Skip to content
OpenAdvisories

Archive

October 2007

Vulnerabilities first published in this month (UTC), newest first.

← September 2007 2007 / October November 2007 →
  1. 138
  2. 2 
  3. 317
  4. 416
  5. 524
  6. 676
  7. 7 
  8. 818
  9. 963
  10. 10 
  11. 1119
  12. 1242
  13. 1315
  14. 1471
  15. 158
  16. 1616
  17. 1752
  18. 1894
  19. 1945
  20. 2029
  21. 218
  22. 224
  23. 2366
  24. 2440
  25. 2534
  26. 2633
  27. 27 
  28. 284
  29. 2955
  30. 3039
  31. 3144
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.9
    CVE-2007-5712

    Django vulnerable to Denial of Service via i18n middleware component

    The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory consumpt…

    python-django django Debian PyPI
  • Medium —
    CVE-2007-5379

    Moderate severity vulnerability that affects rails

    Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers and ActiveResource servers to determine the existence of arbitrary files and read arbitrary XML files via the Hash.from_xml (Hash#from_xml) method, which uses XmlSimple (XML::Simple) unsaf…

    rails rails Debian RubyGems
  • Medium —
    CVE-2007-5380

    Session fixation vulnerability in Rails

    Session fixation vulnerability in Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers to hijack web sessions via unspecified vectors related to "URL-based sessions."

    rails rails Debian RubyGems
  • Medium —
    CVE-2007-5201

    FTP backend for Duplicity Discloses Passwords to Process Listing

    The FTP backend for Duplicity before 0.4.9 sends the password as a command line argument when calling ncftp, which might allow local users to read the password by listing the process and its arguments.

    duplicity duplicity Debian PyPI