Skip to content
OpenAdvisories

Archive

16 January 2007

Vulnerabilities first published on this day (UTC), newest first.

← December 2006 2007 / January /16 February 2007 →
  1. 111
  2. 2 
  3. 330
  4. 431
  5. 552
  6. 6 
  7. 7 
  8. 821
  9. 982
  10. 1014
  11. 1144
  12. 123
  13. 1320
  14. 14 
  15. 15 
  16. 1632
  17. 1741
  18. 1838
  19. 1957
  20. 201
  21. 21 
  22. 226
  23. 2344
  24. 2413
  25. 2528
  26. 2633
  27. 271
  28. 28 
  29. 2936
  30. 3050
  31. 3137
All Critical High Medium Low Exploited only Public exploit

32 results · Feed

  • Unscored —
    CVE-2006-6934

    Multiple cross-site scripting (XSS) vulnerabilities in Portix-PHP 0.4.2 allow remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2006-6935

    SQL injection vulnerability in the login component in Portix-PHP 0.4.2 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2006-6932 Public exploit

    Multiple SQL injection vulnerabilities in Image Gallery with Access Database allow remote attackers to execute arbitrar…

  • Unscored —
    CVE-2006-6931

    Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain ru…

  • Unscored —
    CVE-2006-6933

    Easy Chat Server 2.1 stores sensitive information under the web root with insufficient access control, which allows rem…

  • Unscored —
    CVE-2007-0259

    Ezboxx Portal System Beta 0.7.6 and earlier allows remote attackers to obtain sensitive information via an invalid cat …

  • Unscored —
    CVE-2007-0253

    Unspecified vulnerability in the grsecurity patch has unspecified impact and remote attack vectors, a different vulnera…

  • Unscored —
    CVE-2007-0249

    Cross-site scripting (XSS) vulnerability in index.php in Nwom topsites 3.0 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2007-0261 Public exploit

    snews.php in sNews 1.5.30 and earlier does not properly exit when authentication fails, which allows remote attackers t…

  • Unscored —
    CVE-2007-0260

    PHP remote file inclusion vulnerability in index.php in Naig 0.5.2 and earlier allows remote attackers to execute arbit…

  • Unscored —
    CVE-2007-0255

    XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute…

    xine-ui Ubuntu
  • Unscored —
    CVE-2007-0254

    Format string vulnerability in the errors_create_window function in errors.c in xine-ui allows attackers to execute arb…

    xine-ui Debian
  • Unscored —
    CVE-2007-0264 Public exploit

    Buffer overflow in Winzip32.exe in WinZip 9.0 allows local users to cause a denial of service (application crash) and p…

  • High 7.8
    CVE-2007-0257 Public exploit

    Unspecified vulnerability in the expand_stack function in grsecurity PaX allows local users to gain privileges via unsp…

  • Unscored —
    CVE-2007-0266

    SQL injection vulnerability in boxx/ShowAppendix.asp in Ezboxx Portal System Beta 0.7.6 and earlier allows remote attac…

  • Unscored —
    CVE-2007-0251

    Integer underflow in the DecodeGRE function in src/decode.c in Snort 2.6.1.2 allows remote attackers to trigger derefer…

  • Unscored —
    CVE-2007-0252

    Unspecified vulnerability in easy-content filemanager allows remote attackers to upload or modify arbitrary files via u…

  • Unscored —
    CVE-2007-0263

    Unspecified vulnerability in Total Commander before 6.5.6 allows user-assisted remote attackers to delete arbitrary fil…

  • Unscored —
    CVE-2007-0262

    WordPress 2.0.6, and 2.1Alpha 3 (SVN:4662), does not properly verify that the m parameter value has the string data typ…

    wordpress Debian
  • Unscored —
    CVE-2007-0265

    Multiple cross-site scripting (XSS) vulnerabilities in Ezboxx Portal System Beta 0.7.6 and earlier allow remote attacke…

  • Unscored —
    CVE-2007-0256 Public exploit EPSS 12%

    VideoLAN VLC 0.8.6a allows remote attackers to cause a denial of service (application crash) via a crafted .wmv file.

    vlc Debian
  • Unscored —
    CVE-2007-0250

    index.php in Nwom topsites 3.0 allows remote attackers to obtain potentially sensitive information via a ' (quote) char…

  • Unscored —
    CVE-2007-0258

    Cross-site scripting (XSS) vulnerability in index.php in (1) Fastilo 2.0 and (2) Open Solution Quick.Cart 2.0 allows re…

  • Unscored —
    CVE-2006-5171 EPSS 17%

    Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates (CA) Brightstor ARCserve Backup…

  • Unscored —
    CVE-2006-5172 EPSS 15%

    Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates (CA) Brightstor ARCserve Backup…

  • Unscored —
    CVE-2006-6487 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in DT Guestbook (dt_guestbook) 1.0f, when register_globals is ena…

  • Unscored —
    CVE-2006-6767 Public exploit

    oftpd before 0.3.7 allows remote attackers to cause a denial of service (daemon abort) via a (1) LPRT or (2) LPASV comm…

  • Unscored —
    CVE-2006-5876

    The soup_headers_parse function in soup-headers.c for libsoup HTTP library before 2.2.99 allows remote attackers to cau…

    libsoup Debian
  • Unscored —
    CVE-2007-0236 Public exploit EPSS 22%

    Double free vulnerability in the _ATPsndrsp function in Apple Mac OS X 10.4.8, and possibly other versions, allows remo…

  • Unscored —
    CVE-2007-0247 Public exploit EPSS 20%

    squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via craf…

    squid Debian
  • Unscored —
    CVE-2007-0248

    The aclMatchExternal function in Squid before 2.6.STABLE7 allows remote attackers to cause a denial of service (crash) …

    squid Debian
  • Unscored —
    CVE-2007-0235 Public exploit

    Stack-based buffer overflow in the glibtop_get_proc_map_s function in libgtop before 2.14.6 (libgtop2) allows local use…

    libgtop2 Debian