CVEs published in November 2007
421 vulnerabilities, 72 critical, 0 exploited.
- firefly media serverFormat string vulnerability in the ws_addarg function in webserver.c in mt-dappd in Firefly Media...7.5 High
- firefly media serverwebserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to...7.1 High
- scribeDirectory traversal vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote...7.5 High
- scribeDirect static code injection vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows...7.5 High
- dm guestbook guestbookMultiple directory traversal vulnerabilities in DM Guestbook 0.4.1 and earlier allow remote...6.8 Medium
- ax developer cms developer cmsDirectory traversal vulnerability in index.php in Ax Developer CMS (AxDCMS) 0.1.1 allows remote...9.3 High
- ibm tivoli continuous data protection for filesIBM Tivoli Continuous Data Protection for Files (CDP) 3.1.0 uses weak permissions (unrestricted...2.1 Low
- sblogCross-site request forgery (CSRF) vulnerability in blocks_edit_do.php in sBlog 0.7.3 Beta allows...7.6 High
- contentcustomizerdialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to perform certain...4.3 Medium
- contentcustomizerdialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to obtain sensitive...5.0 Medium
- sonicwall ssl vpn2000\/4000, ssl vpn 200 +1 moreAbsolute path traversal vulnerability in the WebCacheCleaner ActiveX control 1.3.0.3 in SonicWall...10.0 High
- sonicwall ssl vpnMultiple buffer overflows in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control...9.3 High
- sonicwall ssl vpnStack-based buffer overflow in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control...9.3 High
- ispworkerMultiple directory traversal vulnerabilities in download.php in ISPworker 1.21 allow remote...5.0 Medium
- modulebuilderDirectory traversal vulnerability in modules/Builder/DownloadModule.php in ModuleBuilder 1.0...5.0 Medium
- phpmyconferences** DISPUTED ** Directory traversal vulnerability in PageTraiteDownload.php in phpMyConferences 8...5.0 Medium
- hitachi web server, cosminexus application server enterprise, cosminexus application server standard +11 more +13 moreHitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not...5.0 Medium
- hitachi web server, cosminexus application server enterprise, cosminexus application server standard +11 more +13 moreCross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by...4.3 Medium
- hitachi groupmax collaboration portal, groupmax collaboration web client, ucosminexus collaboration portal +2 moreUnspecified vulnerability in the Groupmax Collaboration - Schedule component in Hitachi Groupmax...5.0 Medium
- ssreader ultra star readerBuffer overflow in the register function in Ultra Star Reader ActiveX control in SSReader allows...6.8 Medium
- iliasCross-site scripting (XSS) vulnerability in Services/Utilities/classes/class.ilUtil.php in ILIAS...4.3 Medium
- ibm aixcfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to...6.9 Medium
- ibm aixcfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to...6.9 Medium
- citrix access gatewayThe web portal interface in Citrix Access Gateway (aka Citrix Advanced Access Control) before...5.0 Medium
- ibm aixStack-based buffer overflow in the sendrmt function in bellmail in IBM AIX 5.2 and 5.3 allows...7.2 High
- ibm aixInteger underflow in the dns_name_fromtext function in (1) libdns_nonsecure.a and (2)...7.2 High
- ibm aixBuffer overflow in crontab in IBM AIX 5.2 allows local users to gain privileges via long command...7.2 High
- ibm aixMultiple stack-based buffer overflows in IBM AIX 5.2 and 5.3 allow local users to gain privileges...7.2 High
- ibm aixStack-based buffer overflow in the domacro function in ftp in IBM AIX 5.2 and 5.3 allows local...7.2 High
- pcreHeap-based buffer overflow in Perl-Compatible Regular Expression (PCRE) library before 7.3 allows...6.8 Medium
- pcrePerl-Compatible Regular Expression (PCRE) library before 7.3 does not properly compute the length...5.0 Medium
- pcreMultiple integer overflows in Perl-Compatible Regular Expression (PCRE) library before 7.3 allow...7.5 High
- pcrePerl-Compatible Regular Expression (PCRE) library before 7.3 reads past the end of the string...5.0 Medium
- apple mac os x, mac os x server, pcre perl-compatible regular expression library +2 morePerl-Compatible Regular Expression (PCRE) library before 7.3 backtracks too far when matching...6.4 Medium
- pcrePerl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes...6.8 Medium
- pcrePerl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers...6.8 Medium
- firewolf technologies synergiserDirectory traversal vulnerability in index.php in Firewolf Technologies Synergiser 1.2 RC1 and...7.5 High
- work system e-commerce system e-commerceUnspecified vulnerability in WORK system e-commerce before 4.0.2 has unknown impact and attack...7.5 High
- tom willmot backupwordpress pluginMultiple PHP remote file inclusion vulnerabilities in the BackUpWordPress 0.4.2b and earlier...6.8 Medium
- ibm websphere application serverMultiple cross-site request forgery (CSRF) vulnerabilities in uddigui/navigateTree.do in the UDDI...4.3 Medium
- ibm websphere application serverMultiple cross-site scripting (XSS) vulnerabilities in uddigui/navigateTree.do in the UDDI user...4.3 Medium
- apache geronimoSQLLoginModule in Apache Geronimo 2.0 through 2.1 does not throw an exception for a nonexistent...7.5 High
- symantec proxysg firmwareCross-site scripting (XSS) vulnerability in the management console in Blue Coat ProxySG before 4...4.3 Medium
- novell bordermanagerHeap-based buffer overflow in the Client Trust application (clntrust.exe) in Novell BorderManager...10.0 High
- gnu emacsThe hack-local-variables function in Emacs before 22.2, when enable-local-variables is set to ...6.3 Medium
- macrovision flexnet connect, installshield 2008, update service +2 moreUnspecified vulnerability in the Update Service ActiveX control in isusweb.dll before 6.0.100...9.3 High
- archive\ \, canonical ubuntu linux +1 moreDirectory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user...6.8 Medium
- stonesoft stonegate ipsStonesoft StoneGate IPS before 4.0 does not properly decode Fullwidth/Halfwidth Unicode encoded...7.1 High
- vonage motorola phone adapter vt2142-vdThe Vonage Motorola Phone Adapter VT 2142-VD does not encrypt RTP packets, which might allow...7.1 High
- vonage motorola phone adapter vt2142-vdThe Vonage Motorola Phone Adapter VT 2142-VD does not properly verify that a SIP INVITE message...10.0 High
- Show moreLoading…