 |
|
|
|
| BarracudaDrive Web Server multiple security vulnerabilities | | Published: |  | 13.12.2007 | | Source: |  | BUGTRAQ | | SecurityVulns ID: |  | 8442 | | Type: |  | remote | | Level: |  | 6/10 | | Description: |  | Directory traversal, script source access, dile deletion, HTML injection, DoS. |
| QK SMTP Server DoS | | Published: | | 13.12.2007 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 8450 | | Type: | | remote | | Level: | | 5/10 |
| OpenOffice certificate information spoofing | | Published: | | 13.12.2007 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 8451 | | Type: | | local | | Level: | | 5/10 | | Description: | | It's possible to spoof information about certificate used for signing. |
Microsoft Windows DirectX multiple security vulnerabilities
updated since 12.12.2007 | | Published: | | 13.12.2007 | | Source: | | MICROSOFT | | SecurityVulns ID: | | 8434 | | Type: | | client | | Level: | | 8/10 | | Description: | | Synchronized Accessible Media Interchange (SAMI), WAV and AVI. |
Microsoft Internet Explorer multiple security vulnerabilities
updated since 12.12.2007 | | Published: | | 13.12.2007 | | Source: | | MICROSOFT | | SecurityVulns ID: | | 8438 | | Type: | | client | | Level: | | 8/10 | | Description: | | Multiple memory corruptions. |
| Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) | | Published: | | 13.12.2007 | | Source: | | | | SecurityVulns ID: | | 8441 | | Type: | | remote | | Level: | | 5/10 | | Description: | | PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.
Rotabanner: crossite scripting |
| Original document |  | Sw33t.h4cK3r_(at)_hotmail.com, SQL MKPortal M1.1 Rc1 (13.12.2007) |
| | | imei, SupportSuite 3.11.01~ Multiple file ~ PHP SELF XSS (13.12.2007) |
| | | Abel Cheung, WordPress Charset SQL injection vulnerability (re-resend) (13.12.2007) |
| | | Liquidmatrix Security Digest, Advisory: Websense XSS Vulnerability (13.12.2007) |
| | | bebe_(at)_gmail.com, SQL injection - GestDownV1.00Beta (13.12.2007) |
| | | mesut_(at)_h-labs.org, Falt4 CMS Security Report/Advisory (13.12.2007) |
| | | noreply_(at)_aria-security.net, bttlxeForum Multiple SQL Injection And Cross Site Scripting (13.12.2007) |
| | | Hackers Center Security Group, Bitweaver XSS & SQL Injection Vulnerability (13.12.2007) |
| | | kingoftheworld92_(at)_fastwebnet.it, Flat PHP Board <= 1.2 Multiple Vulnerabilities (13.12.2007) |
| | | Tomas Kuliavas, Unsanitized scripting in RoundCube webmail (13.12.2007) |
| | | Tomas Kuliavas, Two vulnerabilities in SquirrelMail GPG plugin (13.12.2007) |
| | | brainheadbrainhead_(at)_gmx.de, webSPELL 4.01.02 (calendar.php, usergallery.php) XSS Vulnerability (13.12.2007) |
| | | MustLive, Vulnerabilities in RotaBanner (13.12.2007) |
| PEAR::MDB2 information leak | | Published: | | 13.12.2007 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 8445 | | Type: | | library | | Level: | | 5/10 | | Description: | | Under some conditions it's possible to proxy requests to different objects, including local files. |
| CVE: |  | CVE-2007-5934 (The LOB functionality in PEAR MDB2 before 2.5.0a1 interprets a request to store a URL string as a request to retrieve and store the contents of the URL, which might allow remote attackers to use MDB2 as an indirect proxy or obtain sensitive information via a URL into a form field in an MDB2 application, as demonstrated by a file:// URL or a URL for an intranet web site.) |
| Переполнения буфера в Novell NetMail AntiVirus Agent | | Published: | | 13.12.2007 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 8446 | | Type: | | remote | | Level: | | 6/10 | | Description: | | Buffer overflow in avirus.exe via random TCP port. |
| Affected: |  | NOVELL : NetMail 3.5 | | CVE: | | CVE-2007-6302 (Multiple heap-based buffer overflows in avirus.exe in Novell NetMail 3.5.2 before Messaging Architects M+NetMail 3.52f (aka 3.5.2F) allows remote attackers to execute arbitrary code via unspecified ASCII integers used as memory allocation arguments, aka "ZDI-CVE-162.") |
| DosBox sandbox protection bypass | | Published: | | 13.12.2007 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 8444 | | Type: | | remote | | Level: | | 5/10 | | Description: | | Any application inside emulator can use mount command to mount any folder. |
| Meridian Prolog Manager weak encryption | | Published: | | 13.12.2007 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 8448 | | Type: | | m-i-t-m | | Level: | | 5/10 | | Description: | | Weak username/password encryption. |
Microsoft Office unsigned data
updated since 13.12.2007 | | Published: | | 16.12.2007 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 8449 | | Type: | | remote | | Level: | | 4/10 | | Description: | | Metadata file and hyperlink desination is not signed on document signing. |
HP Info Center ActiveX code execution
updated since 13.12.2007 | | Published: | | 16.12.2007 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 8447 | | Type: | | client | | Level: | | 6/10 | | Description: | | Few unsafe methods are explosed. |
| Affected: | | HP : HP Quick Launch Button 6.3 | | CVE: | | CVE-2007-6333 (The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, allows remote attackers to read arbitrary registry values via the arguments to the GetRegValue method.) | | | | CVE-2007-6332 (The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, on Microsoft Windows before Vista allows remote attackers to create or modify arbitrary registry values via the arguments to the SetRegValue method.) | | | | CVE-2007-6331 (Absolute path traversal vulnerability in the HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier allows remote attackers to execute arbitrary programs via the first argument to the LaunchApp method. NOTE: only a user-assisted attack is possible on Windows Vista.) |
BadBlue Web server multiple security vulnerabilities
updated since 13.12.2007 | | Published: | | 25.04.2008 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 8443 | | Type: | | remote | | Level: | | 6/10 | | Description: | | Buffer overflow, directory traversal, information leak, DoS. |
| Affected: | | BADBLUE : BadBlue 2.72 | | CVE: | | CVE-2007-6378 (Directory traversal vulnerability in upload.dll in BadBlue 2.72b and earlier allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the filename parameter.) |
|
|
|
|
|
|
|
|
