Skip to content
OpenAdvisories

Archive

4 January 2007

Vulnerabilities first published on this day (UTC), newest first.

← December 2006 2007 / January /4 February 2007 →
  1. 111
  2. 2 
  3. 330
  4. 431
  5. 552
  6. 6 
  7. 7 
  8. 821
  9. 982
  10. 1014
  11. 1144
  12. 123
  13. 1320
  14. 14 
  15. 15 
  16. 1632
  17. 1741
  18. 1838
  19. 1957
  20. 201
  21. 21 
  22. 226
  23. 2344
  24. 2413
  25. 2528
  26. 2633
  27. 271
  28. 28 
  29. 2936
  30. 3050
  31. 3137
All Critical High Medium Low Exploited only Public exploit

31 results · Feed

  • Unscored —
    CVE-2006-6866 Public exploit

    STphp EasyNews PRO 4.0 stores sensitive information under the web root with insufficient access control, which allows r…

  • Unscored —
    CVE-2006-6862

    Multiple cross-site scripting (XSS) vulnerabilities in Outfront Spooky Login 2.7 allow remote attackers to inject arbit…

  • Critical 9.8
    CVE-2006-6863 Public exploit EPSS 13%

    PHP remote file inclusion vulnerability in the Enigma2 plugin (Enigma2.php) in Enigma WordPress Bridge allows remote at…

  • Unscored —
    CVE-2006-6869 Public exploit

    Directory traversal vulnerability in includes/search/search_mdforum.php in MAXdev MDForum 2.0.1 and earlier, when magic…

  • Unscored —
    CVE-2006-6860

    Buffer overflow in the sendToMythTV function in MythControlServer.c in MythControl 1.0 and earlier allows remote attack…

  • Unscored —
    CVE-2006-6859 Public exploit

    SQL injection vulnerability in coupon_detail.asp in Website Designs For Less Click N' Print Coupons 2005.01 and earlier…

  • Unscored —
    CVE-2006-6868

    Multiple cross-site scripting (XSS) vulnerabilities in Zen Cart Web Shopping Cart before 1.3.7 allow remote attackers t…

  • Unscored —
    CVE-2006-6864 Public exploit

    PHP remote file inclusion vulnerability in E2_header.inc.php in Enigma2 Coppermine Bridge 1.0 allows remote attackers t…

  • Unscored —
    CVE-2006-6861 Public exploit

    Multiple SQL injection vulnerabilities in Outfront Spooky Login 2.7 allow remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2006-6867 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Vladimir Menshakov buratinable templator (aka bubla) 0.9.1 allow …

  • Unscored —
    CVE-2006-6865 Public exploit

    Directory traversal vulnerability in SAFileUpSamples/util/viewsrc.asp in SoftArtisans FileUp (SAFileUp) 5.0.14 allows r…

  • Unscored —
    CVE-2007-0055 Public exploit

    Directory traversal vulnerability in formbankcgi.exe/AbfrageForm in Formbankserver 1.9 allows remote attackers to read …

  • Unscored —
    CVE-2007-0058

    Cisco Clean Access (CCA) 3.5.x through 3.5.9 and 3.6.x through 3.6.1.1 on the Clean Access Manager (CAM) allows remote …

  • Unscored —
    CVE-2007-0057

    Cisco Clean Access (CCA) 3.6.x through 3.6.4.2 and 4.0.x through 4.0.3.2 does not properly configure or allow modificat…

  • Unscored —
    CVE-2007-0052 Public exploit

    SQL injection vulnerability in haberdetay.asp in Vizayn Haber allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2007-0053 Public exploit

    SQL injection vulnerability in detail.asp in ASP SiteWare autoDealer 2.0 and earlier allows remote attackers to execute…

  • Unscored —
    CVE-2007-0056 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in AShop Deluxe 4.5 and AShop Administration Panel allow remote att…

  • Unscored —
    CVE-2007-0054 Public exploit

    Cross-site scripting (XSS) vulnerability in gbrowse.php in Belchior Foundry vCard PRO allows remote attackers to inject…

  • Unscored —
    CVE-2007-0051 Public exploit

    Format string vulnerability in Apple iPhoto 6.0.5 (316), and other versions before 6.0.6, allows remote user-assisted a…

  • Unscored —
    CVE-2006-6858

    Miredo 0.9.8 through 1.0.5 does not properly authenticate a Teredo bubble during UDP hole punching with HMAC-MD5-64 has…

    miredo Debian
  • Unscored —
    CVE-2006-5870

    Multiple integer overflows in OpenOffice.org (OOo) 2.0.4 and earlier, and possibly other versions before 2.1.0; and Sta…

  • Unscored —
    CVE-2007-0050

    PHP remote file inclusion vulnerability in index.php in OpenPinboard 2.0 allows remote attackers to execute arbitrary P…

  • Unscored —
    CVE-2007-0049 Public exploit

    Geckovich TaskTracker Pro 1.5 and earlier allows remote attackers to add administrative or other accounts via an Add ac…

  • Unscored —
    CVE-2006-6851 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in contact_us.php in ac4p Mobilelib gold 2 allow remote attackers t…

  • Unscored —
    CVE-2006-6854

    The qcamvc_video_init function in qcamvc.c in De Marchi Daniele QuickCam VC Linux device driver (aka quickcam-vc) 1.0.9…

  • Unscored —
    CVE-2006-6855 Public exploit

    AIDeX Mini-WebServer 1.1 early release 3 allows remote attackers to cause a denial of service (daemon crash) via a floo…

  • Unscored —
    CVE-2006-6857

    Cross-site scripting (XSS) vulnerability in modules/credits/credits.php in Docebo LMS allows remote attackers to inject…

  • Unscored —
    CVE-2006-6856 Public exploit

    Direct static code injection vulnerability in WebText CMS 0.4.5.2 and earlier allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2006-6852

    Eval injection vulnerability in tDiary 2.0.3 and 2.1.4.200 61127 allows remote authenticated users to execute arbitrary…

    tdiary Debian
  • Unscored —
    CVE-2006-6853 Public exploit

    Buffer overflow in Durian Web Application Server 3.02 freeware on Windows allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2006-5749

    The isdn_ppp_ccp_reset_alloc_state function in drivers/isdn/isdn_ppp.c in the Linux 2.4 kernel before 2.4.34-rc4 does n…