Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-2959 State: PUBLISHED Published: 2007-05-31T23:00:00 Last Updated: 2024-08-07T13:57:54.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in manufacturer.php in cpCommerce before 1.1.0 allows remote attackers to execute arbitrary SQL commands via the id_manufacturer parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34573 - http://osvdb.org/38042 - http://securityreason.com/securityalert/2747 - http://www.securityfocus.com/bid/24223 - http://www.securityfocus.com/archive/1/469910/100/0/threaded
CVE ID: CVE-2007-2960 State: PUBLISHED Published: 2007-05-31T23:00:00 Last Updated: 2024-08-07T13:57:54.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Scallywag 2005-04-25 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the skin_name parameter to template.php in (1) skin/dark/, (2) skin/gold/, or (3) skin/original/, a different vector than CVE-2007-2900. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38040 - http://www.vupen.com/english/ad
dditional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38040 - http://www.vupen.com/english/advisories/2007/1933 - http://osvdb.org/38041 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34469 - http://osvdb.org/38039
CVE ID: CVE-2007-2961 State: PUBLISHED Published: 2007-05-31T23:00:00 Last Updated: 2024-08-07T13:57:54.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in FileCloset before 1.1.5 allows remote attackers to upload arbitrary PHP files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?group_id=185741&release_id=512101 - http://secunia.com/advisories/25459 - http://sourceforge.net/forum/forum.php?forum_id=700075 - http://www.securityfocus.com/bid/24228 - http://osvdb.org/36738 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34587
CVE ID: CVE-2007-2962 State: PUBLISHED Published: 2007-05-31T23:00:00 Last Updated: 2024-08-07T13:57:54.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in Particle Gallery 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the order parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25484 - http://securityreason.com/securityalert/2748 - http://www.securityfocus.com/archive/1/469985/100/0/threaded - http://www.securityfocus.com/bid/24236 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34582 - http://osvdb.org/36414
CVE ID: CVE-2007-2963 State: PUBLISHED Published: 2007-05-31T23:00:00 Last Updated: 2024-08-07T13:57:54.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board (IPB or IP.Board) 2.2.2, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via (1) module_bbcodeloader.php, (2) module_div.php, (3) module_email.php, (4) module_image.php, (5) module_link.php, or (6) the editorid parameter to module_table.php in jscripts/folder_rte_files/. NOTE: some details were obtained from third party sources. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce
ained from third party sources. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34616 - http://www.securityfocus.com/bid/24244 - http://secunia.com/advisories/25437 - http://osvdb.org/35431 - http://osvdb.org/35430 - http://forums.invisionpower.com/index.php?showtopic=235069 - http://osvdb.org/35435 - http://www.vupen.com/english/advisories/2007/1993 - http://osvdb.org/35433 - http://osvdb.org/35434 - http://osvdb.org/35432
CVE ID: CVE-2007-2964 State: PUBLISHED Published: 2007-05-31T23:00:00 Last Updated: 2024-08-07T13:57:54.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fsmsh.dll host module in F-Secure Policy Manager Server 7.00 and earlier allows remote attackers to cause a denial of service (application crash) via NTFS reserved words in filenames in URLs. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018149 - http://secunia.com/advisories/25449 - http://www.f-secure.com/security/fsc-2007-4.shtml - http://www.securityfocus.com/bid/24233 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34584 - http://www.vupen.com/english/adviso
tyfocus.com/bid/24233 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34584 - http://www.vupen.com/english/advisories/2007/1986 - http://osvdb.org/36723
CVE ID: CVE-2007-2965 State: PUBLISHED Published: 2007-05-31T23:00:00 Last Updated: 2024-08-07T13:57:54.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Real-time Scanning component in multiple F-Secure products, including Internet Security 2005, 2006 and 2007; Anti-Virus 2005, 2006 and 2007; and Solutions based on F-Secure Protection Service for Consumers 6.40 and earlier allows local users to gain privileges via a crafted I/O request packet (IRP), related to IOCTL (Input/Output Control) and "access validation of the address space." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018148 - htt
space." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018148 - http://www.securitytracker.com/id?1018146 - http://www.f-secure.com/security/fsc-2007-2.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/34579 - http://www.vupen.com/english/advisories/2007/1985 - http://osvdb.org/36727 - http://secunia.com/advisories/25439
CVE ID: CVE-2007-2966 State: PUBLISHED Published: 2007-05-31T23:00:00 Last Updated: 2024-08-07T13:57:54.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the LHA decompression component in F-Secure anti-virus products for Microsoft Windows and Linux before 20070529 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted LHA archive, related to an integer wrap, a similar issue to CVE-2006-4335. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25426 - http://www.securitytracker.com/id?1018148 - http://securitytracker.com/id?1018147 - http://www.securitytracker
s/25426 - http://www.securitytracker.com/id?1018148 - http://securitytracker.com/id?1018147 - http://www.securitytracker.com/id?1018146 - http://www.vupen.com/english/advisories/2007/1985 - http://www.securityfocus.com/archive/1/470256/100/0/threaded - http://www.f-secure.com/security/fsc-2007-1.shtml - http://osvdb.org/36724 - http://www.securityfocus.com/bid/24235 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34575 - http://www.nruns.com/security_advisory_fsecure_lzh.php
CVE ID: CVE-2007-2967 State: PUBLISHED Published: 2007-05-31T23:00:00 Last Updated: 2024-08-07T13:57:54.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070522 allow remote attackers to cause a denial of service (file scanning infinite loop) via certain crafted (1) ARJ archives or (2) FSG packed files. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36725 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063714.html - http://www.nruns.com/security_advisory_fsecure_arj.php - http://www.securitytracker.com/id?1018148 - http://securitytracker.com/id?101814
com/security_advisory_fsecure_arj.php - http://www.securitytracker.com/id?1018148 - http://securitytracker.com/id?1018147 - http://www.securitytracker.com/id?1018146 - http://www.securityfocus.com/archive/1/470484/100/0/threaded - http://www.vupen.com/english/advisories/2007/1985 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063715.html - http://www.nruns.com/security_advisory_fsecure_fsg.php - http://osvdb.org/36726 - http://www.f-secure.com/security/fsc-2007-3.shtml - http://secunia.com/advisories/25440 - http://www.securityfocus.com/archive/1/470462/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34581
CVE ID: CVE-2007-2968 State: PUBLISHED Published: 2007-06-01T01:00:00 Last Updated: 2024-08-07T13:57:54.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in register.php in cpCommerce 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the name parameter (Full Name field). Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36697 - http://www.securityfocus.com/bid/24166 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34517 - http://secunia.com/advisories/25424 - http://securityreason.com/securityalert/2761 - http://www.securityfocus.com/archive/1/469595/100/0/threaded
CVE ID: CVE-2007-2969 State: PUBLISHED Published: 2007-06-01T01:00:00 Last Updated: 2024-08-07T13:57:54.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in newsletter.php in WAnewsletter 2.1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the waroot parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24177 - https://www.exploit-db.com/exploits/4000 - http://osvdb.org/38812
CVE ID: CVE-2007-2970 State: PUBLISHED Published: 2007-06-01T01:00:00 Last Updated: 2024-08-07T13:57:54.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in cgi/block.cgi in 8e6 R3000 Internet Filter allow remote attackers to inject arbitrary web script or HTML via the (1) URL, (2) CAT, and (3) USER parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34544 - http://secunia.com/advisories/25448 - http://osvdb.org/36706 - http://www.securi
ce.ibmcloud.com/vulnerabilities/34544 - http://secunia.com/advisories/25448 - http://osvdb.org/36706 - http://www.securityfocus.com/bid/24206
CVE ID: CVE-2007-2971 State: PUBLISHED Published: 2007-06-01T01:00:00 Last Updated: 2024-08-07T13:57:54.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in getnewsitem.php in gCards 1.46 and earlier allows remote attackers to execute arbitrary SQL commands via the newsid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=120880332905213&w=2 - https://www.exploit-db.com/exploits/3988 - http://marc.info/?l=bugtraq&m=120881500629066&w=2 - http://www.securityfocus.com/bid/24175 - http://osvdb.org/36317 - http://www.vupen.com/english/advisories/2007/1961 - https://exchange.xforce.ibmcloud.com/vulnera
ttp://osvdb.org/36317 - http://www.vupen.com/english/advisories/2007/1961 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34529 - http://secunia.com/advisories/25452 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41927
CVE ID: CVE-2007-2972 State: PUBLISHED Published: 2007-06-01T01:00:00 Last Updated: 2024-08-07T13:57:54.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: The file parsing engine in Avira Antivir Antivirus before 7.04.00.24 allows remote attackers to cause a denial of service (application crash) via a crafted UPX compressed file, which triggers a divide-by-zero error. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34556 - http://www.securityfocus.com/bid/24187 - http://forum.antivir-pe.de/thread.php?threadid=22528 - http://www.nruns.com/advisories/%5Bn.runs-SA-2007.011%5D%20-%20Avira%20Antivir%20Antivirus%20U
read.php?threadid=22528 - http://www.nruns.com/advisories/%5Bn.runs-SA-2007.011%5D%20-%20Avira%20Antivir%20Antivirus%20UPX%20parsing%20Divide%20by%20Zero%20Advisory.txt - http://www.vupen.com/english/advisories/2007/1971 - http://osvdb.org/36710 - http://secunia.com/advisories/25417 - http://www.securityfocus.com/archive/1/469880/100/0/threaded - http://marc.info/?l=full-disclosure&m=118040810718045&w=2 - http://www.securitytracker.com/id?1018132
CVE ID: CVE-2007-2973 State: PUBLISHED Published: 2007-06-01T01:00:00 Last Updated: 2024-08-07T13:57:54.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed TAR archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24239 - http://www.securityfocus.com/bid/24187 - http://forum.antivir-pe.de/thread.php?threadid=22528 - http://www.vupen.com/english/advisories/2007/1971 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34557 - http://secunia.com/advisories/25417 - http://osvdb.org/36
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34557 - http://secunia.com/advisories/25417 - http://osvdb.org/36711 - http://www.securitytracker.com/id?1018137 - http://www.nruns.com/advisories/%5Bn.runs-SA-2007.012%5D%20-%20Avira%20Antivir%20Antivirus%20TAR%20parsing%20Infinite%20Loop%20Advisory.txt - http://www.securityfocus.com/archive/1/470042/100/0/threaded
CVE ID: CVE-2007-2974 State: PUBLISHED Published: 2007-06-01T01:00:00 Last Updated: 2024-08-07T13:57:54.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the file parsing engine in Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to execute arbitrary code via a crafted LZH archive file, resulting from an "integer cast around." Additional Analyst Notes: - CVE Program Container: References: - http://www.nruns.com/advisories/%5Bn.runs-SA-2007.010%5D%20-%20Avira%20Antivir%20Antivirus%20LZH%20parsing%20Arbitrary%20Code%20Execution%20Advisory.txt - http://www.securityfocus.com/bid/24187 - http://forum.antivir-pe.de/thread.php?threadid=22528 - http:
n%20Advisory.txt - http://www.securityfocus.com/bid/24187 - http://forum.antivir-pe.de/thread.php?threadid=22528 - http://www.vupen.com/english/advisories/2007/1971 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063624.html - http://osvdb.org/36712 - http://securityreason.com/securityalert/2764 - http://secunia.com/advisories/25417 - http://www.securityfocus.com/archive/1/469805/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34551 - http://securitytracker.com/id?1018131
CVE ID: CVE-2007-2975 State: PUBLISHED Published: 2007-06-01T01:00:00 Last Updated: 2024-08-07T13:57:54.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: The admin console in Ignite Realtime Openfire 3.3.0 and earlier (formerly Wildfire) does not properly specify a filter mapping in web.xml, which allows remote attackers to gain privileges and execute arbitrary code by accessing functionality that is exposed through DWR, as demonstrated using the downloader. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25427 - http://www.igniterealtime.org/issues/browse/JM-1049 - http://www.osvdb.org/36713 - http://blogs.reucon.com/srt/2007/05/1
http://www.igniterealtime.org/issues/browse/JM-1049 - http://www.osvdb.org/36713 - http://blogs.reucon.com/srt/2007/05/11/openfire_3_3_1_fixes_critical_security_issue.html - http://www.securityfocus.com/bid/24205
CVE ID: CVE-2007-2976 State: PUBLISHED Published: 2007-06-01T01:00:00 Last Updated: 2024-08-07T13:57:54.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Centrinity FirstClass 8.3 and earlier, and Server and Internet Services 8.0 and earlier, do not properly handle a URL with a null ("%00") character, which allows remote attackers to conduct cross-site scripting (XSS) attacks. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36415 - http://www.securityfocus.com/bid/24204 - http://secunia.com/advisories/25447 - https://exchange.xforc
/osvdb.org/36415 - http://www.securityfocus.com/bid/24204 - http://secunia.com/advisories/25447 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34534
CVE ID: CVE-2007-2977 State: PUBLISHED Published: 2007-06-01T01:00:00 Last Updated: 2024-08-07T13:57:54.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the receive function in submit/submitcommon.c in the submit daemon in DOMjudge before 2.0.0RC1 allows remote attackers to cause a denial of service or have other unspecified impact. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25435 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34532 - http://sourceforge.net/project/shownotes.php?release_id=511778 - http://svn.a-eskwadraat.nl/wsvn
vulnerabilities/34532 - http://sourceforge.net/project/shownotes.php?release_id=511778 - http://svn.a-eskwadraat.nl/wsvn/DOMjudge/trunk/submit/submitcommon.cc?op=diff&rev=1109&sc=1 - http://osvdb.org/36704
CVE ID: CVE-2007-2978 State: PUBLISHED Published: 2007-06-01T01:00:00 Last Updated: 2024-08-07T13:57:54.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in eggblog 3.1.0 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/469888/100/0/threaded - http://www.majorsecurity.de/index_2.php?major_rls=major_rls48 - http://secunia.com/advisories/25443 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34549 - http://osvdb.org/36734 - http://securityreason.com/securityalert/2756
CVE ID: CVE-2007-2979 State: PUBLISHED Published: 2007-06-01T01:00:00 Last Updated: 2024-08-07T13:57:54.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Techno Dreams Web Directory / Search Engine 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for Database.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34518 - http://osvdb.org/36274 - http://secunia.com/advisories/25436 - http://securityreason.com/securityalert/2755 - http://www.securityfocus.com/archive/1/469587/30/30/threaded - http://www.
ttp://securityreason.com/securityalert/2755 - http://www.securityfocus.com/archive/1/469587/30/30/threaded - http://www.vupen.com/english/advisories/2007/1970
CVE ID: CVE-2007-2980 State: PUBLISHED Published: 2007-06-01T01:00:00 Last Updated: 2024-08-07T13:57:54.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in a certain ActiveX control in LEADTOOLS LEAD Raster ISIS Object (LTRIS14e.DLL) 14.5.0.44 allows remote attackers to cause a denial of service (Internet Explorer crash) or execute arbitrary code via a long DriverName property, a different ActiveX control than CVE-2007-2827. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34528 - http://secunia.com/advisories/25433 - http://osvdb.org/36043 - http://moaxb.blogspot.com/2007/05/moaxb-
bilities/34528 - http://secunia.com/advisories/25433 - http://osvdb.org/36043 - http://moaxb.blogspot.com/2007/05/moaxb-27-leadtools-raster-isis-object.html - http://www.vupen.com/english/advisories/2007/1972 - http://www.shinnai.altervista.org/moaxb/20070527/leadrasterisistxt.html - http://www.securityfocus.com/bid/24193
CVE ID: CVE-2007-2981 State: PUBLISHED Published: 2007-06-01T01:00:00 Last Updated: 2024-08-07T13:57:54.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in a certain ActiveX control in LEAD Technologies LEADTOOLS Raster OCR Document Object Library (ltrdc14e.dll) 14.5.0.44 allows remote attackers to execute arbitrary code via a long DictionaryFileName property. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1959 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34525 - http://secunia.com/advisories/25444 - http://moaxb.blogspot.com/2007/05/moaxb-26-leadtools-raster-ocr-document.html - http://www
ecunia.com/advisories/25444 - http://moaxb.blogspot.com/2007/05/moaxb-26-leadtools-raster-ocr-document.html - http://www.securityfocus.com/bid/24179 - http://www.shinnai.altervista.org/moaxb/20070526/leadocrtxt.html - http://osvdb.org/36042
CVE ID: CVE-2007-2982 State: PUBLISHED Published: 2007-06-01T01:00:00 Last Updated: 2024-08-07T13:57:54.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the British Telecommunications Business Connect webhelper ActiveX control before 1.0.0.7 in btbconnectwebcontrol.dll allow remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/210257 - http://www.securityfocus.com/bid/24216 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34589 - http://osvdb.org/36718 - http://secunia.com/advisories/25472 - http://www.vupen.com/english/advisories/20
lities/34589 - http://osvdb.org/36718 - http://secunia.com/advisories/25472 - http://www.vupen.com/english/advisories/2007/1979
CVE ID: CVE-2007-2983 State: PUBLISHED Published: 2007-10-25T18:00:00 Last Updated: 2024-08-07T13:57:54.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the British Telecommunications Consumer webhelper ActiveX control before 2.0.0.8 in btwebcontrol.dll allow remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24219 - http://www.kb.cert.org/vuls/id/686249 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34589 - http://secunia.com/advisories/25472 - http://www.vupen.com/english/advisories/2007/1979 - http://osvdb.org/40771
CVE ID: CVE-2007-2984 State: PUBLISHED Published: 2007-06-01T10:00:00 Last Updated: 2024-08-07T13:57:55.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the Media Technology Group CDPass ActiveX control in CDPass.dll allow remote attackers to execute arbitrary code via unspecified vectors, possibly involving the GetTOC2 method. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34578 - http://www.securityfocus.com/bid/24220 - http://secunia.com/advisories/25471 - http://osvdb.org/36717 - http://www.vupen.com/english/advisories/2007/1978 - http://www.kb.cert.org/vuls/id/9
es/25471 - http://osvdb.org/36717 - http://www.vupen.com/english/advisories/2007/1978 - http://www.kb.cert.org/vuls/id/933353
CVE ID: CVE-2007-2985 State: PUBLISHED Published: 2007-06-01T10:00:00 Last Updated: 2024-08-07T13:57:54.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pheap 2.0 allows remote attackers to bypass authentication by setting a pheap_login cookie value to the administrator's username, which can be used to (1) obtain sensitive information, including the administrator password, via settings.php or (2) upload and execute arbitrary PHP code via an update_doc action in edit.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36737 - https://www.exploit-db.com/exploits/4006 - http://secunia.com/advisories/25460 - https://exchange.xforce.ibmcloud.com/v
https://www.exploit-db.com/exploits/4006 - http://secunia.com/advisories/25460 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34592