CVE-2007-5591: Undefined Security Weakness

The CS1000 signaling server in Nortel Enterprise VoIP-Core-CS 1000M Chassis/Cabinet, Enterprise VoIP-Core-CS 1000E and 1000S, Meridian-Core-Option 11C Chassis and Cabinet, and Meridian-Core-Option 51C, 61C, and 81C allows remote attackers to cause a denial of service telephony application outage...

CVE-2002-2271

Buffer overflow in BigFun 1.51b IRC client, when the Direct Client Connection DCC option is used, allows remote attackers to cause a denial of service crash via a long string...

CVE-2007-5505

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and remote attack vectors, related to 1 the Export component DB02, 2 Oracle Text DB04, 3 Oracle Text DB05, 4 Spatial component DB07, and 5 Advanced Security Option DB19...

CVE-2007-5505

CVE-2007-5505 affects Oracle Database versions 9.0.1.5+; 9.2.0.8/9.2.0.8DV; 10.1.0.5; 10.2.0.3. Reported vulnerabilities relate to the Export component (DB02), Oracle Text (DB04/DB05), Spatial (DB07), and Advanced Security Option (DB19) with unknown impact and remote attack vectors. Connected sou...

CVE-2007-5505: Undefined Security Weakness

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and remote attack vectors, related to 1 the Export component DB02, 2 Oracle Text DB04, 3 Oracle Text DB05, 4 Spatial component DB07, and 5 Advanced Security Option DB19...

CVE-2007-5198: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the redir function in checkhttp.c in Nagios Plugins before 1.4.10, when running with the -f follow option, allows remote web servers to execute arbitrary code via Location header responses redirects with a large number of leading "L" characters...

Design/Logic Flaw

The TSrvOptIANA::rebind method in SrvOptions/SrvOptIANA.cpp in Dibbler 0.6.0 allows remote attackers to cause a denial of service NULL dereference and daemon crash via an invalid IANA option in a REBIND message...

CVE-2007-5031

The TSrvOptIANA::rebind method in SrvOptions/SrvOptIANA.cpp in Dibbler 0.6.0 allows remote attackers to cause a denial of service NULL dereference and daemon crash via an invalid IANA option in a REBIND message...

CVE-2007-5031

The TSrvOptIANA::rebind method in SrvOptions/SrvOptIANA.cpp in Dibbler 0.6.0 allows remote attackers to cause a denial of service NULL dereference and daemon crash via an invalid IANA option in a REBIND message...

CVE-2007-5029

Dibbler 0.6.0 does not verify that certain length parameters are appropriate for buffer sizes, which allows remote attackers to trigger a buffer over-read and cause a denial of service daemon crash, as demonstrated by incorrect behavior of the TSrvMsg constructor in SrvMessages/SrvMsg.cpp when 1...

DEBIAN-CVE-2007-5031

The TSrvOptIANA::rebind method in SrvOptions/SrvOptIANA.cpp in Dibbler 0.6.0 allows remote attackers to cause a denial of service NULL dereference and daemon crash via an invalid IANA option in a REBIND message...

Information disclosure

Unspecified vulnerability in Adobe Acrobat and Reader 8.1 on Windows allows remote attackers to execute arbitrary code via a crafted PDF file, related to the mailto: option and Internet Explorer 7 on Windows XP. NOTE: this information is based upon a vague pre-advisory by a reliable researcher...

CVE-2007-5031

The TSrvOptIANA::rebind method in SrvOptions/SrvOptIANA.cpp in Dibbler 0.6.0 allows remote attackers to cause a denial of service NULL dereference and daemon crash via an invalid IANA option in a REBIND message...

airsensor-dos.txt

!/usr/bin/perl -w Airsensor M520 HTTPD Remote Preauth Denial Of Service and Buffer Overflow PoC The vulnerability is caused due to an unspecified error in the cgis files filter used for configure propierties. This can be exploited by sending a specially crafted HTTPS request necessary...

CVE-2007-0004

The NFS client implementation in the kernel in Red Hat Enterprise Linux RHEL 3, when a filesystem is mounted with the noacl option, checks permissions for the open system call via vfspermission mode bits data rather than an NFS ACCESS call to the server, which allows local client processes to...

CVE-2007-4138

The Winbind nssinfo extension nsswitch/idmapad.c in idmapad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the 1 RFC2307 or 2 Services for UNIX SFU primary group attribute is not defined...

Moderate: kernel security and bugfix update

2.6.9-55.0.6.0.1 - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix for nfs open call taking longer issue Chuck Lever orabug 5580407 bz 219412 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon with rds Zach...

Cross site scripting

Cross-site scripting XSS vulnerability in Ipswitch WSFTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly handled when it is displayed by the view log option in the administration interface. NOTE: this can be leveraged to creat...

CVE-2007-3843

The Linux kernel before 2.6.23-rc1 checks the wrong global variable for the CIFS sec mount option, which might allow remote attackers to spoof CIFS network traffic that the client configured for security signatures, as demonstrated by lack of signing despite sec=ntlmv2i in a SetupAndX request...

Joomla Component Expose <= RC35 Remote File Upload Vulnerability

Exploit for unknown platform in category web applications ================================================================ Joomla Component Expose $targetpath = "../../../components/comexpose/expose/img/"; ++ ++ ifstrcasecmpsubstr$userfilename,-4,'.jpg' echo "alert'The file must be jpg';";++ ++...