Archive
November 2007
Vulnerabilities first published in this month (UTC), newest first.
478 results · Feed
-
Unscored —
Memory leak in the Red Hat Content Accelerator kernel patch in Red Hat Enterprise Linux (RHEL) 4 and 5 allows local use…
-
Unscored —
The web management interface in Citrix NetScaler 8.0 build 47.8 stores the device's primary IP address in a cookie, whi…
-
Unscored —
The "internal state tracking" code for the random and urandom devices in FreeBSD 5.5, 6.1 through 6.3, and 7.0 beta 4 a…
-
Unscored —CVE-2007-6187 Public exploit
Multiple directory traversal vulnerabilities in PHP Content Architect (aka NoAh) 0.9 pre 1.2 and earlier allow remote a…
-
Unscored —
The HTTP daemon in the Cisco Unified IP Phone, when the Extension Mobility feature is enabled, allows remote authentica…
-
Unscored —
SQL injection vulnerability in the Call Detail Record Postgres logging engine (cdr_pgsql) in Asterisk 1.4.x before 1.4.…
-
Unscored —
SQL injection vulnerability in the Postgres Realtime Engine (res_config_pgsql) in Asterisk 1.4.x before 1.4.15 and C.x …
-
Unscored —CVE-2007-6189 Public exploit
A certain ActiveX control in (1) OScan8.ocx and (2) Oscan81.ocx in BitDefender Online Anti-Virus Scanner 8.0 allows rem…
-
Unscored —CVE-2007-6191 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Armin Burger p.mapper 3.2.0 beta3 allow remote attackers to execu…
-
Unscored —
The web management interface in Citrix NetScaler 8.0 build 47.8 uses weak encryption (XOR of unpadded data) to store cr…
-
Unscored —CVE-2007-6188 Public exploit
Multiple directory traversal vulnerabilities in TuMusika Evolution 1.7R5 allow remote attackers to include and execute …
-
Unscored —
Multiple integer overflows in Cairo before 1.4.12 might allow remote attackers to execute arbitrary code, as demonstrat…
-
Unscored —CVE-2007-6177 Public exploit
PHP remote file inclusion vulnerability in Exchange/include.php in PHP_CON 1.3 allows remote attackers to execute arbit…
-
Unscored —CVE-2007-6176 Public exploit
kb_whois.cgi in K+B-Bestellsystem (aka KB-Bestellsystem) allows remote attackers to execute arbitrary commands via shel…
-
Unscored —CVE-2007-6184 Public exploit
Directory traversal vulnerability in index.php in Project Alumni 1.0.9 allows remote attackers to include and execute a…
-
Unscored —
PHPDevShell before 0.7.0 allows remote authenticated users to gain privileges via a crafted request to update a user pr…
-
Unscored —CVE-2007-6178 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Easy Hosting Control Panel for Ubuntu (EHCP) 0.22.8 and earlier a…
-
Unscored —
Heap-based buffer overflow in cygwin1.dll in Cygwin 1.5.7 and earlier allows context-dependent attackers to execute arb…
-
Unscored —CVE-2007-6173 Public exploit
Cross-site scripting (XSS) vulnerability in c/portal/login in Liferay Enterprise Portal 4.3.1 allows remote attackers t…
-
Unscored —
Unspecified vulnerability in PHPDevShell before 0.7.0 has unknown impact and attack vectors, involving a "minor securit…
-
Unscored —CVE-2007-6185 Public exploit
Directory traversal vulnerability in users/files.php in Eurologon CMS allows remote attackers to read arbitrary files v…
-
Medium —
gtk2 vulnerable to Use of Externally-Controlled Format String
Format string vulnerability in the mdiag_initialize function in gtk/src/rbgtkmessagedialog.c in Ruby-GNOME 2 (aka Ruby/Gnome2) 0.16.0, and SVN versions before 20071127, allows context-dependent attackers to execute arbitrary code via format string specifiers …
-
Unscored —
Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive…
-
Unscored —CVE-2007-6172 Public exploit
Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the i…
-
Unscored —
Race condition in the Remote Procedure Call kernel module (rpcmod) in Sun Solaris 8 through 10 allows local users to ca…
-
Unscored —CVE-2007-6179 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Charray's CMS 0.9.3 allow remote attackers to execute arbitrary P…
-
Unscored —CVE-2007-6182 Public exploit
The responder program in ISPsystem ISPmanager (aka ISPmgr) 4.2.15.1 allows local users to gain privileges via shell met…
-
Unscored —
Multiple integer overflows in the Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 1…
-
Unscored —
The Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 and 11.0.6.…
-
Unscored —CVE-2007-6164 Public exploit
Multiple SQL injection vulnerabilities in Eurologon CMS allow remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2007-6160 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Tilde CMS 4.x and earlier allows remote attackers to inject ar…
-
Unscored —CVE-2007-6159 Public exploit
SQL injection vulnerability in index.php in Tilde CMS 4.x and earlier allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2007-6158 Public exploit
Multiple SQL injection vulnerabilities in caladmin.inc.php in Proverbs Web Calendar 1.1 and earlier allow remote attack…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in base_qry_main.php in Base Analysis and Security Engine (BASE) be…
-
Unscored —CVE-2007-6157 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in SimpleGallery 0.1.3 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2007-6163 Public exploit
SQL injection vulnerability in admin/index2.asp in GOUAE DWD Realty allows remote attackers to execute arbitrary SQL co…
-
Unscored —
Untrusted search path vulnerability in yast2-core in SUSE Linux might allow local users to execute arbitrary code by cr…
-
Unscored —
Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Ma…
-
Unscored —CVE-2007-6162 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in FMDeluxe 2.1.0 allows remote attackers to inject arbitrary web…
-
Unscored —
SQL injection vulnerability in default.asp in VU Case Manager allows remote attackers to execute arbitrary SQL commands…