Archive
21 November 2007
Vulnerabilities first published on this day (UTC), newest first.
7 results · Feed
-
Unscored —
AdventNet EventLog Analyzer build 4030 for Windows, and possibly other versions and platforms, installs a mysql instanc…
-
Unscored —CVE-2007-6078 Public exploit
Multiple SQL injection vulnerabilities in SkyPortal RC6 allow remote attackers to execute arbitrary SQL commands via un…
-
Unscored —CVE-2007-6079 Public exploit
Directory traversal vulnerability in include/common.php in bcoos 1.0.10 allows remote attackers to include and execute …
-
Unscored —CVE-2007-6080 Public exploit
SQL injection vulnerability in modules/banners/click.php in the banners module for bcoos 1.0.10 allows remote attackers…
-
Unscored —
CIM Server in IBM Director 5.20.1 and earlier allows remote attackers to cause a denial of service (CPU consumption, co…
-
Medium —
session fixation protection mechanism in cgi_process.rb in Rails
The session fixation protection mechanism in cgi_process.rb in Rails 1.2.4, as used in Ruby on Rails, removes the :cookie_only attribute from the DEFAULT_SESSION_OPTIONS constant, which effectively causes cookie_only to be applied only to the first instantiat…
-
Unscored —
Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local users to have an unkn…