|
284651
|
- |
|
apple
|
safari
|
Apple Safari 2, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regards the certificate as also accepted for all domain names in subjectAltName:dNSNa…
|
NVD-CWE-Other
|
CVE-2007-6592
|
2018-10-16 06:55 |
2007-12-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284652
|
- |
|
ibm
|
lotus_notes
|
Multiple stack-based buffer overflows in l123sr.dll in Autonomy (formerly Verity) KeyView SDK, as used by IBM Lotus Notes 5.x through 8.x, allow user-assisted remote attackers to execute arbitrary co…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2007-6593
|
2018-10-16 06:55 |
2007-12-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284653
|
- |
|
clam_anti-virus
|
clamav
|
ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on (1) temporary files used by the cli_gentempfd function in libclamav/others.c or on (2) .ascii files used by sigtool…
|
CWE-59
Link Following
|
CVE-2007-6595
|
2018-10-16 06:55 |
2008-01-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284654
|
- |
|
clam_anti-virus
|
clamav
|
ClamAV 0.92 does not recognize Base64 UUEncoded archives, which allows remote attackers to bypass the scanner via a Base64-UUEncoded file.
|
CWE-20
Improper Input Validation
|
CVE-2007-6596
|
2018-10-16 06:55 |
2008-01-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284655
|
- |
|
dovecot
|
dovecot
|
Dovecot before 1.0.10, with certain configuration options including use of %variables, does not properly maintain the LDAP+auth cache, which might allow remote authenticated users to login as a diffe…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2007-6598
|
2018-10-16 06:55 |
2008-01-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284656
|
- |
|
postgresql
|
postgresql
|
PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21 uses superuser privileges instead of table owner privileges for (1) VACUUM and (2) ANALYZE …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2007-6600
|
2018-10-16 06:55 |
2008-01-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284657
|
- |
|
openbiblio
|
openbiblio
|
OpenBiblio 0.5.2-pre4 and earlier allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.
|
CWE-200
Information Exposure
|
CVE-2007-6606
|
2018-10-16 06:55 |
2008-01-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284658
|
- |
|
openbiblio
|
openbiblio
|
OpenBiblio 0.5.2-pre4 and earlier allows remote attackers to obtain sensitive information via a direct request for (1) shared/footer.php, (2) circ/mbr_fields.php, or (3) admin/custom_marc_form_fields…
|
CWE-200
Information Exposure
|
CVE-2007-6607
|
2018-10-16 06:55 |
2008-01-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284659
|
- |
|
openbiblio
|
openbiblio
|
Multiple cross-site scripting (XSS) vulnerabilities in OpenBiblio 0.5.2-pre4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) LAST and (2) FIRST parameters to adm…
|
CWE-79
Cross-site Scripting
|
CVE-2007-6608
|
2018-10-16 06:55 |
2008-01-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284660
|
- |
|
coolplayer
|
coolplayer
|
Multiple stack-based buffer overflows in the CPLI_ReadTag_OGG function in CPI_PlaylistItem.c in CoolPlayer 217 and earlier allow user-assisted remote attackers to execute arbitrary code via a long (1…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2007-6609
|
2018-10-16 06:55 |
2008-01-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|