Skip to content
OpenAdvisories

Archive

8 November 2007

Vulnerabilities first published on this day (UTC), newest first.

29 results · Feed

  • Unscored —

    Buffer overflow in MDSYS.SDO_CS in Oracle Database Server 8iR3, 9iR1, 9iR2 up to 9.2.0.6, and 10gR1 up to 10.1.0.4 allo…

  • Unscored —

    Directory traversal vulnerability in Pablo Software Solutions Quick 'n Easy FTP Server 1.77, and possibly earlier versi…

  • Unscored —
    CVE-2004-2746 Public exploit

    SQL injection vulnerability in adminlogin.asp in XTREME ASP Photo Gallery 2.0 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2004-2748 Public exploit

    viewreport.pl in NetIQ WebTrends Reporting Center Enterprise Edition 6.1a allows remote attackers to determine the inst…

  • Unscored —
    CVE-2003-1530 Public exploit

    SQL injection vulnerability in privmsg.php in phpBB 2.0.3 and earlier allows remote attackers to execute arbitrary SQL …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in testcgi.exe in Lilikoi Software Ceilidh 2.70 and earlier allows remote atta…

  • Unscored —
    CVE-2003-1532 Public exploit

    SQL injection vulnerability in compte.php in PhpMyShop 1.00 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —

    Directory traversal vulnerability in Seagull Software Systems J Walk application server 3.2C9, and other versions befor…

  • Unscored —
    CVE-2003-1533 Public exploit

    SQL injection vulnerability in accesscontrol.php in PhpPass 2 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2003-1536 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Codeworx Technologies DCP-Portal 5.3.1 allow remote attackers to…

  • Unscored —
    CVE-2003-1535 Public exploit

    Justice Guestbook 1.3 allows remote attackers to obtain the full installation path via a direct request to cfooter.php3…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in jgb.php3 in Justice Guestbook 1.3 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2007-4517 Public exploit

    Buffer overflow in the XDB.XDB_PITRIG_PKG.PITRIG_DROPMETADATA procedure in Oracle 10g R2 allows remote authenticated us…

  • Unscored —

    Mozilla Firefox 2.0.0.9 allows remote attackers to cause a denial of service (CPU consumption and crash) via an iframe …

  • Unscored —

    SQL injection vulnerability in okxLOV.jsp in Oracle E-Business Suite 11 and 12 allows remote attackers to execute arbit…

  • Unscored —

    nsr_shutdown in Fujitsu Siemens NetWorker 6.0 allows local users to overwrite arbitrary files via a symlink attack on t…

  • Unscored —

    CoolKey 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files in the /tmp/.pk11…

  • Unscored —

    Dbgv.sys in Microsoft Sysinternals DebugView before 4.72 provides an unspecified mechanism for copying data into kernel…

  • Unscored —

    gforge 3.1 and 4.5.14 allows local users to truncate arbitrary files via a symlink attack on temporary files.

  • Unscored —

    Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in popple…

  • Unscored —

    Stack-based buffer overflow in the separate_word function in tokenize.c in Link Grammar 4.1b and possibly other version…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in mpweb/scripts/mpx.dll in Cisco Unified MeetingPlace 5.4 and earl…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in jsp/Login.do in ManageEngine OpManager MSP Edition and OpManager…

  • Unscored —

    Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute ar…

  • Unscored —

    Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attac…

  • Unscored —
    CVE-2007-5892 EPSS 17%

    Stack-based buffer overflow in the pdg2.dll ActiveX control in SSReader 4.0 and earlier allow remote attackers to execu…

  • Unscored —

    HTTPSocket.cpp in the C++ Sockets Library before 2.2.5 allows remote attackers to cause a denial of service (crash) via…

  • Unscored —

    Multiple PHP remote file inclusion vulnerabilities in IDMOS 1.0 Alpha (aka Phoenix) allow remote attackers to execute a…

  • Unscored —
    CVE-2007-5890 Public exploit

    Directory traversal vulnerability in index.php in easyGB 2.1.1 allows remote attackers to include arbitrary files via t…