CVE-2007-5361

The CVE-2007-5361 issue affects Alcatel-Lucent OmniPCX Enterprise (7.1 and earlier). The Communication Server caches a phone IP during a TFTP request from an IP Touch device and then uses that IP as the destination for all subsequent VoIP packets to that phone. This enables remote attackers to ca...

CVE-2007-6040

The CVE-2007-6040 entry concerns the Belkin F5D7230-4 Wireless G Router: a remote denial-of-service via a flood of TCP SYN packets, degrading networking and logging. The provided materials do not specify affected firmware versions, exact root cause details, exploit codes, or mitigations. Connecte...

CVE-2007-5898

The 1 htmlentities and 2 htmlspecialchars functions in PHP before 5.2.5 accept partial multibyte sequences, which has unknown impact and attack vectors, a different issue than CVE-2006-5465...

CVE-2007-5898

CVE-2007-5898 affects PHP up to versions before 5.2.5, where htmlentities() and htmlspecialchars() may accept partial multibyte sequences. The initial description notes unknown impact/attack vectors; connected sources confirm this CVE is listed among PHP-related issues and, in some advisories, th...

CVE-2007-5900

CVE-2007-5900 : PHP before 5.2.5 allows local users to bypass protection mechanisms configured via php_admin_value or php_admin_flag in httpd.conf by using ini_set to modify arbitrary configuration variables. This is a local-privilege-related bypass (no remote exploitation described in the provid...

Immunity Canvas: JOOMLAJUSER_INCLUDE

Name| joomlajuserinclude ---|--- CVE| CVE-2007-6038 Exploit Pack| CANVAS Description| Joomla JUser Component Remote File Inclusion Notes| CVE Name: CVE-2007-6038 VENDOR: Joomla Repeatability: Infinite References: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-6038 CVE Url:...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-6062. Reason: This candidate is a duplicate of CVE-2007-6062. Notes: All CVE users should reference CVE-2007-6062 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2007-6035

SQL injection vulnerability in graph.php in Cacti before 0.8.7a allows remote attackers to execute arbitrary SQL commands via the localgraphid parameter...

CVE-2007-6035

SQL injection vulnerability in graph.php in Cacti before 0.8.7a allows remote attackers to execute arbitrary SQL commands via the localgraphid parameter...

CVE-2007-6034

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-6062. Reason: This candidate is a duplicate of CVE-2007-6062. Notes: All CVE users should reference CVE-2007-6062 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2007-6037

CVE-2007-6037 corresponds to a cross-site scripting (XSS) vulnerability in Citrix NetScaler 8.0 build 47.8, specifically affecting the web management interface via ws/generic_api_call.pl and the standalone parameter (and other unspecified params). OpenVAS entries describe the NetScaler Web Manage...

CVE-2007-6034

CVE-2007-6034 is rejected/not used; it is a duplicate of CVE-2007-6062 and does not represent an active vulnerability.

CVE-2007-6038

The CVE-2007-6038 issue affects Joomla! JUser component (com_juser) v1.0.14. A PHP remote file inclusion occurs in xajax_functions.php via mosConfig_absolute_path, allowing an attacker to execute arbitrary PHP code by supplying a crafted URL. Connected documents corroborate the RFI nature and cit...

CVE-2007-6035

SQL injection vulnerability in graph.php in Cacti before 0.8.7a allows remote attackers to execute arbitrary SQL commands via the localgraphid parameter...

CVE-2007-6034

...

CVE-2007-6036

The CVE-2007-6036 vulnerability affects LIVE555 Media Server up to version 2007.11.01, where parseRTSPRequestString mishandles short RTSP queries, allowing remote actors to trigger a daemon crash (DoS) by causing a negative value during memory allocation. Affected product: LIVE555 Media Server (p...

CVE-2007-6030

Unspecified vulnerability in Weird Solutions BOOTPTurbo 1.2 has unknown impact and remote attack vectors. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has been...

BELL-CVE-2007-5500 CVE-2007-5500 does not affect BellSoft software

Bulletin has no description...

CVE-2007-5500

The waittaskstopped function in the Linux kernel before 2.6.23.8 checks a TASKTRACED bit instead of an exitstate value, which allows local users to cause a denial of service machine crash via unspecified vectors. NOTE: some of these details are obtained from third party information...

CVE-2007-6029

Unspecified vulnerability in ClamAV 0.91.1 and 0.91.2 allows remote attackers to execute arbitrary code via a crafted e-mail message. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable...