CVEs published January 5, 2007
52 CVEs were published on January 5, 2007: 0 critical, 0 high.
- Published
- 52
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 52
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 52
- CVE-2006-6888P-News 1.16 and 1.17 store sensitive information under the web root with insufficient access control, which allows remote attackers to obtai
- CVE-2006-6889FreeStyle Wiki (fswiki) 3.6.2 and earlier stores sensitive information under the web root with insufficient access control, which allows rem
- CVE-2006-6890Voodoo chat 1.0RC1b stores sensitive information under the web root with insufficient access control, which allows remote attackers to downl
- CVE-2006-6891Vz (Adp) Forum 2.0.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obta
- CVE-2006-6892Cross-site scripting (XSS) vulnerability in the GetLocation function in online.php in Jonathon J.
- CVE-2007-0086The Apache HTTP Server, when accessed through a TCP connection with a large window size, allows remote attackers to cause a denial of servic
- CVE-2007-0087Microsoft Internet Information Services (IIS), when accessed through a TCP connection with a large window size, allows remote attackers to c
- CVE-2007-0088Multiple directory traversal vulnerabilities in openmedia allow remote attackers to read arbitrary files via a ..
- CVE-2007-0089jgbbs stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database
- CVE-2007-0090WineGlass stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a data
- CVE-2007-0091newsCMSlite stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a da
- CVE-2007-0092SQL injection vulnerability in productdetail.asp in E-SMARTCART 1.0 allows remote attackers to execute arbitrary SQL commands via the produc
- CVE-2007-0093SQL injection vulnerability in page.php in Simple Web Content Management System allows remote attackers to execute arbitrary SQL commands vi
- CVE-2007-0094Sven Moderow GuestBook 0.3a stores sensitive information under the web root with insufficient access control, which allows remote attackers
- CVE-2007-0095phpMyAdmin 2.9.1.1 allows remote attackers to obtain sensitive information via a direct request for themes/darkblue_orange/layout.inc.php, w
- CVE-2007-0096CarbonCommunities stores sensitive information under the web root with insufficient access control, which allows remote attackers to downloa
- CVE-2007-0097Multiple stack-based buffer overflows in the (1) LoadTree and (2) ReadHeader functions in PAISO.DLL 1.7.3.0 (1.7.3 beta) in ConeXware PowerA
- CVE-2007-0098Directory traversal vulnerability in language.php in VerliAdmin 0.3 and earlier, when magic_quotes_gpc is disabled, allows remote attackers
- CVE-2006-6881Buffer overflow in the Get_Wep function in cofvnet.c for ATMEL Linux PCI PCMCIA USB Drivers drivers 3.4.1.1 corruption allows attackers to e
- CVE-2006-6882Cross-site scripting (XSS) vulnerability in golden book allows remote attackers to inject arbitrary web script or HTML via unspecified vecto
- CVE-2006-6883PHP remote file inclusion vulnerability in php4you.php in PHPIrc_bot 0.2 allows remote attackers to execute arbitrary PHP code via a URL in
- CVE-2006-6884Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 Build 6667 a
- CVE-2006-6885An ActiveX control in SwDir.dll in Macromedia Shockwave 10 allows remote attackers to cause a denial of service (Internet Explorer 7 crash)
- CVE-2006-6886phpwcms 1.2.5-DEV allows remote attackers to obtain sensitive information via a direct request for (1) files.public-userroot.inc.php or (2)
- CVE-2006-6887Unrestricted file upload vulnerability in logahead UNU 1.0 allows remote attackers to upload and execute arbitrary PHP code via unspecified
- CVE-2007-0075AspBB stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database
- CVE-2007-0076Openforum stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a data
- CVE-2007-0077lblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database
- CVE-2007-0078BattleBlog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a dat
- CVE-2007-0079rblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database
- CVE-2007-0080Buffer overflow in the SMB_Connect_Server function in FreeRadius 1.1.3 and earlier allows attackers to execute arbitrary code related to the
- CVE-2007-0081Sunbelt Kerio Personal Firewall (SKPF) 4.3.268 and 4.3.246, and possibly other versions allows local users to provide a Trojan horse iphlpap
- CVE-2007-0082users_adm/start1.php in IMGallery 2.5 and earlier does not properly handle files with multiple extensions, which allows remote authenticated
- CVE-2007-0083Cross-site scripting (XSS) vulnerability in Nuked Klan 1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via a
- CVE-2007-0084Buffer overflow in the Windows NT Message Compiler (MC) 1.00.5239 on Microsoft Windows XP allows local users to gain privileges via a long M
- CVE-2007-0085Unspecified vulnerability in sys/dev/pci/vga_pci.c in the VGA graphics driver for wscons in OpenBSD 3.9 and 4.0, when the kernel is compiled
- CVE-2003-1316mod.php in eNdonesia 8.2 allows remote attackers to obtain sensitive information via a ' (quote) value in the lng parameter, which reveals t
- CVE-2003-1317Cross-site scripting (XSS) vulnerability in mod.php in eNdonesia 8.2 allows remote attackers to inject arbitrary web script or HTML via the
- CVE-2004-2670Multiple cross-site scripting (XSS) vulnerabilities in mod.php in eNdonesia 8.3 allow remote attackers to inject arbitrary web script or HTM
- CVE-2004-2671mod.php in eNdonesia 8.3 allows remote attackers to obtain sensitive information via certain direct requests, and certain requests with inva
- CVE-2006-6871Multiple cross-site scripting (XSS) vulnerabilities in eNdonesia 8.4 allow remote attackers to inject arbitrary web script or HTML via (1) t
- CVE-2006-6872Directory traversal vulnerability in mod.php in eNdonesia 8.4 allows remote attackers to read arbitrary files via a ..
- CVE-2006-6873Multiple SQL injection vulnerabilities in mod.php in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL commands via (1) the did
- CVE-2006-6874Multiple cross-site scripting (XSS) vulnerabilities in friend.php in eNdonesia 8.4 allow remote attackers to inject arbitrary web script or
- CVE-2006-6875Buffer overflow in the validateospheader function in the Open Settlement Protocol (OSP) module in OpenSER 1.1.0 and earlier allows remote at
- CVE-2006-6876Buffer overflow in the fetchsms function in the SMS handling module (libsms_getsms.c) in OpenSER 1.2.0 and earlier allows remote attackers t
- CVE-2006-6877Directory traversal vulnerability in index.php in Matteo Lucarelli 3editor CMS 0.42 and earlier, when register_globals is enabled, allows re
- CVE-2006-6878admin/uploads.php in PHP-Update 2.7 and earlier allows remote attackers to gain privileges by setting the rights[7] parameter to 1 during a
- CVE-2006-6879Unrestricted file upload vulnerability in admin/uploads.php in PHP-Update 2.7 and earlier allows remote authenticated users to upload arbitr
- CVE-2006-6880Multiple SQL injection vulnerabilities in code/guestadd.php in PHP-Update 2.7 and earlier allow remote attackers to execute arbitrary SQL co
- CVE-2006-6870The consume_labels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of service (infinite loop)
- CVE-2007-0059Cross-zone scripting vulnerability in Apple Quicktime 3 to 7.1.3 allows remote user-assisted attackers to execute arbitrary code and list fi