CVE-2007-5125

CVE-2007-5125 is rejected/not used per description; reference CVE-2007-1171 instead; this entry does not represent an active vulnerability.

CVE-2007-5120

Multiple cross-site scripting XSS vulnerabilities in JSPWiki 2.4.103 and 2.5.139-beta allow remote attackers to inject arbitrary web script or HTML via the 1 group and 2 members parameters in a NewGroup.jsp; the 3 edittime parameter in b Edit.jsp; the 4 edittime, 5 author, and 6 link parameters i...

CVE-2007-5118

CVE-2007-5118 details an unspecified vulnerability in the HID (Human Interface Device) class driver in Sun Solaris 8/9/10 that allows local users to cause a denial of service (panic). The connected documents confirm affected platforms and patches: Solaris 8 (SPARC) patch 109896-37; Solaris 9 (x86...

CVE-2007-5120

JSPWiki 2.4.103 and 2.5.139-beta contain multiple XSS vulnerabilities. The flaws affect various JSPWiki pages and parameters: NewGroup.jsp (group, members), Edit.jsp (edittime), Comment.jsp (edittime, author, link), UserPreferences.jsp and Login.jsp (loginname, wikiname, fullname, email), Diff.js...

CVE-2007-5121

The CVE-2007-5121 issue affects JSPWiki 2.5.139-beta, where an XSS vulnerability exists in the redirect parameter to wiki-3/Login.jsp and other components. The underlying cause is improper handling of user-supplied input enabling arbitrary script/HTML injection. Impact is possible client-side scr...

CVE-2007-5122

The CVE-2007-5122 entry documents a SQL injection vulnerability in SoftBiz Classifieds PLUS, specifically in store_info.php via the id parameter. Remote attackers could potentially execute arbitrary SQL commands. Connected sources confirm the affected component and vulnerability class, but do not...

CVE-2007-5119

JSPWiki is affected: versions 2.4.103 and 2.5.139-beta expose the full path via an invalid integer in the version parameter to the default URI under attach/Main/. Root cause: improper handling of the version parameter leads to information disclosure. Impact is information disclosure (full path). ...

Unfixed XSS vulnerability at fishddl.com

Security researcher flux, has submitted on 27/09/2007 a cross-site-scripting XSS vulnerability affecting fishddl.com, which at the time of submission ranked 71684 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It is currently...

DSA-1378-1 fai-kernels linux-2.6 user-mode-linux - several vulnerabilities

Bulletin has no description...

Linux Kernel ALSA驱动snd-page-alloc本地Proc文件信息泄露漏洞

BUGTRAQ ID: 25807 CVECAN ID: CVE-2007-4571 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux系统的ALSA声卡驱动实现上存在漏洞，本地攻击者可能利用此漏洞获取内核内存中的敏感信息。 Linux Kernel在处理多个/proc/driver/snd-page-alloc文件的读操作时存在安全漏洞，sound/core/memalloc.c文件中如下定义了读操作的系统调用sndmemprocread： 484 static int sndmemprocreadchar page, char start, offt of...

Unfixed XSS vulnerability at www5.info-mapping.com

Security researcher kusomiso.com, has submitted on 27/09/2007 a cross-site-scripting XSS vulnerability affecting www5.info-mapping.com, which at the time of submission ranked 50765 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It ...

Trend Micro ServerProtect TMregChange buffer overflow

Added: 09/27/2007 CVE: CVE-2007-4731 OSVDB: 45878 Background Trend Micro ServerProtect is a virus scanner for servers. Problem A buffer overflow vulnerability in the TMregChange function in the TMreg.dll library allows remote attackers to execute arbitrary commands by sending specially crafted da...

SOL7985 - ClamAV clamav-milter vulnerability - CVE-2007-4560

The FirePass controller can be configured to provide anti-virus scanning of files uploaded through Portal Access through the ClamAV open source software. Scanning is configured on the Antivirus tab of the Portal Access: Content Inspection page, through the Enable Standalone virus Scanner option...

Unfixed XSS vulnerability at www.asahi.co.jp

Security researcher kusomiso.com, has submitted on 27/09/2007 a cross-site-scripting XSS vulnerability affecting www.asahi.co.jp, which at the time of submission ranked 17638 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/09/2007. It is...

Unfixed XSS vulnerability at warez-net.com

Security researcher flux, has submitted on 27/09/2007 a cross-site-scripting XSS vulnerability affecting warez-net.com, which at the time of submission ranked 31952 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It is currently...

[CAID 35690, 35691, 35692]: CA BrightStor Hierarchical Storage Manager CsAgent Multiple Vulnerabilities

Title: CAID 35690, 35691, 35692: CA BrightStor Hierarchical Storage Manager CsAgent Multiple Vulnerabilities CA Vuln ID CAID: 35690, 35691, 35692 CA Advisory Date: 2007-09-26 Reported By: Sean Larsson, iDefense Labs anonymous researcher working with the iDefense VCP Aaron Portnoy of DV Labs...

Unfixed XSS vulnerability at www.kaijipr.or.jp

Security researcher kusomiso.com, has submitted on 27/09/2007 a cross-site-scripting XSS vulnerability affecting www.kaijipr.or.jp, which at the time of submission ranked 1305750 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It is...

Unfixed Redirect vulnerability at www.inegolkocokulu.k12.tr

Security researcher Narcoticxs, has submitted on 27/09/2007 a Redirect vulnerability affecting www.inegolkocokulu.k12.tr, which at the time of submission ranked 8073025 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It is currently...

Unfixed XSS vulnerability at www.wgalil.ac.il

Security researcher ZuLL, has submitted on 27/09/2007 a cross-site-scripting XSS vulnerability affecting www.wgalil.ac.il, which at the time of submission ranked 151500 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is currently...

Unfixed XSS vulnerability at www.sky-love.net

Security researcher kusomiso.com, has submitted on 27/09/2007 a cross-site-scripting XSS vulnerability affecting www.sky-love.net, which at the time of submission ranked 3068150 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It is...