Skip to content
OpenAdvisories

Archive

26 January 2007

Vulnerabilities first published on this day (UTC), newest first.

← December 2006 2007 / January /26 February 2007 →
  1. 111
  2. 2 
  3. 330
  4. 431
  5. 552
  6. 6 
  7. 7 
  8. 821
  9. 982
  10. 1014
  11. 1144
  12. 123
  13. 1320
  14. 14 
  15. 15 
  16. 1632
  17. 1741
  18. 1838
  19. 1957
  20. 201
  21. 21 
  22. 226
  23. 2344
  24. 2413
  25. 2528
  26. 2633
  27. 271
  28. 28 
  29. 2936
  30. 3050
  31. 3137
All Critical High Medium Low Exploited only Public exploit

33 results · Feed

  • Unscored —
    CVE-2007-0531

    PHP remote file inclusion vulnerability in includes/login.php in FreeWebShop 2.2.3 and 2.2.4 before 20070123 allows rem…

  • Unscored —
    CVE-2007-0528 Public exploit

    The admin web console implemented by the Centrality Communications (aka Aredfox) PA168 chipset and firmware 1.54 and ea…

  • Unscored —
    CVE-2007-0519

    Cross-site scripting (XSS) vulnerability in memcp.php in XMB U2U Instant Messenger allows remote authenticated users to…

  • Unscored —
    CVE-2007-0529

    Cross-site scripting (XSS) vulnerability in index.html (aka the administration page) in PHP Link Directory (phpLD) 3.0.…

  • Unscored —
    CVE-2007-0520

    SQL injection vulnerability in banner.php in Unique Ads (UDS) 1.x allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2007-0524

    The LG Chocolate KG800 phone allows remote attackers to cause a denial of service (continual modal dialogs and UI unava…

  • Unscored —
    CVE-2007-0516

    Yana Framework before 2.8.5a allows remote authenticated users with permissions to modify a guestbook profile to modify…

  • Unscored —
    CVE-2007-0530

    Multiple PHP remote file inclusion vulnerabilities in Advanced Guestbook 2.4.2 allow remote attackers to execute arbitr…

  • Unscored —
    CVE-2007-0534

    Multiple cross-site scripting (XSS) vulnerabilities in the (1) Project issue tracking 4.7.0 through 5.x before 20070123…

  • Unscored —
    CVE-2007-0518 Public exploit

    Scriptsez Smart PHP Subscriber (aka subscribe) stores sensitive information under the web root with insufficient access…

  • Unscored —
    CVE-2007-0526

    Multiple cross-site scripting (XSS) vulnerabilities in Bitweaver 1.3.1 allow remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2007-0517

    Scriptsez Random PHP Quote 1.0 stores sensitive information under the web root with insufficient access control, which …

  • Unscored —
    CVE-2007-0527

    SQL injection vulnerability in the is_remembered function in class.login.php in Website Baker 2.6.5 and earlier allows …

  • Unscored —
    CVE-2007-0535 Public exploit

    Multiple eval injection vulnerabilities in Vote! Pro 4.0, and possibly earlier, allow remote attackers to execute arbit…

  • Unscored —
    CVE-2007-0522

    The Motorola MOTORAZR V3 phone allows remote attackers to cause a denial of service (continual modal dialogs and UI una…

  • Unscored —
    CVE-2007-0523

    The Nokia N70 phone allows remote attackers to cause a denial of service (continual modal dialogs and UI unavailability…

  • Unscored —
    CVE-2007-0532

    Tuan Do Uploader (aka php-uploader) 6 beta 1 stores sensitive information under the web root with insufficient access c…

  • Unscored —
    CVE-2007-0525

    Multiple buffer overflows in Nickolas Grigoriadis Mini Web server (MiniWebsvr) before 0.05 have unknown impact and atta…

  • Unscored —
    CVE-2007-0521

    The Sony Ericsson K700i and W810i phones allow remote attackers to cause a denial of service (continual modal dialogs a…

  • Unscored —
    CVE-2007-0462 Public exploit

    The _GetSrcBits32ARGB function in Apple QuickDraw, as used by Quicktime 7.1.3 and other applications on Mac OS X 10.4.8…

  • Unscored —
    CVE-2007-0533

    The AToZed IntraWeb component 8.0 and earlier for Borland Delphi and Kylix, and IntraWeb 9.0 before build (9.0.12), all…

  • Unscored —
    CVE-2007-0510

    Multiple buffer overflows in (1) graphs.c, (2) output.c, and (3) preserve.c in AWFFull 3.7.1 and earlier have unknown i…

    awffull Debian
  • Unscored —
    CVE-2007-0511 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in phpXMLDOM (phpXD) 0.3 and earlier allow remote attackers to execu…

  • Unscored —
    CVE-2007-0514

    Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus product…

  • Unscored —
    CVE-2007-0513

    Hitachi HiRDB Datareplicator 7HiRDB, 7(64), 6, 6(64), 5.0, and 5.0(64); and various products that bundle HiRDB Datarepl…

  • Unscored —
    CVE-2007-0504 Public exploit

    Eval injection vulnerability in poll_frame.php in Vote! Pro 4.0, and possibly other scripts, allows remote attackers to…

  • Unscored —
    CVE-2007-0505

    Unrestricted file upload vulnerability in the Project issue tracking 4.7.0 through 5.x before 20070123, a module for Dr…

    Web / CMS
  • Unscored —
    CVE-2007-0507

    SQL injection vulnerability in the Acidfree module for Drupal before 4.6.x-1.0, and before 4.7.x-1.0 in the 4.7 series,…

    Web / CMS
  • Unscored —
    CVE-2007-0506

    The project_issue_access function in the Project issue tracking 4.7.0 through 5.x before 20070123 module for Drupal all…

    Web / CMS
  • Unscored —
    CVE-2007-0509

    Multiple unspecified vulnerabilities in MaklerPlus before 1.2 have unknown impact and attack vectors, possibly relating…

  • Unscored —
    CVE-2007-0512

    Hitachi TP1/LiNK 05-00 through 05-03-/F, 03-04 through 03-06-/K, and 03-00 through 03-03-/H; and TP1/Server Base 05-00 …

  • Unscored —
    CVE-2007-0508 Public exploit

    PHP remote file inclusion vulnerability in lib/selectlang.php in BBClone 0.31 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2007-0515 Public exploit EPSS 39%

    Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 200…