Skip to content
OpenAdvisories

Archive

January 2007

Vulnerabilities first published in this month (UTC), newest first.

← December 2006 2007 / January February 2007 →
  1. 111
  2. 2 
  3. 330
  4. 431
  5. 552
  6. 6 
  7. 7 
  8. 821
  9. 982
  10. 1014
  11. 1144
  12. 123
  13. 1320
  14. 14 
  15. 15 
  16. 1632
  17. 1741
  18. 1838
  19. 1957
  20. 201
  21. 21 
  22. 226
  23. 2344
  24. 2413
  25. 2528
  26. 2633
  27. 271
  28. 28 
  29. 2936
  30. 3050
  31. 3137
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium —
    CVE-2007-0469

    RubyGems file overwrite vulnerability

    The extract_files function in installer.rb in RubyGems before 0.9.1 does not check whether files exist before overwriting them, which allows user-assisted remote attackers to overwrite arbitrary files, cause a denial of service, or execute arbitrary code via …

    rubygems-update RubyGems
  • Medium —
    CVE-2007-0405

    Django Improper Access Control

    The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated users to gain the privileges of a different user.

    python-django django Debian PyPI