deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-0410
Published: 2007-01-23
Description: Unspecified vulnerability in the thread management in BEA WebLogic 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, 9.0, and 9.1, when T3 authentication is used, allows remote attackers to cause a denial of service (thread and system hang) via unspecified "sequences of events."
CVSS Score: 5.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/204; http://osvdb.org/38502; http://secunia.com/advisories/23750
CVE: CVE-2007-0411
Published: 2007-01-23
Description: BEA WebLogic Server 8.1 through 8.1 SP5, 9.0, 9.1, and 9.2 Gold, when WS-Security is used, does not properly validate certificates, which allows remote attackers to conduct a man-in-the-middle (MITM) attack.
CVSS Score: 6.8 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/205; http://osvdb.org/38503; http://secunia.com/advisories/23750
CVE: CVE-2007-0412
Published: 2007-01-23
Description: BEA WebLogic Server 6.1 through 6.1 SP7, 7.0 through 7.0 SP7, and 8.1 through 8.1 SP5 allows remote attackers to read arbitrary files inside the class-path property via .ear or exploded .ear files that use the manifest class-path property to point to utility jar files.
CVSS Score: 5.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/206; http://osvdb.org/38505; http://secunia.com/advisories/23750
CVE: CVE-2007-0413
Published: 2007-01-23
Description: BEA WebLogic Server 8.1 through 8.1 SP5 stores cleartext data in a backup of config.xml after offline editing, which allows local users to obtain sensitive information by reading this backup file.
CVSS Score: 4.4 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/207; http://osvdb.org/38504; http://secunia.com/advisories/23750
CVE: CVE-2007-0414
Published: 2007-01-23
Description: BEA WebLogic Server 6.1 through 6.1 SP7, 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, and 9.0 allows remote attackers to cause a denial of service (server hang) via certain requests that cause muxer threads to block when processing error pages.
CVSS Score: 5.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/208; http://osvdb.org/38506; http://secunia.com/advisories/23750
CVE: CVE-2007-0415
Published: 2007-01-23
Description: BEA WebLogic Server 8.1 through 8.1 SP5 does not properly enforce access control after a dynamic update and dynamic redeployment of an application that is implemented through exploded jars, which allows attackers to bypass intended access restrictions.
CVSS Score: 5.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/209; http://osvdb.org/38509; http://secunia.com/advisories/23750
CVE: CVE-2007-0416
Published: 2007-01-23
Description: The WSEE runtime (WS-Security runtime) in BEA WebLogic Server 9.0 and 9.1 does not verify credentials when decrypting client messages, which allows remote attackers to bypass application security.
CVSS Score: 7.5 (HIGH)
References: http://dev2dev.bea.com/pub/advisory/210; http://osvdb.org/38510; http://secunia.com/advisories/23750
CVE: CVE-2007-0417
Published: 2007-01-23
Description: BEA WebLogic Server 7.0 through 7.0 SP7, 8.1 through 8.1 SP5, 9.0, and 9.1, when using the WebLogic Server 6.1 compatibility realm, allows attackers to execute certain EJB container persistence operations with an administrative identity.
CVSS Score: 10.0 (HIGH)
References: http://dev2dev.bea.com/pub/advisory/211; http://osvdb.org/38511; http://secunia.com/advisories/23750
CVE: CVE-2007-0418
Published: 2007-01-23
Description: BEA WebLogic Server 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, 9.0, and 9.1 does not enforce a security policy that declares permissions for EJB methods that have array parameters, which allows remote attackers to obtain unauthorized access to these methods.
CVSS Score: 7.5 (HIGH)
References: http://dev2dev.bea.com/pub/advisory/212; http://osvdb.org/38512; http://secunia.com/advisories/23750
CVE: CVE-2007-0419
Published: 2007-01-23
Description: The BEA WebLogic Server proxy plug-in before June 2006 for the Apache HTTP Server does not properly handle protocol errors, which allows remote attackers to cause a denial of service (server outage).
CVSS Score: 5.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/213; http://osvdb.org/38513; http://secunia.com/advisories/23750
CVE: CVE-2007-0420
Published: 2007-01-23
Description: BEA WebLogic Server 9.0, 9.1, and 9.2 Gold allows remote attackers to obtain sensitive information via malformed HTTP requests, which reveal data from previous requests.
CVSS Score: 5.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/214; http://osvdb.org/38514; http://secunia.com/advisories/23750
CVE: CVE-2007-0421
Published: 2007-01-23
Description: BEA WebLogic Server 6.1 through 6.1 SP7, and 7.0 through 7.0 SP7 allows remote attackers to cause a denial of service (disk consumption) via requests containing malformed headers, which cause a large amount of data to be written to the server log.
CVSS Score: 6.4 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/215; http://osvdb.org/32859; http://secunia.com/advisories/23750
CVE: CVE-2007-0422
Published: 2007-01-23
Description: BEA WebLogic Server 9.0, 9.1, and 9.2 Gold, when running on Solaris 9, allows remote attackers to cause a denial of service (server inaccessibility) via manipulated socket connections.
CVSS Score: 5.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/217; http://osvdb.org/32858; http://secunia.com/advisories/23750
CVE: CVE-2007-0423
Published: 2007-01-23
Description: BEA WebLogic Portal 9.2 does not properly handle when an administrator deletes entitlements for a role, which causes other role entitlements to be "inadvertently affected," which has an unknown impact.
CVSS Score: 4.4 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/218; http://osvdb.org/32857; http://secunia.com/advisories/23750
CVE: CVE-2007-0424
Published: 2007-01-23
Description: Unspecified vulnerability in the BEA WebLogic Server proxy plug-in for Netscape Enterprise Server before September 2006 for Netscape Enterprise Server allow remote attackers to cause a denial of service via certain requests that trigger errors that lead to a server being marked as unavailable, hosting web server failure, or CPU consumption.
CVSS Score: 5.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/219; http://osvdb.org/32856; http://secunia.com/advisories/23750
CVE: CVE-2007-0425
Published: 2007-01-23
Description: Unspecified vulnerability in BEA WebLogic Platform and Server 8.1 through 8.1 SP5, and JRockit 1.4.2 R4.5 and earlier, allows attackers to gain privileges via unspecified vectors, related to an "overflow condition," probably a buffer overflow.
CVSS Score: 7.5 (HIGH)
References: http://dev2dev.bea.com/pub/advisory/222; http://osvdb.org/38515; http://secunia.com/advisories/23750
CVE: CVE-2007-0426
Published: 2007-01-23
Description: BEA WebLogic Portal 9.2, when running in a WebLogic Server clustered environment using WebLogic Portal entitlements, does not properly propagate entitlement policy changes if the changes are made on a managed server while the Administrative Server is unavailable, which might allow attackers to bypass intended restrictions.
CVSS Score: 6.8 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/223; http://osvdb.org/32854; http://osvdb.org/38516
CVE: CVE-2007-0427
Published: 2007-01-23
Description: Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitrary code via a help project (.HPJ) file with a long HLP field in the OPTIONS section.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/31899; http://secunia.com/advisories/23862; http://securityreason.com/securityalert/2177
CVE: CVE-2006-6946
Published: 2007-01-23
Description: The web server in the NEC MultiWriter 1700C allows remote attackers to modify the device configuration via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html
CVE: CVE-2006-6947
Published: 2007-01-23
Description: The FTP server in the NEC MultiWriter 1700C allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command, a variant of CVE-1999-0017.
CVSS Score: 7.8 (HIGH)
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html
CVE: CVE-2006-6948
Published: 2007-01-23
Description: MyODBC Japanese conversion edition 3.51.06, 2.50.29, and 2.50.25 allows remote attackers to cause a denial of service via a certain string in a response, which has unspecified impact on the MySQL database.
CVSS Score: 7.8 (HIGH)
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html
CVE: CVE-2006-6949
Published: 2007-01-23
Description: Conti FTPServer 1.0 Build 2.8 stores user passwords in cleartext in MyServerSettings.ini, which allows local users to obtain sensitive information by reading this file.
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/23030; http://secwatch.org/advisories/1016194/; http://www.securityfocus.com/bid/21174
CVE: CVE-2006-6950
Published: 2007-01-23
Description: Directory traversal vulnerability in Conti FTPServer 1.0 Build 2.8 allows remote attackers to read arbitrary files and list arbitrary directories via a .. (dot dot) in a filename argument.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/23030; http://secwatch.org/advisories/1016194/; http://www.securityfocus.com/bid/21174
CVE: CVE-2006-6951
Published: 2007-01-23
Description: Cross-site scripting (XSS) vulnerability in blog.php in OdysseusBlog allows remote attackers to inject arbitrary web script or HTML via the page parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2006-11/0274.html; http://securityreason.com/securityalert/2173; http://www.attrition.org/pipermail/vim/2007-January/001250.html
CVE: CVE-2007-0428
Published: 2007-01-23
Description: Unspecified vulnerability in the chtbl_lookup function in hash.c for WzdFTPD 8.0 and earlier allows remote attackers to cause a denial of service via a crafted FTP command, probably due to a NULL pointer dereference.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051896.html; http://osvdb.org/32941; http://secunia.com/advisories/23852
CVE: CVE-2007-0429
Published: 2007-01-23
Description: DivXBrowserPlugin (aka DivX Web Player) npdivx32.dll, as distributed with DivX Player 6.4.1, allows remote attackers to cause a denial of service (Internet Explorer 7 crash) by invoking the GoWindowed method for a certain instance of the ActiveX object.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/37693; http://www.securityfocus.com/bid/22133; https://exchange.xforce.ibmcloud.com/vulnerabilities/31601
CVE: CVE-2007-0430
Published: 2007-01-23
Description: The shared_region_map_file_np function in Apple Mac OS X 10.4.8 and earlier kernel allows local users to cause a denial of service (memory corruption) via a large mappingCount value.
CVSS Score: 4.9 (MEDIUM)
References: http://risesecurity.org/advisory.php?id=RISE-2007001.txt; http://secunia.com/advisories/23823; http://securityreason.com/securityalert/2178
CVE: CVE-2007-0431
Published: 2007-01-23
Description: AVM Fritz!Box 7050, and possibly other product models, allows remote attackers to cause a denial of service (VoIP application crash) via a zero-length UDP packet to the SIP port (port 5060).
CVSS Score: 7.8 (HIGH)
References: ftp://ftp.avm.de/fritz.box/fritzbox.fon_wlan_7050/firmware/info.txt; http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0387.html; http://mazzoo.de/blog/2007/01/18#FritzBox_DoS
CVE: CVE-2007-0432
Published: 2007-01-23
Description: BEA AquaLogic Service Bus 2.0, 2.1, and 2.5 does not properly reject malformed request messages to a proxy service, which might allow remote attackers to bypass authorization policies and route requests to back-end services or conduct other unauthorized activities.
CVSS Score: 7.5 (HIGH)
References: http://dev2dev.bea.com/pub/advisory/224; http://osvdb.org/32862; http://secunia.com/advisories/23786
CVE: CVE-2007-0433
Published: 2007-01-23
Description: Unspecified vulnerability in BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2, when using Active Directory LDAP for authentication, allows remote authenticated users to access the server even after the account has been disabled.
CVSS Score: 6.5 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/221; http://osvdb.org/32861; http://secunia.com/advisories/23786
CVE: CVE-2007-0434
Published: 2007-01-23
Description: BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2 does not properly set the severity level of audit events when the system load is high, which might make it easier for attackers to avoid detection.
CVSS Score: 4.6 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/220; http://osvdb.org/32860; http://secunia.com/advisories/23786
CVE: CVE-2007-0435
Published: 2007-01-23
Description: T-Com Speedport 500V routers with firmware 1.31 allow remote attackers to bypass authentication and reconfigure the device via a LOGINKEY=TECOM cookie value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://osvdb.org/32995; http://secunia.com/advisories/23853; http://www.securityfocus.com/archive/1/457453/100/0/threaded
CVE: CVE-2007-0441
Published: 2007-01-23
Description: Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 6.20, 6.4x, 7.01, and 7.50 allows remote attackers to execute arbitrary commands via unknown vectors.
CVSS Score: 5.1 (MEDIUM)
References: http://osvdb.org/32728; http://securitytracker.com/id?1017504; http://www.securityfocus.com/archive/1/456623/100/100/threaded
CVE: CVE-2007-0442
Published: 2007-01-23
Description: Unspecified vulnerability in IBM OS/400 R530 and R535 has unknown impact and remote attack vectors, related to an "Integrity Problem" involving LIC-TCPIP and TCP reset.  NOTE: it is possible that this issue is related to CVE-2004-0230, but this is not certain.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/32812; http://secunia.com/advisories/23765; http://www-1.ibm.com/support/docview.wss?uid=nas204b3e62c8a63af708625718e0043eddc
CVE: CVE-2007-0003
Published: 2007-01-23
Description: pam_unix.so in Linux-PAM 0.99.7.0 allows context-dependent attackers to log into accounts whose password hash, as stored in /etc/passwd or /etc/shadow, has only two characters.
CVSS Score: 7.2 (HIGH)
References: http://osvdb.org/32017; http://secunia.com/advisories/23858; http://www.novell.com/linux/security/advisories/2007_3_sr.html
CVE: CVE-2007-0449
Published: 2007-01-23
Description: Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup r4.0, Desktop and Business Protection Suite r2, and Desktop Management Suite (DMS) r11.0 and r11.1 allow remote attackers to execute arbitrary code via crafted packets to TCP port (1) 1900 or (2) 2200.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/23897; http://securitytracker.com/id?1017548; http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/babldimpsec-notice.asp
CVE: CVE-2007-0020
Published: 2007-01-24
Description: Heap-based buffer overflow in the SFTP protocol handler for Panic Transmit (Transmit.app) up to 3.5.5 allows remote attackers to execute arbitrary code via a long ftps:// URL.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/32694; http://projects.info-pull.com/moab/MOAB-19-01-2007.html; http://secunia.com/advisories/23861
CVE: CVE-2007-0023
Published: 2007-01-24
Description: The CFUserNotificationSendRequest function in UserNotificationCenter.app in Apple Mac OS X 10.4.8, when used in combination with diskutil, allows local users to gain privileges via a malicious InputManager in Library/InputManagers in a user's home directory, which is executed when Cocoa applications attempt to notify the user.
CVSS Score: 6.9 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=305102; http://lists.apple.com/archives/Security-announce/2007/Feb/msg00000.html; http://projects.info-pull.com/moab/MOAB-22-01-2007.html
CVE: CVE-2007-0460
Published: 2007-01-24
Description: Multiple buffer overflows in ulogd for SUSE Linux 9.3 up to 10.1, and possibly other distributions, have unknown impact and attack vectors related to "improper string length calculations."
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/32939; http://secunia.com/advisories/23863; http://secunia.com/advisories/24524
CVE: CVE-2007-0461
Published: 2007-01-24
Description: Multiple memory leaks in the Dazuko anti-virus helper module before 2.3.2 allow attackers to cause a denial of service (memory consumption) via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/38322; http://www.novell.com/linux/security/advisories/2007_01_sr.html; http://osvdb.org/38322
CVE: CVE-2007-0468
Published: 2007-01-24
Description: Stack-based buffer overflow in rcdll.dll in msdev.exe in Visual C++ (MSVC) in Microsoft Visual Studio 6.0 SP6 allows user-assisted remote attackers to execute arbitrary code via a long file path in the "1 TYPELIB MOVEABLE PURE" option in an RC file.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/31607; http://secunia.com/advisories/23856; http://securityreason.com/securityalert/2172
CVE: CVE-2007-0469
Published: 2007-01-24
Description: The extract_files function in installer.rb in RubyGems before 0.9.1 does not check whether files exist before overwriting them, which allows user-assisted remote attackers to overwrite arbitrary files, cause a denial of service, or execute arbitrary code via crafted GEM packages.
CVSS Score: 9.3 (HIGH)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]1060&w=2; http://rubyforge.org/frs/shownotes.php?release_id=9074; http://www.novell.com/linux/security/advisories/2007_4_sr.html
CVE: CVE-2007-0470
Published: 2007-01-24
Description: Multiple unspecified vulnerabilities in tip in Sun Solaris 8, 9, and 10 allow local users to gain uucp account privileges via unspecified vectors.
CVSS Score: 7.2 (HIGH)
References: http://osvdb.org/31616; http://secunia.com/advisories/23821; http://securitytracker.com/id?1017546
CVE: CVE-2007-0471
Published: 2007-01-24
Description: sre/params.php in the Integrity Clientless Security (ICS) component in Check Point Connectra NGX R62 3.x and earlier before Security Hotfix 5, and possibly VPN-1 NGX R62, allows remote attackers to bypass security requirements via a crafted Report parameter, which returns a valid ICSCookie authentication token.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051920.html; http://osvdb.org/31655; http://secunia.com/advisories/23847
CVE: CVE-2007-0010
Published: 2007-01-24
Description: The GdkPixbufLoader function in GIMP ToolKit (GTK+) in GTK 2 (gtk2) before 2.4.13 allows context-dependent attackers to cause a denial of service (crash) via a malformed image file.
CVSS Score: 2.1 (LOW)
References: http://osvdb.org/31621; http://secunia.com/advisories/23884; http://secunia.com/advisories/23933
CVE: CVE-2007-0018
Published: 2007-01-24
Description: Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include (1) NCTsoft NCTAudioStudio, NCTAudioEditor, and NCTDialogicVoice; (2) Magic Audio Recorder, Music Editor, and Audio Converter; (3) Aurora Media Workshop; DB Audio Mixer And Editor; (4) J. Hepple Products including Fx Audio Editor and others; (5) EXPStudio Audio Editor; (6) iMesh; (7) Quikscribe; (8) RMBSoft AudioConvert and SoundEdit Pro 2.1; (9) CDBurnerXP; (10) Code-it Software Wave MP3 Editor and aBasic Editor; (11) Movavi VideoMessage, DVD to iPod, and others; (12) SoftDiv Software Dexster, iVideoMAX, and others; (13) Sienzo Digital Music Mentor (DMM); (14) MP3 Normalizer; (15) Roemer Software FREE and Easy Hi-Q Recorder, and Easy Hi-Q Converter; (16) Audio Edit Magic; (17) Joshua Video and Audio Converter; (18) Virtual CD; (19) Cheetah CD and DVD Burner; (20) Mystik Media AudioEdit Deluxe, Blaze Media, and others; (21) Power Audio Editor; (22) DanDans Digital Media Full Audio Converter, Music Editing Master, and others; (23) Xrlly Software Text to Speech Makerand Arial Sound Recorder / Audio Converter; (24) Absolute Sound Recorder, Video to Audio Converter, and MP3 Splitter; (25) Easy Ringtone Maker; (26) RecordNRip; (27) McFunSoft iPod Audio Studio, Audio Recorder for Free, and others; (28) MP3 WAV Converter; (29) BearShare 6.0.2.26789; and (30) Oracle Siebel SimBuilder and CRM 7.x.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/22922; http://secunia.com/advisories/23475; http://secunia.com/advisories/23485
CVE: CVE-2007-0444
Published: 2007-01-24
Description: Stack-based buffer overflow in the print provider library (cpprov.dll) in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0, and MetaFrame XP 1.0 allows local users and remote attackers to execute arbitrary code via long arguments to the (1) EnumPrintersW and (2) OpenPrinter functions.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://osvdb.org/32958; http://secunia.com/advisories/23869; http://securitytracker.com/id?1017553
CVE: CVE-2006-6952
Published: 2007-01-24
Description: Computer Associates Host Intrusion Prevention System (HIPS) drivers (1) Core kmxstart.sys 6.5.4.31 and (2) Firewall kmxfw.sys 6.5.4.10 allow local users to gain privileges by using certain privileged IOCTLs to modify callback function pointers.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/22972; http://www.osvdb.org/30497; http://www.osvdb.org/30498
CVE: CVE-2007-0476
Published: 2007-01-25
Description: The gencert.sh script, when installing OpenLDAP before 2.1.30-r10, 2.2.x before 2.2.28-r7, and 2.3.x before 2.3.30-r2 as an ebuild in Gentoo Linux, does not create temporary directories in /tmp securely during emerge, which allows local users to overwrite arbitrary files via a symlink attack.
CVSS Score: 4.6 (MEDIUM)
References: http://osvdb.org/31617; http://secunia.com/advisories/23881; http://security.gentoo.org/glsa/glsa-200701-19.xml
CVE: CVE-2007-0477
Published: 2007-01-25
Description: Cross-site scripting (XSS) vulnerability in Openads 2.0.x before 2.0.10, 2.3 before 2.3.31 (aka Max Media Manager before 0.3.31-alpha-pr2), and phpAdsNew/phpPgAds before 2.0.9-pr1 allows remote attackers to inject arbitrary web script or HTML via (1) the keyword parameter in admin-search.php and (2) affiliate-search.php. NOTE: this issue may overlap CVE-2007-0363.
CVSS Score: 6.8 (MEDIUM)
References: http://forum.openads.org/index.php?showtopic=503412651; http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://osvdb.org/32926
CVE: CVE-2007-0478
Published: 2007-01-25
Description: WebCore on Apple Mac OS X 10.3.9 and 10.4.10, as used in Safari, does not properly parse HTML comments in TITLE elements, which allows remote attackers to conduct cross-site scripting (XSS) attacks and bypass some XSS protection schemes by embedding certain HTML tags within an HTML comment.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://docs.info.apple.com/article.html?artnum=306172; http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html; http://osvdb.org/32712
CVE: CVE-2007-0479
Published: 2007-01-25
Description: Memory leak in the TCP listener in Cisco IOS 9.x, 10.x, 11.x, and 12.x allows remote attackers to cause a denial of service by sending crafted TCP traffic to an IPv4 address on the IOS device.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/32093; http://secunia.com/advisories/23867; http://securitytracker.com/id?1017551