CVEs published in October 2007
543 vulnerabilities, 88 critical, 0 exploited.
- deonixscripts web template management systemSQL injection vulnerability in index.php in Web Template Management System 1.3 allows remote...7.5 High
- sun jdk, jre, sdk +2 moreSun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update...4.0 Medium
- zomplogUnrestricted file upload vulnerability in admin/upload_files.php in Zomplog 3.8.1 and earlier...4.6 Medium
- zomplogadmin/upload_files.php in Zomplog 3.8.1 and earlier does not check for administrative credentials...7.5 High
- feedburner feedsmithCross-site request forgery (CSRF) vulnerability in the FeedBurner FeedSmith 2.2 plugin for...6.4 Medium
- drupal project issue trackingCross-site scripting (XSS) vulnerability in the subscription functionality in the Project issue...3.5 Low
- blackboard learning and community post systemsMultiple cross-site scripting (XSS) vulnerabilities in messaging/course/composeMessage.jsp in...4.3 Medium
- dircproxyirc_server.c in dircproxy 1.2.0 and earlier allows remote attackers to cause a denial of service ...5.0 Medium
- x.org x font serverThe swap_char2b function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent...7.5 High
- x.org x font serverInteger overflow in the build_range function in X.Org X Font Server (xfs) before 1.0.5 allows...6.8 Medium
- symantec antivirus scan engine, brightmail antispam, client security +10 more +12 moreThe Decomposer component in multiple Symantec products allows remote attackers to cause a denial...9.3 High
- symantec antivirus scan engine, brightmail antispam, client security +10 more +12 moreHeap-based buffer overflow in the Decomposer component in multiple Symantec products allows...9.3 High
- sun sunosInteger signedness error in FIFO filesystems (named pipes) on Sun Solaris 8 through 10 allows...4.9 Medium
- jimmac original photo galleryinc/exif.inc.php in Original Photo Gallery 0.11.2 and earlier allows remote attackers to execute...6.8 Medium
- alstrasoft affiliate network proMultiple unspecified vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers...6.8 Medium
- maxdev mdproSQL injection vulnerability in index.php in MAXdev MDPro (MD-Pro) 1.0.76 allows remote attackers...7.5 High
- poppawidPHP remote file inclusion vulnerability in mail/childwindow.inc.php in Poppawid 2.7 allows remote...6.8 Medium
- asp product catalog product catalogSQL injection vulnerability in catalog.asp in ASP Product Catalog allows remote attackers to...7.5 High
- cyberlink powerdvdDirectory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting...6.4 Medium
- don barnes drbguestbookCross-site scripting (XSS) vulnerability in index.php in Don Barnes DRBGuestbook 1.1.13 allows...4.3 Medium
- altnet download manager, grokster, kazaa media desktop +2 moreStack-based buffer overflow in the ADM4 ActiveX control in adm4.dll in Altnet Download Manager 4...6.8 Medium
- egov mangerMultiple cross-site scripting (XSS) vulnerabilities in eGov Manager allow remote attackers to...4.3 Medium
- e-arkMultiple PHP remote file inclusion vulnerabilities in eArk (e-Ark) 1.0 allow remote attackers to...6.8 Medium
- jacob hinkle godsendMultiple PHP remote file inclusion vulnerabilities in Jacob Hinkle GodSend 0.6 allow remote...6.8 Medium
- axis 2100 network cameraMultiple cross-site scripting (XSS) vulnerabilities in the AXIS 2100 Network Camera 2.02 with...4.3 Medium
- axis 2100 network camera, 2100 network camera firmware +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 2100 Network Camera 2.02...9.3 High
- axis 2100 network camera, 2100 network camera firmware +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the AXIS 2100 Network Camera 2.02 with...4.3 Medium
- arbor networks peakflow spMultiple cross-site scripting (XSS) vulnerabilities in Arbor Networks Peakflow SP 3.5.1 before...4.3 Medium
- arbor networks peakflow spArbor Networks Peakflow SP before 3.5.1 patch 14, and 3.6.x before 3.6.1 patch 5, allows remote...6.0 Medium
- centertools drivelockStack-based buffer overflow in DriveLock.exe in CenterTools DriveLock 5.0 allows remote attackers...9.3 High
- apple quicktimeArgument injection vulnerability in Apple QuickTime 7.2 for Windows XP SP2 and Vista allows...9.3 High
- debian guiltguilt 0.27 allows local users to overwrite arbitrary files via a symlink attack on a guilt.log....3.3 Low
- duplicity project duplicityFTP backend for Duplicity Discloses Passwords to Process Listing4.6 Medium
- nagios pluginsBuffer overflow in the redir function in check_http.c in Nagios Plugins before 1.4.10, when...6.8 Medium
- rpath rmakeThe Chroot server in rMake 1.0.11 creates a /dev/zero device file with read/write permissions for...6.9 Medium
- twikiThe default configuration for twiki 4.1.2 on Debian GNU/Linux, and possibly other operating...5.0 Medium
- debian linux, kernel util-linux, loop-aes-utils project loop-aes-utils +2 more +4 moremount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the...7.2 High
- gforgeCross-site scripting (XSS) vulnerability in account/verify.php in GForge 4.6b2 allows remote...4.3 Medium
- x-script guestbookMultiple SQL injection vulnerabilities in mes_add.php in x-script GuestBook 1.3a, when...7.5 High
- xoopsUnspecified vulnerability in the XOOPS uploader class in Xoops 2.0.17.1-RC1 and earlier allows...7.5 High
- php-fusion expanded calendar moduleSQL injection vulnerability in infusions/calendar_events_panel/show_single.php in the Expanded...7.5 High
- segue cms cmsPHP remote file inclusion vulnerability in index.php in Segue CMS 1.8.4 and earlier, when...6.8 Medium
- phpwcms-xtMultiple PHP remote file inclusion vulnerabilities in phpWCMS XT 0.0.7 BETA and earlier allow...6.8 Medium
- smbftpdFormat string vulnerability in the SMBDirList function in dirlist.c in SmbFTPD 0.96 allows remote...7.5 High
- megasol odysseysuiteCross-site scripting (XSS) vulnerability in Mailbox.mws in OdysseySuite, possibly 4.0.729, allows...4.3 Medium
- netkamp emlak scriptiCross-site scripting (XSS) vulnerability in mail.asp in Netkamp Emlak Scripti allows remote...4.3 Medium
- netkamp emlak scriptiSQL injection vulnerability in detay.asp in Netkamp Emlak Scripti allows remote attackers to...7.5 High
- ohesa emlak portali emlak portaliMultiple SQL injection vulnerabilities in Ohesa Emlak Portali allow remote attackers to execute...7.5 High
- y\&k iletisim formu iletisim formuMultiple cross-site scripting (XSS) vulnerabilities in iletisim.asp in Y&K Iletisim Formu allow...4.3 Medium
- mxbb mx glancecontrib/mx_glance_sdesc.php in the mx_glance 2.3.3 module for mxBB places a critical security...6.8 Medium
- Show moreLoading…