cve.nowby Sazabi

CVEs published December 17, 2007

28 CVEs were published on December 17, 2007: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 28
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 28
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 28

CVE-2007-6413Sun Solaris 10 with the 120011-04 and 120012-04 patches, and later 120011- and 120012- patches, allows remote attackers to bypass certain…UnratedDec 17, 2007
CVE-2007-6414admin/administrator.php in Adult Script 1.6 and earlier sends a redirect to the web browser but does not exit, which allows remote…UnratedDec 17, 2007
CVE-2007-6416The copy_to_user function in the PAL emulation functionality for Xen 3.1.2 and earlier, when running on ia64 systems, allows HVM guest…UnratedDec 17, 2007
CVE-2007-4473Gesytec Easylon OPC Server before 2.3.44 does not properly validate server handles, which allows remote attackers to execute arbitrary…UnratedDec 17, 2007
CVE-2007-6389The notify feature in GNOME screensaver (gnome-screensaver) 2.20.0 might allow local users to read the clipboard contents and X selection…UnratedDec 17, 2007
CVE-2007-6390Cross-site request forgery (CSRF) vulnerability in the mycalendar plugin before 0.13 for Serendipity allows remote attackers to perform…UnratedDec 17, 2007
CVE-2007-6391SQL injection vulnerability in patch/comments.php in SH-News 3.0 allows remote attackers to execute arbitrary SQL commands via the id…UnratedDec 17, 2007
CVE-2007-6392SQL injection vulnerability in DWdirectory 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the search…UnratedDec 17, 2007
CVE-2007-6393SQL injection vulnerability in albums.php in Ace Image Hosting Script allows remote authenticated users to execute arbitrary SQL commands…UnratedDec 17, 2007
CVE-2007-6394SQL injection vulnerability in index.php in Content Injector 1.53 allows remote attackers to execute arbitrary SQL commands via the id…UnratedDec 17, 2007
CVE-2007-6395Flat PHP Board 1.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote…UnratedDec 17, 2007
CVE-2007-6396Direct static code injection vulnerability in index.php in Flat PHP Board 1.2 and earlier allows remote attackers to inject arbitrary PHP…UnratedDec 17, 2007
CVE-2007-6397Multiple directory traversal vulnerabilities in index.php in Flat PHP Board 1.2 and earlier allow remote attackers to (1) create arbitrary…UnratedDec 17, 2007
CVE-2007-6398Flat PHP Board 1.2 and earlier allows remote attackers to bypass authentication and obtain limited access to an arbitrary user account via…UnratedDec 17, 2007
CVE-2007-6399index.php in Flat PHP Board 1.2 and earlier allows remote authenticated users to obtain the password for the current user account by…UnratedDec 17, 2007
CVE-2007-6400Directory traversal vulnerability in download_file.php in PolDoc CMS (aka PDDMS) 0.96 allows remote attackers to read arbitrary files via…UnratedDec 17, 2007
CVE-2007-6401Stack-based buffer overflow in mplayer2.exe in Microsoft Windows Media Player (WMP) 6.4, when used with the 3ivx 4.5.1 or 5.0.1 codec…UnratedDec 17, 2007
CVE-2007-6402Stack-based buffer overflow in mplayerc.exe in Media Player Classic (MPC) 6.4.9, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows…UnratedDec 17, 2007
CVE-2007-6403Stack-based buffer overflow in Nullsoft Winamp 5.32 allows user-assisted remote attackers to execute arbitrary code via crafted unicode in…UnratedDec 17, 2007
CVE-2007-6404Directory traversal vulnerability in Sergey Lyubka Simple HTTPD (shttpd) 1.38 and earlier on Windows allows remote attackers to read…UnratedDec 17, 2007
CVE-2007-6405Sergey Lyubka Simple HTTPD (shttpd) 1.38 and earlier on Windows allows remote attackers to download arbitrary CGI programs or scripts via…UnratedDec 17, 2007
CVE-2007-6406Multiple cross-site scripting (XSS) vulnerabilities in CA (formerly Computer Associates) eTrust Threat Management Console allow remote…UnratedDec 17, 2007
CVE-2007-6407Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Provisioning Manager Express allow remote attackers to inject arbitrary…UnratedDec 17, 2007
CVE-2007-6408IBM Tivoli Provisioning Manager Express provides unspecified information in error messages when (1) attempted duplication of a username…UnratedDec 17, 2007
CVE-2007-6409The gg protocol handler in Gadu-Gadu, when this product is installed but not running, does not properly handle the skin attribute, which…UnratedDec 17, 2007

Show all 28 entriesShow fewer entries