CVE-2008-1117

CVE-2008-1117 describes a directory traversal/file upload vulnerability in Timbuktu Pro 8.6.5 for Windows (tb2ftp.dll) with possible impact on Mac OS X 8.7. An attacker can upload a file to an arbitrary location by crafting a destination filename that uses a backslash followed by "../" sequences,...

Security Update for Microsoft Office Excel 2007 (KB946974)

A security vulnerability exists in Microsoft Office Excel 2007 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Microsoft Office Web组件ActiveX控件远程代码执行漏洞（MS08-017）

BUGTRAQ ID: 28135,28136 CVECAN ID: CVE-2006-4695,CVE-2007-1201 Microsoft Office Web组件是COM控件集合，用于向Web发布电子表格、图表和数据库，并查看所发布的组件。 Microsoft Office Web组件在解析特制的URL时管理内存资源的方式存在漏洞，如果用户受骗访问了恶意网页的话，就可能触发内存破坏，导致执行任意指令。 Microsoft Office Web Components 2000 临时解决方法： 禁止在Internet Explorer中运行Office Web组件库，为CLSID...

CVE-2007-6707

Multiple cross-site scripting XSS vulnerabilities on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-3574...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-3574...

CVE-2007-6707

CVE-2007-6707 describes multiple XSS vulnerabilities in the Cisco Linksys WAG54GS Wireless-G ADSL Gateway (firmware 1.01.03 and earlier) via the device’s web interface, enabling remote script injection through unspecified vectors. The connected records confirm affected product and firmware family...

CVE-2007-6708

The CVE-2007-6708 entry describes CSRF vulnerabilities in the Cisco Linksys WAG54GS Wireless-G ADSL Gateway (firmware 1.01.03 and earlier). An attacker can forge requests to setup.cgi to perform admin actions without authentication, demonstrated by (1) Restore Factory Defaults via the mtenRestore...

openSUSE 10 Security Update : phpMyAdmin (phpMyAdmin-5083)

This update of phpMyAdmin fixes a cross-site-scripting vulnerability. CVE-2007-6100,CVE-2007-5589 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update phpMyAdmin-5083. The text description of this...

solaris-memleak.txt

/ $Id: raptorpeek.c,v 1.1 2007/10/18 08:09:02 raptor Exp $ raptorpeek.c - Solaris fifofs IPEEK kernel memory leak Copyright c 2007 Marco Ivaldi Lame integer signedness error in FIFO filesystems named pipes on Sun Solaris 8 through 10 allows local users to read the contents of unspecified memory...

Debian DSA-1514-1 : moin - several vulnerabilities

Several remote vulnerabilities have been discovered in MoinMoin, a Python clone of WikiWiki. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-2423 A cross-site-scripting vulnerability has been discovered in attachment handling. - CVE-2007-2637 Access...

openSUSE 10 Security Update : phpMyAdmin (phpMyAdmin-5084)

This update of phpMyAdmin fixes a cross-site-scripting vulnerability. CVE-2007-6100,CVE-2007-5589 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update phpMyAdmin-5084. The text description of this...

Debian DSA-1515-1 : libnet-dns-perl - several vulnerabilities

Several remote vulnerabilities have been discovered in libnet-dns-perl. The Common Vulnerabilities and Exposures project identifies the following problems : It was discovered that libnet-dns-perl generates very weak transaction IDs when sending queries CVE-2007-3377 . This update switches...

Microsoft Security Bulletin MS08-014 - Critical Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (949029)

Microsoft Security Bulletin MS08-014 - Critical Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution 949029 Published: March 11, 2008 Version: 1.0 General Information Executive Summary This security update resolves several privately reported and publicly reported vulnerabilities i...

CVE-2007-6253

Adobe Form Designer 5.0 and Advanced Form Client 5.0 contain multiple ActiveX buffer-overflow vulnerabilities in the File Dialog Button (FileDlg.dll) and Copy to Server Object (SvrCopy.dll). The flaws may allow a remote, unauthenticated attacker to execute arbitrary code if a user is lured to a m...

CVE-2007-1201

CVE-2007-1201 is a remote code execution vulnerability in Microsoft Office Web Components 2000 related to the DataSource handling that can trigger memory corruption. Multiple sources describe the DataSource Vulnerability as allowing an attacker to execute arbitrary code in the user’s context by v...

[SECURITY] [DSA 1515-1] New libnet-dns-perl packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1515-1 [email protected] http://www.debian.org/security/ Florian Weimer March 11, 2008 http://www.debian.org/security/faq -...

USN-585-1: Python vulnerabilities

Piotr Engelking discovered that strxfrm in Python was not correctly calculating the size of the destination buffer. This could lead to small information leaks, which might be used by attackers to gain additional knowledge about the state of a running Python script. CVE-2007-2052 A flaw was...

Debian Security Advisory DSA 1514-1 (moin)

The remote host is missing an update to moin announced via advisory DSA 1514-1. OpenVAS Vulnerability Test $Id: deb15141.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1514-1 moin Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian Security Advisory DSA 1503-2 (kernel-source-2.4.27 (2.4.27-10sarge7))

The remote host is missing an update to kernel-source-2.4.27 2.4.27-10sarge7 announced via advisory DSA 1503-2. OpenVAS Vulnerability Test $Id: deb15032.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1503-2 kernel-source-2.4.27 2.4.27-10sarge7 Authors:...

Debian Security Advisory DSA 1511-1 (libicu)

The remote host is missing an update to libicu announced via advisory DSA 1511-1. OpenVAS Vulnerability Test $Id: deb15111.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1511-1 libicu Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...