Skip to content
OpenAdvisories

Archive

1 February 2007

Vulnerabilities first published on this day (UTC), newest first.

15 results · Feed

  • Unscored —

    download.php in the MuddyDogPaws FileDownload snippet before 2.5 for MODx allows remote attackers to download arbitrary…

  • Unscored —

    Unspecified vulnerability in Nexuiz 2.2.2 allows remote attackers to read and overwrite arbitrary files via the gamedir…

  • Unscored —

    The (1) Textimage 4.7.x before 4.7-1.2 and 5.x before 5.x-1.1 module for Drupal and the (2) Captcha 4.7.x before 4.7-1.…

  • Unscored —
    CVE-2007-0662 Public exploit

    PHP remote file inclusion vulnerability in includes/usercp_viewprofile.php in Hailboards 1.2.0 allows remote attackers …

  • Unscored —
    CVE-2007-0663 Public exploit

    SQL injection vulnerability in index.php in Eclectic Designs CascadianFAQ 4.1 and earlier allows remote attackers to ex…

  • Medium —

    DotNetNuke Vulnerable to XSS in Pass-Through Values

    Cross-site scripting (XSS) vulnerability in the IFrame module before 03.02.01 for DotNetNuke (DNN) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "Pass through values."

  • Unscored —

    Intel Enterprise Southbridge 2 Baseboard Management Controller (BMC), Intel Server Boards 5000XAL, S5000PAL, S5000PSL, …

  • Unscored —
    CVE-2007-0656 Public exploit EPSS 16%

    PHP remote file inclusion vulnerability in includes/functions.php in phpBB2-MODificat 0.2.0 and earlier allows remote a…

  • Unscored —

    Buffer overflow in the open_sty function in mkind.c for makeindex 2.14 in teTeX might allow user-assisted remote attack…

  • Unscored —

    Cisco IOS after 12.3(14)T, 12.3(8)YC1, 12.3(8)YG, and 12.4, with voice support and without Session Initiated Protocol (…

  • Unscored —
    CVE-2007-0649 Public exploit

    Variable overwrite vulnerability in interface/globals.php in OpenEMR 2.8.2 and earlier allows remote attackers to overw…

  • Unscored —
    CVE-2007-0644 Public exploit

    Format string vulnerability in Apple Safari 2.0.4 (419.3) allows remote user-assisted attackers to cause a denial of se…

  • Unscored —
    CVE-2007-0647 Public exploit

    Format string vulnerability in Help Viewer 3.0.0 allows remote user-assisted attackers to cause a denial of service (cr…

  • Unscored —
    CVE-2007-0646 Public exploit EPSS 10%

    Format string vulnerability in iMovie HD 6.0.3, and Safari in Apple Mac OS X 10.4 through 10.4.10, allows remote user-a…

  • Unscored —
    CVE-2007-0645 Public exploit

    Format string vulnerability in iPhoto 6.0.5 allows remote user-assisted attackers to cause a denial of service (crash) …