Skip to content
OpenAdvisories

Archive

January 2007

Vulnerabilities first published in this month (UTC), newest first.

725 results · Feed

  • Unscored —
    CVE-2007-0179 Public exploit

    SQL injection vulnerability in comment.php in PHPKIT 1.6.1 R2 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2007-0178 Public exploit

    PHP remote file inclusion vulnerability in info.php in Easy Banner Pro 2.8 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2007-0172 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.3.0 and earlier allow remote attackers to execute a…

  • Unscored —
    CVE-2007-0171 Public exploit

    PHP remote file inclusion vulnerability in index.php in AllMyLinks 0.5.0 and earlier allows remote attackers to execute…

  • Unscored —

    Adobe Reader and Acrobat 7.0.8 and earlier allows user-assisted remote attackers to execute code via a crafted PDF file…

  • Unscored —
    CVE-2006-5858 EPSS 14%

    Adobe ColdFusion MX 7 through 7.0.2, and JRun 4, when run on Microsoft IIS, allows remote attackers to read arbitrary f…

  • Unscored —
    CVE-2007-0167 Public exploit EPSS 11%

    Multiple PHP file inclusion vulnerabilities in WGS-PPC (aka PPC Search Engine), as distributed with other aliases, allo…

  • Unscored —

    ftpd in IBM AIX 5.2.0 and 5.3.0 allows remote authenticated users to cause a denial of service (port exhaustion) via un…

  • Unscored —

    The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadm…

  • Unscored —

    The "mechglue" abstraction interface of the GSS-API library for Kerberos 5 1.5 through 1.5.1, as used in Kerberos admin…

  • Unscored —

    Unspecified vulnerability in ftpd in IBM AIX 5.2.0 and 5.3.0 allows remote attackers to obtain sensitive information, i…

  • Unscored —
    CVE-2007-0162 Public exploit

    Unsanity Application Enhancer (APE) 2.0.2 installs with insecure permissions for the (1) ApplicationEnhancer binary and…

  • Unscored —

    Camouflage 1.2.1 embeds password information in the carrier file, which allows remote attackers to bypass authenticatio…

  • Unscored —

    SecureKit Steganography 1.7.1 and 1.8 embeds password information in the carrier file, which allows remote attackers to…

  • Unscored —
    CVE-2007-0165 Public exploit

    Unspecified vulnerability in libnsl in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service (crash)…

  • Unscored —
    CVE-2007-0161 Public exploit

    The PML Driver HPZ12 (HPZipm12.exe) in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVIC…

  • Unscored —

    Directory traversal vulnerability in the GeoIP_update_database_general function in libGeoIP/GeoIPUpdate.c in GeoIP 1.4.…

  • Unscored —

    Stack-based buffer overflow in the LiveJournal support (hooks/ljhook.cc) in CenterICQ 4.9.11 through 4.21.0, when using…

  • Unscored —
    CVE-2006-1305 EPSS 32%

    Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to cause a denial of service (memory exhau…

  • Unscored —

    Integer overflow in the ProcRenderAddGlyphs function in the Render extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and …

  • Unscored —

    Integer overflow in the ProcDbeSwapBuffers function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFre…

  • Unscored —

    Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XF…

  • Unscored —
    CVE-2007-0033 EPSS 33%

    Microsoft Outlook 2002 and 2003 allows user-assisted remote attackers to execute arbitrary code via a malformed VEVENT …

  • Unscored —
    CVE-2007-0028 EPSS 34%

    Microsoft Excel 2000, 2002, 2003, Viewer 2003, Office 2004 for Mac, and Office v.X for Mac does not properly handle cer…

  • Unscored —
    CVE-2007-0029 EPSS 30%

    Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to ex…

  • Unscored —
    CVE-2007-0030 EPSS 33%

    Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to ex…

  • Unscored —
    CVE-2007-0031 Public exploit EPSS 42%

    Heap-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-a…

  • Unscored —
    CVE-2007-0024 Public exploit EPSS 44%

    Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, a…

  • Unscored —
    CVE-2007-0034 EPSS 38%

    Buffer overflow in the Advanced Search (Finder.exe) feature of Microsoft Outlook 2000, 2002, and 2003 allows user-assis…

  • Unscored —
    CVE-2006-5574 EPSS 24%

    Unspecified vulnerability in the Brazilian Portuguese Grammar Checker in Microsoft Office 2003 and the Multilingual Int…

  • Unscored —
    CVE-2007-0027 EPSS 32%

    Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2004-2675 Public exploit

    ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to cause a denial of service (crash) via a SITE PA…

  • Unscored —

    Directory traversal vulnerability in ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to determine …

  • Unscored —

    Multiple buffer overflows in ArGoSoft FTP Server before 1.4.1.6 allow remote authenticated users to cause a denial of s…

  • Unscored —

    Array index error in the uri_lookup function in the URI parser for neon 0.26.0 to 0.26.2, possibly only on 64-bit platf…

  • Unscored —

    Unspecified vulnerability in ArGoSoft FTP server before 1.4.2.2 allows attackers to upload .lnk files via unknown vecto…

  • Unscored —
    CVE-2006-6911 Public exploit

    SQL injection vulnerability in search.asp in Digitizing Quote And Ordering System 1.0 allows remote authenticated users…

  • Unscored —
    CVE-2006-6912 Public exploit

    SQL injection vulnerability in phpMyFAQ 1.6.7 and earlier allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —

    Unspecified vulnerability in phpMyFAQ 1.6.7 and earlier allows remote attackers to upload arbitrary PHP scripts via uns…

  • Unscored —
    CVE-2007-0148 Public exploit

    Format string vulnerability in OmniGroup OmniWeb 5.5.1 allows remote attackers to cause a denial of service (applicatio…