Skip to content
OpenAdvisories

Archive

17 December 2007

Vulnerabilities first published on this day (UTC), newest first.

← November 2007 2007 / December /17 January 2008 →
  1. 19
  2. 2 
  3. 33
  4. 434
  5. 57
  6. 615
  7. 717
  8. 8 
  9. 9 
  10. 1021
  11. 118
  12. 1217
  13. 1323
  14. 142
  15. 1538
  16. 16 
  17. 1728
  18. 1813
  19. 1926
  20. 2075
  21. 2110
  22. 22 
  23. 23 
  24. 249
  25. 25 
  26. 26 
  27. 2718
  28. 2851
  29. 29 
  30. 30 
  31. 3112
All Critical High Medium Low Exploited only Public exploit

28 results · Feed

  • Unscored —
    CVE-2007-6414 Public exploit

    admin/administrator.php in Adult Script 1.6 and earlier sends a redirect to the web browser but does not exit, which al…

  • Unscored —
    CVE-2007-6416

    The copy_to_user function in the PAL emulation functionality for Xen 3.1.2 and earlier, when running on ia64 systems, a…

  • Unscored —
    CVE-2007-6413

    Sun Solaris 10 with the 120011-04 and 120012-04 patches, and later 120011-* and 120012-* patches, allows remote attacke…

  • Unscored —
    CVE-2007-4473

    Gesytec Easylon OPC Server before 2.3.44 does not properly validate server handles, which allows remote attackers to ex…

  • Unscored —
    CVE-2007-6410

    Gadu-Gadu does not properly perform protocol handling, which allows remote attackers to conduct cross-site request forg…

  • Unscored —
    CVE-2007-6393 Public exploit

    SQL injection vulnerability in albums.php in Ace Image Hosting Script allows remote authenticated users to execute arbi…

  • Unscored —
    CVE-2007-6404 Public exploit

    Directory traversal vulnerability in Sergey Lyubka Simple HTTPD (shttpd) 1.38 and earlier on Windows allows remote atta…

  • Unscored —
    CVE-2007-6408

    IBM Tivoli Provisioning Manager Express provides unspecified information in error messages when (1) attempted duplicati…

  • Unscored —
    CVE-2007-6403 Public exploit

    Stack-based buffer overflow in Nullsoft Winamp 5.32 allows user-assisted remote attackers to execute arbitrary code via…

  • Unscored —
    CVE-2007-6391 Public exploit

    SQL injection vulnerability in patch/comments.php in SH-News 3.0 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2007-6390

    Cross-site request forgery (CSRF) vulnerability in the mycalendar plugin before 0.13 for Serendipity allows remote atta…

  • Unscored —
    CVE-2007-6392 Public exploit

    SQL injection vulnerability in DWdirectory 2.1 and earlier allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2007-6411

    Multiple buffer overflows in the HandleEmotsConfig function in the GG Client in Gadu-Gadu 7.7 Build 3669 allow user-ass…

  • Unscored —
    CVE-2007-6405 Public exploit

    Sergey Lyubka Simple HTTPD (shttpd) 1.38 and earlier on Windows allows remote attackers to download arbitrary CGI progr…

  • Unscored —
    CVE-2007-6395 Public exploit

    Flat PHP Board 1.2 and earlier stores sensitive information under the web root with insufficient access control, which …

  • Unscored —
    CVE-2007-6401 Public exploit EPSS 30%

    Stack-based buffer overflow in mplayer2.exe in Microsoft Windows Media Player (WMP) 6.4, when used with the 3ivx 4.5.1 …

  • Unscored —
    CVE-2007-6398 Public exploit

    Flat PHP Board 1.2 and earlier allows remote attackers to bypass authentication and obtain limited access to an arbitra…

  • Unscored —
    CVE-2007-6402 Public exploit

    Stack-based buffer overflow in mplayerc.exe in Media Player Classic (MPC) 6.4.9, when used with the 3ivx 4.5.1 or 5.0.1…

  • Unscored —
    CVE-2007-6406

    Multiple cross-site scripting (XSS) vulnerabilities in CA (formerly Computer Associates) eTrust Threat Management Conso…

  • Unscored —
    CVE-2007-6412

    Direct static code injection vulnerability in wiki/index.php in Bitweaver 2.0.0 and earlier, when comments are enabled,…

  • Unscored —
    CVE-2007-6399 Public exploit

    index.php in Flat PHP Board 1.2 and earlier allows remote authenticated users to obtain the password for the current us…

  • Unscored —
    CVE-2007-6397 Public exploit

    Multiple directory traversal vulnerabilities in index.php in Flat PHP Board 1.2 and earlier allow remote attackers to (…

  • Unscored —
    CVE-2007-6396 Public exploit

    Direct static code injection vulnerability in index.php in Flat PHP Board 1.2 and earlier allows remote attackers to in…

  • Unscored —
    CVE-2007-6389

    The notify feature in GNOME screensaver (gnome-screensaver) 2.20.0 might allow local users to read the clipboard conten…

    gnome-screensaver Debian
  • Unscored —
    CVE-2007-6394 Public exploit

    SQL injection vulnerability in index.php in Content Injector 1.53 allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2007-6400 Public exploit

    Directory traversal vulnerability in download_file.php in PolDoc CMS (aka PDDMS) 0.96 allows remote attackers to read a…

  • Unscored —
    CVE-2007-6407

    Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Provisioning Manager Express allow remote attackers t…

  • Unscored —
    CVE-2007-6409

    The gg protocol handler in Gadu-Gadu, when this product is installed but not running, does not properly handle the skin…