|
268431
|
- |
|
postnuke_software_foundation
|
postnuke
|
The faq section in PostNuke 0.764 allows remote attackers to obtain sensitive information (the full path) via "unvalidated output" in FAQ/index.php, possibly involving an undefined id_cat variable.
|
NVD-CWE-Other
|
CVE-2007-0385
|
2008-11-13 15:31 |
2007-01-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268432
|
- |
|
postnuke_software_foundation
|
postnuke
|
Unspecified vulnerability in the rating section in PostNuke 0.764 has unknown impact and attack vectors, related to "an interesting bug."
|
NVD-CWE-Other
|
CVE-2007-0386
|
2008-11-13 15:31 |
2007-01-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268433
|
- |
|
bea
|
aqualogic_service_bus
|
BEA AquaLogic Service Bus 2.0, 2.1, and 2.5 does not properly reject malformed request messages to a proxy service, which might allow remote attackers to bypass authorization policies and route reque…
|
NVD-CWE-Other
|
CVE-2007-0432
|
2008-11-13 15:31 |
2007-01-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268434
|
- |
|
bea
|
aqualogic_service_bus
|
Unspecified vulnerability in BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2, when using Active Directory LDAP for authentication, allows remote authenticated user…
|
NVD-CWE-Other
|
CVE-2007-0433
|
2008-11-13 15:31 |
2007-01-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268435
|
- |
|
bea
|
aqualogic_enterprise_security
|
BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2 does not properly set the severity level of audit events when the system load is high, which might make it easier f…
|
NVD-CWE-Other
|
CVE-2007-0434
|
2008-11-13 15:31 |
2007-01-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268436
|
- |
|
magnatune.com
|
album_browser
|
The magnatune.com album browser in Amarok allows attackers to cause a denial of service (application crash) via unspecified vectors.
|
NVD-CWE-Other
|
CVE-2006-6980
|
2008-11-13 15:29 |
2007-02-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268437
|
- |
|
minibb
|
minibb
|
Multiple PHP remote file inclusion vulnerabilities in miniBB 2.0.2 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the pathToFiles par…
|
NVD-CWE-Other
|
CVE-2006-5674
|
2008-11-13 15:25 |
2006-11-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268438
|
- |
|
elkagroup
|
image_gallery
|
SQL injection vulnerability in view.php in ElkaGroup Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter.
|
CWE-89
SQL Injection
|
CVE-2008-5037
|
2008-11-13 14:00 |
2008-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268439
|
- |
|
mozilla
|
firefox
|
Unspecified vulnerability in Mozilla Firefox allows remote attackers to execute arbitrary code via unspecified vectors involving Javascript errors. NOTE: this might be the same issue as CVE-2007-217…
|
NVD-CWE-noinfo
|
CVE-2007-2176
|
2008-11-13 14:00 |
2007-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268440
|
- |
|
suse
xfsdump
|
suse_linux
suse_linux_openexchange_server
suse_linux_school_server
suse_linux_standard_server
suse_open_enterprise_server
xfsdump
opensuse
|
xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems.
|
CWE-362
Race Condition
|
CVE-2007-2654
|
2008-11-13 14:00 |
2007-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
