Archive
18 December 2007
Vulnerabilities first published on this day (UTC), newest first.
13 results · Feed
-
Unscored —
Linux kernel 2.6.23 allows local users to create low pages in virtual userspace memory and bypass mmap_min_addr protect…
-
Unscored —
Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow…
-
Unscored —
The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before 2.0.0.CR3 allows remot…
-
Unscored —
Unspecified vulnerability in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset…
-
Unscored —
Stack-based buffer overflow in Novell GroupWise before 6.5.7, when HTML preview of e-mail is enabled, allows user-assis…
-
Unscored —
Stack-based buffer overflow in JSGCI.DLL in JustSystems Ichitaro 2005, 2006, and 2007 allows user-assisted remote attac…
-
Unscored —
exiftags before 1.01 allows attackers to cause a denial of service (infinite loop) via recursive IFD references in the …
-
Unscored —
Java in Mac OS X 10.4 through 10.4.11 allows remote attackers to bypass Keychain access controls and add or delete arbi…
-
Unscored —
registry.pl in Fonality Trixbox 2.0 PBX products, when running in certain environments, reads and executes a set of com…
-
Unscored —
Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows…
-
Unscored —CVE-2007-5583 Public exploit
Cisco IP Phone 7940 with firmware P0S3-08-7-00 allows remote attackers to cause a denial of service ("486 Busy" respons…
-
Unscored —
The shmem_getpage function (mm/shmem.c) in Linux kernel 2.6.11 through 2.6.23 does not properly clear allocated memory …
-
Unscored —
The libdspam7-drv-mysql cron job in Debian GNU/Linux includes the MySQL dspam database password in a command line argum…