CVEs published in November 2007
421 vulnerabilities, 72 critical, 0 exploited.
- weird solutions bootpturboUnspecified vulnerability in Weird Solutions BOOTPTurbo 1.2 has unknown impact and remote attack...10.0 High
- clam anti-virus clamavUnspecified vulnerability in ClamAV 0.91.1 and 0.91.2 allows remote attackers to execute...7.5 High
- linux kernelThe wait_task_stopped function in the Linux kernel before 2.6.23.8 checks a TASK_TRACED bit...4.9 Medium
- componentone flexgridMultiple stack-based buffer overflows in the VSFlexGrid.VSFlexGridL ActiveX control in...6.8 Medium
- justjoomla carousel flash image galleryPHP remote file inclusion vulnerability in admin.jjgallery.php in the Carousel Flash Image...6.8 Medium
- microsoft jet, office, windows 2000 +3 more +5 moreStack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as...9.3 High
- wpa supplicant supplicantStack-based buffer overflow in driver_wext.c in wpa_supplicant 0.6.0 and earlier allows remote...7.1 High
- wordpress, fedoraproject fedora +1 moreWordpress 1.5 through 2.3.1 uses cookie values based on the MD5 hash of a password MD5 hash,...9.8 Critical
- gatesoft docusafeSQL injection vulnerability in SearchR.asp in DocuSafe 4.1.0 and 4.1.2 allows remote attackers to...7.5 High
- sambaStack-based buffer overflow in the reply_netbios_packet function in nmbd/nmbd_packets.c in nmbd...9.3 High
- sambaStack-based buffer overflow in nmbd in Samba 3.0.0 through 3.0.26a, when configured as a Primary...9.3 High
- bug software bughotel reservation systemUnspecified vulnerability in main.php of BugHotel Reservation System before 4.9.9 P3 allows...10.0 High
- pioneersUnspecified vulnerability in pioneers (formerly gnocatan) 0.11.3 allows remote attackers to cause...7.8 High
- acdsee photo editor, photo manager, pro photo manager +2 moreMultiple buffer overflows in ACD products allow user-assisted remote attackers to execute...9.3 High
- autonomy keyview export sdk, keyview filter sdk, keyview viewer sdk +2 moreHeap-based buffer overflow in emlsr.dll before 2.0.0.4 in Autonomy (formerly Verity) KeyView...9.3 High
- acdsee photo editor, photo manager, pro photo manager +2 moreInteger overflow in the ID_PSP.apl plug-in for ACD ACDSee Photo Manager 9.0 build 108, Pro Photo...6.8 Medium
- testlinkTestLink before 1.7.1 does not enforce an unspecified authorization mechanism, which has unknown...10.0 High
- webex communications gpccontainer activex controlUnspecified vulnerability in the GpcContainer.GpcContainer.1 ActiveX control in WebEx allows...4.3 Medium
- toko instanMultiple SQL injection vulnerabilities in index.php in Toko Instan 7.6 allow remote attackers to...7.5 High
- thomson speedtouchCross-site scripting (XSS) vulnerability in cgi/b/ic/connect in the Thomson SpeedTouch 716 with...4.3 Medium
- fenrir grani, sleipnir +1 moreCross-site scripting (XSS) vulnerability in Fenriru (1) Sleipnir 2.5.17 R2 and earlier and (2)...4.3 Medium
- bandersnatchMultiple cross-site scripting (XSS) vulnerabilities in index.php in Bandersnatch 0.4 allow remote...4.3 Medium
- kde konquerorKDE Konqueror 3.5.6 and earlier allows remote attackers to cause a denial of service (crash) via...5.0 Medium
- softbizscripts softbiz auctions scriptSQL injection vulnerability in product_desc.php in Softbiz Auctions Script allows remote...7.5 High
- softbizscripts ad management plus scriptSQL injection vulnerability in ads.php in Softbiz Ad Management plus Script 1 allows remote...6.5 Medium
- softbizscripts banner exchange network scriptSQL injection vulnerability in campaign_stats.php in Softbiz Banner Exchange Network Script 1.0...6.5 Medium
- softbizscripts link directory scriptSQL injection vulnerability in searchresult.php in Softbiz Link Directory Script allows remote...7.5 High
- php-tools patbbcodePHP remote file inclusion vulnerability in examples/patExampleGen/bbcodeSource.php in patBBcode 1...6.8 Medium
- yappa-ngPHP remote file inclusion vulnerability in check_noimage.php in Fritz Berger yet another php...6.8 Medium
- vtls vtls.web.gatewayCross-site scripting (XSS) vulnerability in Visionary Technology in Library Solutions (VTLS) vtls...4.3 Medium
- datecomm social networking scriptSQL injection vulnerability in index.php in datecomm Social Networking Script (aka Myspace Clone...7.5 High
- exo exophpdeskSQL injection vulnerability in index.php in ExoPHPdesk allows remote attackers to execute...7.5 High
- exo exophpdeskCross-site scripting (XSS) vulnerability in ExoPHPdesk allows remote attackers to inject...4.3 Medium
- acdsee photo editor, photo manager, pro photo manager +2 moreMultiple input validation errors in ACD ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1...9.3 High
- adobe coldfusionAdobe ColdFusion 8 and MX 7 allows remote attackers to hijack sessions via unspecified vectors...6.8 Medium
- linux kernelThe tcp_sacktag_write_queue function in net/ipv4/tcp_input.c in Linux kernel 2.6.21 through 2.6...7.8 High
- apple mac os xThe Application Firewall in Apple Mac OS X 10.5 does not apply changed settings to processes that...10.0 High
- apple mac os x, mac os x server +1 moreThe Application Firewall in Apple Mac OS X 10.5 does not prevent a root process from accepting...10.0 High
- apple mac os x, mac os x server +1 moreThe Application Firewall in Apple Mac OS X 10.5, when "Block all incoming connections" is enabled...9.3 High
- pcrePerl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate the...4.3 Medium
- apple mac os x, mac os x server +1 moreWebKit on Apple Mac OS X 10.4 through 10.4.10 does not create temporary files securely when...2.1 Low
- apple mac os x, mac os x server +1 moreUnspecified vulnerability in WebKit on Apple Mac OS X 10.4 through 10.4.10 allows remote...7.5 High
- apple safariThe default configuration of Safari in Apple Mac OS X 10.4 through 10.4.10 adds a private key to...7.5 High
- apple mac os x, mac os x server +1 moreUnspecified vulnerability in WebCore in Apple Mac OS X 10.4 through 10.4.10 allows remote...6.8 Medium
- apple mac os x, mac os x server +1 moreRace condition in WebCore in Apple Mac OS X 10.4 through 10.4.10 allows remote attackers to...4.3 Medium
- apple mac os x, mac os x server +1 moreUnspecified "input validation" vulnerability in WebCore in Apple Mac OS X 10.4 through 10.4.10...4.3 Medium
- apple mac os x, mac os x server +1 moreSafari in Apple Mac OS X 10.4 through 10.4.10 allows remote attackers to access local content via...4.3 Medium
- apple mac os x, mac os x server +1 moreThe SecurityAgent component in Mac OS X 10.4 through 10.4.10 allows attackers with physical...7.2 High
- apple mac os x, mac os x server +1 moreThe NSURL component in Apple Mac OS X 10.4 through 10.4.10 performs case-sensitive comparisons...10.0 High
- apple mac os x, mac os x server +1 moreDouble free vulnerability in the NFS component in Apple Mac OS X 10.4 through 10.4.10 allows...9.0 High
- Show moreLoading…