Skip to content
OpenAdvisories

Archive

22 April 2007

Vulnerabilities first published on this day (UTC), newest first.

← March 2007 2007 / April /22 May 2007 →
  1. 1 
  2. 235
  3. 335
  4. 48
  5. 5 
  6. 626
  7. 7 
  8. 8 
  9. 95
  10. 1049
  11. 1139
  12. 1249
  13. 1314
  14. 14 
  15. 15 
  16. 1626
  17. 17 
  18. 1885
  19. 1923
  20. 20 
  21. 21 
  22. 2215
  23. 23 
  24. 2462
  25. 2545
  26. 2640
  27. 2728
  28. 28 
  29. 29 
  30. 3047
All Critical High Medium Low Exploited only Public exploit

15 results · Feed

  • Unscored —
    CVE-2007-1972

    PatrolAgent.exe in BMC Performance Manager does not require authentication for requests to modify configuration files, …

  • Unscored —
    CVE-2007-2168 Public exploit

    Static code injection vulnerability in process.php in AimStats 3.2 and earlier allows remote attackers to inject PHP co…

  • Unscored —
    CVE-2007-2159

    Multiple cross-site scripting (XSS) vulnerabilities in the Database Administration (dba) module 4.6.x-*, and before 4.7…

  • Unscored —
    CVE-2007-2166 Public exploit

    PHP remote file inclusion vulnerability in administration/user/lib/group.inc.php in OpenSurveyPilot (osp) 1.2.1 and ear…

  • Unscored —
    CVE-2007-2165 EPSS 12%

    The Auth API in ProFTPD before 20070417, when multiple simultaneous authentication modules are configured, does not req…

    proftpd-dfsg Debian
  • Unscored —
    CVE-2007-2167 Public exploit EPSS 44%

    Static code injection vulnerability in process.php in AimStats 3.2 allows remote attackers to inject PHP code into conf…

  • Unscored —
    CVE-2007-2169 Public exploit

    Static code injection vulnerability in add.php in Mozzers SubSystem 1.0 allows remote attackers to inject PHP code into…

  • Unscored —
    CVE-2007-2163

    Apple Safari allows remote attackers to cause a denial of service (browser crash) via JavaScript that matches a regular…

  • Unscored —
    CVE-2007-2161 EPSS 12%

    Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service (browser hang) via JavaScript that m…

  • Unscored —
    CVE-2007-2160

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Database Administration (dba) module 4.6.x-*, and bef…

  • Unscored —
    CVE-2007-2164

    Konqueror 3.5.5 release 45.4 allows remote attackers to cause a denial of service (browser crash or abort) via JavaScri…

  • Unscored —
    CVE-2007-2162

    (1) Mozilla Firefox 2.0.0.3 and (2) GNU IceWeasel 2.0.0.3 allow remote attackers to cause a denial of service (browser …

  • Unscored —
    CVE-2007-2172

    A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes RTA_MAX to be used as an array size instead o…

  • Unscored —
    CVE-2007-2136

    Stack-based buffer overflow in bgs_sdservice.exe in BMC Patrol PerformAgent allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2007-2137

    Heap-based buffer overflow in kde.dll in IBM Tivoli Monitoring Express 6.1.0 before Fix Pack 2, as used in Tivoli Unive…