Skip to content
OpenAdvisories

Archive

December 2007

Vulnerabilities first published in this month (UTC), newest first.

← November 2007 2007 / December January 2008 →
  1. 19
  2. 2 
  3. 33
  4. 434
  5. 57
  6. 615
  7. 717
  8. 8 
  9. 9 
  10. 1021
  11. 118
  12. 1217
  13. 1323
  14. 142
  15. 1538
  16. 16 
  17. 1728
  18. 1813
  19. 1926
  20. 2075
  21. 2110
  22. 22 
  23. 23 
  24. 249
  25. 25 
  26. 26 
  27. 2718
  28. 2851
  29. 29 
  30. 30 
  31. 3112
All Critical High Medium Low Exploited only Public exploit

436 results · Feed

  • Unscored —
    CVE-2007-6461

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flyspray 0.9.9 through 0.9.9.3 allow remote attacke…

  • Unscored —
    CVE-2007-6470 Public exploit

    phpRPG 0.8 stores sensitive information under the web root with insufficient access control, which allows remote attack…

  • Unscored —
    CVE-2007-6462 Public exploit

    SQL injection vulnerability in fullnews.php in PHP Real Estate Classifieds allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2007-6456

    Unspecified vulnerability in OpenOffice.org code in Planamesa NeoOffice 2.2.2 before Patch 4 has unknown impact and att…

  • Unscored —
    CVE-2007-6465

    Multiple cross-site scripting (XSS) vulnerabilities in ganglia-web in Ganglia before 3.0.6 allow remote attackers to in…

  • Unscored —
    CVE-2007-6459 Public exploit

    Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary commands via shell metacharac…

  • Unscored —
    CVE-2007-6464 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Form tools 1.5.0b allow remote attackers to execute arbitrary PHP…

  • Unscored —
    CVE-2007-6467 Public exploit

    SQL injection vulnerability in index.php in MKPortal 1.1 RC1 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2007-6471 Public exploit

    Incomplete blacklist vulnerability in main.php in phPay 2.02.01 on Windows allows remote attackers to conduct directory…

  • Unscored —
    CVE-2007-6281

    Heap-based buffer overflow in Open File Manager service (ofmnt.exe) in St. Bernard Open File Manager 9.5 allows remote …

  • Unscored —
    CVE-2007-6453 Public exploit

    Directory traversal vulnerability in raidenhttpd-admin/workspace.php in RaidenHTTPD 2.0.19, when the WebAdmin function …

  • Unscored —
    CVE-2007-6458 Public exploit

    SQL injection vulnerability in shop/mainfile.php in 123tkShop 0.9.1 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2007-6455 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in Mambo 4.6.2 allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2007-6463

    Multiple cross-site scripting (XSS) vulnerabilities in the admin panel in PHP Real Estate Classifieds allow remote atta…

  • Unscored —
    CVE-2007-5966

    Integer overflow in the hrtimer_start function in kernel/hrtimer.c in the Linux kernel before 2.6.23.10 allows local us…

  • Unscored —
    CVE-2007-5963

    Unspecified vulnerability in kdebase allows local users to cause a denial of service (KDM login inaccessible, or resour…

  • Unscored —
    CVE-2007-6439

    Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (infinite or large loop) via …

    wireshark Debian
  • Unscored —
    CVE-2007-6441

    The WiMAX dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (crash…

    wireshark Debian
  • Unscored —
    CVE-2007-6450

    The RPL dissector in Wireshark (formerly Ethereal) 0.9.8 to 0.99.6 allows remote attackers to cause a denial of service…

    wireshark Debian
  • Unscored —
    CVE-2007-6451

    Unspecified vulnerability in the CIP dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attacker…

    wireshark Debian
  • Unscored —
    CVE-2007-6438

    Unspecified vulnerability in the SMB dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause…

    wireshark Debian
  • Unscored —
    CVE-2007-4709

    Directory traversal vulnerability in CFNetwork in Apple Mac OS X 10.5.1 allows remote attackers to overwrite arbitrary …

  • Unscored —
    CVE-2007-4708

    Format string vulnerability in Address Book in Apple Mac OS X 10.4.11 allows remote attackers to execute arbitrary code…

  • Unscored —
    CVE-2007-4710

    Unspecified vulnerability in ColorSync in Apple Mac OS X 10.4.11 allows remote attackers to cause a denial of service (…

  • Unscored —
    CVE-2007-6437

    Balabit syslog-ng 2.0.x before 2.0.6 and 2.1.x before 2.1.8 allows remote attackers to cause a denial of service (crash…

    syslog-ng Debian
  • Unscored —
    CVE-2007-3876 Public exploit

    Stack-based buffer overflow in SMB in Apple Mac OS X 10.4.11 allows local users to execute arbitrary code via (1) a lon…

  • Unscored —
    CVE-2007-5850

    Heap-based buffer overflow in Desktop Services in Apple Mac OS X 10.4.11 allows user-assisted attackers to execute arbi…

  • Unscored —
    CVE-2007-5856

    Quick Look Apple Mac OS X 10.5.1, when previewing an HTML file, does not prevent plug-ins from making network requests,…

  • Unscored —
    CVE-2007-5851

    iChat in Apple Mac OS X 10.4.11 allows network-adjacent remote attackers to automatically initiate a video connection t…

  • Unscored —
    CVE-2007-5848

    Buffer overflow in CUPS in Apple Mac OS X 10.4.11 allows local admin users to execute arbitrary code via a crafted URI …

    cups Debian
  • Unscored —
    CVE-2007-5857

    Quick Look in Apple Mac OS X 10.5.1 does not prevent a movie from accessing URLs when the movie file is previewed or if…

  • Unscored —
    CVE-2007-5861

    Unspecified vulnerability in Spotlight in Apple Mac OS X 10.4.11 allows user-assisted attackers to cause a denial of se…

  • Unscored —
    CVE-2007-5860

    Unspecified vulnerability in Spin Tracer in Apple Mac OS X 10.5.1 allows local users to execute arbitrary code via unsp…

  • Unscored —
    CVE-2007-5858

    WebKit in Safari in Apple Mac OS X 10.4.11 and 10.5.1, iPhone 1.0 through 1.1.2, and iPod touch 1.1 through 1.1.2 allow…

  • Unscored —
    CVE-2007-5853

    Unspecified vulnerability in IO Storage Family in Apple Mac OS X 10.4.11 allows user-assisted attackers to cause a deni…

  • Unscored —
    CVE-2007-5859

    Unspecified vulnerability in Safari RSS in Apple Mac OS X 10.4.11 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2007-5863 Public exploit EPSS 23%

    Software Update in Apple Mac OS X 10.5.1 allows remote attackers to execute arbitrary commands via a man-in-the-middle …

  • Unscored —
    CVE-2007-5847

    Race condition in the CFURLWriteDataAndPropertiesToResource API in Core Foundation in Apple Mac OS X 10.4.11 creates fi…

  • Unscored —
    CVE-2007-5854

    Launch Services in Apple Mac OS X 10.4.11 and 10.5.1 does not treat HTML files as unsafe content, which allows attacker…

  • Unscored —
    CVE-2007-5855

    Mail in Apple Mac OS X 10.4.11 and 10.5.1, when an SMTP account has been set up using Account Assistant, can use plaint…