Skip to content
OpenAdvisories

Archive

21 November 2007

Vulnerabilities first published on this day (UTC), newest first.

7 results · Feed

  • Unscored —

    AdventNet EventLog Analyzer build 4030 for Windows, and possibly other versions and platforms, installs a mysql instanc…

  • Unscored —
    CVE-2007-6078 Public exploit

    Multiple SQL injection vulnerabilities in SkyPortal RC6 allow remote attackers to execute arbitrary SQL commands via un…

  • Unscored —
    CVE-2007-6079 Public exploit

    Directory traversal vulnerability in include/common.php in bcoos 1.0.10 allows remote attackers to include and execute …

  • Unscored —
    CVE-2007-6080 Public exploit

    SQL injection vulnerability in modules/banners/click.php in the banners module for bcoos 1.0.10 allows remote attackers…

  • Unscored —

    CIM Server in IBM Director 5.20.1 and earlier allows remote attackers to cause a denial of service (CPU consumption, co…

  • Medium —

    session fixation protection mechanism in cgi_process.rb in Rails

    The session fixation protection mechanism in cgi_process.rb in Rails 1.2.4, as used in Ruby on Rails, removes the :cookie_only attribute from the DEFAULT_SESSION_OPTIONS constant, which effectively causes cookie_only to be applied only to the first instantiat…

  • Unscored —

    Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local users to have an unkn…