Archive
November 2007
Vulnerabilities first published in this month (UTC), newest first.
478 results · Feed
-
Unscored —
Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) allow remote attackers to cause a denial of servi…
-
Unscored —
The MEGACO dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a denial of ser…
-
Unscored —CVE-2007-6113 Public exploit
Integer signedness error in the DNP3 dissector in Wireshark (formerly Ethereal) 0.10.12 to 0.99.6 allows remote attacke…
-
Unscored —CVE-2007-6105 Public exploit
Multiple PHP remote file inclusion vulnerabilities in TalkBack 2.2.7 allow remote attackers to execute arbitrary PHP co…
-
Unscored —
Buffer overflow in the PPP dissector Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of …
-
Unscored —CVE-2007-6103 Public exploit
I Hear U (IHU) 0.5.6 and earlier allows remote attackers to cause (1) a denial of service (infinite loop) via a packet …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Instant Web Publishing feature in FileMaker Pro 7 and 8, Server 7 and 8…
-
Unscored —
Wireshark (formerly Ethereal) 0.8.16 to 0.99.6 allows remote attackers to cause a denial of service (crash) via a malfo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in libraries/auth/cookie.auth.lib.php in phpMyAdmin before 2.11.2.2, when logi…
-
Unscored —
The DCP ETSI dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (lo…
-
Unscored —CVE-2007-6086 Public exploit
Directory traversal vulnerability in index.php in VigileCMS 1.4 allows remote attackers to include and execute arbitrar…
-
Unscored —CVE-2007-6088 Public exploit
PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBBViet 02.03.07 and earlier allows rem…
-
Unscored —CVE-2007-6091 Public exploit
Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System (JBS) 2.0, and possibly JiRo's Upload…
-
Unscored —
Unspecified vulnerability in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 might leave "media pinholes" open …
-
Unscored —
Ingate Firewall before 4.6.0 and SIParator before 4.6.0 use cleartext storage for passwords of "administrators with les…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in Nuked-Klan 1.7.5 allows remote attackers to inject arbitrary w…
-
Unscored —
Unspecified vulnerability in the ICMP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unk…
-
Unscored —CVE-2007-6082 Public exploit
Direct static code injection vulnerability in acp/savenews.php in Sciurus Hosting Panel, possibly 2.0.3, allows remote …
-
Unscored —CVE-2007-6085 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in VigileCMS 1.4 allow remote attackers to inject arbi…
-
Unscored —
The IPsec module in the VPN component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attacker…
-
Unscored —CVE-2007-6089 Public exploit
PHP remote file inclusion vulnerability in index.php in meBiblio 0.4.5 allows remote attackers to execute arbitrary PHP…
-
Unscored —
Ingate Firewall before 4.6.0 and SIParator before 4.6.0 do not log truncated (1) ICMP, (2) UDP, and (3) TCP packets, wh…
-
Unscored —CVE-2007-6083 Public exploit
SQL injection vulnerability in admin/index.php in IceBB 1.0-rc6 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —
The SRTP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a d…
-
Unscored —CVE-2007-6084 Public exploit
SQL injection vulnerability in software-description.php in HotScripts Clone Script allows remote attackers to execute a…
-
Unscored —CVE-2007-6087 Public exploit
Cross-site request forgery (CSRF) vulnerability in index.php in VigileCMS 1.4 allows remote attackers to change the adm…
-
Unscored —
The SIP component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0, when Remote NAT Traversal is employed, do…
-
Unscored —
Buffer overflow in libsrtp in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and attack vec…
-
Unscored —
AdventNet EventLog Analyzer build 4030 for Windows, and possibly other versions and platforms, installs a mysql instanc…
-
Unscored —CVE-2007-6078 Public exploit
Multiple SQL injection vulnerabilities in SkyPortal RC6 allow remote attackers to execute arbitrary SQL commands via un…
-
Unscored —CVE-2007-6079 Public exploit
Directory traversal vulnerability in include/common.php in bcoos 1.0.10 allows remote attackers to include and execute …
-
Unscored —CVE-2007-6080 Public exploit
SQL injection vulnerability in modules/banners/click.php in the banners module for bcoos 1.0.10 allows remote attackers…
-
Unscored —
CIM Server in IBM Director 5.20.1 and earlier allows remote attackers to cause a denial of service (CPU consumption, co…
-
Medium —
session fixation protection mechanism in cgi_process.rb in Rails
The session fixation protection mechanism in cgi_process.rb in Rails 1.2.4, as used in Ruby on Rails, removes the :cookie_only attribute from the DEFAULT_SESSION_OPTIONS constant, which effectively causes cookie_only to be applied only to the first instantiat…
-
Unscored —
Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local users to have an unkn…
-
Unscored —
The (1) ipq_read and (2) ipulog_read functions in iptables allow local users to cause a denial of service by sending sp…
-
Unscored —
irc-channel.c in ngIRCd before 0.10.3 allows remote attackers to cause a denial of service (crash) via a JOIN command w…
-
Unscored —
Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that di…
-
Unscored —
Javamail does not properly handle a series of invalid login attempts in which the same e-mail address is entered as use…
-
Unscored —
Unspecified vulnerability in (1) DB2WATCH and (2) DB2FREEZE in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and a…