6417 matches found
CVE-2007-5535: Undefined Security Weakness
Unspecified vulnerability in newbbplus in RunCms 1.5.2 has unknown impact and attack vectors...
CVE-2007-5524: Undefined Security Weakness
Unspecified vulnerability in the Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS09 or AS9...
CVE-2007-5514: Undefined Security Weakness
Multiple unspecified vulnerabilities in Oracle Database 10.2.0.3 have unknown impact and attack vectors related to 1 Database Vault component DB24 and 2 SQL Execution component DB26...
CVE-2007-5528: Undefined Security Weakness
Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.2 have unknown impact and attack vectors related to 1 Public Sector Human Resources APP03 and 2 Quoting component APP06...
CVE-2007-5483: Undefined Security Weakness
Unspecified vulnerability in the Administrative Scripting Tools such as wsadmin or ANT in IBM WebSphere Application Server 5.x and 6.0.x has unknown impact and attack vectors...
CVE-2007-5424: Undefined Security Weakness
The disablefunctions feature in PHP 4 and 5 allows attackers to bypass intended restrictions by using an alias, as demonstrated by using inialter when iniset is disabled...
CVE-2007-3759: Undefined Security Weakness
Safari in Apple iPhone 1.1.1, when requested to disable Javascript, does not disable it until Safari is restarted, which might leave Safari open to attacks that the user does not expect...
CVE-2007-5126: Undefined Security Weakness
Unspecified vulnerability in the client in Symantec Veritas Backup Exec for Windows Servers 11d has unknown impact and remote attack vectors. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release...
CVE-2007-5108: Undefined Security Weakness
Unspecified vulnerability in IAC Search & Media ask.com toolbar has unknown impact and remote attack vectors. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has...
CVE-2007-5025: Undefined Security Weakness
Unspecified vulnerability in EMC VMware ACE before 1.0.3 Build 54075 allows attackers to have an unknown impact via an unspecified manipulation of "images stored in virtual machines downloaded by the user."...
CVE-2007-4931: Undefined Security Weakness
HP System Management Homepage SMH for Windows, when used in conjunction with HP Version Control Agent or Version Control Repository Manager, leaves old OpenSSL software active after an OpenSSL update, which has unknown impact and attack vectors, probably related to previous vulnerabilities for...
CVE-2007-4910: Undefined Security Weakness
Unspecified vulnerability in netInvoicing before 2.7.3 has unknown impact and attack vectors, related to "security check soap"...
CVE-2007-4839: Undefined Security Weakness
Unspecified vulnerability in the PD tools component in IBM WebSphere Application Server WAS 6.1 before Fix Pack 11 6.1.0.11 has unknown impact and attack vectors, aka PK33803...
CVE-2007-4659: Undefined Security Weakness
The zendalterinientry function in PHP before 5.2.4 does not properly handle an interruption to the flow of execution triggered by a memorylimit violation, which has unknown impact and attack vectors...
BIND 8 EOL and BIND 8 DNS Cache Poisoning (Amit Klein, Trusteer)
BIND 8 EOL and BIND 8 DNS Cache Poisoning Note: this is a different attack from BIND 9 DNS cache poisoning. I discovered a new weakness in BIND 8 DNS server which enables "DNS Forgery Pharming". An attacker can remotely poison the cache of any BIND 8 caching DNS server and force users who use thi...
GLSA-200708-13 : BIND: Weak random number generation
The remote host is affected by the vulnerability described in GLSA-200708-13 BIND: Weak random number generation Amit Klein from Trusteer reported that the random number generator of ISC BIND leads, half the time, to predictable 1 chance to 8 query IDs in the resolver routine or in zone transfer...
BIND: Weak random number generation
Background ISC BIND is the Internet Systems Consortium implementation of the Domain Name System DNS protocol. Description Amit Klein from Trusteer reported that the random number generator of ISC BIND leads, half the time, to predictable 1 chance to 8 query IDs in the resolver routine or in zone...
rPSA-2007-0161-1 dovecot
rPath Security Advisory: 2007-0161-1 Published: 2007-08-14 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Remote User Deterministic Privilege Escalation Updated Versions: dovecot=/conary.rpath.com@rpl:devel//1/1.0.3-0.1-1 References: https://vulners.com/cve/CVE-2007-4211...
CVE-2007-4372: Undefined Security Weakness
Unspecified vulnerability in NetWin SurgeMail 38k on Windows Server 2003 has unknown impact and remote attack vectors. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A...