Skip to content
OpenAdvisories

Archive

22 March 2007

Vulnerabilities first published on this day (UTC), newest first.

← February 2007 2007 / March /22 April 2007 →
  1. 1 
  2. 230
  3. 345
  4. 43
  5. 513
  6. 636
  7. 760
  8. 812
  9. 94
  10. 1045
  11. 11 
  12. 1210
  13. 1332
  14. 1419
  15. 151
  16. 1638
  17. 171
  18. 18 
  19. 1910
  20. 2063
  21. 2144
  22. 2221
  23. 2329
  24. 2420
  25. 25 
  26. 264
  27. 2724
  28. 2824
  29. 291
  30. 3035
  31. 318
All Critical High Medium Low Exploited only Public exploit

21 results · Feed

  • Unscored —
    CVE-2007-1594

    The handle_response function in chan_sip.c in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to …

  • Unscored —
    CVE-2007-1602

    SQL injection vulnerability in check_vote.php in Weekly Drawing Contest 0.0.1 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2007-1603

    admin/contest.php in Weekly Drawing Contest 0.0.1 allows remote attackers to bypass authentication, and insert new cont…

  • Unscored —
    CVE-2007-1608

    CRLF injection vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.19 allows remote attackers to injec…

  • Unscored —
    CVE-2007-1604 Public exploit

    Multiple unrestricted file upload vulnerabilities in w-Agora (Web-Agora) allow remote attackers to upload and execute a…

  • Unscored —
    CVE-2007-1605

    w-Agora (Web-Agora) allows remote attackers to obtain sensitive information via a request to rss.php with an invalid (1…

  • Unscored —
    CVE-2007-1600 Public exploit

    PHP remote file inclusion vulnerability in module.php in Digital Eye Gallery 1.1 Beta (aka 0.1.1b) allows remote attack…

  • Unscored —
    CVE-2007-1598

    Stack-based buffer overflow in InterVations FileCOPA FTP Server 1.01 allows remote attackers to execute arbitrary code …

  • Unscored —
    CVE-2007-1596 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in the NFN Address Book (com_nfn_addressbook) 0.4 component for Mamb…

  • Unscored —
    CVE-2007-1606 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in w-Agora (Web-Agora) allow remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2007-1611

    Cross-site scripting (XSS) vulnerability in the RSS reader in a certain SOURCENEXT product, probably IKANARI JIJYOU 1.0…

  • Unscored —
    CVE-2007-1610

    Cross-site scripting (XSS) vulnerability in the RSS reader in Glue Software NewsGlue before 1.3.4 allows remote attacke…

  • Unscored —
    CVE-2007-1599

    wp-login.php in WordPress allows remote attackers to redirect authenticated users to other websites and potentially obt…

    wordpress Debian
  • Unscored —
    CVE-2007-1607

    search.php in w-Agora (Web-Agora) allows remote attackers to obtain potentially sensitive information via a ' (quote) v…

  • Unscored —
    CVE-2007-1601

    Directory traversal vulnerability in check_vote.php in Weekly Drawing Contest 0.0.1 allows remote attackers to read arb…

  • Unscored —
    CVE-2007-1595

    The Asterisk Extension Language (AEL) in pbx/pbx_ael.c in Asterisk does not properly generate extensions, which allows …

    asterisk Debian
  • Unscored —
    CVE-2007-1609

    Cross-site scripting (XSS) vulnerability in servlet/Spy in Dynamic Monitoring Services (DMS) in Oracle Application Serv…

  • Unscored —
    CVE-2007-1597

    Unclassified NewsBoard 1.6.3 stores sensitive information under the web root with insufficient access control, which al…

  • Unscored —
    CVE-2007-1592

    net/ipv6/tcp_ipv6.c in Linux kernel 2.6.x up to 2.6.21-rc3 inadvertently copies the ipv6_fl_socklist from a listening T…

  • Unscored —
    CVE-2007-1591

    VsapiNT.sys in the Scan Engine 8.0 for Trend Micro AntiVirus 14.10.1041, and other products, allows remote attackers to…

  • Unscored —
    CVE-2007-0240

    Cross-site scripting (XSS) vulnerability in Zope 2.10.2 and earlier allows remote attackers to inject arbitrary web scr…