Multiple vulnerabilities in all variants of MySQLDumper

Multiple vulnerabilities have been found in the third party extension "mysqldumper". Full read/write access to the connected database and other related issues. Component Type: Third party extension. This extension is not part of the TYPO3 default installation Affected Versions: a TYPO3 extension...

CVE-2007-3483

Research in Motion BlackBerry Enterprise Server 4.0 through 4.1 has a default configuration that permits installation of arbitrary third-party applications on BlackBerry devices, which might facilitate loading of malware...

Design/Logic Flaw

Research in Motion BlackBerry Enterprise Server 4.0 through 4.1 has a default configuration that permits installation of arbitrary third-party applications on BlackBerry devices, which might facilitate loading of malware...

CVE-2007-3483

CVE-2007-3483 affects Research in Motion BlackBerry Enterprise Server 4.0–4.1. The vulnerability arises from a default configuration that allows installation of arbitrary third-party applications on BlackBerry devices, potentially enabling loading of malware. The available documents explicitly de...

CVE-2007-3483

Research in Motion BlackBerry Enterprise Server 4.0 through 4.1 has a default configuration that permits installation of arbitrary third-party applications on BlackBerry devices, which might facilitate loading of malware...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in defteryaz.asp in Lebisoft zdefter 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 ad and 2 konu parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-3405

Multiple cross-site scripting XSS vulnerabilities in defteryaz.asp in Lebisoft zdefter 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 ad and 2 konu parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

MITKRB5-SA-2007-004: kadmind multiple RPC lib vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MIT krb5 Security Advisory 2007-004 Original release: 2007-06-26 Last update: 2007-06-26 Topic: kadmind affected by multiple RPC library vulnerabilities Severity: CRITICAL CVE: CVE-2007-2442 CERT: VU356961 CVE: CVE-2007-2443 CERT: VU365313 SUMMARY...

CVE-2007-3366

Cross-site scripting XSS vulnerability in Simple CGI Wrapper scgiwrap in cPanel before 10.9.1, and 11.x before 11.4.19-R14378, allows remote attackers to inject arbitrary web script or HTML via the URI. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...

Information disclosure

MailWasher Server before 2.2.1, when used with LDAP or Active Directory AD, does not properly handle blank passwords, which allows remote attackers to access an arbitrary user account and read the spam e-mail messages stored for that account, possibly related to the LoginCheck::doPost function in...

Sql injection

SQL injection vulnerability in index.cfm in FuseTalk 2.0 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-3273

SQL injection vulnerability in index.cfm in FuseTalk 2.0 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-3275

MailWasher Server before 2.2.1, when used with LDAP or Active Directory AD, does not properly handle blank passwords, which allows remote attackers to access an arbitrary user account and read the spam e-mail messages stored for that account, possibly related to the LoginCheck::doPost function in...

[security bulletin] HPSBMA02224 SSRT071334 rev.1 - HP System Management Homepage (SMH) for Linux, Remote Privileged Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01072894 Version: 1 HPSBMA02224 SSRT071334 rev.1 - HP System Management Homepage SMH for Linux, Remote Privileged Access NOTICE: The information in this Security Bulletin should be acted upon as...

极点五笔输入法(2007.2.26.0.98)漏洞

这个漏洞和以前微软的智能ABC曾经有过的漏洞是一样的。没测试其他的输入法，可能第三方开发的输入法在这个安全方面都没有注意到。 用此漏洞可以绕过系统登录密码，从而进入系统。 测试系统： vista 测试输入法版本：编译版本：2007.2.26.0.98 具体过程是这样的：选出此输入法后，右击输入法浮动图标，弹出输入法设置、管理工具、手工造词...、切换皮肤、使用说明、版本信息。这些条目中第一个输入法设置可以另存就可以进入系统目录，进入目录后就可以慢慢的操作了......... 2007.2.26.0.98 删掉此输入法。 官方暂时没有被丁...

Stack overflow

Stack-based buffer overflow in nptoken.mox in the Cellosoft Tokens Object 2.0.0.6 extension for Vitalize! allows remote attackers to execute arbitrary code via a long string argument to the RemoveChr method. NOTE: the provenance of this information is unknown; the details are obtained solely from...

Cross site scripting

Cross-site scripting XSS vulnerability in 404.php in Domain Technologie Control DTC before 0.25.9 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO REQUESTURI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Stack overflow

Stack-based buffer overflow in smtpdll.dll in the SMTP service in 602Pro LAN SUITE 2003 2003.0.03.0828 allows remote attackers to execute arbitrary code via an e-mail message with a long address. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-3203

CVE-2007-3203 : A stack-based buffer overflow in smtpdll.dll of the SMTP service in 602Pro LAN SUITE 2003 (version 2003.0.03.0828) allows remote attackers to execute arbitrary code via an e-mail message containing a long address. This is a confirmed vulnerability with CVSS v2 base score 7.5 (Netw...

Buffer overflow

Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the send method. NOTE: some of these details are obtained from third party information...