Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-0954 State: PUBLISHED Published: 2007-02-15T02:00:00 Last Updated: 2024-08-07T12:34:21.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: MOHA Chat 0.1b7 and earlier does not require authentication for use of the plug in API, which has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://mohachat.sourceforge.net/download/release_notes/#0.1b8 - http://www.vupen.com/english/advisories/2007/0599 - http://osvdb.org/31934
CVE ID: CVE-2007-0955 State: PUBLISHED Published: 2007-02-15T02:00:00 Last Updated: 2024-08-07T12:34:21.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NTLM_UnPack_Type3 function in MENTLM.dll in MailEnable Professional 2.35 and earlier allows remote attackers to cause a denial of service (application crash) via certain base64-encoded data following an AUTHENTICATE NTLM command to the imap port (143/tcp), which results in an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33195 - http://www.vupen.com/english/advisories/2007/0614 - http://archives.neohapsis.com/archives/fulldisclosure/2007-02/0321.html - http://archives
english/advisories/2007/0614 - http://archives.neohapsis.com/archives/fulldisclosure/2007-02/0321.html - http://archives.neohapsis.com/archives/fulldisclosure/2007-02/0333.html - http://secunia.com/advisories/24139 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32482 - http://securityreason.com/securityalert/2249 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052427.html
CVE ID: CVE-2007-0956 State: PUBLISHED Published: 2007-04-06T01:00:00 Last Updated: 2024-08-07T12:34:21.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a '-' character, a similar issue to CVE-2007-0882. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1218 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10046 - ftp://patches.sgi.com/support/free/security/advisories/20070401-01-P.asc - http://www.securityfocus.com/archive/1/
046 - ftp://patches.sgi.com/support/free/security/advisories/20070401-01-P.asc - http://www.securityfocus.com/archive/1/464590/100/0/threaded - http://secunia.com/advisories/24706 - http://secunia.com/advisories/24740 - http://www.redhat.com/support/errata/RHSA-2007-0095.html - http://www.kb.cert.org/vuls/id/220816 - http://secunia.com/advisories/24786 - http://www.us-cert.gov/cas/techalerts/TA07-093B.html - http://www.securityfocus.com/archive/1/464814/30/7170/threaded - http://www.debian.org/security/2007/dsa-1276 - http://secunia.com/advisories/24735 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33414 - http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2007-001-telnetd.txt -
force.ibmcloud.com/vulnerabilities/33414 - http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2007-001-telnetd.txt - http://www.securitytracker.com/id?1017848 - http://www.securityfocus.com/bid/23281 - http://secunia.com/advisories/24750 - http://secunia.com/advisories/24817 - http://secunia.com/advisories/24757 - http://secunia.com/advisories/24755 - http://www.vupen.com/english/advisories/2007/1249 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102867-1 - http://lists.suse.com/archive/suse-security-announce/2007-Apr/0001.html - http://secunia.com/advisories/24785 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:077 - http://www.ubuntu.com/usn/usn-449-1 - http://
/24785 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:077 - http://www.ubuntu.com/usn/usn-449-1 - http://secunia.com/advisories/24736 - http://www.securityfocus.com/archive/1/464666/100/0/threaded - http://security.gentoo.org/glsa/glsa-200704-02.xml
CVE ID: CVE-2007-0957 State: PUBLISHED Published: 2007-04-06T01:00:00 Last Updated: 2024-08-07T12:34:21.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via crafted arguments, possibly involving certain format string specifiers. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10757 -
Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10757 - http://www.vupen.com/english/advisories/2007/1218 - http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2007-002-syslog.txt - http://www.securityfocus.com/archive/1/464592/100/0/threaded - ftp://patches.sgi.com/support/free/security/advisories/20070401-01-P.asc - http://secunia.com/advisories/24966 - http://secunia.com/advisories/24706 - http://secunia.com/advisories/24798 - http://secunia.com/advisories/24740 - http://www.redhat.com/support/errata/RHSA-2007-0095.html - http://www.vupen.com/english/advisories/2007/1983 - http://secunia.com/advisories/24786 - http://sunsol
2007-0095.html - http://www.vupen.com/english/advisories/2007/1983 - http://secunia.com/advisories/24786 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102930-1 - http://docs.info.apple.com/article.html?artnum=305391 - http://www.us-cert.gov/cas/techalerts/TA07-093B.html - http://www.securityfocus.com/archive/1/464814/30/7170/threaded - http://www.debian.org/security/2007/dsa-1276 - http://secunia.com/advisories/24735 - http://www.securityfocus.com/bid/23285 - http://www.us-cert.gov/cas/techalerts/TA07-109A.html - http://secunia.com/advisories/24750 - http://www.vupen.com/english/advisories/2007/1250 - http://secunia.com/advisories/24817 - http://secunia.com/advisories/24757 - ht
.vupen.com/english/advisories/2007/1250 - http://secunia.com/advisories/24817 - http://secunia.com/advisories/24757 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33411 - http://www.kb.cert.org/vuls/id/704024 - http://www.securitytracker.com/id?1017849 - http://lists.suse.com/archive/suse-security-announce/2007-Apr/0001.html - http://secunia.com/advisories/24785 - http://secunia.com/advisories/25464 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:077 - http://www.ubuntu.com/usn/usn-449-1 - http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html - http://www.vupen.com/english/advisories/2007/1470 - http://secunia.com/advisories/24736 - http://www.securit
0001.html - http://www.vupen.com/english/advisories/2007/1470 - http://secunia.com/advisories/24736 - http://www.securityfocus.com/archive/1/464666/100/0/threaded - http://security.gentoo.org/glsa/glsa-200704-02.xml
CVE ID: CVE-2007-0958 State: PUBLISHED Published: 2007-02-15T18:00:00 Last Updated: 2024-08-07T12:34:21.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel 2.6.x before 2.6.20 allows local users to read unreadable binaries by using the interpreter (PT_INTERP) functionality and triggering a core dump, a variant of CVE-2004-1073. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2007/dsa-1286 - http://www.redhat.com/support/errata/RHSA-2007-0099.html - http://www.isec.pl/vulnerabilities/isec-0017-binfmt_elf.txt - http://www.mandriva.com/security/advisories?name=MDKSA-2007:078 - http://secunia.com/advisories/26289 - http://w
f.txt - http://www.mandriva.com/security/advisories?name=MDKSA-2007:078 - http://secunia.com/advisories/26289 - http://www.ubuntu.com/usn/usn-451-1 - http://secunia.com/advisories/24777 - http://secunia.com/advisories/25838 - http://www.securityfocus.com/bid/22903 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10343 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20 - http://secunia.com/advisories/24482 - http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm - http://secunia.com/advisories/25078 - http://secunia.com/advisories/24752 - http://www.debian.org/security/2007/dsa-1304 - http://secunia.com/advisories/25714 - http://www.ma
om/advisories/24752 - http://www.debian.org/security/2007/dsa-1304 - http://secunia.com/advisories/25714 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:060 - http://osvdb.org/35930 - http://rhn.redhat.com/errata/RHSA-2007-0488.html
CVE ID: CVE-2007-0959 State: PUBLISHED Published: 2007-02-16T00:00:00 Last Updated: 2024-08-07T12:34:21.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco PIX 500 and ASA 5500 Series Security Appliances 7.2.2, when configured to inspect certain TCP-based protocols, allows remote attackers to cause a denial of service (device reboot) via malformed TCP packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0608 - http://www.securitytracker.com/id?1017651 - http://osvdb.org/33062 - http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml - https://exchange.xforce.ibmcloud.com/vulnerabi
sco.com/en/US/products/products_security_advisory09186a00807e2484.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/32488 - http://www.securityfocus.com/bid/22561 - http://www.securityfocus.com/bid/22562 - http://secunia.com/advisories/24160 - http://www.securitytracker.com/id?1017652
CVE ID: CVE-2007-0960 State: PUBLISHED Published: 2007-02-16T00:00:00 Last Updated: 2024-08-07T12:34:21.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco PIX 500 and ASA 5500 Series Security Appliances 7.2.2, when configured to use the LOCAL authentication method, allows remote authenticated users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0608 - http://www.securitytracker.com/id?1017651 - http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml - http://secunia.com/advisories/24179 - http://www.securityfoc
products/products_security_advisory09186a00807e2484.shtml - http://secunia.com/advisories/24179 - http://www.securityfocus.com/bid/22561 - http://osvdb.org/33063 - http://www.securityfocus.com/bid/22562 - http://secunia.com/advisories/24160 - http://www.securitytracker.com/id?1017652 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32489
CVE ID: CVE-2007-0961 State: PUBLISHED Published: 2007-02-16T00:00:00 Last Updated: 2024-08-07T12:34:21.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco PIX 500 and ASA 5500 Series Security Appliances 6.x before 6.3(5.115), 7.0 before 7.0(5.2), and 7.1 before 7.1(2.5), and the FWSM 3.x before 3.1(3.24), when the "inspect sip" option is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed SIP packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0608 - http://secunia.com/advisories/24180 - http://osvdb.org/33054 - https://exchange.xforce.ibmcloud.com/vulnerabilities/325
http://secunia.com/advisories/24180 - http://osvdb.org/33054 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32501 - http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml - http://www.kb.cert.org/vuls/id/430969 - http://securitytracker.com/id?1017651 - http://secunia.com/advisories/24179 - http://www.securityfocus.com/bid/22561 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32487 - http://www.securityfocus.com/bid/22562 - http://secunia.com/advisories/24160 - http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml - http://www.securitytracker.com/id?1017652
CVE ID: CVE-2007-0962 State: PUBLISHED Published: 2007-02-16T00:00:00 Last Updated: 2024-08-07T12:34:21.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.0(4.14) and 7.1 before 7.1(2.1), and the FWSM 2.x before 2.3(4.12) and 3.x before 3.1(3.24), when "inspect http" is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed HTTP traffic. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0608 - http://secunia.com/advisories/24180 - http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml - h
/secunia.com/advisories/24180 - http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml - http://securitytracker.com/id?1017651 - http://www.securityfocus.com/bid/22561 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32486 - http://osvdb.org/33055 - http://www.securityfocus.com/bid/22562 - http://secunia.com/advisories/24160 - http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml - http://www.securitytracker.com/id?1017652
CVE ID: CVE-2007-0963 State: PUBLISHED Published: 2007-02-16T00:00:00 Last Updated: 2024-08-07T12:34:21.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco Firewall Services Module (FWSM) 3.x before 3.1(3.3), when set to log at the "debug" level, allows remote attackers to cause a denial of service (device reboot) by sending packets that are not of a particular protocol such as TCP or UDP, which triggers the reboot during generation of Syslog message 710006. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0609 - http://www.securityfocus.com/bid/22561 - http://secunia.com/advisories/24
//www.vupen.com/english/advisories/2007/0609 - http://www.securityfocus.com/bid/22561 - http://secunia.com/advisories/24172 - http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml
CVE ID: CVE-2007-0964 State: PUBLISHED Published: 2007-02-16T00:00:00 Last Updated: 2024-08-07T12:34:21.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco FWSM 3.x before 3.1(3.18), when authentication is configured to use "aaa authentication match" or "aaa authentication include", allows remote attackers to cause a denial of service (device reboot) via a malformed HTTPS request. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0609 - http://www.securityfocus.com/bid/22561 - http://secunia.com/advisories/24172 - http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml
CVE ID: CVE-2007-0965 State: PUBLISHED Published: 2007-02-16T00:00:00 Last Updated: 2024-08-07T12:34:21.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco FWSM 3.x before 3.1(3.2), when authentication is configured to use "aaa authentication match" or "aaa authentication include", allows remote attackers to cause a denial of service (device reboot) via a long HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0609 - http://www.securityfocus.com/bid/22561 - http://secunia.com/advisories/24172 - http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml
CVE ID: CVE-2007-0966 State: PUBLISHED Published: 2007-02-16T00:00:00 Last Updated: 2024-08-07T12:34:21.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Firewall Services Module (FWSM) 3.x before 3.1(3.11), when the HTTPS server is enabled, allows remote attackers to cause a denial of service (device reboot) via certain HTTPS traffic. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32497 - http://www.vupen.com/english/advisories/2007/0609 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32513 - http://www.securityfocus.com/bid/22561 - http://secunia.com/advisories/24172 - http://www.cisco.com/en/
bilities/32513 - http://www.securityfocus.com/bid/22561 - http://secunia.com/advisories/24172 - http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml
CVE ID: CVE-2007-0967 State: PUBLISHED Published: 2007-02-16T00:00:00 Last Updated: 2024-08-07T12:34:21.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Firewall Services Module (FWSM) 3.x before 3.1(3.1) allows remote attackers to cause a denial of service (device reboot) via malformed SNMP requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0609 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32515 - http://www.securityfocus.com/bid/22561 - http://secunia.com/advisories/24172 - http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml
CVE ID: CVE-2007-0968 State: PUBLISHED Published: 2007-02-16T00:00:00 Last Updated: 2024-08-07T12:34:21.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco Firewall Services Module (FWSM) before 2.3(4.7) and 3.x before 3.1(3.1) causes the access control entries (ACE) in an ACL to be improperly evaluated, which allows remote authenticated users to bypass intended certain ACL protections. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0609 - http://www.securityfocus.com/bid/22561 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32521 - http://www.securitytracker.com/id?1017650 -
om/bid/22561 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32521 - http://www.securitytracker.com/id?1017650 - http://secunia.com/advisories/24172 - http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml
CVE ID: CVE-2007-0969 State: PUBLISHED Published: 2007-02-16T01:00:00 Last Updated: 2024-08-07T12:34:21.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WebTester 5.0.20060927 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to POST parameters to multiple files. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33202 - http://www.securityfocus.com/archive/1/460078/100/0/threaded - http://secunia.com/advisories/24157 - http://www.securityfocus.com/bid/22559 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32492 - http://www.vupen.
http://www.securityfocus.com/bid/22559 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32492 - http://www.vupen.com/english/advisories/2007/0633 - http://securityreason.com/securityalert/2261
CVE ID: CVE-2007-0970 State: PUBLISHED Published: 2007-02-16T01:00:00 Last Updated: 2024-08-07T12:34:21.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in WebTester 5.0.20060927 and earlier allow remote attackers to execute arbitrary SQL commands via the testID parameter to directions.php, and unspecified parameters to other files that accept GET or POST input. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/460078/100/0/threaded - http://osvdb.org/33203 - http://secunia.com/advisories/24157 - http://www.securityfocus.com/bid/22559 - http://osvdb.org/33204 - https://exchange.xforce.
ecunia.com/advisories/24157 - http://www.securityfocus.com/bid/22559 - http://osvdb.org/33204 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32490 - http://www.vupen.com/english/advisories/2007/0633 - http://securityreason.com/securityalert/2261
CVE ID: CVE-2007-0971 State: PUBLISHED Published: 2007-02-16T01:00:00 Last Updated: 2024-08-07T12:34:21.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Jupiter CMS 1.1.5 allow remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header and certain other HTTP headers, which set the ip variable that is used in SQL queries performed by index.php and certain other PHP scripts. NOTE: the attack vector might involve _SERVER. Additional Analyst Notes: - CVE Program Container: References: - http://mgsdl.free.fr/advisories/12070214.txt - http://osvdb.org/33727 - https://www.exploit-db.com/exploits/3310 - http://www.securit
free.fr/advisories/12070214.txt - http://osvdb.org/33727 - https://www.exploit-db.com/exploits/3310 - http://www.securityfocus.com/bid/22560 - http://www.securityfocus.com/archive/1/460076/100/0/threaded - http://www.securityfocus.com/archive/1/460100/100/0/threaded - http://www.acid-root.new.fr/advisories/12070214.txt
CVE ID: CVE-2007-0972 State: PUBLISHED Published: 2007-02-16T01:00:00 Last Updated: 2024-08-07T12:34:21.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in modules/emoticons.php in Jupiter CMS 1.1.5 allows remote attackers to upload arbitrary files by modifying the HTTP request to send an image content type, and to omit is_guest and is_user parameters. NOTE: this issue might be related to CVE-2006-4875. Additional Analyst Notes: - CVE Program Container: References: - http://mgsdl.free.fr/advisories/12070214.txt - http://www.securityfocus.com/bid/22560 - https://www.exploit-db.com/exploits/3311 - http://www.securityfocus.com/archive/1/4600
www.securityfocus.com/bid/22560 - https://www.exploit-db.com/exploits/3311 - http://www.securityfocus.com/archive/1/460076/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/32517 - http://www.securityfocus.com/archive/1/460100/100/0/threaded - http://osvdb.org/33728 - http://www.acid-root.new.fr/advisories/12070214.txt
CVE ID: CVE-2007-0973 State: PUBLISHED Published: 2007-02-16T01:00:00 Last Updated: 2024-08-07T12:34:21.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Jupiter CMS 1.1.5 allow remote attackers to inject arbitrary web script or HTML via the Referer HTTP header and certain other HTTP headers, which are displayed without proper sanitization when an administrator performs a Logged Guest action. Additional Analyst Notes: - CVE Program Container: References: - http://mgsdl.free.fr/advisories/12070214.txt - http://www.securityfocus.com/bid/22560 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32518 - http://w
214.txt - http://www.securityfocus.com/bid/22560 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32518 - http://www.securityfocus.com/archive/1/460076/100/0/threaded - http://www.securityfocus.com/archive/1/460100/100/0/threaded - http://osvdb.org/33729 - http://www.acid-root.new.fr/advisories/12070214.txt
CVE ID: CVE-2007-0974 State: PUBLISHED Published: 2007-02-16T01:00:00 Last Updated: 2024-08-07T12:43:21.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Ian Bezanson DropBox before 0.0.4 beta have unknown impact and attack vectors, possibly related to a variable extraction vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/forum/forum.php?forum_id=660819 - http://osvdb.org/35704 - http://www.vupen.com/english/advisories/2007/0598
CVE ID: CVE-2007-0975 State: PUBLISHED Published: 2007-02-16T01:00:00 Last Updated: 2024-08-07T12:43:21.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Variable extraction vulnerability in Ian Bezanson Apache Stats before 0.0.3 beta allows attackers to overwrite critical variables, with unknown impact, when the extract function is used on the _REQUEST superglobal array. Additional Analyst Notes: - CVE Program Container: References: - http://superb-east.dl.sourceforge.net/sourceforge/apachestats/apacheStats_0.0.3Beta.tar.bz2 - http://sourceforge.net/forum/forum.php?forum_id=660919 - http://www.vupen.com/english/advisories/2007/0598