CVE-2007-1466

Integer overflow in the WP6GeneralTextPacket::readContents function in WordPerfect Document importer/exporter libwpd before 0.8.9 allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted WordPerfect file, a different...

CVE-2007-1472

CVE-2007-1472 affects Groupit 2.00b5: a variable overwrite vulnerability in groupit.start.inc allows remote inclusion and arbitrary PHP execution by arguments written to $_GLOBALS. Exploitation demonstrated via c_basepath URL parameter to content.php, userprofile.php, password.php, dispatch.php, ...

CA BrightStor ARCserve Backup Tape Engine and Portmapper Multiple Vulnerabilities (QO86255)

According to its version, the installation of BrightStor ARCserve Backup on the remote host is affected by multiple buffer overflows involving the application's Tape Engine and portmapper services. An unauthenticated, remote attacker may be able to leverage these issues to crash or disable the...

CVE-2007-0733

Unspecified vulnerability in ImageIO in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote user-assisted attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted RAW image that triggers memory corruption...

CVE-2007-1429

Multiple PHP remote file inclusion vulnerabilities in Moodle 1.7.1 allow remote attackers to execute arbitrary PHP code via a URL in the cmd parameter to 1 admin/utfdbmigrate.php or 2 filter.php...

CVE-2007-1429

Multiple PHP remote file inclusion vulnerabilities in Moodle 1.7.1 allow remote attackers to execute arbitrary PHP code via a URL in the cmd parameter to 1 admin/utfdbmigrate.php or 2 filter.php...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in PMB Services 3.0.13 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 classpath parameter to a includes/resafunc.inc.php b admin/notices/perso.inc.php, or c admin/quotas/main.inc.php; the 2 basepath parameter ...

Debian DSA-1265-1 : mozilla - several vulnerabilities

Several security related problems have been discovered in Mozilla and derived products. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CVE-2006-6497 Several vulnerabilities in the layout engine allow remote attackers to cause a denial of service and...

CVE-2007-1371

Multiple buffer overflows in Conquest 8.2a and earlier 1 allow local users to gain privileges by querying a metaserver that sends a long server entry processed by metaGetServerList and allow remote metaservers to execute arbitrary code via a long server entry processed by metaGetServerList; 2 all...

Directory traversal

Directory traversal vulnerability in SQL-Ledger, and LedgerSMB before 1.1.5, allows remote attackers to read and overwrite arbitrary files, and execute arbitrary code, via . dot characters adjacent to 1 users and 2 users/members strings, which are removed by blacklisting functions that filter the...

CVE-2007-1329

Directory traversal vulnerability in SQL-Ledger, and LedgerSMB before 1.1.5, allows remote attackers to read and overwrite arbitrary files, and execute arbitrary code, via . dot characters adjacent to 1 users and 2 users/members strings, which are removed by blacklisting functions that filter the...

CVE-2007-1329

Directory traversal vulnerability in SQL-Ledger, and LedgerSMB before 1.1.5, allows remote attackers to read and overwrite arbitrary files, and execute arbitrary code, via . dot characters adjacent to 1 users and 2 users/members strings, which are removed by blacklisting functions that filter the...

CVE-2006-7151

Untrusted search path vulnerability in the libtool-ltdl library libltdl.so 1.5.22-2.3 in Fedora Core 5 might allow local users to execute arbitrary code via a malicious library in the 1 hwcap, 2 0, and 3 nosegneg subdirectories...

CVE-2007-0713

Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted QuickTime movie file...

CVE-2007-1251

Format string vulnerability in the newwarning function in ntserv/warning.c for Netrek Vanilla Server 2.12.0, when EVENTLOG is enabled, allows remote attackers to cause a denial of service crash or execute arbitrary code via format string specifiers in the message handling...

CVE-2007-1247

Multiple PHP remote file inclusion vulnerabilities in aWeb Labs aWebNews 1.5 allow remote attackers to execute arbitrary PHP code via a URL in the pathtonews parameter to 1 listing.php or 2 visview.php...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in DBImageGallery 1.2.2 allow remote attackers to execute arbitrary PHP code via a URL in the donsimgbasepath parameter to 1 attributes.php, 2 images.php, or 3 scan.php in admin/; or 4 attributes.php, 5 dbutils.php, 6 images.php, 7 utils.php, or ...

CVE-2007-1190

Unspecified vulnerability in the EmbeddedWB Web Browser ActiveX control allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Remote file inclusion

PHP remote file inclusion vulnerability in fcring.php in FCRing 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the sfuss parameter...

Memory corruption

The JavaScript engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via certain vectors that trigger memory corruption...