CVE-2007-5340

Multiple vulnerabilities in the Javascript engine in Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and SeaMonkey before 1.1.5 allow remote attackers to cause a denial of service crash via crafted HTML that triggers memory corruption...

CVE-2007-5339

CVE-2007-5339 is in Mozilla Firefox (pre-2.0.0.8), Mozilla Thunderbird (pre-2.0.0.8) and SeaMonkey (pre-1.1.5). The flaws arise from crafted HTML triggering memory corruption or assert errors, leading to remote denial of service (crash); some entries also indicate potential arbitrary code executi...

CVE-2007-5340

CVE-2007-5340 is part of multiple vulnerabilities in the Javascript engine of Mozilla Firefox (<2.0.0.8), Thunderbird (<2.0.0.8), and SeaMonkey (

Unfixed XSS vulnerability at www.cozitravel.com

Security researcher St@R-gaZ3r, has submitted on 21/10/2007 a cross-site-scripting XSS vulnerability affecting www.cozitravel.com, which at the time of submission ranked 5298851 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/10/2007. It is...

Unfixed XSS vulnerability at equality.ipet.gr

Security researcher St@R-gaZ3r, has submitted on 21/10/2007 a cross-site-scripting XSS vulnerability affecting equality.ipet.gr, which at the time of submission ranked 2885527 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/10/2007. It is...

Apache Tomcat - WebDAV SSL Remote File Disclosure

Apache Tomcat - WebDAV SSL Remote File Disclosure !/usr/bin/perl ================================================================ Apache Tomcat Remote File Disclosure Zeroday Xploit - With support for SSL MoDiFiEd version by : h3rcul3s ORiGiNaL Version by : kcdarookie aka eliteb0y / 2007...

Immunity Canvas: REAL_IMPORT

Name| realimport ---|--- CVE| CVE-2007-5601 Exploit Pack| CANVAS Description| Real Player ActiveX Import Overflow Notes| CVE Name: CVE-2007-5601 VENDOR: Real URL: http://www.us-cert.gov/cas/techalerts/TA07-297A.html VersionsAffected: Repeatability: Infinite References: CVE Url:...

CVE-2007-5601

A stack-based buffer overflow exists in the Database Component of the MPAMedia.dll library within RealNetworks RealPlayer (versions 10.5, 11 beta, 10, RealOne Player, and RealOne Player 2). The root cause is a signedness error or lack of adequate boundary checks when handling playlist names via t...

firefox security update

CentOS Errata and Security Advisory CESA-2007:0979 Updated firefox packages that fix several security bugs are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source...

thunderbird security update

CentOS Errata and Security Advisory CESA-2007:0981 Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a...

[SECURITY] [DSA 1392-1] New xulrunner packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1392-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 20th, 2007 http://www.debian.org/security/faq -...

[CAID 35754]: CA Host-Based Intrusion Prevention System (CA HIPS) Server Vulnerability

Title: CAID 35754: CA Host-Based Intrusion Prevention System CA HIPS Server Vulnerability CA Vuln ID CAID: 35754 CA Advisory Date: 2007-10-18 Reported By: David Maciejak Impact: A remote attacker can take unauthorized administrative action. Summary: CA Host-Based Intrusion Prevention System CA HI...

DSA-1392-1 xulrunner - several vulnerabilities

Bulletin has no description...

Serious holes affecting SiteBar 3.3.8

All, As a result of a short security audit of SiteBar, a number of security holes were found. The holes included code execution, a malicious redirect and multiple cases of Javascript injection. After liasing with the developers, the holes have been patched. Attached are the advisory and patch...

RealPlayer playlist name stack buffer overflow

Overview RealPlayer contains a stack buffer overflow in the handling of playlist names, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description RealNetworks RealPlayer is a multimedia application that allows users to view local and remote...

Immunity Canvas: AWZMB_INCLUDE

Name| awzmbinclude ---|--- CVE| CVE-2007-5592 Exploit Pack| CANVAS Description| awzMB remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: awzMB CVE Url: https://vulners.com/cve/CVE-2007-5592 CVE Name: CVE-2007-5592...

CVE-2007-5588

Cross-site scripting XSS vulnerability in mnoGoSearch before 3.2.43 allows remote attackers to inject arbitrary web script or HTML via the t parameter in search.cgi, as reachable from search.htm-dist...

CVE-2007-5589

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.11.1.2 allow remote attackers to inject arbitrary web script or HTML via certain input available in 1 PHPSELF in a serverstatus.php, and b grabglobals.lib.php, c displaychangepassword.lib.php, and d common.lib.php in...

CVE-2007-5379

Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers and ActiveResource servers to determine the existence of arbitrary files and read arbitrary XML files via the Hash.fromxml Hashfromxml method, which uses XmlSimple XML::Simple unsafely, as demonstrated by reading passwords fro...

CVE-2007-5593

install.php in Drupal 5.x before 5.3, when the configured database server is not reachable, allows remote attackers to execute arbitrary code via vectors that cause settings.php to be modified...