CVE-2007-6637

CVE-2007-6637 is a cross-site scripting (XSS) vulnerability in Adobe Flash Player triggered by crafted SWF files, enabling remote script/HTML execution via SWF parameters. The issue is discussed alongside related CVEs (e.g., CVE-2007-6244) and is reflected in Red Hat advisories for Flash Player, ...

Debian DSA-1446-1 : wireshark - several vulnerabilities

Several remote vulnerabilities have been discovered in the Wireshark network traffic analyzer, which may lead to denial of service. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-6450 The RPL dissector could be tricked into an infinite loop. -...

Debian DSA-1443-1 : tcpreen - buffer overflows

It was discovered that several buffer overflows in tcpreen, a tool for monitoring a TCP connection, may lead to denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-1443. The...

CVE-2007-6627

CVE-2007-6627 affects LScube Feng

CVE-2007-6629

The CVE-2007-6629 entry concerns LScube Feng 0.1.15 and earlier, where an interpretation conflict in a User-Agent line containing a carriage-return character can trigger a NULL dereference and daemon crash, causing a denial of service. The issue arises because the line-delimiter handling differs ...

CVE-2007-6634

CVE-2007-6634 describes multiple SQL injection vulnerabilities in FAQMasterFlexPlus , possibly versions 1.5 or 1.52 . The issue allows remote attackers to execute arbitrary SQL commands via the category_id parameter to faq.php , and potentially via other scripts. The sources indicate an unauthent...

CVE-2007-6638

The CVE affects March Networks DVR 3204. The issue is improper access control in the web root that allows remote attackers to directly access scripts/logfiles.tar.gz, exposing usernames, passwords, device names, and IP addresses. The vulnerability is described with a CVSS base score of 10.0 (HIGH...

CVE-2007-6628

CVE-2007-6628 affects LScube Feng 0.1.15 and earlier. The issue allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via two malformed headers: (1) Transport header triggering misparsing in RTSP_setup.c’s parse_transport_header (example: a header containing onl...

CVE-2007-6635

FAQMasterFlexPlus (likely Version 1.5 or 1.52) stores the admin password in cleartext in a database. The underlying issue is the insecure storage of credentials, enabling context-dependent attackers who gain access to the database to obtain the password. The documents do not specify additional af...

CVE-2007-6625

Technical details (affected product/version, root cause, remediation) are not publicly available in the provided connected documents. Monitor for updates. The CVE entry describes a denial-of-service via invalid format string in IDM 3.5.1, but no further specifics are given here.

MacroVision InstallShield Update Service DownloadAndExecute buffer overflow

Added: 01/04/2008 CVE: CVE-2007-6654 BID: 27013 OSVDB: 39980 Background MacroVision InstallShield is software for creating installers or software packages. Problem A buffer overflow in the DownloadAndExecute function in the Update Service ActiveX control allows command execution when a user loads...

Fedora 8 : wordpress-2.3.2-1.fc8 (2008-0103)

This closes : http://www.blackhatdomainer.com/how-to-know-today-what-shoemoney-is-go ing-to-post-tomorrow/ http://www.securityfocus.com/archive/1/485252/30/0/threaded http://trac.wordpress.org/ticket/5487 Note that Tenable Network Security has extracted the preceding description block directly fr...

Fedora 7 : qt4-4.3.3-1.fc7 (2007-4354)

An update to the latest upstream release. Includes fix for security issue CVE-2007-5965 rhbz411751. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

SuSE 10 Security Update : libsndfile (ZYPP Patch Number 4431)

This update fixes a possible buffer overflow that occurs while reading decoded PCM data from the FLAC library. CVE-2007-4974 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Fedora 8 : qt4-4.3.3-1.fc8 (2007-4285)

An update to the latest upstream release. Includes fix for security issue CVE-2007-5965 rhbz411751. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Remote file inclusion

PHP remote file inclusion vulnerability in admin/frontpageright.php in Agares Media phpAutoVideo 2.21 allows remote attackers to execute arbitrary PHP code via a URL in the loadadminpage parameter, a related issue to CVE-2007-6542...

CVE-2007-6614

PHP remote file inclusion vulnerability in admin/frontpageright.php in Agares Media phpAutoVideo 2.21 allows remote attackers to execute arbitrary PHP code via a URL in the loadadminpage parameter, a related issue to CVE-2007-6542...

CVE-2007-6614

CVE-2007-6614 : PHP remote file inclusion in Agares Media phpAutoVideo 2.21. The vulnerability affects the admin/frontpage_right.php script and allows remote attackers to execute arbitrary PHP code via a URL supplied to the loadadminpage parameter. This is described as related to CVE-2007-6542. N...

CVE-2007-6615

The CVE-2007-6615 entry concerns Agares Media phpAutoVideo 2.21. The vulnerability is a directory traversal in includes/block.php that allows remote attackers to include and execute arbitrary local files through crafted directory traversal sequences in the selected_provider parameter. This is con...

CVE-2007-6616

CVE-2007-6616 describes a Cross-site Scripting (XSS) flaw in SimpleForum, exploitable via the searchkey parameter in the search action of simpleforum.cgi. Affected software includes SimpleForum 4.6.2 and earlier releases. The vulnerability allows remote attackers to inject arbitrary web script or...