Skip to content
OpenAdvisories

Archive

January 2007

Vulnerabilities first published in this month (UTC), newest first.

← December 2006 2007 / January February 2007 →
  1. 111
  2. 2 
  3. 330
  4. 431
  5. 552
  6. 6 
  7. 7 
  8. 821
  9. 982
  10. 1014
  11. 1144
  12. 123
  13. 1320
  14. 14 
  15. 15 
  16. 1632
  17. 1741
  18. 1838
  19. 1957
  20. 201
  21. 21 
  22. 226
  23. 2344
  24. 2413
  25. 2528
  26. 2633
  27. 271
  28. 28 
  29. 2936
  30. 3050
  31. 3137
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High —
    CVE-2007-0404

    Django Arbitrary Code Execution

    bin/compile-messages.py in Django 0.95 does not quote argument strings before invoking the msgfmt program through the os.system function, which allows attackers to execute arbitrary commands via shell metacharacters in a (1) .po or (2) .mo file.

    python-django django Debian PyPI
  • High 7.5
    CVE-2007-0342 Public exploit

    WebCore in Apple WebKit build 18794 allows remote attackers to cause a denial of service (null dereference and applicat…

  • High 7.8
    CVE-2007-0257 Public exploit

    Unspecified vulnerability in the expand_stack function in grsecurity PaX allows local users to gain privileges via unsp…

  • High 7.5
    CVE-2007-0185

    Direct Web Remoting vulnerable to Denial of Service

    Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to cause a denial of service (memory exhaustion and servlet outage) via unknown vectors related to a large number of calls in a batch.

    org.directwebremoting:dwr Maven
  • High 7.3
    CVE-2007-0184

    Incorrect Authorization in Getahead Direct Web Remoting

    Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to obtain unauthorized access to public methods via a crafted request that bypasses the include/exclude checks.

    org.directwebremoting:dwr Maven