3592 matches found
CVE-2007-1134
Unspecified vulnerability in Watchtower WT before 0.12 has unknown impact and attack vectors, related to "unauthorized accounts."...
CVE-2006-7097
Technical details for CVE-2006-7097 are not publicly available in the provided documents. No concrete affected products, versions, or fixes are disclosed here. Monitor for updates from official sources.
CVE-2007-1185
CVE-2007-1185 affects WebAPP prior to 0.9.9.5, where the (1) Search, (2) Edit Profile, (3) Recommend, and (4) User Approval forms rely on hidden inputs. The connected sources identify this as a design/logic issue with hidden inputs but do not specify concrete impact, exploitation conditions, or r...
CVE-2007-1179
WebAPP before 0.9.9.5 does not properly manage e-mail addresses in certain contexts related to 1 the Recommend feature, Email Article 2 senders and 3 recipients, 4 New User Approval, 5 Edit Profiles, 6 the Newsletter Subscription form, 7 the Recommend form, and 8 sending of articles, which has...
CVE-2007-1183
WebAPP before 0.9.9.5 allows remote authenticated users to spoof another user's Real Name via whitespace, which has unknown impact and attack vectors...
CVE-2007-1181
WebAPP before 0.9.9.5 passes 1 Unused Informations and 2 the username through Edit Profile forms, which has unknown impact and attack vectors...
CVE-2006-7094
ftpd, as used by Gentoo and Debian Linux, sets the gid to the effective uid instead of the effective group id before executing /bin/ls, which allows remote authenticated users to list arbitrary directories with the privileges of gid 0 and possibly enable additional attack vectors...
CVE-2007-1134
Unspecified vulnerability in Watchtower WT before 0.12 has unknown impact and attack vectors, related to "unauthorized accounts."...
CVE-2007-0778
The page cache feature in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 can generate hash collisions that cause page data to be appended to the wrong page cache, which allows remote attackers to obtain sensitive information or enable further attack vectors whe...
CVE-2007-0778
The page cache feature in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 can generate hash collisions that cause page data to be appended to the wrong page cache, which allows remote attackers to obtain sensitive information or enable further attack vectors whe...
Design/Logic Flaw
Multiple unspecified vulnerabilities in ScryMUD before 2.1.11 have unknown impact and attack vectors, possibly related to denial of service caused by a search that begins with a . sequence...
Code injection
Unspecified vulnerability in Peanut Knowledge Base PeanutKB 0.0.3 and earlier has unknown impact and attack vectors...
CVE-2007-1039
Unspecified vulnerability in Peanut Knowledge Base PeanutKB 0.0.3 and earlier has unknown impact and attack vectors...
CVE-2007-1039
Technical details about CVE-2007-1039 are not provided in the supplied documents. No confirmed affected products, impact, vectors, or fixes are disclosed; monitor for updates.
CVE-2007-0974
Multiple unspecified vulnerabilities in Ian Bezanson DropBox before 0.0.4 beta have unknown impact and attack vectors, possibly related to a variable extraction vulnerability...
CVE-2007-0974
CVE-2007-0974 affects Ian Bezanson DropBox prior to version 0.0.4 beta. The connected sources describe multiple unspecified vulnerabilities with unknown impact and attack vectors, possibly related to a variable extraction vulnerability. The NVD entry provides a CVSS v2 base score of 7.5 (HIGH) wi...
Authentication flaw
MOHA Chat 0.1b7 and earlier does not require authentication for use of the plug in API, which has unknown impact and attack vectors...
CVE-2007-0913
Unspecified vulnerability in Microsoft Powerpoint allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as exploited by Trojan.PPDropper.G. NOTE: as of 20070213, it is not clear whether this is the same issue as CVE-2006-5296, CVE-2006-4694, CVE-2006-3876,...
Design/Logic Flaw
Unspecified vulnerability in Microsoft Powerpoint allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as exploited by Trojan.PPDropper.G. NOTE: as of 20070213, it is not clear whether this is the same issue as CVE-2006-5296, CVE-2006-4694, CVE-2006-3876,...