Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-5899 State: PUBLISHED Published: 2007-11-20T19:00:00 Last Updated: 2024-08-07T15:47:00.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: The output_add_rewrite_var function in PHP before 5.2.5 rewrites local forms in which the ACTION attribute references a non-local URL, which allows remote attackers to obtain potentially sensitive information by reading the requests for this URL, as demonstrated by a rewritten form containing a local session ID. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38918 - http://www.php.net/ChangeLog-5.php#5.2.5 - https://launchpad.net/bugs/173043 - http://www.redhat.com/support/errata/RHSA-2008-05
ww.php.net/ChangeLog-5.php#5.2.5 - https://launchpad.net/bugs/173043 - http://www.redhat.com/support/errata/RHSA-2008-0546.html - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00773.html - http://bugs.php.net/bug.php?id=42869 - https://issues.rpath.com/browse/RPL-1943 - http://secunia.com/advisories/30828 - http://www.debian.org/security/2008/dsa-1444 - http://www.redhat.com/support/errata/RHSA-2008-0582.html - http://www.ubuntu.com/usn/usn-628-1 - http://www.redhat.com/support/errata/RHSA-2008-0545.html - http://secunia.com/advisories/27864 - http://secunia.com/advisories/31124 - http://secunia.com/advisories/31119 - http://secunia.com/advisories/30040 - http://www.ph
secunia.com/advisories/31124 - http://secunia.com/advisories/31119 - http://secunia.com/advisories/30040 - http://www.php.net/releases/5_2_5.php - http://secunia.com/advisories/27659 - http://secunia.com/advisories/31200 - https://usn.ubuntu.com/549-1/ - http://www.securityfocus.com/archive/1/491693/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2008-0544.html - http://secunia.com/advisories/28249 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:125 - http://www.securityfocus.com/archive/1/491693/100/0/threaded - http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0242 - http://www.redhat.com/support/errata/RHSA-2008-0505.html - http://www.ubuntu.com/usn/usn-549-2 - http
s:rPSA-2007-0242 - http://www.redhat.com/support/errata/RHSA-2008-0505.html - http://www.ubuntu.com/usn/usn-549-2 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:126 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:127 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11211
CVE ID: CVE-2007-5900 State: PUBLISHED Published: 2007-11-20T18:00:00 Last Updated: 2024-08-07T15:47:00.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP before 5.2.5 allows local users to bypass protection mechanisms configured through php_admin_value or php_admin_flag in httpd.conf by using ini_set to modify arbitrary configuration variables, a different issue than CVE-2006-4625. Additional Analyst Notes: - CVE Program Container: References: - http://www.php.net/ChangeLog-5.php#5.2.5 - https://issues.rpath.com/browse/RPL-1943 - http://securitytracker.com/id?1018934 - http://secunia.com/advisories/30040 - http://www.php.net/releases/5_2_5.php - http://secunia.com/advisorie
/id?1018934 - http://secunia.com/advisories/30040 - http://www.php.net/releases/5_2_5.php - http://secunia.com/advisories/27659 - http://www.securityfocus.com/archive/1/491693/100/0/threaded - http://secunia.com/advisories/27648 - http://bugs.php.net/bug.php?id=41561 - http://www.securityfocus.com/archive/1/491693/100/0/threaded - http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0242
CVE ID: CVE-2007-5901 State: PUBLISHED Published: 2007-12-06T02:00:00 Last Updated: 2024-08-07T15:47:00.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the gss_indicate_mechs function in lib/gssapi/mechglue/g_initialize.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors. NOTE: this might be the result of a typo in the source code. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2008:069 - http://secunia.com/advisories/29464 - http://www.securityfocus.com/bid/26750 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html - http://secun
ityfocus.com/bid/26750 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html - http://secunia.com/advisories/29451 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html - http://seclists.org/fulldisclosure/2007/Dec/0321.html - http://www.vupen.com/english/advisories/2008/0924/references - http://www.redhat.com/support/errata/RHSA-2008-0164.html - http://bugs.gentoo.org/show_bug.cgi?id=199214 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://seclists.org/fulldisclosure/2007/Dec/0176.html - http://secunia.com/advisories/29516 - http://secunia.com/advisories/39290 - http://docs.info.apple.com/article.htm
tml - http://secunia.com/advisories/29516 - http://secunia.com/advisories/39290 - http://docs.info.apple.com/article.html?artnum=307562 - http://ubuntu.com/usn/usn-924-1 - http://osvdb.org/43346 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11451 - http://security.gentoo.org/glsa/glsa-200803-31.xml - https://issues.rpath.com/browse/RPL-2012
CVE ID: CVE-2007-5902 State: PUBLISHED Published: 2007-12-06T02:00:00 Last Updated: 2024-08-07T15:47:00.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the svcauth_gss_get_principal function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (krb5) allows remote attackers to have an unknown impact via a large length value for a GSS client name in an RPC request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39784 - http://www.ubuntu.com/usn/USN-940-1 - http://secunia.com/advisories/29457 - http://www.novell.com/linux/security/advisories/suse_security_summary_report.html - http://www.securityfocus.com/bid/26750 - ht
www.novell.com/linux/security/advisories/suse_security_summary_report.html - http://www.securityfocus.com/bid/26750 - http://wiki.rpath.com/Advisories:rPSA-2008-0112 - http://seclists.org/fulldisclosure/2007/Dec/0321.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112 - http://www.vupen.com/english/advisories/2010/1192 - http://bugs.gentoo.org/show_bug.cgi?id=199214 - http://www.securityfocus.com/archive/1/489883/100/0/threaded - http://seclists.org/fulldisclosure/2007/Dec/0176.html - http://secunia.com/advisories/39290 - http://ubuntu.com/usn/usn-924-1 - http://secunia.com/advisories/28636 - https://issues.rpath.com/browse/RPL-2012 - http://osvdb.org/44748
CVE ID: CVE-2007-5904 State: PUBLISHED Published: 2007-11-09T18:00:00 Last Updated: 2024-08-07T15:47:00.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in CIFS VFS in Linux kernel 2.6.23 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SMB responses that trigger the overflows in the SendReceive function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/487808/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html - http://www.securityfocus.com/bid/26438 - http://secunia.com/advisories/28643 -
security-announce/2008-03/msg00007.html - http://www.securityfocus.com/bid/26438 - http://secunia.com/advisories/28643 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9901 - http://www.ubuntu.com/usn/usn-618-1 - http://secunia.com/advisories/28826 - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00002.html - http://secunia.com/advisories/29387 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0048 - http://www.debian.org/security/2007/dsa-1428 - http://secunia.com/advisories/27912 - http://www.novell.com/linux/security/advisories/2007_63_kernel.html - http://secunia.com/advisories/29245 - http://www.redhat.com/support/errata/RHSA-2008
ty/advisories/2007_63_kernel.html - http://secunia.com/advisories/29245 - http://www.redhat.com/support/errata/RHSA-2008-0167.html - http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html - http://marc.info/?l=linux-kernel&m=119455843205403&w=2 - http://www.securitytracker.com/id?1019612 - http://secunia.com/advisories/27666 - http://www.vupen.com/english/advisories/2007/3860 - http://secunia.com/advisories/30769 - http://www.redhat.com/support/errata/RHSA-2008-0089.html - http://marc.info/?l=linux-kernel&m=119457447724276&w=2 - http://git.kernel.org/?p=linux/kernel/git/sfrench/cifs-2.6.git%3Ba=commitdiff%3Bh=133672efbc1085f9af990bdc145e1822ea93bcf3 - http://lists.opensus
linux/kernel/git/sfrench/cifs-2.6.git%3Ba=commitdiff%3Bh=133672efbc1085f9af990bdc145e1822ea93bcf3 - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html - http://secunia.com/advisories/27888 - http://secunia.com/advisories/29570 - http://secunia.com/advisories/30818 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38450
CVE ID: CVE-2007-5905 State: PUBLISHED Published: 2007-11-15T20:00:00 Last Updated: 2024-08-07T15:47:00.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe ColdFusion 8 and MX 7 allows remote attackers to hijack sessions via unspecified vectors that trigger establishment of a session to a ColdFusion application in which the (1) CFID or (2) CFTOKEN cookies have empty values, possibly due to a session fixation vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38446 - http://secunia.com/advisories/27644 - http://www.adobe.com/support/security/bulletins/apsb07-19.html - http://osvdb.org/41478 - h
cunia.com/advisories/27644 - http://www.adobe.com/support/security/bulletins/apsb07-19.html - http://osvdb.org/41478 - http://securitytracker.com/id?1018944 - http://www.adobe.com/go/kb402805 - http://www.vupen.com/english/advisories/2007/3859 - http://www.securityfocus.com/bid/26429
CVE ID: CVE-2007-5906 State: PUBLISHED Published: 2007-11-09T19:00:00 Last Updated: 2024-08-07T15:47:00.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 3.1.1 allows virtual guest system users to cause a denial of service (hypervisor crash) by using a debug register (DR7) to set certain breakpoints. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28412 - http://www.novell.com/linux/security/advisories/suse_security_summary_report.html - http://lists.xensource.com/archives/html/xen-devel/2007-10/msg01048.html - http://secunia.com/advisories/28405 - http://www.securityfocus.com/bid/27219 - http://secunia.com/advisories/28636 - h
- http://secunia.com/advisories/28405 - http://www.securityfocus.com/bid/27219 - http://secunia.com/advisories/28636 - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
CVE ID: CVE-2007-5907 State: PUBLISHED Published: 2007-11-09T19:00:00 Last Updated: 2024-08-07T15:47:00.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 3.1.1 does not prevent modification of the CR4 TSC from applications, which allows pv guests to cause a denial of service (crash). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32485 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10380 - http://secunia.com/advisories/28412 - http://www.novell.com/linux/security/advisories/suse_security_summary_report.html - http://www.redhat.com/support/errata/RHSA-2008-0957.html - http://secunia.com
sories/suse_security_summary_report.html - http://www.redhat.com/support/errata/RHSA-2008-0957.html - http://secunia.com/advisories/28405 - http://www.securityfocus.com/bid/27219 - http://lists.xensource.com/archives/html/xen-devel/2007-10/msg00932.html - http://secunia.com/advisories/28636 - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
CVE ID: CVE-2007-5908 State: REJECTED Published: 2007-11-09T19:00:00 Last Updated: 2007-11-28T10:00:00 Description: No description available.
CVE ID: CVE-2007-5909 State: PUBLISHED Published: 2007-11-10T02:00:00 Last Updated: 2024-08-07T15:47:00.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, IBM Lotus Notes before 7.0.3, Symantec Mail Security, and other products, allow remote attackers to execute arbitrary code via a crafted (1) AG file to kpagrdr.dll, (2) AW file to awsr.dll, (3) DLL or (4) EXE file to exesr.dll, (5) DOC file to mwsr.dll, (6) MIF file to mifsr.dll, (7) SAM file to lasr.dll, or (8) RTF file to rtfsr.dll. NOTE: the WPD (wp6sr.dll) vector is
(6) MIF file to mifsr.dll, (7) SAM file to lasr.dll, or (8) RTF file to rtfsr.dll. NOTE: the WPD (wp6sr.dll) vector is covered by CVE-2007-5910. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3357 - http://www.zerodayinitiative.com/advisories/ZDI-07-059.html - http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21271111 - http://securitytracker.com/id?1018853 - http://www.securityfocus.com/archive/1/482664 - http://www.vupen.com/english/advisories/2007/3697 - http://www.securityfocus.com/bid/26175 - http://vuln.sg/lotusnotes702sam-en.html - http://vuln.sg/lotusnotes702mif-en.html - http://www.securityfocus.com/archive/1/483102/100
g/lotusnotes702sam-en.html - http://vuln.sg/lotusnotes702mif-en.html - http://www.securityfocus.com/archive/1/483102/100/0/threaded - http://secunia.com/advisories/27304 - http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21272836 - http://vuln.sg/lotusnotes702-en.html - http://securityresponse.symantec.com/avcenter/security/Content/2007.11.01c.html - http://securitytracker.com/id?1018886 - http://www.vupen.com/english/advisories/2007/3596 - http://vuln.sg/lotusnotes702doc-en.html
CVE ID: CVE-2007-5910 State: PUBLISHED Published: 2007-11-10T02:00:00 Last Updated: 2024-08-07T15:47:00.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, wp6sr.dll in IBM Lotus Notes 8.0 and before 7.0.3, Symantec Mail Security, and other products, allows remote attackers to execute arbitrary code via a crafted WordPerfect (WPD) file. Additional Analyst Notes: - CVE Program Container: References: - http://vuln.sg/lotusnotes702wpd-en.html - http://securityreason.com/securityalert/3357 - http://www-1.ibm.com/support/docview.wss?rs=89
lotusnotes702wpd-en.html - http://securityreason.com/securityalert/3357 - http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21271111 - http://securitytracker.com/id?1018853 - http://www.securityfocus.com/archive/1/482664 - http://www.vupen.com/english/advisories/2007/3697 - http://www.securityfocus.com/bid/26175 - http://secunia.com/advisories/27304 - http://vuln.sg/lotusnotes702-en.html - http://securityresponse.symantec.com/avcenter/security/Content/2007.11.01c.html - http://securitytracker.com/id?1018886 - http://www.vupen.com/english/advisories/2007/3596
CVE ID: CVE-2007-5911 State: PUBLISHED Published: 2007-11-10T02:00:00 Last Updated: 2024-08-07T15:47:00.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the AxMetaStream ActiveX control in AxMetaStream.dll 3.3.2.26 in Viewpoint Media Player 3.2 allow remote attackers to execute arbitrary code via a long string argument to the (1) BroadcastKey, (2) BroadcastKeyFileURL, (3) Component, (4) ComponentClassID, (5) ComponentFileName, (6) ExtraProperty, (7) Properties, (8) RequiredVersions, (9) Source, or (10) XMLText method. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4610 - http://www.s
Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4610 - http://www.securityfocus.com/bid/26356 - http://shinnai.altervista.org/exploits/txt/TXT_dolp8rQrZmWLlINruy0o.html - http://osvdb.org/40268 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38287
CVE ID: CVE-2007-5912 State: PUBLISHED Published: 2007-11-10T02:00:00 Last Updated: 2024-08-07T15:47:00.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mailer.php in jPORTAL 2 allows remote attackers to execute arbitrary SQL commands via the to parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4611
CVE ID: CVE-2007-5913 State: PUBLISHED Published: 2007-11-10T02:00:00 Last Updated: 2024-08-07T15:47:00.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: dirsys/modules/auth.php in JBC Explorer 7.20 RC1 and earlier does not require authentication, which allows remote attackers to (1) delete auth.inc.php via the suppr parameter, and (2) re-create the auth.inc.php file with contents that specify a new account name and password for JBC Explorer via the login and password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27533 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38269 - http://osvdb.org/42069 - http://www.s
om/advisories/27533 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38269 - http://osvdb.org/42069 - http://www.securityfocus.com/bid/26332 - http://mgsdl.free.fr/?1:33 - http://www.securityfocus.com/archive/1/483268/100/0/threaded - http://securityreason.com/securityalert/3358 - https://www.exploit-db.com/exploits/4608
CVE ID: CVE-2007-5914 State: PUBLISHED Published: 2007-11-10T02:00:00 Last Updated: 2024-08-07T15:47:00.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in dirsys/modules/config/post.php in JBC Explorer 7.20 RC1 and earlier allows remote authenticated administrators to inject arbitrary PHP code via the DEBUG parameter, which can be executed by accessing config.inc.php. NOTE: this can be exploited by unauthenticated remote attackers by leveraging CVE-2007-5913. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27533 - http://osvdb.org/42070 - http://mgsdl.free.fr/?1:33 - http://www.securityf
nces: - http://secunia.com/advisories/27533 - http://osvdb.org/42070 - http://mgsdl.free.fr/?1:33 - http://www.securityfocus.com/archive/1/483268/100/0/threaded - http://securityreason.com/securityalert/3358 - https://www.exploit-db.com/exploits/4608
CVE ID: CVE-2007-5915 State: PUBLISHED Published: 2007-11-10T02:00:00 Last Updated: 2024-08-07T15:47:00.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in phphelpdesk 0.6.16 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the whattodo parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38259 - http://www.securityfocus.com/archive/1/483256/100/0/threaded - http://www.securityfocus.com/bid/26318 - http://securityreason.com/securityalert/3359
CVE ID: CVE-2007-5916 State: PUBLISHED Published: 2007-11-10T02:00:00 Last Updated: 2024-08-07T15:47:00.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the login page in phphelpdesk 0.6.16 allows remote attackers to execute arbitrary SQL commands via unspecified parameters related to the "login procedures." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38260 - http://www.securityfocus.com/bid/26319 - http://www.securityfocus.com/archive/1/483256/100/0/threaded - http://securityreason.com/securityalert/3359
CVE ID: CVE-2007-5917 State: PUBLISHED Published: 2007-11-10T02:00:00 Last Updated: 2024-08-07T15:47:00.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in admin/admin_account.php in Skalinks 1.5 and earlier allows remote attackers to add arbitrary privileged accounts as administrators via the admin_name, admin_password, admin_type, and Add_admin parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3356 - http://secunia.com/advisories/27532 - http://www.hackinginside.altervista.org/bug/skalinks_1_5_csrf.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/38286
/www.hackinginside.altervista.org/bug/skalinks_1_5_csrf.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/38286 - http://www.securityfocus.com/archive/1/483267/100/0/threaded
CVE ID: CVE-2007-5918 State: PUBLISHED Published: 2007-11-10T02:00:00 Last Updated: 2024-08-07T15:47:00.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in edit.php in the MS TopSites add-on for PHP-Nuke does not verify that the uname parameter matches the current account, which allows remote authenticated users to change arbitrary accounts or change the SiteTitleName field as an arbitrary user via a modified uname value in an edit action to modules.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26358 - http://0x90.com.ar/Advisory/20071106.txt - http://www.securityfocus.com/
ces: - http://www.securityfocus.com/bid/26358 - http://0x90.com.ar/Advisory/20071106.txt - http://www.securityfocus.com/archive/1/483353/100/0/threaded
CVE ID: CVE-2007-5919 State: PUBLISHED Published: 2007-11-10T02:00:00 Last Updated: 2024-08-07T15:47:00.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyWebFTP, possibly 5.3.2, stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain an MD5 password hash via a direct request for pass/pass.txt. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27551 - http://www.securityfocus.com/archive/1/483354/100/0/threaded - http://www.securityfocus.com/bid/26366 - http://securityreason.com/securityalert/3355
CVE ID: CVE-2007-5920 State: PUBLISHED Published: 2007-11-10T02:00:00 Last Updated: 2024-08-07T15:47:00.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in Domenico Mancini PicoFlat CMS before 0.4.18 allows remote attackers to include certain files via unspecified vectors, possibly due to a directory traversal vulnerability. NOTE: this can be leveraged to bypass authentication and upload files by including pico_insert.php or unspecified other administrative scripts. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38310 - http://
alyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38310 - http://www.securityfocus.com/bid/26362 - http://picoflat.altervista.org/ - http://osvdb.org/42106 - http://secunia.com/advisories/27504
CVE ID: CVE-2007-5921 State: PUBLISHED Published: 2007-11-10T02:00:00 Last Updated: 2024-08-07T15:47:00.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the ioctl interface in the Solaris Volume Manager (SVM) in Sun Solaris 9 and 10 allows local users to cause a denial of service (panic) via unspecified vectors, a different vulnerability than CVE-2004-1346. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27519 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200582-1 - http://www.securityfocus.com/bid/26376 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103143-1 - http://www.secur
//www.securityfocus.com/bid/26376 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103143-1 - http://www.securitytracker.com/id?1018916 - http://www.vupen.com/english/advisories/2007/3804 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4095 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38319 - http://osvdb.org/40817