Skip to content
OpenAdvisories

Archive

20 December 2007

Vulnerabilities first published on this day (UTC), newest first.

  1. 19
  2. 2 
  3. 33
  4. 434
  5. 57
  6. 615
  7. 717
  8. 8 
  9. 9 
  10. 1021
  11. 118
  12. 1217
  13. 1323
  14. 142
  15. 1538
  16. 16 
  17. 1728
  18. 1813
  19. 1926
  20. 2075
  21. 2110
  22. 22 
  23. 23 
  24. 249
  25. 25 
  26. 26 
  27. 2718
  28. 2851
  29. 29 
  30. 30 
  31. 3112

75 results · Feed

  • Unscored —
    CVE-2007-6488 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Falcon Series One CMS 1.4.3 allow remote attackers to execute arb…

  • Unscored —

    libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an …

  • Unscored —

    Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an imag…

  • Unscored —

    Asterisk Open Source 1.2.x before 1.2.26 and 1.4.x before 1.4.16, and Business Edition B.x.x before B.2.3.6 and C.x.x b…

  • Unscored —

    Unspecified vulnerability in Cisco Firewall Services Module (FWSM) 3.2(3) allows remote attackers to cause a denial of …

  • Unscored —
    CVE-2007-6335 Public exploit EPSS 18%

    Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW…

  • Unscored —

    Off-by-one error in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MS-ZIP compresse…

  • Unscored —
    CVE-2007-6246 EPSS 12%

    Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0, when running on Linux, uses insecure…

  • Unscored —

    Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafte…

  • Unscored —
    CVE-2007-6242 EPSS 30%

    Unspecified vulnerability in Adobe Flash Player 9.0.48.0 and earlier might allow remote attackers to execute arbitrary …

  • Unscored —

    Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 does not sufficiently restrict the in…

  • Unscored —

    Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 allows remote attackers to modify HTT…

  • Unscored —
    CVE-2007-6244 Public exploit EPSS 13%

    Multiple cross-site scripting (XSS) vulnerabilities in Adobe Flash Player 9.x up to 9.0.48.0 and 8.x up to 8.0.35.0 all…

  • Unscored —
    CVE-2007-6457 Public exploit

    Stack-based buffer overflow in the webmail feature in SurgeMail 38k4 allows remote attackers to cause a denial of servi…

  • Unscored —

    SQL injection vulnerability in index.php in phpRPG 0.8, when magic_qutoes_gpc is disabled, allows remote attackers to e…

  • Unscored —

    Unspecified vulnerability in the benchmark reporting system in Google Web Toolkit (GWT) before 1.4.61 has unknown impac…

  • Unscored —
    CVE-2007-6454 Public exploit EPSS 17%

    Heap-based buffer overflow in the handshakeHTTP function in servhs.cpp in PeerCast 0.1217 and earlier, and SVN 344 and …

  • Unscored —

    Buffer overflow in the HuffDecode function in hw_utils/hwrcon/huffman.c and hexenworld/Client/huffman.c in Hammer of Th…

  • Unscored —
    CVE-2007-6466 Public exploit

    Multiple SQL injection vulnerabilities in index.php in FreeWebshop 2.2.1 allow remote attackers to execute arbitrary SQ…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Anon Proxy Server before 0.101 allow remote attackers to inject …

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flyspray 0.9.9 through 0.9.9.3 allow remote attacke…

  • Unscored —
    CVE-2007-6470 Public exploit

    phpRPG 0.8 stores sensitive information under the web root with insufficient access control, which allows remote attack…

  • Unscored —
    CVE-2007-6462 Public exploit

    SQL injection vulnerability in fullnews.php in PHP Real Estate Classifieds allows remote attackers to execute arbitrary…

  • Unscored —

    Unspecified vulnerability in OpenOffice.org code in Planamesa NeoOffice 2.2.2 before Patch 4 has unknown impact and att…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in ganglia-web in Ganglia before 3.0.6 allow remote attackers to in…

  • Unscored —
    CVE-2007-6459 Public exploit

    Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary commands via shell metacharac…

  • Unscored —
    CVE-2007-6464 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Form tools 1.5.0b allow remote attackers to execute arbitrary PHP…

  • Unscored —
    CVE-2007-6467 Public exploit

    SQL injection vulnerability in index.php in MKPortal 1.1 RC1 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2007-6471 Public exploit

    Incomplete blacklist vulnerability in main.php in phPay 2.02.01 on Windows allows remote attackers to conduct directory…

  • Unscored —

    Heap-based buffer overflow in Open File Manager service (ofmnt.exe) in St. Bernard Open File Manager 9.5 allows remote …

  • Unscored —
    CVE-2007-6453 Public exploit

    Directory traversal vulnerability in raidenhttpd-admin/workspace.php in RaidenHTTPD 2.0.19, when the WebAdmin function …

  • Unscored —
    CVE-2007-6458 Public exploit

    SQL injection vulnerability in shop/mainfile.php in 123tkShop 0.9.1 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2007-6455 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in Mambo 4.6.2 allow remote attackers to inject arbitr…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the admin panel in PHP Real Estate Classifieds allow remote atta…

  • Unscored —

    Integer overflow in the hrtimer_start function in kernel/hrtimer.c in the Linux kernel before 2.6.23.10 allows local us…