Microsoft Windows Vista/2003/XP/2000 file management security issues

Title: Microsoft Windows Vista/2003/XP/2000 file management security issues Author: 3APA3A, http://securityvulns.com/ Vendor: Microsoft and potentially another vendors Products: Microsoft Windows Vista/2003/XP/2000, Microsoft resource kit for Windows 2000 and different utilities. Access Vector:...

CVE-2007-1307: Undefined Security Weakness

Unspecified vulnerability in Lenovo Intel PRO/1000 LAN adapter before Build 135400, as used on IBM Lenovo ThinkPad systems, has unknown impact and attack vectors...

GnuPG 1.x - Signed Message Arbitrary Content Injection

source: https://www.securityfocus.com/bid/22757/info GnuPG is prone to a weakness that may allow an attacker to add arbitrary content into a message without the end user knowing. An attacker may be able to exploit this issue in applications using GnuPG to add arbitrary content into a signed and/o...

CVE-2007-1259: Undefined Security Weakness

Multiple unspecified vulnerabilities in WebAPP before 0.9.9.6 have unknown impact and attack vectors...

CVE-2007-1193: Undefined Security Weakness

Multiple unspecified vulnerabilities in the Login page in OrangeHRM before 20070212 have unknown impact and attack vectors...

CVE-2006-7097: Undefined Security Weakness

Multiple unspecified vulnerabilities in TaskFreak! before 0.1.4 have unknown impact and attack vectors...

CVE-2007-1186: Undefined Security Weakness

WebAPP before 0.9.9.5 does not "censor" the Latest Member real name, which has unknown impact...

CVE-2005-4829: Undefined Security Weakness

VirtueMart before 1.0.1 does not properly handle errors when a user is forbidden to read a requested page, which has unknown impact and remote attack vectors...

CVE-2007-1039: Undefined Security Weakness

Unspecified vulnerability in Peanut Knowledge Base PeanutKB 0.0.3 and earlier has unknown impact and attack vectors...

Microsoft Internet Explorer 6 - Local File Access

source: https://www.securityfocus.com/bid/22621/info Microsoft Internet Explorer is reportedly prone to multiple local file-access weaknesses because the application fails to properly handle HTML tags. These issues are triggered when an attacker entices a victim user to visit a malicious website...

CVE-2007-0910: Undefined Security Weakness

Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecified vectors...

CVE-2007-0903: Undefined Security Weakness

Unspecified vulnerability in the modrosterodbc module in ejabberd before 1.1.3 has unknown impact and attack vectors...

CVE-2006-7008: Undefined Security Weakness

Unspecified vulnerability in Joomla! before 1.0.10 has unknown impact and attack vectors, related to "securing mosmsg from misuse." NOTE: it is possible that this issue overlaps CVE-2006-1029...

CVE-2007-0423: Undefined Security Weakness

BEA WebLogic Portal 9.2 does not properly handle when an administrator deletes entitlements for a role, which causes other role entitlements to be "inadvertently affected," which has an unknown impact...

CVE-2007-0386: Undefined Security Weakness

Unspecified vulnerability in the rating section in PostNuke 0.764 has unknown impact and attack vectors, related to "an interesting bug."...

CVE-2007-0283: Undefined Security Weakness

Unspecified vulnerability in Oracle Application Server 9.0.4.3 and Collaboration Suite 9.0.4.2 has unknown impact and attack vectors related to Oracle Containers for J2EE, aka OC4J02...

CVE-2007-0288: Undefined Security Weakness

Unspecified vulnerability in Oracle Application Server 10.1.4.0 has unknown impact and attack vectors related to Oracle Internet Directory, aka OID01...

CVE-2007-0268: Undefined Security Weakness

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unknown impact and attack vectors related to 1 the Advanced Queuing component and sys.dbmsaqsys.dbmsaq privileges DB01, 2 Advanced Replication and sys.dbmsrepcatuntrusted DB07, and 3 Oracle Text and ctxloa...

CVE-2007-0269: Undefined Security Weakness

Unspecified vulnerability in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.3 has unknown impact and attack vectors related to the Change Data Capture and sys.dbmscdcsubscribe privileges, aka DB02...

CVE-2007-0286: Undefined Security Weakness

Unspecified vulnerability in Oracle Application Server 10.1.2.0.2 and 10.1.3.0, and Collaboration Suite 10.1.2, has unknown impact and attack vectors related to Containers for J2EE, aka OC4J07...