Microsoft Active Directory LDAP Modify Request Buffer Overflow (MS07-039) - Ver2 (CVE-2007-0040)

Lightweight Directory Access Protocol LDAP is Internet standard protocol designed for querying and modifying directory services. Multiple vulnerabilities have been reported in Microsoft Windows Active Directory. The flaws are in the way the Active Directory handles LDAP requests. The...

Microsoft DNS Server RPC Management Interface Buffer Overflow (MS07-029) - Ver2 (CVE-2007-1748)

The DNS server service is a component that provides name resolution services to a network.A buffer overflow vulnerability has been reported in the Microsoft Windows Domain Name System DNS Server services.An attacker may exploit this vulnerability to execute arbitrary code on a target system via a...

Mozilla Firefox Design Mode Deleted Style Reference Memory Corruption - Ver2 (CVE-2007-3734)

A memory corruption vulnerability has been reported in Mozilla Firefox and Mozilla Thunderbird. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Heap overflow

Heap-based buffer overflow in the Cirrus VGA emulator hw/display/cirrusvga.c in QEMU before 2.2.0 allows local guest users to execute arbitrary code via vectors related to blit regions. NOTE: this vulnerability exists because an incomplete fix for CVE-2007-1320...

CVE-2014-8106

CVE-2014-8106 is a heap-based buffer overflow in the Cirrus VGA emulator (Cirrus blit region checks) of QEMU up to 2.2.0. The issue arises from an incomplete fix for CVE-2007-1320, allowing a privileged, local guest user to execute arbitrary code in the host QEMU process space via attacker-contro...

DBGuestBook dbs_base_path Parameter Multiple Vulnerabilities (CVE-2007-1165)

Multiple remote code execution vulnerabilities exists in DBGuestBook. These vulnerabilities are caused due to improper handling of crafted URL using the dbsbasepath parameter. A remote attacker can exploit these vulnerabilities to execute arbitrary code on the vulnerable Web server...

F5 Networks BIG-IP : GNU C Library vulnerability (SOL15885)

The GNU C Library aka glibc or libc6 before 2.12.2 and Embedded GLIBC EGLIBC allow context-dependent attackers to execute arbitrary code or cause a denial of service memory consumption via a long UTF8 string that is used in an fnmatch call, aka a 'stack extension attack,' a related issue to...

OracleVM 2.1 : kernel (OVMSA-2009-0017)

The remote OracleVM system is missing necessary patches to address critical security updates : CVE-2009-1895 The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PERCLEARONSETID setting that does not clear the ADDRCOMPATLAYOUT and MMAPPAGEZERO flags when executing a setuid or...

OracleVM 2.1 : kernel (OVMSA-2008-2005)

The remote OracleVM system is missing necessary patches to address critical security updates : - fix utrace deadengine ops race - fix ptraceattach leak - CVE-2007-5093: kernel PWC driver DoS - CVE-2007-6282: IPSec ESP kernel panics - CVE-2007-6712: kernel: infinite loop in highres timers kernel...

OracleVM 2.1 : libxml2 (OVMSA-2009-0018)

The remote OracleVM system is missing necessary patches to address critical security updates : - Add bug347316.patch to backport fix for bug347316 from upstream version - Add libxml2-enterprise.patch and update logos in tarball - Fix a couple of crash CVE-2009-2414, CVE-2009-2416 - Resolves:...

OracleVM 2.1 : elinks (OVMSA-2009-0030)

The remote OracleVM system is missing necessary patches to address critical security updates : - fix 235411 - CVE-2007-2027 - elinks tries to load .po files from non-absolute path - fix 523258 - CVE-2008-7224 - entitycache static array buffer overflow %NASLMINLEVEL 70300 C Tenable Network Securit...

RHEL 5 : rhev-hypervisor (RHSA-2011:1090)

An updated rhev-hypervisor package that fixes one security issue and several bugs is now available. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

XOOPS Module RM and Soft Gallery SQL Injection (CVE-2007-1806)

An SQL injection vulnerability has been reported in Red Mexico Rm+soft Gallery. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

XOOPS Module Friendfinder SQL Injection (CVE-2007-1838)

An SQL injection vulnerability has been reported in Xoops Friendfinder Module. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_joomlaradio Remote File Inclusion (CVE-2007-4923)

A file inclusion vulnerability has been reported in Joomla Radio. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

XOOPS Module Glossarie Remote SQL Injection (CVE-2007-2738)

An SQL injection vulnerability has been reported in Xoops Glossaire Module. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

XOOPS module Articles SQL Injection (CVE-2007-3311)

An SQL injection vulnerability has been reported in Xoops Articles Module. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

XOOPS Module Library Remote SQL Injection (CVE-2007-1815)

An SQL injection vulnerability has been reported in Xoops Library Module. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

XOOPS Module Camportail Remote SQL Injection (CVE-2007-1808)

An SQL injection vulnerability has been reported in Camportail. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla Component com_rsfiles Directory traversal (CVE-2007-4504)

A directory traversal vulnerability has been reported in Joomla ComRsfiles. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...