CVEs published in December 2007
434 vulnerabilities, 71 critical, 0 exploited.
- qemuQEMU 0.9.0 allows local users of a Windows XP SP2 guest operating system to overwrite the...7.2 High
- apc oas, switched rack pdu firmware +1 moreThe American Power Conversion (APC) AP7932 0u 30amp Switched Rack Power Distribution Unit (PDU),...7.1 High
- sun solarisUnspecified vulnerability in Sun Solaris 10, when 64bit mode is used on the x86 platform, allows...4.9 Medium
- realnetworks realplayerThe RealNetworks RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll, as shipped with...5.0 Medium
- phpbb garageSQL injection vulnerability in garage.php in phpBB Garage 1.2.0 Beta3 allows remote attackers to...7.5 High
- crm ctt interleaveThe CheckCustomerAccess function in functions.php in CRM-CTT Interleave before 4.2.0 (formerly...6.5 Medium
- tumusika evolution evolutionTuMusika Evolution 1.7R5 allows remote attackers to obtain configuration information via a direct...7.8 High
- typespeedtypespeed before 0.6.4 allows remote attackers to cause a denial of service (application crash)...5.0 Medium
- ibm tivoli netcool security managerCross-site scripting (XSS) vulnerability in IBM Tivoli Netcool Security Manager 1.3.0 allows...4.3 Medium
- ossigeno cmsMultiple PHP remote file inclusion vulnerabilities in Ossigeno CMS 2.2 pre1 allow remote...5.0 Medium
- irola my-timeMultiple SQL injection vulnerabilities in login.asp in Irola My-Time (aka Timesheet) 3.5 allow...7.5 High
- sun solaris, sunos +1 moreRace condition in the Fibre Channel protocol (fcp) driver and Devices filesystem (devfs) in Sun...4.7 Medium
- web-meetmeMultiple directory traversal vulnerabilities in play.php in Web-MeetMe 3.0.3 allow remote...5.0 Medium
- learnloopDirectory traversal vulnerability in include/file_download.php in LearnLoop 2.0 beta7 allows...4.3 Medium
- webedMultiple directory traversal vulnerabilities in mod/chat/index.php in WebED 0.0.9 allow remote...5.0 Medium
- google kmlDirectory traversal vulnerability in region.php in KML share 1.1 allows remote attackers to read...5.0 Medium
- singSend ICMP Nasty Garbage (sing) on Debian GNU/Linux allows local users to append to arbitrary...7.2 High
- zabbix agentdzabbix_agentd 1.1.4 in ZABBIX before 1.4.3 runs "UserParameter" scripts with gid 0, which might...2.1 Low
- zshUtil/difflog.pl in zsh 4.3.4 allows local users to overwrite arbitrary files via a symlink attack...4.6 Medium
- claws mail toolssylprint.pl in claws mail tools (claws-mail-tools) allows local users to overwrite arbitrary...3.6 Low
- xensource inc xenXen 3.x, possibly before 3.1.2, when running on IA64 systems, does not check the RID value for...2.1 Low
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreThe do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and...2.1 Low
- apache http serverApache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an...4.3 Medium
- redhat enterprise linux, enterprise linux desktop +1 morePerl-Compatible Regular Expression (PCRE) library before 6.7 does not properly calculate the...4.3 Medium
- perl pcrePerl-Compatible Regular Expression (PCRE) library before 6.7 allows context-dependent attackers...4.3 Medium
- neocrome seditioSQL injection vulnerability in plugins/search/search.php in Neocrome Seditio CMS 121 and earlier...6.8 Medium
- wesnothUnspecified vulnerability in Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows...7.5 High
- openssl fips object moduleThe PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding...6.4 Medium
- rsyncUnspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows...10.0 High
- rsyncrsync before 3.0.0pre6, when running a writable rsync daemon that is not using chroot, allows...9.3 High
- bea aqualogic interactionportal/server.pt in the Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0...5.0 Medium
- bea aqualogic interactionThe Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows...5.0 Medium
- calacode atmail webmail systemCross-site scripting (XSS) vulnerability in util.php in Calacode @Mail before 5.2 allows remote...4.3 Medium
- wesnothDirectory traversal vulnerability in the WML engine preprocessor for Wesnoth 1.2.x before 1.2.8,...9.0 High