CVEs published in January 2007
594 vulnerabilities, 54 critical, 0 exploited.
- bea aqualogic service busUnspecified vulnerability in BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2...6.5 Medium
- bea aqualogic service busBEA AquaLogic Service Bus 2.0, 2.1, and 2.5 does not properly reject malformed request messages...7.5 High
- avm fritzboxAVM Fritz!Box 7050, and possibly other product models, allows remote attackers to cause a denial...7.8 High
- apple mac os xThe shared_region_map_file_np function in Apple Mac OS X 10.4.8 and earlier kernel allows local...4.9 Medium
- divx playerDivXBrowserPlugin (aka DivX Web Player) npdivx32.dll, as distributed with DivX Player 6.4.1,...5.0 Medium
- wzdftpdUnspecified vulnerability in the chtbl_lookup function in hash.c for WzdFTPD 8.0 and earlier...5.0 Medium
- odysseus blog blogCross-site scripting (XSS) vulnerability in blog.php in OdysseusBlog allows remote attackers to...6.8 Medium
- conti ftpserverDirectory traversal vulnerability in Conti FTPServer 1.0 Build 2.8 allows remote attackers to...5.0 Medium
- conti ftpserverConti FTPServer 1.0 Build 2.8 stores user passwords in cleartext in MyServerSettings.ini, which...4.6 Medium
- myodbcMyODBC Japanese conversion edition 3.51.06, 2.50.29, and 2.50.25 allows remote attackers to cause...7.8 High
- nec multiwriter 1700cThe FTP server in the NEC MultiWriter 1700C allows remote attackers to redirect traffic to other...7.8 High
- nec multiwriter 1700cThe web server in the NEC MultiWriter 1700C allows remote attackers to modify the device...7.5 High
- microsoft html help workshopStack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote...9.3 High
- oracle weblogic portalBEA WebLogic Portal 9.2, when running in a WebLogic Server clustered environment using WebLogic...6.8 Medium
- bea jrockit, weblogic server +1 moreUnspecified vulnerability in BEA WebLogic Platform and Server 8.1 through 8.1 SP5, and JRockit 1...7.5 High
- bea weblogic serverUnspecified vulnerability in the BEA WebLogic Server proxy plug-in for Netscape Enterprise Server...5.0 Medium
- oracle weblogic portalBEA WebLogic Portal 9.2 does not properly handle when an administrator deletes entitlements for a...4.4 Medium
- bea weblogic serverBEA WebLogic Server 9.0, 9.1, and 9.2 Gold, when running on Solaris 9, allows remote attackers to...5.0 Medium
- bea weblogic serverBEA WebLogic Server 6.1 through 6.1 SP7, and 7.0 through 7.0 SP7 allows remote attackers to cause...6.4 Medium
- bea weblogic serverBEA WebLogic Server 9.0, 9.1, and 9.2 Gold allows remote attackers to obtain sensitive...5.0 Medium
- bea weblogic serverThe BEA WebLogic Server proxy plug-in before June 2006 for the Apache HTTP Server does not...5.0 Medium
- bea weblogic serverBEA WebLogic Server 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, 9.0, and 9.1 does not enforce a...7.5 High
- bea weblogic serverBEA WebLogic Server 7.0 through 7.0 SP7, 8.1 through 8.1 SP5, 9.0, and 9.1, when using the...10.0 High
- bea weblogic serverThe WSEE runtime (WS-Security runtime) in BEA WebLogic Server 9.0 and 9.1 does not verify...7.5 High
- bea weblogic serverBEA WebLogic Server 8.1 through 8.1 SP5 does not properly enforce access control after a dynamic...5.0 Medium
- bea weblogic serverBEA WebLogic Server 6.1 through 6.1 SP7, 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, and 9.0 allows...5.0 Medium
- bea weblogic serverBEA WebLogic Server 8.1 through 8.1 SP5 stores cleartext data in a backup of config.xml after...4.4 Medium
- bea weblogic serverBEA WebLogic Server 6.1 through 6.1 SP7, 7.0 through 7.0 SP7, and 8.1 through 8.1 SP5 allows...5.0 Medium
- bea weblogic serverBEA WebLogic Server 8.1 through 8.1 SP5, 9.0, 9.1, and 9.2 Gold, when WS-Security is used, does...6.8 Medium
- bea weblogic serverUnspecified vulnerability in the thread management in BEA WebLogic 7.0 through 7.0 SP6, 8.1...5.0 Medium
- bea weblogic serverBEA WebLogic 7.0 through 7.0 SP6, 8.1 through 8.1 SP4, and 9.0 initial release does not encrypt...1.5 Low
- bea weblogic serverBEA Weblogic Server 8.1 through 8.1 SP4 does not properly validate client certificates when...7.5 High
- plain black webguiCross-site scripting (XSS) vulnerability in Operation/User.pm in Plain Black WebGUI before 7.3.5 ...6.8 Medium
- gxineMultiple buffer overflows in the (1) main function in (a) client.c, and the (2) server_setup and ...4.6 Medium
- django project djangoDjango Improper Access Control6.5 Medium
- django project djangoDjango Arbitrary Code Execution7.5 High
- apple mac os xUntrusted search path vulnerability in writeconfig in Apple Mac OS X 10.4.8 allows local users to...7.2 High
- apple ichatFormat string vulnerability in Apple iChat 3.1.6 allows remote attackers to cause a denial of...7.5 High
- easebay resources paypal subscription managerSQL injection vulnerability in admin/memberlist.php in Easebay Resources Paypal Subscription...7.5 High
- easebay resources paypal subscription managerCross-site scripting (XSS) vulnerability in admin/edit_member.php in Easebay Resources Paypal...6.8 Medium
- easebay resources login managerSQL injection vulnerability in admin/memberlist.php in Easebay Resources Login Manager 3.0 allows...7.5 High
- easebay resources login managerCross-site scripting (XSS) vulnerability in admin/memberlist.php in Easebay Resources Login...6.8 Medium
- simple machines forumMultiple cross-site scripting (XSS) vulnerabilities in index.php in Simple Machines Forum (SMF) 1...6.0 Medium
- arnotic a-forumMultiple cross-site scripting (XSS) vulnerabilities in forum.php3 in Arnaud Guyonne (aka Arnotic)...6.8 Medium
- cisco adaptive security appliance device manager, security monitoring analysis and response system +1 moreThe Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.3 and Adaptive...6.4 Medium
- hp hp-uxUnspecified vulnerability in HP-UX B.11.23, when running IPFilter in combination with PHNE_34474,...7.1 High
- comvironmentPHP remote file inclusion vulnerability in libraries/grab_globals.lib.php in ComVironment 4.0...7.5 High
- hp hp-uxHP HP-UX B11.11 does not properly verify the status of file descriptors before setuid execution,...4.6 Medium
- sun solarisSun Solaris 9 does not properly verify the status of file descriptors before setuid execution,...4.6 Medium
- ibm aixIBM AIX 5.3 does not properly verify the status of file descriptors before setuid execution,...4.6 Medium
- Show moreLoading…