CVEs published in November 2007
421 vulnerabilities, 72 critical, 0 exploited.
- apple mac os x, mac os x server +1 moreDouble free vulnerability in the Networking component in Apple Mac OS X 10.4 through 10.4.10...10.0 High
- apple mac os x, mac os x server +1 moreThe Networking component in Apple Mac OS X 10.4 through 10.4.10 allows remote attackers to obtain...5.0 Medium
- apple mac os x, mac os x server +1 moreThe remote_cmds component in Apple Mac OS X 10.4 through 10.4.10 contains a symbolic link from...9.3 High
- apple mac os x, mac os x server +1 moreInteger signedness error in the ttioctl function in bsd/kern/tty.c in the xnu kernel in Apple Mac...7.2 High
- apple mac os x, mac os x server +1 moreThe kernel in Apple Mac OS X 10.4 through 10.4.10 allows local users to gain privileges by...7.2 High
- apple mac os xInteger overflow in the kernel in Apple Mac OS X 10.4 through 10.4.10 allows local users to...6.9 Medium
- apple mac os xDirectory traversal vulnerability in the kernel in Apple Mac OS X 10.4 through 10.4.10 allows...4.6 Medium
- apple mac os xCoreText in Apple Mac OS X 10.4 through 10.4.10 allows attackers to cause a denial of service ...6.8 Medium
- apple mac os xBuffer overflow in CoreFoundation in Apple Mac OS X 10.3.9 and 10.4 through 10.4.10 allows local...6.9 Medium
- apple mac os xCFNetwork in Apple Mac OS X 10.3.9 and 10.4 through 10.4.10 does not properly validate...6.8 Medium
- apple mac os xCFFTP in CFNetwork for Apple Mac OS X 10.4 through 10.4.10 allows remote FTP servers to force...2.6 Low
- apple mac os x, mac os x server +1 moreAppleRAID in Apple Mac OS X 10.3.9 and 10.4 through 10.4.10 allows attackers to cause a denial of...7.1 High
- apple mac os x, mac os x server +1 moreInteger overflow in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local...7.2 High
- apple mac os xInteger signedness error in the Networking component in Apple Mac OS X 10.4 through 10.4.10...7.8 High
- apple mac os xStack-based buffer overflow in the Networking component in Apple Mac OS X 10.4 through 10.4.10...7.2 High
- apple mac os xThe kernel in Apple Mac OS X 10.4 through 10.4.10 does not reset the current Mach Thread Port or...7.8 High
- bti-trackerblocks/shoutbox_block.php in BtiTracker 1.4.4 does not verify user accounts, which allows remote...7.5 High
- bti-trackerdetails.php in BtiTracker before 1.4.5, when torrent viewing is disabled for guests, allows...6.8 Medium
- btiteam btitrackerSQL injection vulnerability in include/functions.php in BtiTracker before 1.4.5 allows remote...7.5 High
- bti-trackerMultiple cross-site scripting (XSS) vulnerabilities in BtiTracker before 1.4.5 allow remote...4.3 Medium
- justin hagstrom autoindex php scriptclasses/Url.php in Justin Hagstrom AutoIndex PHP Script before 2.2.4 allows remote attackers to...7.8 High
- justin hagstrom autoindex php scriptCross-site scripting (XSS) vulnerability in index.php in Justin Hagstrom AutoIndex PHP Script...4.3 Medium
- x7 group chatMultiple cross-site scripting (XSS) vulnerabilities in X7 Chat 2.0.4, 2.0.5, and possibly other...4.3 Medium
- lantronix scs3200Lantronix SCS3200 does not properly handle public-key requests, which allows remote attackers to...3.3 Low
- eggblogCross-site scripting (XSS) vulnerability in home/rss.php in eggblog before 3.1.1 allows remote...4.3 Medium
- f5 firepass 4100Cross-site scripting (XSS) vulnerability in download_plugin.php3 in F5 Firepass 4100 SSL VPN 5.4...4.3 Medium
- xoops mylinks moduleSQL injection vulnerability in brokenlink.php in the mylinks module for XOOPS allows remote...7.5 High
- phpmyadminCross-site scripting (XSS) vulnerability in db_create.php in phpMyAdmin before 2.11.2.1 allows...3.5 Low
- phpmyadminSQL injection vulnerability in db_create.php in phpMyAdmin before 2.11.2.1 allows remote...6.5 Medium
- torrentstrikeSQL injection vulnerability in index.php in TBSource, as used in (1) TBDev and (2) TorrentStrike...6.5 Medium
- jportal web portalSQL injection vulnerability in mailer.php in JPortal 2 allows remote attackers to execute...7.5 High
- jportal web portalSQL injection vulnerability in articles.php in JPortal 2.3.1 and earlier allows remote attackers...7.5 High
- apple safariApple Safari 3 before Beta Update 3.0.4 on Windows, and Mac OS X 10.4 through 10.4.10, allows...4.3 Medium
- apple safariThe tabbed browsing feature in Apple Safari 3 before Beta Update 3.0.4 on Windows, and Mac OS X...4.3 Medium
- ubuntu linux kernelThe skge driver 1.5 in Linux kernel 2.6.15 on Ubuntu does not properly use the spin_lock and...7.8 High
- getmiro broadcast machineCross-site scripting (XSS) vulnerability in login.php in Miro Project Broadcast Machine 0.9.9.9...4.3 Medium
- pcreInteger overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 might allow...6.8 Medium
- pcreInteger overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 allows context...6.8 Medium
- ibm informix dynamic serverUnspecified vulnerability in IBM Informix Dynamic Server (IDS) 10.00.TC3TL and 11.10.TB4TL on...4.9 Medium
- ibm informix dynamic serverDirectory traversal vulnerability in IBM Informix Dynamic Server (IDS) before 10.00.xC7W1 allows...7.2 High
- updir updir.netCross-site scripting (XSS) vulnerability in updir.php in UPDIR.NET before 2.04 allows remote...4.3 Medium
- jlmforo system systemCross-site scripting (XSS) vulnerability in buscador.php in JLMForo System allows remote...4.3 Medium
- really simple caldav store simple caldav storeUnspecified vulnerability in Really Simple CalDAV Store (RSCDS) before 0.9.0 allows attackers to...5.0 Medium
- helioscalendar helios calendarCross-site scripting (XSS) vulnerability in admin/index.php in Helios Calendar 1.2.1 Beta allows...4.3 Medium
- e-vendejo 0.2SQL injection vulnerability in articles.php in E-Vendejo 0.2 allows remote attackers to execute...7.5 High
- netcommonsCross-site scripting (XSS) vulnerability in NetCommons before 1.0.11, and 1.1.x before 1.1.2,...4.3 Medium
- ibm tivoli service deskCross-site scripting (XSS) vulnerability in IBM Tivoli Service Desk 6.2 allows remote...3.5 Low
- script-fun sf-shoutboxMultiple cross-site scripting (XSS) vulnerabilities in main.php in SF-Shoutbox 1.2.1 through 1.4...4.3 Medium
- mozilla firefox, seamonkey +1 moreThe jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 retrieves...4.3 Medium
- hp hp-uxUnspecified vulnerability in the Aries PA-RISC emulator on HP-UX B.11.23 and B.11.31 on the IA-64...7.2 High
- Show moreLoading…