GnuPG 1.x - Signed Message Arbitrary Content Injection

source: https://www.securityfocus.com/bid/22757/info GnuPG is prone to a weakness that may allow an attacker to add arbitrary content into a message without the end user knowing. An attacker may be able to exploit this issue in applications using GnuPG to add arbitrary content into a signed and/o...

CVE-2007-1259: Undefined Security Weakness

Multiple unspecified vulnerabilities in WebAPP before 0.9.9.6 have unknown impact and attack vectors...

CVE-2006-7097: Undefined Security Weakness

Multiple unspecified vulnerabilities in TaskFreak! before 0.1.4 have unknown impact and attack vectors...

CVE-2007-1193: Undefined Security Weakness

Multiple unspecified vulnerabilities in the Login page in OrangeHRM before 20070212 have unknown impact and attack vectors...

CVE-2007-1186: Undefined Security Weakness

WebAPP before 0.9.9.5 does not "censor" the Latest Member real name, which has unknown impact...

CVE-2005-4829: Undefined Security Weakness

VirtueMart before 1.0.1 does not properly handle errors when a user is forbidden to read a requested page, which has unknown impact and remote attack vectors...

CVE-2007-1039: Undefined Security Weakness

Unspecified vulnerability in Peanut Knowledge Base PeanutKB 0.0.3 and earlier has unknown impact and attack vectors...

Microsoft Internet Explorer 6 - Local File Access

source: https://www.securityfocus.com/bid/22621/info Microsoft Internet Explorer is reportedly prone to multiple local file-access weaknesses because the application fails to properly handle HTML tags. These issues are triggered when an attacker entices a victim user to visit a malicious website...

CVE-2007-0910: Undefined Security Weakness

Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecified vectors...

CVE-2007-0903: Undefined Security Weakness

Unspecified vulnerability in the modrosterodbc module in ejabberd before 1.1.3 has unknown impact and attack vectors...

CVE-2006-7008: Undefined Security Weakness

Unspecified vulnerability in Joomla! before 1.0.10 has unknown impact and attack vectors, related to "securing mosmsg from misuse." NOTE: it is possible that this issue overlaps CVE-2006-1029...

CVE-2007-0423: Undefined Security Weakness

BEA WebLogic Portal 9.2 does not properly handle when an administrator deletes entitlements for a role, which causes other role entitlements to be "inadvertently affected," which has an unknown impact...

CVE-2007-0386: Undefined Security Weakness

Unspecified vulnerability in the rating section in PostNuke 0.764 has unknown impact and attack vectors, related to "an interesting bug."...

CVE-2007-0286: Undefined Security Weakness

Unspecified vulnerability in Oracle Application Server 10.1.2.0.2 and 10.1.3.0, and Collaboration Suite 10.1.2, has unknown impact and attack vectors related to Containers for J2EE, aka OC4J07...

CVE-2007-0292: Undefined Security Weakness

Multiple unspecified vulnerabilities in Oracle Enterprise Manager 10.1.0.5 have unknown impact and attack vectors related to Oracle Agent, aka 1 EM01 and 2 EM02. NOTE: EM05 might be related to CVE-2007-0222...

CVE-2007-0289: Undefined Security Weakness

Multiple unspecified vulnerabilities in Oracle Collaboration Suite 9.0.4.2 have unknown impact and attack vectors related to Oracle Containers for J2EE, aka 1 OC4J01, 2 OC4J05, and 3 OC4J06...

CVE-2007-0276: Undefined Security Weakness

Multiple unspecified vulnerabilities in Oracle Database 8.1.7.4 and 9.0.1.5 have unknown impact and attack vectors related to 1 Advanced Security Option and oklist or okdstry DB10, 2 Oracle Net Services DB13, and 3 Recovery Manager and oklist DB16...

CVE-2007-0281: Undefined Security Weakness

Multiple unspecified vulnerabilities in Oracle HTTP Server 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.3; Application Server 9.0.4.3, 10.1.2.0.0, 10.1.2.0.1, 10.1.2.0.2, 10.1.2.1, and 10.1.3.0; and Collaboration Suite 9.0.4.2 and 10.1.2; have unknown impact and attack vectors related to the Oracle HTT...

CVE-2007-0291: Undefined Security Weakness

Unspecified vulnerability in Oracle E-Business Suite and Applications 6.2.3 has unknown impact and attack vectors related to Oracle Exchange, aka APPS02...

CVE-2007-0287: Undefined Security Weakness

Unspecified vulnerability in Oracle Application Server 9.0.4.3, 10.1.2.0.0, and 10.1.2.0.2; and Collaboration Suite 9.0.4.2 and 10.1.2; has unknown impact and attack vectors related to Containers for J2EE, aka OC4J08...