cve.nowby Sazabi

CVEs published October 30, 2007

39 CVEs were published on October 30, 2007: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 39
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 39
Now in CISA KEV: 0
Fix available: 1

Most affected products

django: 1

Medium, low and unrated 39

CVE-2007-5731Absolute path traversal vulnerability in Apache Jakarta Slide 2.1 and earlier allows remote authenticated users to read arbitrary files…UnratedOct 30, 2007
CVE-2007-5732Directory traversal vulnerability in downloadfile.php in eLouai's Force Download of media files script, as available on 20071030 and…UnratedOct 30, 2007
CVE-2007-5733Unrestricted file upload vulnerability in upload/upload.php in Japanese PHP Gallery Hosting, when Open directory mode is enabled, allows…UnratedOct 30, 2007
CVE-2007-5734Unrestricted file upload vulnerability in eFileMan 7.1.0.87-88 allows remote attackers to upload arbitrary files, with…UnratedOct 30, 2007
CVE-2007-5735eFileMan 7.1.0.87-88 stores sensitive information under the web root with insufficient access control, which allows remote attackers to…UnratedOct 30, 2007
CVE-2007-5736Unrestricted file upload vulnerability in upload.php in SeeBlick 1.0 Beta allows remote attackers to upload arbitrary files via…UnratedOct 30, 2007
CVE-2007-5737Unrestricted file upload vulnerability in component/upload.jsp in Korean GHBoard allows remote attackers to upload arbitrary files via…UnratedOct 30, 2007
CVE-2007-5738The FlashUpload component in Korean GHBoard uses a client-side protection mechanism to prevent uploading of dangerous file extensions…UnratedOct 30, 2007
CVE-2007-5739Directory traversal vulnerability in component/flashupload/download.jsp in the FlashUpload component in Korean GHBoard allows remote…UnratedOct 30, 2007
CVE-2007-1321Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a…UnratedOct 30, 2007
CVE-2007-4277The Trend Micro AntiVirus scan engine before 8.550-1001, as used in Trend Micro PC-Cillin Internet Security 2007, and Tmxpflt.sys…UnratedOct 30, 2007
CVE-2007-5729The NE2000 emulator in QEMU 0.8.2 allows local users to execute arbitrary code by writing Ethernet frames with a size larger than the MTU…UnratedOct 30, 2007
CVE-2007-5730Heap-based buffer overflow in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to execute arbitrary code via…UnratedOct 30, 2007
CVE-2007-4861SAXON 5.4, with display_errors enabled, allows remote attackers to obtain sensitive information via (1) a direct request for news.php, (2)…UnratedOct 30, 2007
CVE-2007-4862Cross-site scripting (XSS) vulnerability in admin/menu.php in SAXON 5.4 allows remote attackers to inject arbitrary web script or HTML via…UnratedOct 30, 2007
CVE-2007-4863SQL injection vulnerability in example.php in SAXON 5.4 allows remote attackers to execute arbitrary SQL commands via the template…UnratedOct 30, 2007
CVE-2007-5716Unspecified vulnerability in the Internet Protocol (IP) functionality in Sun Solaris 10 allows local users to cause a denial of service…UnratedOct 30, 2007
CVE-2007-5717Unspecified vulnerability in Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager (ELOM) on x86 before firmware 2.70 allows remote…UnratedOct 30, 2007
CVE-2007-5718vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1)…UnratedOct 30, 2007
CVE-2007-5719SQL injection vulnerability in bb_func_search.php in miniBB 2.1 allows remote attackers to execute arbitrary SQL commands via the table…UnratedOct 30, 2007
CVE-2007-5720Unrestricted file upload vulnerability in the profiles script in ProfileCMS 1.0 allows remote attackers to upload and execute arbitrary…UnratedOct 30, 2007
CVE-2007-5721PHP remote file inclusion vulnerability in _theme/breadcrumb.php in MySpacePros MySpace Resource Script (MSRS) 1.21 allows remote…UnratedOct 30, 2007
CVE-2007-5722Stack-based buffer overflow in a certain ActiveX control in GLChat.ocx 2.5.1.32 in GlobalLink 2.7.0.8, as used in Ourgame GLWorld and…UnratedOct 30, 2007
CVE-2007-5723Heap-based buffer overflow in the samp_send function in nuauth/sasl.c in NuFW before 2.2.7 allows remote attackers to cause a denial of…UnratedOct 30, 2007
CVE-2007-5724Multiple cross-site scripting (XSS) vulnerabilities in Omnistar Live allow remote attackers to inject arbitrary web script or HTML via (1)…UnratedOct 30, 2007

Show all 39 entriesShow fewer entries