Archive
December 2007
Vulnerabilities first published in this month (UTC), newest first.
436 results · Feed
-
Unscored —
Integer underflow in the asn1_get_string function in the SNMP back end (backend/snmp.c) for CUPS 1.2 through 1.3.4 allo…
-
Unscored —
Linux kernel 2.6.23 allows local users to create low pages in virtual userspace memory and bypass mmap_min_addr protect…
-
Unscored —
Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow…
-
Unscored —
The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before 2.0.0.CR3 allows remot…
-
Unscored —
Unspecified vulnerability in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset…
-
Unscored —
Stack-based buffer overflow in Novell GroupWise before 6.5.7, when HTML preview of e-mail is enabled, allows user-assis…
-
Unscored —
Stack-based buffer overflow in JSGCI.DLL in JustSystems Ichitaro 2005, 2006, and 2007 allows user-assisted remote attac…
-
Unscored —
exiftags before 1.01 allows attackers to cause a denial of service (infinite loop) via recursive IFD references in the …
-
Unscored —
Java in Mac OS X 10.4 through 10.4.11 allows remote attackers to bypass Keychain access controls and add or delete arbi…
-
Unscored —
registry.pl in Fonality Trixbox 2.0 PBX products, when running in certain environments, reads and executes a set of com…
-
Unscored —
Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows…
-
Unscored —CVE-2007-5583 Public exploit
Cisco IP Phone 7940 with firmware P0S3-08-7-00 allows remote attackers to cause a denial of service ("486 Busy" respons…
-
Unscored —
The shmem_getpage function (mm/shmem.c) in Linux kernel 2.6.11 through 2.6.23 does not properly clear allocated memory …
-
Unscored —
The libdspam7-drv-mysql cron job in Debian GNU/Linux includes the MySQL dspam database password in a command line argum…
-
Unscored —CVE-2007-6414 Public exploit
admin/administrator.php in Adult Script 1.6 and earlier sends a redirect to the web browser but does not exit, which al…
-
Unscored —
The copy_to_user function in the PAL emulation functionality for Xen 3.1.2 and earlier, when running on ia64 systems, a…
-
Unscored —
Sun Solaris 10 with the 120011-04 and 120012-04 patches, and later 120011-* and 120012-* patches, allows remote attacke…
-
Unscored —
Gesytec Easylon OPC Server before 2.3.44 does not properly validate server handles, which allows remote attackers to ex…
-
Unscored —
Gadu-Gadu does not properly perform protocol handling, which allows remote attackers to conduct cross-site request forg…
-
Unscored —CVE-2007-6393 Public exploit
SQL injection vulnerability in albums.php in Ace Image Hosting Script allows remote authenticated users to execute arbi…
-
Unscored —CVE-2007-6404 Public exploit
Directory traversal vulnerability in Sergey Lyubka Simple HTTPD (shttpd) 1.38 and earlier on Windows allows remote atta…
-
Unscored —
IBM Tivoli Provisioning Manager Express provides unspecified information in error messages when (1) attempted duplicati…
-
Unscored —CVE-2007-6403 Public exploit
Stack-based buffer overflow in Nullsoft Winamp 5.32 allows user-assisted remote attackers to execute arbitrary code via…
-
Unscored —CVE-2007-6391 Public exploit
SQL injection vulnerability in patch/comments.php in SH-News 3.0 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the mycalendar plugin before 0.13 for Serendipity allows remote atta…
-
Unscored —CVE-2007-6392 Public exploit
SQL injection vulnerability in DWdirectory 2.1 and earlier allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —
Multiple buffer overflows in the HandleEmotsConfig function in the GG Client in Gadu-Gadu 7.7 Build 3669 allow user-ass…
-
Unscored —CVE-2007-6405 Public exploit
Sergey Lyubka Simple HTTPD (shttpd) 1.38 and earlier on Windows allows remote attackers to download arbitrary CGI progr…
-
Unscored —CVE-2007-6395 Public exploit
Flat PHP Board 1.2 and earlier stores sensitive information under the web root with insufficient access control, which …
-
Unscored —
Stack-based buffer overflow in mplayer2.exe in Microsoft Windows Media Player (WMP) 6.4, when used with the 3ivx 4.5.1 …
-
Unscored —CVE-2007-6398 Public exploit
Flat PHP Board 1.2 and earlier allows remote attackers to bypass authentication and obtain limited access to an arbitra…
-
Unscored —CVE-2007-6402 Public exploit
Stack-based buffer overflow in mplayerc.exe in Media Player Classic (MPC) 6.4.9, when used with the 3ivx 4.5.1 or 5.0.1…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in CA (formerly Computer Associates) eTrust Threat Management Conso…
-
Unscored —
Direct static code injection vulnerability in wiki/index.php in Bitweaver 2.0.0 and earlier, when comments are enabled,…
-
Unscored —CVE-2007-6399 Public exploit
index.php in Flat PHP Board 1.2 and earlier allows remote authenticated users to obtain the password for the current us…
-
Unscored —CVE-2007-6397 Public exploit
Multiple directory traversal vulnerabilities in index.php in Flat PHP Board 1.2 and earlier allow remote attackers to (…
-
Unscored —CVE-2007-6396 Public exploit
Direct static code injection vulnerability in index.php in Flat PHP Board 1.2 and earlier allows remote attackers to in…
-
Unscored —
The notify feature in GNOME screensaver (gnome-screensaver) 2.20.0 might allow local users to read the clipboard conten…
-
Unscored —CVE-2007-6394 Public exploit
SQL injection vulnerability in index.php in Content Injector 1.53 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2007-6400 Public exploit
Directory traversal vulnerability in download_file.php in PolDoc CMS (aka PDDMS) 0.96 allows remote attackers to read a…