CVEs published in December 2007
434 vulnerabilities, 71 critical, 0 exploited.
- bitweaverMultiple SQL injection vulnerabilities in Bitweaver 2.0.0 and earlier allow remote attackers to...7.5 High
- bitweaverMultiple cross-site scripting (XSS) vulnerabilities in Bitweaver 2.0.0 and earlier allow remote...4.3 Medium
- gestdownMultiple SQL injection vulnerabilities in GestDown 1.00 Beta allow remote attackers to execute...7.5 High
- juniper junosUnspecified vulnerability in Juniper JUNOS 7.3 through 8.4 allows remote attackers to cause a...7.8 High
- nokia n95Nokia N95 cell phone with RM-159 12.0.013 firmware allows remote attackers to cause a denial of...7.1 High
- wordpress pictpressMultiple directory traversal vulnerabilities in resize.php in the PictPress 0.91 and earlier...5.0 Medium
- ezcontentsDirectory traversal vulnerability in index.php in ezContents 1.4.5 allows remote attackers to...5.0 Medium
- sinecmsMultiple cross-site scripting (XSS) vulnerabilities in the guestbook in SineCMS 2.3.4 and earlier...4.3 Medium
- sinecmsMultiple SQL injection vulnerabilities in SineCMS 2.3.4 and earlier allow remote attackers to...7.5 High
- bcoos event calendarCross-site scripting (XSS) vulnerability in modules/ecal/display.php in the Event Calendar in...4.3 Medium
- jlmforo system systemCross-site scripting (XSS) vulnerability in modificarPerfil.php in JLMForo System allows remote...4.3 Medium
- ibm tivoli netcool security managerIBM Tivoli Netcool Security Manager 1.3.0 before Interim Fix 1, when using Active Directory (AD)...2.1 Low
- joomla rs gallery2SQL injection vulnerability in index.php in the RSGallery (com_rsgallery) 2.0 beta 5 and earlier...7.5 High
- gekkoware gekkoGekko 0.8.2 and earlier stores sensitive information under the web root with possibly...5.0 Medium
- sun extended system control facility xcp 1040Unspecified vulnerability in the Sun eXtended System Control Facility (XSCF) Control Package (XCP...7.8 High
- apple mac os xThe cs_validate_page function in bsd/kern/ubc_subr.c in the xnu kernel 1228.0 and earlier in...4.9 Medium
- glyph and cog pdftopspdftops.pl before 1.20 in alternate pdftops filter allows local users to overwrite arbitrary...4.9 Medium
- microsoft accessStack-based buffer overflow in Microsoft Office Access allows remote, user-assisted attackers to...5.8 Medium
- trivantis coursemill enterprise learning management systemSQL injection vulnerability in userlogin.jsp in Trivantis CourseMill Enterprise Learning...7.5 High
- gentoo portageetc-update in Portage before 2.1.3.11 on Gentoo Linux relies on the umask to set permissions for...2.1 Low
- hp hp-uxBuffer overflow in the sw_rpc_agent_init function in swagentd in Software Distributor (SD), and...10.0 High
- linux kernelThe isdn_ioctl function in isdn_common.c in Linux kernel 2.6.23 allows local users to cause a...7.2 High
- cisco ciscoworks serverCross-site scripting (XSS) vulnerability in the login page in Cisco CiscoWorks Server (CS),...4.3 Medium
- cisco security agentBuffer overflow in a certain driver in Cisco Security Agent 4.5.1 before 4.5.1.672, 5.0 before 5...10.0 High
- apple quicktimeMultiple unspecified vulnerabilities in the Flash media handler in Apple QuickTime before 7.3.1...9.3 High
- apple quicktimeHeap-based buffer overflow in Apple QuickTime before 7.3.1 allows remote attackers to execute...6.8 Medium
- scponlyscponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and...8.5 High
- squirrelmailSquirrelMail 1.4.11 and 1.4.12, as distributed on sourceforge.net before 20071213, has been...6.8 Medium
- viart cms, helpdesk, shop evaluation +1 more +3 morePHP remote file inclusion vulnerability in blocks/block_site_map.php in ViArt (1) CMS 3.3.2, (2)...6.8 Medium
- rainboardCross-site scripting (XSS) vulnerability in Rainboard before 2.10 allows remote attackers to...4.3 Medium
- aurora frameworkSQL injection vulnerability in aurora framework before 20071208 allows remote attackers to...7.5 High
- mcms easy web makeDirectory traversal vulnerability in modules/cms/index.php in Mcms Easy Web Make 1.3, allows...6.8 Medium
- hp openview network node managerCross-site scripting (XSS) vulnerability in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01,...4.3 Medium
- david castro apache authcasSQL injection vulnerability in the David Castro AuthCAS module (AuthCAS.pm) 0.4 for the Apache...7.5 High
- hp openview network node managerMultiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01,...10.0 High
- skype technologies skypeUnspecified vulnerability in the skype4com URI handler in Skype before 3.6 GOLD allows remote...6.8 Medium
- hp info center, quick launch button +1 moreThe HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center ...5.8 Medium
- hp info center, quick launch button +1 moreThe HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center ...9.3 High
- hp info center, quick launch button +1 moreAbsolute path traversal vulnerability in the HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll...9.3 High
- meridian software prolog managerMeridian Prolog Manager 2007, and 7.5 and earlier, sends all usernames and passwords to the...10.0 High
- microsoft officeMicrosoft Office 2007 12.0.6015.5000 and MSO 12.0.6017.5000 do not sign the metadata of Office...6.4 Medium
- dosbox** DISPUTED ** DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on...7.2 High
- avs media avsmjpegfile.dllBuffer overflow in a certain ActiveX control in Online Media Technologies AVSMJPEGFILE.DLL 1.1.1...7.5 High
- sergey lyubka simple httpdSergey Lyubka Simple HTTPD (shttpd) 1.3 on Windows allows remote attackers to cause a denial of...5.0 Medium
- fastpublish cmsPHP remote file inclusion vulnerability in adminbereich/designconfig.php in Fastpublish CMS 1...6.8 Medium
- city writer citywriterPHP remote file inclusion vulnerability in head.php in CityWriter 0.9.7 allows remote attackers...6.8 Medium
- mms gallery phpMultiple directory traversal vulnerabilities in MMS Gallery PHP 1.0 allow remote attackers to...5.0 Medium
- xml2owlDirectory traversal vulnerability in filedownload.php in xml2owl 0.1.1 allows remote attackers to...5.0 Medium
- redhat enterprise linuxThe default configuration of autofs 5 in some Linux distributions, such as Red Hat Enterprise...6.9 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora +3 more +5 moreCross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3...4.3 Medium
- Show moreLoading…