Skip to content
OpenAdvisories

Archive

5 December 2007

Vulnerabilities first published on this day (UTC), newest first.

← November 2007 2007 / December /5 January 2008 →
  1. 19
  2. 2 
  3. 33
  4. 434
  5. 57
  6. 615
  7. 717
  8. 8 
  9. 9 
  10. 1021
  11. 118
  12. 1217
  13. 1323
  14. 142
  15. 1538
  16. 16 
  17. 1728
  18. 1813
  19. 1926
  20. 2075
  21. 2110
  22. 22 
  23. 23 
  24. 249
  25. 25 
  26. 26 
  27. 2718
  28. 2851
  29. 29 
  30. 30 
  31. 3112
All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • Unscored —
    CVE-2007-6014

    SQL injection vulnerability in post.php in Beehive Forum 0.7.1 and earlier allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2007-6241

    Multiple unspecified vulnerabilities in Beehive Forum 0.7.1 have unknown "critical" impact and attack vectors, differen…

  • Unscored —
    CVE-2007-6240 Public exploit

    SQL injection vulnerability in active.asp in Snitz Forums 2000 3.4.06 allows remote attackers to execute arbitrary SQL …

  • Medium 5.3
    CVE-2007-5613

    Mortbay Jetty vulnerable to Cross-site scripting

    Cross-site scripting (XSS) vulnerability in Dump Servlet in Mortbay Jetty before 6.1.6rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters and cookies.

    org.mortbay.jetty:jetty Maven
  • High 7.3
    CVE-2007-5614

    Improper Authentication in Mortbay Jetty

    Mortbay Jetty before 6.1.6rc1 does not properly handle "certain quote sequences" in HTML cookie parameters, which allows remote attackers to hijack browser sessions via unspecified vectors.

    org.mortbay.jetty:jetty Maven
  • Unscored —
    CVE-2007-5355 EPSS 17%

    The Web Proxy Auto-Discovery (WPAD) feature in Microsoft Internet Explorer 6 and 7, when a primary DNS suffix with thre…

  • Medium —
    CVE-2007-5615

    Mortbay Jetty CRLF Injection Vulnerability

    CRLF injection vulnerability in Mortbay Jetty before 6.1.6rc0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

    org.mortbay.jetty:jetty Maven