CVEs published August 17, 2007
15 CVEs were published on August 17, 2007: 0 critical, 0 high. Browse them by severity, product and exploitation status.
- Published
- 15
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 15
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 15
- CVE-2007-4395Multiple unspecified vulnerabilities in the Role Based Access Control (RBAC) functionality in Sun Solaris 8 allow remote attackers who…
- CVE-2007-4386SQL injection vulnerability in search.php in GetMyOwnArcade allows remote attackers to execute arbitrary SQL commands via the query…
- CVE-2007-4387Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5 and 5.29.51 software…
- CVE-2007-43882wire 1701HG and 2071 Gateway routers, with 5.29.51 and possibly 3.17.5 software, have a blank password by default.
- CVE-2007-4389Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, with 3.17.5, 3.7.1, and…
- CVE-2007-4390The Command Line Interface (CLI), aka Adonis Administration Console, on the BlueCat Networks Adonis DNS/DHCP appliance 5.0.2.8 allows…
- CVE-2007-4391Heap-based buffer overflow in Kakadu kdu_v32m.dll in Yahoo! Messenger 8.1.0.413 allows remote attackers to cause a denial of service…
- CVE-2007-4392Winamp 5.35 allows remote attackers to cause a denial of service (program stack overflow and application crash) via an M3U file that…
- CVE-2007-4393The installation script for orarun on SUSE Linux before 20070810 places the oracle user into the disk group, which allows the local oracle…
- CVE-2007-4394Unspecified vulnerability in a "core clean" cron job created by the findutils-locate package on SUSE Linux 10.0 and 10.1 and Enterprise…
- CVE-2007-4381Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.2_14 and…
- CVE-2007-4382CounterPath X-Lite 3.0 34025, and possibly eyeBeam, allows remote attackers to cause a denial of service (device crash) via a SIP INVITE…
- CVE-2007-4383PHP remote file inclusion vulnerability in tracking.php in Trackeur 1 allows remote attackers to execute arbitrary PHP code via a URL in…
- CVE-2007-4384Multiple PHP remote file inclusion vulnerabilities in depouilg.php3 in Stephane Pineau VOTE 1c allow remote attackers to execute arbitrary…
- CVE-2007-4385OWASP Stinger before 2.5 allows remote attackers to bypass input validation routines by using multipart encoded requests instead of…