CVEs published in November 2007
421 vulnerabilities, 72 critical, 0 exploited.
- redhat enterprise linux Memory leak in the Red Hat Content Accelerator kernel patch in Red Hat Enterprise Linux (RHEL) 4... 4.9 Medium
- citrix netscaler The web management interface in Citrix NetScaler 8.0 build 47.8 stores the device's primary IP... 5.0 Medium
- citrix netscaler The web management interface in Citrix NetScaler 8.0 build 47.8 uses weak encryption (XOR of... 4.3 Medium
- pmapper p.mapper Multiple PHP remote file inclusion vulnerabilities in Armin Burger p.mapper 3.2.0 beta3 allow... 6.8 Medium
- cisco unified ip phone The HTTP daemon in the Cisco Unified IP Phone, when the Extension Mobility feature is enabled,... 3.5 Low
- bitdefender online anti-virus scanner A certain ActiveX control in (1) OScan8.ocx and (2) Oscan81.ocx in BitDefender Online Anti-Virus... 9.3 High
- tumusika evolution evolution Multiple directory traversal vulnerabilities in TuMusika Evolution 1.7R5 allow remote attackers... 7.5 High
- noah Multiple directory traversal vulnerabilities in PHP Content Architect (aka NoAh) 0.9 pre 1.2 and... 5.0 Medium
- digium asterisk SQL injection vulnerability in the Postgres Realtime Engine (res_config_pgsql) in Asterisk 1.4.x... 7.5 High
- digium asterisk, debian linux +1 more SQL injection vulnerability in the Call Detail Record Postgres logging engine (cdr_pgsql) in... 6.5 Medium
- freebsd The "internal state tracking" code for the random and urandom devices in FreeBSD 5.5, 6.1 through... 2.1 Low
- redhat cairo Multiple integer overflows in Cairo before 1.4.12 might allow remote attackers to execute... 6.8 Medium
- phpdevshell Unspecified vulnerability in PHPDevShell before 0.7.0 has unknown impact and attack vectors,... 10.0 High
- eurologon cms Directory traversal vulnerability in users/files.php in Eurologon CMS allows remote attackers to... 7.5 High
- project alumni alumni Directory traversal vulnerability in index.php in Project Alumni 1.0.9 allows remote attackers to... 7.5 High
- ruby gnome2 gnome2 gtk2 vulnerable to Use of Externally-Controlled Format String 6.8 Medium
- growth ispmanager The responder program in ISPsystem ISPmanager (aka ISPmgr) 4.2.15.1 allows local users to gain... 7.2 High
- redhat cygwin Heap-based buffer overflow in cygwin1.dll in Cygwin 1.5.7 and earlier allows context-dependent... 8.5 High
- sun solaris Race condition in the Remote Procedure Call kernel module (rpcmod) in Sun Solaris 8 through 10... 7.6 High
- kinson chan charray cms Multiple PHP remote file inclusion vulnerabilities in Charray's CMS 0.9.3 allow remote attackers... 7.5 High
- easy hosting control panel hosting control panel Multiple PHP remote file inclusion vulnerabilities in Easy Hosting Control Panel for Ubuntu (EHCP... 7.5 High
- php con con PHP remote file inclusion vulnerability in Exchange/include.php in PHP_CON 1.3 allows remote... 7.5 High
- amensa-soft k\+b-bestellsystem kb_whois.cgi in K+B-Bestellsystem (aka KB-Bestellsystem) allows remote attackers to execute... 10.0 High
- lhaplus Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via... 6.6 Medium
- phpdevshell PHPDevShell before 0.7.0 allows remote authenticated users to gain privileges via a crafted... 8.5 High
- liferay enterprise portal Cross-site scripting (XSS) vulnerability in c/portal/login in Liferay Enterprise Portal 4.3.1... 4.3 Medium
- wire plastic design wpquiz Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary... 10.0 High
- symantec backupexec system recovery Multiple integer overflows in the Job Engine (bengine.exe) service in Symantec Backup Exec for... 7.8 High
- symantec backupexec system recovery The Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build... 5.0 Medium
- gouae dwd realty SQL injection vulnerability in admin/index2.asp in GOUAE DWD Realty allows remote attackers to... 7.5 High
- vu case manager SQL injection vulnerability in default.asp in VU Case Manager allows remote attackers to execute... 7.5 High
- suse linux Untrusted search path vulnerability in yast2-core in SUSE Linux might allow local users to... 7.2 High
- apple quicktime, safari +1 more Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on... 9.3 High
- apple mac os x Mail in Apple Mac OS X Leopard (10.5.1) allows user-assisted remote attackers to execute... 9.3 High
- eurologon cms Multiple SQL injection vulnerabilities in Eurologon CMS allow remote attackers to execute... 7.5 High
- gouae dwd realty SQL injection vulnerability in admin/index2.asp in GOUAE DWD Realty allows remote attackers to... 7.5 High
- wsdeluxe fmdeluxe Cross-site scripting (XSS) vulnerability in index.php in FMDeluxe 2.1.0 allows remote attackers... 4.3 Medium
- tilde cms index.php in Tilde CMS 4.x and earlier allows remote attackers to obtain sensitive information... 5.0 Medium
- tilde cms Cross-site scripting (XSS) vulnerability in index.php in Tilde CMS 4.x and earlier allows remote... 4.3 Medium
- tilde cms SQL injection vulnerability in index.php in Tilde CMS 4.x and earlier allows remote attackers to... 7.5 High
- proverbs web calendar Multiple SQL injection vulnerabilities in caladmin.inc.php in Proverbs Web Calendar 1.1 and... 7.5 High
- simplegallery Cross-site scripting (XSS) vulnerability in index.php in SimpleGallery 0.1.3 allows remote... 4.3 Medium
- secureideas basic analysis and security engine Multiple cross-site scripting (XSS) vulnerabilities in base_qry_main.php in Base Analysis and... 4.3 Medium
- apple quicktime An "integer arithmetic" error in Apple QuickTime 7.2 allows remote attackers to execute arbitrary... 6.8 Medium
- iaprcommence iapr commence Multiple PHP remote file inclusion vulnerabilities in IAPR COMMENCE 1.3 allow remote attackers to... 6.8 Medium
- hitachi jp1 file transmission server Hitachi JP1/File Transmission Server/FTP 01-00 through 08-10-02 on Windows might allow remote... 5.0 Medium
- hitachi jp1 file transmission server Unspecified vulnerability in Hitachi JP1/File Transmission Server/FTP 01-00 through 08-10-01... 5.0 Medium
- xunlei web thunder Heap-based buffer overflow in the PPlayer.XPPlayer.1 ActiveX control in pplayer.dll_1_work in... 6.0 Medium
- vu case manager SQL injection vulnerability in default.asp (aka the Login Page) in VU Case Manager allows remote... 7.5 High
- salims softhouse jaf cms Multiple cross-site scripting (XSS) vulnerabilities in ph03y3nk just another flat file (JAF) CMS... 4.3 Medium
- Show olderLoading…