CVEs published in November 2007
421 vulnerabilities, 72 critical, 0 exploited.
- mebiblioPHP remote file inclusion vulnerability in index.php in meBiblio 0.4.5 allows remote attackers to...9.3 High
- phpbbvietPHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBBViet 02.03.07...9.3 High
- vigilecmsCross-site request forgery (CSRF) vulnerability in index.php in VigileCMS 1.4 allows remote...6.8 Medium
- vigilecmsDirectory traversal vulnerability in index.php in VigileCMS 1.4 allows remote attackers to...9.3 High
- vigilecmsMultiple cross-site scripting (XSS) vulnerabilities in index.php in VigileCMS 1.4 allow remote...4.3 Medium
- hotscripts clone scriptSQL injection vulnerability in software-description.php in HotScripts Clone Script allows remote...7.5 High
- icebbSQL injection vulnerability in admin/index.php in IceBB 1.0-rc6 allows remote attackers to...7.5 High
- sciurus hosting panelDirect static code injection vulnerability in acp/savenews.php in Sciurus Hosting Panel, possibly...9.3 High
- adventnet eventlog analyzerAdventNet EventLog Analyzer build 4030 for Windows, and possibly other versions and platforms,...7.5 High
- bcoosSQL injection vulnerability in modules/banners/click.php in the banners module for bcoos 1.0.10...7.5 High
- bcoosDirectory traversal vulnerability in include/common.php in bcoos 1.0.10 allows remote attackers...6.8 Medium
- skyportalMultiple SQL injection vulnerabilities in SkyPortal RC6 allow remote attackers to execute...7.5 High
- ibm directorCIM Server in IBM Director 5.20.1 and earlier allows remote attackers to cause a denial of...7.8 High
- rubyonrails railssession fixation protection mechanism in cgi_process.rb in Rails6.8 Medium
- linux kernelBuffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local...6.9 Medium
- ngircdirc-channel.c in ngIRCd before 0.10.3 allows remote attackers to cause a denial of service (crash...5.0 Medium
- audacityteam audacityAudacity 1.3.2 creates a temporary directory with a predictable name without checking for...5.0 Medium
- ahnlab v3 internet securityAhnLab Antivirus 3 Internet Security 2008 Platinum appends data to a filename string at a...9.3 High
- sun javamail** DISPUTED ** Javamail does not properly handle a series of invalid login attempts in which the...5.0 Medium
- profilecmsMultiple SQL injection vulnerabilities in index.php in ProfileCMS 1.0 and earlier allow remote...7.5 High
- datecomm social networking scriptPHP remote file inclusion vulnerability in index.php in datecomm Social Networking Script (aka...6.8 Medium
- aida-orga aida-webframe.html in Aida-Web (Aida Web) allows remote attackers to bypass a protection mechanism and...5.0 Medium
- liferay portalCross-site scripting (XSS) vulnerability in c/portal/login in Liferay Portal 4.1.0 and 4.1.1...4.3 Medium
- aruba networks mc-800Cross-site scripting (XSS) vulnerability in the login page in the management interface in the...4.3 Medium
- ibm db2 universal databaseIBM DB2 UDB 9.1 before Fixpak 4 does not properly handle use of large numbers of file descriptors...9.3 High
- ibm db2 universal databaseIBM DB2 UDB 9.1 before Fixpak 4 does not properly perform vector aggregation, which might allow...7.8 High
- ibm db2 universal databaseIBM DB2 UDB 9.1 before Fixpak 4 assigns incorrect privileges to the (1) DB2ADMNS and (2) DB2USERS...10.0 High
- ibm db2 universal databaseUnspecified vulnerability in DB2LICD in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and...7.2 High
- ibm db2 universal databaseUnspecified vulnerability in the SSL LOAD GSKIT action in IBM DB2 UDB 9.1 before Fixpak 4 has...7.2 High
- ibm db2 universal databaseIBM DB2 UDB 9.1 before Fixpak 4 uses incorrect permissions on ACLs for DB2NODES.CFG, which has...10.0 High
- ibm db2 universal databaseUnspecified vulnerability in the DB2DART tool in IBM DB2 UDB 9.1 before Fixpak 4 allows attackers...10.0 High
- ibm db2 universal databaseUnspecified vulnerability in unspecified setuid programs in IBM DB2 UDB 9.1 before Fixpak 4...7.2 High
- ibm db2 universal databaseUnspecified vulnerability in (1) DB2WATCH and (2) DB2FREEZE in IBM DB2 UDB 9.1 before Fixpak 4...10.0 High
- ibm websphere mqMultiple unspecified vulnerabilities in IBM WebSphere MQ 6.0 have unknown impact and remote...10.0 High
- microsoft windows 2000The CryptGenRandom function in Microsoft Windows 2000 generates predictable values, which makes...7.1 High
- swsoft confixx professionalPHP remote file inclusion vulnerability in fehler.inc.php in SWSoft Confixx Professional 3.2.1...6.8 Medium
- rigs of rogs of rogsBuffer overflow in the Sequencer::queueMessage function in sequencer.cpp in the server in Rigs of...7.5 High
- belkin f5d7230-4The Belkin F5D7230-4 Wireless G Router allows remote attackers to cause a denial of service ...5.0 Medium
- phpPHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service ...2.1 Low
- phpThe output_add_rewrite_var function in PHP before 5.2.5 rewrites local forms in which the ACTION...4.3 Medium
- alcatel-lucent omnipcxThe Communication Server in Alcatel-Lucent OmniPCX Enterprise 7.1 and earlier caches an IP...8.5 High
- phpPHP before 5.2.5 allows local users to bypass protection mechanisms configured through...6.9 Medium
- phpThe (1) htmlentities and (2) htmlspecialchars functions in PHP before 5.2.5 accept partial...6.4 Medium
- joomlaequipment juserPHP remote file inclusion vulnerability in xajax_functions.php in the JUser (com_juser) 1.0.14...6.8 Medium
- citrix netscalerCross-site scripting (XSS) vulnerability in ws/generic_api_call.pl in Citrix NetScaler 8.0 build...4.3 Medium
- live555 media serverThe parseRTSPRequestString function in LIVE555 Media Server 2007.11.01 and earlier allows remote...7.1 High
- cactiSQL injection vulnerability in graph.php in Cacti before 0.8.7a allows remote attackers to...7.5 High
- wonderware intouchInvensys Wonderware InTouch 8.0 creates a NetDDE share with insecure permissions (Everyone/Full...8.8 High
- aleris web publishing serverSQL injection vulnerability in calendar/page.asp in Aleris Web Publishing Server 3.0 allows...7.5 High
- van dyke technologies vshellUnspecified vulnerability in VanDyke VShell 3.0.1 allows remote attackers to cause a denial of...7.8 High
- Show moreLoading…