CVE-2007-5649

Cross-site scripting XSS vulnerability in lostpwd.php in Creative Digital Resources SocketMail 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the lostid parameter...

CVE-2007-5652

CVE-2007-5652 affects IBM DB2 UDB 9.1 before Fixpak 4. The issue concerns improper management of storage of a list containing authentication information, which could allow a denial of service (instance crash) or memory corruption. The vendor description notes uncertainty about whether this is sec...

CVE-2007-5646

SMF SQL injection (CVE-2007-5646) affects Simple Machines Forum (SMF) 1.1.3. The flaw is in Sources/Search.php where the vulnerable userspec parameter used in the search2 action to index.php is not sanitized, enabling arbitrary SQL execution when using MySQL 5.x. An unauthenticated or authenticat...

CVE-2007-5644

Lussumo Vanilla 1.1.3 and earlier allows remote unauthenticated users to perform unauthorized operations through two AJAX endpoints (ajax/sortcategories.php and ajax/sortroles.php) due to missing admin-privilege checks. Affected component: Vanilla CMS PHP backend; root cause: no authorization on ...

CVE-2007-5654

LiteSpeed Web Server prior to 3.2.4 is affected by CVE-2007-5654 (Mime Type Injection). An attacker can trigger use of an arbitrary MIME type for a file by sending a request containing a null-byte sequence (%00.) followed by a new extension, which can lead to viewing sensitive content (e.g., read...

CVE-2007-5648

CVE-2007-5648 describes multiple cross-site scripting (XSS) vulnerabilities in rnote.php of rNote 0.9.7.5, enabling remote attackers to inject arbitrary script or HTML via the d or u parameters. The NVD entry assigns a medium base score (4.3) with network access and no authentication required, pa...

CVE-2007-5650

CVE-2007-5650 is a directory traversal vulnerability in ReloadCMS 1.2.7 (system.php). An attacker can cause index.php?module=... to include and execute arbitrary local files by supplying a .. (dot dot) in the module parameter. The affected component is the system.php module of ReloadCMS 1.2.7; th...

CVE-2007-5642

CVE-2007-5642 affects PHP Project Management 0.8.10 and earlier. The issue is multiple directory traversal vulnerabilities that allow remote attackers to include and execute arbitrary local files by supplying a .. (dot dot) sequence in various parameters across modules (def_lang in modules/files/...

CVE-2007-5651

The CVE-2007-5651 entry affects Cisco EAP implementations: Cisco IOS 12.3/12.4 on Access Points and 1310 Wireless Bridges, IOS 12.1/12.2 on switches, and CatOS 6.x–8.x on Cisco switches. The vulnerability allows remote attackers to cause a denial of service (device reload) by sending a crafted EA...

CVE-2007-5641

CVE-2007-5641 affects PHP Project Management 0.8.10 and earlier. The vulnerability is a remote file inclusion (RFI) weakness allowing an attacker to supply a URL in the full_path parameter to multiple modules (e.g., certinfo, emails, events, files, projects, etc.) to execute arbitrary PHP code on...

CVE-2007-5649

CVE-2007-5649 is a Cross-site Scripting (XSS) vulnerability in SocketMail 2.2.1 from Creative Digital Resources, exposed via lostpwd.php and the lost_id parameter. The NVD entry lists CVSS v2.0 base score 4.3 (Medium) with network access, required medium attack complexity, no authentication, and ...

USN-536-1: Thunderbird vulnerabilities

Various flaws were discovered in the layout and JavaScript engines. By tricking a user into opening a malicious web page, an attacker could execute arbitrary code with the user's privileges. CVE-2007-5339, CVE-2007-5340 Flaws were discovered in the file upload form control. By tricking a user int...

[SECURITY] [DSA 1372-2] New ktorrent packages fix directory traversal

------------------------------------------------------------------------ Debian Security Advisory DSA 1373-2 [email protected] http://www.debian.org/security/ Steve Kemp October 23th, 2007 http://www.debian.org/security/faq -...

Immunity Canvas: PEOPLEAGGREGATOR_INCLUDE

Name| peopleaggregatorinclude ---|--- CVE| CVE-2007-5631 Exploit Pack| CANVAS Description| peopleaggregator 1.2pre6 remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: peopleaggregator.org CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5631 CVE Name:...

CVE-2007-5636

Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service application abort and possibly execute arbitrary code via a flood of invalid characters to the RTCP port 5678/udp that triggers a Windows error message, aka "extraneous messaging."...

CVE-2007-5638

The CVE-2007-5638 entry concerns Nortel UNIStim family devices (e.g., IP Softphone 2050, IP Phone 1140E and related BCM/IP phone lines). The underlying issue is that the 32-bit RUDP datagram ID field uses only 65,536 possible values, making it easier for remote attackers to guess the RUDP ID and ...

CVE-2007-5639

The CVE-2007-5639 entry concerns Nortel UNIStim family devices (Nortel UNIStim IP Softphone 2050, IP Phone 1140E, plus other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets). The vulnerability allows remote attackers to cause a denial of service (device hang) by sending a flood of Mute/Un...

CVE-2007-5634

The CVE-2007-5634 entry concerns SpeedFan 4.33 (SpeedFan.sys) on Windows Vista x64 . The vulnerability arises from an improper buffer check during IOCTL 0x9c402420, allowing local users to cause a denial of service (machine crash) and potentially gain privileges via unspecified vectors. Affected ...

CVE-2007-5632

CVE-2007-5632 concerns multiple unspecified vulnerabilities in the Sun Solaris kernel (versions 8–10) that allow local users to cause a denial of service (panic). The description ties the issue to the kernel statistics retrieval mechanism and potentially to the sfmmu_mlspl_enter / sfmmu_mlist_ent...

CVE-2007-5640

The CVE-2007-5640 issue affects Nortel UNIStim products (e.g., UNIStim IP Softphone 2050, IP Phone 1140E and related lines such as BCM and Mobile Voice Client). A resume message to the Signaling Server with a spoofed source IP can allow remote attackers to block calls and force re-registration; t...