18185 matches found
CVE-2007-6562
TCPreen is affected prior to version 1.4.4. The vulnerability arises from multiple stack-based overflows in FD_SET handling that enable remote denial of service through many concurrent connections. Reported vulnerable components include SocketAddress::Connect (libsolve/sockprot.cpp) and monitor_b...
CVE-2007-6561
PDFlib contains multiple stack-based buffer overflows that can be triggered by a long filename argument to PDF_load_image, causing an overflow in pdc_fsearch_fopen and possibly other vectors. Impact is remote code execution under the privileges of the vulnerable application. The issue is document...
CVE-2007-6555
PHP remote file inclusion vulnerability in modules/modpxtlatest.php in the mosDirectory comdirectory 2.3.2 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSmosConfigabsolutepath parameter...
CVE-2007-6551
The CVE-2007-6551 entry describes an SQL injection in showMsg.php affecting MailMachine Pro 2.2.4 and earlier versions up to 2.2.5 (before 2.2.6). The vulnerability allows remote attackers to execute arbitrary SQL commands via the id parameter. The provided references confirm the flaw and general...
CVE-2007-6563
WinAce (by e-merge GmbH) is vulnerable to a heap-based buffer overflow in 2.65 and earlier (and possibly other versions before 2.69). A specially crafted long filename in a compressed UUE archive can cause a user-assisted remote attacker to execute arbitrary code with the user’s privileges. The J...
CVE-2007-6533
Buffer overflow in Zoom Player 6.00 beta 2 and earlier allows user-assisted remote attackers to execute arbitrary code via an HTTP link to a PLS file in a crafted ZPL file, which causes an overflow in Unicode handling when generating an error message...
CVE-2007-6538
SQL injection vulnerability in ing/blocks/mrbs/code/web/viewentry.php in the MRBS plugin for Moodle allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-6539
The CVE-2007-6539 entry concerns a PHP local file inclusion in the IDevspot iSupport 1.8 product. The vulnerability arises from index.php’s include_file parameter, enabling remote attackers to include local files. Documented impact is partial confidentiality, integrity, and availability, with a C...
CVE-2007-6533
CVE-2007-6533 affects Zoom Player 6.00 beta 2 and earlier. A buffer overflow occurs in Unicode handling when processing a crafted ZPL file that references an HTTP-linked PLS file, allowing user-assisted remote code execution via an error-message generation path. The vulnerability status is based ...
CVE-2007-6536
The CVE-2007-6536 issue affects Google Toolbar 4 and 5 beta where the Custom Button Installer dialog may display domain names in the “Downloaded from” and “Privacy considerations” fields without validating them. The root cause is lack of domain verification, enabling remote attackers to spoof dom...
CVE-2007-6535
CVE-2007-6535 describes a buffer overflow in Yahoo! Toolbar’s YShortcut ActiveX control (YShortcut.dll 2006.8.15.1). The overflow is triggered by a long string passed to the IsTaggedBM method, potentially allowing arbitrary code execution. Sources consistently identify this as a Yahoo! Toolbar Ac...
CVE-2007-6538
The CVE-2007-6538 entry describes a SQL injection in the MRBS plugin for Moodle, affecting the file ing/blocks/mrbs/code/web/view_entry.php. The underlying issue is an injectable id parameter that allows remote attackers to execute arbitrary SQL commands. This can compromise data integrity and po...
CVE-2007-6540
CVE-2007-6540: A SQL injection in neuron news 1.0 is triggered by the q parameter to the default URI in patch/. The vulnerability enables remote execution of arbitrary SQL commands. Root cause: improper handling of user input in the affected patch/ endpoint (no details on code path provided). Imp...
CVE-2007-6541
CVE-2007-6541 describes multiple cross-site scripting (XSS) vulnerabilities in the web application neuron news 1.0 . The flaw allows remote attackers to inject arbitrary web script or HTML via 1) the topic parameter in a viewtopic action, or 2) the newsyear or 3) the newsmonth parameter in a news...
CVE-2007-6537
CVE-2007-6537 affects WinUAE 1.4.4 and earlier. A stack-based buffer overflow in the zfile_gunzip function (zfile.c) can be triggered by a long filename inside a gzipped archive (gz/adz/roz/hdz) embedded in a compressed floppy disk image, permitting user-assisted remote code execution. The vulner...
CVE-2007-6542
CVE-2007-6542 affects Arcadem LE 2.04 and earlier. The vulnerability is a PHP remote file inclusion in admin/frontpage_right.php, allowing an attacker to execute arbitrary PHP code via the loadadminpage parameter. The NVD description and related records confirm the issue as a remote code executio...
CVE-2007-6534
CVE-2007-6534 involves multiple unspecified vulnerabilities in Microsoft Office Publisher that allow a user‑assisted remote attacker to cause an application crash by processing a crafted PUB file, potentially involving WordArt. Affected product: Microsoft Office Publisher. Vulnerable functionalit...
CVE-2007-5342
The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by...
