18432 matches found
CVE-2007-5281
The Java Secure Socket Extension JSSE in the Hitachi Cosminexus Developer's Kit for Java in various Hitachi Cosminexus 7.5 products before 07-50-01, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service via certain SSL/TLS handshake requests. NOTE: this may be...
CVE-2007-5280
Multiple cross-site scripting XSS vulnerabilities in messages.jsp in AppFuse before 2.0 Final allow remote attackers to inject arbitrary web script or HTML via unspecified input that is recorded in 1 success or 2 error messages...
Unfixed Script Insertion vulnerability at randomdude.com
Security researcher WhatALegend, has submitted on 10/09/2007 a Script Insertion vulnerability affecting randomdude.com, which at the time of submission ranked 1439319 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currently...
Debian DSA-1384-1 : xen-utils - several vulnerabilities
Several local vulnerabilities have been discovered in the Xen hypervisor packages which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-4993 By use of a specially crafted grub configuration file a domU us...
MS07-059: Vulnerability in Windows SharePoint Could Result in Elevation of Privilege (942017)
The remote host is running a version of SharePoint Server 2007 or SharePoint Services 3.0 that is vulnerable to a privilege elevation attack in the SharePoint site. An attacker may use this to execute scripts in the context of the SharePoint site. C Tenable Network Security, Inc...
MS07-057: Cumulative Security Update for Internet Explorer (939653)
The remote host is missing the IE cumulative security update 939653. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid26963;...
Sun Solaris I_PEEK IOCTL处理器本地信息泄露漏洞
BUGTRAQ ID: 25905 CVECAN ID: CVE-2007-5225 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris内核的FIFO实现上存在漏洞，本地攻击者可能利用此漏洞获取内核的敏感信息。 Solaris中的FIFO内核ioctl处理器存在安全漏洞，该处理器使用IPEEK ioctl读取FIFO中的一些字节，但没有将这些字节从队列中删除。该命令中的一个参数代表所要读取的字节数，而该参数为整型整数值。由于没有正确地验证这个参数，因此负值就可以导致泄露大量的内核内存内容。 Sun Solaris 9.0 Sun Solaris 8.0 S...
Fedora Core 6 : elinks-0.11.3-1.fc6 (2007-710)
Jump to new upstream version because of security issue 297991/done some other changes already committed to devel Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it ...
Fedora Core 6 : kdebase-3.5.7-1.fc6 / kdelibs-3.5.7-1.fc6 (2007-716)
The remote Fedora Core host is missing one or more security updates : kdebase-3.5.7-1.fc6 : - Tue Oct 2 2007 Than Ngo - 6:3.5.7-1.fc6 - CVE-2007-4224, CVE-2007-4225, CVE-2007-3820 - rh299741, CVE-2007-4569 - Mon Jul 2 2007 Than Ngo - 6:3.5.7-0.fc6.2 - fix 244906 kdelibs-3.5.7-1.fc6 : - Tue Oct 2...
CVE-2007-5281
CVE-2007-3698 is referenced in the JSSE component that processes SSL/TLS handshake requests. In the Hitachi Cosminexus context, JSSE in Hitachi Cosminexus Developer’s Kit for Java (Cosminexus 7.5) prior to 07-50-01 is affected in environments using JSSE for SSL/TLS, allowing a remote attacker to ...
CVE-2007-5284
The CVE-2007-5284 entry is a duplicate of CVE-2007-5279. Connected sources describe a PowerArchiver buffer overflow vulnerability in ConeXware PowerArchiver before 10.20.21. If a user opens a specially crafted BlackHole archive filename, an attacker could execute arbitrary code with the user’s pr...
CVE-2007-5286
CVE-2007-5286 is rejected/not used; it is a duplicate of CVE-2007-5281.
CVE-2007-5282
Cosminexus components Hitachi Cosminexus Agent 03-00..03-05 and Cosminexus Library Standard/Web Edition 04-00/04-01 are affected. A specially crafted data payload from processes other than Cosminexus Manager can cause the Cosminexus Agent process to crash, per JVNDB details. The vulnerability is ...
CVE-2007-5280
CVE-2007-5280 describes multiple XSS vulnerabilities in AppFuse before 2.0 Final, triggered via input recorded in (1) success or (2) error messages within messages.jsp. The affected component is the messages.jsp handling in AppFuse; root cause is improper sanitization/encoding of user input leadi...
CVE-2007-5279
PowerArchiver (ConeXware) has a heap-based/buffer overflow vulnerability disclosed as CVE-2007-5279 affecting versions up to 10.20.21. The flaw allows remote code execution when a user opens a specially crafted BlackHole archive with a long filename, resulting in arbitrary code execution with the...
Solaris 10 (sparc) : 127716-01
SunOS 5.10: ip Patch. Date this patch was last updated by Sun : Oct/05/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0...