18395 matches found
Fedora 7 : Django-0.96.2-1.fc7 (2008-4191)
Mon May 19 2008 Michel Salim - 0.96.2-1 - XSS security update: CVE-2008-2302 bz 442757-60 - Sat Apr 5 2008 Michel Salim - 0.96.1-2 - Package .egg-info file on Fedora = 9 - Thu Nov 1 2007 Michel Salim 0.96.1-1 - i18n security update: CVE-2007-5712, bz357051 Note that Tenable Network Security has...
CVE-2007-5962
creationtimestamp| type| source ---|---|--- 2008-05-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31818 2008-05-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31819 2008-06-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5814...
[SECURITY] [DSA 1583-1] New gnome-peercast packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1583-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 20, 2008 http://www.debian.org/security/faq -...
Apache Tomcat fails to properly handle cookie value
Overview Apache Tomcat from the Apache Software Foundation contains a vulnerability that could allow a remote attacker to coerce a crafted cookie to a user's web browser. Apache Tomcat from the Apache Software Foundation is a web container that implements both Java Servlets and JavaServer Pages...
Moderate: Red Hat Security Advisory: bind security, bug fix, and enhancement update
Updated bind packages that fix two security issues, several bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Berkeley Internet Name Domain BIND is an implementation...
Low: Red Hat Security Advisory: nss_ldap security and bug fix update
An updated nssldap package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The nssldap package contains the nssldap and pamldap modules. The nssldap module is a plug-in which allows...
Moderate: Red Hat Security Advisory: Red Hat Network Satellite Server security update
Red Hat Network Satellite Server version 5.0.2 is now available. This update includes fixes for a number of security issues in Red Hat Network Satellite Server components. This update has been rated as having moderate security impact by the Red Hat Security Response Team. During an internal...
msword-xss.txt
Products affected: Microsoft word 2003/2007 OS Tested : Windows Xp all patch The vulnerability is that you can run javascript in an arbitrary manner without permission of the user. While it is limited what you can get to run, this may help attackers using methods that distort the environment...
Low: Red Hat Security Advisory: compiz security update
Updated compiz packages that prevent Compiz from breaking screen saver grabs are now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. Compiz is an OpenGL-based window and compositing manager. Most screen save...
CVE-2007-5752
creationtimestamp| type| source ---|---|--- 2008-05-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5649...
Microsoft Word CSS处理内存破坏漏洞(MS08-026)
BUGTRAQ ID: 29105 CVECAN ID: CVE-2008-1434 Microsoft Word是Office套件中的文字处理软件。 Word处理特制DOC文档的方式中存在一个内存破坏漏洞，如果用户打开的Word文件中CSS选择器的数量大于特定值的话，就会破坏某一对象，导致Word访问已经释放的内存区域。成功利用这个漏洞的攻击者可以完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Word Viewer 2003 SP1 Microsoft Word Viewer 2003 Microsoft Wo...
Microsoft Word RTF畸形字符串处理堆溢出漏洞(MS08-026)
BUGTRAQ ID: 29104 CVECAN ID: CVE-2008-1091 Microsoft Word是Office套件中的文字处理软件。 Word处理特制RTF格式（.rtf）文件的方式中存在堆溢出漏洞，如果用户在Word中打开带有畸形字符串的特制.rtf文件，或在富文本电子邮件中预览带有畸形字符串的特制.rtf文件，就会触发这个溢出，导致执行任意指令。 Microsoft Office 2008 for Mac Microsoft Office 2004 for Mac Microsoft Outlook 2007 SP1 Microsoft Outlook 2007...
Motorola Timbuktu login request buffer overflow
Added: 05/15/2008 CVE: CVE-2007-4221 BID: 25454 OSVDB: 40124 Background Motorola Timbuktu is remote control software for Windows and Mac. It runs a service which listens for connections on port 407/TCP or 407/UDP. Problem A buffer overflow vulnerability when processing login requests allows remot...
CVE-2007-5156
creationtimestamp| type| source ---|---|--- 2008-05-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5618 2008-05-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5688...
CVE-2008-2173
Unspecified vulnerability in Yamaha routers allows remote attackers to cause a denial of service dropped session via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372...
Memory corruption
Use-after-free vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via an HTML document with a large number of Cascading Style Sheets CSS selectors, related to a "memory handling erro...
Design/Logic Flaw
Unspecified vulnerability in Century routers allows remote attackers to cause a denial of service dropped session via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372...
Design/Logic Flaw
Unspecified vulnerability in AlaxalA AX routers allows remote attackers to cause a denial of service dropped session via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372...
Design/Logic Flaw
Unspecified vulnerability in Yamaha routers allows remote attackers to cause a denial of service dropped session via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372...
Design/Logic Flaw
Unspecified vulnerability in Avici routers allows remote attackers to cause a denial of service dropped session via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372...