MS08-016: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (949030)

The remote host is running a version of Microsoft Office that is subject to various flaws that could allow arbitrary code to be run. An attacker may use this to execute arbitrary code on this host. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have ...

Moderate: tomcat security update

5.5.23-0jpp.3.0.3 - Patch for CVE-2007-5342 Resolves: bz 427776 - Patch for CVE-2007-5461 Resolves: bz 334561...

Debian: Security Advisory (DSA-1514-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Solaris 8/9/10 fifofs I_PEEK Local Kernel memory Leak Exploit

No description provided by source. / $Id: raptorpeek.c,v 1.1 2007/10/18 08:09:02 raptor Exp $ raptorpeek.c - Solaris fifofs IPEEK kernel memory leak Copyright c 2007 Marco Ivaldi [email protected] Lame integer signedness error in FIFO filesystems named pipes on Sun ...

Debian: Security Advisory (DSA-1503-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

The web interface on the central phone server for the Snom 320 SIP Phone allows remote attackers to make arbitrary phone calls via the "Call a number" field. NOTE: this might overlap CVE-2007-3440...

CVE-2008-1248

The web interface on the central phone server for the Snom 320 SIP Phone allows remote attackers to make arbitrary phone calls via the "Call a number" field. NOTE: this might overlap CVE-2007-3440...

Solaris 8/9/10 - 'fifofs I_PEEK' Local Kernel Memory Leak

/ $Id: raptorpeek.c,v 1.1 2007/10/18 08:09:02 raptor Exp $ raptorpeek.c - Solaris fifofs IPEEK kernel memory leak Copyright c 2007 Marco Ivaldi Lame integer signedness error in FIFO filesystems named pipes on Sun Solaris 8 through 10 allows local users to read the contents of unspecified memory...

KingSoft - 'UpdateOcx2.dll SetUninstallName()' Heap Overflow (PoC)

var str1 = ""; while str1.length !-- .text:1000737B ; DWORD stdcall SetUninstallNameLPVOID thisptr, LPVOID bsUninstallName .text:1000737B SetUninstallName proc near ; DATA XREF: .rdata:1003186C o .text:1000737B ; .rdata:10031A64 o .text:1000737B .text:1000737B thisptr = dword ptr 4 .text:1000737B...

CVE-2007-5225

creationtimestamp| type| source ---|---|--- 2008-03-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5227...

CVE-2008-1217

Unspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2 CCH, and 8.0.x before 8.0.1 allows remote attackers to execute arbitrary code via a crafted attachment in an e-mail message sent over SMTP, a variant of CVE-2007-6706...

CVE-2008-1217

The provided connected documents describe CVE-2007-6706 and CVE-2008-1217 as related, unspecified vulnerabilities affecting IBM Lotus Notes clients. Affected product: nlnotes.dll in the Lotus Notes client. Versions impacted include Notes 6.5, 7.0.x (before 7.0.2 CCH or 7.0.3), and 8.0.x (before 8...

CVE-2007-6706

CVE-2007-6706 affects the IBM Lotus Notes client (nlnotes.dll) with versions 6.5 and 7.0.x up to 7.0.2 CCH or 7.0.3, and possibly 8.0. A crafted text payload in an e-mail message sent over SMTP could allow remote code execution. The connected records corroborate this as an unspecified vulnerabili...

CVE-2007-6705

The CVE-2007-6705 issue affects WebSphere MQ XA clients: WebSphere MQ XA 5.3 (pre-FP13) and 6.0.x (pre-6.0.2.1) for Windows. When running in an MTS or COM+ environment, the process grants the PROCESS_DUP_HANDLE privilege to the Everyone group upon connection to a queue manager, enabling local use...

CVE-2008-1217

Unspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2 CCH, and 8.0.x before 8.0.1 allows remote attackers to execute arbitrary code via a crafted attachment in an e-mail message sent over SMTP, a variant of CVE-2007-6706...

DSA-1514-1 moin

Bulletin has no description...

Joomla Component Candle 1.0 (cID) SQL Injection Vulnerability

No description provided by source. JOOMLA comcandle SQL Injectioncid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl:"comcandle" EXPLOIT :...

CVE-2007-3539

creationtimestamp| type| source ---|---|--- 2008-03-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5222...

Joomla! Component Candle 1.0 - 'cid' SQL Injection

JOOMLA comcandle SQL Injectioncid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl:"comcandle" EXPLOIT : index.php?option=comcandle&task=content&cID=-9999//union//select//0x3a,username,0x3a,password,0x3a,0x3a//from//josusers/ S@BU...

SuSE 10 Security Update : icu (ZYPP Patch Number 5014)

Certain regular expressions could crash the ICU library. CVE-2007-4770 / CVE-2007-4771 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid31400; scriptversion"1.18...