CVE-2007-5563

CVE-2007-5563 affects VirtueMart versions prior to 1.0.13. Multiple connected sources indicate a remote code execution vulnerability allowing attackers to run arbitrary PHP code via unspecified vectors. The documents do not provide concrete exploit steps, affected configurations, or remediation d...

CVE-2007-5559

Heap-based buffer overflow in the IBM ThinkVantage TPM Service allows remote attackers to execute arbitrary code via a crafted HTTP packet. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is...

CVE-2007-5546

Multiple stack-based buffer overflows in TIBCO SmartPGM FX allow remote attackers to execute arbitrary code or cause a denial of service service stop and file-transfer outage via unspecified vectors. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information...

CVE-2007-5553

CVE-2007-4158 describes a memory-leak DoS in the TIBCO Rendezvous (RV) daemon (rvd) affecting versions 7.5.2, 7.5.3, and 7.5.4. The vulnerability allows a remote attacker to cause memory consumption by processing a specially crafted packet with a length field of zero. The provided connected docum...

CVE-2007-5559

CVE-2007-5559 affects the IBM ThinkVantage TPM Service and is a heap-based buffer overflow that could allow remote attackers to execute arbitrary code via a crafted HTTP packet. The description indicates the disclosure was vague as of 2007-10-16, but the vulnerability is tracked across multiple f...

CVE-2007-5545

CVE-2007-5545 affects TIBCO SmartPGM FX and is a format string vulnerability that could allow remote code execution via format string specifiers in unspecified vectors. The description notes a vague pre-advisory with no actionable information as of 2007-10-16. Connected records provide no version...

CVE-2007-5552

CVE-2007-5552 describes an integer overflow in Cisco IOS that could allow remote execution of arbitrary code. Connected sources consistently name Cisco IOS as affected and identify the vulnerability as an integer overflow with remote-code-execution impact, but the disclosure vectors are described...

CVE-2007-5560

Heap-based buffer overflow in the Juniper HTTP Service allows remote attackers to execute arbitrary code via a crafted HTTP packet. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being...

CVE-2007-5554

CVE-2007-5554 involves Oracle database servers where remote attackers can obtain server memory contents via crafted packets (Oracle reference number 7892711). The connected documents do not specify affected versions or concrete exploitation details. No remediation or mitigations are provided in t...

CVE-2007-5549

Cisco IOS: vulnerable component is Command EXEC that allows local users to bypass command restrictions and access sensitive information via an unspecified variation of an IOS command (two disclosed methods, CSCsk16129). The exact root cause, affected IOS versions, and remediation are not provided...

CVE-2007-5561

Format string vulnerability in the Oracle OPMN daemon’s logging function affects Oracle Enterprise Grid Console server 10.2.0.1. A remote attacker can craft a URI in an HTTP request to port 6003 to trigger the flaw and potentially execute arbitrary code. The description notes this may be related ...

CVE-2007-5562

The CVE-2007-5562 issue affects Netgear SSL312 PROSAFE SSL VPN-Concentrator 25 . The vulnerable component is the login page at cgi-bin/welcome , exploitable via the err parameter in the context of an error page to trigger Cross-site Scripting (XSS) . The provided description indicates remote atta...

CVE-2007-5555

Technical details for CVE-2007-5555 are not publicly available in the provided documents; no affected products, root cause, impact or fix are disclosed. Monitor for updates.

CVE-2007-5546

Technical details about CVE-2007-5546 are not publicly provided in the supplied documents. The initial description notes a vague pre-disclosure with no actionable information. Monitor for updates to obtain affected products, vectors, and fixes.

CVE-2007-5560

CVE-2007-5560 describes a heap-based buffer overflow in the Juniper HTTP Service that allows remote attackers to execute arbitrary code via a crafted HTTP packet. The underlying cause is a memory corruption failure within the service, leading to potential full system compromise (as indicated by t...

CVE-2007-5564

NSSboard (formerly Simple PHP Forum) 6.1 is affected by multiple XSS vulnerabilities. The issue allows remote attackers to inject arbitrary script/HTML via (1) HTML tags when BBCode is disabled; or (2) the user, (3) email, or (4) Real Name fields in a profile. The connected documents confirm the ...

CVE-2007-5550

Technical details for CVE-2007-5550 are not publicly available in the provided documents. The sources mention an IOS version disclosure via a common network service but give no concrete affected products, versions, impact, or remediation. Monitor for updates.

CVE-2007-5551

Off-by-one error in Cisco IOS allows remote attackers to execute arbitrary code via unspecified vectors that trigger a heap-based buffer overflow. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, i...

CVE-2007-5556

Technical details about CVE-2007-5556 are not publicly available in the provided documents. No concrete exploit or affected product/version is specified here; monitor for updates.

CVE-2007-5547

Cisco IOS is reported to have a cross-site scripting (XSS) vulnerability (CVE-2007-5547) that allows remote attackers to inject arbitrary web script or HTML and to execute IOS commands via unspecified vectors. The affected product is Cisco IOS; the underlying root cause and precise exploitation v...