Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-4470 State: PUBLISHED Published: 2007-09-10T17:00:00 Last Updated: 2024-08-07T14:53:55.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the Earth Resource Mapping NCSView ActiveX control before 3.4.0.242 in NCSView.dll, as distributed in ER Mapper ECW JPEG 2000 Plug-in before 8.1, allow remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26729 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36497 - http://www.securityfocus.com/bid/25584 - http://osvdb.org/37780 - http://www.kb.cert.org/vuls/id/589188 - h
ties/36497 - http://www.securityfocus.com/bid/25584 - http://osvdb.org/37780 - http://www.kb.cert.org/vuls/id/589188 - http://www.vupen.com/english/advisories/2007/3093
CVE ID: CVE-2007-4471 State: PUBLISHED Published: 2007-09-05T19:00:00 Last Updated: 2024-08-07T14:53:55.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to create or overwrite arbitrary files via unspecified arguments to the (1) httpGETToFile, (2) httpPOSTFromFile, and possibly other methods, probably involving path traversal vulnerabilities in exposed dangerous methods. NOTE: this can be leveraged for code execution by writing to a Startup folder. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vuln
artup folder. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36464 - http://www.kb.cert.org/vuls/id/979638 - http://secunia.com/advisories/26659 - http://osvdb.org/37134 - http://www.securityfocus.com/bid/25544
CVE ID: CVE-2007-4472 State: PUBLISHED Published: 2007-09-06T22:00:00 Last Updated: 2024-08-07T14:53:55.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the Broderbund Expressit 3DGreetings Player ActiveX control could allow remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26717 - http://www.securityfocus.com/bid/25564 - http://www.kb.cert.org/vuls/id/574401 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36472 - http://www.vupen.com/english/advisories/2007/3074 - http://osvdb.org/37779
CVE ID: CVE-2007-4473 State: PUBLISHED Published: 2007-12-17T21:00:00 Last Updated: 2024-08-07T14:53:55.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gesytec Easylon OPC Server before 2.3.44 does not properly validate server handles, which allows remote attackers to execute arbitrary code or cause a denial of service via unspecified network traffic to the OLE for Process Control (OPC) interface, probably related to free operations on arbitrary memory addresses through certain Remove functions, and read and write operations on arbitrary memory addresses through certain Set, Read, and Write functions. Additional Analyst Notes: - CVE Program Container: References: - http://sec
ough certain Set, Read, and Write functions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28079 - http://www.neutralbit.com/en/rd/opctest/ - http://osvdb.org/42650 - http://www.neutralbit.com/downloads/NB-NB-001-EXT-OPC%20Security%20Testing.pdf - http://www.securityfocus.com/bid/26876 - http://www.kb.cert.org/vuls/id/205073 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39062
CVE ID: CVE-2007-4474 State: PUBLISHED Published: 2007-12-27T22:00:00 Last Updated: 2024-08-07T14:53:55.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote attackers to execute arbitrary code, as demonstrated by an overflow from a long General_ServerName property value when calling the InstallBrowserHelperDll function in the Upload Module in the dwa7.dwa7.1 control in dwa7w.dll 7.0.34.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?101913
.dll 7.0.34.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019138 - https://www.exploit-db.com/exploits/5111 - http://www.securityfocus.com/bid/26972 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059233.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39175 - https://www.exploit-db.com/exploits/4820 - http://www.kb.cert.org/vuls/id/963889 - http://www.vupen.com/english/advisories/2007/4296 - http://secunia.com/advisories/28184 - https://www.exploit-db.com/exploits/4818 - http://osvdb.org/40954
CVE ID: CVE-2007-4475 State: PUBLISHED Published: 2009-04-01T18:00:00 Last Updated: 2024-08-07T14:53:56.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows remote attackers to execute arbitrary code via a long argument to the SaveViewToSessionFile method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34310 - http://www.vupen.com/english/advisories/2009/0892 - http://www.kb.cert.org/vuls/id/985449 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49543 - https://service.sap.com/sap/support/notes/
vuls/id/985449 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49543 - https://service.sap.com/sap/support/notes/1153794 - http://secunia.com/advisories/34559
CVE ID: CVE-2007-4476 State: PUBLISHED Published: 2007-09-05T01:00:00 Last Updated: 2024-08-07T14:53:55.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack." Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021680.1-1 - http://secunia.com/advisories/27331 - http://secunia.com/advisories/32051 - http://secunia.com/advisories/29968 - http://www.novell.com/linux/security/advisories/2007_19_sr.html - http://secunia.com/advisories/27681 - http://www.securityfocus.com/bid/26445 -
ux/security/advisories/2007_19_sr.html - http://secunia.com/advisories/27681 - http://www.securityfocus.com/bid/26445 - http://secunia.com/advisories/27453 - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00370.html - http://www.debian.org/security/2008/dsa-1566 - http://secunia.com/advisories/27514 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8599 - http://www.ubuntu.com/usn/usn-709-1 - https://issues.rpath.com/browse/RPL-1861 - http://www.redhat.com/support/errata/RHSA-2010-0144.html - http://www.debian.org/security/2007/dsa-1438 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:233 - https://www.redhat.com/ar
org/security/2007/dsa-1438 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:233 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00073.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9336 - http://secunia.com/advisories/27857 - http://www.vupen.com/english/advisories/2010/0629 - http://security.gentoo.org/glsa/glsa-200711-18.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2007:197 - http://secunia.com/advisories/26987 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7114 - http://www.novell.com/linux/security/advisories/2007_18_sr.html - http://www.vupen.c
val%3Aorg.mitre.oval%3Adef%3A7114 - http://www.novell.com/linux/security/advisories/2007_18_sr.html - http://www.vupen.com/english/advisories/2010/0628 - http://www.redhat.com/support/errata/RHSA-2010-0141.html - http://secunia.com/advisories/28255 - http://secunia.com/advisories/33567 - http://secunia.com/advisories/39008 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://www.ubuntu.com/usn/usn-650-1 - http://secunia.com/advisories/26674 - https://bugzilla.redhat.com/show_bug.cgi?id=280961 - http://bugs.gentoo.org/show_bug.cgi?id=196978
CVE ID: CVE-2007-4477 State: PUBLISHED Published: 2007-08-22T23:00:00 Last Updated: 2024-08-07T14:53:56.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administration interface in the Planet VC-200M VDSL2 router allows remote attackers to cause a denial of service (administration interface outage) via an HTTP request without a Host header. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36155 - http://www.securityfocus.com/bid/25390 - http://www.securityfocus.com/archive/1/477253/100/0/threaded - http://securityvulns.com/news/Planet/VC-200M/DoS.html - http://securityvulns.ru/Rdocument847.html - http://s
/threaded - http://securityvulns.com/news/Planet/VC-200M/DoS.html - http://securityvulns.ru/Rdocument847.html - http://secunia.com/advisories/26559
CVE ID: CVE-2007-4478 State: PUBLISHED Published: 2007-08-22T23:00:00 Last Updated: 2024-08-07T14:53:56.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6.0 and 7 allows user-assisted remote attackers to inject arbitrary web script or HTML in the local zone via a URI, when the document at the associated URL is saved to a local file, which then contains the URI string along with the document's original content. Additional Analyst Notes: - CVE Program Container: References: - http://websecurity.com.ua/1241/ - http://www.securityfocus.com/archive/1/477253/100/0/threaded - http://www.securityfocus.com/archive/
rity.com.ua/1241/ - http://www.securityfocus.com/archive/1/477253/100/0/threaded - http://www.securityfocus.com/archive/1/498697/100/0/threaded - http://www.securityfocus.com/archive/1/498684/100/0/threaded - http://securityvulns.ru/Rdocument865.html - http://securityvulns.com/news/Microsoft/IE/saved-css.html - http://osvdb.org/45826
CVE ID: CVE-2007-4479 State: PUBLISHED Published: 2007-08-22T23:00:00 Last Updated: 2024-08-07T14:53:56.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.html in Search Engine Builder allows remote attackers to inject arbitrary web script or HTML via the searWords parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityvulns.ru/Rdocument843.html - http://www.securityfocus.com/archive/1/477253/100/0/threaded - http://www.securityfocus.com/bid/25391 - http://websecurity.com.ua/1159/ - http://osvdb.org/37097 - http://secunia.com/advisories/26560 - https://exchange.xforce.ibmcloud.com/vulnerabilit
1159/ - http://osvdb.org/37097 - http://secunia.com/advisories/26560 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36149
CVE ID: CVE-2007-4480 State: PUBLISHED Published: 2007-08-22T23:00:00 Last Updated: 2024-08-07T14:53:56.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in the Sirius 1.0 theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/477253/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/36154 - http://osvdb.org/38326 - http://websecurity.com.ua/1252/ - http://securityvulns.ru/Rdocument839.html
CVE ID: CVE-2007-4481 State: PUBLISHED Published: 2007-08-22T23:00:00 Last Updated: 2024-08-07T14:53:56.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in the (1) Blix 0.9.1 and (2) Blix 0.9.1 Rus themes for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF). Additional Analyst Notes: - CVE Program Container: References: - http://websecurity.com.ua/1248/ - http://www.securityfocus.com/archive/1/477253/100/0/threaded - http://securityvulns.ru/Rdocument825.html
CVE ID: CVE-2007-4482 State: PUBLISHED Published: 2007-08-22T23:00:00 Last Updated: 2024-08-07T14:53:55.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in the Pool 1.0.7 theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/477253/100/0/threaded - http://osvdb.org/37299 - http://secunia.com/advisories/26563 - http://websecurity.com.ua/1238/ - http://securityvulns.ru/Rdocument771.html
CVE ID: CVE-2007-4483 State: PUBLISHED Published: 2007-08-22T23:00:00 Last Updated: 2024-08-07T14:53:56.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in the WordPress Classic 1.5 theme in WordPress before 2.1.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/477253/100/0/threaded - http://websecurity.com.ua/1234/ - http://osvdb.org/38450 - http://securityvulns.ru/Rdocument751.html
CVE ID: CVE-2007-4484 State: PUBLISHED Published: 2007-08-22T23:00:00 Last Updated: 2024-08-07T14:53:56.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in login.php in My_REFERER 1.08 allows remote attackers to execute arbitrary PHP code via a URL in the value parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36148 - http://www.securityfocus.com/archive/1/477253/100/0/threaded - http://osvdb.org/38332 - http://www.securityfocus.com/archive/1/482006/100/0/threaded - http://securityvulns.com/source26994.html - http://securityvulns.com/source13951.html - http://
/482006/100/0/threaded - http://securityvulns.com/source26994.html - http://securityvulns.com/source13951.html - http://securityvulns.com/Rdocument846.html
CVE ID: CVE-2007-4485 State: PUBLISHED Published: 2007-08-22T23:00:00 Last Updated: 2024-08-07T14:53:56.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in visitor.php in Butterfly online visitors counter 1.08, when used with certain older versions of PHP with improper SERVER superglobal handling, allows remote attackers to execute arbitrary PHP code via a URL in the _SERVER[DOCUMENT_ROOT] parameter. NOTE: it could be argued that this vulnerability is caused by a problem in PHP and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in Butterfly online visitors counter. Additional Analyst Notes: - C
, then this should not be treated as a vulnerability in Butterfly online visitors counter. Additional Analyst Notes: - CVE Program Container: References: - http://securityvulns.com/Rdocument845.html - http://www.securityfocus.com/archive/1/477253/100/0/threaded - http://www.securityfocus.com/archive/1/482006/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/36147 - http://securityvulns.com/source26994.html - http://osvdb.org/38327
CVE ID: CVE-2007-4486 State: PUBLISHED Published: 2007-08-22T23:00:00 Last Updated: 2024-08-07T14:53:56.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in index.php in Linkliste 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) styl[top], (2) url_eintrag, or (3) styl[themen] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/477253/100/0/threaded - http://www.securityfocus.com/bid/26045 - http://www.securityfocus.com/archive/1/482006/100/0/threaded - http://securityvulns.com/source26994.html - http://securityvulns.com/Rdocument752.html
archive/1/482006/100/0/threaded - http://securityvulns.com/source26994.html - http://securityvulns.com/Rdocument752.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36146 - http://osvdb.org/38330
CVE ID: CVE-2007-4487 State: PUBLISHED Published: 2007-08-22T23:00:00 Last Updated: 2024-08-07T14:53:56.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in D22-Shoutbox for Invision Power Board (IPB or IP.Board) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38356 - http://www.hackerscenter.com/Archive/view.asp?id=27873 - http://securityreason.com/securityalert/3051 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36139 - http://www.securityfocus.com/archive/1/477224/100/0/threaded
CVE ID: CVE-2007-4488 State: PUBLISHED Published: 2007-08-22T23:00:00 Last Updated: 2024-08-07T14:53:55.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Siemens Gigaset SE361 WLAN router with firmware 1.00.0 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI immediately following the filename for (1) a GIF filename, which triggers display of the GIF file in text format and an unspecified denial of service (crash); or (2) the login.tri filename, which triggers a continuous loop of the browser attempting to visit the login page. Additional Analyst Notes: - CVE Program Container: Refe
ntinuous loop of the browser attempting to visit the login page. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3050 - http://osvdb.org/45841 - http://www.securityfocus.com/archive/1/477220/100/0/threaded - http://osvdb.org/45842
CVE ID: CVE-2007-4489 State: PUBLISHED Published: 2007-08-22T23:00:00 Last Updated: 2024-08-07T15:01:08.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the IUAComFormX ActiveX control in uacomx.ocx 2.0.1 in the eCentrex VOIP Client module allows remote attackers to execute arbitrary code via a long Username argument to the ReInit method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25383 - http://www.securitytracker.com/id?1018596 - http://osvdb.org/37738 - http://secunia.com/advisories/26525 - https://www.exploit-db.com/exploits/4299 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36129 - http://w
26525 - https://www.exploit-db.com/exploits/4299 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36129 - http://www.vupen.com/english/advisories/2007/2954
CVE ID: CVE-2007-4490 State: PUBLISHED Published: 2007-08-22T23:00:00 Last Updated: 2024-08-07T15:01:08.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in EarthAgent.exe in Trend Micro ServerProtect 5.58 for Windows before Security Patch 4 allow remote attackers to have an unknown impact via certain RPC function calls to (1) RPCFN_EVENTBACK_DoHotFix or (2) CMD_CHANGE_AGENT_REGISTER_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2934 - http://www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch4_readme.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/36
documentation/readme/spnt_558_win_en_securitypatch4_readme.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/36181 - http://securityreason.com/securityalert/3052 - http://secunia.com/advisories/26523
CVE ID: CVE-2007-4491 State: PUBLISHED Published: 2007-08-23T00:00:00 Last Updated: 2024-08-07T15:01:08.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in uyeler2.php in Gurur haber 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3049 - http://www.securityfocus.com/archive/1/477121/100/0/threaded - http://osvdb.org/38333 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36114 - http://www.securityfocus.com/bid/25368
CVE ID: CVE-2007-4492 State: PUBLISHED Published: 2007-08-23T00:00:00 Last Updated: 2024-08-07T15:01:08.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the ata disk driver in Sun Solaris 8, 9, and 10 on the x86 platform before 20070821 allow local users to cause a denial of service (system panic) via unspecified ioctl functions, aka Bug 6433123. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018597 - http://www.vupen.com/english/advisories/2007/2933 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102988-1 - http://www.securityfocus.com/bid/25389 - http://secunia.com/advisor
.sun.com/search/document.do?assetkey=1-26-102988-1 - http://www.securityfocus.com/bid/25389 - http://secunia.com/advisories/26558 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36171
CVE ID: CVE-2007-4493 State: PUBLISHED Published: 2007-08-23T01:00:00 Last Updated: 2024-08-07T15:01:09.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: eZ publish before 3.8.9, and 3.9 before 3.9.3, does not properly check permissions on module views that lack a policy function, which has unknown impact and attack vectors, as demonstrated by a vulnerability in the discount functionality in the shop module. Additional Analyst Notes: - CVE Program Container: References: - http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_8_8_to_3_8_9 - http://ez.no/community/news/ez_publish_security_fixes_3_9_3_and_3_8_9 - http://www.securityfocus.com/bid/25539 - http://sec
p://ez.no/community/news/ez_publish_security_fixes_3_9_3_and_3_8_9 - http://www.securityfocus.com/bid/25539 - http://secunia.com/advisories/26686 - http://osvdb.org/40324 - http://ez.no/download/ez_publish/changelogs/ez_publish_3_9/changelog_3_9_2_to_3_9_3
CVE ID: CVE-2007-4494 State: PUBLISHED Published: 2007-08-23T01:00:00 Last Updated: 2024-08-07T15:01:08.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tipafriend function in eZ publish before 3.8.9, and 3.9 before 3.9.3, does not limit access by anonymous users, which allows remote attackers to conduct spam attacks. Additional Analyst Notes: - CVE Program Container: References: - http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_8_8_to_3_8_9 - http://ez.no/community/news/ez_publish_security_fixes_3_9_3_and_3_8_9 - http://www.securityfocus.com/bid/25538 - http://secunia.com/advisories/26686 - http://osvdb.org/40325 - http://ez.no/download/ez_publish/c
yfocus.com/bid/25538 - http://secunia.com/advisories/26686 - http://osvdb.org/40325 - http://ez.no/download/ez_publish/changelogs/ez_publish_3_9/changelog_3_9_2_to_3_9_3
CVE ID: CVE-2007-4495 State: PUBLISHED Published: 2007-08-23T01:00:00 Last Updated: 2024-08-07T15:01:08.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the ata disk driver in Sun Solaris 10 on the x86 platform before 20070821 allows local users to cause a denial of service (system panic) via an unspecified ioctl function, aka Bug 6433124. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018597 - http://osvdb.org/36615 - http://www.vupen.com/english/advisories/2007/2933 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102988-1 - http://www.securityfocus.com/bid/25389 - http://secunia.com/
unsolve.sun.com/search/document.do?assetkey=1-26-102988-1 - http://www.securityfocus.com/bid/25389 - http://secunia.com/advisories/26558