CVEs published in September 2007
435 vulnerabilities, 53 critical, 1 exploited.
- joomlaCross-site scripting (XSS) vulnerability in Joomla! 1.5 before RC2 (aka Endeleo) allows remote...4.3 Medium
- joomlaMultiple SQL injection vulnerabilities in the content component (com_content) in Joomla! 1.5...7.5 High
- joomlaSQL injection vulnerability in Joomla! 1.5 before RC2 (aka Endeleo) allows remote attackers to...7.5 High
- microsoft visual basicBuffer overflow in Microsoft Visual Basic 6.0 and Enterprise Edition 6.0 SP6 allows user-assisted...9.3 High
- sophos anti-virusCross-site scripting (XSS) vulnerability in Sophos Anti-Virus for Windows 6.x before 6.5.8 and 7...4.3 Medium
- er mapper image web server ecw jpeg 2000 plug-inMultiple stack-based buffer overflows in the Earth Resource Mapping NCSView ActiveX control...9.3 High
- debian debian-goodiescheckrestart in debian-goodies before 0.34 allows local users to gain privileges via shell...7.2 High
- x.org xorg-serverBuffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X...4.3 Medium
- pawfalikiDirectory traversal vulnerability in pawfaliki.php in Pawfaliki 0.5.1 allows remote attackers to...5.0 Medium
- tim jackson phpofPHP remote file inclusion vulnerability in dbmodules/DB_adodb.class.php in PHP Object Framework ...7.5 High
- e-smart cart cartMultiple SQL injection vulnerabilities in embadmin/login.asp in E-SMARTCART 1.0 allow remote...7.5 High
- matteo barbo91Unrestricted file upload vulnerability in upload.php in Barbo91 1.1 allows remote attackers to...7.5 High
- hitachi ucosminexus application server enterprise, ucosminexus application server standard, ucosminexus developer standard +1 more +3 moreThe javadoc tool in Cosminexus Developer's Kit for Java in Cosminexus 7 and 7.5 can generate HTML...4.3 Medium
- hitachi ucosminexus application server enterprise, ucosminexus application server standard, ucosminexus service platform +2 moreMultiple unspecified vulnerabilities in the image-processing APIs in Cosminexus Developer's Kit...5.0 Medium
- hitachi ucosminexus application server enterprise, ucosminexus application server standard, ucosminexus service platform +2 moreMultiple buffer overflows in the image-processing APIs in Cosminexus Developer's Kit for Java in...10.0 High
- phpmytourneyPHP remote file inclusion vulnerability in menu.php in phpMytourney allows remote attackers to...7.5 High
- ghisler total commanderDirectory traversal vulnerability in the FTP client in Total Commander before 7.02 allows remote...6.8 Medium
- cor entertainment alien arena 2007Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service (client...5.0 Medium
- cor entertainment alien arena 2007Format string vulnerability in the safe_bprintf function in acesrc/acebot_cmds.c in Alien Arena...7.5 High
- thomson st 2030 sip phoneThe Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of...5.0 Medium
- ppstreamBuffer overflow in the PowerPlayer.dll ActiveX control in PPStream 2.0.1.3829 allows remote...6.8 Medium
- cisco video surveillance ip gateway encoder decoder, video surveillance sp isp, video surveillance sp isp decoder software +2 moreThe telnet service in Cisco Video Surveillance IP Gateway Encoder/Decoder (Standalone and Module)...10.0 High
- cisco video surveillance ip gateway encoder decoder, video surveillance sp isp, video surveillance sp isp decoder software +2 moreThe Cisco Video Surveillance IP Gateway Encoder/Decoder (Standalone and Module) firmware 1.8.1...9.0 High
- joomla akobook, mambo site server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the AkoBook 3.42 and earlier component ...4.3 Medium
- anyinventoryPHP remote file inclusion vulnerability in environment.php in AnyInventory 1.9.1 and 2.0, when...6.8 Medium
- broderbund expressit 3dgreetings playerMultiple buffer overflows in the Broderbund Expressit 3DGreetings Player ActiveX control could...9.3 High
- apple itunesHeap-based buffer overflow in Apple iTunes before 7.4 allows remote attackers to cause a denial...9.3 High
- clarolineClaroline before 1.8.6 allows remote authenticated administrators to obtain sensitive information...4.3 Medium
- clarolineCross-site scripting (XSS) vulnerability in admin/adminusers.php in Claroline before 1.8.6 allows...3.5 Low
- telecom italy alice messengerThe HPRevolutionRegistryManager ActiveX control in Hp.Revolution.RegistryManager.dll 1 in Telecom...9.3 High
- debian repreproreprepro 1.3.0 through 2.2.3 does not properly verify signatures when updating repositories,...5.0 Medium
- speedtech stphplibraryMultiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0...7.5 High
- speedtech stphplibraryMultiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0...7.5 High
- cartkeeper ckgold shopping cartSQL injection vulnerability in category.php in CartKeeper CKGold Shopping Cart 2.0 allows remote...7.5 High
- next generation software virtual dj \(vdj\)Buffer overflow in Next Generation Software Virtual DJ (VDJ) 5.0 allows user-assisted remote...9.3 High
- ots labs otsturntablesBuffer overflow in Ots Labs OTSTurntables 1.00 allows user-assisted remote attackers to execute...4.3 Medium
- aztech dsl 600eu routerThe Aztech DSL600EU router, when WAN access to the web interface is disabled, does not properly...9.3 High
- sun solarisUnspecified vulnerability in the strfreectty function in the Special File System (SPECFS) in Sun...4.9 Medium
- mit kerberos 5The original patch for CVE-2007-3999 in svc_auth_gss.c in the RPCSEC_GSS RPC library in MIT...10.0 High
- gforgeSQL injection vulnerability in Gforge before 3.1 allows remote attackers to execute arbitrary SQL...7.5 High
- weboddityDirectory traversal vulnerability in Web Oddity 0.09b allows remote attackers to read arbitrary...5.0 Medium
- 7-zipStack consumption vulnerability in AkkyWareHOUSE 7-zip32.dll before 4.42.00.04, as derived from...6.8 Medium
- apache tomcatApache Tomcat Example Application CSRF and XSS Vulnerabilities4.3 Medium
- ragnarok online control panel project online control panelDirectory traversal vulnerability in Ragnarok Online Control Panel 4.3.4a, when the Apache HTTP...7.5 High
- move networks inc media playerMultiple stack-based buffer overflows in the Quantum Streaming Internet Explorer Player ActiveX...6.8 Medium
- hitachi jp1 cm2 network node managerUnspecified vulnerability in the Shared Trace Service in Hitachi JP1/Cm2/Network Node Manager ...6.8 Medium
- 212cafe 212cafeboardSQL injection vulnerability in read.php in 212cafeBoard 6.30 Beta allows remote attackers to...7.5 High
- clarolineDirectory traversal vulnerability in inc/lib/language.lib.php in Claroline before 1.8.6 allows...5.1 Medium
- clarolineMultiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.8.6 allow remote...3.5 Low
- phd help deskMultiple SQL injection vulnerabilities in PHD Help Desk before 1.31 allow remote attackers to...7.5 High
- Show moreLoading…