CVEs published in December 2007
434 vulnerabilities, 71 critical, 0 exploited.
- flac libflacMultiple double free vulnerabilities in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1...9.3 High
- flac libflacFree Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allows user-assisted remote attackers to...9.3 High
- flac libflacMultiple buffer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow user...9.3 High
- apple mac os x, mac os x server +1 moreThe accept_connections function in the virtual private network daemon (vpnd) in Apple Mac OS X 10...7.8 High
- bcoosSQL injection vulnerability in modules/adresses/ratefile.php in bcoos 1.0.10 and earlier allows...7.5 High
- bcoosMultiple cross-site scripting (XSS) vulnerabilities in modules/ecal/display.php in the Event...4.3 Medium
- sonicwall global vpn clientMultiple format string vulnerabilities in the configuration file in SonicWALL GLobal VPN Client 3...9.3 High
- joomlaMultiple SQL injection vulnerabilities in index.php in Joomla! 1.5 RC3 allow remote attackers to...7.5 High
- xigla absolute news manager.netAbsolute News Manager.NET 5.1 allows remote attackers to obtain sensitive information via a...5.0 Medium
- xigla absolute news manager.netMultiple cross-site scripting (XSS) vulnerabilities in Absolute News Manager.NET 5.1 allow remote...4.3 Medium
- xigla absolute news manager.netMultiple SQL injection vulnerabilities in xlaabsolutenm.aspx in Absolute News Manager.NET 5.1...7.5 High
- xigla absolute news manager.netDirectory traversal vulnerability in pages/default.aspx in Absolute News Manager.NET 5.1 allows...5.0 Medium
- citrix edgesight for netscaler, edgesight for endpoints, edgesight for presentation server +2 moreCitrix EdgeSight 4.2 and 4.5 for Presentation Server, EdgeSight 4.2 and 4.5 for Endpoints, and...2.1 Low
- bcoosMultiple SQL injection vulnerabilities in bcoos 1.0.10 and earlier allow remote attackers to...7.5 High
- avast antivirus home, antivirus professional +1 moreUnspecified vulnerability in avast! 4 Home and Professional Editions before 4.7.1098 allows...6.8 Medium
- gnu emacsStack-based buffer overflow in emacs allows user-assisted attackers to cause a denial of service ...10.0 High
- ext2 filesystems utilities e2fsprogsMultiple integer overflows in libext2fs in e2fsprogs before 1.40.3 allow user-assisted remote...5.8 Medium
- netkit-ftp netkit ftpThe dataconn function in ftpd.c in netkit ftpd (netkit-ftpd) 0.17, when certain modifications to...9.3 High
- heimdalThe gss_userok function in appl/ftp/ftpd/gss_userok.c in Heimdal 0.7.2 does not allocate memory...10.0 High
- intel pro wireless 3945abg, wireless wifi link 4965agn +1 moreThe iwl_set_rate function in compatible/iwl3945-base.c in iwlwifi 1.1.21 and earlier dereferences...5.0 Medium
- netkit-ftp netkit ftpDouble free vulnerability in the getreply function in ftp.c in netkit ftp (netkit-ftp) 0.17...10.0 High
- videolan vlc media playerA certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote...6.8 Medium
- apple mac os xInteger overflow in the load_threadstack function in the Mach-O loader (mach_loader.c) in the xnu...4.9 Medium
- oracle database serverThe installation process for Oracle 10g and llg uses accounts with default passwords, which...6.8 Medium
- hp select identityUnspecified vulnerability in HP Select Identity 4.01 before 4.01.012 and 4.1x before 4.13.003...10.0 High
- mit kerberos 5Double free vulnerability in the krb5_def_store_mkey function in lib/kdb/kdb_default.c in MIT...9.0 High
- mit kerberos 5Double free vulnerability in the gss_krb5int_make_seal_token_v3 function in lib/gssapi/krb5...6.9 Medium
- mit kerberos 5Integer overflow in the svcauth_gss_get_principal function in lib/rpc/svc_auth_gss.c in MIT...10.0 High
- mit kerberos 5Use-after-free vulnerability in the gss_indicate_mechs function in lib/gssapi/mechglue...6.9 Medium
- mit kerberos 5** DISPUTED ** The reply function in ftpd.c in the gssftp ftpd in MIT Kerberos 5 (krb5) does not...9.3 High
- beehive forum forumMultiple unspecified vulnerabilities in Beehive Forum 0.7.1 have unknown "critical" impact and...7.5 High
- snitz communications forums 2000SQL injection vulnerability in active.asp in Snitz Forums 2000 3.4.06 allows remote attackers to...7.5 High
- beehive forum forumSQL injection vulnerability in post.php in Beehive Forum 0.7.1 and earlier allows remote...7.5 High
- mortbay jetty jettyMortbay Jetty CRLF Injection Vulnerability5.0 Medium
- mortbay jetty jettyImproper Authentication in Mortbay Jetty7.5 High
- mortbay jetty jettyMortbay Jetty vulnerable to Cross-site scripting4.3 Medium
- microsoft internet explorerThe Web Proxy Auto-Discovery (WPAD) feature in Microsoft Internet Explorer 6 and 7, when a...5.8 Medium
- openofficeHSQLDB before 1.8.0.9, as used in OpenOffice.org (OOo) 2 before 2.3.1, allows user-assisted...9.3 High
- squid web proxy cacheThe "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0...5.0 Medium
- apple quicktimeUnspecified vulnerability in Apple QuickTime 7.2 on Windows XP allows remote attackers to execute...10.0 High
- deluxebbcp.php in DeluxeBB 1.09 does not verify that the membercookie parameter corresponds to the...9.0 High
- microsoft windows media playerMicrosoft Windows Media Player (WMP) allows remote attackers to cause a denial of service ...5.0 Medium
- realnetworks realplayerA certain ActiveX control in RealNetworks RealPlayer 11 allows remote attackers to cause a denial...5.0 Medium
- ftp admin adminindex.php in FTP Admin 0.1.0 allows remote attackers to bypass authentication and obtain...10.0 High
- ftp admin adminDirectory traversal vulnerability in index.php in FTP Admin 0.1.0 allows remote authenticated...4.9 Medium
- ftp adminCross-site scripting (XSS) vulnerability in index.php in FTP Admin 0.1.0 allows remote attackers...4.3 Medium
- tellmaticMultiple PHP remote file inclusion vulnerabilities in tellmatic 1.0.7 allow remote attackers to...7.5 High
- rayzz scriptDirectory traversal vulnerability in common/classes/class_HeaderHandler.lib.php in Rayzz Script 2...7.5 High
- rayzz scriptPHP remote file inclusion vulnerability in common/classes/class_HeaderHandler.lib.php in Rayzz...7.5 High
- yahoo toolbarStack-based buffer overflow in the Helper class in the yt.ythelper.2 ActiveX control in Yahoo!...6.8 Medium
- Show moreLoading…