Skip to content
OpenAdvisories

Archive

5 January 2007

Vulnerabilities first published on this day (UTC), newest first.

← December 2006 2007 / January /5 February 2007 →
  1. 111
  2. 2 
  3. 330
  4. 431
  5. 552
  6. 6 
  7. 7 
  8. 821
  9. 982
  10. 1014
  11. 1144
  12. 123
  13. 1320
  14. 14 
  15. 15 
  16. 1632
  17. 1741
  18. 1838
  19. 1957
  20. 201
  21. 21 
  22. 226
  23. 2344
  24. 2413
  25. 2528
  26. 2633
  27. 271
  28. 28 
  29. 2936
  30. 3050
  31. 3137
All Critical High Medium Low Exploited only Public exploit

52 results · Feed

  • Unscored —
    CVE-2006-6876

    Buffer overflow in the fetchsms function in the SMS handling module (libsms_getsms.c) in OpenSER 1.2.0 and earlier allo…

  • Unscored —
    CVE-2006-6874

    Multiple cross-site scripting (XSS) vulnerabilities in friend.php in eNdonesia 8.4 allow remote attackers to inject arb…

  • Unscored —
    CVE-2006-6873 Public exploit

    Multiple SQL injection vulnerabilities in mod.php in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2006-6880 Public exploit

    Multiple SQL injection vulnerabilities in code/guestadd.php in PHP-Update 2.7 and earlier allow remote attackers to exe…

  • Unscored —
    CVE-2006-6872 Public exploit

    Directory traversal vulnerability in mod.php in eNdonesia 8.4 allows remote attackers to read arbitrary files via a .. …

  • Unscored —
    CVE-2006-6871 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in eNdonesia 8.4 allow remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2006-6879 Public exploit

    Unrestricted file upload vulnerability in admin/uploads.php in PHP-Update 2.7 and earlier allows remote authenticated u…

  • Unscored —
    CVE-2006-6877 Public exploit

    Directory traversal vulnerability in index.php in Matteo Lucarelli 3editor CMS 0.42 and earlier, when register_globals …

  • Unscored —
    CVE-2003-1316

    mod.php in eNdonesia 8.2 allows remote attackers to obtain sensitive information via a ' (quote) value in the lng param…

  • Unscored —
    CVE-2003-1317 Public exploit

    Cross-site scripting (XSS) vulnerability in mod.php in eNdonesia 8.2 allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2006-6870

    The consume_labels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of ser…

    avahi Debian
  • Unscored —
    CVE-2007-0059 Public exploit

    Cross-zone scripting vulnerability in Apple Quicktime 3 to 7.1.3 allows remote user-assisted attackers to execute arbit…