Archive
November 2007
Vulnerabilities first published in this month (UTC), newest first.
478 results · Feed
-
Unscored —CVE-2003-1536 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Codeworx Technologies DCP-Portal 5.3.1 allow remote attackers to…
-
Unscored —CVE-2003-1535 Public exploit
Justice Guestbook 1.3 allows remote attackers to obtain the full installation path via a direct request to cfooter.php3…
-
Unscored —
Cross-site scripting (XSS) vulnerability in jgb.php3 in Justice Guestbook 1.3 allows remote attackers to inject arbitra…
-
Unscored —CVE-2007-4517 Public exploit
Buffer overflow in the XDB.XDB_PITRIG_PKG.PITRIG_DROPMETADATA procedure in Oracle 10g R2 allows remote authenticated us…
-
Unscored —
Mozilla Firefox 2.0.0.9 allows remote attackers to cause a denial of service (CPU consumption and crash) via an iframe …
-
Unscored —
SQL injection vulnerability in okxLOV.jsp in Oracle E-Business Suite 11 and 12 allows remote attackers to execute arbit…
-
Unscored —
nsr_shutdown in Fujitsu Siemens NetWorker 6.0 allows local users to overwrite arbitrary files via a symlink attack on t…
-
Unscored —
CoolKey 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files in the /tmp/.pk11…
-
Unscored —
Dbgv.sys in Microsoft Sysinternals DebugView before 4.72 provides an unspecified mechanism for copying data into kernel…
-
Unscored —
gforge 3.1 and 4.5.14 allows local users to truncate arbitrary files via a symlink attack on temporary files.
-
Unscored —
Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in popple…
-
Unscored —
Stack-based buffer overflow in the separate_word function in tokenize.c in Link Grammar 4.1b and possibly other version…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in mpweb/scripts/mpx.dll in Cisco Unified MeetingPlace 5.4 and earl…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in jsp/Login.do in ManageEngine OpManager MSP Edition and OpManager…
-
Unscored —
Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute ar…
-
Unscored —
Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attac…
-
Unscored —CVE-2007-5892 EPSS 17%
Stack-based buffer overflow in the pdg2.dll ActiveX control in SSReader 4.0 and earlier allow remote attackers to execu…
-
Unscored —
HTTPSocket.cpp in the C++ Sockets Library before 2.2.5 allows remote attackers to cause a denial of service (crash) via…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in IDMOS 1.0 Alpha (aka Phoenix) allow remote attackers to execute a…
-
Unscored —CVE-2007-5890 Public exploit
Directory traversal vulnerability in index.php in easyGB 2.1.1 allows remote attackers to include arbitrary files via t…
-
Unscored —
Cross-site scripting (XSS) vulnerability in displayecard.php in Coppermine Photo Gallery (CPG) before 1.4.14 allows rem…
-
Unscored —CVE-2007-5887 Public exploit
SQL injection vulnerability in boards/printer.asp in ASP Message Board 2.2.1c allows remote attackers to execute arbitr…
-
Critical 9.8
Plone Arbitrary Code Execution via Unsafe Handling of Pickles
Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes.
-
Unscored —
Perl-Compatible Regular Expression (PCRE) library before 7.3 reads past the end of the string when searching for unmatc…
-
Unscored —
Perl-Compatible Regular Expression (PCRE) library before 7.3 backtracks too far when matching certain input bytes again…
-
Unscored —
Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes for unspecified "multipl…
-
Unscored —
Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to cause a denial of se…
-
Unscored —
Multiple integer overflows in Perl-Compatible Regular Expression (PCRE) library before 7.3 allow context-dependent atta…
-
Unscored —
Stack-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an inva…
-
Unscored —CVE-2007-4676 EPSS 47%
Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via malforme…
-
Unscored —CVE-2007-4677 EPSS 47%
Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an inval…
-
Unscored —
Perl-Compatible Regular Expression (PCRE) library before 7.3 does not properly compute the length of (1) a \p sequence,…
-
Unscored —CVE-2007-4675 EPSS 33%
Heap-based buffer overflow in the QuickTime VR extension 7.2.0.240 in QuickTime.qts in Apple QuickTime before 7.3 allow…
-
Unscored —
Heap-based buffer overflow in Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent att…
-
Unscored —
Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via crafted …
-
Unscored —CVE-2007-3751 EPSS 26%
Unspecified vulnerability in QuickTime for Java in Apple QuickTime before 7.3 allows remote attackers to execute arbitr…
-
Unscored —
Unspecified vulnerability in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via a crafted…
-
Unscored —
Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows conte…
-
Unscored —
Certificate Server 7.2 in Red Hat Certificate System (RHCS) does not properly handle new revocations that occur while a…
-
Unscored —CVE-2007-5844 Public exploit
Directory traversal vulnerability in inc/includes.inc in GuppY 4.6.3 allows remote attackers to include and execute arb…