Skip to content
OpenAdvisories

Archive

9 January 2007

Vulnerabilities first published on this day (UTC), newest first.

← December 2006 2007 / January /9 February 2007 →
  1. 111
  2. 2 
  3. 330
  4. 431
  5. 552
  6. 6 
  7. 7 
  8. 821
  9. 982
  10. 1014
  11. 1144
  12. 123
  13. 1320
  14. 14 
  15. 15 
  16. 1632
  17. 1741
  18. 1838
  19. 1957
  20. 201
  21. 21 
  22. 226
  23. 2344
  24. 2413
  25. 2528
  26. 2633
  27. 271
  28. 28 
  29. 2936
  30. 3050
  31. 3137
All Critical High Medium Low Exploited only Public exploit

31 results · Clear filters · Feed

  • Unscored —
    CVE-2007-0031 Public exploit EPSS 42%

    Heap-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-a…

  • Unscored —
    CVE-2007-0024 Public exploit EPSS 44%

    Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, a…

  • Unscored —
    CVE-2004-2675 Public exploit

    ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to cause a denial of service (crash) via a SITE PA…

  • Unscored —
    CVE-2006-6911 Public exploit

    SQL injection vulnerability in search.asp in Digitizing Quote And Ordering System 1.0 allows remote authenticated users…

  • Unscored —
    CVE-2006-6912 Public exploit

    SQL injection vulnerability in phpMyFAQ 1.6.7 and earlier allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2007-0148 Public exploit

    Format string vulnerability in OmniGroup OmniWeb 5.5.1 allows remote attackers to cause a denial of service (applicatio…

  • Unscored —
    CVE-2007-0142 Public exploit

    SQL injection vulnerability in orange.asp in ShopStoreNow E-commerce Shopping Cart allows remote attackers to execute a…

  • Unscored —
    CVE-2007-0144 Public exploit

    Cross-site scripting (XSS) vulnerability in search.asp in Digitizing Quote And Ordering System 1.0 allows remote authen…

  • Unscored —
    CVE-2007-0143 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in NUNE News Script 2.0pre2 allow remote attackers to execute arbitr…

  • Unscored —
    CVE-2007-0140 Public exploit

    SQL injection vulnerability in down.asp in Kolayindir Download (Yenionline) allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2006-6910 Public exploit

    formbankcgi.exe in Fersch Formbankserver 1.9, when the PATH_INFO begins with Abfrage, allows remote attackers to cause …

  • Unscored —
    CVE-2007-0129 Public exploit

    SQL injection vulnerability in main.asp in LocazoList 2.01a beta5 and earlier allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2007-0138 Public exploit

    formbankcgi.exe in Fersch Formbankserver 1.9, when the PATH_INFO begins with (1) AbfrageForm or (2) EingabeForm, allows…

  • Unscored —
    CVE-2007-0134 Public exploit EPSS 12%

    Multiple eval injection vulnerabilities in iGeneric iG Shop 1.0 allow remote attackers to execute arbitrary code via th…

  • Unscored —
    CVE-2007-0135 Public exploit

    PHP remote file inclusion vulnerability in inc/init.inc.php in Aratix 0.2.2 beta 11 and earlier, when register_globals …

  • Unscored —
    CVE-2007-0132 Public exploit

    SQL injection vulnerability in compare_product.php in iGeneric iG Shop 1.4 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2007-0128 Public exploit

    SQL injection vulnerability in info_book.asp in Digirez 3.4 and earlier allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2007-0133 Public exploit

    Multiple SQL injection vulnerabilities in display_review.php in iGeneric iG Shop 1.4 and earlier allow remote attackers…

  • Unscored —
    CVE-2007-0130 Public exploit

    SQL injection vulnerability in user.php in iGeneric iG Calendar 1.0 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2007-0117 Public exploit

    DiskManagementTool in the DiskManagement.framework 92.29 on Mac OS X 10.4.8 does not properly validate Bill of Material…

  • Unscored —
    CVE-2007-0121 Public exploit

    Cross-site scripting (XSS) vulnerability in search.asp in RI Blog 1.3 allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2007-0120 Public exploit

    Acunetix Web Vulnerability Scanner (WVS) 4.0 Build 20060717 and earlier allows remote attackers to cause a denial of se…

  • Unscored —
    CVE-2007-0126 Public exploit EPSS 11%

    Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an inva…

  • Unscored —
    CVE-2007-0122 Public exploit

    Multiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated admini…

  • Unscored —
    CVE-2007-0119 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in EditTag 1.2 allow remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2007-0118 Public exploit

    Multiple absolute path traversal vulnerabilities in EditTag 1.2 allow remote attackers to read arbitrary files via an a…

  • Unscored —
    CVE-2007-0103 Public exploit EPSS 16%

    The Adobe PDF specification 1.3, as implemented by Adobe Acrobat before 8.0.0, allows remote attackers to have an unkno…

  • Unscored —
    CVE-2007-0110 Public exploit

    Cross-site scripting (XSS) vulnerability in nidp/idff/sso in Novell Access Manager Identity Server before 3.0.0-1013 al…

  • Unscored —
    CVE-2007-0107 Public exploit EPSS 12%

    WordPress before 2.0.6, when mbstring is enabled for PHP, decodes alternate character sets after escaping the SQL query…

    wordpress Debian
  • Unscored —
    CVE-2007-0112 Public exploit

    SQL injection vulnerability in cats.asp in createauction allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2007-0113 Public exploit

    Buffer overflow in Packeteer PacketShaper PacketWise 8.x allows remote authenticated users to cause a denial of service…