Skip to content
OpenAdvisories

Archive

1 November 2007

Vulnerabilities first published on this day (UTC), newest first.

55 results · Feed

  • Unscored —
    CVE-2007-5786 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in GoSamba 1.0.1 allow remote attackers to execute arbitrary PHP cod…

  • Unscored —

    The Vonage Motorola Phone Adapter VT 2142-VD does not properly verify that a SIP INVITE message originated from a legit…

  • Unscored —

    Blue-Collar Productions i-Gallery 3.4 stores sensitive information under the web root with insufficient access control,…

  • Unscored —
    CVE-2007-5779 Public exploit EPSS 72%

    Buffer overflow in the GomManager (GomWeb Control) ActiveX control in GomWeb3.dll 1.0.0.12 in Gretech Online Movie Play…

  • Unscored —
    CVE-2007-5776 Public exploit

    Directory traversal vulnerability in igallery.asp in Blue-Collar Productions i-Gallery 3.4 allows remote attackers to r…

  • Critical 9.8
    CVE-2007-5775 Public exploit EPSS 29%

    Unspecified vulnerability in BitDefender allows attackers to execute arbitrary code via unspecified vectors, aka EEYEB-…

  • Unscored —

    Mobile Spy (1) stores login credentials in cleartext under the RetinaxStudios registry key, and (2) sends login credent…

  • Unscored —
    CVE-2007-5784 Public exploit

    PHP remote file inclusion vulnerability in index.php in CaupoShop Pro 2.x allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2007-5773 Public exploit

    Cross-site request forgery (CSRF) vulnerability in index.php in the File Manager module in Flatnuke 3 allows remote att…

  • Unscored —
    CVE-2007-5772 Public exploit

    Direct static code injection vulnerability in the download module in Flatnuke 3 allows remote authenticated administrat…

  • Unscored —
    CVE-2007-5783 Public exploit

    SQL injection vulnerability in emc.asp in emagiC CMS.Net 4.0 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2007-5771 Public exploit

    Flatnuke 3 (aka FlatnuX) allows remote attackers to obtain administrative access via a myforum%00 cookie.

  • Unscored —

    Buffer overflow in the SIP parser on the Grandstream HT-488 0.1 allows remote attackers to cause a denial of service (d…

  • Unscored —
    CVE-2007-5780 Public exploit

    PHP remote file inclusion vulnerability in pub/pub08_comments.php in teatro 1.6 allows remote attackers to execute arbi…

  • Unscored —

    The Vonage Motorola Phone Adapter VT 2142-VD does not encrypt RTP packets, which might allow remote attackers to eavesd…