Archive
December 2007
Vulnerabilities first published in this month (UTC), newest first.
436 results · Feed
-
Unscored —CVE-2007-6230 Public exploit
Directory traversal vulnerability in common/classes/class_HeaderHandler.lib.php in Rayzz Script 2.0 allows remote attac…
-
Unscored —CVE-2007-6228 Public exploit
Stack-based buffer overflow in the Helper class in the yt.ythelper.2 ActiveX control in Yahoo! Toolbar 1.4.1 allows rem…
-
Unscored —CVE-2007-6237 Public exploit
cp.php in DeluxeBB 1.09 does not verify that the membercookie parameter corresponds to the authenticated member during …
-
Unscored —CVE-2007-6235 Public exploit
A certain ActiveX control in RealNetworks RealPlayer 11 allows remote attackers to cause a denial of service (applicati…
-
Unscored —CVE-2007-6227 Public exploit
QEMU 0.9.0 allows local users of a Windows XP SP2 guest operating system to overwrite the TranslationBlock (code_gen_bu…
-
Unscored —CVE-2007-6233 Public exploit
Directory traversal vulnerability in index.php in FTP Admin 0.1.0 allows remote authenticated users to include and exec…
-
Unscored —CVE-2007-6223 Public exploit
SQL injection vulnerability in garage.php in phpBB Garage 1.2.0 Beta3 allows remote attackers to execute arbitrary SQL …
-
Unscored —
The CheckCustomerAccess function in functions.php in CRM-CTT Interleave before 4.2.0 (formerly CRM-CTT) does not proper…
-
Unscored —CVE-2007-6218 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Ossigeno CMS 2.2 pre1 allow remote attackers to execute arbitrary…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM Tivoli Netcool Security Manager 1.3.0 allows remote attackers to inject…
-
Unscored —CVE-2007-6221 Public exploit
TuMusika Evolution 1.7R5 allows remote attackers to obtain configuration information via a direct request to phpinfo.ph…
-
Unscored —
typespeed before 0.6.4 allows remote attackers to cause a denial of service (application crash) via unspecified network…
-
Unscored —CVE-2007-6217 Public exploit
Multiple SQL injection vulnerabilities in login.asp in Irola My-Time (aka Timesheet) 3.5 allow remote attackers to exec…
-
Unscored —CVE-2007-6212 Public exploit
Directory traversal vulnerability in region.php in KML share 1.1 allows remote attackers to read arbitrary files via a …
-
Unscored —
Race condition in the Fibre Channel protocol (fcp) driver and Devices filesystem (devfs) in Sun Solaris 10 allows local…
-
Unscored —CVE-2007-6214 Public exploit
Directory traversal vulnerability in include/file_download.php in LearnLoop 2.0 beta7 allows remote attackers to read a…
-
Unscored —CVE-2007-6215 Public exploit
Multiple directory traversal vulnerabilities in play.php in Web-MeetMe 3.0.3 allow remote attackers to read arbitrary f…
-
Unscored —CVE-2007-6213 Public exploit
Multiple directory traversal vulnerabilities in mod/chat/index.php in WebED 0.0.9 allow remote attackers to read arbitr…
-
Unscored —CVE-2007-6210 Public exploit
zabbix_agentd 1.1.4 in ZABBIX before 1.4.3 runs "UserParameter" scripts with gid 0, which might allow local users to ga…
-
Unscored —CVE-2007-6211 Public exploit
Send ICMP Nasty Garbage (sing) on Debian GNU/Linux allows local users to append to arbitrary files and gain privileges …
-
Unscored —
sylprint.pl in claws mail tools (claws-mail-tools) allows local users to overwrite arbitrary files via a symlink attack…
-
Unscored —
Xen 3.x, possibly before 3.1.2, when running on IA64 systems, does not check the RID value for mov_to_rr, which allows …
-
Unscored —
Util/difflog.pl in zsh 4.3.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
-
Unscored —
The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, do…
-
Unscored —
Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an HTTP request when it is r…
-
Unscored —
Perl-Compatible Regular Expression (PCRE) library before 6.7 allows context-dependent attackers to cause a denial of se…
-
Unscored —
Perl-Compatible Regular Expression (PCRE) library before 6.7 does not properly calculate the compiled memory allocation…
-
Unscored —
Unspecified vulnerability in Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows attackers to cause a denial of…
-
Unscored —CVE-2007-6202 Public exploit
SQL injection vulnerability in plugins/search/search.php in Neocrome Seditio CMS 121 and earlier allows remote attacker…
-
Unscored —
The PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding during the FIPS self-tes…
-
Unscored —
Directory traversal vulnerability in the WML engine preprocessor for Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.1…
-
Unscored —
Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to b…
-
Unscored —
Cross-site scripting (XSS) vulnerability in util.php in Calacode @Mail before 5.2 allows remote attackers to inject arb…
-
Unscored —CVE-2007-6198 Public exploit
portal/server.pt in the Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows wildca…
-
Unscored —
rsync before 3.0.0pre6, when running a writable rsync daemon that is not using chroot, allows remote attackers to acces…
-
Unscored —
The Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows remote attackers to obtain…