CVE-2007-5461

Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag...

Code injection

Mail in Apple iPhone 1.1.1 allows remote user-assisted attackers to force the iPhone user to make calls to arbitrary telephone numbers via a "tel:" link, which does not prompt the user before dialing the number...

CVE-2007-3755: Improper Input Validation

Mail in Apple iPhone 1.1.1 allows remote user-assisted attackers to force the iPhone user to make calls to arbitrary telephone numbers via a "tel:" link, which does not prompt the user before dialing the number...

CVE-2007-3757: Improper Input Validation

Safari in Apple iPhone 1.1.1 allows remote user-assisted attackers to trick the iPhone user into making calls to arbitrary telephone numbers via a crafted "tel:" link that causes iPhone to display a different number than the number that will be dialed...

PHP-Nuke Dance Music Module - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/25806/info Dance Music is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized remote user to view files and execute local scripts in the context of the...

USN-511-1: Kerberos vulnerability

It was discovered that the libraries handling RPCSECGSS did not correctly validate the size of certain packet structures. An unauthenticated remote user could send a specially crafted request and execute arbitrary code with root privileges...

CVE-2007-4282

The CVE refers to the Serendipity CMS: the entryproperties plugin in Serendipity 1.1.3 allows remote authenticated users to bypass password protection and deliver custom entryproperties settings to the frontend by manipulating the password check. Impact is described as an authentication bypass; n...

CVE-2007-3013

SQL injection vulnerability in activeWeb contentserver before 5.6.2964 allows remote authenticated users with edit permission to execute arbitrary SQL commands via the id parameter to admin/picture/picturerealedit.asp, and probably other unspecified vectors...

avts10-passwd.txt

126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i...

AV Tutorial Script 1.0 - Remote User Pass Change

AV Tutorial Script 1.0 - Remote User Pass Change 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string...

Mandrake Linux Security Advisory : jasper (MDKSA-2007:129)

A function in the JasPer JPEG-2000 library before 1.900 could allow a remote user-assisted attack to cause a crash and possibly corrupt the heap via malformed image files. Updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

[ MDKSA-2007:129 ] - Updated jasper packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:129 http://www.mandriva.com/security/ Package : jasper Date : June 19, 2007 Affected: 2007.0, 2007.1, Corporate 4.0 Problem Description: A function in the JasPer JPEG-2000 library before 1.900 could allow a...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix security issues and bugs in the Red Hat Enterprise Linux 5 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. These n...

CVE-2007-0936

Multiple unspecified vulnerabilities in Microsoft Visio 2002 allow remote user-assisted attackers to execute arbitrary code via a Visio .VSD, VSS, .VST file with a crafted packed object that triggers memory corruption, aka "Visio Document Packaging Vulnerability."...

CVE-2007-0934

Unspecified vulnerability in Microsoft Visio 2002 allows remote user-assisted attackers to execute arbitrary code via a Visio .VSD, VSS, .VST file with a crafted version number that triggers memory corruption...

CVE-2007-0934

Unspecified vulnerability in Microsoft Visio 2002 allows remote user-assisted attackers to execute arbitrary code via a Visio .VSD, VSS, .VST file with a crafted version number that triggers memory corruption...

CVE-2007-0936: Undefined Security Weakness

Multiple unspecified vulnerabilities in Microsoft Visio 2002 allow remote user-assisted attackers to execute arbitrary code via a Visio .VSD, VSS, .VST file with a crafted packed object that triggers memory corruption, aka "Visio Document Packaging Vulnerability."...

CVE-2007-0934: Undefined Security Weakness

Unspecified vulnerability in Microsoft Visio 2002 allows remote user-assisted attackers to execute arbitrary code via a Visio .VSD, VSS, .VST file with a crafted version number that triggers memory corruption...

CVE-2007-2907

Unspecified vulnerability in SSL-Explorer before 0.2.13 allows remote authenticated users to enter redirect URLs containing 1 JavaScript or 2 HTTP headers via an unspecified vector, possibly the forwardTo parameter to redirect.do. NOTE: the impact might be cross-site scripting XSS or HTTP request...

CVE-2007-0750: Undefined Security Weakness

Integer overflow in CoreGraphics in Apple Mac OS X 10.4 up to 10.4.9 allows remote user-assisted attackers to cause a denial of service application termination or execute arbitrary code via a crafted PDF file...