Skip to content
OpenAdvisories

Archive

December 2007

Vulnerabilities first published in this month (UTC), newest first.

← November 2007 2007 / December January 2008 →
  1. 19
  2. 2 
  3. 33
  4. 434
  5. 57
  6. 615
  7. 717
  8. 8 
  9. 9 
  10. 1021
  11. 118
  12. 1217
  13. 1323
  14. 142
  15. 1538
  16. 16 
  17. 1728
  18. 1813
  19. 1926
  20. 2075
  21. 2110
  22. 22 
  23. 23 
  24. 249
  25. 25 
  26. 26 
  27. 2718
  28. 2851
  29. 29 
  30. 30 
  31. 3112
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium —
    CVE-2007-5342

    JULI logging component in Apache Tomcat does not restrict certain permissions for web applications

    The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite a…

    org.apache.tomcat:tomcat-juli Maven
  • Medium —
    CVE-2007-6382

    Robocode Arbitrary Code Execution

    The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the SwingUtilities.invokeLater method.

    net.sf.robocode:robocode.core Maven
  • Medium 5.3
    CVE-2007-5613

    Mortbay Jetty vulnerable to Cross-site scripting

    Cross-site scripting (XSS) vulnerability in Dump Servlet in Mortbay Jetty before 6.1.6rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters and cookies.

    org.mortbay.jetty:jetty Maven
  • Medium —
    CVE-2007-5615

    Mortbay Jetty CRLF Injection Vulnerability

    CRLF injection vulnerability in Mortbay Jetty before 6.1.6rc0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

    org.mortbay.jetty:jetty Maven