Fedora 7 : mono-1.2.3-5.fc7 (2007-3130)

A buffer overflow in the Mono.Math.BigInteger class in Mono allows attackers to execute arbitrary code. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much a...

openSUSE 10 Security Update : xpdf (xpdf-4643)

A buffer overflow in xpdf could be exploited by attackers to potentially execute arbitrary code CVE-2007-4352, CVE-2007-5392, CVE-2007-5393. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Fedora 7 : hugin-0.6.1-11.fc7 (2007-2989)

Mon Nov 5 2007 Bruno Postle 0.6.1-11 - fix for CVE-2007-5200 hugin unsafe temporary file usage - bug 332401; bug 362851; bug 362861; bug 362871 - fix Source tag - update license GPL - GPLv2+ - Mon Aug 13 2007 Bruno Postle 0.6.1-7 - rebuild for boost soname change - add enblend dependency as...

Security fix for the ALT Linux 5 package xpdf version 3.02-alt3

Nov. 12, 2007 Victor Forsyuk 3.02-alt3 - Security fixes: - CVE-2007-4352 - CVE-2007-5392 - CVE-2007-5393...

Important: kdegraphics security update

7:3.3.1-6 - Resolves: 356601, CVE-2007-4352,5392,5393...

Unfixed XSS vulnerability at www.moviepink.net

Security researcher TreX, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting www.moviepink.net, which at the time of submission ranked 12784 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is currently...

PeopleAggregatory security advisory - re CVE-2007-5631

Hi all, This is a notification that the remote file inclusion vulnerabilities reported in CVE-2007-5631 have been fixed in PeopleAggregator v1.2pre6-release-55, and are not exploitable if PHP's registerglobals directive is disabled. CVE entry: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-5631 ---...

Unfixed XSS vulnerability at www.ishinhome-fukuoka.co.jp

Security researcher SeeD, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting www.ishinhome-fukuoka.co.jp, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/12/2007. It is...

Unfixed XSS vulnerability at www.gsme.ncyu.edu.tw

Security researcher SeeD, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting www.gsme.ncyu.edu.tw, which at the time of submission ranked 40999 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2007. It is...

Unfixed XSS vulnerability at mall.maybank2u.net

Security researcher DerickTham, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting mall.maybank2u.net, which at the time of submission ranked 20412 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/02/2008. It is...

Fedora 8 : xpdf-3.02-4.fc8 (2007-3014)

Resolves: xpdf memory corruption in DCTStream::readProgressiveDataUnit xpdf buffer overflow in DCTStream::reset xpdf buffer overflow in CCITTFaxStream::lookChar Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

openSUSE 10 Security Update : koffice (koffice-4649)

A buffer overflow in the xpdf code contained in koffice could be exploited by attackers to potentially execute arbitrary code CVE-2007-4352, CVE-2007-5392, CVE-2007-5393. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

Fedora 8 : Django-0.96.1-1.fc8 (2007-2788)

Bug 362771 - CVE-2007-5712 Django 0.96 i18n DoS F8 - Bug 357051 - CVE-2007-5712 Django 0.96 i18n DoS - CVE-2007-5712 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

[SECURITY] [DSA 1405-2] New zope-cmfplone packages fix regression

-------------------------------------------------------------------------- Debian Security Advisory DSA 1405-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 11th, 2007 http://www.debian.org/security/faq -...

XSS vulnerabilities

PMASA-2007-7 Announcement-ID: PMASA-2007-7 Date: 2007-11-11 Summary XSS vulnerabilities Description We received an advisory from Omer Singer, The DigiTrust Group, and we wish to thank him for his work. It was possible to create a malicious database name that contains XSS code. Our team fixed...

CVE-2007-5930

CVE-2007-5930 is a Cross-site scripting (XSS) vulnerability in the Cerberus FTP Server web interface before version 2.46. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. According to NVD, impact is partial integrity with no confidentiality or avai...

CVE-2007-5931

The CVE-2007-5931 entry concerns OrangeHRM prior to 2.2.2, where the reDirect function in lib/controllers/RepViewController.php does not verify user privileges. This root cause allows remote attackers to obtain data via unspecified vectors. The NVD record assigns a MEDIUM severity (CVSSv2: AV:N/A...

CVE-2007-5932

CVE-2007-5932 describes multiple cross-site scripting (XSS) vulnerabilities in Fatwire Content Server (CS) CMS 6.3.0, allowing remote attackers to inject arbitrary script or HTML via unspecified fields related to the search function and advanced search function (and possibly other components). Th...

CVE-2007-5911

Multiple stack-based buffer overflows in the AxMetaStream ActiveX control in AxMetaStream.dll 3.3.2.26 in Viewpoint Media Player 3.2 allow remote attackers to execute arbitrary code via a long string argument to the 1 BroadcastKey, 2 BroadcastKeyFileURL, 3 Component, 4 ComponentClassID, 5...

CVE-2007-5927

Directory traversal vulnerability in OpenBase 10.0.5 and earlier allows remote authenticated users to create files with arbitrary contents via a .. dot dot in the first argument to the GlobalLog stored procedure. NOTE: this can be leveraged to execute arbitrary code using CVE-2007-5926...