Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-4918 State: PUBLISHED Published: 2007-09-17T17:00:00 Last Updated: 2024-08-07T15:08:33.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in classes/gelato.class.php in Gelato allows remote attackers to execute arbitrary SQL commands via the post parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26785 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36617 - http://www.securityfocus.com/bid/25677 - http://securityreason.com/securityalert/3148 - http://osvdb.org/37087 - http://www.securityfocus.com/archive/1/479466/100/0/threaded - http://www.vupen.com/english/ad
http://osvdb.org/37087 - http://www.securityfocus.com/archive/1/479466/100/0/threaded - http://www.vupen.com/english/advisories/2007/3179 - https://www.exploit-db.com/exploits/4410
CVE ID: CVE-2007-4919 State: PUBLISHED Published: 2007-09-17T17:00:00 Last Updated: 2024-08-07T15:08:34.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in JBlog 1.0 allow (1) remote attackers to execute arbitrary SQL commands via the id parameter to index.php, and allow (2) remote authenticated administrators to execute arbitrary SQL commands via the id parameter to admin/modifpost.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25669 - https://www.exploit-db.com/exploits/4408 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36602 - http://www.vupen.com/english/advisories/2007/
ploits/4408 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36602 - http://www.vupen.com/english/advisories/2007/3178
CVE ID: CVE-2007-4920 State: PUBLISHED Published: 2007-09-17T17:00:00 Last Updated: 2024-08-07T15:08:33.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in soporte_derecha_w.php in PHP Webquest 2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id_actividad parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36605 - http://secunia.com/advisories/26821 - https://www.exploit-db.com/exploits/4407 - http://www.vupen.com/english/advisories/2007/3177 - http://www.securityfocus.com/bid/25668 - http://www.osvdb.org/37084
CVE ID: CVE-2007-4921 State: PUBLISHED Published: 2007-09-17T17:00:00 Last Updated: 2024-08-07T15:08:33.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in _includes/settings.inc.php in Ajax File Browser 3 Beta allows remote attackers to execute arbitrary PHP code via a URL in the approot parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3175 - http://osvdb.org/38970 - https://www.exploit-db.com/exploits/4405 - http://arfis.wordpress.com/2007/09/14/rfi-02-ajax-file-browser/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/36604
CVE ID: CVE-2007-4922 State: PUBLISHED Published: 2007-09-17T17:00:00 Last Updated: 2024-08-07T15:08:33.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in play.php in the jeuxflash 1.0 module for KwsPHP allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a play ac action to index.php. NOTE: some details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4400 - http://www.vupen.com/english/advisories/2007/3172 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36601 - http://www.securityfocus.com/bid/25658
CVE ID: CVE-2007-4923 State: PUBLISHED Published: 2007-09-17T17:00:00 Last Updated: 2024-08-07T15:08:34.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin.joomlaradiov5.php in the Joomla Radio 5 (com_joomlaradiov5) component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25664 - http://secunia.com/advisories/26809 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36603 - http://www.vupen.com/english/advisories/2007/3173 - https://www.exploit-db.com/exploits/4401 -
m/vulnerabilities/36603 - http://www.vupen.com/english/advisories/2007/3173 - https://www.exploit-db.com/exploits/4401 - http://www.osvdb.org/37028
CVE ID: CVE-2007-4924 State: PUBLISHED Published: 2007-10-08T21:00:00 Last Updated: 2024-08-07T15:08:34.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to cause a denial of service (crash) via an invalid Content-Length header field in Session Initiation Protocol (SIP) packets, which causes a \0 byte to be written to an "attacker-controlled address." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27118 - http://secunia.com/advisories/27271 - http://www.securitytracker.com/id?1018776 - http://www.sec
.com/advisories/27118 - http://secunia.com/advisories/27271 - http://www.securitytracker.com/id?1018776 - http://www.securityfocus.com/bid/25955 - http://secunia.com/advisories/27129 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:205 - https://bugzilla.redhat.com/show_bug.cgi?id=296371 - http://secunia.com/advisories/28380 - http://osvdb.org/41637 - http://www.redhat.com/support/errata/RHSA-2007-0957.html - http://mail.gnome.org/archives/ekiga-list/2007-September/msg00103.html - http://www.ubuntu.com/usn/usn-562-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11398 - http://www.s21sec.com/avisos/s21sec-037-en.txt - http://www.security
ch/definition/oval%3Aorg.mitre.oval%3Adef%3A11398 - http://www.s21sec.com/avisos/s21sec-037-en.txt - http://www.securityfocus.com/archive/1/482120/30/4500/threaded - http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html - http://www.vupen.com/english/advisories/2007/3413 - http://www.vupen.com/english/advisories/2007/3414 - https://www.exploit-db.com/exploits/9240 - http://secunia.com/advisories/27524 - http://openh323.cvs.sourceforge.net/openh323/opal/src/sip/sippdu.cxx?r1=2.83.2.19&r2=2.83.2.20 - http://secunia.com/advisories/27128
CVE ID: CVE-2007-4925 State: PUBLISHED Published: 2007-09-18T18:00:00 Last Updated: 2024-08-07T15:17:26.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ewirePC_Decrypt function in ewirepcfunctions.php in eWire Payment Client (ePC) 1.60 and 1.70 allows remote attackers to execute arbitrary commands via shell metacharacters in the paymentinfo parameter to simplePHPLinux/3payment_receive.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40523 - http://www.fortconsult.net/images/pdf/advisory_feb2007.pdf - http://secunia.com/advisories/26780 - http://www.vupen.com/english/advisories/2007/3183 - http://www.securityfocus.com/bid/25683
CVE ID: CVE-2007-4926 State: PUBLISHED Published: 2007-09-18T18:00:00 Last Updated: 2024-08-07T15:17:26.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AXIS 207W camera uses a base64-encoded cleartext username and password for authentication, which allows remote attackers to obtain sensitive information by sniffing the wireless network or by leveraging unspecified other vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/479600/100/0/threaded - http://securityreason.com/securityalert/3145 - http://airscanner.com/security/07080701_axis.htm - http://www.securitytracker.com/id?1018699 - http://www.informit.com/arti
p://airscanner.com/security/07080701_axis.htm - http://www.securitytracker.com/id?1018699 - http://www.informit.com/articles/article.aspx?p=1016102
CVE ID: CVE-2007-4927 State: PUBLISHED Published: 2007-09-18T18:00:00 Last Updated: 2024-08-07T15:17:26.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: axis-cgi/buffer/command.cgi on the AXIS 207W camera allows remote authenticated users to cause a denial of service (reboot) via many requests with unique buffer names in the buffername parameter in a start action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/479600/100/0/threaded - http://securityreason.com/securityalert/3145 - http://www.securityfocus.com/bid/25678 - http://airscanner.com/security/07080701_axis.htm - http://www.securitytracker.com/id?1018699 - http://
s.com/bid/25678 - http://airscanner.com/security/07080701_axis.htm - http://www.securitytracker.com/id?1018699 - http://www.informit.com/articles/article.aspx?p=1016102 - http://secunia.com/advisories/26831
CVE ID: CVE-2007-4928 State: PUBLISHED Published: 2007-09-18T18:00:00 Last Updated: 2024-08-07T15:17:26.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AXIS 207W camera stores a WEP or WPA key in cleartext in the configuration file, which might allow local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/479600/100/0/threaded - http://securityreason.com/securityalert/3145 - http://airscanner.com/security/07080701_axis.htm - http://www.informit.com/articles/article.aspx?p=1016102
CVE ID: CVE-2007-4929 State: PUBLISHED Published: 2007-09-18T18:00:00 Last Updated: 2024-08-07T15:17:27.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 207W camera allow remote attackers to inject arbitrary web script or HTML via the camNo parameter to incl/image_incl.shtml, and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/479600/100/0/threaded - http://securityreason.com/securityalert/3145 - http://www.securityfocus.com/bid/25678 - http://airscanner.com/security/07080701_axis.htm - http://www.securitytracker.com/id?1018699 - ht
yfocus.com/bid/25678 - http://airscanner.com/security/07080701_axis.htm - http://www.securitytracker.com/id?1018699 - http://www.informit.com/articles/article.aspx?p=1016102 - http://secunia.com/advisories/26831
CVE ID: CVE-2007-4930 State: PUBLISHED Published: 2007-09-18T18:00:00 Last Updated: 2024-08-07T15:17:27.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 207W camera allow remote attackers to perform certain actions as administrators via (1) axis-cgi/admin/restart.cgi, (2) the user and sgrp parameters to axis-cgi/admin/pwdgrp.cgi in an add action, or (3) the server parameter to admin/restartMessage.shtml. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/479600/100/0/threaded - http://securityreason.com/securityalert/3145 - http://www.securityfocus.com/bi
cus.com/archive/1/479600/100/0/threaded - http://securityreason.com/securityalert/3145 - http://www.securityfocus.com/bid/25678 - http://airscanner.com/security/07080701_axis.htm - http://www.securitytracker.com/id?1018699 - http://www.informit.com/articles/article.aspx?p=1016102 - http://secunia.com/advisories/26831
CVE ID: CVE-2007-4931 State: PUBLISHED Published: 2007-09-18T18:00:00 Last Updated: 2024-08-07T15:17:27.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP System Management Homepage (SMH) for Windows, when used in conjunction with HP Version Control Agent or Version Control Repository Manager, leaves old OpenSSL software active after an OpenSSL update, which has unknown impact and attack vectors, probably related to previous vulnerabilities for OpenSSL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25675 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01164065 - http://securitytracker.com/id?1018696
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01164065 - http://securitytracker.com/id?1018696 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01164065 - http://osvdb.org/45941
CVE ID: CVE-2007-4932 State: PUBLISHED Published: 2007-09-18T18:00:00 Last Updated: 2024-08-07T15:17:26.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin.php in Shop-Script FREE 2.0 and earlier sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to access the admin panel. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40149 - http://secunia.com/advisories/26840 - http://www.securityfocus.com/bid/25695 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36646 - https://www.exploit-db.com/exploits/4419
CVE ID: CVE-2007-4933 State: PUBLISHED Published: 2007-09-18T18:00:00 Last Updated: 2024-08-07T15:17:27.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in includes/admin/sub/conf_appearence.php in Shop-Script FREE 2.0 and earlier allows remote attackers to inject arbitrary PHP code into cfg/appearence.inc.php via a save_appearence action in admin.php, as demonstrated with the (1) productscount, (2) colscount, and (3) darkcolor parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26840 - http://www.securityfocus.com/bid/25695 - https://www.exploit-db.com/exploits/4419
CVE ID: CVE-2007-4934 State: PUBLISHED Published: 2007-09-18T18:00:00 Last Updated: 2024-08-07T15:17:26.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code via a URL in the PHPFFL_FILE_ROOT parameter to (1) program_files/livedraft/livedraft.php or (2) program_files/livedraft/admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4406 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36606 - http://www.securityfocus.com/bid/25667 - http://osvdb.org/37086 - http://arfis.wordpress.com/2007/09/14/rfi-02-ph
6606 - http://www.securityfocus.com/bid/25667 - http://osvdb.org/37086 - http://arfis.wordpress.com/2007/09/14/rfi-02-phpffl-fantasy-football-league-manager/ - http://osvdb.org/37085 - http://www.vupen.com/english/advisories/2007/3176 - http://sourceforge.net/project/shownotes.php?release_id=539716&group_id=137531 - http://sourceforge.net/forum/forum.php?forum_id=735906 - http://secunia.com/advisories/26812
CVE ID: CVE-2007-4935 State: PUBLISHED Published: 2007-09-18T18:00:00 Last Updated: 2024-08-07T15:17:26.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code via a URL in the PHPFFL_FILE_ROOT parameter to (1) admin.php, (2) custom_pages.php, (3) draft.php, (4) faq.php, (5) leagues.php, (6) livedraft.php, (7) login.php, (8) my_team.php, (9) profile.php, (10) signup.php, (11) statistics.php, (12) transactions.php, (13) program_files/admin/custom_pages.php, or (14) program_files/common.php. NOTE: the program_files/livedraft/admin.php and program_files/livedraft/livedr
es.php, or (14) program_files/common.php. NOTE: the program_files/livedraft/admin.php and program_files/livedraft/livedraft.php vectors are covered by CVE-2007-4934. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39655 - http://osvdb.org/39656 - http://osvdb.org/39652 - http://arfis.wordpress.com/2007/09/14/rfi-02-phpffl-fantasy-football-league-manager/ - http://osvdb.org/39657 - http://www.vupen.com/english/advisories/2007/3176 - http://osvdb.org/39658 - http://sourceforge.net/project/shownotes.php?release_id=539716&group_id=137531 - http://osvdb.org/39660 - http://sourceforge.net/forum/forum.php?forum_id=735906 - http://osvdb.org/39659 - http://osvdb.org/
://osvdb.org/39660 - http://sourceforge.net/forum/forum.php?forum_id=735906 - http://osvdb.org/39659 - http://osvdb.org/39654 - http://secunia.com/advisories/26812 - http://osvdb.org/39653 - http://osvdb.org/39651 - http://osvdb.org/39650
CVE ID: CVE-2007-4936 State: PUBLISHED Published: 2007-09-18T19:00:00Z Last Updated: 2024-09-16T16:54:05.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Office Efficiencies SafeSquid 4.1.x has unknown impact and attack vectors, related to a "serious security flaw," possibly specific to Linux. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25649 - http://www.safesquid.com/html/viewtopic.php?t=2322
CVE ID: CVE-2007-4937 State: PUBLISHED Published: 2007-09-18T19:00:00 Last Updated: 2024-08-07T15:17:26.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin name and MD5 password hash via a direct request for base/usr/0.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36587 - http://securityreason.com/securityalert/3147 - http://www.securityfocus.com/bid/25652 - http://www.securityfocus.com/archive/1/479194/100/0/threaded - http://secunia.com/advisories/26805
CVE ID: CVE-2007-4938 State: PUBLISHED Published: 2007-09-18T19:00:00 Last Updated: 2024-08-07T15:17:27.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25648 - http://securityreason.com/securityalert/3144 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36581 - http://www.s
http://securityreason.com/securityalert/3144 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36581 - http://www.securityfocus.com/archive/1/479222/100/0/threaded - http://secunia.com/advisories/27016 - http://osvdb.org/45940 - http://www.vulnhunt.com/advisories/CAL-20070912-1_Multiple_vendor_produce_handling_AVI_file_vulnerabilities.txt - http://www.mandriva.com/security/advisories?name=MDKSA-2007:192
CVE ID: CVE-2007-4939 State: PUBLISHED Published: 2007-09-18T19:00:00 Last Updated: 2024-08-07T15:17:28.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in mplayerc.exe in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone and in mympc (aka CD-Storm) 1.0.0.1, StormPlayer 1.0.4, and possibly other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a .avi file with an "indx truck size" of 0xffffffff, and certain wLongsPerEntry and nEntriesInuse values. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3144 - http
es. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3144 - http://secunia.com/advisories/26806 - http://secunia.com/advisories/26808 - http://www.vupen.com/english/advisories/2007/3140 - http://www.securityfocus.com/archive/1/479222/100/0/threaded - http://secunia.com/advisories/26807 - http://www.vupen.com/english/advisories/2007/3141 - http://www.securityfocus.com/bid/25650 - http://www.vulnhunt.com/advisories/CAL-20070912-1_Multiple_vendor_produce_handling_AVI_file_vulnerabilities.txt - http://www.vupen.com/english/advisories/2007/3142 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36583
CVE ID: CVE-2007-4940 State: PUBLISHED Published: 2007-09-18T19:00:00 Last Updated: 2024-08-07T15:17:26.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone and in mympc (aka CD-Storm) 1.0.0.1, StormPlayer 1.0.4, and possibly other products, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3144 - https://exchange.xforce.ibmcloud.com/vulnerabilities
ainer: References: - http://securityreason.com/securityalert/3144 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36584 - http://www.securityfocus.com/archive/1/479222/100/0/threaded - http://www.securityfocus.com/bid/25650 - http://www.vulnhunt.com/advisories/CAL-20070912-1_Multiple_vendor_produce_handling_AVI_file_vulnerabilities.txt
CVE ID: CVE-2007-4941 State: PUBLISHED Published: 2007-09-18T19:00:00 Last Updated: 2024-08-07T15:17:26.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: KMPlayer 2.9.3.1210 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a .avi file with certain large "indx truck size" and nEntriesInuse values. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25651 - http://securityreason.com/securityalert/3144 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36585 - http://www.securityfocus.com/archive/1/479222/100/0/threaded - http://osvdb.org/45939 - http://www.vulnhunt.com/advisories/CAL-20070912-
ityfocus.com/archive/1/479222/100/0/threaded - http://osvdb.org/45939 - http://www.vulnhunt.com/advisories/CAL-20070912-1_Multiple_vendor_produce_handling_AVI_file_vulnerabilities.txt
CVE ID: CVE-2007-4942 State: PUBLISHED Published: 2007-09-18T19:00:00 Last Updated: 2024-08-07T15:17:27.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in modules/Discipline/StudentFieldBreakdown.php in Focus/SIS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the FocusPath parameter, a different vector than CVE-2007-4806. NOTE: the provenance of this information is unknown. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/36953 - http://www.attrition.org/pipermail/vim/2007-September/001788.html - http://www.vupen.com/english/advisories/2007/3134 - http://secunia.com/advisories
rmail/vim/2007-September/001788.html - http://www.vupen.com/english/advisories/2007/3134 - http://secunia.com/advisories/26750
CVE ID: CVE-2007-4943 State: PUBLISHED Published: 2007-09-18T19:00:00 Last Updated: 2024-08-07T15:17:27.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in a certain ActiveX control in sparser.dll in Baofeng Storm 2.8 and earlier allow remote attackers to execute arbitrary code via malformed input in an unknown set of arguments or property values, a different DLL than CVE-2007-4816. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29274 - http://www.vupen.com/english/advisories/2007/3111
CVE ID: CVE-2007-4944 State: PUBLISHED Published: 2007-09-18T19:00:00 Last Updated: 2024-08-07T15:17:26.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: The canvas.createPattern function in Opera 9.x before 9.22 for Linux, FreeBSD, and Solaris does not clear memory before using it to process a new pattern, which allows remote attackers to obtain sensitive information (memory contents) via JavaScript. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/linux/922/ - http://www.opera.com/support/search/view/861/ - http://osvdb.org/45946 - http://security.gentoo.org/glsa/glsa-200708-17.xml - http://www.opera.com/docs/changelogs/sol