Skip to content
OpenAdvisories

Archive

January 2008

Vulnerabilities first published in this month (UTC), newest first.

← December 2007 2008 / January February 2008 →
  1. 1 
  2. 2 
  3. 311
  4. 454
  5. 5 
  6. 6 
  7. 7 
  8. 845
  9. 934
  10. 1038
  11. 1113
  12. 1216
  13. 13 
  14. 14 
  15. 1535
  16. 1628
  17. 1746
  18. 1823
  19. 19 
  20. 20 
  21. 21 
  22. 2216
  23. 2341
  24. 2414
  25. 2513
  26. 26 
  27. 27 
  28. 2810
  29. 2920
  30. 3015
  31. 3126
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2008-0299

    Paramiko Unsafe randomness usage may allow access to sensitive information

    common.py in Paramiko 1.7.1 and earlier, when using threads or forked processes, does not properly use RandomPool, which allows one session to obtain sensitive information from another session by predicting the state of the pool.

    paramiko paramiko Debian PyPI
  • Medium —
    CVE-2007-6672

    Mortbay Jetty Double Slash URI Information Disclosure Vulnerability

    Mortbay Jetty 6.1.5 and 6.1.6 allows remote attackers to bypass protection mechanisms and read the source of files via multiple '/' (slash) characters in the URI.

    org.mortbay.jetty:jetty Maven
  • Medium —
    CVE-2007-6612

    Mongrel vulnerable to directory traversal via double-encoded sequences

    Directory traversal vulnerability in DirHandler (lib/mongrel/handlers.rb) in Mongrel 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to read arbitrary files via an HTTP request containing double-encoded sequences (".%252e").

    mongrel RubyGems