Skip to content
OpenAdvisories

Archive

19 January 2007

Vulnerabilities first published on this day (UTC), newest first.

22 results · Clear filters · Feed

  • Unscored —
    CVE-2007-0368 Public exploit

    Stack-based buffer overflow in mbse-bbs 0.70 and earlier allows local users to execute arbitrary code via a long string…

  • Unscored —
    CVE-2007-0371 Public exploit

    A certain ActiveX control in the Common Controls Replacement Project (CCRP) CCRP BrowseDialog Server (ccrpbds6.dll) all…

  • Unscored —
    CVE-2007-0369 Public exploit

    SQL injection vulnerability in phpBP RC3 (2.204) and earlier allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2007-0370 Public exploit

    Unrestricted file upload vulnerability in index.php in phpBP RC3 (2.204) and earlier allows remote administrators to in…

  • Unscored —
    CVE-2007-0389 Public exploit

    Directory traversal vulnerability in ArsDigita Community System (ACS) 3.4.10 and earlier, and ArsDigita Community Educa…

  • Unscored —
    CVE-2007-0388 Public exploit

    SQL injection vulnerability in search.php in Woltlab Burning Board (wBB) 1.0.2 and earlier, and 2.3.6 and earlier in th…

  • Unscored —
    CVE-2007-0395 Public exploit

    PHP remote file inclusion vulnerability in libraries/grab_globals.lib.php in ComVironment 4.0 allows remote attackers t…

  • Unscored —
    CVE-2007-0019 Public exploit

    Multiple heap-based buffer overflows in rumpusd in Rumpus 5.1 and earlier (1) allow remote authenticated users to execu…

  • Unscored —
    CVE-2007-0364 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to i…

  • Unscored —
    CVE-2006-6942 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in PhpMyAdmin before 2.9.1.1 allow remote attackers to inject arbit…

  • Unscored —
    CVE-2006-6943 Public exploit

    PhpMyAdmin before 2.9.1.1 allows remote attackers to obtain the full server path via direct requests to (a) scripts/che…

  • Unscored —
    CVE-2003-1318 Public exploit

    Twilight Webserver 1.3.3.0 allows remote attackers to cause a denial of service (application crash) via a GET request f…

  • Unscored —
    CVE-2007-0353 Public exploit

    Cross-site scripting (XSS) vulnerability in (1) index.php and (2) login.php in myBloggie 2.1.5 allows remote attackers …

  • Unscored —
    CVE-2007-0355 Public exploit

    Buffer overflow in the Apple Minimal SLP v2 Service Agent (slpd) in Mac OS X 10.4.11 and earlier, including 10.4.8, all…

  • Unscored —
    CVE-2007-0360 Public exploit

    PHP remote file inclusion vulnerability in lang/index.php in Oreon 1.2.3 RC4 and earlier allows remote attackers to exe…

  • Unscored —
    CVE-2007-0354 Public exploit

    SQL injection vulnerability in email.php in MGB OpenSource Guestbook 0.5.4.5 and earlier allows remote attackers to exe…

  • Unscored —
    CVE-2007-0356 Public exploit EPSS 18%

    The Common Controls Replacement Project (CCRP) FolderTreeview (FTV) ActiveX control (ccrpftv6.ocx) allows remote attack…

  • Unscored —
    CVE-2007-0359 Public exploit

    PHP remote file inclusion vulnerability in frontpage.php in Uberghey CMS 0.3.1 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2007-0357 Public exploit

    Directory traversal vulnerability in the AVM IGD CTRL Service in Fritz!DSL 02.02.29 allows remote attackers to read arb…

  • Unscored —
    CVE-2007-0352 Public exploit EPSS 37%

    Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbit…

  • Unscored —
    CVE-2007-0361 Public exploit

    PHP remote file inclusion vulnerability in mep/frame.php in PHPMyphorum 1.5a allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-6941 Public exploit

    index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to obtain sensitive information via an invalid actio…