Skip to content
OpenAdvisories

Archive

January 2007

Vulnerabilities first published in this month (UTC), newest first.

273 results · Clear filters · Feed

  • Unscored —
    CVE-2007-0641 Public exploit

    Buffer overflow in the EnumPrintersA function in dapcnfsd.dll 0.6.4.0 in Shaffer Solutions (SSC) DiskAccess NFS Client …

  • Unscored —
    CVE-2007-0643 Public exploit

    Stack-based buffer overflow in Bloodshed Dev-C++ 4.9.9.2 allows user-assisted remote attackers to cause a denial of ser…

  • Unscored —
    CVE-2007-0635 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in EncapsCMS 0.3.6 allow remote attackers to execute arbitrary PHP c…

  • Unscored —
    CVE-2007-0637 Public exploit

    Directory traversal vulnerability in zd_numer.php in Galeria Zdjec 3.0 and earlier allows remote attackers to include a…

  • Unscored —
    CVE-2007-0639 Public exploit

    Multiple static code injection vulnerabilities in error.php in GuppY 4.5.16 and earlier allow remote attackers to injec…

  • Unscored —
    CVE-2007-0638 Public exploit

    show.php in Vlad Alexa Mancini PHPFootball 1.6 allows remote attackers to obtain sensitive information (database conten…

  • Unscored —
    CVE-2007-0634 Public exploit

    Unspecified vulnerability in Sun Solaris 10 before 20070130 allows remote attackers to cause a denial of service (syste…

  • Unscored —
    CVE-2007-0631 Public exploit

    SQL injection vulnerability in index.php in Eclectic Designs CascadianFAQ 4.1 and earlier allows remote attackers to ex…

  • Unscored —
    CVE-2007-0633 Public exploit

    PHP remote file inclusion vulnerability in include/themes/themefunc.php in MyNews 4.2.2 and earlier allows remote attac…

  • Unscored —
    CVE-2007-0623 Public exploit

    SQL injection vulnerability in index.php in MAXdev MDPro 1.0.76 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2007-0620 Public exploit

    download.php in FD Script 1.3.2 and earlier allows remote attackers to read source of files under the web document root…

  • Unscored —
    CVE-2007-0613 Public exploit

    The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 does…

  • Unscored —
    CVE-2007-0614 Public exploit

    The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 allo…

  • Unscored —
    CVE-2007-0612 Public exploit EPSS 44%

    Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of s…

  • Unscored —
    CVE-2007-0467 Public exploit

    crashdump in Apple Mac OS X 10.4.8 allows local users in the admin group to modify arbitrary files or gain privileges v…

  • Unscored —
    CVE-2007-0465 Public exploit EPSS 19%

    Format string vulnerability in Apple Installer 2.1.5 on Mac OS X 10.4.8 allows user-assisted remote attackers to execut…

  • Unscored —
    CVE-2007-0466 Public exploit

    Telestream Flip4Mac Windows Media Components for Quicktime 2.1.0.33 allows remote attackers to execute arbitrary code v…

  • Unscored —
    CVE-2007-0602 Public exploit

    Buffer overflow in libvsapi.so in the VSAPI library in Trend Micro VirusWall 3.81 for Linux, as used by IScan.BASE/vsca…

  • Unscored —
    CVE-2007-0590 Public exploit

    Cross-site scripting (XSS) vulnerability in busca2.asp in Forum Livre 1.0 remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2007-0591 Public exploit

    PHP remote file inclusion vulnerability in configure.php in Vu Le An Virtual Path (VirtualPath) 1.0 allows remote attac…

  • Unscored —
    CVE-2007-0589 Public exploit

    SQL injection vulnerability in Forum Livre 1.0 allows remote attackers to execute arbitrary SQL commands via the user p…

  • Unscored —
    CVE-2007-0600 Public exploit

    SQL injection vulnerability in news_page.asp in Martyn Kilbryde Newsposter Script (aka makit news/blog poster) 3 and ea…

  • Unscored —
    CVE-2007-0598 Public exploit

    SQL injection vulnerability in forum/load.php in Aztek Forum 4.00 allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2007-0569 Public exploit

    SQL injection vulnerability in xNews.php in xNews 1.3 allows remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2007-0464 Public exploit EPSS 15%

    The _CFNetConnectionWillEnqueueRequests function in CFNetwork 129.19 on Apple Mac OS X 10.4 through 10.4.10 allows remo…

  • Unscored —
    CVE-2007-0577 Public exploit

    PHP remote file inclusion vulnerability in function.inc.php in ACGVclick 0.2.0 and earlier allows remote attackers to e…

  • Unscored —
    CVE-2007-0576 Public exploit

    PHP remote file inclusion vulnerability in xt_counter.php in Xt-Stats 2.3.x up to 2.4.0.b3 allows remote attackers to e…

  • Unscored —
    CVE-2007-0571 Public exploit

    PHP remote file inclusion vulnerability in include/lib/lib_head.php in phpMyReports 3.0.11 and earlier allows remote at…

  • Unscored —
    CVE-2007-0573 Public exploit

    PHP remote file inclusion vulnerability in includes/config.inc.php in nsGalPHP 0.41 and earlier allows remote attackers…

  • Unscored —
    CVE-2007-0580 Public exploit

    PHP remote file inclusion vulnerability in menu.php in Foro Domus 2.10 allows remote attackers to execute arbitrary PHP…

  • Unscored —
    CVE-2007-0572 Public exploit

    PHP remote file inclusion vulnerability in include/irc/phpIRC.php in Drunken:Golem Gaming Portal 0.5.1 Alpha 2 and earl…

  • Unscored —
    CVE-2007-0581 Public exploit

    PHP remote file inclusion vulnerability in functions.php in EclipseBB 0.5.0 Lite allows remote attackers to execute arb…

  • Unscored —
    CVE-2007-0570 Public exploit

    PHP remote file inclusion vulnerability in ains_main.php in Johannes Gijsbers (aka Taradino) Ad Fundum Integratable New…

  • Unscored —
    CVE-2007-0567 Public exploit

    Cross-site scripting (XSS) vulnerability in admin.php in Interactive-Scripts.Com PHP Membership Manager 1.5 allows remo…

  • Unscored —
    CVE-2007-0585 Public exploit

    include/debug.php in Webfwlog 0.92 and earlier, when register_globals is enabled, allows remote attackers to obtain sou…

  • Unscored —
    CVE-2007-0568 Public exploit

    PHP remote file inclusion vulnerability in system/lib/package.php in MyPHPCommander 2.0 allows remote attackers to exec…

  • Unscored —
    CVE-2007-0575 Public exploit

    Multiple SQL injection vulnerabilities in the administrative login page (admin/login.asp) in ASPCode.net AdMentor allow…

  • Unscored —
    CVE-2007-0574 Public exploit

    SQL injection vulnerability in rss/show_webfeed.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.40 a…

  • Unscored —
    CVE-2007-0584 Public exploit EPSS 70%

    PHP remote file inclusion vulnerability in membres/membreManager.php in PhP Generic Library & Framework for comm (g-ner…

  • Unscored —
    CVE-2007-0582 Public exploit

    SQL injection vulnerability in default.asp in ChernobiLe 1.0 allows remote attackers to execute arbitrary SQL commands …