CVEs published in October 2007
543 vulnerabilities, 88 critical, 0 exploited.
- hitachi cosminexus agent, cosminexus library standard, cosminexus library web +2 moreHitachi Cosminexus Agent 03-00 through 03-05, and Cosminexus Library Standard and Web Edition 04...4.3 Medium
- hitachi ucosminexus application server enterprise, ucosminexus application server standard, ucosminexus client +5 more +7 moreThe Java Secure Socket Extension (JSSE) in the Hitachi Cosminexus Developer's Kit for Java in...5.0 Medium
- appfuseMultiple cross-site scripting (XSS) vulnerabilities in messages.jsp in AppFuse before 2.0 Final...4.3 Medium
- conexware powerarchiverHeap-based buffer overflow in ConeXware PowerArchiver before 10.20.21 might allow remote...9.3 High
- zomplogZomplog 3.8.1 and earlier stores potentially sensitive information under the web root with...4.3 Medium
- microsoft internet explorerMicrosoft Internet Explorer 6 drops DNS pins based on failed connections to irrelevant TCP ports,...4.3 Medium
- opera browserOpera 9 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier...4.3 Medium
- adobe shockwave playerThe Adobe Macromedia Flash 9 plug-in allows remote attackers to cause a victim machine to...5.0 Medium
- sun jdk, jre, sdk +2 moreSun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update...2.6 Low
- sun jdk, jre, sdk +2 moreSun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update...2.6 Low
- furkan tastan blog tastan blogSQL injection vulnerability in kategori.asp in Furkan Tastan Blog allows remote attackers to...7.5 High
- trionic cite cmsMultiple PHP remote file inclusion vulnerabilities in Trionic Cite CMS 1.2 rev9 and earlier allow...6.8 Medium
- bendiken boost module for drupalUnspecified vulnerability in the Boost module before 4.7.x-1.0, and 5.x before 5.x-1.0, for...7.5 High
- libpngCertain chunk handlers in libpng before 1.0.29 and 1.2.x before 1.2.21 allow remote attackers to...5.0 Medium
- libpng, canonical ubuntu linux +1 morepngrtran.c in libpng before 1.0.29 and 1.2.x before 1.2.21 use (1) logical instead of bitwise...4.3 Medium
- libpngOff-by-one error in ICC profile chunk handling in the png_set_iCCP function in pngset.c in libpng...4.3 Medium
- libpngOff-by-one error in ICC profile chunk handling in the png_set_iCCP function in pngset.c in libpng...4.3 Medium
- dawnoftime dawn of timeMultiple format string vulnerabilities in websrv.cpp in Dawn of Time 1.69s beta4 and earlier...7.5 High
- battlefront dropteamBattlefront Dropteam 1.3.3 and earlier sends the client's online account name and password to the...5.0 Medium
- battlefront dropteamMultiple buffer overflows in Battlefront Dropteam 1.3.3 and earlier allow remote attackers to...7.5 High
- battlefront dropteamMultiple format string vulnerabilities in Battlefront Dropteam 1.3.3 and earlier allow remote...7.5 High
- ekiga, openh323 project openh323 +1 moreThe Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323...5.0 Medium
- iscripts multicartMultiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute...6.4 Medium
- asp-cmsASP-CMS 1.0 stores sensitive information under the web root with insufficient access control,...5.0 Medium
- ilient sysaidCross-site request forgery (CSRF) vulnerability in Ilient SysAid 4.5.03 and 4.5.04 allows remote...4.3 Medium
- phpfreelogPHP remote file inclusion vulnerability in log.php in phpFreeLog alpha 0.2.0 allows remote...7.5 High
- edraw office viewer componentStack-based buffer overflow in the EDraw.OfficeViewer ActiveX control in officeviewer.ocx in...10.0 High
- mcdu fsdMultiple stack-based buffer overflows in FSD 2.052 d9 and earlier, and FSFDT FSD 3.000 d9 and...7.5 High
- google mini search applianceCross-site scripting (XSS) vulnerability in Google Mini Search Appliance 3.4.14 allows remote...4.3 Medium
- virusblokada vba32 antivirusVirusBlokAda Vba32 AntiVirus 3.12.2 uses weak permissions (Everyone:Write) for its installation...7.2 High
- mcmurtrey whitaker and associates cart32c32web.exe in McMurtrey/Whitaker Cart32 before 6.4 allows remote attackers to read arbitrary...5.0 Medium
- netsupport school student, manager client +1 moreBuffer overflow in NetSupport Manager (NSM) Client 10.00 and 10.20, and NetSupport School Student...10.0 High
- webhost automation helm web hosting control panelMultiple cross-site scripting (XSS) vulnerabilities in Helm 3.2.16 allow remote attackers to...4.3 Medium
- americasarmy america\'s army, america\'s army special forces +1 moreThe Windows dedicated server for the Unreal engine, as used by America's Army and America's Army...4.3 Medium
- americasarmy america\'s army, america\'s army special forces +1 moreMultiple buffer overflows in the logging function in the Unreal engine, as used by America's Army...4.3 Medium
- id software doom 3, quake 4, take2games prey +2 moreMultiple format string vulnerabilities in the ID Software Doom 3 engine, as used by Doom 3 1.3.1...9.3 High
- monolith productions first encounter assault reconMultiple format string vulnerabilities in the Monolith Lithtech engine, as used by First...9.3 High
- firebirdsql firebirdMultiple stack-based buffer overflows in Firebird LI 2.0.0.12748 and 2.0.1.12855, and WI 2.0.0...10.0 High
- firebirdsql firebirdMultiple stack-based buffer overflows in Firebird LI 1.5.3.4870 and 1.5.4.4910, and WI 1.5.3.4870...10.0 High
- borland software interbaseStack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and...9.3 High
- borland software interbaseMultiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI...9.3 High
- hp openvmsUnspecified vulnerability in (1) SYS$EI1000.EXE and (2) SYS$EI1000_MON.EXE in HP OpenVMS 8.3 and...4.3 Medium
- hp openvmsBuffer overflow in NET$CSMACD.EXE in HP OpenVMS 8.3 and earlier allows local users to cause a...5.0 Medium
- sun jdk, jre, sdk +2 moreVisual truncation vulnerability in the Java Runtime Environment in Sun JDK and JRE 6 Update 2 and...5.0 Medium
- sun jdk, jre, sdk +2 moreJava Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier,...4.0 Medium
- sun jdk, jre, sdk +2 moreJava Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier,...2.6 Low
- sun jdk, jre +1 moreJava Web Start in Sun JDK and JRE 6 Update 2 and earlier does not properly enforce access...7.1 High
- sun jdk, jre, sdk +2 moreJava Web Start in Sun JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier...5.4 Medium
- uebimiauCross-site scripting (XSS) vulnerability in index.php in Uebimiau 2.7.2 through 2.7.10 allows...4.3 Medium
- ossigenoPHP remote file inclusion vulnerability in upload/common/footer.php in Ossigeno CMS 2.2 alpha3...7.5 High
- Show moreLoading…