Oracle XDB component PITRIG_DROPMETADATA buffer overflow

Added: 11/23/2007 CVE: CVE-2007-4517 BID: 26374 OSVDB: 39918 Background The PITRIGDROPMETADATA function is included in the XDB.XDBPITRIGPKG package which is included with Oracle Database. Problem A buffer overflow vulnerability in the PITRIGDROPMETADATA function allows remote, authenticated...

VigileCMS <= 1.8 Stealth Remote Command Execution Exploit

No description provided by source. !/usr/bin/python -- coding: iso-8859-15 -- ''' | || | | | | | ' / -||| ' / | '/ / / \ \ / ||||||| ./,|| ,,/\ || ------------------------------------------------------------------------------------------------ This is a Public Exploit. 22/10/2007...

Microsoft Jet Engine MDB file ColumnName buffer overflow

Added: 11/23/2007 CVE: CVE-2007-6026 BID: 26468 OSVDB: 44880 Background The Microsoft Jet Database Engine provides data access functionality for a number of applications. Problem A buffer overflow vulnerability in the Microsoft Jet Database Engine could lead to command execution when a user opens...

Unfixed XSS vulnerability at lycos.wausau.oodle.com

Security researcher CCC, has submitted on 23/11/2007 a cross-site-scripting XSS vulnerability affecting lycos.wausau.oodle.com, which at the time of submission ranked 15048 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is...

Unfixed XSS vulnerability at www.der-dirigent.de

Security researcher bate, has submitted on 23/11/2007 a cross-site-scripting XSS vulnerability affecting www.der-dirigent.de, which at the time of submission ranked 384238 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is...

Unfixed XSS vulnerability at www.ojotop.com

Security researcher WHK, has submitted on 23/11/2007 a cross-site-scripting XSS vulnerability affecting www.ojotop.com, which at the time of submission ranked 2075693 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is currently...

[SECURITY] [DSA 1409-1] New samba packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory 1409 [email protected] http://www.debian.org/security/ Steve Kemp November 22, 2007 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

CVE-2007-6092

Buffer overflow in libsrtp in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries...

CVE-2007-6092

Buffer overflow in libsrtp in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries...

CVE-2007-6084

CVE-2007-6084 describes an SQL injection vulnerability in the HotScripts Clone Script, specifically in the file software-description.php. The issue allows remote attackers to inject arbitrary SQL via the id parameter, leading to potential data exposure or modification. The connected documents con...

CVE-2007-6088

The CVE affects phpBBViet versions 02.03.07 and earlier, with a PHP remote file inclusion in includes/functions_mod_user.php. The underlying issue is that an attacker can supply a URL to the phpbb_root_path parameter, enabling remote arbitrary PHP code execution. The impact is labeled as complete...

CVE-2007-6094

The IPsec module in the VPN component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial of service module crash via an IPsec Phase 2 proposal that lacks Perfect Forward Secrecy PFS...

CVE-2007-6093

CVE-2007-6093 affects Ingate Firewall and SIParator prior to 4.6.0; the SRTP implementation can be coerced into a kernel crash (DoS) by an RTCP index that is ‘much more than expected.’ Upgrading to version 4.6.0 or later is the stated mitigation.

Unfixed XSS vulnerability at www.levhayaar.co.il

Security researcher CCC, has submitted on 22/11/2007 a cross-site-scripting XSS vulnerability affecting www.levhayaar.co.il, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/11/2007. It is currently...

CVE-2007-6095

The CVE-2007-6095 entry applies to the SIP component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0. When Remote NAT Traversal is used, the system does not correctly perform user registration and message distribution, which may allow remote authenticated users to receive messages inte...

CVE-2007-6096

Ingate Firewall before 4.6.0 and SIParator before 4.6.0 store passwords for “administrators with less privileges” in cleartext, enabling possible reading by an attacker via unspecified vectors. Affected components are the password storage mechanism; root cause indicated as cleartext storage. No e...

CVE-2007-6099

Unspecified vulnerability in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 might leave "media pinholes" open upon a restart of the SIP module, which might make it easier for remote attackers to conduct unauthorized activities...

CVE-2007-6099

Technical details (affected products, versions, root cause, and remediation) are not publicly provided in the connected documents. Monitor for updates from Red Hat, NVD, and vendors for concrete exposure, fixes, and mitigations.

CVE-2007-6085

CVE-2007-6085 relates to multiple cross-site scripting (XSS) flaws in VigileCMS 1.4 affecting index.php, where an attacker can inject arbitrary script/HTML through the message field in the vedipm or live_chat modules. Impact is described as partial integrity impact with no confidentiality or avai...

CVE-2007-6083

IceBB 1.0-rc6 contains a SQL injection in admin/index.php exploitable via the X-Forwarded-For HTTP header. Remote attackers can execute arbitrary SQL commands. The connected documents confirm the affected software and vulnerability class, but do not provide remediation steps or patched versions. ...