CVE-2010-0607

creationtimestamp| type| source ---|---|--- 2010-02-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33938...

CVE-2009-0607

CVE-2009-0607 describes multiple integer overflows in the malloc_leak.c code of Bionic on Android 1.0, related to the functions (1) chk_calloc and (2) leak_calloc. The vulnerability affects the Open Handset Alliance Android 1.0 stack, but explicit impact and attack vectors are not provided in the...

FreeBSD Ports: racoon

The remote host is missing an update to the system as announced in the referenced advisory. VID 2328ADEF-157C-11D9-8402-000D93664D5C OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-0607

CVE-2008-0607 describes an SQL injection in the SOBI2 (com_sobi2) 2.5.3 component for Joomla!/Mambo, exploitable via the catid parameter in index.php. The vulnerability allows remote attackers to execute arbitrary SQL commands; impact is described as partial confidentiality/integrity/availability...

Debian: Security Advisory (DSA-354)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Solaris 10 (sparc) : 125332-24 (deprecated)

JDS 3: Macromedia Flash Player Plugin Patch. Date this patch was last updated by Sun : May/21/12 This plugin has been deprecated and either replaced with individual 125332 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...

CVE-2007-0607

CVE-2007-0607 concerns w-agora 4.2.1 where enabling PHP register_globals allows disclosure of the contents of globals.inc by direct requests to the web document root, leaking server paths. The vulnerability stems from insufficient access control around globals.inc, enabling information disclosure...

wagora-disclose.txt

netVigilance Security Advisory 15 w-agora version 4.2.1 Information Disclosure Vulnerability Description: w-agora is a set of scripts written in PHP. This package is intended to allow users to share, exchange and publish information, files and discussions over the web. It is possible to disclose...

CVE-2006-0607

This CVE affects phphd 1.0 by Hinton Design. The vulnerability is in check.php where passwords are not validated when certain cookies are present, enabling remote authentication bypass. This is cookie-based authentication bypass (noted as a vulnerability in EV0060) that allows an attacker to bypa...

CVE-2005-0607

CubeCart 2.0.0–2.0.5 allows remote attackers to determine the server’s full path by calling certain PHP files without parameters (information.php, language.php, list_docs.php, popular_prod.php, sale.php, subfooter.inc.php, subheader.inc.php, cat_navi.php, check_sum.php). The flaw exposes the serv...

CVE-2004-0607

The eaycheckx509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication...

CVE-2004-0607

The eaycheckx509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication...

CVE-2004-0607

The CVE-2004-0607 issue affects KAME Racoon’s eay_check_x509cert function, which can verify certificates even when OpenSSL validation fails, potentially allowing remote attackers to bypass IKE authentication. Public documents (NVD, JVNDB, OpenVAS entries) confirm the vulnerability, but do not pro...

CVE-2003-0607

Buffer overflow in xconq 7.4.1 allows local users to become part of the "games" group via the 1 USER or 2 DISPLAY environment variables...

CVE-2003-0607

CVE-2003-0607 affects the xconq package (version 7.4.1) via a local buffer overflow in the USER and DISPLAY environment variable handling, enabling a local attacker to gain the gid 'games'. Connected sources confirm the issue in Debian advisory DSA-354 for xconq and note that a fix was released (...

CVE-2003-0607

Buffer overflow in xconq 7.4.1 allows local users to become part of the "games" group via the 1 USER or 2 DISPLAY environment variables...

CVE-2002-0607

Snitz Forums 2000, version 3.3.03 and earlier, is affected in members.asp by a SQL injection on parameters (M_NAME, UserName, FirstName, LastName, INITIAL) that enables remote attackers to execute arbitrary code. Root cause is improper input handling in the affected page, allowing injected SQL to...

CVE-2002-0607

members.asp in Snitz Forums 2000 version 3.3.03 and earlier allows remote attackers to execute arbitrary code via a SQL injection attack on the parameters 1 MNAME, 2 UserName, 3 FirstName, 4 LastName, or 5 INITIAL...

CVE-2001-0607

asecure as included with HP-UX 10.01 through 11.00 can allow a local attacker to create a denial of service and gain additional privileges via unsafe permissions on the asecure program, a different vulnerability than CVE-2000-0083...

CVE-2001-0607

asecure as included with HP-UX 10.01 through 11.00 can allow a local attacker to create a denial of service and gain additional privileges via unsafe permissions on the asecure program, a different vulnerability than CVE-2000-0083...