CVE-2007-5561

Format string vulnerability in the logging function in the Oracle OPMN daemon, as used on Oracle Enterprise Grid Console server 10.2.0.1, allows remote attackers to execute arbitrary code via format string specifiers in the URI in an HTTP request to port 6003, aka Oracle reference number 6296175...

CVE-2007-5553

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-4158. Reason: This candidate is a duplicate of CVE-2007-4158. It was based on a vague pre-advisory, so the duplicate was not detected until more details were provided. Notes: All CVE users should reference CVE-2007-4158 inste...

Code injection

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-4158. Reason: This candidate is a duplicate of CVE-2007-4158. It was based on a vague pre-advisory, so the duplicate was not detected until more details were provided. Notes: All CVE users should reference CVE-2007-4158 inste...

CVE-2007-5558

CVE-2007-5558 is an integer overflow vulnerability affecting the LG Mobile handset. The description states that remote attackers can cause a denial-of-service reboot via a crafted HTTP packet. The entry notes that disclosure as of 2007-10-16 was vague and pre-advisory, but the CVE was assigned fo...

CVE-2007-5559

CVE-2007-5559 affects the IBM ThinkVantage TPM Service and is a heap-based buffer overflow that could allow remote attackers to execute arbitrary code via a crafted HTTP packet. The description indicates the disclosure was vague as of 2007-10-16, but the vulnerability is tracked across multiple f...

CVE-2007-5550

Technical details for CVE-2007-5550 are not publicly available in the provided documents. The sources mention an IOS version disclosure via a common network service but give no concrete affected products, versions, impact, or remediation. Monitor for updates.

CVE-2007-5554

CVE-2007-5554 involves Oracle database servers where remote attackers can obtain server memory contents via crafted packets (Oracle reference number 7892711). The connected documents do not specify affected versions or concrete exploitation details. No remediation or mitigations are provided in t...

CVE-2007-5559

Heap-based buffer overflow in the IBM ThinkVantage TPM Service allows remote attackers to execute arbitrary code via a crafted HTTP packet. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is...

CVE-2007-5562

The CVE-2007-5562 issue affects Netgear SSL312 PROSAFE SSL VPN-Concentrator 25 . The vulnerable component is the login page at cgi-bin/welcome , exploitable via the err parameter in the context of an error page to trigger Cross-site Scripting (XSS) . The provided description indicates remote atta...

CVE-2007-4600

The CVE-2007-4600 issue affects Mathcad 12–14 (Mathsoft/PTC Mathcad). The vulnerability arises from the Protect Worksheet feature, which uses a gzipped XML file containing a element; attackers can bypass protections by removing this element, allowing access to protected data. Impact is described...

CVE-2007-5560

CVE-2007-5560 describes a heap-based buffer overflow in the Juniper HTTP Service that allows remote attackers to execute arbitrary code via a crafted HTTP packet. The underlying cause is a memory corruption failure within the service, leading to potential full system compromise (as indicated by t...

CVE-2007-5556

Technical details about CVE-2007-5556 are not publicly available in the provided documents. No concrete exploit or affected product/version is specified here; monitor for updates.

CVE-2007-5551

Off-by-one error in Cisco IOS allows remote attackers to execute arbitrary code via unspecified vectors that trigger a heap-based buffer overflow. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, i...

CVE-2007-5557

Technical details about CVE-2007-5557 are not publicly available in the provided documents. Monitor for future updates from official advisories; no product, impact, or remediation details are given here.

CVE-2007-5555

Technical details for CVE-2007-5555 are not publicly available in the provided documents; no affected products, root cause, impact or fix are disclosed. Monitor for updates.

CVE-2007-5546

Multiple stack-based buffer overflows in TIBCO SmartPGM FX allow remote attackers to execute arbitrary code or cause a denial of service service stop and file-transfer outage via unspecified vectors. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information...

CVE-2007-5564

NSSboard (formerly Simple PHP Forum) 6.1 is affected by multiple XSS vulnerabilities. The issue allows remote attackers to inject arbitrary script/HTML via (1) HTML tags when BBCode is disabled; or (2) the user, (3) email, or (4) Real Name fields in a profile. The connected documents confirm the ...

CVE-2007-5549

Cisco IOS: vulnerable component is Command EXEC that allows local users to bypass command restrictions and access sensitive information via an unspecified variation of an IOS command (two disclosed methods, CSCsk16129). The exact root cause, affected IOS versions, and remediation are not provided...

CVE-2007-5553

CVE-2007-4158 describes a memory-leak DoS in the TIBCO Rendezvous (RV) daemon (rvd) affecting versions 7.5.2, 7.5.3, and 7.5.4. The vulnerability allows a remote attacker to cause memory consumption by processing a specially crafted packet with a length field of zero. The provided connected docum...

CVE-2007-5561

Format string vulnerability in the Oracle OPMN daemon’s logging function affects Oracle Enterprise Grid Console server 10.2.0.1. A remote attacker can craft a URI in an HTTP request to port 6003 to trigger the flaw and potentially execute arbitrary code. The description notes this may be related ...