Skip to content
OpenAdvisories

Archive

11 January 2007

Vulnerabilities first published on this day (UTC), newest first.

20 results · Clear filters · Feed

  • Unscored —
    CVE-2006-6919 Public exploit

    Firefox Sage extension 1.3.8 and earlier allows remote attackers to execute arbitrary Javascript in the local context v…

  • Unscored —
    CVE-2007-0168 Public exploit EPSS 20%

    The Tape Engine service in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.…

  • Unscored —
    CVE-2007-0205 Public exploit

    Directory traversal vulnerability in admin/skins.php for @lex Guestbook 4.0.2 and earlier allows remote attackers to cr…

  • Unscored —
    CVE-2007-0169 Public exploit EPSS 71%

    Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 1…

  • Unscored —
    CVE-2006-6917 Public exploit EPSS 30%

    Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup R11.5 Server before SP2 allows remote …

  • Unscored —
    CVE-2007-0200 Public exploit

    PHP remote file inclusion vulnerability in template.php in Geoffrey Golliher Axiom Photo/News Gallery (axiompng) 0.8.6 …

  • Unscored —
    CVE-2007-0202 Public exploit

    SQL injection vulnerability in index.php in @lex Guestbook 4.0.2 and earlier, when magic_quotes_gpc is disabled, allows…

  • Unscored —
    CVE-2007-0197 Public exploit

    Finder 10.4.6 on Apple Mac OS X 10.4.8 allows user-assisted remote attackers to cause a denial of service and possibly …

  • Unscored —
    CVE-2007-0196 Public exploit

    SQL injection vulnerability in admin_check_user.asp in Motionborg Web Real Estate 2.1 and earlier allows remote attacke…

  • Unscored —
    CVE-2007-0181 Public exploit

    PHP remote file inclusion vulnerability in include/common_function.php in magic photo storage website allows remote att…

  • Unscored —
    CVE-2007-0190 Public exploit

    PHP remote file inclusion vulnerability in edit_address.php in edit-x ecommerce allows remote attackers to execute arbi…

  • Unscored —
    CVE-2007-0182 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arb…

  • Unscored —
    CVE-2007-0183 Public exploit

    Cross-site scripting (XSS) vulnerability in /search in iPlanet Web Server 4.x allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2007-0177 Public exploit

    Cross-site scripting (XSS) vulnerability in the AJAX module in MediaWiki before 1.6.9, 1.7 before 1.7.2, 1.8 before 1.8…

  • Unscored —
    CVE-2007-0173 Public exploit

    Directory traversal vulnerability in index.php in L2J Statistik Script 0.09 and earlier, when register_globals is enabl…

  • Unscored —
    CVE-2007-0170 Public exploit

    PHP remote file inclusion vulnerability in index.php in AllMyVisitors 0.4.0 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2007-0179 Public exploit

    SQL injection vulnerability in comment.php in PHPKIT 1.6.1 R2 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2007-0178 Public exploit

    PHP remote file inclusion vulnerability in info.php in Easy Banner Pro 2.8 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2007-0172 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.3.0 and earlier allow remote attackers to execute a…

  • Unscored —
    CVE-2007-0171 Public exploit

    PHP remote file inclusion vulnerability in index.php in AllMyLinks 0.5.0 and earlier allows remote attackers to execute…