Skip to content
OpenAdvisories

Archive

February 2007

Vulnerabilities first published in this month (UTC), newest first.

← January 2007 2007 / February March 2007 →
  1. 115
  2. 29
  3. 327
  4. 413
  5. 5 
  6. 638
  7. 741
  8. 834
  9. 920
  10. 10 
  11. 111
  12. 1244
  13. 1329
  14. 1422
  15. 1525
  16. 1634
  17. 17 
  18. 18 
  19. 192
  20. 207
  21. 2150
  22. 2224
  23. 2328
  24. 2423
  25. 25 
  26. 2635
  27. 2769
  28. 2840
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.5
    CVE-2006-7031 Public exploit EPSS 18%

    Microsoft Internet Explorer 6.0.2900 SP2 and earlier allows remote attackers to cause a denial of service (crash) via a…

  • Medium —
    CVE-2007-0902

    MoinMoin Insertion of Sensitive Information into Log File

    Unspecified vulnerability in the "Show debugging information" feature in MoinMoin 1.5.7 allows remote attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

    moin PyPI
  • Medium —
    CVE-2007-0901

    MoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parameters

    Multiple cross-site scripting (XSS) vulnerabilities in Info pages in MoinMoin 1.5.7 allow remote attackers to inject arbitrary web script or HTML via the (1) hitcounts and (2) general parameters, different vectors than CVE-2007-0857. NOTE: the provenance of t…

    moin PyPI
  • Medium —
    CVE-2007-0857

    MoinMoin Multiple cross-site scripting (XSS) vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin before 1.5.7 allow remote attackers to inject arbitrary web script or HTML via (1) the page info, or the page name in a (2) AttachFile, (3) RenamePage, or (4) LocalSiteMap action.

    moin PyPI
  • Medium —
    CVE-2006-6969

    Jetty Uses Predictable Session Identifiers

    Jetty before 4.2.27, 5.1 before 5.1.12, 6.0 before 6.0.2, and 6.1 before 6.1.0pre3 generates predictable session identifiers using java.util.random, which makes it easier for remote attackers to guess a session identifier through brute force attacks, bypass a…

    org.eclipse.jetty:jetty-server Maven
  • Medium —
    CVE-2007-0660

    DotNetNuke Vulnerable to XSS in Pass-Through Values

    Cross-site scripting (XSS) vulnerability in the IFrame module before 03.02.01 for DotNetNuke (DNN) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "Pass through values."

    DotNetNuke.Core NuGet