CVE-2008-1688

Unspecified vulnerability in GNU m4 before 1.4.11 might allow context-dependent attackers to execute arbitrary code, related to improper handling of filenames specified with the -F option. NOTE: it is not clear when this issue crosses privilege boundaries...

DEBIAN-CVE-2008-1688

Unspecified vulnerability in GNU m4 before 1.4.11 might allow context-dependent attackers to execute arbitrary code, related to improper handling of filenames specified with the -F option. NOTE: it is not clear when this issue crosses privilege boundaries...

CVE-2008-1688

Unspecified vulnerability in GNU m4 before 1.4.11 might allow context-dependent attackers to execute arbitrary code, related to improper handling of filenames specified with the -F option. NOTE: it is not clear when this issue crosses privilege boundaries...

CVE-2008-1688

CVE-2008-1688 affects GNU m4 up to version 1.4.10, with the issue arising from how filenames are handled when using -F. The vulnerability is described as allowing context-dependent attackers to execute arbitrary code due to improper filename handling in the code paths related to maketemp/mkstemp ...

Sql injection

SQL injection vulnerability in the administration panel in the DMSGuestbook 1.7.0 plugin for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors. NOTE: it is not clear whether this issue crosses privilege boundaries...

GLSA-200801-06 : Xfce: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200801-06 Xfce: Multiple vulnerabilities Gregory Andersen reported that the Xfce4 panel does not correctly calculate memory boundaries, leading to a stack-based buffer overflow in the launcherupdatepanelentry function CVE-2007-653...

Authentication flaw

The proxy server in Kerio WinRoute Firewall before 6.4.1 does not properly enforce authentication for HTTPS pages, which has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries...

CVE-2007-6385

The proxy server in Kerio WinRoute Firewall before 6.4.1 does not properly enforce authentication for HTTPS pages, which has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries...

CVE-2007-6385

The proxy server in Kerio WinRoute Firewall before 6.4.1 does not properly enforce authentication for HTTPS pages, which has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries...

kernel: Local DoS with corrupted ELF

Linux kernel 2.6.17 and earlier, when running on IA64 or SPARC platforms, allows local users to cause a denial of service crash via a malformed ELF file that triggers memory maps that cross region boundaries...

CVE-2007-6092

Buffer overflow in libsrtp in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries...

CVE-2007-6092

Buffer overflow in libsrtp in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries...

CVE-2007-6092

Buffer overflow in libsrtp in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries...

ruby's cgi.rb vulnerable infinite loop DoS

The readmultipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries in MIME multipart content, which allows remote attackers to cause a denial of service infinite loop via crafted HTTP requests, a different issue than CVE-2006-5467...

CVE-2007-5456

Microsoft Internet Explorer 7 and earlier allows remote attackers to bypass the "File Download - Security Warning" dialog box and download arbitrary .exe files by placing a '?' question mark followed by a non-.exe filename after the .exe filename, as demonstrated by 1 .txt, 2 .cda, 3 .log, 4 .dif...

Buffer overflow

Buffer overflow in a certain ActiveX control in ScanObjectBrowser.DLL in G DATA Antivirus 2007 might allow remote attackers to execute arbitrary code via unspecified parameters to the SelectPath function. NOTE: this issue might not cross privilege boundaries in most environments, since it is not...

Cross site scripting

Cross-site scripting XSS vulnerability in the save function in Obedit 3.03 allows user-assisted remote attackers to inject arbitrary web script or HTML via unknown vectors, as demonstrated by a SCRIPT element in an unspecified context when saving a document. NOTE: because the details of the attac...

CVE-2007-4981

Cross-site scripting XSS vulnerability in the save function in Obedit 3.03 allows user-assisted remote attackers to inject arbitrary web script or HTML via unknown vectors, as demonstrated by a SCRIPT element in an unspecified context when saving a document. NOTE: because the details of the attac...

CVE-2007-0004

The CVE-2007-0004 entry concerns the Linux kernel NFS client (RHEL 3). When an NFS filesystem is mounted with noacl, the open system call permissions are checked using vfs_permission (mode bits) data instead of an NFS ACCESS query to the server. This can allow local client processes to receive a ...

CVE-2007-4528

CVE-2007-4528 concerns PHP’s Foreign Function Interface (ffi) extension in PHP 5.0.5, which does not enforce safe_mode restrictions. This can let context-dependent attackers load an arbitrary DLL and call a function (e.g., kernel32.dll and WinExec), yielding arbitrary code execution in affected c...