Skip to content
OpenAdvisories

Archive

7 November 2007

Vulnerabilities first published on this day (UTC), newest first.

18 results · Feed

  • Unscored —

    Cross-site scripting (XSS) vulnerability in displayecard.php in Coppermine Photo Gallery (CPG) before 1.4.14 allows rem…

  • Unscored —
    CVE-2007-5887 Public exploit

    SQL injection vulnerability in boards/printer.asp in ASP Message Board 2.2.1c allows remote attackers to execute arbitr…

  • Critical 9.8

    Plone Arbitrary Code Execution via Unsafe Handling of Pickles

    Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes.

  • Unscored —

    Perl-Compatible Regular Expression (PCRE) library before 7.3 reads past the end of the string when searching for unmatc…

  • Unscored —

    Perl-Compatible Regular Expression (PCRE) library before 7.3 backtracks too far when matching certain input bytes again…

  • Unscored —

    Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes for unspecified "multipl…

  • Unscored —

    Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to cause a denial of se…

  • Unscored —

    Multiple integer overflows in Perl-Compatible Regular Expression (PCRE) library before 7.3 allow context-dependent atta…

  • Unscored —

    Stack-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an inva…

  • Unscored —
    CVE-2007-4676 EPSS 47%

    Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via malforme…

  • Unscored —
    CVE-2007-4677 EPSS 47%

    Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an inval…

  • Unscored —

    Perl-Compatible Regular Expression (PCRE) library before 7.3 does not properly compute the length of (1) a \p sequence,…

  • Unscored —
    CVE-2007-4675 EPSS 33%

    Heap-based buffer overflow in the QuickTime VR extension 7.2.0.240 in QuickTime.qts in Apple QuickTime before 7.3 allow…

  • Unscored —

    Heap-based buffer overflow in Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent att…

  • Unscored —

    Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via crafted …

  • Unscored —
    CVE-2007-3751 EPSS 26%

    Unspecified vulnerability in QuickTime for Java in Apple QuickTime before 7.3 allows remote attackers to execute arbitr…

  • Unscored —

    Unspecified vulnerability in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via a crafted…

  • Unscored —

    Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows conte…