18185 matches found
CVE-2007-6646
CVE-2007-6646 covers multiple cross-site scripting (XSS) vulnerabilities in LiveCart 1.0.1 and possibly other versions before 1.1.0. The issues enable remote attackers to inject arbitrary script/HTML via (1) the return parameter to user/remindPassword, (2) the q parameter to the category script, ...
CVE-2007-6643
CVE-2007-6643 is a Cross-site Scripting (XSS) vulnerability in the Joomla! com_poll component, present in versions before 1.5 RC4. Remote attackers could inject arbitrary web script or HTML via unspecified vectors. The NVD entry confirms the flaw and its impact (I = Partial) with an overall MEDIU...
CVE-2007-6637
Multiple cross-site scripting XSS vulnerabilities in Adobe Flash Player allow remote attackers to inject arbitrary web script or HTML via a crafted SWF file, related to "pre-generated SWF files" and Adobe Dreamweaver CS3 or Adobe Acrobat Connect. NOTE: the asfunction: vector is already covered by...
CVE-2007-6621
Directory traversal vulnerability in joovili.images.php in Joovili 3.0.0 through 3.0.6 allows remote attackers to read arbitrary files via a .. dot dot in the picture parameter...
CVE-2007-6620
Directory traversal vulnerability in include/images.inc.php in Joovili 2.x allows remote attackers to read arbitrary files via a .. dot dot in the picture parameter...
CVE-2007-6622
ZeusCMS 0.3 and earlier is affected by an SQL injection in security.php that can be triggered via the Referer HTTP header, allowing remote attackers to manipulate SQL queries and potentially access or modify data. The issue is described consistently across CVE-2007-6622 records; exploitation deta...
CVE-2007-6630
The CVE-2007-6630 entry describes a vulnerability in Netembryo 0.0.4 where the Url_init function in utils/url.c processes a malformed URI containing a "/:" sequence. This can allow remote attackers to trigger a NULL dereference and a daemon crash (denial of service) as demonstrated by a request l...
CVE-2007-6633
CVE-2007-6633 involves multiple cross-site scripting (XSS) vulnerabilities in FAQMasterFlexPlus (potentially versions 1.5 or 1.52). The issues allow remote attackers to inject arbitrary web script or HTML via the cat_name parameter to faq.php and via parameters to admin actions (add/edit/delete c...
CUPS SNMP后端asn1_get_string()函数远程栈溢出漏洞
BUGTRAQ ID: 26917 CVECAN ID: CVE-2007-5849 Common Unix Printing System CUPS是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS处理包含畸形数据的SNMP请求时存在漏洞，远程攻击者可能利用此漏洞控制服务器。...
MacroVision InstallShield Update Service DownloadAndExecute buffer overflow
Added: 01/04/2008 CVE: CVE-2007-6654 BID: 27013 OSVDB: 39980 Background MacroVision InstallShield is software for creating installers or software packages. Problem A buffer overflow in the DownloadAndExecute function in the Update Service ActiveX control allows command execution when a user loads...
CVE-2007-6623
CVE-2007-6623 describes an absolute path traversal vulnerability in ZeusCMS 0.3 and earlier. The issue allows remote attackers to list arbitrary directories by supplying a full pathname in the dir parameter. This is a server-side path disclosure risk that could enable traversal beyond intended di...
CVE-2007-6637
CVE-2007-6637 is a cross-site scripting (XSS) vulnerability in Adobe Flash Player triggered by crafted SWF files, enabling remote script/HTML execution via SWF parameters. The issue is discussed alongside related CVEs (e.g., CVE-2007-6244) and is reflected in Red Hat advisories for Flash Player, ...
CVE-2007-6634
CVE-2007-6634 describes multiple SQL injection vulnerabilities in FAQMasterFlexPlus , possibly versions 1.5 or 1.52 . The issue allows remote attackers to execute arbitrary SQL commands via the category_id parameter to faq.php , and potentially via other scripts. The sources indicate an unauthent...
CVE-2007-6638
The CVE affects March Networks DVR 3204. The issue is improper access control in the web root that allows remote attackers to directly access scripts/logfiles.tar.gz, exposing usernames, passwords, device names, and IP addresses. The vulnerability is described with a CVSS base score of 10.0 (HIGH...
CVE-2007-6620
CVE-2007-6620 affects Joovili 2.x, where a directory traversal flaw exists in include/images.inc.php that lets remote attackers read arbitrary files by supplying a .. in the picture parameter. This vulnerability’s impact is confirmed as reading files (partial confidentiality exposure) with networ...
Fedora 8 : qt4-4.3.3-1.fc8 (2007-4285)
An update to the latest upstream release. Includes fix for security issue CVE-2007-5965 rhbz411751. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
MacroVision InstallShield Update Service DownloadAndExecute buffer overflow
Added: 01/04/2008 CVE: CVE-2007-6654 BID: 27013 OSVDB: 39980 Background MacroVision InstallShield is software for creating installers or software packages. Problem A buffer overflow in the DownloadAndExecute function in the Update Service ActiveX control allows command execution when a user loads...
Fedora 8 : wordpress-2.3.2-1.fc8 (2008-0103)
This closes : http://www.blackhatdomainer.com/how-to-know-today-what-shoemoney-is-go ing-to-post-tomorrow/ http://www.securityfocus.com/archive/1/485252/30/0/threaded http://trac.wordpress.org/ticket/5487 Note that Tenable Network Security has extracted the preceding description block directly fr...
SuSE 10 Security Update : libsndfile (ZYPP Patch Number 4431)
This update fixes a possible buffer overflow that occurs while reading decoded PCM data from the FLAC library. CVE-2007-4974 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...