[SECURITY] Fedora 7 Update: kernel-2.6.22.7-85.fc7

The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc...

Unfixed XSS vulnerability at www.h-o-m-e-p-a-g-e.info

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.h-o-m-e-p-a-g-e.info, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/09/2007. It is...

CVE-2007-4360: Undefined Security Weakness

Unspecified vulnerability in Dell Remote Access Card 4 DRAC4 with firmware 1.50 Build 02.16 allows remote attackers to cause a denial of service SSH daemon crash via certain network traffic, as demonstrated by an "nmap -O" scan with nmap 4.03, possibly related to a Mocana Mocanada SSH vulnerabili...

CVE-2007-3582: Undefined Security Weakness

SQL injection vulnerability in index.php in SuperCali PHP Event Calendar 0.4.0 allows remote attackers to execute arbitrary SQL commands via the o parameter...

Buffer overflow

Buffer overflow in Advanced Software Production Line Vortex Library before 1.0.3 allows remote attackers to cause a denial of service listener crash via unspecified vectors related to the select I/O implementation and the file set buffer. NOTE: some of these details are obtained from third party...

Code injection

Unspecified vulnerability in the Map I/O Service xpwmap in Hitachi XP/W on HI-UX/WE2 before 20070319, and XP/W on HP-UX before 20070405, allows remote attackers to cause a denial of service via certain data to the service port...

CVE-2007-3044

Unspecified vulnerability in the Map I/O Service xpwmap in Hitachi XP/W on HI-UX/WE2 before 20070319, and XP/W on HP-UX before 20070405, allows remote attackers to cause a denial of service via certain data to the service port...

CVE-2007-3046

Buffer overflow in Advanced Software Production Line Vortex Library before 1.0.3 allows remote attackers to cause a denial of service listener crash via unspecified vectors related to the select I/O implementation and the file set buffer. NOTE: some of these details are obtained from third party...

CVE-2007-3044

Unspecified vulnerability in the Map I/O Service xpwmap in Hitachi XP/W on HI-UX/WE2 before 20070319, and XP/W on HP-UX before 20070405, allows remote attackers to cause a denial of service via certain data to the service port...

CVE-2007-3044: Undefined Security Weakness

Unspecified vulnerability in the Map I/O Service xpwmap in Hitachi XP/W on HI-UX/WE2 before 20070319, and XP/W on HP-UX before 20070405, allows remote attackers to cause a denial of service via certain data to the service port...

CVE-2007-3046: Undefined Security Weakness

Buffer overflow in Advanced Software Production Line Vortex Library before 1.0.3 allows remote attackers to cause a denial of service listener crash via unspecified vectors related to the select I/O implementation and the file set buffer. NOTE: some of these details are obtained from third party...

Input validation

Unspecified vulnerability in the Real-time Scanning component in multiple F-Secure products, including Internet Security 2005, 2006 and 2007; Anti-Virus 2005, 2006 and 2007; and Solutions based on F-Secure Protection Service for Consumers 6.40 and earlier allows local users to gain privileges via...

CVE-2007-2965

Unspecified vulnerability in the Real-time Scanning component in multiple F-Secure products, including Internet Security 2005, 2006 and 2007; Anti-Virus 2005, 2006 and 2007; and Solutions based on F-Secure Protection Service for Consumers 6.40 and earlier allows local users to gain privileges via...

Directory traversal

Directory traversal vulnerability in the Shared Folders feature for VMware Workstation before 5.5.4, when a folder is shared, allows users on the guest system to write to arbitrary files on the host system via the "Backdoor I/O Port" interface...

CVE-2007-1744

Directory traversal vulnerability in the Shared Folders feature for VMware Workstation before 5.5.4, when a folder is shared, allows users on the guest system to write to arbitrary files on the host system via the "Backdoor I/O Port" interface...

CVE-2007-1744: Undefined Security Weakness

Directory traversal vulnerability in the Shared Folders feature for VMware Workstation before 5.5.4, when a folder is shared, allows users on the guest system to write to arbitrary files on the host system via the "Backdoor I/O Port" interface...

Battle.net Clan Script for PHP 1.5.1 - SQL Injection

Battle.net Clan Script for PHP 1.5.1 - SQL Injection script : Battle.net Clan Script 1.5 file : login.php attack : injection sql auteur : h a c k e r X code : ------------------------------------------------------------------------------------------ line 9 -- $user = $POST'user'; line 10-- $pass ...

Unfixed XSS vulnerability at users.search-o-rama.com

Security researcher zuppergazi, has submitted on 17/03/2007 a cross-site-scripting XSS vulnerability affecting users.search-o-rama.com, which at the time of submission ranked 17753 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It ...

Apple Mac OS X fails to properly handle corrupted Universal Mach-O Binaries

Overview A vulnerability in the way Apple Mac OS X handles corrupted Universal Mach-O Binaries may result in execution of arbitrary code or denial of service. Description Apple Mac OS X uses the Mach-O file format's ability to support more than one type of machine code to create Mac OS X Universa...

Unfixed XSS vulnerability at search-o-rama.com

Security researcher St@rExT, has submitted on 03/03/2007 a cross-site-scripting XSS vulnerability affecting search-o-rama.com, which at the time of submission ranked 16444 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2007. It is...