Archive
December 2007
Vulnerabilities first published in this month (UTC), newest first.
436 results · Feed
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Provisioning Manager Express allow remote attackers t…
-
Unscored —
The gg protocol handler in Gadu-Gadu, when this product is installed but not running, does not properly handle the skin…
-
Unscored —
The proxy server in Kerio WinRoute Firewall before 6.4.1 does not properly enforce authentication for HTTPS pages, whic…
-
Medium —
Robocode Arbitrary Code Execution
The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the SwingUtilities.invokeLater method.
-
Unscored —
Multiple stack-based buffer overflows in the awApi4.AnswerWorks.1 ActiveX control in awApi4.dll 4.0.0.42, as used by Va…
-
Unscored —
SQL injection vulnerability in the indexed_search system extension in TYPO3 3.x, 4.0 through 4.0.7, and 4.1 through 4.1…
-
Unscored —
Unspecified vulnerability in the Image Converter functionality in BEA WebLogic Mobility Server 3.3, 3.5, and 3.6 throug…
-
Unscored —
The DAV component in Chandler Server (Cosmo) before 0.10.1 does not check resource creation permissions, which allows r…
-
Unscored —
Stack-based buffer overflow in PccScan.dll before build 1451 in Trend Micro AntiVirus plus AntiSpyware 2008, Internet S…
-
Unscored —
Heap-based buffer overflow in Apple QuickTime before 7.3.1 allows remote attackers to execute arbitrary code via a craf…
-
Unscored —
Multiple unspecified vulnerabilities in the Flash media handler in Apple QuickTime before 7.3.1 allow remote attackers …
-
Unscored —
SQL injection vulnerability in userlogin.jsp in Trivantis CourseMill Enterprise Learning Management System 4.1 SP4 allo…
-
Unscored —CVE-2007-6359 Public exploit
The cs_validate_page function in bsd/kern/ubc_subr.c in the xnu kernel 1228.0 and earlier in Apple Mac OS X 10.5.1 allo…
-
Unscored —CVE-2007-6366 Public exploit
Multiple SQL injection vulnerabilities in SineCMS 2.3.4 and earlier allow remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2007-6357 EPSS 16%
Stack-based buffer overflow in Microsoft Office Access allows remote, user-assisted attackers to execute arbitrary code…
-
Unscored —CVE-2007-6368 Public exploit
Directory traversal vulnerability in index.php in ezContents 1.4.5 allows remote attackers to read arbitrary files via …
-
Unscored —
Stack-based buffer overflow in the PassThru functionality in ext.dll in BadBlue 2.72b and earlier allows remote attacke…
-
Unscored —
IBM Tivoli Netcool Security Manager 1.3.0 before Interim Fix 1, when using Active Directory (AD) LDAP authentication, a…
-
Unscored —CVE-2007-6369 Public exploit
Multiple directory traversal vulnerabilities in resize.php in the PictPress 0.91 and earlier plugin for WordPress allow…
-
Unscored —CVE-2007-6362 Public exploit
SQL injection vulnerability in index.php in the RSGallery (com_rsgallery) 2.0 beta 5 and earlier component for Mambo an…
-
Unscored —CVE-2007-6367 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the guestbook in SineCMS 2.3.4 and earlier allow remote attacker…
-
Unscored —
Cross-site scripting (XSS) vulnerability in modificarPerfil.php in JLMForo System allows remote authenticated users to …
-
Unscored —
pdftops.pl before 1.20 in alternate pdftops filter allows local users to overwrite arbitrary files via a symlink attack…
-
Unscored —
The isdn_ioctl function in isdn_common.c in Linux kernel 2.6.23 allows local users to cause a denial of service via a c…
-
Unscored —
Cross-site scripting (XSS) vulnerability in modules/ecal/display.php in the Event Calendar in bcoos 1.0.10 allows remot…
-
Unscored —CVE-2007-6376 Public exploit
Directory traversal vulnerability in autohtml.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to include an…
-
Unscored —CVE-2007-6375 Public exploit
Multiple SQL injection vulnerabilities in Bitweaver 2.0.0 and earlier allow remote attackers to execute arbitrary SQL c…
-
Unscored —
etc-update in Portage before 2.1.3.11 on Gentoo Linux relies on the umask to set permissions for the merge file, often …
-
Unscored —
Unspecified vulnerability in Juniper JUNOS 7.3 through 8.4 allows remote attackers to cause a denial of service (crash)…
-
Unscored —
Multiple SQL injection vulnerabilities in GestDown 1.00 Beta allow remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2007-6195 EPSS 14%
Buffer overflow in the sw_rpc_agent_init function in swagentd in Software Distributor (SD), and possibly other DCE appl…
-
Unscored —
Nokia N95 cell phone with RM-159 12.0.013 firmware allows remote attackers to cause a denial of service (device inopera…
-
Unscored —CVE-2007-6380 Public exploit
Multiple SQL injection vulnerabilities in e-Xoops (exoops) 1.08, and 1.05 Rev 1 through 3, allow remote attackers to ex…
-
Unscored —
Unspecified vulnerability in the Sun eXtended System Control Facility (XSCF) Control Package (XCP) firmware before 1050…
-
Unscored —
Gekko 0.8.2 and earlier stores sensitive information under the web root with possibly insufficient access control, whic…
-
Unscored —CVE-2007-6374 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Bitweaver 2.0.0 and earlier allow remote attackers to inject arb…
-
Unscored —CVE-2007-6378 Public exploit
Directory traversal vulnerability in upload.dll in BadBlue 2.72b and earlier allows remote attackers to create or overw…
-
Unscored —CVE-2007-6379 Public exploit
BadBlue 2.72b and earlier allows remote attackers to obtain sensitive information via an invalid browse parameter, whic…
-
Unscored —
Buffer overflow in a certain driver in Cisco Security Agent 4.5.1 before 4.5.1.672, 5.0 before 5.0.0.225, 5.1 before 5.…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the login page in Cisco CiscoWorks Server (CS), possibly 2.6 and earlier, w…