Skip to content
OpenAdvisories

Archive

25 January 2007

Vulnerabilities first published on this day (UTC), newest first.

← December 2006 2007 / January /25 February 2007 →
  1. 111
  2. 2 
  3. 330
  4. 431
  5. 552
  6. 6 
  7. 7 
  8. 821
  9. 982
  10. 1014
  11. 1144
  12. 123
  13. 1320
  14. 14 
  15. 15 
  16. 1632
  17. 1741
  18. 1838
  19. 1957
  20. 201
  21. 21 
  22. 226
  23. 2344
  24. 2413
  25. 2528
  26. 2633
  27. 271
  28. 28 
  29. 2936
  30. 3050
  31. 3137
All Critical High Medium Low Exploited only Public exploit

28 results · Feed

  • Unscored —
    CVE-2007-0500 Public exploit

    PHP remote file inclusion vulnerability in include/includes.php in Bradabra 2.0.5 and earlier allows remote attackers t…

  • Unscored —
    CVE-2007-0503

    Unspecified vulnerability in kcms_calibrate in Sun Solaris 8 and 9 before 20071122 allows local users to execute arbitr…

  • Unscored —
    CVE-2007-0496 Public exploit

    PHP remote file inclusion vulnerability in lib/nl/nl.php in Neon Labs Website (nlws) 3.2 and earlier allows remote atta…

  • Unscored —
    CVE-2007-0497 Public exploit

    PHP remote file inclusion vulnerability in upload/top.php in Upload-Service 1.0, when register_globals is enabled, allo…

  • Unscored —
    CVE-2007-0495 Public exploit

    PHP remote file inclusion vulnerability in include/config.inc.php in PhpSherpa allows remote attackers to execute arbit…

  • Unscored —
    CVE-2007-0502 Public exploit

    SQL injection vulnerability in gallery.php in webSPELL 4.01.02 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2007-0501 Public exploit

    PHP remote file inclusion vulnerability in index.php in Mafia Scum Tools 2.0.0 in Matthew Wardrop Advanced Random Gener…

  • Unscored —
    CVE-2007-0498 Public exploit

    PHP remote file inclusion vulnerability in up.php in MySpeach 2.1 beta and possibly earlier allows remote attackers to …

  • Unscored —
    CVE-2007-0499 Public exploit

    PHP remote file inclusion vulnerability in config.php in Sangwan Kim phpIndexPage 1.0.1 and earlier allows remote attac…

  • Unscored —
    CVE-2007-0493 EPSS 13%

    Use-after-free vulnerability in ISC BIND 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and…

    bind9 Debian
  • Unscored —
    CVE-2007-0494 EPSS 45%

    ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, an…

    bind9 Debian
  • Unscored —
    CVE-2007-0483

    Multiple cross-site scripting (XSS) vulnerabilities in Enthusiast 3.1 allow remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2007-0490

    index.php in Open-Realty 2.3.4 allows remote attackers to obtain sensitive information (the full path) via an invalid l…

  • Unscored —
    CVE-2007-0487

    PHP remote file inclusion vulnerability in index.php in FreeForum 0.9.0 allows remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2007-0485 Public exploit

    PHP remote file inclusion vulnerability in defines.php in WebChat 0.77 allows remote attackers to execute arbitrary PHP…

  • Unscored —
    CVE-2007-0480

    Cisco IOS 9.x, 10.x, 11.x, and 12.x and IOS XR 2.0.x, 3.0.x, and 3.2.x allows remote attackers to cause a denial of ser…

  • Unscored —
    CVE-2007-0484

    Multiple SQL injection vulnerabilities in Enthusiast 3.1 allow remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2007-0476

    The gencert.sh script, when installing OpenLDAP before 2.1.30-r10, 2.2.x before 2.2.28-r7, and 2.3.x before 2.3.30-r2 a…

  • Unscored —
    CVE-2007-0491 Public exploit

    PHP remote file inclusion vulnerability in up.php in Sky GUNNING MySpeach 3.0.6 and earlier allows remote attackers to …

  • Unscored —
    CVE-2007-0488

    The Huawei Versatile Routing Platform 1.43 2500E-003 firmware on the Quidway R1600 Router, and possibly other models, a…

  • Unscored —
    CVE-2007-0482

    cgi-bin/main in Sun Ray Server Software 2.0 and 3.0 before 20070123 allows local users to obtain the utadmin password b…

  • Unscored —
    CVE-2007-0492

    Multiple SQL injection vulnerabilities in gallery.php in webSPELL 4.01.02 and earlier allow remote attackers to execute…

  • Unscored —
    CVE-2007-0486

    Multiple PHP remote file inclusion vulnerabilities in Openads (aka phpAdsNew) 2.0.7 allow remote attackers to execute a…

  • Unscored —
    CVE-2007-0479

    Memory leak in the TCP listener in Cisco IOS 9.x, 10.x, 11.x, and 12.x allows remote attackers to cause a denial of ser…

  • Unscored —
    CVE-2007-0489 Public exploit

    PHP remote file inclusion vulnerability in includes/functions.visohotlink.php in VisoHotlink 1.01 and possibly earlier …

  • Unscored —
    CVE-2007-0478

    WebCore on Apple Mac OS X 10.3.9 and 10.4.10, as used in Safari, does not properly parse HTML comments in TITLE element…

  • Unscored —
    CVE-2007-0481

    Cisco IOS allows remote attackers to cause a denial of service (crash) via a crafted IPv6 Type 0 Routing header.

  • Unscored —
    CVE-2007-0477

    Cross-site scripting (XSS) vulnerability in Openads 2.0.x before 2.0.10, 2.3 before 2.3.31 (aka Max Media Manager befor…