18185 matches found
CVE-2007-5020
CVE-2007-5020 describes a remote code execution vulnerability in Adobe Acrobat/Reader 8.1 on Windows, triggered by opening a crafted PDF file related to the mailto: option and Internet Explorer 7 on Windows XP. Public details consistently reference a vulnerability in URI handling that allows arbi...
CVE-2007-5021
CVE-2007-5021 entry is rejected/not used; refer to CVE-2007-4880 instead.
[SECURITY] [DSA 1377-1] New fetchmail packages fix denial of service
------------------------------------------------------------------------ Debian Security Advisory DSA-1377 [email protected] http://www.debian.org/security/ Steve Kemp September 21, 2007 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1376-1] New kdebase packages fix authentication bypass
------------------------------------------------------------------------ Debian Security Advisory DSA-1376 [email protected] http://www.debian.org/security/ Steve Kemp September 21, 2007 http://www.debian.org/security/faq -...
vigilecms-xss.txt
Name : Vigile CMS v1.8 Multiple Remote XSS Vulnerability Download : http://www.itcms.it/ Date : 20-09-2007 Author : x0kster Mail : [email protected] Note : For works, the wiki or the download module must be installed in the site. PoCs : Wiki 1 :...
Fixed XSS vulnerability at www.buscadorcablevision.com.ar
Security researcher www.nullcode.com.ar, has submitted on 21/09/2007 a cross-site-scripting XSS vulnerability affecting www.buscadorcablevision.com.ar, which at the time of submission ranked 86917 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...
Unfixed XSS vulnerability at www.notiver.com.mx
Security researcher www.nullcode.com.ar, has submitted on 21/09/2007 a cross-site-scripting XSS vulnerability affecting www.notiver.com.mx, which at the time of submission ranked 42788 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/09/2007...
Linux Kernel 2.6.x - ALSA snd-page-alloc Local Proc File Information Disclosure
Linux Kernel 2.6.x - ALSA snd-page-alloc Local Proc File Information Disclosure / source: https://www.securityfocus.com/bid/25774/info / The Linux kernel is prone to a local privilege-escalation vulnerability. Exploiting this issue may allow local attackers to gain elevated privileges, facilitati...
Fixed XSS vulnerability at nl.wesellcd.dk
Security researcher Uber0n, has submitted on 21/09/2007 a cross-site-scripting XSS vulnerability affecting nl.wesellcd.dk, which at the time of submission ranked 124275 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/09/2007. It is currently...
Unfixed XSS vulnerability at orbitadeportiva.com.mx
Security researcher www.nullcode.com.ar, has submitted on 21/09/2007 a cross-site-scripting XSS vulnerability affecting orbitadeportiva.com.mx, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/09/2007...
Unfixed XSS vulnerability at www.identidadrobada.com
Security researcher www.nullcode.com.ar, has submitted on 21/09/2007 a cross-site-scripting XSS vulnerability affecting www.identidadrobada.com, which at the time of submission ranked 5602090 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...
Unfixed XSS vulnerability at www.tierradevinos.com.mx
Security researcher www.nullcode.com.ar, has submitted on 21/09/2007 a cross-site-scripting XSS vulnerability affecting www.tierradevinos.com.mx, which at the time of submission ranked 1850002 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...
Trend Micro ServerProtect SpntSvc RPC buffer overflow
Added: 09/21/2007 CVE: CVE-2007-4218 BID: 25395 OSVDB: 39753 Background ServerProtect is a virus scanner for servers. The Trend Micro ServerProtect service SpntSvc.exe handles RPC requests on port 5168/TCP. Problem Buffer overflow vulnerabilities in the Trend Micro ServerProtect service allow...
Immunity Canvas: PHPBBPLUS_INCLUDE
Name| phpbbplusinclude ---|--- CVE| CVE-2007-5009 Exploit Pack| CANVAS Description| phpBBplus Remote file inclusion Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: phpbbplus.net CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5009 CVE Name: CVE-2007-5009...
CVE-2007-5018
Stack-based buffer overflow in IMAPD in Mercury/32 4.52 allows remote authenticated users to execute arbitrary code via a long argument in a SEARCH ON command. NOTE: this issue might overlap with CVE-2004-1211...
Immunity Canvas: STREAMLINE_INCLUDE
Name| streamlineinclude ---|--- CVE| CVE-2007-5015 Exploit Pack| CANVAS Description| Streamline media server Remote file inclusion Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: Streamline CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5015 CVE Name: CVE-2007-5015...
CVE-2007-5019
The CVE-2007-5019 issue is a buffer overflow in the Sun Java Web Start ActiveX control of Java Runtime Environment (JRE) 1.6.0_X. The vulnerability occurs when processing a long argument to dnsResolve (isInstalled.dnsResolve), due to a boundary error in the ActiveX control. Affected component: Su...
CVE-2007-5015
CVE-2007-5015 affects Streamline PHP Media Server 1.0-beta4. The vulnerability is a set of remote file inclusion flaws in the core/theme/includes/ footer files (admin_footer.php, info_footer.php, theme_footer.php, browse_footer.php, account_footer.php, search_footer.php) that can be triggered via...
CVE-2007-5016
The CVE-2007-5016 entry describes a SQL injection in OneCMS 2.4, specifically in userreviews.php, exploitable via the abc parameter to allow remote SQL execution. The affected component is the userreviews.php path in OneCMS 2.4; root cause is improper handling of the abc parameter leading to SQL ...