Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27576 - http://www.vupen.com/english/advisories/2007/4238 - http://secunia.com/advisories/26985 - http://www.us-cert.gov/cas/techalerts/TA07-352A.html - http://secunia.com/advisories/28136 - http://www.ubuntu.com/usn/usn-596-1 - https://bugzilla.redhat.com/show_bug.cgi?id=362081 - http://www.redhat.com/support/errata/RHSA-2007-0961.html - http://www.redhat.com/support/errata/RHSA-2007-0965.html - http://secunia.com/advisories/27756 - http://www.debian.org/security/2007/dsa-1412 - http://secunia.com/advisories/27673 - http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html - http://www.
://secunia.com/advisories/27673 - http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html - http://www.debian.org/security/2007/dsa-1410 - http://secunia.com/advisories/27769 - http://docs.info.apple.com/article.html?artnum=307179 - http://www.novell.com/linux/security/advisories/2007_24_sr.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:029 - http://secunia.com/advisories/29556 - http://www.securitytracker.com/id?1018938 - http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=13656 - http://secunia.com/advisories/27818 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11025 - http://secunia.com/advisories/286
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11025 - http://secunia.com/advisories/28645 - http://www.debian.org/security/2007/dsa-1411 - http://www.securityfocus.com/bid/26421 - http://secunia.com/advisories/27764
CVE ID: CVE-2007-5771 State: PUBLISHED Published: 2007-11-01T16:04:00 Last Updated: 2024-08-07T15:39:13.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: Flatnuke 3 (aka FlatnuX) allows remote attackers to obtain administrative access via a myforum%00 cookie. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/37385 - https://www.exploit-db.com/exploits/4562 - http://www.securityfocus.com/bid/26157 - http://osvdb.org/43637 - http://www.securityfocus.com/archive/1/482774/100/0/threaded
CVE ID: CVE-2007-5772 State: PUBLISHED Published: 2007-11-01T16:04:00 Last Updated: 2024-08-07T15:39:13.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in the download module in Flatnuke 3 allows remote authenticated administrators to inject arbitrary PHP code into a description.it.php file in a subdirectory of Download/ by saving a description and setting fneditmode to 1. NOTE: unauthenticated remote attackers can exploit this by leveraging a cookie manipulation issue. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4562 - http://www.securityfocus.com/archive/1/482774/100/0/thread
ner: References: - https://www.exploit-db.com/exploits/4562 - http://www.securityfocus.com/archive/1/482774/100/0/threaded - http://osvdb.org/43636
CVE ID: CVE-2007-5773 State: PUBLISHED Published: 2007-11-01T16:04:00 Last Updated: 2024-08-07T15:39:13.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in index.php in the File Manager module in Flatnuke 3 allows remote attackers to perform certain actions as administrators via requests containing the pathname in the dir parameter and the filename in the ffile parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/37413 - https://www.exploit-db.com/exploits/4561 - http://osvdb.org/43635
CVE ID: CVE-2007-5774 State: PUBLISHED Published: 2007-11-01T16:04:00 Last Updated: 2024-08-07T15:39:14.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in the File Manager module in Flatnuke 3 allows remote attackers to obtain sensitive information via an invalid argumentname parameter in a disc op action, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4561 - http://osvdb.org/43120 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37404
CVE ID: CVE-2007-5775 State: PUBLISHED Published: 2007-11-01T16:04:00.000Z Last Updated: 2025-04-03T14:21:35.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in BitDefender allows attackers to execute arbitrary code via unspecified vectors, aka EEYEB-20071024. NOTE: as of 20071029, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/26210 - http://research.eeye.com/html/advisories/upcoming/2007102
chment: References: - http://www.securityfocus.com/bid/26210 - http://research.eeye.com/html/advisories/upcoming/20071024.html
CVE ID: CVE-2007-5776 State: PUBLISHED Published: 2007-11-01T16:04:00 Last Updated: 2024-08-07T15:39:13.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in igallery.asp in Blue-Collar Productions i-Gallery 3.4 allows remote attackers to read arbitrary files via encoded backslash sequences in the d parameter, as demonstrated by a "%5c../../%5c" sequence. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26348 - http://securityreason.com/securityalert/3330 - http://www.securityfocus.com/archive/1/482788/100/0/threaded - http://osvdb.org/43628
CVE ID: CVE-2007-5777 State: PUBLISHED Published: 2007-11-01T16:04:00 Last Updated: 2024-08-07T15:39:13.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blue-Collar Productions i-Gallery 3.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing a base64-encoded password via a direct request for igallery.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3330 - http://osvdb.org/43629 - http://www.securityfocus.com/archive/1/482788/100/0/threaded
CVE ID: CVE-2007-5778 State: PUBLISHED Published: 2007-11-01T16:04:00 Last Updated: 2024-08-07T15:39:13.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mobile Spy (1) stores login credentials in cleartext under the RetinaxStudios registry key, and (2) sends login credentials and log data over a cleartext HTTP connection, which allows attackers to obtain sensitive information by reading the registry or sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/482663/100/0/threaded - http://osvdb.org/43625 - http://www.securityfocus.com/bid/26177 - http://www.informit.com/articles/article.aspx?p=1077909 - http:
vdb.org/43625 - http://www.securityfocus.com/bid/26177 - http://www.informit.com/articles/article.aspx?p=1077909 - http://www.airscanner.com/security/07101401_mobilespy.htm - http://osvdb.org/43626 - http://securityreason.com/securityalert/3333
CVE ID: CVE-2007-5779 State: PUBLISHED Published: 2007-11-01T16:04:00 Last Updated: 2024-08-07T15:39:13.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the GomManager (GomWeb Control) ActiveX control in GomWeb3.dll 1.0.0.12 in Gretech Online Movie Player (GOM Player) 2.1.6.3499 allows remote attackers to execute arbitrary code via a long argument to the OpenUrl method. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27418 - https://www.exploit-db.com/exploits/4579 - http://www.gomplayer.com/forum/viewtopic.html?t=1013 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38159 - http://www.securityfocus.com/bi
rum/viewtopic.html?t=1013 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38159 - http://www.securityfocus.com/bid/26236 - http://www.vupen.com/english/advisories/2007/3634
CVE ID: CVE-2007-5780 State: PUBLISHED Published: 2007-11-01T16:04:00 Last Updated: 2024-08-07T15:39:13.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in pub/pub08_comments.php in teatro 1.6 allows remote attackers to execute arbitrary PHP code via a URL in the basePath parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4582 - http://www.vupen.com/english/advisories/2007/3637 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38118 - http://www.securityfocus.com/archive/1/482910/100/0/threaded - http://www.securityfocus.com/bid/26231
CVE ID: CVE-2007-5781 State: PUBLISHED Published: 2007-11-01T16:04:00 Last Updated: 2024-08-07T15:47:00.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in inc/sige_init.php in Sige 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the SYS_PATH parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38120 - http://secunia.com/advisories/27413 - http://www.securityfocus.com/bid/26230 - http://www.vupen.com/english/advisories/2007/3638 - https://www.exploit-db.com/exploits/4581
CVE ID: CVE-2007-5782 State: PUBLISHED Published: 2007-11-01T16:04:00 Last Updated: 2024-08-07T15:46:59.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in dl.php in FireConfig 0.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26222 - https://www.exploit-db.com/exploits/4580 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38124 - http://www.vupen.com/english/advisories/2007/3641
CVE ID: CVE-2007-5783 State: PUBLISHED Published: 2007-11-01T16:04:00 Last Updated: 2024-08-07T15:46:59.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in emc.asp in emagiC CMS.Net 4.0 allows remote attackers to execute arbitrary SQL commands via the pageId parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38119 - http://www.securityfocus.com/bid/26229 - http://www.vupen.com/english/advisories/2007/3642 - https://www.exploit-db.com/exploits/4578
CVE ID: CVE-2007-5784 State: PUBLISHED Published: 2007-11-01T16:04:00 Last Updated: 2024-08-07T15:46:59.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in CaupoShop Pro 2.x allows remote attackers to execute arbitrary PHP code via a URL in the action parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26239 - https://www.exploit-db.com/exploits/4577 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38122 - http://www.vupen.com/english/advisories/2007/3643
CVE ID: CVE-2007-5785 State: PUBLISHED Published: 2007-11-01T16:04:00 Last Updated: 2024-08-07T15:46:59.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in file.php in JobSite Professional 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3644 - http://www.securityfocus.com/bid/26225 - https://www.exploit-db.com/exploits/4576 - http://secunia.com/advisories/27443 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38121
CVE ID: CVE-2007-5786 State: PUBLISHED Published: 2007-11-01T16:04:00 Last Updated: 2024-08-07T15:46:59.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in GoSamba 1.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the include_path parameter to (1) HTML_oben.php, (2) inc_freigabe.php, (3) inc_freigabe1.php, or (4) inc_freigabe3.php in include/; (5) inc_group.php; (6) inc_manager.php; (7) inc_newgroup.php; (8) inc_smb_conf.php; (9) inc_user.php; or (10) main.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4575 - https://exchange.xforce.ibmcloud.com/v
- CVE Program Container: References: - https://www.exploit-db.com/exploits/4575 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38123 - http://www.securityfocus.com/bid/26223 - http://www.vupen.com/english/advisories/2007/3646
CVE ID: CVE-2007-5787 State: PUBLISHED Published: 2007-11-01T16:04:00 Last Updated: 2024-08-07T15:46:59.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Micro Login System 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing a password via a direct request for userpwd.txt. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/482858/100/0/threaded - http://secunia.com/advisories/27422 - http://osvdb.org/40641 - http://www.securityfocus.com/bid/26246 - http://securityreason.com/securityalert/3328
CVE ID: CVE-2007-5788 State: PUBLISHED Published: 2007-11-01T16:04:00 Last Updated: 2024-08-07T15:47:00.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the SIP parser on the Grandstream HT-488 0.1 allows remote attackers to cause a denial of service (device crash) via a crafted SIP INVITE message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27401 - http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=361 - http://osvdb.org/40187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37411
CVE ID: CVE-2007-5789 State: PUBLISHED Published: 2007-11-01T16:04:00 Last Updated: 2024-08-07T15:46:59.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Grandstream HT-488 0.1 allows remote attackers to cause a denial of service (device crash) via a flood of fragmented packets to port 5060. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27401 - http://www.securityfocus.com/bid/26349 - http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=362 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37414 - http://osvdb.org/40186
CVE ID: CVE-2007-5790 State: PUBLISHED Published: 2007-11-01T16:04:00 Last Updated: 2024-08-07T15:46:59.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Globe7 soft phone client 7.3 uses weak cryptography (reversed sequence of binary values) for the password, which might allow local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/37415 - http://secunia.com/advisories/27400 - http://www.securityfocus.com/bid/26195 - http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=364
CVE ID: CVE-2007-5791 State: PUBLISHED Published: 2007-11-01T16:04:00 Last Updated: 2024-08-07T15:46:59.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Vonage Motorola Phone Adapter VT 2142-VD does not properly verify that a SIP INVITE message originated from a legitimate server, which allows remote attackers to send spoofed INVITE messages, as demonstrated by a flood of messages triggering a denial of service, and by phone calls with malicious content. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38525 - http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=357 - http://osvdb.org/38524 - https://exchange.xforce.ibmclo
ipera.com/index.php?action=resources%2Cthreat_advisory&tid=357 - http://osvdb.org/38524 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37420 - http://secunia.com/advisories/27380 - http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=360 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37416 - http://www.securityfocus.com/bid/26129
CVE ID: CVE-2007-5792 State: PUBLISHED Published: 2007-11-01T16:04:00 Last Updated: 2024-08-07T15:46:59.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Vonage Motorola Phone Adapter VT 2142-VD does not encrypt RTP packets, which might allow remote attackers to eavesdrop by sniffing the network and reconstructing the RTP session. Additional Analyst Notes: - CVE Program Container: References: - http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=359 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37418 - http://www.securityfocus.com/bid/26129
CVE ID: CVE-2007-5793 State: PUBLISHED Published: 2007-11-01T17:00:00 Last Updated: 2024-08-07T15:46:59.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stonesoft StoneGate IPS before 4.0 does not properly decode Fullwidth/Halfwidth Unicode encoded data, which makes it easier for remote attackers to scan or penetrate systems and avoid detection. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/739224 - http://www.vupen.com/english/advisories/2007/2757 - http://secunia.com/advisories/27455 - http://www.kb.cert.org/vuls/id/MIMG-72BRKJ - http://osvdb.org/40627
CVE ID: CVE-2007-5794 State: PUBLISHED Published: 2007-11-13T23:00:00 Last Updated: 2024-08-07T15:46:59.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in nss_ldap, when used in applications that are linked against the pthread library and fork after a call to nss_ldap, might send user data to the wrong process because of improper handling of the LDAP connection. NOTE: this issue was originally reported for Dovecot with the wrong mailboxes being returned, but other applications might also be affected. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28061 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=453868 - ht
tainer: References: - http://secunia.com/advisories/28061 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=453868 - http://secunia.com/advisories/27670 - http://www.dovecot.org/list/dovecot/2005-March/006345.html - https://bugzilla.redhat.com/show_bug.cgi?id=154314 - http://bugs.gentoo.org/show_bug.cgi?id=198390 - http://secunia.com/advisories/29083 - http://security.gentoo.org/glsa/glsa-200711-33.xml - http://www.dovecot.org/list/dovecot/2005-April/006859.html - http://www.securityfocus.com/archive/1/487985/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10625 - https://issues.rpath.com/browse/RPL-1913 - http://secunia.com/advisories
efinition/oval%3Aorg.mitre.oval%3Adef%3A10625 - https://issues.rpath.com/browse/RPL-1913 - http://secunia.com/advisories/27768 - http://www.securityfocus.com/bid/26452 - https://bugzilla.redhat.com/show_bug.cgi?id=367461 - http://secunia.com/advisories/27839 - http://www.redhat.com/support/errata/RHSA-2008-0389.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:049 - http://secunia.com/advisories/30352 - http://secunia.com/advisories/31227 - http://www.debian.org/security/2007/dsa-1430 - http://support.avaya.com/elmodocs2/security/ASA-2008-332.htm - http://secunia.com/advisories/31524 - http://www.securitytracker.com/id?1020088 - http://www.redhat.com/support/errata/RHSA-2008
ecunia.com/advisories/31524 - http://www.securitytracker.com/id?1020088 - http://www.redhat.com/support/errata/RHSA-2008-0715.html - http://secunia.com/advisories/28838 - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/38505 - http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0255
CVE ID: CVE-2007-5795 State: PUBLISHED Published: 2007-11-02T22:00:00 Last Updated: 2024-08-07T15:46:59.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hack-local-variables function in Emacs before 22.2, when enable-local-variables is set to :safe, does not properly search lists of unsafe or risky variables, which might allow user-assisted attackers to bypass intended restrictions and modify critical program variables via a file containing a Local variables declaration. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00524.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=44900
om/archives/fedora-package-announce/2007-November/msg00524.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=449008 - http://secunia.com/advisories/27984 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38263 - http://secunia.com/advisories/27728 - http://www.vupen.com/english/advisories/2008/0924/references - http://www.vupen.com/english/advisories/2007/3715 - http://cvs.savannah.gnu.org/viewvc/emacs/emacs/lisp/files.el?r1=1.896.2.28&r2=1.896.2.29 - http://osvdb.org/42060 - http://www.ubuntu.com/usn/usn-541-1 - http://secunia.com/advisories/29420 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://www.mandriva.com/security/advisories?name=MDVSA-20
.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:034 - http://www.securityfocus.com/bid/26327 - http://bugs.gentoo.org/show_bug.cgi?id=197958 - http://security.gentoo.org/glsa/glsa-200712-03.xml - http://docs.info.apple.com/article.html?artnum=307562 - http://secunia.com/advisories/27508 - http://secunia.com/advisories/27627
CVE ID: CVE-2007-5796 State: PUBLISHED Published: 2007-11-03T00:00:00 Last Updated: 2024-08-07T15:47:00.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the management console in Blue Coat ProxySG before 4.2.6.1, and 5.x before 5.2.2.5, allows remote attackers to inject arbitrary web script or HTML by modifying the URL that is used for loading Certificate Revocation Lists. Additional Analyst Notes: - CVE Program Container: References: - http://www.bluecoat.com/support/securityadvisories/advisory_cross-site_scripting_vulnerability - https://exchange.xforce.ibmcloud.com/vulnerabilities/38213 - http://secunia.com/advisories/27452 - http
_vulnerability - https://exchange.xforce.ibmcloud.com/vulnerabilities/38213 - http://secunia.com/advisories/27452 - http://www.vupen.com/english/advisories/2007/3678 - http://www.securitytracker.com/id?1018888
CVE ID: CVE-2007-5797 State: PUBLISHED Published: 2007-11-03T00:00:00 Last Updated: 2024-08-07T15:46:59.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQLLoginModule in Apache Geronimo 2.0 through 2.1 does not throw an exception for a nonexistent username, which allows remote attackers to bypass authentication via a login attempt with any username not contained in the database. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3676 - http://osvdb.org/38662 - http://www-1.ibm.com/support/docview.wss?uid=swg21286105 - http://secunia.com/advisories/27482 - http://www.securityfocus.com/bid/26287 - http://secunia.com/adv
?uid=swg21286105 - http://secunia.com/advisories/27482 - http://www.securityfocus.com/bid/26287 - http://secunia.com/advisories/27478 - https://issues.apache.org/jira/browse/GERONIMO-3543 - http://www.vupen.com/english/advisories/2007/3675
CVE ID: CVE-2007-5798 State: PUBLISHED Published: 2007-11-03T00:00:00 Last Updated: 2024-08-07T15:47:00.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in uddigui/navigateTree.do in the UDDI user console in IBM WebSphere Application Server (WAS) before 6.1.0 Fix Pack 13 (6.1.0.13) allow remote attackers to inject arbitrary web script or HTML via the (1) keyField, (2) nameField, (3) valueField, and (4) frameReturn parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26276 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38177 - http://secunia.com/advisories/27448