Skip to content
OpenAdvisories

Archive

January 2007

Vulnerabilities first published in this month (UTC), newest first.

273 results · Clear filters · Feed

  • Unscored —
    CVE-2007-0429 Public exploit

    DivXBrowserPlugin (aka DivX Web Player) npdivx32.dll, as distributed with DivX Player 6.4.1, allows remote attackers to…

  • Unscored —
    CVE-2007-0430 Public exploit

    The shared_region_map_file_np function in Apple Mac OS X 10.4.8 and earlier kernel allows local users to cause a denial…

  • Unscored —
    CVE-2007-0021 Public exploit EPSS 24%

    Format string vulnerability in Apple iChat 3.1.6 allows remote attackers to cause a denial of service (null pointer der…

  • Unscored —
    CVE-2007-0427 Public exploit EPSS 31%

    Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbit…

  • Unscored —
    CVE-2007-0399 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in Simple Machines Forum (SMF) 1.1 RC3 allow remote au…

  • Unscored —
    CVE-2007-0368 Public exploit

    Stack-based buffer overflow in mbse-bbs 0.70 and earlier allows local users to execute arbitrary code via a long string…

  • Unscored —
    CVE-2007-0371 Public exploit

    A certain ActiveX control in the Common Controls Replacement Project (CCRP) CCRP BrowseDialog Server (ccrpbds6.dll) all…

  • Unscored —
    CVE-2007-0369 Public exploit

    SQL injection vulnerability in phpBP RC3 (2.204) and earlier allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2007-0370 Public exploit

    Unrestricted file upload vulnerability in index.php in phpBP RC3 (2.204) and earlier allows remote administrators to in…

  • Unscored —
    CVE-2007-0389 Public exploit

    Directory traversal vulnerability in ArsDigita Community System (ACS) 3.4.10 and earlier, and ArsDigita Community Educa…

  • Unscored —
    CVE-2007-0388 Public exploit

    SQL injection vulnerability in search.php in Woltlab Burning Board (wBB) 1.0.2 and earlier, and 2.3.6 and earlier in th…

  • Unscored —
    CVE-2007-0395 Public exploit

    PHP remote file inclusion vulnerability in libraries/grab_globals.lib.php in ComVironment 4.0 allows remote attackers t…

  • Unscored —
    CVE-2007-0019 Public exploit

    Multiple heap-based buffer overflows in rumpusd in Rumpus 5.1 and earlier (1) allow remote authenticated users to execu…

  • Unscored —
    CVE-2007-0364 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to i…

  • Unscored —
    CVE-2006-6942 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in PhpMyAdmin before 2.9.1.1 allow remote attackers to inject arbit…

  • Unscored —
    CVE-2006-6943 Public exploit

    PhpMyAdmin before 2.9.1.1 allows remote attackers to obtain the full server path via direct requests to (a) scripts/che…

  • Unscored —
    CVE-2003-1318 Public exploit

    Twilight Webserver 1.3.3.0 allows remote attackers to cause a denial of service (application crash) via a GET request f…

  • Unscored —
    CVE-2007-0353 Public exploit

    Cross-site scripting (XSS) vulnerability in (1) index.php and (2) login.php in myBloggie 2.1.5 allows remote attackers …

  • Unscored —
    CVE-2007-0355 Public exploit

    Buffer overflow in the Apple Minimal SLP v2 Service Agent (slpd) in Mac OS X 10.4.11 and earlier, including 10.4.8, all…

  • Unscored —
    CVE-2007-0360 Public exploit

    PHP remote file inclusion vulnerability in lang/index.php in Oreon 1.2.3 RC4 and earlier allows remote attackers to exe…

  • Unscored —
    CVE-2007-0354 Public exploit

    SQL injection vulnerability in email.php in MGB OpenSource Guestbook 0.5.4.5 and earlier allows remote attackers to exe…

  • Unscored —
    CVE-2007-0356 Public exploit EPSS 18%

    The Common Controls Replacement Project (CCRP) FolderTreeview (FTV) ActiveX control (ccrpftv6.ocx) allows remote attack…

  • Unscored —
    CVE-2007-0359 Public exploit

    PHP remote file inclusion vulnerability in frontpage.php in Uberghey CMS 0.3.1 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2007-0357 Public exploit

    Directory traversal vulnerability in the AVM IGD CTRL Service in Fritz!DSL 02.02.29 allows remote attackers to read arb…

  • Unscored —
    CVE-2007-0352 Public exploit EPSS 37%

    Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbit…

  • Unscored —
    CVE-2007-0361 Public exploit

    PHP remote file inclusion vulnerability in mep/frame.php in PHPMyphorum 1.5a allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-6941 Public exploit

    index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to obtain sensitive information via an invalid actio…

  • Unscored —
    CVE-2007-0338 Public exploit

    Heap-based buffer overflow in Dream FTP Server allows remote attackers to execute arbitrary code via a USER command wit…

  • Unscored —
    CVE-2007-0333 Public exploit

    Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse drivers into …

  • Unscored —
    CVE-2007-0337 Public exploit

    Directory traversal vulnerability in sesskglogadmin.php in KGB 1.9 and earlier allows remote attackers to include and e…

  • Unscored —
    CVE-2007-0335 Public exploit

    Multiple directory traversal vulnerabilities in Jax Petition Book 1.0.3.06 allow remote attackers to include and execut…

  • High 7.5
    CVE-2007-0342 Public exploit

    WebCore in Apple WebKit build 18794 allows remote attackers to cause a denial of service (null dereference and applicat…

  • Unscored —
    CVE-2007-0340 Public exploit

    SQL injection vulnerability in inc/header.inc.php in ThWboard 3.0b2.84-php5 and earlier allows remote attackers to exec…

  • Unscored —
    CVE-2007-0344 Public exploit

    Multiple format string vulnerabilities in (1) _invitedToRoom: and (2) _invitedToDirectChat: in Colloquy 2.1 and earlier…

  • Unscored —
    CVE-2007-0329 Public exploit

    download.php in Joonas Viljanen JV2 Folder Gallery allows remote attackers to read sensitive files via a relative pathn…

  • Unscored —
    CVE-2007-0302 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in InstantASP 4.1.0 allow remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2007-0301 Public exploit

    PHP remote file inclusion vulnerability in _admin/admin_menu.php in FdWeB Espace Membre 2.1 and earlier allows remote a…

  • Unscored —
    CVE-2007-0300 Public exploit

    PHP remote file inclusion vulnerability in i-accueil.php in TLM CMS 1.1 and earlier allows remote attackers to execute …

  • Unscored —
    CVE-2007-0307 Public exploit

    PHP remote file inclusion vulnerability in include/common.php in Poplar Gedcom Viewer 2.0 and earlier allows remote att…

  • Unscored —
    CVE-2007-0311 Public exploit

    Texas Imperial Software WFTPD and WFTPD Pro Server 3.25 and earlier allow remote attackers to cause a denial of service…