Skip to content
OpenAdvisories

Archive

3 January 2008

Vulnerabilities first published on this day (UTC), newest first.

← December 2007 2008 / January /3 February 2008 →
  1. 1 
  2. 2 
  3. 311
  4. 454
  5. 5 
  6. 6 
  7. 7 
  8. 845
  9. 934
  10. 1038
  11. 1113
  12. 1216
  13. 13 
  14. 14 
  15. 1535
  16. 1628
  17. 1746
  18. 1823
  19. 19 
  20. 20 
  21. 21 
  22. 2216
  23. 2341
  24. 2414
  25. 2513
  26. 26 
  27. 27 
  28. 2810
  29. 2920
  30. 3015
  31. 3126
All Critical High Medium Low Exploited only Public exploit

11 results · Feed

  • Unscored —
    CVE-2007-6617

    Cross-site scripting (XSS) vulnerability in 500page.jsp in JIRA Enterprise Edition before 3.12.1 allows remote attacker…

  • Unscored —
    CVE-2007-6618

    JIRA Enterprise Edition before 3.12.1 allows remote attackers to delete another user's shared filter via a modified fil…

  • Unscored —
    CVE-2007-6616

    Cross-site scripting (XSS) vulnerability in simpleforum.cgi in SimpleForum 4.6.2 and earlier allows remote attackers to…

  • Unscored —
    CVE-2007-6614 Public exploit

    PHP remote file inclusion vulnerability in admin/frontpage_right.php in Agares Media phpAutoVideo 2.21 allows remote at…

  • Unscored —
    CVE-2007-6615 Public exploit

    Directory traversal vulnerability in includes/block.php in Agares Media phpAutoVideo 2.21 allows remote attackers to in…

  • Unscored —
    CVE-2007-6619

    The Setup Wizard in Atlassian JIRA Enterprise Edition before 3.12.1 does not properly restrict setup attempts after set…

  • Unscored —
    CVE-2008-0061

    MaraDNS 1.0 before 1.0.41, 1.2 before 1.2.12.08, and 1.3 before 1.3.07.04 allows remote attackers to cause a denial of …

    maradns Debian
  • Medium —
    CVE-2007-6612

    Mongrel vulnerable to directory traversal via double-encoded sequences

    Directory traversal vulnerability in DirHandler (lib/mongrel/handlers.rb) in Mongrel 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to read arbitrary files via an HTTP request containing double-encoded sequences (".%252e").

    mongrel RubyGems
  • Unscored —
    CVE-2007-6613 Public exploit EPSS 13%

    Stack-based buffer overflow in the print_iso9660_recurse function in iso-info (src/iso-info.c) in GNU Compact Disc Inpu…

    libcdio Debian
  • Unscored —
    CVE-2007-6611

    Cross-site scripting (XSS) vulnerability in view.php in Mantis before 1.1.0 allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2007-6610

    unp 1.0.12, and other versions before 1.0.14, does not properly escape file names, which might allow context-dependent …

    unp Debian