CVEs published in September 2007
435 vulnerabilities, 53 critical, 1 exploited.
- focus-sis focus sisPHP remote file inclusion vulnerability in modules/Discipline/StudentFieldBreakdown.php in Focus...7.5 High
- kde kmplayerKMPlayer 2.9.3.1210 and earlier allows remote attackers to cause a denial of service (CPU...7.1 High
- guliverkli media player classic, mympc cd-storm, verycd stormplayer +2 moreMultiple integer overflows in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone...9.3 High
- guliverkli media player classic, mympc cd-storm, verycd stormplayer +2 moreHeap-based buffer overflow in mplayerc.exe in Media Player Classic (MPC) 6.4.9.0 and earlier, as...9.3 High
- mplayer, sgi irix +1 moreHeap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote...7.6 High
- comscripts cs guestbookCS Guestbook stores sensitive information under the web root with insufficient access control,...5.0 Medium
- office efficiencies safesquidUnspecified vulnerability in Office Efficiencies SafeSquid 4.1.x has unknown impact and attack...7.5 High
- trolltech qtOff-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context...7.5 High
- redhat enterprise linux** DISPUTED ** The ipv6_getsockopt_sticky function in the kernel in Red Hat Enterprise Linux ...1.9 Low
- linux kernelRace condition in the tee (sys_tee) system call in the Linux kernel 2.6.17 through 2.6.17.6 might...6.9 Medium
- redhat enterprise linuxThe NFS client implementation in the kernel in Red Hat Enterprise Linux (RHEL) 3, when a...1.9 Low
- phpfflMultiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to...6.8 Medium
- phpfflMultiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to...4.6 Medium
- shop-scriptDirect static code injection vulnerability in includes/admin/sub/conf_appearence.php in Shop...7.5 High
- shop-scriptadmin.php in Shop-Script FREE 2.0 and earlier sends a redirect to the web browser but does not...7.5 High
- hp system management homepageHP System Management Homepage (SMH) for Windows, when used in conjunction with HP Version Control...2.1 Low
- axis 207w network cameraMultiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 207W camera allow remote...4.3 Medium
- axis 207w network cameraMultiple cross-site scripting (XSS) vulnerabilities in the AXIS 207W camera allow remote...4.3 Medium
- axis 207w network cameraThe AXIS 207W camera stores a WEP or WPA key in cleartext in the configuration file, which might...4.9 Medium
- axis 207w network cameraaxis-cgi/buffer/command.cgi on the AXIS 207W camera allows remote authenticated users to cause a...3.5 Low
- axis 207w cameraThe AXIS 207W camera uses a base64-encoded cleartext username and password for authentication,...9.3 High
- ewire payment clientThe ewirePC_Decrypt function in ewirepcfunctions.php in eWire Payment Client (ePC) 1.60 and 1.70...7.5 High
- joomla radioPHP remote file inclusion vulnerability in admin.joomlaradiov5.php in the Joomla Radio 5 ...6.8 Medium
- jeuxflash module, kwsphp +1 moreSQL injection vulnerability in play.php in the jeuxflash 1.0 module for KwsPHP allows remote...6.5 Medium
- ajax file browserPHP remote file inclusion vulnerability in _includes/settings.inc.php in Ajax File Browser 3 Beta...7.5 High
- php webquest webquestSQL injection vulnerability in soporte_derecha_w.php in PHP Webquest 2.5 and earlier allows...7.5 High
- jblogMultiple SQL injection vulnerabilities in JBlog 1.0 allow (1) remote attackers to execute...7.5 High
- gelatocmsSQL injection vulnerability in classes/gelato.class.php in Gelato allows remote attackers to...7.5 High
- php-statsCross-site scripting (XSS) vulnerability in tracking.php in PHP-Stats 0.1.9.2 allows remote...4.3 Medium
- hp all-in-on printer, photo and imaging gallery +1 moreHeap-based buffer overflow in the FileFind::FindFile method in (1) MFC42.dll, (2) MFC42u.dll, (3)...10.0 High
- boa webserverThe Intersil isl3893 extensions for Boa 0.93.15, as used on the FreeLan RO80211G-AP and other...10.0 High
- invision power services power boardUnspecified vulnerability in the subscriptions manager in Invision Power Board (IPB or IP.Board)...6.0 Medium
- invision power services power boardips_kernel/class_upload.php in Invision Power Board (IPB or IP.Board) 2.3.1 up to 20070912 allows...7.5 High
- invision power services power boardCross-site scripting (XSS) vulnerability in ips_kernel/class_ajax.php in Invision Power Board ...4.3 Medium
- cowon america jetcast serverJSMP3OGGWt.dll in JetCast Server 2.0.0.4308 allows remote attackers to cause a denial of service ...5.0 Medium
- netinvoicingUnspecified vulnerability in netInvoicing before 2.7.3 has unknown impact and attack vectors,...10.0 High
- winscpInterpretation conflict in WinSCP before 4.0.4 allows remote attackers to perform arbitrary file...9.3 High
- linux kernelThe Linux kernel 2.6.20 and 2.6.21 does not properly handle an invalid LDT segment selector in ...4.9 Medium
- netbsdThe display driver allocattr functions in NetBSD 3.0 through 4.0_BETA2, and NetBSD-current before...2.1 Low
- redhat enterprise linux, linux +1 moreUnspecified vulnerability in the kernel in Red Hat Enterprise Linux (RHEL) 4 on the x86_64...2.1 Low
- auracmsDirectory traversal vulnerability in index.php in AuraCMS 2.1 and earlier allows remote attackers...7.5 High
- qualiteam x-cartMultiple PHP remote file inclusion vulnerabilities in X-Cart allow remote attackers to execute...7.5 High
- nuclearbbPHP remote file inclusion vulnerability in tasks/send_queued_emails.php in NuclearBB Alpha 2,...6.8 Medium
- auracmsUnrestricted file upload vulnerability in mod/contak.php in AuraCMS 2.1 allows remote attackers...7.5 High
- realnetworks helix player, realplayer +1 moreRealNetworks RealPlayer 10.1.0.3114 and earlier, and Helix Player 1.0.6.778 on Fedora Core 6 (FC6...4.3 Medium
- ultra shareware crypto componentMultiple buffer overflows in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the...7.5 High
- ultra shareware crypto componentAbsolute path traversal vulnerability in a certain ActiveX control in CryptoX.dll 2.0 and earlier...6.4 Medium
- apache openoffice, sun staroffice, starsuite +2 more +4 moreInteger overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7,...9.3 High
- aol aim lite, aim pro, instant messenger +2 moreThe embedded Internet Explorer server control in AOL Instant Messenger (AIM) 6.1.41.2 and 6.2.32...5.8 Medium
- rsa envisionCross-site scripting (XSS) vulnerability in the logon page in RSA EnVision 3.3.6 Build 0115...4.3 Medium
- Show moreLoading…