18185 matches found
php security update
CentOS Errata and Security Advisory CESA-2007:0888-01 Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1 This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an embedded-HTML scripting...
CVE-2007-5336
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-5339. Reason: This candidate is a reservation duplicate of CVE-2007-5339. Notes: All CVE users should reference CVE-2007-5339 instead of this candidate. All references and descriptions in this candidate have been removed to...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-5339. Reason: This candidate is a reservation duplicate of CVE-2007-5339. Notes: All CVE users should reference CVE-2007-5339 instead of this candidate. All references and descriptions in this candidate have been removed to...
CVE-2007-5336
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-5339. Reason: This candidate is a reservation duplicate of CVE-2007-5339. Notes: All CVE users should reference CVE-2007-5339 instead of this candidate. All references and descriptions in this candidate have been removed to...
Unfixed XSS vulnerability at www.calarkendinlet.turkcell.com.tr
Security researcher BackDoor, has submitted on 24/10/2007 a cross-site-scripting XSS vulnerability affecting www.calarkendinlet.turkcell.com.tr, which at the time of submission ranked 5158 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...
Unfixed XSS vulnerability at turkcell-imbenim.turkcell.com.tr
Security researcher BackDoor, has submitted on 24/10/2007 a cross-site-scripting XSS vulnerability affecting turkcell-imbenim.turkcell.com.tr, which at the time of submission ranked 5158 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/200...
iDefense Security Advisory 10.23.07: IBM Lotus Notes Client TagAttributeListCopy Buffer Overflow Vulnerability
IBM Lotus Notes Client TagAttributeListCopy Buffer Overflow Vulnerability iDefense Security Advisory 10.23.07 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 23, 2007 I. BACKGROUND IBM Corp.'s Lotus Notes software is an integrated desktop client option for accessing e-mail, calendars a...
openSUSE 10 Security Update : opera (opera-4575)
This version update of Opera to 9.24 fixes numerous defects including some security problems. CVE-2007-5540,CVE-2007-5541 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update opera-4575. The text...
Microsoft Visual Studio PDWizard.ocx ActiveX Control Code Execution (CVE-2007-4891)
Microsoft Visual Studio is a software development product for computer programmers. It centers on an integrated development environment which lets programmers create standalone applications, web sites, web applications, and web services.The vulnerability is due to an error in the Microsoft Visual...
CVE-2007-5335
CVE-2007-5335 affects Mozilla Firefox 2.0 prior to 2.0.0.8. According to the description, a remote attacker could obtain sensitive information by abusing the addMicrosummaryGenerator sidebar method to access file: URIs. The CVSS base score is 4.3 (Medium) with network access and no authentication...
[Full-disclosure] Miranda IM Multiple Buffer Overflow Vulnerabilities
Miranda IM Multiple Buffer Overflow Vulnerabilities Summary Multiple buffer overflow vulnerabilities exist in Miranda IM, a popular open source instant messaging client. Scope These vulnerabilities have been verified in the following Miranda IM versions: 0.6.8 0.7.0 Note: one vulnerability in...
openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-4574)
This update brings Mozilla Firefox to security update version 2.0.0.8 Following security problems were fixed : - MFSA 2007-26 / CVE-2007-3844: Privilege escalation through chrome-loaded about:blank windows Mozilla researcher mozbugra4 reported that a flaw was introduced by the fix for MFSA 2007-2...
HPSBMA02279 SSRT071298 rev.1 - HP OpenView Configuration Management (CM) Infrastructure (Radia) and Client Configuration Manager (CCM) Running httpd.tkd, Remote Unauthorized Access to Data
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01205079 Version: 1 HPSBMA02279 SSRT071298 rev.1 - HP OpenView Configuration Management CM Infrastructure Radia and Client Configuration Manager CCM Running httpd.tkd,...
CVE-2007-5336
CVE-2007-5336 is rejected/not used; reference CVE-2007-5339 instead.
openSUSE 10 Security Update : flac (flac-4571)
Multiple integer overflows in flac could potentially be exploited by attackers via specially crafted files to execute code in the context of the user opening the file CVE-2007-4619. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
openSUSE 10 Security Update : libopenssl-devel (libopenssl-devel-4560)
A buffer overflow in the DTLS implementation of openssl could be exploited by attackers to potentially execute arbitrary code CVE-2007-4995. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
openSUSE 10 Security Update : opal (opal-4531)
A bug in the SIP protocol handler could be exploited by attackers to crash applications using opal CVE-2007-4924. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update opal-4531. The text descriptio...
openssl security update
CentOS Errata and Security Advisory CESA-2007:0813-01 Updated OpenSSL packages that correct security issues are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenSSL is a toolkit that...
Immunity Canvas: PHPPM_INCLUDE
Name| phppminclude ---|--- CVE| CVE-2007-5641 Exploit Pack| CANVAS Description| PHP Project Management = 0.8.10 remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: php-pm CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5641 CVE Name: CVE-2007-5641...