CVE-2007-4679

CVE-2007-4679 affects Apple Mac OS X 10.4–10.4.10 via CFNetwork’s FTP implementation. Remote FTP servers can craft PASV responses to cause the client to connect to an attacker‑controlled host. Impact: partial integrity, no confidentiality or availability impact stated; exploit requires network ac...

CVE-2007-4690

CVE-2007-4690 is a double-free vulnerability in the NFS component of Apple Mac OS X 10.4–10.4.10. The underlying issue occurs when processing AUTH_UNIX RPC calls, allowing remote authenticated users to execute arbitrary code. Affected software: Apple Mac OS X (and Mac OS X Server) up to 10.4.10. ...

CVE-2007-4268

CVE-2007-4268 affects Apple Mac OS X 10.4–10.4.10 (Mac OS X Server 10.4–10.4.10) and involves an Integer signedness error in the Networking/AppleTalk mbuf allocation path. A crafted AppleTalk message containing a negative value satisfies a signed comparison during mbuf allocation but is later int...

CVE-2007-4684

CVE-2007-4684 is a local kernel vulnerability in Apple Mac OS X 10.4–10.4.10 where the i386_set_ldt system call can overflow a single byte in num_sels, enabling local arbitrary code execution. Exploitation was demonstrated on Mac OS X 10.4.11-era builds via a local access path; references note an...

CVE-2007-4682

The CVE-2007-4682 issue affects Apple Mac OS X 10.4 through 10.4.10, where CoreText faulty handling of text content can trigger an uninitialized object pointer, causing an application crash or potentially arbitrary code execution. Evidence from multiple sources describes CoreText as the vulnerabl...

CVE-2007-4687

Apple Mac OS X 10.4–10.4.10 contains a symbolic link from /private/tftpboot to the root directory, allowing tftpd users to escape the private directory and access arbitrary files. The issue affects the remote_cmds component and was documented across multiple sources (CVE-2007-4687). Exploitation ...

CVE-2007-5981

Lantronix SCS3200 does not properly handle public-key requests, which allows remote attackers to cause a denial of service unresponsive device via unspecified keyscan requests. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-5977

Cross-site scripting XSS vulnerability in dbcreate.php in phpMyAdmin before 2.11.2.1 allows remote authenticated users with CREATE DATABASE privileges to inject arbitrary web script or HTML via a hex-encoded IMG element in the db parameter in a POST request, a different vulnerability than...

CVE-2007-5977

Cross-site scripting XSS vulnerability in dbcreate.php in phpMyAdmin before 2.11.2.1 allows remote authenticated users with CREATE DATABASE privileges to inject arbitrary web script or HTML via a hex-encoded IMG element in the db parameter in a POST request, a different vulnerability than...

Unfixed XSS vulnerability at www.cec.org

Security researcher Uber0n, has submitted on 15/11/2007 a cross-site-scripting XSS vulnerability affecting www.cec.org, which at the time of submission ranked 242614 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/11/2007. It is currently...

CVE-2007-5981

CVE-2007-5981 affects Lantronix SCS3200. The device reportedly does not properly handle public-key requests, enabling remote attackers to cause a denial of service (unresponsive device) via unspecified keyscan requests. This entry’s provenance is described as originating from third-party informat...

CVE-2007-5986

CVE-2007-5986 describes an SQL injection in BtiTracker (affected in versions before 1.4.5). The vulnerability exists in include/functions.php and allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The connected sources confirm the product and vulnerable component b...

CVE-2007-5974

SQL injection vulnerability in mailer.php in JPortal 2 allows remote attackers to execute arbitrary SQL commands via the to parameter...

CVE-2007-5984

The CVE-2007-5984 issue affects Justin Hagstrom AutoIndex PHP Script prior to 2.2.4. A crafted %00 sequence in the dir parameter to index.php triggers an erroneous recursive calculation, leading to a denial of service (high CPU and memory consumption). The vulnerability is remote and does not spe...

[ GLSA 200711-17 ] Ruby on Rails: Multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200711-17 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...

CVE-2007-5984

classes/Url.php in Justin Hagstrom AutoIndex PHP Script before 2.2.4 allows remote attackers to cause a denial of service CPU and memory consumption via a %00 sequence in the dir parameter to index.php, which triggers an erroneous "recursive calculation."...

Unfixed XSS vulnerability at www.elephant.se

Security researcher Uber0n, has submitted on 15/11/2007 a cross-site-scripting XSS vulnerability affecting www.elephant.se, which at the time of submission ranked 898939 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/11/2007. It is currentl...

CVE-2007-4698

CVE-2007-4698 : Apple Safari 3 before Beta Update 3.0.4 (Windows) and Mac OS X 10.4–10.4.10 is vulnerable to cross-site scripting by causing JavaScript events to be associated with the wrong frame, enabling script execution in another site context. The issue affects Safari/WebKit components as de...

Unfixed XSS vulnerability at info.prevx.com

Security researcher Hexspirit, has submitted on 15/11/2007 a cross-site-scripting XSS vulnerability affecting info.prevx.com, which at the time of submission ranked 27387 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/11/2007. It is current...

CVE-2007-5983

The CVE affects the Justin Hagstrom AutoIndex PHP Script prior to 2.2.3, where the vulnerable component is index.php. The root cause is a Cross-site Scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML through the PATH_INFO (PHP_SELF). The exploitation...