| Max CVSS | 10.0 | Min CVSS | 4.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2007-5689 | 10.0 |
The Java Virtual Machine (JVM) in Sun Java Runtime Environment (JRE) in SDK and JRE 1.3.x through 1.3.1_20 and 1.4.x through 1.4.2_15, and JDK and JRE 5.x through 5.0 Update 12 and 6.x through 6 Update 2, allows remote attackers to execute arbitrary
|
30-10-2018 - 16:26 | 29-10-2007 - 19:46 | |
| CVE-2007-5737 | 7.5 |
Unrestricted file upload vulnerability in component/upload.jsp in Korean GHBoard allows remote attackers to upload arbitrary files via unspecified vectors, probably involving a direct request.
|
15-10-2018 - 21:46 | 30-10-2007 - 23:46 | |
| CVE-2007-5735 | 5.0 |
eFileMan 7.1.0.87-88 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain unspecified user information via a direct request for cgi-bin/efileman/efileman_config.pm.
|
15-10-2018 - 21:46 | 30-10-2007 - 23:46 | |
| CVE-2007-5734 | 6.4 |
Unrestricted file upload vulnerability in eFileMan 7.1.0.87-88 allows remote attackers to upload arbitrary files, with "uploads/upload_file." destination filenames, via unspecified vectors to upload.cgi, accessed from upload.html.
|
15-10-2018 - 21:46 | 30-10-2007 - 23:46 | |
| CVE-2007-5739 | 5.0 |
Directory traversal vulnerability in component/flashupload/download.jsp in the FlashUpload component in Korean GHBoard allows remote attackers to read arbitrary files via a .. (dot dot) in the name parameter.
|
15-10-2018 - 21:46 | 30-10-2007 - 23:46 | |
| CVE-2007-5738 | 6.8 |
The FlashUpload component in Korean GHBoard uses a client-side protection mechanism to prevent uploading of dangerous file extensions, which allows remote attackers to bypass restrictions and upload arbitrary files via a modified copy of component/fl
|
15-10-2018 - 21:46 | 30-10-2007 - 23:46 | |
| CVE-2007-5622 | 5.0 |
Double free vulnerability in the ftpprchild function in ftppr in 3proxy 0.5 through 0.5.3i allows remote attackers to cause a denial of service (daemon crash) via multiple OPEN commands to the FTP proxy.
|
15-10-2018 - 21:45 | 29-10-2007 - 21:46 | |
| CVE-2007-1041 | 9.3 |
Multiple stack-based buffer overflows in S&H Computer Systems News Rover 12.1 Rev 1 allow remote attackers to execute arbitrary code via a .nzb file with a long (1) group or (2) subject string.
|
11-10-2017 - 01:31 | 21-02-2007 - 17:28 | |
| CVE-2001-0680 | 5.0 |
Directory traversal vulnerability in ftpd in QPC QVT/Net 4.0 and AVT/Term 5.0 allows a remote attacker to traverse directories on the web server via a "dot dot" attack in a LIST (ls) command.
|
10-10-2017 - 01:29 | 20-09-2001 - 04:00 | |
| CVE-2007-5676 | 6.8 |
PHP remote file inclusion vulnerability in modules/Forums/favorites.php in PHP-Nuke Platinum 7.6.b.5 allows remote attackers to execute arbitrary PHP code via a URL in the nuke_bb_root_path parameter.
|
29-09-2017 - 01:29 | 24-10-2007 - 23:46 | |
| CVE-2007-5699 | 6.8 |
Stack-based buffer overflow in eIQNetworks Enterprise Security Analyzer (ESA) 2.5 allows remote attackers to execute arbitrary code via certain data on TCP port 10616 that results in a long argument to the SEARCHREPORT command, a different vector tha
|
29-09-2017 - 01:29 | 29-10-2007 - 21:46 | |
| CVE-2007-5697 | 6.8 |
Multiple PHP remote file inclusion vulnerabilities in PHP Image 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the xarg parameter to (1) xarg_corner.php, (2) xarg_corner_bottom.php, and (3) xarg_corner_top.php.
|
29-09-2017 - 01:29 | 29-10-2007 - 21:46 | |
| CVE-2007-3920 | 6.2 |
GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an Alt-Tab sequence, a related issue to CVE-2007-3069.
|
29-09-2017 - 01:29 | 29-10-2007 - 21:46 | |
| CVE-2014-8023 | 4.0 |
Cisco Adaptive Security Appliance (ASA) Software 9.2(.3) and earlier, when challenge-response authentication is used, does not properly select tunnel groups, which allows remote authenticated users to bypass intended resource-access restrictions via
|
08-09-2017 - 01:29 | 17-02-2015 - 01:59 | |
| CVE-2016-6901 | 6.8 |
Format string vulnerability in Huawei AR100, AR120, AR150, AR200, AR500, AR550, AR1200, AR2200, AR2500, AR3200, and AR3600 routers with software before V200R007C00SPC900 and NetEngine 16EX routers with software before V200R007C00SPC900 allows remote
|
28-09-2016 - 13:51 | 26-09-2016 - 16:59 |