CVEs published in December 2007

434 vulnerabilities, 71 critical, 0 exploited.

• coolplayer Multiple stack-based buffer overflows in the CPLI_ReadTag_OGG function in CPI_PlaylistItem.c in... CVE-2007-6609 Public exploit 5.0 MediumDecember 31, 2007
• openbiblio Multiple cross-site scripting (XSS) vulnerabilities in OpenBiblio 0.5.2-pre4 and earlier allow... CVE-2007-6608 Public exploit 4.3 MediumDecember 31, 2007
• openbiblio OpenBiblio 0.5.2-pre4 and earlier allows remote attackers to obtain sensitive information via a... CVE-2007-6607 5.0 MediumDecember 31, 2007
• openbiblio OpenBiblio 0.5.2-pre4 and earlier allows remote attackers to obtain configuration information via... CVE-2007-6606 5.0 MediumDecember 31, 2007
• skyfex client Buffer overflow in a certain ActiveX control in SkyFexClient.ocx 1.0.2.77 in SkyFex Client 1.0... CVE-2007-6605 Public exploit 5.8 MediumDecember 31, 2007
• xcms Multiple directory traversal vulnerabilities in index.php in XCMS 1.82 and earlier allow remote... CVE-2007-6604 Public exploit 5.0 MediumDecember 31, 2007
• hotscripts hot or not clone Hot or Not Clone has insufficient access control for producing and reading database backups,... CVE-2007-6603 Public exploit 5.0 MediumDecember 31, 2007
• noserub SQL injection vulnerability in app/models/identity.php in NoseRub 0.5.2 and earlier allows remote... CVE-2007-6602 Public exploit 7.5 HighDecember 31, 2007
• iportalx Multiple cross-site scripting (XSS) vulnerabilities in IPortalX before Build 033 allow remote... CVE-2007-6597 Public exploit 4.3 MediumDecember 31, 2007
• clam anti-virus clamav ClamAV 0.92 does not recognize Base64 UUEncoded archives, which allows remote attackers to bypass... CVE-2007-6596 Fix available 5.0 MediumDecember 31, 2007
• clam anti-virus clamav ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on (1) temporary... CVE-2007-6595 Fix available 2.1 LowDecember 31, 2007
• ibm lotus notes IBM Lotus Notes 8 for Linux before 8.0.1 uses (1) unspecified weak permissions for the... CVE-2007-6594 6.9 MediumDecember 28, 2007
• ibm lotus notes Multiple stack-based buffer overflows in l123sr.dll in Autonomy (formerly Verity) KeyView SDK, as... CVE-2007-6593 Public exploit 8.8 HighDecember 28, 2007
• apple safari Apple Safari 2, when a user accepts an SSL server certificate on the basis of the CN domain name... CVE-2007-6592 4.3 MediumDecember 28, 2007
• kde konqueror KDE Konqueror 3.5.5 and 3.95.00, when a user accepts an SSL server certificate on the basis of... CVE-2007-6591 4.3 MediumDecember 28, 2007
• mozilla firefox, seamonkey +1 more The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 does not... CVE-2007-6589 4.3 MediumDecember 28, 2007
• phpcredo phcdownload Cross-site scripting (XSS) vulnerability in PHCDownload 1.10 allows remote attackers to inject... CVE-2007-6588 4.3 MediumDecember 28, 2007
• plogger SQL injection vulnerability in plog-rss.php in Plogger 1.0 Beta 3.0 allows remote attackers to... CVE-2007-6587 Public exploit 7.5 HighDecember 28, 2007
• niclor SQL injection vulnerability in sezione_news.php in nicLOR-CMS allows remote attackers to execute... CVE-2007-6586 Public exploit 7.5 HighDecember 28, 2007
• nmnnewsletter PHP remote file inclusion vulnerability in confirmUnsubscription.php in NmnNewsletter 1.0.7... CVE-2007-6585 Public exploit 6.8 MediumDecember 28, 2007
• 1024 cms cms Multiple directory traversal vulnerabilities in 1024 CMS 1.3.1 allow remote attackers to include... CVE-2007-6584 Public exploit 6.4 MediumDecember 28, 2007
• 1024 cms cms SQL injection vulnerability in admin/ops/findip/ajax/search.php in 1024 CMS 1.3.1 allows remote... CVE-2007-6583 Public exploit 7.5 HighDecember 28, 2007
• c97net mblog Directory traversal vulnerability in index.php in mBlog 1.2 allows remote attackers to read... CVE-2007-6582 Public exploit 6.4 MediumDecember 28, 2007
• social engine engine Multiple directory traversal vulnerabilities in Social Engine 2.0 allow remote attackers to... CVE-2007-6581 Public exploit 6.4 MediumDecember 28, 2007
• wallpaper complete website Multiple SQL injection vulnerabilities in Wallpaper Site 1.0.09 allow remote attackers to execute... CVE-2007-6580 Public exploit 7.5 HighDecember 28, 2007
• ip reg reg Multiple SQL injection vulnerabilities in Ip Reg 0.3 allow remote attackers to execute arbitrary... CVE-2007-6579 Public exploit 7.5 HighDecember 28, 2007
• zeak.net php zlink SQL injection vulnerability in go.php in PHP ZLink 0.3 allows remote attackers to execute... CVE-2007-6578 Public exploit 7.5 HighDecember 28, 2007
• zsuite zblog Multiple SQL injection vulnerabilities in index.php in zBlog 1.2 allow remote attackers to... CVE-2007-6577 Public exploit 7.5 HighDecember 28, 2007
• adultscript Multiple SQL injection vulnerabilities in Adult Script 1.6.5 and earlier allow remote attackers... CVE-2007-6576 Public exploit 7.5 HighDecember 28, 2007
• brand039 mmslamp SQL injection vulnerability in default.php in MMSLamp allows remote attackers to execute... CVE-2007-6575 Public exploit 7.5 HighDecember 28, 2007
• dokeos open source learning and knowledge management, open source learning and knowledge management tool +1 more Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.4 and earlier allow remote... CVE-2007-6574 Public exploit 4.3 MediumDecember 28, 2007
• qksoft qk smtp server 3 QK SMTP Server 3 allows remote attackers to cause a denial of service (daemon crash) via a long ... CVE-2007-6573 7.8 HighDecember 28, 2007
• sun java system web server, java system web proxy server +1 more Cross-site scripting (XSS) vulnerability in Sun Java System Web Server 6.1 before SP8 and 7.0... CVE-2007-6572 4.3 MediumDecember 28, 2007
• sun java system web proxy server, java system web server +1 more Cross-site scripting (XSS) vulnerability in Sun Java System Web Proxy Server 3.6 before SP11 on... CVE-2007-6571 4.3 MediumDecember 28, 2007
• sun java system web proxy server, java system web server +1 more Cross-site scripting (XSS) vulnerability in the View URL Database functionality in Sun Java... CVE-2007-6570 4.3 MediumDecember 28, 2007
• sun java system web proxy server, java system web server +1 more Cross-site scripting (XSS) vulnerability in the View Error Log functionality in Sun Java System... CVE-2007-6569 4.3 MediumDecember 28, 2007
• xzero scripts community classifieds PHP remote file inclusion vulnerability in config.inc.php in XZero Community Classifieds 4.95.11... CVE-2007-6568 Public exploit 7.5 HighDecember 28, 2007
• xzero scripts community classifieds Directory traversal vulnerability in index.php in XZero Community Classifieds 4.95.11 and earlier... CVE-2007-6567 Public exploit 6.4 MediumDecember 28, 2007
• xzero scripts community classifieds SQL injection vulnerability in post.php in XZero Community Classifieds 4.95.11 and earlier allows... CVE-2007-6566 Public exploit 7.5 HighDecember 28, 2007
• blakord portal Multiple SQL injection vulnerabilities in Blakord Portal 1.3.A Beta and earlier allow remote... CVE-2007-6565 Public exploit 7.5 HighDecember 28, 2007
• limbo cms cms Cross-site scripting (XSS) vulnerability in admin.php in Limbo CMS 1.0.4.2 allows remote... CVE-2007-6564 Public exploit 4.3 MediumDecember 28, 2007
• winace Heap-based buffer overflow in WinAce 2.65 and earlier, and possibly other versions before 2.69,... CVE-2007-6563 10.0 HighDecember 28, 2007
• tcpreen Multiple stack-based buffer overflows in the use of FD_SET in TCPreen before 1.4.4 allow remote... CVE-2007-6562 Fix available 5.0 MediumDecember 28, 2007
• pdflib Multiple stack-based buffer overflows in PDFLib allow user-assisted remote attackers to execute... CVE-2007-6561 Public exploit 5.7 MediumDecember 28, 2007
• logaholic Multiple cross-site scripting (XSS) vulnerabilities in Logaholic before 2.0 RC8 allow remote... CVE-2007-6560 Public exploit 4.3 MediumDecember 28, 2007
• logaholic Multiple SQL injection vulnerabilities in Logaholic before 2.0 RC8 allow remote attackers to... CVE-2007-6559 Public exploit 7.5 HighDecember 28, 2007
• totalplayer TotalPlayer 3.0 allows user-assisted remote attackers to cause a denial of service (application... CVE-2007-6558 Public exploit 4.3 MediumDecember 28, 2007
• megacheatz Multiple SQL injection vulnerabilities in MeGaCheatZ 1.1 allow remote attackers to execute... CVE-2007-6557 Public exploit 7.5 HighDecember 28, 2007
• websihirbazi Multiple SQL injection vulnerabilities in websihirbazi 5.1.1 allow remote attackers to execute... CVE-2007-6556 Public exploit 7.5 HighDecember 28, 2007
• phil taylor mosdirectory PHP remote file inclusion vulnerability in modules/mod_pxt_latest.php in the mosDirectory ... CVE-2007-6555 Public exploit 9.3 HighDecember 28, 2007
• Show olderLoading…