CVEs published in December 2007
434 vulnerabilities, 71 critical, 0 exploited.
- jboss seamThe getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before...7.5 High
- aertherwide exiftagsexiftags before 1.01 allows attackers to cause a denial of service (infinite loop) via recursive...5.0 Medium
- aertherwide exiftagsInteger overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a ...10.0 High
- aertherwide exiftagsUnspecified vulnerability in exiftags before 1.01 has unknown impact and attack vectors,...10.0 High
- apple mac os xJava in Mac OS X 10.4 through 10.4.11 allows remote attackers to bypass Keychain access controls...9.4 High
- netfortris trixboxregistry.pl in Fonality Trixbox 2.0 PBX products, when running in certain environments, reads and...4.3 Medium
- oracle linux, redhat enterprise linux, centos +6 more +8 moreRed Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable...4.9 Medium
- cisco ip phone 7940Cisco IP Phone 7940 with firmware P0S3-08-7-00 allows remote attackers to cause a denial of...7.8 High
- debian linuxThe libdspam7-drv-mysql cron job in Debian GNU/Linux includes the MySQL dspam database password...2.1 Low
- linux kernelThe shmem_getpage function (mm/shmem.c) in Linux kernel 2.6.11 through 2.6.23 does not properly...7.2 High
- xenThe copy_to_user function in the PAL emulation functionality for Xen 3.1.2 and earlier, when...4.6 Medium
- adultscriptadmin/administrator.php in Adult Script 1.6 and earlier sends a redirect to the web browser but...7.5 High
- sun solarisSun Solaris 10 with the 120011-04 and 120012-04 patches, and later 120011-* and 120012-* patches,...9.3 High
- gesytec easylon opc serverGesytec Easylon OPC Server before 2.3.44 does not properly validate server handles, which allows...10.0 High
- bitweaverDirect static code injection vulnerability in wiki/index.php in Bitweaver 2.0.0 and earlier, when...6.8 Medium
- gadu-gadu instant messengerMultiple buffer overflows in the HandleEmotsConfig function in the GG Client in Gadu-Gadu 7.7...4.3 Medium
- gadu-gadu instant messengerGadu-Gadu does not properly perform protocol handling, which allows remote attackers to conduct...4.3 Medium
- gadu-gadu instant messengerThe gg protocol handler in Gadu-Gadu, when this product is installed but not running, does not...4.3 Medium
- ibm tivoli provisioning manager expressIBM Tivoli Provisioning Manager Express provides unspecified information in error messages when ...5.0 Medium
- ibm tivoli provisioning manager expressMultiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Provisioning Manager Express...4.3 Medium
- broadcom etrust threat management consoleMultiple cross-site scripting (XSS) vulnerabilities in CA (formerly Computer Associates) eTrust...4.3 Medium
- shttpdSergey Lyubka Simple HTTPD (shttpd) 1.38 and earlier on Windows allows remote attackers to...6.4 Medium
- shttpDirectory traversal vulnerability in Sergey Lyubka Simple HTTPD (shttpd) 1.38 and earlier on...5.0 Medium
- winamp nullsoft winampStack-based buffer overflow in Nullsoft Winamp 5.32 allows user-assisted remote attackers to...6.8 Medium
- guliverkli media player classic, 3ivx mpeg-4 codec +1 moreStack-based buffer overflow in mplayerc.exe in Media Player Classic (MPC) 6.4.9, when used with...9.3 High
- microsoft windows media player, 3ivx mpeg-4 codec +1 moreStack-based buffer overflow in mplayer2.exe in Microsoft Windows Media Player (WMP) 6.4, when...9.3 High
- poldoc document management systemDirectory traversal vulnerability in download_file.php in PolDoc CMS (aka PDDMS) 0.96 allows...5.0 Medium
- myupb flat php boardindex.php in Flat PHP Board 1.2 and earlier allows remote authenticated users to obtain the...6.5 Medium
- flat php boardFlat PHP Board 1.2 and earlier allows remote attackers to bypass authentication and obtain...5.0 Medium
- flat php boardMultiple directory traversal vulnerabilities in index.php in Flat PHP Board 1.2 and earlier allow...5.0 Medium
- myupb flat php boardDirect static code injection vulnerability in index.php in Flat PHP Board 1.2 and earlier allows...7.5 High
- flat php boardFlat PHP Board 1.2 and earlier stores sensitive information under the web root with insufficient...5.0 Medium
- p3mbo content injectorSQL injection vulnerability in index.php in Content Injector 1.53 allows remote attackers to...7.5 High
- ace image hosting script image hosting scriptSQL injection vulnerability in albums.php in Ace Image Hosting Script allows remote authenticated...6.5 Medium
- dominion web dwdirectorySQL injection vulnerability in DWdirectory 2.1 and earlier allows remote attackers to execute...7.5 High
- sh-newsSQL injection vulnerability in patch/comments.php in SH-News 3.0 allows remote attackers to...7.5 High
- serendipityCross-site request forgery (CSRF) vulnerability in the mycalendar plugin before 0.13 for...4.3 Medium
- gnome screensaverThe notify feature in GNOME screensaver (gnome-screensaver) 2.20.0 might allow local users to...2.1 Low
- intuit bookkeeping, proseries, quickbooks +5 more +7 moreMultiple stack-based buffer overflows in the awApi4.AnswerWorks.1 ActiveX control in awApi4.dll 4...9.3 High
- trend micro antivirus plus antispyware, internet security pro, internet security virus bust +2 moreStack-based buffer overflow in PccScan.dll before build 1451 in Trend Micro AntiVirus plus...7.2 High
- kerio winroute firewallThe proxy server in Kerio WinRoute Firewall before 6.4.1 does not properly enforce authentication...2.1 Low
- bea weblogic mobility serverUnspecified vulnerability in the Image Converter functionality in BEA WebLogic Mobility Server 3...7.5 High
- chandler project serverThe DAV component in Chandler Server (Cosmo) before 0.10.1 does not check resource creation...5.5 Medium
- robocodeRobocode Arbitrary Code Execution6.8 Medium
- typo3SQL injection vulnerability in the indexed_search system extension in TYPO3 3.x, 4.0 through 4.0...6.5 Medium
- e-xoopsMultiple SQL injection vulnerabilities in e-Xoops (exoops) 1.08, and 1.05 Rev 1 through 3, allow...7.5 High
- badblueBadBlue 2.72b and earlier allows remote attackers to obtain sensitive information via an invalid...5.0 Medium
- badblueDirectory traversal vulnerability in upload.dll in BadBlue 2.72b and earlier allows remote...7.5 High
- badblueStack-based buffer overflow in the PassThru functionality in ext.dll in BadBlue 2.72b and earlier...7.5 High
- francisco burzi php-nukeDirectory traversal vulnerability in autohtml.php in Francisco Burzi PHP-Nuke 8.0 allows remote...7.5 High
- Show moreLoading…