Skip to content
OpenAdvisories

Archive

27 December 2007

Vulnerabilities first published on this day (UTC), newest first.

← November 2007 2007 / December /27 January 2008 →
  1. 19
  2. 2 
  3. 33
  4. 434
  5. 57
  6. 615
  7. 717
  8. 8 
  9. 9 
  10. 1021
  11. 118
  12. 1217
  13. 1323
  14. 142
  15. 1538
  16. 16 
  17. 1728
  18. 1813
  19. 1926
  20. 2075
  21. 2110
  22. 22 
  23. 23 
  24. 249
  25. 25 
  26. 26 
  27. 2718
  28. 2851
  29. 29 
  30. 30 
  31. 3112
All Critical High Medium Low Exploited only Public exploit

18 results · Feed

  • Unscored —
    CVE-2007-6538 Public exploit

    SQL injection vulnerability in ing/blocks/mrbs/code/web/view_entry.php in the MRBS plugin for Moodle allows remote atta…

  • Unscored —
    CVE-2007-6536

    The Custom Button Installer dialog in Google Toolbar 4 and 5 beta presents certain domain names in the (1) "Downloaded …

  • Unscored —
    CVE-2007-6537 Public exploit

    Stack-based buffer overflow in the zfile_gunzip function in zfile.c in WinUAE 1.4.4 and earlier allows user-assisted re…

  • Unscored —
    CVE-2007-6540

    SQL injection vulnerability in neuron news 1.0 allows remote attackers to execute arbitrary SQL commands via the q para…

  • Unscored —
    CVE-2007-6539 Public exploit

    PHP local file inclusion vulnerability in index.php in IDevspot iSupport 1.8 allows remote attackers to include local f…

  • Unscored —
    CVE-2007-6533 Public exploit EPSS 12%

    Buffer overflow in Zoom Player 6.00 beta 2 and earlier allows user-assisted remote attackers to execute arbitrary code …

  • Unscored —
    CVE-2007-6534 EPSS 11%

    Multiple unspecified vulnerabilities in Microsoft Office Publisher allow user-assisted remote attackers to cause a deni…

  • Unscored —
    CVE-2007-6542 Public exploit

    PHP remote file inclusion vulnerability in admin/frontpage_right.php in Arcadem LE 2.04 and earlier allows remote attac…

  • Unscored —
    CVE-2007-6541

    Multiple cross-site scripting (XSS) vulnerabilities in neuron news 1.0 allow remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2007-6535

    Buffer overflow in the YShortcut ActiveX control in YShortcut.dll 2006.8.15.1 in Yahoo! Toolbar might allow attackers t…

  • Unscored —
    CVE-2007-4474 Public exploit EPSS 44%

    Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, i…

  • Unscored —
    CVE-2007-6527

    uploadimg.php in the Automatic Image Upload with Thumbnails (imgUpload) module 1.3.2 for PunBB only verifies the Conten…

  • Unscored —
    CVE-2007-6526

    Cross-site scripting (XSS) vulnerability in tiki-special_chars.php in TikiWiki before 1.9.9 allows remote attackers to …

  • Unscored —
    CVE-2007-6528 Public exploit

    Directory traversal vulnerability in tiki-listmovies.php in TikiWiki before 1.9.9 allows remote attackers to read arbit…

  • Unscored —
    CVE-2007-6525

    Unspecified vulnerability in eClient in IBM DB2 Content Manager (CM) Toolkit 8.3 before fix pack 7 for z/OS has unknown…

  • Unscored —
    CVE-2007-6529

    Multiple unspecified vulnerabilities in TikiWiki before 1.9.9 have unknown impact and attack vectors involving (1) tiki…

  • Unscored —
    CVE-2007-6530 Public exploit EPSS 37%

    Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions bef…

  • Medium —
    CVE-2007-5342

    JULI logging component in Apache Tomcat does not restrict certain permissions for web applications

    The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite a…

    org.apache.tomcat:tomcat-juli Maven