CVEs published in January 2007
594 vulnerabilities, 54 critical, 0 exploited.
- drupal acidfreeSQL injection vulnerability in the Acidfree module for Drupal before 4.6.x-1.0, and before 4.7.x...6.0 Medium
- drupal project, project issue tracking module +1 moreThe project_issue_access function in the Project issue tracking 4.7.0 through 5.x before 20070123...6.0 Medium
- drupal project, project issue tracking module +1 moreUnrestricted file upload vulnerability in the Project issue tracking 4.7.0 through 5.x before...8.5 High
- vote pro proEval injection vulnerability in poll_frame.php in Vote! Pro 4.0, and possibly other scripts,...10.0 High
- sun solaris, sunos +1 moreUnspecified vulnerability in kcms_calibrate in Sun Solaris 8 and 9 before 20071122 allows local...6.9 Medium
- webspellSQL injection vulnerability in gallery.php in webSPELL 4.01.02 allows remote attackers to execute...7.5 High
- mafia scum tools scum toolsPHP remote file inclusion vulnerability in index.php in Mafia Scum Tools 2.0.0 in Matthew Wardrop...6.8 Medium
- bradabraPHP remote file inclusion vulnerability in include/includes.php in Bradabra 2.0.5 and earlier...7.5 High
- sangwan kim phpindexpagePHP remote file inclusion vulnerability in config.php in Sangwan Kim phpIndexPage 1.0.1 and...6.8 Medium
- sky gunning myspeachPHP remote file inclusion vulnerability in up.php in MySpeach 2.1 beta and possibly earlier...7.5 High
- upload-servicePHP remote file inclusion vulnerability in upload/top.php in Upload-Service 1.0, when...6.8 Medium
- neon labs websitePHP remote file inclusion vulnerability in lib/nl/nl.php in Neon Labs Website (nlws) 3.2 and...10.0 High
- phpsherpaPHP remote file inclusion vulnerability in include/config.inc.php in PhpSherpa allows remote...10.0 High
- isc bindISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to...4.3 Medium
- isc bindUse-after-free vulnerability in ISC BIND 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to...7.8 High
- webspellMultiple SQL injection vulnerabilities in gallery.php in webSPELL 4.01.02 and earlier allow...7.5 High
- sky gunning myspeachPHP remote file inclusion vulnerability in up.php in Sky GUNNING MySpeach 3.0.6 and earlier...6.8 Medium
- open-realtyindex.php in Open-Realty 2.3.4 allows remote attackers to obtain sensitive information (the full...5.0 Medium
- visohotlinkPHP remote file inclusion vulnerability in includes/functions.visohotlink.php in VisoHotlink 1.01...6.8 Medium
- huawei versatile routing platformThe Huawei Versatile Routing Platform 1.43 2500E-003 firmware on the Quidway R1600 Router, and...5.0 Medium
- zoneo-soft freeforum** DISPUTED ** PHP remote file inclusion vulnerability in index.php in FreeForum 0.9.0 allows...7.5 High
- phpadsnew** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in Openads (aka phpAdsNew) 2.0...7.5 High
- webchat.org webchatPHP remote file inclusion vulnerability in defines.php in WebChat 0.77 allows remote attackers to...7.5 High
- enthusiastMultiple SQL injection vulnerabilities in Enthusiast 3.1 allow remote attackers to execute...7.5 High
- enthusiastMultiple cross-site scripting (XSS) vulnerabilities in Enthusiast 3.1 allow remote attackers to...6.8 Medium
- sun ray server softwarecgi-bin/main in Sun Ray Server Software 2.0 and 3.0 before 20070123 allows local users to obtain...4.6 Medium
- cisco ios transmission control protocolCisco IOS allows remote attackers to cause a denial of service (crash) via a crafted IPv6 Type 0...7.8 High
- cisco ios transmission control protocolCisco IOS 9.x, 10.x, 11.x, and 12.x and IOS XR 2.0.x, 3.0.x, and 3.2.x allows remote attackers to...10.0 High
- cisco ios transmission control protocolMemory leak in the TCP listener in Cisco IOS 9.x, 10.x, 11.x, and 12.x allows remote attackers to...7.8 High
- apple safari, webcore +1 moreWebCore on Apple Mac OS X 10.3.9 and 10.4.10, as used in Safari, does not properly parse HTML...4.3 Medium
- openadsCross-site scripting (XSS) vulnerability in Openads 2.0.x before 2.0.10, 2.3 before 2.3.31 (aka...6.8 Medium
- gentoo linuxThe gencert.sh script, when installing OpenLDAP before 2.1.30-r10, 2.2.x before 2.2.28-r7, and 2...4.6 Medium
- ca host-based intrusion prevention systemComputer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4...7.2 High
- citrix metaframe, metaframe presentation server +1 moreStack-based buffer overflow in the print provider library (cpprov.dll) in Citrix Presentation...7.2 High
- americanshareware mp3 wav converter, audio edit magic edit magic, bearshare +77 more +79 moreStack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll),...9.3 High
- gnome gtkThe GdkPixbufLoader function in GIMP ToolKit (GTK+) in GTK 2 (gtk2) before 2.4.13 allows context...2.1 Low
- checkpoint connectra ngxsre/params.php in the Integrity Clientless Security (ICS) component in Check Point Connectra NGX...7.5 High
- sun solaris, sunos +1 moreMultiple unspecified vulnerabilities in tip in Sun Solaris 8, 9, and 10 allow local users to gain...7.2 High
- rubyforge rubygemsRubyGems file overwrite vulnerability9.3 High
- microsoft visual studioStack-based buffer overflow in rcdll.dll in msdev.exe in Visual C++ (MSVC) in Microsoft Visual...6.8 Medium
- dazukoMultiple memory leaks in the Dazuko anti-virus helper module before 2.3.2 allow attackers to...5.0 Medium
- suse linuxMultiple buffer overflows in ulogd for SUSE Linux 9.3 up to 10.1, and possibly other...10.0 High
- apple mac os xThe CFUserNotificationSendRequest function in UserNotificationCenter.app in Apple Mac OS X 10.4.8...6.9 Medium
- panic transmit transmitHeap-based buffer overflow in the SFTP protocol handler for Panic Transmit (Transmit.app) up to 3...9.3 High
- broadcom business protection suite, desktop management suite, brightstor arcserve backup laptops desktops +2 more +4 moreMultiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and...10.0 High
- andrew morgan linux pampam_unix.so in Linux-PAM 0.99.7.0 allows context-dependent attackers to log into accounts whose...7.2 High
- ibm os 400Unspecified vulnerability in IBM OS/400 R530 and R535 has unknown impact and remote attack...5.0 Medium
- hp openview network node managerUnspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 6.20, 6.4x, 7.01, and 7.50...5.1 Medium
- t-com speedport 500v, speedport 500v firmware +1 moreT-Com Speedport 500V routers with firmware 1.31 allow remote attackers to bypass authentication...7.5 High
- bea aqualogic enterprise securityBEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2 does not...4.6 Medium
- Show moreLoading…