CVE-2007-5996

CVE-2007-5996 describes an SQL injection vulnerability in the Softbiz Link Directory Script. The vulnerable component is the searchresult.php script, where user-provided sbcat_id can be exploited to execute arbitrary SQL commands. This CVE is related to CVE-2007-5449 (Softbiz Recipes Portal Scrip...

CVE-2007-5999

CVE-2007-5999 : SQL injection in the Softbiz Auctions Script, via the id parameter in product_desc.php. The issue stems from unsafely constructed SQL in this script, allowing remote attackers to execute arbitrary SQL commands. Public references indicate exploit availability and fixes are not deta...

CVE-2007-6003

CVE-2007-6003 affects the Thomson SpeedTouch 716 router with firmware 5.4.0.14, where a cross-site scripting (XSS) vulnerability exists in the CGI endpoint cgi/b/ic/connect. The underlying issue allows remote attackers to inject arbitrary web script or HTML via the url parameter. The NVD entry li...

CVE-2007-6000

CVE-2007-6000 affects KDE Konqueror up to version 3.5.6, allowing remote attackers to trigger a denial of service (crash) by sending large HTTP cookie parameters. Affected software: Konqueror (KDE desktop) prior to 3.5.7(?) with reliance on cookie handling. Root cause details are not extensively ...

CVE-2007-4702

The Application Firewall in Apple Mac OS X 10.5, when "Block all incoming connections" is enabled, does not prevent root processes or mDNSResponder from accepting connections, which might allow remote attackers or local root processes to bypass intended access restrictions...

CVE-2007-4703

CVE-2007-4703 concerns the Apple Mac OS X 10.5 Application Firewall: a root (UID 0) process can still accept inbound connections despite the “Block incoming connections” setting, bypassing intended access restrictions. This is documented across multiple sources (NVD entry and distributed advisori...

CVE-2007-4702

The CVE-2007-4702 issue affects Mac OS X 10.5 where the Application Firewall setting “Block all incoming connections” does not reliably block connections for root processes (UID 0) and for mDNSResponder, potentially allowing remote attackers or local root processes to bypass access restrictions. ...

CVE-2007-5501

The CVE-2007-5501 entries confirm a vulnerability in the Linux kernel 2.6.21–2.6.23.7 and 2.6.24-rc through 2.6.24-rc2 where remote attackers can cause a denial of service (crash) by sending crafted ACKs that trigger a NULL pointer dereference in net/ipv4/tcp_input.c (tcp_sacktag_write_queue). Th...

CVE-2007-4702

The Application Firewall in Apple Mac OS X 10.5, when "Block all incoming connections" is enabled, does not prevent root processes or mDNSResponder from accepting connections, which might allow remote attackers or local root processes to bypass intended access restrictions...

CVE-2007-5905

Adobe ColdFusion 8 and ColdFusion MX 7 are affected by a remote session-fixation vulnerability. The issue arises when established sessions in a ColdFusion application can be hijacked if CFID/CFTOKEN cookies are empty, enabling an attacker to impersonate a user. The CVE-2007-5905 entry lists these...

losetup, mount, util security update

CentOS Errata and Security Advisory CESA-2007:0969 Updated util-linux packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The util-linux package contains...

wireshark security update

CentOS Errata and Security Advisory CESA-2007:0709 New Wireshark packages that fix various security vulnerabilities and functionality bugs are now available for Red Hat Enterprise Linux 4. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the...

Moderate: Red Hat Security Advisory: net-snmp security update

Updated net-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. Simple Network Management Protocol SNMP is a protocol used for network management. A flaw was discovered in the way net-snmp handled certain requests. A remote attacker who can connect ...

Moderate: Red Hat Security Advisory: util-linux security update

Updated util-linux packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The util-linux package contains a large variety of low-level system utilities that...

openssh security update

CentOS Errata and Security Advisory CESA-2007:0703 Updated openssh packages that fix two security issues and various bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol...

Critical: Red Hat Security Advisory: samba security update

Updated samba packages that fix a security issue are now available for Red Hat Enterprise Linux 4.5 Extended Update Support. This update has been rated as having critical security impact by the Red Hat Security Response Team. Samba is a suite of programs used by machines to share files, printers,...

Low: Red Hat Security Advisory: wireshark security and bug fix update

New Wireshark packages that fix various security vulnerabilities and functionality bugs are now available for Red Hat Enterprise Linux 4. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the Red Hat Security Response Team. Wireshark is a...

CVE-2007-4699

CVE-2007-4699 involves Safari on Apple Mac OS X 10.4–10.4.10 where the default Safari configuration can add a private key to the keychain with permissions that allow other applications to access it without warning. This may bypass intended access restrictions and potentially leak credentials or e...

CVE-2007-4700

CVE-2007-4700 affects Apple Mac OS X 10.4–10.4.10 where WebKit/Safari could be abused to proxy traffic to arbitrary TCP ports. The description does not specify the exact vectors or vulnerable components beyond WebKit/Safari. The public note mentions vendor updates: Mac OS X 10.4.x security update...

CVE-2007-4701

CVE-2007-4701 affects WebKit/Safari on Apple Mac OS X 10.4–10.4.10. When previewing a PDF, temporary files are not created securely, allowing local users to read the contents of the PDF. Mitigation via Mac OS X 10.4.11 Security Update (MacOSXUpdCombo10.4.11 for Intel/PPC) is available from Apple....