18185 matches found
CVE-2007-4975
Cross-site scripting XSS vulnerability in hilfe.php in b1gMail 6.3.1 allows remote attackers to inject arbitrary web script or HTML via the chapter parameter...
CVE-2007-4976
CVE-2007-4976 involves a directory traversal in Coppermine Photo Gallery (CPG) prior to or including 1.4.12. The flaw is in viewlog.php: an unsafely handled log parameter can be exploited to include and execute arbitrary local files by using ".." (dot dot). The vulnerability requires authenticati...
CVE-2007-4978
CVE-2007-4978 affects phpSyncML 0.1.2 and earlier. The vulnerability is a PHP remote file inclusion in WBXML/Decoder.php and WBXML/Encoder.php triggered by supplying a URL in the base_dir parameter, enabling remote attackers to execute arbitrary PHP code. The CVSS metrics indicate network access,...
CVE-2007-3286
CVE-2007-3286 affects Avaya IP Softphone (R5.2 before SP3 and R6.0). The root cause is multiple buffer overflows in unspecified ActiveX controls within COM objects, allowing remote attackers to execute arbitrary code via unspecified vectors. The available documents do not specify affected version...
CVE-2007-4981
The vulnerability CVE-2007-4981 affects Obedit 3.03 and is a Cross-site Scripting (XSS) flaw in the save function. The issue allows user-assisted remote attackers to inject arbitrary script/HTML via unknown vectors when saving a document, demonstrated by a SCRIPT element in an unspecified context...
CVE-2007-4975
The cited CVE-2007-4975 describes a Cross-site Scripting (XSS) vulnerability in hilfe.php of b1gMail 6.3.1, where an attacker can inject arbitrary script/HTML via the chapter parameter. Affected product appears to be b1gMail 6.3.1, with the vulnerable component/function being hilfe.php. The publi...
CVE-2007-4827
CVE-2007-4827 affects Automated Solutions Modbus Slave ActiveX Control (MiniHMI.exe) and its Modbus/TCP Diagnostic function. The vulnerability occurs when processing malformed Modbus requests to TCP port 502, causing heap corruption and potentially arbitrary code execution. The issue is remote an...
libvorbis security update
CentOS Errata and Security Advisory CESA-2007:0845 Updated libvorbis packages to correct several security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The libvorbis package...
Multiple libvorbis flaws (CVE-2007-4066, CVE-2007-4029)
lib/vorbisfile.c in libvorbisfile in Xiph.Org libvorbis before 1.2.0 allows context-dependent attackers to cause a denial of service infinite loop via a crafted OGG file, aka trac Changeset 13217...
Multiple libvorbis flaws (CVE-2007-4066, CVE-2007-4029)
Multiple buffer overflows in Xiph.Org libvorbis before 1.2.0 allow context-dependent attackers to cause a denial of service or have other unspecified impact via a crafted OGG file, aka trac Changesets 13162, 13168, 13169, 13170, 13172, 13211, and 13215, as demonstrated by an overflow in oggenc.ex...
CVE-2007-4974
Heap-based buffer overflow in the flacbuffercopy function in libsndfile 1.0.17 and earlier might allow remote attackers to execute arbitrary code via a FLAC file with crafted PCM data containing a block with a size that exceeds the previous block size...
CVE-2007-4974
Technical details about CVE-2007-4974 are not publicly provided in the connected documents. No concrete information on affected versions, impact or fixes is included here; monitor for official updates.
CVE-2007-4972
RegMon 7.04 does not properly validate certain parameters to System Service Descriptor Table SSDT function handlers, which allows local users to cause a denial of service crash and possibly gain privileges via kernel SSDT hooks to the 1 NtCreateKey and 2 NtOpenKey Windows Native API functions...
CVE-2007-4970
ProcessGuard 3.410 is vulnerable due to improper validation of parameters passed to System Service Descriptor Table (SSDT) function handlers. The issue enables local users to trigger a denial of service (crash) and potentially gain privileges by abusing kernel SSDT hooks targeting Windows Native ...
CVE-2007-4971
ProSecurity 1.40 Beta 2 contains a vulnerability where parameters passed to System Service Descriptor Table (SSDT) function handlers are not properly validated. This allows a local user to trigger a denial of service (crash) and potentially gain privileges by manipulating kernel SSDT hooks for Wi...
CVE-2007-4968
CVE-2007-4968 – Normal mode \n\nAffected product: Privatefirewall 5.0.14.2.\nWhat is vulnerable: the system service descriptor table (SSDT) function handlers are not properly validated for certain parameters, enabling an attacker with local access to trigger a denial of service (crash) and potent...
CVE-2007-4972
The CVE-2007-4972 issue affects RegMon 7.04 and stems from improper validation of parameters to System Service Descriptor Table (SSDT) function handlers. This flaw allows local users to crash the system and potentially gain privileges via kernel SSDT hooks targeting NtCreateKey and NtOpenKey in W...
CVE-2007-4969
CVE-2007-4969 affects Process Monitor 1.22. The vulnerability stems from improper validation of parameters to System Service Descriptor Table (SSDT) function handlers, enabling local users to crash the system and potentially gain privileges via unspecified kernel SSDT hooks for Windows Native API...
Unfixed XSS vulnerability at www.pc-koubou.jp
Security researcher Narcoticxs, has submitted on 19/09/2007 a cross-site-scripting XSS vulnerability affecting www.pc-koubou.jp, which at the time of submission ranked 71593 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/09/2007. It is...
