CVE-2007-2127

Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.0 have unknown impact and remote attack vectors via 1 Application Object Library APPS04, iStore 2 APPS05 and 3 APPS06, 4 iSupport APPS07, 5 Trade Management APPS09, 6 Applications Manager APPS10, and 7 Oracle Report Manager APPS...

CVE-2007-2051

Buffer overflow in the parsecmd function in bftpd before 1.8 has unknown impact and attack vectors related to the confstr variable...

CVE-2007-2051

Buffer overflow in the parsecmd function in bftpd before 1.8 has unknown impact and attack vectors related to the confstr variable...

CVE-2007-1945

CVE-2007-1945 concerns IBM WebSphere Application Server 6.1.x prior to 6.1.0.7, specifically the Servlet Engine/Web Container. The connected documents describe an unspecified vulnerability in WAS 6.1 before 6.1.0.7 with unknown impact and attack vectors; remediation details are not provided. The ...

TrueCrypt <= 4.3 Local Privilege Escalation Exploit (CVE-2007-1738)

No description provided by source. $Id: raptortruecrypt,v 1.1.1.1 2007/04/04 11:31:56 raptor Exp $ raptortruecrypt - setuid truecrypt privilege escalation Copyright c 2007 Marco Ivaldi [email protected] TrueCrypt 4.3, when installed setuid root, allows local users to cause a denial of servic...

TrueCrypt 4.3 - setuid Local Privilege Escalation

TrueCrypt 4.3 - setuid Local Privilege Escalation $Id: raptortruecrypt,v 1.1.1.1 2007/04/04 11:31:56 raptor Exp $ raptortruecrypt - setuid truecrypt privilege escalation Copyright c 2007 Marco Ivaldi TrueCrypt 4.3, when installed setuid root, allows local users to cause a denial of service...

TrueCrypt 4.3 - 'setuid' Local Privilege Escalation

$Id: raptortruecrypt,v 1.1.1.1 2007/04/04 11:31:56 raptor Exp $ raptortruecrypt - setuid truecrypt privilege escalation Copyright c 2007 Marco Ivaldi TrueCrypt 4.3, when installed setuid root, allows local users to cause a denial of service filesystem unavailability or gain privileges by mounting...

Code injection

Multiple unspecified vulnerabilities in web-app.net WebAPP have unknown impact and attack vectors, described as "having other security issues too, not as bad as letting users take over your admin account, but bad too."...

CVE-2007-1829

Multiple unspecified vulnerabilities in web-app.net WebAPP have unknown impact and attack vectors, described as "having other security issues too, not as bad as letting users take over your admin account, but bad too."...

Design/Logic Flaw

Multiple unspecified vulnerabilities in JCcorp URLshrink before 1.3.2 have unspecified attack vectors and impact...

CVE-2007-1796

Multiple unspecified vulnerabilities in JCcorp URLshrink before 1.3.2 have unspecified attack vectors and impact...

CVE-2007-1796

Technical details about CVE-2007-1796 are not publicly provided in the connected documents. The available sources offer only generic vulnerability statements without specifics on affected versions, impact, or fixes. Monitor for updates.

CVE-2007-1796

Multiple unspecified vulnerabilities in JCcorp URLshrink before 1.3.2 have unspecified attack vectors and impact...

CVE-2007-1724

Unspecified vulnerability in ReactOS 0.3.1 has unknown impact and attack vectors, related to a fix for "dozens of win32k bugs and failures," in which the fix itself introduces a vulnerability, possibly related to user-mode and kernel-mode copy failures...

Design/Logic Flaw

Unspecified vulnerability in TYPOlight webCMS before 2.2 Build 5 has unknown impact and attack vectors related to a "major security hole."...

CVE-2007-1632

Unspecified vulnerability in TYPOlight webCMS before 2.2 Build 5 has unknown impact and attack vectors related to a "major security hole."...

Design/Logic Flaw

Unspecified vulnerability in OpenSolution Quick.Cart before 2.1 has unknown impact and attack vectors, related to a "low critical exploit."...

CVE-2007-1406

Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors...

Design/Logic Flaw

Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors...

CVE-2007-1406

CVE-2007-1406 affects Trac before 0.10.3.1. The issue is that Trac did not send a Content-Disposition HTTP header specifying an attachment in certain “unsafe” situations, with the impact and remote attack vectors described as unknown in the sources. The connected records confirm Trac’s version ga...