Skip to content
OpenAdvisories

Archive

3 January 2007

Vulnerabilities first published on this day (UTC), newest first.

← December 2006 2007 / January /3 February 2007 →
  1. 111
  2. 2 
  3. 330
  4. 431
  5. 552
  6. 6 
  7. 7 
  8. 821
  9. 982
  10. 1014
  11. 1144
  12. 123
  13. 1320
  14. 14 
  15. 15 
  16. 1632
  17. 1741
  18. 1838
  19. 1957
  20. 201
  21. 21 
  22. 226
  23. 2344
  24. 2413
  25. 2528
  26. 2633
  27. 271
  28. 28 
  29. 2936
  30. 3050
  31. 3137
All Critical High Medium Low Exploited only Public exploit

30 results · Feed

  • Unscored —
    CVE-2006-4577

    Multiple cross-site scripting (XSS) vulnerabilities in The Address Book 1.04e allow remote attackers to inject arbitrar…

  • Unscored —
    CVE-2006-4581

    Unrestricted file upload vulnerability in The Address Book 1.04e validates the Content-Type header but not the file ext…

  • Unscored —
    CVE-2006-4578

    export.php in The Address Book 1.04e writes username and password hash information into a publicly accessible file when…

  • Unscored —
    CVE-2006-4579

    Directory traversal vulnerability in users.php in The Address Book 1.04e allows remote attackers to include arbitrary f…

  • Unscored —
    CVE-2006-4576

    Cross-site scripting (XSS) vulnerability in The Address Book 1.04e allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2006-4575

    Multiple SQL injection vulnerabilities in The Address Book 1.04e allow remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2006-4580

    register.php in The Address Book 1.04e allows remote attackers to bypass the "Allow User Self-Registration" setting and…

  • Unscored —
    CVE-2006-4582

    Cross-site request forgery (CSRF) vulnerability in The Address Book 1.04e allows remote attackers to perform unauthoriz…

  • Unscored —
    CVE-2006-6488 Public exploit

    Stack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control (DlgWrapper.dll) befor…

  • Unscored —
    CVE-2007-0044 Public exploit EPSS 57%

    Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attac…

  • Unscored —
    CVE-2007-0047

    CRLF injection vulnerability in Adobe Acrobat Reader Plugin before 8.0.0, when used with the Microsoft.XMLHTTP ActiveX …

  • Unscored —
    CVE-2007-0048 EPSS 34%

    Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x b…

  • Unscored —
    CVE-2007-0045 EPSS 47%

    Multiple cross-site scripting (XSS) vulnerabilities in Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugi…

  • Unscored —
    CVE-2007-0046 Public exploit EPSS 57%

    Double free vulnerability in the Adobe Acrobat Reader Plugin before 8.0.0, as used in Mozilla Firefox 1.5.0.7, allows r…

  • Unscored —
    CVE-2006-6839

    Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to "criteria for …

  • Unscored —
    CVE-2006-6850 Public exploit

    PHP remote file inclusion vulnerability in include.php in the Roster Module (character_roster) in Shadowed Portal 5.7 a…

  • Unscored —
    CVE-2006-6846 Public exploit

    Multiple SQL injection vulnerabilities in While You Were Out (WYWO) InOut Board 1.0 allow remote attackers to execute a…

  • Unscored —
    CVE-2006-6843

    PHP remote file inclusion vulnerability in the BE IT EasyPartner 0.0.9 beta component for Joomla! allows remote attacke…

  • Unscored —
    CVE-2006-6838 Public exploit

    Rediff Bol Downloader ActiveX (OCX) control allows remote attackers to execute arbitrary files, and obtain sensitive in…

  • Unscored —
    CVE-2006-6847 Public exploit

    An ActiveX control in ierpplug.dll for RealNetworks RealPlayer 10.5 allows remote attackers to cause a denial of servic…

  • Unscored —
    CVE-2006-6848 Public exploit

    SQL injection vulnerability in admin.asp in ASPTicker 1.0 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2006-6844

    Cross-site scripting (XSS) vulnerability in the optional user comment module in CMS Made Simple 1.0.2 allows remote att…

  • Unscored —
    CVE-2006-6842 Public exploit

    SQL injection vulnerability in admin/admin_acronyms.php in the Acronym Mod 0.9.5 for phpBB2 Plus 1.53 allows remote att…

  • Unscored —
    CVE-2006-6841

    Certain forms in phpBB before 2.0.22 lack session checks, which has unknown impact and remote attack vectors.

  • Unscored —
    CVE-2006-6840

    Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to a "negative st…

  • Unscored —
    CVE-2006-6845 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in CMS Made Simple 1.0.2 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2006-6849 Public exploit

    administration/index.php in Cahier de texte (CDT) 2.2 does not properly exit when authentication fails, which allows re…

  • Unscored —
    CVE-2006-6837

    Multiple stack-based buffer overflows in the (1) LoadTree, (2) ReadHeader, and (3) LoadXBOXTree functions in the ISO (i…

  • Unscored —
    CVE-2007-0017 Public exploit EPSS 12%

    Multiple format string vulnerabilities in (1) the cdio_log_handler function in modules/access/cdda/access.c in the CDDA…

    vlc Debian
  • Unscored —
    CVE-2007-0016 Public exploit

    Stack-based buffer overflow in MoviePlay 4.76 allows remote attackers to execute arbitrary code via a long filename in …