Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-3069 State: PUBLISHED Published: 2007-06-06T10:00:00 Last Updated: 2024-08-07T14:05:29.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: xscreensaver in Sun Solaris 10 before 20070604, when a GNOME session with Assistive Technology support is running, allows attackers with physical access to take control of the session after entering an Alt-Tab sequence. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1832 - http://secunia.com/advisories/25531 - http://osvdb.org/36586 - http://www.securityfocus.com/bid/24314 - https://exchange.xforce.ibmcloud.com/vulnerabilit
31 - http://osvdb.org/36586 - http://www.securityfocus.com/bid/24314 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34722 - http://www.vupen.com/english/advisories/2007/2056 - http://www.securitytracker.com/id?1018194 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102834-1
CVE ID: CVE-2007-3070 State: PUBLISHED Published: 2007-06-06T10:00:00 Last Updated: 2024-08-07T14:05:27.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in BDigital Web Solutions WebStudio allows remote attackers to inject arbitrary web script or HTML via the pageid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34707 - http://secunia.com/advisories/25502 - http://securityreason.com/securityalert/2772 - http://www.securityfocus.com/archive/1/470451/100/0/threaded - http://www.securityfocus.com/bid/24297 - http://osvdb.org/36350
CVE ID: CVE-2007-3071 State: PUBLISHED Published: 2007-06-06T10:00:00 Last Updated: 2024-08-07T14:05:29.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the GetWebStoreURL function in a certain ActiveX control in eSellerateControl365.dll 3.6.5.0 in eSellerate SDK allows user-assisted remote attackers to execute arbitrary code via a long first argument. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38803 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35003 - http://www.securityfocus.com/bid/24300 - http://www.shinnai.altervista.org/exploits/esellerate.html
CVE ID: CVE-2007-3072 State: PUBLISHED Published: 2007-06-06T10:00:00 Last Updated: 2024-08-07T14:05:28.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Mozilla Firefox before 2.0.0.4 on Windows allows remote attackers to read arbitrary files via ..%5C (dot dot encoded backslash) sequences in a resource:// URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/470500/100/0/threaded - http://osvdb.org/35922 - http://larholm.com/2007/06/04/unpatched-input-validation-flaw-in-firefox-2004/ - http://larholm.com/2007/05/25/firefox-0day-local-file-reading/ - http://ha.ckers.org/blog/20070516/re
in-firefox-2004/ - http://larholm.com/2007/05/25/firefox-0day-local-file-reading/ - http://ha.ckers.org/blog/20070516/read-firefox-settings-poc/ - http://ha.ckers.org/blog/20070516/read-firefox-settings-poc/#comment-35888 - https://bugzilla.mozilla.org/show_bug.cgi?id=367428 - http://secunia.com/advisories/25481
CVE ID: CVE-2007-3073 State: PUBLISHED Published: 2007-06-06T10:00:00 Last Updated: 2024-08-07T14:05:28.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Mozilla Firefox 2.0.0.4 and earlier on Mac OS X and Unix allows remote attackers to read arbitrary files via ..%2F (dot dot encoded slash) sequences in a resource:// URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/470500/100/0/threaded - http://larholm.com/2007/06/04/unpatched-input-validation-flaw-in-firefox-2004/ - http://larholm.com/2007/05/25/firefox-0day-local-file-reading/ - http://ha.ckers.org/blog/20070516/read-firefox-set
4/ - http://larholm.com/2007/05/25/firefox-0day-local-file-reading/ - http://ha.ckers.org/blog/20070516/read-firefox-settings-poc/ - https://bugzilla.mozilla.org/show_bug.cgi?id=367428 - https://bugzilla.mozilla.org/show_bug.cgi?id=380994 - http://secunia.com/advisories/25481 - http://osvdb.org/35920
CVE ID: CVE-2007-3074 State: PUBLISHED Published: 2007-06-06T10:00:00 Last Updated: 2024-08-07T14:05:29.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 2.0.0.4 and earlier allows remote attackers to read files in the local Firefox installation directory via a resource:// URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/470500/100/0/threaded - http://osvdb.org/35918 - http://larholm.com/2007/06/04/unpatched-input-validation-flaw-in-firefox-2004/ - http://larholm.com/2007/05/25/firefox-0day-local-file-reading/ - http://ha.ckers.org/blog/20070516/read-firefox-settings-poc/ - https://bugzilla.mozilla.org/
-0day-local-file-reading/ - http://ha.ckers.org/blog/20070516/read-firefox-settings-poc/ - https://bugzilla.mozilla.org/show_bug.cgi?id=367428 - http://secunia.com/advisories/25481
CVE ID: CVE-2007-3075 State: PUBLISHED Published: 2007-06-06T10:00:00 Last Updated: 2024-08-07T14:05:28.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Microsoft Internet Explorer allows remote attackers to read arbitrary files via directory traversal sequences in a URI with a certain scheme, possibly related to "..%5C" (encoded backslash) sequences. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45436 - http://ha.ckers.org/blog/20070516/read-firefox-settings-poc/#comment-35888
CVE ID: CVE-2007-3076 State: PUBLISHED Published: 2007-06-06T10:00:00 Last Updated: 2024-08-07T14:05:27.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain ActiveX control in sasatl.dll in Zenturi ProgramChecker allows remote attackers to download arbitrary files to the client system via the DownloadFile function. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2000 - http://moaxb.blogspot.com/2007/05/moaxb-30-zenturi-programchecker-activex.html - http://osvdb.org/36046 - http://www.securityfocus.com/bid/24377 - http://secunia.com/advisories/25468
CVE ID: CVE-2007-3077 State: PUBLISHED Published: 2007-06-06T10:00:00 Last Updated: 2024-08-07T14:05:29.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in listmembers.php in EQdkp 1.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the rank parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36410 - http://secunia.com/advisories/25548 - https://www.exploit-db.com/exploits/4030 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34699 - http://www.vupen.com/english/advisories/2007/2059 - http://www.securityfocus.com/bid/24294
CVE ID: CVE-2007-3078 State: PUBLISHED Published: 2007-06-06T10:00:00 Last Updated: 2024-08-07T14:05:29.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Aigaion before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via the title parameter (Authors and Publication titles) to (1) authoractions.php or (2) publicationactions.php. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/tracker/index.php?func=detail&aid=1725317&group_id=109910&atid=657107 - http://sourceforge.net/project/shownotes.php?group_id=109910&release_id=512595 - http://secunia.com/advisories/25503 - ht
ttp://sourceforge.net/project/shownotes.php?group_id=109910&release_id=512595 - http://secunia.com/advisories/25503 - http://osvdb.org/36897 - http://osvdb.org/36898 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34665 - http://www.securityfocus.com/bid/24264
CVE ID: CVE-2007-3079 State: PUBLISHED Published: 2007-06-06T10:00:00 Last Updated: 2024-08-07T14:05:29.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: listmembers.php in EQdkp 1.3.2c and earlier allows remote attackers to obtain sensitive information via an invalid compare parameter, which reveals the path. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34694 - http://marc.info/?l=full-disclosure&m=118093304724372&w=2 - http://osvdb.org/38363
CVE ID: CVE-2007-3080 State: PUBLISHED Published: 2007-06-06T10:00:00 Last Updated: 2024-08-07T14:05:29.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in haberoku.asp in Hunkaray Okul Portaly 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24288 - http://securityreason.com/securityalert/2766 - http://osvdb.org/38802 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34988
CVE ID: CVE-2007-3081 State: PUBLISHED Published: 2007-06-06T10:00:00 Last Updated: 2024-08-07T14:05:29.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in sampleecommerce.php in Comdev eCommerce 4.1 allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2779 - http://www.securityfocus.com/archive/1/470435/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34704 - http://osvdb.org/38362
CVE ID: CVE-2007-3082 State: PUBLISHED Published: 2007-06-06T10:00:00 Last Updated: 2024-08-07T14:05:28.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the sc_language parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34697 - https://www.exploit-db.com/exploits/4029 - http://osvdb.org/35741 - http://www.vupen.com/english/advisories/2007/2058 - http://www.securityfocus.com/bid/24308
CVE ID: CVE-2007-3083 State: PUBLISHED Published: 2007-06-06T10:00:00 Last Updated: 2024-08-07T14:05:28.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Z-Blog 1.7 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for zblog.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2060 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34673 - http://www.securityfocus.com/archive/1/470238/100/0/threaded - http://securityreason.com/securityalert/2776 - http://osvdb.org/39739
CVE ID: CVE-2007-3084 State: PUBLISHED Published: 2007-06-06T10:00:00 Last Updated: 2024-08-07T14:05:29.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in sampleblogger.php in Comdev Web Blogger 4.1 allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter, a different vector than CVE-2006-5441. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38361 - http://www.securityfocus.com/archive/1/470437/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34683
CVE ID: CVE-2007-3085 State: PUBLISHED Published: 2007-06-06T10:00:00 Last Updated: 2024-08-07T14:05:28.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in PBSite allow remote attackers to execute arbitrary PHP code via a URL in the (1) dbpath parameter to (a) useronline.php, (b) ucp.php, (c) setcookie.php, (d) sendpm.php, (e) search.php, (f) register.php, (g) profile.php, (h) post.php, (i) pmpshow.php, (j) pm.php, (k) ntopic.php, (l) nreply.php, (m) news.php, (n) memberslist.php, (o) logout.php, (p) login.php, (q) index.php, (r) help.php, (s) forum.php, (t) error.php, (u) editpost.php, (v) delpost.php, (w) delpm.php, (x) conf
p, (q) index.php, (r) help.php, (s) forum.php, (t) error.php, (u) editpost.php, (v) delpost.php, (w) delpm.php, (x) confirm.php, (y) board.php, (z) admin2.php, (aa) admin.php, or (bb) templates/pb/css/formstyles.php; or the (2) temppath parameter to (a) useronline.php, (c) setcookie.php, (e) search.php, (f) register.php, (h) post.php, (l) nreply.php, (m) news.php, (o) logout.php, (p) login.php, (q) index.php, (r) help.php, (s) forum.php, (t) error.php, (w) delpm.php, (x) confirm.php, or (y) board.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38763 - http://osvdb.org/38780 - http://osvdb.org/38767 - http://osvdb.org/38759 - http://www.securityfocus.com
svdb.org/38763 - http://osvdb.org/38780 - http://osvdb.org/38767 - http://osvdb.org/38759 - http://www.securityfocus.com/archive/1/470239/100/0/threaded - http://www.securityfocus.com/archive/1/470347/100/0/threaded - http://osvdb.org/38781 - http://osvdb.org/38776 - http://osvdb.org/38762 - http://osvdb.org/38771 - http://osvdb.org/38777 - http://osvdb.org/38784 - http://osvdb.org/38775 - http://securityreason.com/securityalert/2777 - http://osvdb.org/38779 - http://osvdb.org/38778 - http://osvdb.org/38770 - http://osvdb.org/38760 - http://osvdb.org/38785 - http://osvdb.org/38774 - http://osvdb.org/38773 - http://osvdb.org/38761 - http://osvdb.org/38768 - http://osvdb.org/38769 - http://osv
g/38774 - http://osvdb.org/38773 - http://osvdb.org/38761 - http://osvdb.org/38768 - http://osvdb.org/38769 - http://osvdb.org/38782 - http://osvdb.org/38783 - http://osvdb.org/38764 - http://osvdb.org/38786 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34675 - http://osvdb.org/38772 - http://osvdb.org/38765 - http://osvdb.org/38766
CVE ID: CVE-2007-3086 State: PUBLISHED Published: 2007-06-06T10:00:00 Last Updated: 2024-08-07T14:05:29.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted critical resource lock in Agnitum Outpost Firewall PRO 4.0 1007.591.145 and earlier allows local users to cause a denial of service (system hang) by capturing the outpost_ipc_hdr mutex. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/470278/100/0/threaded - http://osvdb.org/42038 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34686 - http://www.matousec.com/info/advisories/Outpost-Enforcing-system-reboot-with-outpost_ipc_hdr-mutex.php - http://securit
http://www.matousec.com/info/advisories/Outpost-Enforcing-system-reboot-with-outpost_ipc_hdr-mutex.php - http://securityreason.com/securityalert/2775 - http://www.securityfocus.com/bid/24284
CVE ID: CVE-2007-3087 State: PUBLISHED Published: 2007-06-06T10:00:00 Last Updated: 2024-08-07T14:05:29.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Peercast places a cleartext password in a query string, which might allow attackers to obtain sensitive information by sniffing the network, or obtaining Referer or browser history information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/42055 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34713 - http://www.securityfocus.com/archive/1/470455/100/0/threaded - http://securityreason.com/securityalert/2774
CVE ID: CVE-2007-3088 State: PUBLISHED Published: 2007-06-06T10:00:00 Last Updated: 2024-08-07T14:05:28.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Comicsense allows remote attackers to execute arbitrary SQL commands via the epi parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34736 - http://www.securityfocus.com/archive/1/470598/100/0/threaded - http://www.securityfocus.com/bid/24329 - http://securityreason.com/securityalert/2778 - http://www.vupen.com/english/advisories/2007/2092 - http://osvdb.org/38370
CVE ID: CVE-2007-3089 State: PUBLISHED Published: 2007-06-06T21:00:00 Last Updated: 2024-08-07T14:05:28.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the "promiscuous IFRAME access bug," a related issue to CVE-2006-4568. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-490-1 - http://www.securitytracke
al Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-490-1 - http://www.securitytracker.com/id?1018412 - http://secunia.com/advisories/26107 - http://www.kb.cert.org/vuls/id/143297 - http://secunia.com/advisories/26179 - http://www.vupen.com/english/advisories/2007/4256 - http://secunia.com/advisories/25589 - http://lcamtuf.coredump.cx/ifsnatch/ - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:152 - http://www.gentoo.org/security/en/glsa/glsa-200708-09.xml - http://www.mozilla.org/security/announce/2007/mfsa2007-20.html - http://www.debian.org/security/2007/dsa-13
708-09.xml - http://www.mozilla.org/security/announce/2007/mfsa2007-20.html - http://www.debian.org/security/2007/dsa-1339 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11122 - http://www.us-cert.gov/cas/techalerts/TA07-199A.html - http://secunia.com/advisories/26151 - http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0026.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34701 - http://secunia.com/advisories/28135 - http://www.securityfocus.com/archive/1/470446/100/0/threaded - http://secunia.com/advisories/26216 - http://secunia.com/advisories/26103 - http://www.securityfocus.com/bid/24286 - http://secunia.com/advisories/2607
6216 - http://secunia.com/advisories/26103 - http://www.securityfocus.com/bid/24286 - http://secunia.com/advisories/26072 - http://secunia.com/advisories/26149 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103177-1 - http://www.vupen.com/english/advisories/2007/2564 - http://www.debian.org/security/2007/dsa-1337 - http://secunia.com/advisories/26211 - http://securityreason.com/securityalert/2781 - http://secunia.com/advisories/26159 - http://www.novell.com/linux/security/advisories/2007_49_mozilla.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.debian.org/security/2007/dsa-1338 - ftp://ftp.slackware.com/pub/slackware/slackware
.jsp?objectID=c00771742 - http://www.debian.org/security/2007/dsa-1338 - ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txt - https://bugzilla.mozilla.org/show_bug.cgi?id=381300 - http://support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.html - http://secunia.com/advisories/26095 - http://www.securityfocus.com/archive/1/474542/100/0/threaded - http://secunia.com/advisories/26258 - https://bugzilla.mozilla.org/show_bug.cgi?id=382686 - http://secunia.com/advisories/26460 - http://secunia.com/advisories/26106 - ftp://patches.sgi.com/support/free/security/advisories/20070701-01-P.asc - https://bugzilla.mozilla.org/show_bug.cgi?id=382686 - http://www.redhat.com/su
e/security/advisories/20070701-01-P.asc - https://bugzilla.mozilla.org/show_bug.cgi?id=382686 - http://www.redhat.com/support/errata/RHSA-2007-0724.html - http://www.securityfocus.com/archive/1/474226/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2007-0723.html - http://secunia.com/advisories/26271 - http://osvdb.org/38024 - http://www.redhat.com/support/errata/RHSA-2007-0722.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=381300 - http://secunia.com/advisories/26204 - http://secunia.com/advisories/26205
CVE ID: CVE-2007-3090 State: REJECTED Published: 2007-06-06T21:00:00 Last Updated: 2007-08-22T09:00:00 Description: No description available.
CVE ID: CVE-2007-3091 State: PUBLISHED Published: 2007-06-06T21:00:00 Last Updated: 2024-08-07T14:05:29.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Microsoft Internet Explorer 6 SP1; 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 allows remote attackers to execute arbitrary code or perform other actions upon a page transition, with the permissions of the old page and the content of the new page, as demonstrated by setInterval functions that set location.href within a try/catch expression, aka the "bait & switch vulnerability" or "Race Condition Cross-Domain Information Disclosure
hin a try/catch expression, aka the "bait & switch vulnerability" or "Race Condition Cross-Domain Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1538 - http://secunia.com/advisories/25564 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019 - http://www.securityfocus.com/bid/24283 - http://www.kb.cert.org/vuls/id/471361 - http://securitytracker.com/id?1018192 - http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0026.html - http://lcamtuf.coredump.cx/ierace/ - http://www.securityfocus.com/archive/1/470446/100/0/threaded - http://osvdb.org/54944 - http
amtuf.coredump.cx/ierace/ - http://www.securityfocus.com/archive/1/470446/100/0/threaded - http://osvdb.org/54944 - http://osvdb.org/38497 - http://www.vupen.com/english/advisories/2007/2064 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6041 - http://www.us-cert.gov/cas/techalerts/TA09-160A.html - http://securityreason.com/securityalert/2781 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34696
CVE ID: CVE-2007-3092 State: PUBLISHED Published: 2007-06-06T21:00:00 Last Updated: 2024-08-07T14:05:28.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 allows remote attackers to spoof the URL bar, and page properties including SSL certificates, by interrupting page loading through certain use of location DOM objects and setTimeout calls. NOTE: this issue can be leveraged for phishing and other attacks. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45437 - http://securitytracker.com/id?1018193 - http://secunia.com/advisories/25564 - http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0026.html - http:
- http://secunia.com/advisories/25564 - http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0026.html - http://www.securityfocus.com/archive/1/470446/100/0/threaded - http://lcamtuf.coredump.cx/ietrap2/ - http://securityreason.com/securityalert/2781 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34705 - http://www.securityfocus.com/bid/24298
CVE ID: CVE-2007-3093 State: PUBLISHED Published: 2007-06-06T21:00:00 Last Updated: 2024-08-07T14:05:28.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the logging mechanism in Solaris Management Console (SMC) on Sun Solaris 8 through 10 before 20070605 allows remote attackers to execute arbitrary code via unspecified vectors, related to the WBEM server. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34734 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1680 - http://www.vupen.com/english/advisories/2007/2077 - http://sunsolve.sun.com/se