CVE-2007-6753

CVE-2007-6753 describes an untrusted search path vulnerability in Shell32.dll affecting Windows 2000, XP, Vista, Server 2008, and 7. When an environment contains a string like %APPDATA% or %PROGRAMFILES% in a specific way, a Trojan horse DLL placed in the current working directory can be loaded, ...

CVE-2007-6752

CVE-2007-6752 describes a CSRF vulnerability in Drupal 7.12 and earlier that allows an attacker to hijack the authentication of arbitrary users via requests ending the session on the user/logout URI. The vendor disputes the severity and there is no documented fix in the provided sources; some ref...

Microsoft Exchange Server IMAP Command Denial of Service (MS07-026; CVE-2007-0221)

An integer overflow vulnerability has been reported in Microsoft Exchange Server...

MTD CMS SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Official Website: http://www.1337day.com 0 1 + Support...

ImageMagick security and bug fix update

6.2.8.0-12.el5 - Add fix for CVE-2010-4167 767142 6.2.8.0-11.el5 Fix assertion failed when using 'identify -verbose' when theres no image information available 502626 6.2.8.0-10.el5 Fix memory allocation failure when using color option 616538 Fix hang when converting broken GIF 693989 Fix...

Windows Object Packager Insecure Execution

Added: 01/24/2012 CVE: CVE-2012-0009 BID: 51297 OSVDB: 78212 Background Windows Object Packager is a tool that can be used to create a package that can be inserted into a file. Problem A vulnerability exists in the way the Windows Object Packager registers and implements packages stored on networ...

Windows Object Packager Insecure Execution

Added: 01/24/2012 CVE: CVE-2012-0009 BID: 51297 OSVDB: 78212 Background Windows Object Packager is a tool that can be used to create a package that can be inserted into a file. Problem A vulnerability exists in the way the Windows Object Packager registers and implements packages stored on networ...

Windows Object Packager Insecure Execution

Added: 01/24/2012 CVE: CVE-2012-0009 BID: 51297 OSVDB: 78212 Background Windows Object Packager is a tool that can be used to create a package that can be inserted into a file. Problem A vulnerability exists in the way the Windows Object Packager registers and implements packages stored on networ...

Office arbitrary ClickOnce application execution vulnerability

------------------------------------------------------------------------ Office arbitrary ClickOnce application execution vulnerability ------------------------------------------------------------------------ Yorick Koster, June 2010...

CVE-2007-6744

CVE-2007-6744 affects Flexera Macrovision InstallShield prior to 2008. The issue arises during certain code-signing operations with .spc and .pvk files, where a digital-signature password is sent to an unintended application due to an incorrect interaction between InstallShield and Signcode.exe. ...

MySQL < 4.1.23 / 5.0.42 Access Control Vulnerability

The version of MySQL installed on the remote host is older than 4.1.23 or 5.0.42. As such, it reportedly allows a remote, authenticated user without the DROP privilege to rename arbitrary tables. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17829; scriptversion"1.5...

MySQL < 5.0.51a / 5.1.23 / 6.0.4 Multiple Vulnerabilities

The version of MySQL installed on the remote host is earlier than 5.0.51a / 5.1.23 / 6.0.4 and thus reportedly affected by the following two vulnerabilities : - An attacker may be able to cause the federated handler and daemon to crash when the federated engine issues a SHOW TABLE STATUS LIKE que...

Cisco IOS Common Network Service Remote Version Disclosure

The remote Cisco device is potentially affected by an unspecified vulnerability involving a 'common network service' that may allow a remote attacker to determine the IOS version. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17777; scriptversion"1.5";...

CVE-2007-6751

The CVE-2007-6751 entry describes a cross-site scripting (XSS) vulnerability in the MailForm plugin for Movable Type, affecting versions before 1.20. The vulnerability allows remote attackers to inject arbitrary script or HTML via unspecified vectors, resulting in arbitrary script execution in a ...

CVE-2007-6750

The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service daemon outage via partial HTTP requests, as demonstrated by Slowloris, related to the lack of the modreqtimeout module in versions before 2.2.15...

CVE-2007-6750

CVE-2007-6750 affects Apache HTTP Server 1.x and 2.x. The vulnerability arises from handling partial HTTP requests (Slowloris), related to absence of the mod_reqtimeout protection in versions before 2.2.15, enabling remote DoS (daemon outage). Public details in connected docs confirm PoCs/exploit...

Persits XUpload ActiveX String Length Buffer Overflow (CVE-2007-6530)

A stack buffer overflow vulnerability has been reported in Persits' XUpload ActiveX control. The vulnerability is due to an error while parsing arguments passed to a certain method. A remote attacker may exploit this vulnerability by passing an overly long string to the method. Successful...

RKD Software ActiveX Control Remote Stack Buffer Overflow (CVE-2007-3435)

A Stack buffer overflow vulnerability has been reported in RKD Software Barcode Application. The vulnerability is due to a boundary error within the ABarCode ActiveX control while handling a certain method. A remote attacker could exploit this vulnerability by enticing a user to open a specially...

Ask.com Toolbar askBar.dll ActiveX Control Buffer Overflow (CVE-2007-5107)

A remote code execution vulnerability has been reported in Ask.com toolbar. The vulnerability is due to a boundary error in an ActiveX control. A remote attacker could exploit this issue by sending an overly long string to a certain method in askbar.dll. Successful exploitation could allow...

Unfixed XSS vulnerability at www.presidentielle-2007.net

Security researcher Atmon3r, has submitted on 21/12/2011 a cross-site-scripting XSS vulnerability affecting www.presidentielle-2007.net, which at the time of submission ranked 262116 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. I...