CVE-2007-5814

Affected product : SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control. Vulnerability : multiple buffer overflows enabling remote code execution via long Unicode properties in AddRouteEntry (serverAddress, sessionId, clientIPLower, clientIPHigher, userName, domainName, dnsSuffix). The AddR...

CVE-2007-5809

Cross-site scripting XSS vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP requests that trigger creation of a server-status page...

CVE-2007-5812

Directory traversal vulnerability in modules/Builder/DownloadModule.php in ModuleBuilder 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

perl security update

CentOS Errata and Security Advisory CESA-2007:0966 Updated Perl packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Perl is a high-level programming...

CVE-2007-5805

CVE-2007-5805 affects IBM AIX 5.2 and 5.3; the cfgcon component in swcons misvalidates the -p argument, allowing local users in the system group to create or overwrite an arbitrary file and make it world-writable via a symlink-name attack. This issue is tied to an incomplete fix for CVE-2007-5804...

CVE-2007-0011

The CVE-2007-0011 issue affects Citrix Access Gateway (also Citrix Advanced Access Control) prior to Advanced Edition 4.5 HF1. The vulnerability is that a session ID is placed in the URL during the web portal authentication flow, enabling context-dependent attackers to hijack a user session by re...

CVE-2007-5810

Hitachi Web Server versions 01-00 to 03-00-01 (as used by Cosminexus) do not properly validate SSL client certificates, allowing remote attackers to spoof authentication with a forged certificate. The vulnerability is mitigated if SSL client authentication is disabled; no explicit patch/version i...

CVE-2007-5813

ISPworker Download.PHP is affected by multiple directory traversal vulnerabilities. The root cause is insufficient sanitation of user input in download.php, enabling remote attackers to read arbitrary files via .. in the ticketid and filename parameters. Affected versions include ISPworker 1.21 a...

CVE-2007-5808

The CVE-2007-5808 entry concerns an information-disclosure vulnerability in the Schedule component of Hitachi Groupmax Collaboration Portal (and related uCosminexus/Groupmax Web Client components). The non-disclosable information could be exposed via schedule portlets, allowing remote attackers t...

CVE-2007-5807

A buffer overflow exists in the register function of the Ultra Star Reader ActiveX control within SSReader . This vulnerability allows remote attackers to execute arbitrary code via unspecified vectors. This vulnerability has been confirmed as exploited in the wild , with specific sightings docum...

CVE-2007-5812

CVE-2007-5812 affects Module Builder 1.0 within SugarCRM, where the PHP script modules/Builder/DownloadModule.php fails to validate the file parameter before using it to read and disclose file contents. This directory traversal vulnerability allows remote attackers to read arbitrary files on the ...

CVE-2007-5809

The CVE-2007-5809 entry describes a cross-site scripting (XSS) vulnerability in Hitachi Web Server versions 01-00 through 03-10 (as used by certain Cosminexus products). The issue arises when an attacker sends HTTP requests that trigger the server’s automatic creation of a server-status page, all...

CVE-2007-5806

Cross-site scripting XSS vulnerability in Services/Utilities/classes/class.ilUtil.php in ILIAS 3.8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via attributes inside a domain-name string in the 1 mailing or 2 forum component, as demonstrated using the style and...

CVE-2007-5806

CVE-2007-5806 is an XSS vulnerability in ILIAS 3.8.3 and earlier affecting the file Services/Utilities/classes/class.ilUtil.php . The issue allows remote attackers to inject arbitrary web script or HTML via attributes inside a domain-name string in the mailing or forum components, demonstrated us...

Immunity Canvas: CVE_2007_4513

Name| CVE20074513 ---|--- CVE| CVE-2007-4513 Exploit Pack| CANVAS Description| CVE-2007-4513: lquerypv Notes| CVE Name: CVE-2007-4513 VENDOR: IBM VersionsAffected: 5.X Repeatability: unlimited CVE URL: https://vulners.com/cve/CVE-2007-4513 CVSS: 7.2...

Important: Red Hat Security Advisory: perl security update

Updated Perl packages that fix security issues for Red Hat Application Stack v1.2 are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Perl is a high-level programming language commonly used for system administration utilities an...

Important: Red Hat Security Advisory: perl security update

Updated Perl packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Perl is a high-level programming language commonly used for system administration...

Critical: Red Hat Security Advisory: pcre security update

Updated pcre packages that correct two security flaws are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. PCRE is a Perl-compatible regular expression library. Multiple flaws were found in the way...

Critical: Red Hat Security Advisory: pcre security update

Updated pcre packages that correct two security flaws are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. PCRE is a Perl-compatible regular expression library. Multiple flaws were found in the way...

CVE-2007-4621

CVE-2007-4621 describes a local privilege escalation in IBM AIX 5.2 via a buffer overflow in the crontab main function when copying user-supplied command line arguments into a fixed-size BSS buffer. Successful exploitation allows an attacker to execute arbitrary code with root privileges, requiri...