —
    CVE-2004-2745 Public exploit

    Directory traversal vulnerability in Anteco Visual Technologies OwnServer 1.0 and earlier allows remote attackers to re…

  • Unscored —
    CVE-2007-5752 Public exploit

    adduser.php in PHP-AGTC Membership (AGTC-Membership) System 1.1a does not require authentication, which allows remote a…

  • Unscored —
    CVE-2007-5754 Public exploit

    PHP remote file inclusion vulnerability in urlinn_includes/config.php in phpFaber URLInn 2.0.5 allows remote attackers …

  • Unscored —
    CVE-2002-2379 Public exploit

    Cisco AS5350 IOS 12.2(11)T with access control lists (ACLs) applied and possibly with ssh running allows remote attacke…

  • Unscored —
    CVE-2002-2370 Public exploit

    SWS web server 0.0.4, 0.0.3 and 0.1.0 allows remote attackers to cause a denial of service (crash) via a URL request th…

  • Unscored —
    CVE-2002-2385 Public exploit

    Buffer overflow in hotfoon4.exe in Hotfoon 4.0 allows remote attackers to cause a denial of service (crash) and possibl…

  • Unscored —
    CVE-2002-2376 Public exploit

    Cross-site scripting (XSS) vulnerability in E-Guest_sign.pl in E-Guest 1.1 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2007-5740 Public exploit EPSS 12%

    The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attac…

  • Unscored —
    CVE-2007-5733 Public exploit

    Unrestricted file upload vulnerability in upload/upload.php in Japanese PHP Gallery Hosting, when Open directory mode i…

  • Unscored —
    CVE-2007-5731 Public exploit

    Absolute path traversal vulnerability in Apache Jakarta Slide 2.1 and earlier allows remote authenticated users to read…

  • Unscored —
    CVE-2007-5737 Public exploit

    Unrestricted file upload vulnerability in component/upload.jsp in Korean GHBoard allows remote attackers to upload arbi…

  • Unscored —
    CVE-2007-5739 Public exploit

    Directory traversal vulnerability in component/flashupload/download.jsp in the FlashUpload component in Korean GHBoard …

  • Unscored —
    CVE-2007-4862 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/menu.php in SAXON 5.4 allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2007-4863 Public exploit

    SQL injection vulnerability in example.php in SAXON 5.4 allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2007-5728 Public exploit EPSS 15%

    Cross-site scripting (XSS) vulnerability in phpPgAdmin 3.5 to 4.1.1, and possibly 4.1.2, allows remote attackers to inj…

  • Unscored —
    CVE-2007-5725 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Smart-Shop allow remote attackers to inject arbitrary web script…

  • Unscored —
    CVE-2007-5721 Public exploit

    PHP remote file inclusion vulnerability in _theme/breadcrumb.php in MySpacePros MySpace Resource Script (MSRS) 1.21 all…

  • Unscored —
    CVE-2007-5724 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Omnistar Live allow remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2007-5722 Public exploit EPSS 12%

    Stack-based buffer overflow in a certain ActiveX control in GLChat.ocx 2.5.1.32 in GlobalLink 2.7.0.8, as used in Ourga…

  • Unscored —
    CVE-2007-5720 Public exploit

    Unrestricted file upload vulnerability in the profiles script in ProfileCMS 1.0 allows remote attackers to upload and e…

  • Unscored —
    CVE-2007-5719 Public exploit

    SQL injection vulnerability in bb_func_search.php in miniBB 2.1 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2007-5709 Public exploit EPSS 11%

    Stack-based buffer overflow in Sony SonicStage CONNECT Player (CP) 4.3 allows remote attackers to execute arbitrary cod…

  • Unscored —
    CVE-2007-5710 Public exploit

    Cross-site scripting (XSS) vulnerability in wp-admin/edit-post-rows.php in WordPress 2.3 allows remote attackers to inj…

  • Unscored —
    CVE-2007-5706 Public exploit

    Absolute path traversal vulnerability in download.php in Jeebles Directory 2.9.60 allows remote attackers to read arbit…

  • Unscored —
    CVE-2007-5699 Public exploit

    Stack-based buffer overflow in eIQNetworks Enterprise Security Analyzer (ESA) 2.5 allows remote attackers to execute ar…

  • Unscored —
    CVE-2007-5697 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in PHP Image 1.2 allow remote attackers to execute arbitrary PHP cod…

  • Unscored —
    CVE-2007-5692 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in SiteBar 3.3.8 allow remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2007-5693 Public exploit

    Eval injection vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated us…

  • Unscored —
    CVE-2007-5694 Public exploit

    Absolute path traversal vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authent…

  • Unscored —
    CVE-2002-2336 Public exploit

    Norton Personal Firewall 2002 4.0, when configured to automatically block attacks, allows remote attackers to block IP …

  • Unscored —
    CVE-2002-2338 Public exploit

    The POP3 mail client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier, allows remote attackers to …

  • Unscored —
    CVE-2002-2362 Public exploit

    Cross-site scripting (XSS) vulnerability in form_header.php in MyMarket 1.71 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2002-2357 Public exploit

    MailEnable 1.5 015 through 1.5 018 allows remote attackers to cause a denial of service (crash) via a long USER string,…

  • Unscored —
    CVE-2002-2351 Public exploit

    Eudora 5.1 allows remote attackers to bypass security warnings and possibly execute arbitrary code via attachments with…

  • Unscored —
    CVE-2002-2339 Public exploit

    Cross-site scripting (XSS) vulnerability in configure.asp in Script-Shed GuestBook 1.0 allows remote attackers to injec…

  • Unscored —
    CVE-2002-2349 Public exploit

    phpinfo.php in phpBBmod 1.3.3 executes the phpinfo function, which allows remote attackers to obtain sensitive environm…

  • Unscored —
    CVE-2002-2343 Public exploit

    Cross-site scripting (XSS) vulnerability in NOCC 0.9 through 0.9.5 allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2002-2360 Public exploit

    The RPC module in Webmin 0.21 through 0.99, when installed without root or admin privileges, allows remote attackers to…

  • Unscored —
    CVE-2002-2358 Public exploit

    Cross-site scripting (XSS) vulnerability in the FTP view feature in Opera 6.0 and 6.01 through 6.04 allows remote attac…

  • Unscored —
    CVE-2002-2341 Public exploit

    Cross-site scripting (XSS) vulnerability in content blocking in SonicWALL SOHO3 6.3.0.0 allows remote attackers to inje…