Archive
December 2007
Vulnerabilities first published in this month (UTC), newest first.
436 results · Feed
-
Medium —
JULI logging component in Apache Tomcat does not restrict certain permissions for web applications
The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite a…
-
Unscored —
Opera before 9.25 allows remote attackers to obtain potentially sensitive memory contents via a crafted bitmap (BMP) fi…
-
Unscored —
Unspecified vulnerability in rpc.yppasswdd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause a…
-
Unscored —
Unspecified vulnerability in Opera before 9.25 allows remote attackers to execute arbitrary code via crafted TLS certif…
-
Unscored —
Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks via unknown vectors related to plug…
-
Unscored —
Unspecified vulnerability in the File-on-File Mounting File System (FFM) in HP Tru64 UNIX 5.1B-4 and 5.1B-3 allows loca…
-
Unscored —
SQL injection vulnerability in the forget password section (LostPwd.asp) in Eagle Software Aeries Browser Interface (AB…
-
Unscored —
Algorithmic complexity vulnerability in Opera 9.50 beta and 9.x before 9.25 allows remote attackers to cause a denial o…
-
Unscored —
The rich text editing functionality in Opera before 9.25 allows remote attackers to conduct cross-domain scripting atta…
-
Unscored —CVE-2007-6518 Public exploit
Multiple SQL injection vulnerabilities in search.php in WoltLab Burning Board (wBB) Lite 1.0.2 pl3e allow remote attack…
-
Unscored —CVE-2007-6513 Public exploit
HP eSupportDiagnostics ActiveX control (hpediag.dll) 1.0.11.0 exports dangerous methods, which allows remote attackers …
-
Unscored —CVE-2007-6515 Public exploit
support/dispatch.cgi in SiteScape Forum allows remote attackers to execute arbitrary TCL code via code separator charac…
-
Unscored —
PHP MySQL Banner Exchange 2.2.1 stores sensitive information under the web root with insufficient access control, which…
-
Unscored —
Apache HTTP Server, when running on Linux with a document root on a Windows share mounted using smbfs, allows remote at…
-
Unscored —CVE-2007-6516 Public exploit
Buffer overflow in RavWare Software MAS Flic ActiveX Control (masflc.ocx) 1.0.0.1 allows remote attackers to execute ar…
-
Unscored —CVE-2007-6508 Public exploit
Directory traversal vulnerability in view.php in xeCMS 1.0 allows remote attackers to read arbitrary files via a ..%2F …
-
Unscored —
Websense Enterprise 6.3.1 allows remote attackers to bypass content filtering by visiting http URLs with a (1) RealPlay…
-
Unscored —
Unspecified vulnerability in Appian Enterprise Business Process Management (BPM) Suite 5.6 SP1 allows remote attackers …
-
Unscored —CVE-2007-6510 Public exploit
Multiple stack-based buffer overflows in ProWizard 4 PC (prowiz) 1.62 and earlier allow remote attackers to execute arb…
-
Unscored —
The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not properly validate the hop-…
-
Unscored —
The HPRulesEngine.ContentCollection.1 ActiveX Control in RulesEngine.dll for HP Software Update 4.000.005.007 and earli…
-
Unscored —
Ingres 2.5 and 2.6 on Windows, as used in multiple CA products and possibly other products, assigns the privileges and …
-
Unscored —
Solaris 9, with Solaris Auditing enabled and certain patches for sshd installed, can generate audit records with an aud…
-
Unscored —CVE-2007-6341 Public exploit
Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers …
-
Unscored —
SpntSvc.exe daemon in Trend Micro ServerProtect 5.58 for Windows, before Security Patch 4, exposes unspecified dangerou…
-
Unscored —
P4Webs.exe in Perforce P4Web 2006.2 and earlier, when running on Windows, allows remote attackers to cause a denial of …
-
Unscored —
The default configuration for autofs 5 (autofs5) in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 4…
-
Unscored —
susehelp in SuSE Linux 8.1, Enterprise Server 8, Office Server, and Openexchange Server 4 does not properly filter shel…
-
Unscored —CVE-2007-6473 Public exploit
Heap-based buffer overflow in Texas Imperial Software WFTPD Pro Explorer 1.0 allows remote FTP servers to execute arbit…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the on-line help feature in Citrix Web Interface 2.0 and earlier, and NFuse…
-
Unscored —CVE-2007-6495 Public exploit
inc_newuser.asp in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to change the permi…
-
Unscored —
Multiple SQL injection vulnerabilities in Kvaliitti WebDoc 3.0 CMS allow remote attackers to execute arbitrary SQL comm…
-
Unscored —
Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.0.0 through 7.4.0 and possibly earlier versio…
-
Unscored —CVE-2007-6499 Public exploit
Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to uninst…
-
Unscored —CVE-2007-6501 Public exploit
Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to enable…
-
Unscored —
The IMWeb.IMWebControl.1 ActiveX control in IMWeb.dll 7.0.0.x, and possibly IMWebControl.dll, in iMesh 7.1.0.x and earl…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Centreon 1.4.1 (aka Oreon 1.4) allow remote attackers to execute …
-
Unscored —
Unspecified vulnerability in Plain Black WebGUI 7.4.0 through 7.4.17 allows remote authenticated users with Secondary A…
-
Unscored —CVE-2007-6479 Public exploit
Unrestricted file upload vulnerability in the "My productions" component for main/auth/profile.php (aka the "My profile…
-
Unscored —
Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to obtain login access via a request to hosting/…