CVE-2007-6312

CVE-2007-6312 is an XSS vulnerability in the login page of Websense’s Web Reporting Tools portal (Websense Enterprise/Web Security Suite 6.3). The issue arises because the username field is not properly sanitized, allowing remote attackers to inject arbitrary script or HTML via that input. Affect...

CVE-2007-6306

CVE-2007-6306 affects JFreeChart 1.0.8 and in the image map feature allows remote attackers to inject arbitrary web script or HTML via multiple attributes (chart name, chart tool tip text, href, shape, or coords) of a chart area. This is a cross-site scripting (XSS) vulnerability resulting from p...

CVE-2007-6307

CVE-2007-6307 affects wwwstats 3.21, specifically the clickstats.php component. It describes cross-site scripting (XSS) via user-supplied input in the link parameter or the User-Agent header, enabling remote attackers to inject arbitrary script/HTML. The CVSS base score is 4.3 (Medium) with impac...

CVE-2007-6309

The CVE-2007-6309 entry describes multiple cross-site scripting (XSS) vulnerabilities in webSPELL 4.1.2, specifically in index.php. The issues allow remote attackers to inject arbitrary script/HTML via parameters in two actions: (1) galleryID in a usergallery upload action, and (2) upID, tag, mon...

CVE-2007-6308

CVE-2007-6308 affects Klab HttpLogger 0.8.1, described as a cross-site scripting (XSS) vulnerability. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, enabling arbitrary script execution in the user’s browser. The associated documents identify Http...

CVE-2007-6205

CVE-2007-6205 is a cross-site scripting (XSS) vulnerability in the remote RSS sidebar plugin (serendipity_plugin_remoterss) of S9Y Serendipity prior to 1.2.1. An attacker can inject arbitrary script/HTML via a link in an RSS feed. Public advisories (Debian DSA-1528-1, related OpenVAS/NVL) documen...

[SECURITY] [DSA 1481-1] New Linux 2.6.18 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1428-1 [email protected] http://www.debian.org/security/ dann frazier December 10th, 2007 http://www.debian.org/security/faq -...

python, tkinter security update

CentOS Errata and Security Advisory CESA-2007:1077-01 Updated python packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Python is an interpreted,...

serendipity-xss.txt

Source: http://www.int21.de/cve/CVE-2007-6205-s9y.html Cross site scripting XSS in rss feed plugin of Serendipity 1.2 References http://www.s9y.org/ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6205 Description The Serendipity blog system contains a plugin to display the content of feed...

MS07-064 Microsoft DirectX DirectShow SAMI Buffer Overflow

This module exploits a stack buffer overflow in the DirectShow Synchronized Accessible Media Interchanged SAMI parser in quartz.dll. This module has only been tested with Windows Media Player 6.4.09.1129 and DirectX 8.0. Module Options msf use exploit/windows/misc/ms07/064sami msf undefined064sam...

Microsoft Windows Vista privilege escalation vulnerability

Overview Microsoft Windows Vista contains a local privilege escalation vulnerability. Description The Windows Advanced Local Procedure Call ALPC does not properly evaluate certain conditions in legacy reply paths.Per Microsoft Security Bulletin MS07-066: An elevation of privilege vulnerability...

Fedora 7 : phpMyAdmin-2.11.3-1.fc7 (2007-4298)

Upstream released 2.11.3 - Removed the RPM scriptlets doing httpd restarts 227025 - Patched an information disclosure known as CVE-2007-0095 221694 - Provide virtual phpmyadmin package and a httpd alias 231431 Note that Tenable Network Security has extracted the preceding description block...

Fedora Core 6 : openoffice.org-2.0.4-5.5.25 (2007-762)

CVE-2007-4575 restrict java instantiation features of hsqldb Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 7 : kernel-2.6.23.8-34.fc7 (2007-3751)

Update to kernel 2.6.23.9-rc1: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.2 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.3 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.4 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.5...

Fedora 8 : ruby-gnome2-0.16.0-18.fc8 (2007-4216)

Fix CVE-2007-6183, format string vulnerability bugzilla 402871 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

MS07-065: Vulnerability in Message Queuing Could Allow Remote Code Execution (937894)

The remote version of Windows is affected by a vulnerability in Microsoft Message Queuing Service MSMQ. An attacker may exploit this flaw to execute arbitrary code on the remote host with the SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29309;...

Fedora 8 : openoffice.org-2.3.0-6.7.fc8 (2007-4172)

CVE-2007-4575 restrict java instantiation features of hsqldb Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 8 : eggdrop-1.6.18-12.fc8 (2007-4305)

Added a patch to fix some stack based overflows CVE-2007-2807 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Debian DSA-1428-2 : linux-2.6 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : This is an update to DSA 1428-1 which omitted a reference...

MS07-068: Vulnerability in Windows Media File Format Could Allow Remote Code Execution (941569 / 944275)

The remote host is running Windows Media Player/Service. There is a vulnerability in the remote version of this software that could allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, one attacker would need to set up a rogue ASF file and send it to a victim on t...