CVEs published in November 2007
421 vulnerabilities, 72 critical, 0 exploited.
- usvn user-friendly svnUSVN before 0.6.5 allows remote attackers to obtain a list of repository contents via unspecified...5.0 Medium
- ibm websphere application serverCross-site scripting (XSS) vulnerability in Servlet Engine / Web Container in IBM WebSphere...4.3 Medium
- simple machines forumSimple Machines Forum (SMF) 1.1.4 allows remote attackers to read a message in private forums by...5.0 Medium
- bandersnatchBandersnatch 0.4 allows remote attackers to obtain sensitive information via a malformed request...4.0 Medium
- adobe shockwave playerStack-based buffer overflow in the SWCtl.SWCtl ActiveX control in Adobe Shockwave allows remote...10.0 High
- ruby-lang rubyThe (1) Net::ftptls, (2) Net::telnets, (3) Net::imap, (4) Net::pop, and (5) Net::smtp libraries...5.0 Medium
- winpcapMultiple array index errors in the bpf_filter_init function in NPF.SYS in WinPcap before 4.0.2,...6.9 Medium
- aol radioMultiple stack-based buffer overflows in the AOL AmpX ActiveX control in AmpX.dll 2.6.1.11 in AOL...9.3 High
- novell clientNWFILTER.SYS in Novell Client 4.91 SP 1 through SP 4 for Windows 2000, XP, and Server 2003 makes...7.2 High
- microsoft windows 2000, windows 2003 server, windows server 2003 +2 moreThe DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses...6.4 Medium
- sun net connect softwareFormat string vulnerability in srsexec in Sun Remote Services (SRS) Net Connect 3.2.3 and 3.2.4,...7.2 High
- redhat congaThe ricci daemon in Red Hat Conga 0.10.0 allows remote attackers to cause a denial of service ...5.0 Medium
- tug texlive 2007feynmf.pl in feynmf 1.08, as used in TeXLive 2007, allows local users to overwrite arbitrary...4.6 Medium
- nss ldap ldapRace condition in nss_ldap, when used in applications that are linked against the pthread library...4.3 Medium
- tetex, tug texlive 2007 +1 moreMultiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow...6.8 Medium
- tetex, tug texlive 2007 +1 moredvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information...3.6 Low
- tetex, tug texlive 2007 +1 moreStack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user...6.8 Medium
- pear structures datagrid datasource mdb2The LOB functionality in PEAR MDB2 before 2.5.0a1 interprets a request to store a URL string as a...4.3 Medium
- pioneersPioneers (formerly gnocatan) before 0.11.3 allows remote attackers to cause a denial of service ...7.8 High
- fatwire content serverMultiple cross-site scripting (XSS) vulnerabilities in Fatwire Content Server (CS) CMS 6.3.0...4.3 Medium
- orangehrmThe reDirect function in lib/controllers/RepViewController.php in OrangeHRM before 2.2.2 does not...5.0 Medium
- cerberus ftp serverCross-site scripting (XSS) vulnerability in the web interface in Cerberus FTP Server before 2.46...4.3 Medium
- openbase international ltd openbaseBuffer overflow in OpenBase 10.0.5 and earlier might allow remote authenticated users to execute...9.0 High
- openbase international ltd openbaseOpenBase 10.0.5 and earlier allows remote authenticated users to trigger a free of an arbitrary...9.0 High
- openbase international ltd openbaseDirectory traversal vulnerability in OpenBase 10.0.5 and earlier allows remote authenticated...9.0 High
- openbase international ltd openbaseOpenBase 10.0.5 and earlier allows remote authenticated users to execute arbitrary commands via...9.0 High
- mysqlThe convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in MySQL 5.1.23...4.0 Medium
- ibm lotus dominoCross-site scripting (XSS) vulnerability in the Web Server (HTTP) task in IBM Lotus Domino before...4.3 Medium
- broadcom etrust siteminderCross-site scripting (XSS) vulnerability in forms/smpwservices.fcc in CA (formerly Computer...4.3 Medium
- bitchx, cypress +1 moreThe modules/mdop.m in the Cypress 1.0k script for BitchX, as downloaded from a distribution site...5.0 Medium
- sun sunosUnspecified vulnerability in the ioctl interface in the Solaris Volume Manager (SVM) in Sun...4.7 Medium
- picoflat cms cmsindex.php in Domenico Mancini PicoFlat CMS before 0.4.18 allows remote attackers to include...6.8 Medium
- mywebftpMyWebFTP, possibly 5.3.2, stores sensitive information under the web root with insufficient...5.0 Medium
- ms topsites topsitesCross-site request forgery (CSRF) vulnerability in edit.php in the MS TopSites add-on for PHP...6.0 Medium
- skalinksCross-site request forgery (CSRF) vulnerability in admin/admin_account.php in Skalinks 1.5 and...6.8 Medium
- phphelpdeskSQL injection vulnerability in the login page in phphelpdesk 0.6.16 allows remote attackers to...7.5 High
- phphelpdeskDirectory traversal vulnerability in index.php in phphelpdesk 0.6.16 allows remote attackers to...6.8 Medium
- jean charles jbc explorerDirect static code injection vulnerability in dirsys/modules/config/post.php in JBC Explorer 7.20...6.8 Medium
- jean charles jbc explorerdirsys/modules/auth.php in JBC Explorer 7.20 RC1 and earlier does not require authentication,...6.8 Medium
- jportal web portalSQL injection vulnerability in mailer.php in jPORTAL 2 allows remote attackers to execute...7.5 High
- viewpoint media playerMultiple stack-based buffer overflows in the AxMetaStream ActiveX control in AxMetaStream.dll 3.3...6.8 Medium
- activepdf docconverter, ibm lotus notes, symantec mail security +3 more +5 moreStack-based buffer overflow in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK...9.3 High
- activepdf docconverter, ibm lotus notes, symantec mail security +3 more +5 moreMultiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView Viewer, Filter, and...9.3 High
- miranda-im miranda imFormat string vulnerability in the ext_yahoo_contact_added function in yahoo.c in Miranda IM 0.7...6.8 Medium
- redhat mcstransAlgorithmic complexity vulnerability in the MCS translation daemon in mcstrans 0.2.3 allows local...1.9 Low
- xensource inc xenXen 3.1.1 does not prevent modification of the CR4 TSC from applications, which allows pv guests...4.7 Medium
- xensource inc xenXen 3.1.1 allows virtual guest system users to cause a denial of service (hypervisor crash) by...4.7 Medium
- linux kernelMultiple buffer overflows in CIFS VFS in Linux kernel 2.6.23 and earlier allows remote attackers...6.8 Medium
- oracle database serverBuffer overflow in MDSYS.SDO_CS in Oracle Database Server 8iR3, 9iR1, 9iR2 up to 9.2.0.6, and...8.5 High
- mozilla firefoxMozilla Firefox 2.0.0.9 allows remote attackers to cause a denial of service (CPU consumption and...7.1 High
- Show moreLoading…