CVE-2007-5394

CVE-2007-5394 affects Adobe PageMaker 7.0.1 and 7.0.2 through a stack-based buffer overflow in AldFs32.dll when processing a specially crafted PMD file. The vulnerability could allow a user-assisted remote attacker to execute arbitrary code in the context of the current user. The related connecte...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes several security issues is now available for Red Hat Enterprise Linux 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 18th November 2008 The erratum has been updated to...

Sql injection

SQL injection vulnerability in TLM CMS 3.1 allows remote attackers to execute arbitrary SQL commands via the nom parameter to a-b-membres.php. NOTE: the goodies.php vector is already covered by CVE-2007-4808. NOTE: the provenance of this information is unknown; the details are obtained solely fro...

USN-659-1: Linux kernel vulnerabilities

It was discovered that the direct-IO subsystem did not correctly validate certain structures. A local attacker could exploit this to cause a system crash, leading to a denial of service. CVE-2007-6716 It was discovered that the disabling of the ZEROPAGE optimization could lead to large memory...

CVE-2007-6080

creationtimestamp| type| source ---|---|--- 2008-10-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32536...

Secunia Research: HP OpenView Products Shared Trace Service Denial of Service

====================================================================== Secunia Research 22/10/2008 - HP OpenView Products Shared Trace Service Denial of Service - ====================================================================== Table of Contents Affected...

NetScaler Web Management 'CVE-2007-6037' XSS Vulnerability - Active Check

The remote Citrix NetScaler web management interface is susceptible to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2008 nnposter Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

NetScaler web management cookie information

It is possible to extract information about the remote Citrix NetScaler appliance obtained from the web management interface SPDX-FileCopyrightText: 2008 nnposter Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Squid < 2.6.STABLE12 DoS Vulnerability

A vulnerability in TRACE request processing has been reported in Squid. SPDX-FileCopyrightText: 2008 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2007-4349

CVE-2007-4349 affects HP OpenView components (Performance Agent C.04.70; Performance Agent C.04.60/04.61; Reporter 3.7/ Reporter 3.8) and is triggered by an unspecified sequence of Trace Event Message RPC requests that lead to out-of-bounds memory access due to an erroneous object reference, enab...

HP SiteScope SNMP Trap消息HTML代码注入漏洞

BUGTRAQ ID: 31816 CVECAN ID: CVE-2007-4350 HP SiteScope提供无代理监控，补充现有基于代理的解决方案，帮助保持分布式IT基础架构的可用性和性能。 HP SiteScope在处理SNMP信息的显示时存在漏洞，可以将SiteScope服务器配置为接收设备的SNMP Trap，并可以通过Web界面查看SNMP监控的状态和所接收到SNMP trap消息的内容。由于未经过滤便在管理界面中呈现了SNMP消息，因此在查看信息时可能在用户浏览器会话中执行任意HTML和脚本代码。 HP SiteScope 9.0 build 911 HP --...

CVE-2007-4350

HP SiteScope 9.0 build 911 contains a cross-site scripting (XSS) vulnerability in the management interface. The issue arises from rendering SNMP trap messages in the web UI without filtering, allowing an attacker to inject arbitrary HTML/script that could execute in a user’s browser. This affects...

openSUSE 10 Security Update : kernel (kernel-5700)

The openSUSE 10.3 kernel was update to 2.6.22.19. This includes bugs and security fixes. CVE-2008-4576: Fixed a crash in SCTP INIT-ACK, on mismatch between SCTP AUTH availability. This might be exploited remotely for a denial of service crash attack. CVE-2008-3528: The ext234 filesystem code fail...

CVE-2007-6718

MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service SIGSEGV and application crash via 1 a malformed MP3 file, as demonstrated by lol-mplayer.mp3; 2 a malformed Ogg Vorbis file, as demonstrated by lol-mplayer.ogg; 3 a malformed MPEG-1 file, as demonstrated by...

Design/Logic Flaw

MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service SIGSEGV and application crash via 1 a malformed MP3 file, as demonstrated by lol-mplayer.mp3; 2 a malformed Ogg Vorbis file, as demonstrated by lol-mplayer.ogg; 3 a malformed MPEG-1 file, as demonstrated by...

CVE-2007-6718

CVE-2007-6718 affects MPlayer (potentially 1.0rc1). The vulnerability allows remote denial of service through malformed media files: MP3, Ogg Vorbis, MPEG-1/2, MPEG-4 AVI, FLAC, Ogg Theora, WMV, and AAC, each capable of triggering a SIGSEGV and application crash. Several connected sources (e.g., ...

CVE-2007-6718

MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service SIGSEGV and application crash via 1 a malformed MP3 file, as demonstrated by lol-mplayer.mp3; 2 a malformed Ogg Vorbis file, as demonstrated by lol-mplayer.ogg; 3 a malformed MPEG-1 file, as demonstrated by...

CVE-2007-3939

creationtimestamp| type| source ---|---|--- 2008-10-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6789...

Sql injection

Multiple SQL injection vulnerabilities in IP Reg 0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 locationid parameter to locationdel.php and 2 vlanid parameter to vlanedit.php. NOTE: the vlanview.php and vlandel.php vectors are already covered by CVE-2007-6579...

Solaris 5.9 (sparc) : 139382-01

GNOME 2.0.2: libpng Patch. Date this patch was last updated by Sun : Oct/03/08 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...