Unfixed XSS vulnerability at www.telkarim.com

Security researcher BackDoor, has submitted on 11/09/2007 a cross-site-scripting XSS vulnerability affecting www.telkarim.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currently...

RHEL 4 / 5 : tetex (RHSA-2007:1027)

Updated tetex packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. TeTeX is an implementation of TeX. TeX takes a text file and a set of formatting...

RHEL 5 : openldap (RHSA-2007:1037)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2007:1037 advisory. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. A flaw was found in the way...

Debian DSA-1404-1 : gallery2 - programming error

Nicklous Roberts discovered that the Reupload module of Gallery 2, a web-based photo management application, allowed unauthorized users to edit Gallery's data file. The oldstable distribution sarge does not contain a gallery2 package. The previous gallery package is not affected by this...

[SECURITY] [DSA 1404-1] New gallery2 packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 1404-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 8th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1403-1] New phpmyadmin packages fix cross-site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA 1403-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 8th, 2007 http://www.debian.org/security/faq -...

Buffer overflow

Buffer overflow in MDSYS.SDOCS in Oracle Database Server 8iR3, 9iR1, 9iR2 up to 9.2.0.6, and 10gR1 up to 10.1.0.4 allows remote authenticated users to cause a denial of service crash and execute arbitrary code via the TRANSFORM function. NOTE: this issue might already be covered by CVE-2007-5515,...

CVE-2007-5897

Buffer overflow in Oracle Database Server (MDSYS.SDO_CS) allows remote authenticated users to crash the server and execute arbitrary code via the TRANSFORM function. Affected: Oracle 8iR3, 9iR1/2 up to 9.2.0.6, and 10gR1 up to 10.1.0.4. Note: this CVE may be related to CVE-2007-5515, CVE-2007-550...

CVE-2007-5766

SQL injection vulnerability in okxLOV.jsp in Oracle E-Business Suite 11 and 12 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: this is probably the same issue as CVE-2007-5527 or CVE-2007-5528, but there are insufficient details to be sure...

Sql injection

SQL injection vulnerability in okxLOV.jsp in Oracle E-Business Suite 11 and 12 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: this is probably the same issue as CVE-2007-5527 or CVE-2007-5528, but there are insufficient details to be sure...

CVE-2007-4517

CVE-2007-4517 affects Oracle Database 10g Release 2, specifically the XDB_PITRIG_PKG.PITRIG_DROPMETADATA procedure. A buffer overflow is triggered by a long combined OWNER or NAME parameter, enabling remote authenticated attackers to execute arbitrary code. Exploitation evidence exists in multipl...

CVE-2007-5766

The vulnerability CVE-2007-5766 affects Oracle E-Business Suite 11/12, specifically the okxLOV.jsp page in the Administration console. The root cause is improper input handling that allows an attacker to inject arbitrary SQL in the context of the APPS user, enabling remote exploitation without au...

CVE-2007-5896

Mozilla Firefox 2.0.0.9 is affected by CVE-2007-5896 where an iframe with JavaScript can trigger a denial of service by redirecting document.location to include a leading NULL byte with URIs such as res://, about:config, or file:///. The vulnerability allows remote attackers to cause CPU consumpt...

pcre security update

CentOS Errata and Security Advisory CESA-2007:0967 Updated pcre packages that correct two security flaws are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. PCRE is a Perl-compatible regular...

CVE-2007-4223

Dbgv.sys in Microsoft Sysinternals DebugView before 4.72 provides an unspecified mechanism for copying data into kernel memory, which allows local users to gain privileges via unspecified vectors...

CVE-2007-4129

CVE-2007-4129 affects CoolKey 1.1.0, where a local attacker can exploit a symlink in /tmp/.pk11ipc1/ to overwrite arbitrary files. This is a local impact vulnerability with the root cause in how temporary folders are created. Public sources confirm the issue and reference vendor advisories and pa...

CVE-2007-3921

CVE-2007-3921 affects gforge (Debian packages gforge 3.1 and 4.5.14) where insecure handling of temporary files enables local users to truncate arbitrary files via a symlink attack. The Debian security advisory DSA-1402-1 documents the vulnerability and fixes, with updated packages for etch (4.5....

CVE-2007-4223

CVE-2007-4223 concerns the Microsoft Sysinternals DebugView driver Dbgv.sys. Before version 4.72, the kernel module exposes a mechanism that can copy user-supplied data into kernel memory, enabling local privilege escalation. The vulnerability requires the DebugView driver to be loaded (e.g., by ...

Immunity Canvas: SSREADER

Name| ssreader ---|--- CVE| CVE-2007-5892 Exploit Pack| CANVAS Description| SSReader 4.0 Stack based buffer overflow Notes| CVE Name: CVE-2007-5892 VENDOR: SSReader Repeatability: Infinite client side - no crash CVE URL: https://vulners.com/cve/CVE-2007-5892 Date public: 11/07/2007 CVSS: 10.0...

CVE-2007-4352

Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruption and execute arbitrary code via a crafted PDF file...