CVEs published in November 2007
421 vulnerabilities, 72 critical, 0 exploited.
- oracle e-business suiteSQL injection vulnerability in okxLOV.jsp in Oracle E-Business Suite 11 and 12 allows remote...7.5 High
- oracle database serverBuffer overflow in the XDB.XDB_PITRIG_PKG.PITRIG_DROPMETADATA procedure in Oracle 10g R2 allows...6.0 Medium
- microsoft sysinternals debugviewDbgv.sys in Microsoft Sysinternals DebugView before 4.72 provides an unspecified mechanism for...10.0 High
- fedoraproject coolkeyCoolKey 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary...3.3 Low
- alhem c\+\+ sockets libraryHTTPSocket.cpp in the C++ Sockets Library before 2.2.5 allows remote attackers to cause a denial...5.0 Medium
- ssreader ultra star readerStack-based buffer overflow in the pdg2.dll ActiveX control in SSReader 4.0 and earlier allow...10.0 High
- manageengine opmanager, opmanager msp +1 moreMultiple cross-site scripting (XSS) vulnerabilities in jsp/Login.do in ManageEngine OpManager MSP...4.3 Medium
- easygbDirectory traversal vulnerability in index.php in easyGB 2.1.1 allows remote attackers to include...10.0 High
- idmosMultiple PHP remote file inclusion vulnerabilities in IDMOS 1.0 Alpha (aka Phoenix) allow remote...10.0 High
- cisco unified meetingplaceMultiple cross-site scripting (XSS) vulnerabilities in mpweb/scripts/mpx.dll in Cisco Unified...4.3 Medium
- abiword link grammar, link grammar grammar +1 moreStack-based buffer overflow in the separate_word function in tokenize.c in Link Grammar 4.1b and...10.0 High
- xpdfHeap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3...9.3 High
- xpdfInteger overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote...9.3 High
- xpdfArray index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3...7.6 High
- gforgegforge 3.1 and 4.5.14 allows local users to truncate arbitrary files via a symlink attack on...3.3 Low
- coppermine photo galleryCross-site scripting (XSS) vulnerability in displayecard.php in Coppermine Photo Gallery (CPG)...4.3 Medium
- infuseum asp message boardSQL injection vulnerability in boards/printer.asp in ASP Message Board 2.2.1c allows remote...7.5 High
- plonePlone Arbitrary Code Execution via Unsafe Handling of Pickles7.5 High
- apple mac os x, microsoft windows vista, windows xp +2 moreHeap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute...9.3 High
- apple mac os x, microsoft windows vista, windows xp +2 moreHeap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute...9.3 High
- apple mac os x, microsoft windows vista, windows xp +2 moreHeap-based buffer overflow in the QuickTime VR extension 7.2.0.240 in QuickTime.qts in Apple...9.3 High
- apple quicktimeStack-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute...7.6 High
- apple mac os x, microsoft windows vista, windows xp +2 moreUnspecified vulnerability in QuickTime for Java in Apple QuickTime before 7.3 allows remote...9.3 High
- apple quicktimeHeap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute...9.3 High
- apple quicktimeUnspecified vulnerability in Apple QuickTime before 7.3 allows remote attackers to execute...9.3 High
- net-snmpThe SNMP agent (snmp_agent.c) in net-snmp before 5.4.1 allows remote attackers to cause a denial...7.8 High
- guppyDirectory traversal vulnerability in error.php in GuppY 4.6.3, 4.5.16, and earlier allows remote...7.5 High
- guppyDirectory traversal vulnerability in inc/includes.inc in GuppY 4.6.3 allows remote attackers to...7.5 High
- scwikiPHP remote file inclusion vulnerability in includes/common.php in scWiki 1.0 Beta 2 allows remote...6.8 Medium
- vortex portal portalMultiple PHP remote file inclusion vulnerabilities in Vortex Portal 1.0.42 allow remote attackers...6.8 Medium
- nuboardPHP remote file inclusion vulnerability in admin/index.php in nuBoard 0.5 allows remote attackers...6.8 Medium
- syndeocmsPHP remote file inclusion vulnerability in starnet/themes/c-sky/main.inc.php in Fred Stuurman...6.8 Medium
- redhat certificate serverCertificate Server 7.2 in Red Hat Certificate System (RHCS) does not properly handle new...7.5 High
- bitchxThe e_hostname function in commands.c in BitchX 1.1a allows local users to overwrite arbitrary...4.6 Medium
- symantec altiris deployment solutionAclient in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows local users to gain...7.2 High
- linux kernelInteger underflow in the ieee80211_rx function in net/ieee80211/ieee80211_rx.c in the Linux...7.1 High
- altiris deployment solutionDirectory traversal vulnerability in the tftp/mftp daemon in the PXE server component (pxemtftp...7.8 High
- larry wall perl, mandrakesoft mandrake multi network firewall, openpkg +1 more +3 moreBuffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in...7.5 High
- yarssrGUI.pm in yarssr 0.2.2, when Gnome default URL handling is disabled, allows remote attackers to...6.8 Medium
- afcommerceSQL injection vulnerability in Amazing Flash AFCommerce allows remote attackers to execute...7.5 High
- bosdev bosnewsInstall.php in BosDev BosNews 4 and 5 does not require authentication for replacing an existing...5.0 Medium
- bosdev bosnewsCross-site scripting (XSS) vulnerability in BosDev BosNews 4 allows remote attackers to inject...4.3 Medium
- bosdev bosmarket business directory systemMultiple cross-site scripting (XSS) vulnerabilities in BosDev BosMarket Business Directory System...3.5 Low
- ssl-explorerUnspecified vulnerability in selectLanguage.do in SSL-Explorer before 0.2.15 allows remote...7.5 High
- ssl-explorerDirectory traversal vulnerability in fileSystem.do in SSL-Explorer before 0.2.14 allows remote...5.0 Medium
- avaya message networking, messaging storage server +1 moreUnspecified vulnerability in the administrative interface in Avaya Messaging Storage Server (MSS)...7.8 High
- symantec norton antivirus, norton internet security +1 moreThe Disk Mount scanner in Symantec AntiVirus for Macintosh 9.x and 10.x, Norton AntiVirus for...6.0 Medium
- django project django** DISPUTED ** Cross-site request forgery (CSRF) vulnerability in the admin panel in Django 0.96...6.8 Medium
- iscsitargetiSCSI Enterprise Target (iscsitarget) 0.4.15 uses weak permissions for /etc/ietd.conf, which...2.1 Low
- edraw flowchart activexAbsolute path traversal vulnerability in the EDraw Flowchart ActiveX control in EDImage.ocx 2.0...9.3 High
- Show moreLoading…