Skip to content
OpenAdvisories

Archive

November 2007

Vulnerabilities first published in this month (UTC), newest first.

← October 2007 2007 / November December 2007 →
  1. 155
  2. 25
  3. 37
  4. 4 
  5. 541
  6. 612
  7. 718
  8. 829
  9. 93
  10. 1026
  11. 11 
  12. 12 
  13. 137
  14. 1434
  15. 1575
  16. 164
  17. 17 
  18. 18 
  19. 192
  20. 2045
  21. 217
  22. 2218
  23. 2319
  24. 24 
  25. 25 
  26. 2612
  27. 2716
  28. 28 
  29. 2916
  30. 3027
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium —
    CVE-2007-6183

    gtk2 vulnerable to Use of Externally-Controlled Format String

    Format string vulnerability in the mdiag_initialize function in gtk/src/rbgtkmessagedialog.c in Ruby-GNOME 2 (aka Ruby/Gnome2) 0.16.0, and SVN versions before 20071127, allows context-dependent attackers to execute arbitrary code via format string specifiers …

    gtk2 RubyGems
  • Medium —
    CVE-2007-6077

    session fixation protection mechanism in cgi_process.rb in Rails

    The session fixation protection mechanism in cgi_process.rb in Rails 1.2.4, as used in Ruby on Rails, removes the :cookie_only attribute from the DEFAULT_SESSION_OPTIONS constant, which effectively causes cookie_only to be applied only to the first instantiat…

    rails rails Debian RubyGems
  • Medium 6.1
    CVE-2007-5954 Public exploit

    Cross-site scripting (XSS) vulnerability in buscador.php in JLMForo System allows remote attackers to inject arbitrary …

  • Medium 6.1
    CVE-2007-5817 Public exploit

    dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to perform certain privileged actions via a (…