18185 matches found
CVE-2007-5453
CVE-2007-5453 concerns Php-Stats 0.1.9.2, which contains multiple eval-injection vulnerabilities. The issue allows remote authenticated administrators to execute arbitrary code by injecting PHP sequences into the php-stats-options record in the _options table, which is subsequently evaluated via ...
CVE-2007-5200
CVE-2007-5200 affects hugin on multiple distros (e.g., openSUSE, Fedora, Gentoo). It enables a local user to overwrite arbitrary files via an insecurely created hugin_debug_optim_results.txt, through a symlink attack. Documented impacts: local access with possible file overwrite of privileges; no...
CVE-2007-5448
CVE-2007-5448 affects MadWifi 0.9.3.2 and earlier. A remote attacker can trigger a denial of service (kernel panic) by sending a beacon frame with a large length value in the extended supported rates (xrates) element, exploiting code in net80211/ieee80211_scan_ap.c and net80211/ieee80211_scan_sta...
CVE-2007-5447
CVE-2007-5447 affects ionCube Loader 6.5 for PHP 5.2.4. The ioncube_loader_win_5.2.dll does not enforce safe_mode or disable_functions, enabling context-dependent attackers to read arbitrary files via ioncube_read_file. This vulnerability is documented in the NVD entry for CVE-2007-5447 and is ec...
CVE-2007-5440
CVE-2007-5440 affects CRS Manager. It describes multiple PHP remote file inclusion vulnerabilities allowing an attacker to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter to index.php or login.php. The note states the issue is disputed by CVE since DOCUMENT_ROOT cannot be modi...
hpijs, hplip, libsane security update
CentOS Errata and Security Advisory CESA-2007:0960 An updated hplip package to correct a security flaw is now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The hplip Hewlett-Packard Linux Imaging and...
Apache Tomcat (webdav) Remote File Disclosure Exploit
Exploit for multiple platform in category remote exploits ===================================================== Apache Tomcat webdav Remote File Disclosure Exploit ===================================================== !/usr/bin/perl Apache Tomcat Remote File Disclosure Zeroday Xploit kcdarookie a...
Unfixed XSS vulnerability at www.all.by
Security researcher BeyazKurt, has submitted on 14/10/2007 a cross-site-scripting XSS vulnerability affecting www.all.by, which at the time of submission ranked 20204 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/11/2007. It is currently...
Apache Tomcat - 'WebDAV' Remote File Disclosure
!/usr/bin/perl Apache Tomcat Remote File Disclosure Zeroday Xploit kcdarookie aka eliteb0y / 2007 thanx to the whole team & andi : +++KEEP PRIV8+++ This Bug may reside in different WebDav implementations, Warp your mind! +You will need auth for the exploit to work... use IO::Socket; use...
CVE-2007-5436
Buffer overflow in a certain ActiveX control in ScanObjectBrowser.DLL in G DATA Antivirus 2007 might allow remote attackers to execute arbitrary code via unspecified parameters to the SelectPath function. NOTE: this issue might not cross privilege boundaries in most environments, since it is not...
CVE-2007-4995
Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2007-5436
The CVE-2007-5436 entry concerns G DATA Antivirus 2007. A buffer overflow in the ActiveX control ScanObjectBrowser.DLL, specifically in the SelectPath function, could allow remote code execution via unspecified parameters. The issue is described as not crossing privilege boundaries in many enviro...
CVE-2007-5439
CVE-2007-5439 affects CA eTrust ITM (Threat Manager) 8.1. The issue is that sensitive user information is stored in log files with predictable names, allowing a remote attacker to obtain the data via unspecified vectors. This is stated across the CVE records, including NVD, and connected document...
CVE-2007-4995
CVE-2007-4995 describes an off-by-one error in the DTLS implementation of OpenSSL 0.9.8 prior to 0.9.8f that could allow a remote attacker to execute arbitrary code via unspecified vectors. Multiple connected advisories confirm this DTLS flaw and the need to upgrade OpenSSL to a fixed release (0....
CVE-2007-5438
CVE-2007-5438 involves an unspecified vulnerability in a VMware ActiveX control (Reconfig.DLL) that could allow local users to cause a denial of service to the Virtual Disk Mount Service (vmount2.exe). Affected products and build ranges include VMware Workstation 5.5.x <5.5.8 build 108000, Wor...
CVE-2007-5435
The CVE refers to CA ERwin Process Modeler (formerly AllFusion Process Modeler) 7.2 with an unspecified vulnerability that could allow user‑assisted remote attackers to cause a denial of service via a crafted Data Standards File (Datatype Standards File). The available details confirm the affecte...
CVE-2007-5439
CA formerly Computer Associates eTrust ITM Threat Manager 8.1 stores sensitive user information in log files with predictable names, which allows remote attackers to obtain this information via unspecified vectors...
CVE-2007-5208
hpssd in Hewlett-Packard Linux Imaging and Printing Project hplip 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail...
CVE-2007-5208
hpssd in Hewlett-Packard Linux Imaging and Printing Project hplip 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail...
