CVE-2007-6031

CVE-2007-6031 affects VanDyke VShell 3.0.1. The vulnerability allows remote denial of service via unspecified vectors. The description notes the information is based on a vague advisory not coordinated with vendors and includes no concrete exploit details, vectors, or remediation in the provided ...

CVE-2007-6032

CVE-2007-6032 describes an SQL injection vulnerability in calendar/page.asp of Aleris Web Publishing Server 3.0, exploitable via the mode parameter. The issue enables remote attackers to construct and execute arbitrary SQL commands, impacting confidentiality, integrity, and availability to partia...

CVE-2007-6029

CVE-2007-6029 affects ClamAV 0.91.1 and 0.91.2. The vulnerability allows remote attackers to execute arbitrary code by sending a crafted e-mail message. The description in multiple sources notes that the advisory originated from a vulnerability information seller and that the CVE has been assigne...

CVE-2007-6033

Invensys Wonderware InTouch 8.0 is affected by an insecure NetDDE share that grants Everyone/Full Control, enabling remote authenticated (and possibly anonymous) attackers to execute arbitrary programs. The root cause is the NetDDE share permissions misconfiguration, allowing remote code executio...

CVE-2007-5500

The CVE-2007-5500 issue is described in connected documents as a vulnerability in the Linux kernel (2.6.x) where the wait_task_stopped routine checks a TASK_TRACED bit instead of exit_state. This could allow a local unprivileged user to cause a denial of service (machine crash) via unspecified ve...

CVE-2007-6030

Technical details for CVE-2007-6030 are not publicly provided in the supplied documents. No concrete affected product versions, root cause, impact, or remediation are disclosed here. Monitor for updates from official advisories and CVE records.

CVE-2007-6027

PHP remote file inclusion vulnerability in admin.jjgallery.php in the Carousel Flash Image Gallery comjjgallery component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2007-5670

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-5956. Reason: This candidate is a duplicate of CVE-2007-5956. Notes: All CVE users should reference CVE-2007-5956 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2007-5670

CVE-2007-5670 corresponds to a directory traversal vulnerability in IBM Informix Dynamic Server (IDS) prior to 10.00.xC7W1. The issue arises from improper handling of the DBLANG environment variable, allowing local users to gain privileges by referencing modified NLS message files through directo...

CVE-2007-6027

CVE-2007-6027 affects the Carousel Flash Image Gallery (com_jjgallery) component for Joomla!, where admin.jjgallery.php is vulnerable to a PHP remote file inclusion via the mosConfig_absolute_path parameter. This allows an attacker to execute arbitrary PHP code on the affected Joomla! site. The v...

CVE-2007-5670

...

CVE-2007-6026

Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 aka Microsoft Jet Engine, as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file database file containing a column structure with a modified column count...

Apple Mac OSX 10.5.x - Mail Arbitrary Code Execution

Apple Mac OSX 10.5.x - Mail Arbitrary Code Execution source: https://www.securityfocus.com/bid/26510/info Apple Mac OS X is prone to a vulnerability that can allow arbitrary code to run. This issue affects the Mail application when handling email attachments. Attackers can exploit this issue to...

Unfixed XSS vulnerability at www.bpashop.co.uk

Security researcher koolkeith12345, has submitted on 20/11/2007 a cross-site-scripting XSS vulnerability affecting www.bpashop.co.uk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/11/2007. It is...

rPSA-2007-0242-1 php5 php5-cgi php5-mysql php5-pear php5-pgsql php5-soap php5-xsl

rPath Security Advisory: 2007-0242-1 Published: 2007-11-19 Products: rPath Appliance Platform Linux Service 1 rPath Linux 1 Rating: Minor Exposure Level Classification: Remote Deterministic Denial of Service Updated Versions: php5=conary.rpath.com@rpl:1/5.2.5-1-1...

PCRE: Multiple vulnerabilities

Background PCRE is a library providing functions for Perl-compatible regular expressions. Description Tavis Ormandy Google Security discovered multiple vulnerabilities in PCRE. He reported an error when processing "\Q\E" sequences with unmatched "\E" codes that can lead to the compiled bytecode...

openSUSE 10 Security Update : apache2 (apache2-4666)

Several bugs were fixed in the Apache2 webserver : These include the following security issues : - CVE-2006-5752: modstatus: Fix a possible XSS attack against a site with a public server-status page and ExtendedStatus enabled, for browsers which perform charset 'detection'. - CVE-2007-1863:...

openSUSE 10 Security Update : pcre (pcre-4697)

Specially crafted regular expressions could lead to a buffer overflow in the pcre library. Applications using pcre to process regular expressions from untrusted sources could therefore potentially be exploited by attackers to execute arbitrary code CVE-2007-1659, CVE-2007-1660. %NASLMINLEVEL 7030...

GLSA-200711-21 : Bochs: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200711-21 Bochs: Multiple vulnerabilities Tavis Ormandy of the Google Security Team discovered a heap-based overflow vulnerability in the NE2000 driver CVE-2007-2893. He also discovered a divide-by-zero error in the emulated flopp...

openSUSE 10 Security Update : pcre (pcre-4696)

Specially crafted regular expressions could lead to a buffer overflow in the pcre library. Applications using pcre to process regular expressions from untrusted sources could therefore potentially be exploited by attackers to execute arbitrary code CVE-2006-7224, CVE-2006-7225, CVE-2006-7226,...