Archive
20 November 2007
Vulnerabilities first published on this day (UTC), newest first.
45 results · Feed
-
Unscored —
The (1) ipq_read and (2) ipulog_read functions in iptables allow local users to cause a denial of service by sending sp…
-
Unscored —
irc-channel.c in ngIRCd before 0.10.3 allows remote attackers to cause a denial of service (crash) via a JOIN command w…
-
Unscored —
Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that di…
-
Unscored —
Javamail does not properly handle a series of invalid login attempts in which the same e-mail address is entered as use…
-
Unscored —
Unspecified vulnerability in (1) DB2WATCH and (2) DB2FREEZE in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and a…
-
Unscored —CVE-2007-6054 Public exploit
Cross-site scripting (XSS) vulnerability in the login page in the management interface in the Aruba 800 Mobility Contro…
-
Unscored —
IBM DB2 UDB 9.1 before Fixpak 4 does not properly perform vector aggregation, which might allow attackers to cause a de…
-
Unscored —
Multiple unspecified vulnerabilities in IBM WebSphere MQ 6.0 have unknown impact and remote attack vectors involving "m…
-
Unscored —CVE-2007-6057 Public exploit
PHP remote file inclusion vulnerability in index.php in datecomm Social Networking Script (aka Myspace Clone Script) al…
-
Unscored —CVE-2007-6056 Public exploit
frame.html in Aida-Web (Aida Web) allows remote attackers to bypass a protection mechanism and obtain comment and task …
-
Unscored —CVE-2007-6055 Public exploit
Cross-site scripting (XSS) vulnerability in c/portal/login in Liferay Portal 4.1.0 and 4.1.1 allows remote attackers to…
-
Unscored —
IBM DB2 UDB 9.1 before Fixpak 4 uses incorrect permissions on ACLs for DB2NODES.CFG, which has unknown impact and attac…
-
Unscored —
Unspecified vulnerability in DB2LICD in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack vectors, related …
-
Unscored —
AhnLab Antivirus 3 Internet Security 2008 Platinum appends data to a filename string at a location indicated by the "Fi…
-
Unscored —CVE-2007-6058 Public exploit
Multiple SQL injection vulnerabilities in index.php in ProfileCMS 1.0 and earlier allow remote attackers to execute arb…
-
Unscored —
IBM DB2 UDB 9.1 before Fixpak 4 assigns incorrect privileges to the (1) DB2ADMNS and (2) DB2USERS alternative groups, w…
-
Unscored —
Unspecified vulnerability in the DB2DART tool in IBM DB2 UDB 9.1 before Fixpak 4 allows attackers to execute arbitrary …
-
Unscored —
Unspecified vulnerability in unspecified setuid programs in IBM DB2 UDB 9.1 before Fixpak 4 allows local users to have …
-
Unscored —
IBM DB2 UDB 9.1 before Fixpak 4 does not properly handle use of large numbers of file descriptors, which might allow at…
-
Unscored —
Unspecified vulnerability in the SSL LOAD GSKIT action in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack…
-
Unscored —CVE-2007-6041 Public exploit
Buffer overflow in the Sequencer::queueMessage function in sequencer.cpp in the server in Rigs of Rods (RoR) before 0.3…
-
Unscored —
PHP remote file inclusion vulnerability in fehler.inc.php in SWSoft Confixx Professional 3.2.1 allows remote attackers …
-
Unscored —CVE-2007-6039 Public exploit
PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a long st…
-
Unscored —
The CryptGenRandom function in Microsoft Windows 2000 generates predictable values, which makes it easier for context-d…
-
Unscored —
The Belkin F5D7230-4 Wireless G Router allows remote attackers to cause a denial of service (degraded networking and lo…
-
Unscored —
The Communication Server in Alcatel-Lucent OmniPCX Enterprise 7.1 and earlier caches an IP address during a TFTP reques…
-
Unscored —
The output_add_rewrite_var function in PHP before 5.2.5 rewrites local forms in which the ACTION attribute references a…
-
Unscored —
PHP before 5.2.5 allows local users to bypass protection mechanisms configured through php_admin_value or php_admin_fla…
-
Unscored —
The (1) htmlentities and (2) htmlspecialchars functions in PHP before 5.2.5 accept partial multibyte sequences, which h…
-
Unscored —
PHP remote file inclusion vulnerability in xajax_functions.php in the JUser (com_juser) 1.0.14 component for Joomla! al…
-
Unscored —
SQL injection vulnerability in graph.php in Cacti before 0.8.7a allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2007-6036 Public exploit
The parseRTSPRequestString function in LIVE555 Media Server 2007.11.01 and earlier allows remote attackers to cause a d…
-
Unscored —CVE-2007-6037 Public exploit
Cross-site scripting (XSS) vulnerability in ws/generic_api_call.pl in Citrix NetScaler 8.0 build 47.8 allows remote att…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the failed login page in Novell iChain before 2.2 build 2.2.113 and 2.3 Fir…
-
Unscored —
Unspecified vulnerability in VanDyke VShell 3.0.1 allows remote attackers to cause a denial of service via unspecified …
-
Unscored —
Invensys Wonderware InTouch 8.0 creates a NetDDE share with insecure permissions (Everyone/Full Control), which allows …
-
Unscored —
Unspecified vulnerability in ClamAV 0.91.1 and 0.91.2 allows remote attackers to execute arbitrary code via a crafted e…
-
Unscored —
Unspecified vulnerability in Weird Solutions BOOTPTurbo 1.2 has unknown impact and remote attack vectors. NOTE: this in…
-
Unscored —CVE-2007-6032 Public exploit
SQL injection vulnerability in calendar/page.asp in Aleris Web Publishing Server 3.0 allows remote attackers to execute…
-
Unscored —
The wait_task_stopped function in the Linux kernel before 2.6.23.8 checks a TASK_TRACED bit instead of an exit_state va…