CVE-2007-6520

Opera before 9.25 contains multiple vulnerabilities (CVE-2007-6520, CVE-2007-6521, CVE-2007-6522, CVE-2007-6524) that enable cross-domain scripting via plug-ins, TLS certificate handling that could allow arbitrary code execution, and memory disclosure through BMP/file handling. The issues affect ...

CVE-2007-6522

Opera prior to version 9.25 contains CVE-2007-6522 where rich text editing via designMode can be abused to perform cross-domain scripting. The vulnerability’s impact is described as enabling cross-site scripting by modifying contents in pages on other domains, with associated risk of information ...

CVE-2007-6523

CVE-2007-6523 affects Opera 9.50 beta and Opera 9.x prior to 9.25. The issue is a vulnerability in the handling of bitmap (BMP) files where a crafted BMP can trigger a large number of calculations and checks, leading to high CPU usage and a potential denial of service. The root cause is described...

CVE-2007-6517

CVE-2007-6517 concerns the Eagle Software Aeries Browser Interface (ABI) 3.7.9.17. The vulnerability is a SQL injection in the forget-password flow (LostPwd.asp) where the EmailAddress parameter allows an attacker to execute arbitrary SQL commands. The description notes that some details come fro...

CVE-2007-6519

The CVE concerns HP Tru64 UNIX, specifically the File-on-File Mounting File System (FFM) in versions 5.1B-4 and 5.1B-3. The vulnerability is described as unspecified and locally exploitable, causing a denial of service (system crash) via unspecified vectors. The connected documents do not provide...

CVE-2007-6419

CVE-2007-6419 targets HP-UX rpc.yppasswdd and is described as an unspecified remote DoS that can crash the daemon on HP-UX releases B.11.11, B.11.23, and B.11.31. Connected sources confirm concrete remediation paths: HP patches PHNE_36168, PHNE_36260, and PHNE_36449 address this issue, tied to HP...

CVE-2007-6521

Opera before 9.25 is affected by a heap-based buffer overflow during TLS certificate parsing (specifically subject alternative names in X.509 certificates), which can allow remote attackers to cause a crash or execute arbitrary code. This vulnerability (CVE-2007-6521) was addressed in Opera 9.25,...

CVE-2007-6524

Technical details for CVE-2007-6524 are not provided in the connected documents. The initial description mentions a memory-content leak via BMP in Opera before 9.25, but no concrete affected versions, root cause, impact, or fixes are included here. Monitor for updates.

CVE-2007-6518

WoltLab Burning Board Lite 1.0.2 pl3e (search.php) contains multiple SQL injection vulnerabilities exploitable via the showposts, sortby, and sortorder parameters. Remote attackers could manipulate SQL queries, potentially impacting data confidentiality, integrity, and availability as indicated b...

Microsoft Office Publisher多个拒绝服务漏洞

BUGTRAQ ID: 26982 CNCAN ID:CNCAN-2007122407 Microsoft Office Publisher是一款微软提供的桌面出版应用软件。 Microsoft Office Publisher处理特殊构建的程序存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 建立一个Publisher文件，并修改00006B90到00006D90为A，可导致应用程序崩溃。或者建立的新文件增加一个使用多个“A”的"wordart"选项，然后修改000077D0到000079B0为A。可导致应用程序崩溃。 Microsoft Publisher 2007 0...

RHEL 4 / 5 : thunderbird (RHSA-2007:1083)

Updated thunderbird packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. A cross-site...

SuSE 10 Security Update : PHP5 (ZYPP Patch Number 4808)

This update fixes multiple bugs in php : - use system pcre library to fix several pcre vulnerabilities. CVE-2007-1659 / CVE-2006-7230 / CVE-2007-1660 / CVE-2006-7227 / CVE-2005-4872 / CVE-2006-7228 - Flaws in processing multi byte sequences in htmlentities/htmlspecialchars. CVE-2007-5898 - overly...

Samba lsa_io_trans_names buffer overflow

Added: 12/24/2007 CVE: CVE-2007-2446 BID: 24195 OSVDB: 34699 Background Samba is a software package which implements the SMB protocol on a variety of platforms, providing compatibility with Windows systems. Problem A vulnerability in the LSA RPC interface allows a remote attacker to execute...

HP OpenView Network Node Manager ovlogin.exe buffer overflow

Added: 12/24/2007 CVE: CVE-2007-6204 BID: 26741 OSVDB: 39529 Background HP OpenView Network Node Manager is network availability and performance management software. Problem A buffer overflow in the Network Node Manager web interface allows remote attackers to execute arbitrary commands by sendin...

Unfixed XSS vulnerability at poisk.ru

Security researcher Uber0n, has submitted on 24/12/2007 a cross-site-scripting XSS vulnerability affecting poisk.ru, which at the time of submission ranked 56977 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2007. It is currently unfixe...

CentOS 4 : mysql (CESA-2007:1222-001)

The remote CentOS system is missing a security update which has been documented in Red Hat advisory RHSA-2007-1157. %NASLMINLEVEL 70300 Disabled on 2013/06/28. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Red Hat Security Advisory...

[ISecAuditors Security Advisories] Tikiwiki CMS is vulnerable to path traversal attack

============================================= INTERNET SECURITY AUDITORS ALERT 2007-006 - Original release date: December 18th, 2007 - Last revised: December 24th, 2007 - Discovered by: Jesus Olmos Gonzalez - Severity: 5/5 ============================================= I. VULNERABILITY...

Samba lsa_io_trans_names buffer overflow

Added: 12/24/2007 CVE: CVE-2007-2446 BID: 24195 OSVDB: 34699 Background Samba is a software package which implements the SMB protocol on a variety of platforms, providing compatibility with Windows systems. Problem A vulnerability in the LSA RPC interface allows a remote attacker to execute...

RHEL 4 : autofs5 (RHSA-2007:1177)

Updated autofs5 technology preview packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The autofs utility controls the operation of the automount daemon, which...

openSUSE 10 Security Update : xen (xen-4854)

This update fixes various Xen issues. Two security problems were fixed: CVE-2007-5906: Xen allowed virtual guest system users to cause a denial of service hypervisor crash by using a debug register DR7 to set certain breakpoints. CVE-2007-5907: Xen 3.1.1 does not prevent modification of the CR4 T...