Skip to content
OpenAdvisories

Archive

January 2008

Vulnerabilities first published in this month (UTC), newest first.

← December 2007 2008 / January February 2008 →
  1. 1 
  2. 2 
  3. 311
  4. 454
  5. 5 
  6. 6 
  7. 7 
  8. 845
  9. 934
  10. 1038
  11. 1113
  12. 1216
  13. 13 
  14. 14 
  15. 1535
  16. 1628
  17. 1746
  18. 1823
  19. 19 
  20. 20 
  21. 21 
  22. 2216
  23. 2341
  24. 2414
  25. 2513
  26. 26 
  27. 27 
  28. 2810
  29. 2920
  30. 3015
  31. 3126
All Critical High Medium Low Exploited only Public exploit

498 results · Feed

  • Unscored —
    CVE-2007-6623 Public exploit

    Absolute path traversal vulnerability in ZeusCMS 0.3 and earlier might allow remote attackers to list arbitrary directo…

  • Unscored —
    CVE-2007-6630 Public exploit

    The Url_init function in utils/url.c in Netembryo 0.0.4, when used by LScube Feng, allows remote attackers to cause a d…

  • Unscored —
    CVE-2007-6624 Public exploit

    Directory traversal vulnerability in printview.php in PNphpBB2 1.2i and earlier allows remote attackers to include and …

  • Unscored —
    CVE-2007-6625

    The Platform Service Process (asampsp) in Fan-Out Driver Platform Services for Novell Identity Manager (IDM) 3.5.1 allo…

  • Unscored —
    CVE-2007-6632 Public exploit

    showCode.php in xml2owl 0.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the pat…

  • Unscored —
    CVE-2007-6626

    Multiple buffer overflows in the RTSP_valid_response_msg function in RTSP_state_machine.c in LScube Feng 0.1.15 and ear…

  • Unscored —
    CVE-2007-6634 Public exploit

    Multiple SQL injection vulnerabilities in FAQMasterFlexPlus, possibly 1.5 or 1.52, allow remote attackers to execute ar…

  • Unscored —
    CVE-2007-6617

    Cross-site scripting (XSS) vulnerability in 500page.jsp in JIRA Enterprise Edition before 3.12.1 allows remote attacker…

  • Unscored —
    CVE-2007-6618

    JIRA Enterprise Edition before 3.12.1 allows remote attackers to delete another user's shared filter via a modified fil…

  • Unscored —
    CVE-2007-6616

    Cross-site scripting (XSS) vulnerability in simpleforum.cgi in SimpleForum 4.6.2 and earlier allows remote attackers to…

  • Unscored —
    CVE-2007-6614 Public exploit

    PHP remote file inclusion vulnerability in admin/frontpage_right.php in Agares Media phpAutoVideo 2.21 allows remote at…

  • Unscored —
    CVE-2007-6615 Public exploit

    Directory traversal vulnerability in includes/block.php in Agares Media phpAutoVideo 2.21 allows remote attackers to in…

  • Unscored —
    CVE-2007-6619

    The Setup Wizard in Atlassian JIRA Enterprise Edition before 3.12.1 does not properly restrict setup attempts after set…

  • Unscored —
    CVE-2008-0061

    MaraDNS 1.0 before 1.0.41, 1.2 before 1.2.12.08, and 1.3 before 1.3.07.04 allows remote attackers to cause a denial of …

    maradns Debian
  • Medium —
    CVE-2007-6612

    Mongrel vulnerable to directory traversal via double-encoded sequences

    Directory traversal vulnerability in DirHandler (lib/mongrel/handlers.rb) in Mongrel 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to read arbitrary files via an HTTP request containing double-encoded sequences (".%252e").

    mongrel RubyGems
  • Unscored —
    CVE-2007-6613 Public exploit EPSS 13%

    Stack-based buffer overflow in the print_iso9660_recurse function in iso-info (src/iso-info.c) in GNU Compact Disc Inpu…

    libcdio Debian
  • Unscored —
    CVE-2007-6611

    Cross-site scripting (XSS) vulnerability in view.php in Mantis before 1.1.0 allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2007-6610

    unp 1.0.12, and other versions before 1.0.14, does not properly escape file names, which might allow context-dependent …

    unp Debian