CVE-2007-2504

Summary (CVE-2007-2504) : PHP Turbulence 0.0.1 alpha contains a PHP remote file inclusion flaw in the file user/turbulence.php , exploitable via a URL parameter GLOBALS[tcore] . The underlying issue is that unsafely incorporating user-supplied data could allow remote attackers to execute arbitrar...

CVE-2005-2504

The CVE-2005-2504 entry concerns Apple Mac OS X 10.4.2 System Profiler: a Bluetooth device is labeled with "Requires Authentication: No" despite the user enabling the "Require pairing for security" option, potentially confusing users about which setting is valid. The available documents state the...

CVE-2004-2504

The GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes such as NOTEPAD.EXE with SYSTEM privileges when users create new files, which allows local users with physical access to gain privileges...