18185 matches found
CVE-2007-4573
CVE-2007-4573 - Linux kernel IA32 system call emulation on x86_64 : A flaw in IA32 emulation on 64-bit Linux kernels (2.4.x and 2.6.x up to 2.6.22.7) can allow a local unprivileged user to gain privileges by triggering an out-of-bounds access to the system call table via the %RAX register after t...
CVE-2007-4988
CVE-2007-4988 describes a sign-extension error in ImageMagick’s ReadDIBImage function (before 6.3.5-9) that can trigger an integer overflow and a heap-based buffer overflow via a crafted width in an image file. Connected advisories corroborate multiple ImageMagick/GraphicsMagick CVEs, including t...
Immunity Canvas: CMSMADESIMPLE_EVAL
Name| cmsmadesimpleeval ---|--- CVE| CVE-2007-5056 Exploit Pack| CANVAS Description| CMS Made Simple Eval Notes| CVE Name: CVE-2007-5056 VENDOR: cms made simple Notes: Try using nc -e /bin/sh as your command and having a nc -vlp Repeatability: Infinite CVE Url: https://vulners.com/cve/CVE-2007-50...
Moderate: Red Hat Security Advisory: EnterpriseDB security update
An updated EnterpriseDB package that fixes a security issue is now available for Red Hat eXchange. This update has been rated as having moderate security impact by the Red Hat Security Response Team. EnterpriseDB Advanced Server is a relational database management system RDBMS based on PostgreSQL...
Design/Logic Flaw
Argument injection vulnerability in Apple QuickTime 7.1.5 and earlier, when running on systems with Mozilla Firefox before 2.0.0.7 installed, allows remote attackers to execute arbitrary commands via a QuickTime Media Link QTL file with an embed XML element and a qtnext parameter containing the...
Design/Logic Flaw
ZoneAlarm Pro 7.0.362.000 does not properly validate certain parameters to System Service Descriptor Table SSDT function handlers, which allows local users to cause a denial of service crash and possibly gain privileges via the 1 NtCreatePort and 2 NtDeleteFile kernel SSDT hooks, a partial...
CVE-2007-5049
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-3387. Reason: This candidate is a duplicate of CVE-2007-3387. Notes: All CVE users should reference CVE-2007-3387 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2007-3916
The main function in skkdic-expr.c in SKK Tools 1.2 allows local users to overwrite or delete arbitrary files via a symlink attack on a skkdic$PID temporary file...
Unfixed XSS vulnerability at www.kurucasile.bel.tr
Security researcher Narcoticxs, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting www.kurucasile.bel.tr, which at the time of submission ranked 2458041 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It ...
iDefense Security Advisory 09.19.07: Multiple Vendor ImageMagick Sign Extension Vulnerability
Multiple Vendor ImageMagick Sign Extension Vulnerability iDefense Security Advisory 09.19.07 http://labs.idefense.com/intelligence/vulnerabilities/ Sep 19, 2007 I. BACKGROUND ImageMagick is a suite of image manipulation tools animate, composite, conjure, convert, display, identify, import, mogrif...
KLA10271 SB vulnerability in NetSupport Manager Client
An unspecified vulnerability was found in NetSupport Manager Client. By exploiting this vulnerability malicious users can bypass auth schemes. This vulnerability can be exploited remotely via spoofing UI. Original advisories - Related products NetSupport-Manager CVE list CVE-2007-5057 critical...
Unfixed XSS vulnerability at www.nigraphic.com
Security researcher Narcoticxs, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting www.nigraphic.com, which at the time of submission ranked 4457358 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is...
CVE-2007-5051
PhpGedView 4.1.1 is affected by multiple cross-site scripting (XSS) vulnerabilities. The NVD entry attributes impact to remote code execution of injected scripts via parameters in ancestry.php (box_width, PEDIGREE_GENERATIONS, rootid) and timeline.php (newpid). Debian and Debian-derived advisorie...
CVE-2007-5047
The vulnerability CVE-2007-5047 affects Norton Internet Security 2008 (build 15.0.0.60) where NtOpenSection SSDT hooks are not properly validating parameters passed to SSDT function handlers, enabling local users to trigger a crash (DoS) and potentially gain privileges via the kernel NtOpenSectio...
CVE-2007-5050
The CVE-2007-5050 entry describes a directory traversal in Neuron News 1.0: index.php vulnerable to a ".." in the q parameter, permitting remote attackers to include and execute arbitrary local files. Affected software: Neuron News 1.0 (PHP). Root cause is improper input validation on q that perm...
CentOS 4 : nfs-utils-lib (CESA-2007:0913)
An updated nfs-utils-lib package to correct a security flaw is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The nfs-utils-lib package contains support libraries that are needed by the commands a...
ADOdb Lite adodb-perf-module.inc.php last_module Parameter Arbitrary Code Execution
ADOdb Lite, a lightweight database framework for PHP applications, is installed on the remote host. The version of ADOdb Lite on the remote host fails to sanitize input to the 'lastmodule' parameter of the 'adodb-perf-module.inc.php' script before using it in an 'eval' statement to evaluate PHP...
CentOS 3 / 4 / 5 : libvorbis (CESA-2007:0845)
Updated libvorbis packages to correct several security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The libvorbis package contains runtime libraries for use in programs that...
iDefense Security Advisory 09.20.07: CA ARCserve Backup for Laptops and Desktops Authentication Bypass Vulnerability
CA ARCserve Backup for Laptops and Desktops Authentication Bypass Vulnerability iDefense Security Advisory 09.20.07 http://labs.idefense.com/intelligence/vulnerabilities/ Sep 20, 2007 I. BACKGROUND ARCServe Backup for Laptops and Desktops is a version of ARCServe Backup targeted at small to mediu...