CVE-2007-5997

SQL injection vulnerability in campaignstats.php in Softbiz Banner Exchange Network Script 1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter...

CVE-2007-5997

CVE-2007-5997 describes an SQL injection vulnerability in the campaign_stats.php of Softbiz Banner Exchange Network Script 1.0. The issue allows remote authenticated users to execute arbitrary SQL commands via the id parameter. The vulnerability is documented with a Medium base score (CVSS v2: 6....

CVE-2007-6008

CVE-2007-6008 describes a heap-based buffer overflow in emlsr.dll before version 2.0.0.4 used by Autonomy (Verity) KeyView components (Viewer, Filter, and Export SDK). The flaw allows remote code execution via a long Content-Type header line in an EML file. Affected software is Autonomy/Verity Ke...

CVE-2007-6006

The CVE-2007-6006 entry concerns TestLink before version 1.7.1 that does not enforce an unspecified authorization mechanism. The impact and attack vectors are not explicitly defined in the provided documents; exploitation details are not provided. No concrete remediation or vendor/version specifi...

CVE-2007-6005

CVE-2007-6005 affects WebEx via the GpcContainer.1 ActiveX control and can cause denial of service through a memory access violation triggered by an invalid InitParam argument or an unspecified vector in SetParam. Exploitation and affected versions are not specified in the provided documents; no ...

CVE-2007-6004

CVE-2007-6004 affects Toko Instan 7.6. Multiple SQL injection weaknesses exist in index.php, exploitable via (1) id parameter in an artikel action and (2) katid parameter in a produk action, enabling remote arbitrary SQL execution. No remediation details are provided in the supplied documents.

CVE-2007-6002

CVE-2007-6002 describes a cross-site scripting (XSS) vulnerability in Fenriru Sleipnir (≤ 2.5.17 R2) and Grani (≤ 3.0). The flaw allows remote attackers to inject arbitrary web script or HTML via the Search field when performing a search for additions to the Favorites section. The connected docum...

CVE-2007-5993

CVE-2007-5993 concerns a cross-site scripting (XSS) flaw in Visionary Technology in Library Solutions (VTLS) vtls.web.gateway prior to version 48.1.1. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the searchtype parameter. Documented impact implies potential...

CVE-2007-4702

The Application Firewall in Apple Mac OS X 10.5, when "Block all incoming connections" is enabled, does not prevent root processes or mDNSResponder from accepting connections, which might allow remote attackers or local root processes to bypass intended access restrictions...

CVE-2007-4703

CVE-2007-4703 concerns the Apple Mac OS X 10.5 Application Firewall: a root (UID 0) process can still accept inbound connections despite the “Block incoming connections” setting, bypassing intended access restrictions. This is documented across multiple sources (NVD entry and distributed advisori...

CVE-2007-4702

The Application Firewall in Apple Mac OS X 10.5, when "Block all incoming connections" is enabled, does not prevent root processes or mDNSResponder from accepting connections, which might allow remote attackers or local root processes to bypass intended access restrictions...

CVE-2007-5501

The CVE-2007-5501 entries confirm a vulnerability in the Linux kernel 2.6.21–2.6.23.7 and 2.6.24-rc through 2.6.24-rc2 where remote attackers can cause a denial of service (crash) by sending crafted ACKs that trigger a NULL pointer dereference in net/ipv4/tcp_input.c (tcp_sacktag_write_queue). Th...

CVE-2007-5905

Adobe ColdFusion 8 and ColdFusion MX 7 are affected by a remote session-fixation vulnerability. The issue arises when established sessions in a ColdFusion application can be hijacked if CFID/CFTOKEN cookies are empty, enabling an attacker to impersonate a user. The CVE-2007-5905 entry lists these...

CVE-2007-4702

The CVE-2007-4702 issue affects Mac OS X 10.5 where the Application Firewall setting “Block all incoming connections” does not reliably block connections for root processes (UID 0) and for mDNSResponder, potentially allowing remote attackers or local root processes to bypass access restrictions. ...

losetup, mount, util security update

CentOS Errata and Security Advisory CESA-2007:0969 Updated util-linux packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The util-linux package contains...

wireshark security update

CentOS Errata and Security Advisory CESA-2007:0709 New Wireshark packages that fix various security vulnerabilities and functionality bugs are now available for Red Hat Enterprise Linux 4. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the...

Moderate: Red Hat Security Advisory: net-snmp security update

Updated net-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. Simple Network Management Protocol SNMP is a protocol used for network management. A flaw was discovered in the way net-snmp handled certain requests. A remote attacker who can connect ...

Moderate: Red Hat Security Advisory: util-linux security update

Updated util-linux packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The util-linux package contains a large variety of low-level system utilities that...

openssh security update

CentOS Errata and Security Advisory CESA-2007:0703 Updated openssh packages that fix two security issues and various bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol...

Critical: Red Hat Security Advisory: samba security update

Updated samba packages that fix a security issue are now available for Red Hat Enterprise Linux 4.5 Extended Update Support. This update has been rated as having critical security impact by the Red Hat Security Response Team. Samba is a suite of programs used by machines to share files, printers,...