cve.nowby Sazabi

CVEs published December 15, 2007

38 CVEs were published on December 15, 2007: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 38
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 38
Now in CISA KEV: 0
Fix available: 1

Most affected products

net.sf.robocode:robocode.core: 1

Medium, low and unrated 38

CVE-2007-6381SQL injection vulnerability in the indexed_search system extension in TYPO3 3.x, 4.0 through 4.0.7, and 4.1 through 4.1.3 allows remote…UnratedDec 15, 2007
CVE-2007-6382The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the…net.sf.robocode:robocode.coreUnratedFix availableDec 15, 2007
CVE-2007-6383The DAV component in Chandler Server (Cosmo) before 0.10.1 does not check resource creation permissions, which allows remote authenticated…UnratedDec 15, 2007
CVE-2007-6384Unspecified vulnerability in the Image Converter functionality in BEA WebLogic Mobility Server 3.3, 3.5, and 3.6 through 3.6 SP1 allows…UnratedDec 15, 2007
CVE-2007-6385The proxy server in Kerio WinRoute Firewall before 6.4.1 does not properly enforce authentication for HTTPS pages, which has unknown…UnratedDec 15, 2007
CVE-2007-6386Stack-based buffer overflow in PccScan.dll before build 1451 in Trend Micro AntiVirus plus AntiSpyware 2008, Internet Security 2008, and…UnratedDec 15, 2007
CVE-2007-6387Multiple stack-based buffer overflows in the awApi4.AnswerWorks.1 ActiveX control in awApi4.dll 4.0.0.42, as used by Vantage Linguistics…UnratedDec 15, 2007
CVE-2007-4706Heap-based buffer overflow in Apple QuickTime before 7.3.1 allows remote attackers to execute arbitrary code via a crafted QTL file.UnratedDec 15, 2007
CVE-2007-4707Multiple unspecified vulnerabilities in the Flash media handler in Apple QuickTime before 7.3.1 allow remote attackers to execute…UnratedDec 15, 2007
CVE-2007-5580Buffer overflow in a certain driver in Cisco Security Agent 4.5.1 before 4.5.1.672, 5.0 before 5.0.0.225, 5.1 before 5.1.0.106, and 5.2…UnratedDec 15, 2007
CVE-2007-5582Cross-site scripting (XSS) vulnerability in the login page in Cisco CiscoWorks Server (CS), possibly 2.6 and earlier, when using…UnratedDec 15, 2007
CVE-2007-6151The isdn_ioctl function in isdn_common.c in Linux kernel 2.6.23 allows local users to cause a denial of service via a crafted ioctl struct…UnratedDec 15, 2007
CVE-2007-6195Buffer overflow in the sw_rpc_agent_init function in swagentd in Software Distributor (SD), and possibly other DCE applications, in HP…UnratedDec 15, 2007
CVE-2007-6249etc-update in Portage before 2.1.3.11 on Gentoo Linux relies on the umask to set permissions for the merge file, often resulting in…UnratedDec 15, 2007
CVE-2007-6338SQL injection vulnerability in userlogin.jsp in Trivantis CourseMill Enterprise Learning Management System 4.1 SP4 allows remote attackers…UnratedDec 15, 2007
CVE-2007-6357Stack-based buffer overflow in Microsoft Office Access allows remote, user-assisted attackers to execute arbitrary code via a crafted…UnratedDec 15, 2007
CVE-2007-6358pdftops.pl before 1.20 in alternate pdftops filter allows local users to overwrite arbitrary files via a symlink attack on the…UnratedDec 15, 2007
CVE-2007-6359The cs_validate_page function in bsd/kern/ubc_subr.c in the xnu kernel 1228.0 and earlier in Apple Mac OS X 10.5.1 allows local users to…UnratedDec 15, 2007
CVE-2007-6360Unspecified vulnerability in the Sun eXtended System Control Facility (XSCF) Control Package (XCP) firmware before 1050 on SPARC…UnratedDec 15, 2007
CVE-2007-6361Gekko 0.8.2 and earlier stores sensitive information under the web root with possibly insufficient access control, which might allow…UnratedDec 15, 2007
CVE-2007-6362SQL injection vulnerability in index.php in the RSGallery (com_rsgallery) 2.0 beta 5 and earlier component for Mambo and Joomla! allows…UnratedDec 15, 2007
CVE-2007-6363IBM Tivoli Netcool Security Manager 1.3.0 before Interim Fix 1, when using Active Directory (AD) LDAP authentication, allows remote…UnratedDec 15, 2007
CVE-2007-6364Cross-site scripting (XSS) vulnerability in modificarPerfil.php in JLMForo System allows remote authenticated users to inject arbitrary…UnratedDec 15, 2007
CVE-2007-6365Cross-site scripting (XSS) vulnerability in modules/ecal/display.php in the Event Calendar in bcoos 1.0.10 allows remote attackers to…UnratedDec 15, 2007
CVE-2007-6366Multiple SQL injection vulnerabilities in SineCMS 2.3.4 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the…UnratedDec 15, 2007

Show all 38 entriesShow fewer entries