Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-2733 State: PUBLISHED Published: 2007-05-16T22:00:00 Last Updated: 2024-08-07T13:49:57.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in Jetbox CMS allows remote authenticated users with author privileges to upload arbitrary scripts via unspecified vectors, which can be accessed in webfiles/. NOTE: this issue might be a duplicate of CVE-2004-1448. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/468681/100/0/threaded - http://www.securityfocus.com/bid/23996 - http://securityreason.com/securityalert/2711 - http://osvdb.org/37450
CVE ID: CVE-2007-2734 State: PUBLISHED Published: 2007-05-16T22:00:00 Last Updated: 2024-08-07T13:49:57.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 3Com TippingPoint IPS do not properly handle certain full-width and half-width Unicode character encodings in an HTTP POST request, which might allow remote attackers to evade detection of HTTP traffic. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/739224 - http://securityreason.com/securityalert/2712 - http://www.3com.com/securityalert/alerts/3COM-07-001.html - http://secunia.com/advisories/25302 - http://www.gamasec.net/english/gs07-01.html - http://osvdb.org/35968 - http
html - http://secunia.com/advisories/25302 - http://www.gamasec.net/english/gs07-01.html - http://osvdb.org/35968 - http://www.vupen.com/english/advisories/2007/1817 - http://www.securityfocus.com/archive/1/468633/100/0/threaded
CVE ID: CVE-2007-2735 State: PUBLISHED Published: 2007-05-17T19:00:00 Last Updated: 2024-08-07T13:49:57.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in edit_day.php in the ResManager 1.2.1 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id_reserv parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3931 - http://osvdb.org/35380 - http://www.securityfocus.com/bid/23997 - http://www.vupen.com/english/advisories/2007/1828 - http://secunia.com/advisories/25298 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34310
CVE ID: CVE-2007-2736 State: PUBLISHED Published: 2007-05-17T19:00:00 Last Updated: 2024-08-07T13:49:57.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Achievo 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the config_atkroot parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3928 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34305 - http://osvdb.org/37919 - http://www.securityfocus.com/bid/23992
CVE ID: CVE-2007-2737 State: PUBLISHED Published: 2007-05-17T19:00:00 Last Updated: 2024-08-07T13:49:57.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the MyConference 1.0 module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1830 - http://osvdb.org/37920
CVE ID: CVE-2007-2738 State: PUBLISHED Published: 2007-05-17T19:00:00 Last Updated: 2024-08-07T13:49:57.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in glossaire-p-f.php in the Glossaire 1.7 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the sid parameter in an ImprDef action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3932 - http://www.securityfocus.com/bid/23998 - http://www.vupen.com/english/advisories/2007/1829 - http://osvdb.org/37921 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34308
CVE ID: CVE-2007-2739 State: PUBLISHED Published: 2007-05-17T19:00:00 Last Updated: 2024-08-07T13:49:57.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in xajax before 0.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36174 - http://www.debian.org/security/2008/dsa-1692 - http://sourceforge.net/project/shownotes.php?release_id=508650 - http://www.vupen.com/english/advisories/2007/1841 - http://secunia.com/advisories/25299 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34323 - http://secunia.com/advisorie
secunia.com/advisories/25299 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34323 - http://secunia.com/advisories/33265
CVE ID: CVE-2007-2740 State: PUBLISHED Published: 2007-05-17T19:00:00 Last Updated: 2024-08-07T13:49:57.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in xajax before 0.2.5 has unknown impact and attack vectors, not related to XSS. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=508650 - http://www.vupen.com/english/advisories/2007/1841 - http://secunia.com/advisories/25299 - http://osvdb.org/36175 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34497
CVE ID: CVE-2007-2741 State: PUBLISHED Published: 2007-05-17T19:00:00 Last Updated: 2024-08-07T13:49:57.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Little CMS (lcms) before 1.15 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ICC profile in a JPG file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36179 - http://www.vupen.com/english/advisories/2007/1837 - http://secunia.com/advisories/32282 - http://www.ubuntu.com/usn/usn-652-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34331 - http://secunia.com/advisories/27756 - http://scary.b
52-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34331 - http://secunia.com/advisories/27756 - http://scary.beasts.org/security/CESA-2007-001.html - http://www.novell.com/linux/security/advisories/2007_24_sr.html - http://secunia.com/advisories/25294 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:238 - http://www.securityfocus.com/bid/24001
CVE ID: CVE-2007-2742 State: PUBLISHED Published: 2007-05-17T19:00:00 Last Updated: 2024-08-07T13:49:57.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in labs.beffa.org w2box 4.0.0 Beta4 allows remote attackers to upload arbitrary PHP code via a filename with a double extension such as .php.jpg. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34302 - http://marc.info/?l=bugtraq&m=117924253030935&w=2 - http://www.securityfocus.com/bid/23975 - http://osvdb.org/36830
CVE ID: CVE-2007-2743 State: PUBLISHED Published: 2007-05-17T19:00:00 Last Updated: 2024-08-07T13:49:57.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in custom_vars.php in GlossWord 1.8.1 allows remote attackers to execute arbitrary PHP code via a URL in the sys[path_addon] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25303 - http://www.securityfocus.com/bid/24009 - http://www.vupen.com/english/advisories/2007/1852 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34330 - http://osvdb.org/35520 - https://www.exploit-db.com/exploits/3935
CVE ID: CVE-2007-2744 State: PUBLISHED Published: 2007-05-17T19:00:00 Last Updated: 2024-08-07T13:49:57.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the PrecisionID Barcode 1.9 ActiveX control in PrecisionID_Barcode.dll allows remote attackers to cause a denial of service (Internet Explorer 6 crash), and possibly execute arbitrary code, via a long argument to the SaveBarCode method. NOTE: this issue might overlap CVE-2007-2657. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25253 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34339 - http://osvdb.org/36024 - http://www.securityfocus.com/
53 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34339 - http://osvdb.org/36024 - http://www.securityfocus.com/bid/24010 - http://www.shinnai.altervista.org/viewtopic.php?id=42&t_id=18 - http://moaxb.blogspot.com/2007/05/moaxb-16-ie-6-precisionid-barcode.html
CVE ID: CVE-2007-2745 State: PUBLISHED Published: 2007-05-17T20:00:00 Last Updated: 2024-08-07T13:49:57.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in printcal.pl in vDesk Webmail 4.03 allows remote attackers to inject arbitrary web script or HTML via the type parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24022 - http://pridels-team.blogspot.com/2007/05/vdeck-webmail-system-xss-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34358 - http://osvdb.org/37922
CVE ID: CVE-2007-2746 State: PUBLISHED Published: 2007-05-17T20:00:00 Last Updated: 2024-08-07T13:49:57.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: The viewList function in lib/WebGUI/Asset/Wobject/DataForm.pm in Plain Black WebGUI before 7.3.14 does not properly use data structures containing privilege information, which allows remote authenticated users to obtain sensitive information or possibly have other unspecified impact. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25355 - http://www.plainblack.com/bugs/tracker/dataform-security-bug - http://osvdb.org/36566 - http://www.vupen.com/english/advisories/2007/1840
CVE ID: CVE-2007-2747 State: PUBLISHED Published: 2007-05-17T20:00:00 Last Updated: 2024-08-07T13:49:57.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in rdw_helpers.py in rdiffWeb before 0.3.5.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the path parameter to the /browse URI. Additional Analyst Notes: - CVE Program Container: References: - https://lists.berlios.de/pipermail/rdiffweb-discuss/2007-March/000100.html - http://www.rdiffweb.org/wiki/index.php?title=Roadmap#Version_0.3.5.1 - http://www.securityfocus.com/bid/24092 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33734 - http://osvdb.org/36519 - http
securityfocus.com/bid/24092 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33734 - http://osvdb.org/36519 - http://www.vupen.com/english/advisories/2007/1775 - http://secunia.com/advisories/25368
CVE ID: CVE-2007-2748 State: PUBLISHED Published: 2007-05-17T20:00:00 Last Updated: 2024-08-07T13:49:57.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: The substr_count function in PHP 5.2.1 and earlier allows context-dependent attackers to obtain sensitive information via unspecified vectors, a different affected function than CVE-2007-1375. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34730 - http://www.attrition.org/pipermail/vim/2007-May/001621.html - http://us2.php.net/releases/5_2_2.php - http://www.mandriva.com/security/advisories?name=MDKSA-2007:187 - http://www.securityfocus.com/bid/24012 - http://secunia.com/advisories/26895 - ht
urity/advisories?name=MDKSA-2007:187 - http://www.securityfocus.com/bid/24012 - http://secunia.com/advisories/26895 - http://www.novell.com/linux/security/advisories/2007_15_sr.html
CVE ID: CVE-2007-2749 State: PUBLISHED Published: 2007-05-17T20:00:00 Last Updated: 2024-08-07T13:49:57.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in question.php in FAQEngine 4.16.03 and earlier allows remote attackers to execute arbitrary SQL commands via the questionref parameter in a display action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24032 - http://secunia.com/advisories/25297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34355 - http://osvdb.org/36091 - https://www.exploit-db.com/exploits/3943
CVE ID: CVE-2007-2750 State: PUBLISHED Published: 2007-05-17T20:00:00 Last Updated: 2024-08-07T13:49:57.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in print.php in SimpNews 2.40.01 and earlier allows remote attackers to execute arbitrary SQL commands via the newsnr parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1856 - http://osvdb.org/36090 - http://secunia.com/advisories/25296 - http://www.securityfocus.com/bid/24028 - https://www.exploit-db.com/exploits/3942 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34356
CVE ID: CVE-2007-2751 State: PUBLISHED Published: 2007-05-17T20:00:00 Last Updated: 2024-08-07T13:49:57.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in PHPGlossar 0.8 allow remote attackers to execute arbitrary PHP code via a URL in the format_menue parameter to (1) admin/inc/change_action.php or (2) admin/inc/add.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3941 - http://www.vupen.com/english/advisories/2007/1855 - http://osvdb.org/37925 - http://www.securityfocus.com/bid/24024 - http://osvdb.org/37926 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34357
CVE ID: CVE-2007-2752 State: PUBLISHED Published: 2007-05-17T20:00:00 Last Updated: 2024-08-07T13:49:57.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in devami.asp in RunawaySoft Haber portal 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24018 - http://osvdb.org/36092 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34491 - http://www.vupen.com/english/advisories/2007/1853 - http://secunia.com/advisories/25304 - https://www.exploit-db.com/exploits/3936
CVE ID: CVE-2007-2753 State: PUBLISHED Published: 2007-05-17T20:00:00 Last Updated: 2024-08-07T13:49:57.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: RunawaySoft Haber portal 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for data/xice.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41976 - https://www.exploit-db.com/exploits/3936
CVE ID: CVE-2007-2754 State: PUBLISHED Published: 2007-05-17T22:00:00 Last Updated: 2024-08-07T13:49:57.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute arbitrary code via a crafted TTF image with a negative n_points value, which leads to an integer overflow and heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2229 - http://secunia.com/advisories/26129 - http://support.avaya.com/elmodocs2/security/ASA-2007-330.htm - http://secunia.com/advisories/25612 - https://issues.rpath.
tp://support.avaya.com/elmodocs2/security/ASA-2007-330.htm - http://secunia.com/advisories/25612 - https://issues.rpath.com/browse/RPL-1390 - http://www.vupen.com/english/advisories/2008/0049 - http://secunia.com/advisories/25894 - http://www.debian.org/security/2007/dsa-1334 - http://secunia.com/advisories/25386 - http://secunia.com/advisories/28298 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103171-1 - http://secunia.com/advisories/25705 - http://support.apple.com/kb/HT3549 - http://cvs.savannah.nongnu.org/viewvc/freetype2/src/truetype/ttgload.c?root=freetype&r1=1.177&r2=1.178 - http://www.debian.org/security/2007/dsa-1302 - http://osvdb.org/36509 - http://www.novell.com/lin
pe&r1=1.177&r2=1.178 - http://www.debian.org/security/2007/dsa-1302 - http://osvdb.org/36509 - http://www.novell.com/linux/security/advisories/2007_41_freetype2.html - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01401.html - http://secunia.com/advisories/35074 - http://secunia.com/advisories/26305 - http://www.securityfocus.com/archive/1/471286/30/6180/threaded - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01316.html - http://www.securityfocus.com/bid/24074 - http://www.redhat.com/support/errata/RHSA-2009-1062.html - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://secunia.com/advisories/25463 - http://www.mandr
sts.apple.com/archives/security-announce/2009/May/msg00002.html - http://secunia.com/advisories/25463 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:121 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200033-1 - http://www.redhat.com/support/errata/RHSA-2007-0403.html - http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html - http://secunia.com/advisories/25353 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=240200 - http://secunia.com/advisories/30161 - http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml - http://www.gentoo.org/security/en/glsa/glsa-200707-02.xml - http://www.trustix.org/errata/2007/0019/ - https://bugzilla.redhat.com
.gentoo.org/security/en/glsa/glsa-200707-02.xml - http://www.trustix.org/errata/2007/0019/ - https://bugzilla.redhat.com/show_bug.cgi?id=502565 - http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.018.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102967-1 - http://lists.gnu.org/archive/html/freetype-devel/2007-04/msg00041.html - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://secunia.com/advisories/25808 - http://www.gentoo.org/security/en/glsa/glsa-200705-22.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5532 - http://www.vupen.com/english/advisories/2009/1297 - http://secunia.com/advisories/25609 - http:/
tre.oval%3Adef%3A5532 - http://www.vupen.com/english/advisories/2009/1297 - http://secunia.com/advisories/25609 - http://secunia.com/advisories/35233 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11325 - http://secunia.com/advisories/35200 - http://secunia.com/advisories/25350 - ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc - http://www.ubuntu.com/usn/usn-466-1 - http://www.vupen.com/english/advisories/2007/1894 - http://www.redhat.com/support/errata/RHSA-2009-0329.html - http://secunia.com/advisories/25905 - http://secunia.com/advisories/35204 - http://secunia.com/advisories/25654 - http://secunia.com/advisories/25483 - h
05 - http://secunia.com/advisories/35204 - http://secunia.com/advisories/25654 - http://secunia.com/advisories/25483 - http://www.securitytracker.com/id?1018088 - http://www.securityfocus.com/archive/1/469463/100/200/threaded
CVE ID: CVE-2007-2755 State: PUBLISHED Published: 2007-05-17T23:00:00 Last Updated: 2024-08-07T13:49:57.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PrecisionID Barcode 1.9 ActiveX control in PrecisionID_Barcode.dll, when Internet Explorer 6 is used, allows remote attackers to overwrite arbitrary files via a full pathname to the SaveToFile function, a different vulnerability than CVE-2007-2744. Additional Analyst Notes: - CVE Program Container: References: - http://moaxb.blogspot.com/2007/05/moaxb-16-bonus-ie-6-precisionid-barcode.html - http://osvdb.org/37957 - http://www.securityfocus.com/bid/24014 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34337 - https:
org/37957 - http://www.securityfocus.com/bid/24014 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34337 - https://www.exploit-db.com/exploits/3938 - http://www.shinnai.altervista.org/viewtopic.php?id=42&t_id=18
CVE ID: CVE-2007-2756 State: PUBLISHED Published: 2007-05-18T18:00:00 Last Updated: 2024-08-07T13:49:57.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service (CPU consumption) via a crafted PNG image with truncated data, which causes an infinite loop in the png_read_info function in libpng. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26231 - http://osvdb.org/36643 - http://www.securitytracker.com/id?1018187 - http://secunia.com/advisories/29157 - http://secunia.com/advisories/25658 - http://secunia.com/advisories/27110 - http://se
p://secunia.com/advisories/29157 - http://secunia.com/advisories/25658 - http://secunia.com/advisories/27110 - http://secunia.com/advisories/25590 - http://secunia.com/advisories/26048 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34420 - http://secunia.com/advisories/25362 - http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.020.html - http://secunia.com/advisories/25657 - https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00354.html - http://secunia.com/advisories/25855 - http://secunia.com/advisories/26967 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:122 - http://www.vupen.com/english/advisories/2007/2016 - http://security.gentoo.or
/security/advisories?name=MDKSA-2007:122 - http://www.vupen.com/english/advisories/2007/2016 - http://security.gentoo.org/glsa/glsa-200805-13.xml - http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2007:123 - http://www.securityfocus.com/bid/24089 - http://www.libgd.org/ReleaseNote020035 - http://security.gentoo.org/glsa/glsa-200708-05.xml - http://secunia.com/advisories/30168 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:124 - http://www.vupen.com/english/advisories/2007/1904 - http://secunia.com/advisories/26930 - http://osvdb.org/35788 - https://www.redhat.com/archives/fedora-package-announce/2007-September/m
com/advisories/26930 - http://osvdb.org/35788 - https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00397.html - http://www.vupen.com/english/advisories/2007/2336 - http://rhn.redhat.com/errata/RHSA-2007-0889.html - http://www.trustix.org/errata/2007/0023/ - http://secunia.com/advisories/25353 - http://www.vupen.com/english/advisories/2007/3386 - http://bugs.libgd.org/?do=details&task_id=86 - http://www.trustix.org/errata/2007/0019/ - http://secunia.com/advisories/27037 - http://www.novell.com/linux/security/advisories/2007_13_sr.html - http://secunia.com/advisories/25378 - http://secunia.com/advisories/27545 - http://security.gentoo.org/glsa/glsa-200711-34.xml - http:/
com/advisories/25378 - http://secunia.com/advisories/27545 - http://security.gentoo.org/glsa/glsa-200711-34.xml - http://support.avaya.com/elmodocs2/security/ASA-2007-449.htm - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.482863 - http://secunia.com/advisories/25646 - http://www.redhat.com/support/errata/RHSA-2008-0146.html - http://www.php.net/releases/5_2_3.php - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 - https://issues.rpath.com/browse/RPL-1394 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 - http://secunia.com/advisories/25535 - http://www.mandriva.com/security/advisor