CVE-2007-5561

Format string vulnerability in the Oracle OPMN daemon’s logging function affects Oracle Enterprise Grid Console server 10.2.0.1. A remote attacker can craft a URI in an HTTP request to port 6003 to trigger the flaw and potentially execute arbitrary code. The description notes this may be related ...

CVE-2007-5553

...

CVE-2007-5563

CVE-2007-5563 affects VirtueMart versions prior to 1.0.13. Multiple connected sources indicate a remote code execution vulnerability allowing attackers to run arbitrary PHP code via unspecified vectors. The documents do not provide concrete exploit steps, affected configurations, or remediation d...

CVE-2007-5545

CVE-2007-5545 affects TIBCO SmartPGM FX and is a format string vulnerability that could allow remote code execution via format string specifiers in unspecified vectors. The description notes a vague pre-advisory with no actionable information as of 2007-10-16. Connected records provide no version...

CVE-2007-5548

Cisco IOS Multiple Vulnerabilities (CVE-2007-5548) involve multiple stack-based buffer overflows in the Command EXEC facility that allow a local user to gain privileges. The underlying cause and vectors are not specified in the report, and the disclosure originated from a vague pre-advisory. The ...

CVE-2007-5547

Cisco IOS is reported to have a cross-site scripting (XSS) vulnerability (CVE-2007-5547) that allows remote attackers to inject arbitrary web script or HTML and to execute IOS commands via unspecified vectors. The affected product is Cisco IOS; the underlying root cause and precise exploitation v...

CVE-2007-5546

Technical details about CVE-2007-5546 are not publicly provided in the supplied documents. The initial description notes a vague pre-disclosure with no actionable information. Monitor for updates to obtain affected products, vectors, and fixes.

CVE-2007-5551

CVE-2007-5551 relates to Cisco IOS, where an off-by-one error can trigger a heap-based buffer overflow. The description notes remote code execution via unspecified vectors, with only a vague pre-advisory disclosure as of 2007-10-16; no concrete vendor/version details or remediation are provided i...

CVE-2007-5560

Heap-based buffer overflow in the Juniper HTTP Service allows remote attackers to execute arbitrary code via a crafted HTTP packet. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being...

CVE-2007-5552

CVE-2007-5552 describes an integer overflow in Cisco IOS that could allow remote execution of arbitrary code. Connected sources consistently name Cisco IOS as affected and identify the vulnerability as an integer overflow with remote-code-execution impact, but the disclosure vectors are described...

CVE-2007-5473

The CVE-2007-5473 entry concerns Mono before 1.2.5.2. StaticFileHandler.cs in System.Web on Windows fails to properly handle a request trailing with a space or dot in XSP, allowing remote attackers to disclose source code of sensitive files. Affected component: Mono’s System.Web.StaticFileHandler...

CVE-2007-5473

StaticFileHandler.cs in System.Web in Mono before 1.2.5.2, when running on Windows, allows remote attackers to obtain source code of sensitive files via a request containing a trailing 1 space or 2 dot, which is not properly handled by XSP...

[SECURITY] [DSA 1388-1] New dhcp packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA 1388-1 [email protected] http://www.debian.org/security/ Steve Kemp October 18th, 2007 http://www.debian.org/security/faq -...

AST-2007-023 - SQL Injection Vulnerabilty in cdr_addon_mysql

Asterisk Project Security Advisory - AST-2007-023 +------------------------------------------------------------------------+ | Product | Asterisk-Addons | |--------------------+---------------------------------------------------| | Summary | SQL Injection Vulnerability in cdraddonmysql |...

CVE-2007-5538

CVE-2007-5538 describes a buffer overflow in the Centralized TFTP File Locator Service of Cisco Unified Communications Manager (CUCM) (formerly CallManager) 5.1 before 5.1(3) and Unified CallManager 5.0. The vulnerability occurs during processing of filenames, allowing remote attackers to execute...

CVE-2007-5539

Cisco UC/ICM suite components (ICME, ICMH, UCCE, UCCH, SUCCE) version 7.1(5) contain an unspecified vulnerability that allows remote authenticated users to gain privileges, read reports, or alter SUCCE configuration via certain web interfaces. The exact root cause, affected subcomponents, and exp...

BrightStor ARCserve Message Engine opnum 0x10d buffer overflow

Added: 10/18/2007 CVE: CVE-2007-5327 BID: 26015 OSVDB: 41369 Background CA ARCserve Bac kup formerly BrightStor ARCserve Backup is a backup and recovery solution. It runs a Message Engine RPC service on port 6504/TCP by default. Problem A buffer overflow in BrightStor ARCserve Backup allows remot...

XPCNativeWraper pollution using Script object — Mozilla

Mozilla security researcher mozbugra4 reported that it was possible to use the Script object to modify XPCNativeWrappers in such a way that subsequent access by the browser chrome--such as by right-clicking to open a context menu--can cause attacker-supplied javascript to run with the same...

BrightStor ARCserve Message Engine opnum 0x10d buffer overflow

Added: 10/18/2007 CVE: CVE-2007-5327 BID: 26015 OSVDB: 41369 Background CA ARCserve Bac kup formerly BrightStor ARCserve Backup is a backup and recovery solution. It runs a Message Engine RPC service on port 6504/TCP by default. Problem A buffer overflow in BrightStor ARCserve Backup allows remot...

CVE-2007-5540

The provided documents confirm CVE-2007-5540 affects Opera (pre-9.24) and enables bypassing the same-origin policy when displaying frames from different sites. The root cause is described as an unspecified flaw in how Opera handles cross-domain frames, allowing remote attackers to overwrite funct...