Skip to content
OpenAdvisories

Archive

16 April 2007

Vulnerabilities first published on this day (UTC), newest first.

  1. 1 
  2. 235
  3. 335
  4. 48
  5. 5 
  6. 626
  7. 7 
  8. 8 
  9. 95
  10. 1049
  11. 1139
  12. 1249
  13. 1314
  14. 14 
  15. 15 
  16. 1626
  17. 17 
  18. 1885
  19. 1923
  20. 20 
  21. 21 
  22. 2215
  23. 23 
  24. 2462
  25. 2545
  26. 2640
  27. 2728
  28. 28 
  29. 29 
  30. 3047

26 results · Feed

  • Unscored —

    The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle (MITM) at…

  • Unscored —

    Buffer overflow in the parsecmd function in bftpd before 1.8 has unknown impact and attack vectors related to the confs…

  • Unscored —

    Multiple CRLF injection vulnerabilities in adclick.php in (a) Openads (phpAdsNew) 2.0.11 and earlier and (b) Openads fo…

  • Unscored —
    CVE-2007-2043 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia (com_mosmedia) 1.08 and earlie…

  • Unscored —
    CVE-2007-2048 Public exploit

    Directory traversal vulnerability in /console in the Management Console in webMethods Glue 6.5.1 and earlier allows rem…

  • Unscored —
    CVE-2007-2052 Public exploit EPSS 14%

    Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect…

  • Unscored —

    Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite 1.0.6 and earlier module …

  • Unscored —
    CVE-2007-2044 Public exploit

    PHP remote file inclusion vulnerability in mod_weather.php in the Antonis Ventouris Weather module for Mambo and Joomla…

  • Unscored —
    CVE-2007-2049 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in the Calendar Module (com_calendar) 1.5.5 for Mambo allow remote a…

  • Unscored —
    CVE-2007-2050 Public exploit

    Multiple directory traversal vulnerabilities in header.php in RicarGBooK 1.2.1 allow remote attackers to include and ex…

  • Unscored —

    CRLF injection vulnerability in www/delivery/ck.php in Openads 2.3 (aka Max Media Manager, MMM) before 0.3.31-alpha-pr3…

  • Unscored —

    Unspecified vulnerability in the IP implementation in Sun Solaris 8 and 9 allows remote attackers to cause a denial of …

  • Unscored —

    Integer signedness error in the (1) cab_unstore and (2) cab_extract functions in libclamav/cab.c in Clam AntiVirus (Cla…

  • Unscored —

    The chm_decompress_stream function in libclamav/chmunpack.c in Clam AntiVirus (ClamAV) before 0.90.2 leaks file descrip…

  • Unscored —

    Cisco Wireless Control System (WCS) before 4.0.96.0 has a hard-coded FTP username and password for backup operations, w…

  • Unscored —

    Cisco Wireless LAN Controller (WLC) before 4.0.206.0 saves the WLAN ACL configuration with an invalid checksum, which p…

  • Unscored —

    Cisco Wireless Control System (WCS) before 4.0.66.0 stores sensitive information under the web root with insufficient a…

  • Unscored —

    The SNMP implementation in the Cisco Wireless LAN Controller (WLC) before 20070419 uses the default read-only community…

  • Unscored —

    Cisco Aironet 1000 Series and 1500 Series Lightweight Access Points before 3.2.185.0, and 4.0.x before 4.0.206.0, have …

  • Unscored —
    CVE-2007-2031 Public exploit EPSS 15%

    Buffer overflow in the HTTP proxy service for 3proxy 0.5 to 0.5.3g, and 0.6b-devel before 20070413, might allow remote …

  • Unscored —

    The Network Processing Unit (NPU) in the Cisco Wireless LAN Controller (WLC) before 3.2.193.5, 4.0.x before 4.0.206.0, …

  • Unscored —

    Unspecified vulnerability in Cisco Wireless Control System (WCS) before 4.0.81.0 allows remote authenticated users to r…

  • Unscored —

    The Network Processing Unit (NPU) in the Cisco Wireless LAN Controller (WLC) before 3.2.171.5, 4.0.x before 4.0.206.0, …

  • Unscored —

    Unspecified vulnerability in Cisco Wireless Control System (WCS) before 4.0.87.0 allows remote authenticated users to g…

  • Unscored —

    Cisco Wireless LAN Controller (WLC) before 3.2.116.21, and 4.0.x before 4.0.155.0, allows remote attackers on a local n…

  • Unscored —

    lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creati…