Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-2593 State: PUBLISHED Published: 2007-05-11T03:55:00 Last Updated: 2024-08-07T13:42:33.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Terminal Server in Microsoft Windows 2003 Server, when using TLS, allows remote attackers to bypass SSL and self-signed certificate requirements, downgrade the server security, and possibly conduct man-in-the-middle attacks via unspecified vectors, as demonstrated using the Remote Desktop Protocol (RDP) 6.0 client. NOTE: a third party claims that the vendor may have fixed this in approximately 2006. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/468049/100/0/threaded
ional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/468049/100/0/threaded - http://www.securityfocus.com/archive/1/468057/100/0/threaded - http://www.securityfocus.com/archive/1/468203/100/0/threaded - http://osvdb.org/36146 - http://www.securityfocus.com/bid/23899
CVE ID: CVE-2007-2594 State: PUBLISHED Published: 2007-05-11T10:00:00 Last Updated: 2024-08-07T13:42:33.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in inc/articles.inc.php in phpMyPortal 3.0.0 RC3 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[CHEMINMODULES] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35908 - http://www.vupen.com/english/advisories/2007/1738 - https://www.exploit-db.com/exploits/3879 - http://secunia.com/advisories/25210 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34186 - http://www.securityfocus.com/bid/23898
CVE ID: CVE-2007-2595 State: PUBLISHED Published: 2007-05-11T10:00:00 Last Updated: 2024-08-07T13:42:33.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: RSAuction 2.73.1.3 allows remote authenticated users to move their own account status from Suspended to Active via a direct request for the activation URL that is provided at the time of account registration. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35870 - http://secunia.com/advisories/25149 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34192 - http://www.security
- http://secunia.com/advisories/25149 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34192 - http://www.securityfocus.com/bid/23895
CVE ID: CVE-2007-2596 State: PUBLISHED Published: 2007-05-11T10:00:00 Last Updated: 2024-08-07T13:42:33.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in common/func.php in aForum 1.32 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CommonAbsDir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25224 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34202 - http://www.securityfocus.com/bid/23902 - http://osvdb.org/35907 - http://www.vupen.com/english/advisories/2007/1739 - https://www.exploit-db.com/exploits/3884
CVE ID: CVE-2007-2597 State: PUBLISHED Published: 2007-05-11T10:00:00 Last Updated: 2024-08-07T13:42:33.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in telltarget CMS 1.3.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) ordnertiefe parameter to site_conf.php; or the (2) tt_docroot parameter to (a) class.csv.php, (b) produkte_nach_serie.php, or (c) ref_kd_rubrik.php in functionen/; (d) hg_referenz_jobgalerie.php, (e) surfer_anmeldung_NWL.php, (f) produkte_nach_serie_alle.php, (g) surfer_aendern.php, (h) ref_kd_rubrik.php, or (i) referenz.php in module/; or (j) 1/lay.php or (k) 3/lay.php in standar
surfer_aendern.php, (h) ref_kd_rubrik.php, or (i) referenz.php in module/; or (j) 1/lay.php or (k) 3/lay.php in standard/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38242 - http://osvdb.org/38239 - http://osvdb.org/38240 - https://www.exploit-db.com/exploits/3885 - http://www.securityfocus.com/bid/23903 - http://osvdb.org/38243 - http://www.vupen.com/english/advisories/2007/1740 - http://osvdb.org/38244 - http://osvdb.org/38238 - http://osvdb.org/38247 - http://osvdb.org/38246 - http://osvdb.org/38237 - http://osvdb.org/38241 - http://osvdb.org/38245 - http://osvdb.org/38236 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34216
CVE ID: CVE-2007-2598 State: PUBLISHED Published: 2007-05-11T10:00:00 Last Updated: 2024-08-07T13:42:33.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in print.php in SimpleNews 1.0.0 FINAL allows remote attackers to execute arbitrary SQL commands via the news_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.w4ck1ng.com/exploits/w4ck1ng_simplenews.txt - http://secunia.com/advisories/25223 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34220 - http://www.securityfocus.com/bid/23904 - http://osvdb.org/35910 - https://www.exploit-db.com/exploits/3886 - http://www.vupen.com/english/advisories/2007/1741
CVE ID: CVE-2007-2599 State: PUBLISHED Published: 2007-05-11T10:00:00 Last Updated: 2024-08-07T13:42:33.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) catFile parameter to (a) browseCat.php or (b) browseSubCat.php; the (2) id parameter to (c) openTutorial.php, (d) topFrame.php, or (e) admin/editListing.php; or (3) the search parameter to search.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34214 - http://osvdb.org/35902 - http://www.sec
iner: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34214 - http://osvdb.org/35902 - http://www.securityfocus.com/bid/23905 - http://www.vupen.com/english/advisories/2007/1742 - http://www.wavelinkmedia.com/scripts/tutorialcms/ - http://osvdb.org/35905 - http://osvdb.org/35900 - http://osvdb.org/35899 - http://osvdb.org/35901 - http://osvdb.org/35903 - https://www.exploit-db.com/exploits/3887 - http://secunia.com/advisories/25222
CVE ID: CVE-2007-2600 State: PUBLISHED Published: 2007-05-11T10:00:00 Last Updated: 2024-08-07T13:42:33.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) catFile parameter to (a) browseCat.php or (b) browseSubCat.php; the (2) id parameter to (c) openTutorial.php, (d) topFrame.php, or (e) admin/editListing.php; or the (3) search parameter to search.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35893 - http://www.securityfocus.com/bid/23905 - http://www.vupen
CVE Program Container: References: - http://osvdb.org/35893 - http://www.securityfocus.com/bid/23905 - http://www.vupen.com/english/advisories/2007/1742 - http://osvdb.org/35894 - http://osvdb.org/35897 - http://osvdb.org/35896 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34215 - http://osvdb.org/35895 - http://osvdb.org/35892 - https://www.exploit-db.com/exploits/3887
CVE ID: CVE-2007-2601 State: PUBLISHED Published: 2007-05-11T10:00:00 Last Updated: 2024-08-07T13:42:33.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in a certain ActiveX control in the GDivX Zenith Player AviFixer class in fix.dll 1.0.0.1 allows remote attackers to execute arbitrary code via a long SetInputFile property value. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34246 - http://moaxb.blogspot.com/2007/05/moaxb-11-bonus-gdivx-zenith-player.html. - https://www.exploit-db.com/exploits/3889 - http://osvdb.org/36021 - http://www.securityfocus.com/bid/23907
CVE ID: CVE-2007-2602 State: PUBLISHED Published: 2007-05-11T10:00:00 Last Updated: 2024-08-07T13:42:33.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in MIBEXTRA.EXE in Ipswitch WhatsUp Gold 11 allows attackers to cause a denial of service (application crash) or execute arbitrary code via a long MIB filename argument. NOTE: If there is not a common scenario under which MIBEXTRA.EXE is called with attacker-controlled command line arguments, then perhaps this issue should not be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36217 - http://www.securityfocus.com/archive/1/468070/100/0/threaded - http://securit
er: References: - http://osvdb.org/36217 - http://www.securityfocus.com/archive/1/468070/100/0/threaded - http://securityreason.com/securityalert/2708
CVE ID: CVE-2007-2603 State: PUBLISHED Published: 2007-05-11T10:00:00 Last Updated: 2024-08-07T13:42:33.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Init function in the Audio CD Ripper OCX (AudioCDRipperOCX.ocx) 1.0 ActiveX control allows remote attackers to cause a denial of service (NULL dereference and Internet Explorer crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/468070/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34206 - http://securityreason.com/securityalert/2708 - http://www.securityfocus.com/bid/23900 - http://osvdb.
rabilities/34206 - http://securityreason.com/securityalert/2708 - http://www.securityfocus.com/bid/23900 - http://osvdb.org/36216
CVE ID: CVE-2007-2604 State: PUBLISHED Published: 2007-05-11T10:00:00 Last Updated: 2024-08-07T13:42:33.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the FlexLabel ActiveX control allows remote attackers to cause a denial of service (unstable behavior) via an improper initialization, as demonstrated by a certain value of the Caption property. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36211 - http://www.securityfocus.com/archive/1/468070/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34208 - http://securityreason.com/securityalert/2708
CVE ID: CVE-2007-2605 State: PUBLISHED Published: 2007-05-11T10:00:00 Last Updated: 2024-08-07T13:42:33.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the GetPropertyById function in ISoftomateObj in SoftomateLib in BRUJULA4.NET.DLL in the Brujula Toolbar (Brujula.net toolbar) allows attackers to cause a denial of service (NULL dereference and browser crash) via certain arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/468070/100/0/threaded - http://osvdb.org/34773 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34213 - http://securityreason.com/securityalert/2708 - http://ww
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34213 - http://securityreason.com/securityalert/2708 - http://www.securityfocus.com/bid/23901
CVE ID: CVE-2007-2606 State: PUBLISHED Published: 2007-05-11T10:00:00 Last Updated: 2024-08-07T13:42:33.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Firebird 2.1 allow attackers to trigger memory corruption and possibly have other unspecified impact via certain input processed by (1) config\ConfigFile.cpp or (2) msgs\check_msgs.epp. NOTE: if ConfigFile.cpp reads a configuration file with restrictive permissions, then the ConfigFile.cpp vector may not cross privilege boundaries and perhaps should not be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37309 - https://exchange.xforce.ibmcloud.com/
nal Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37309 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34201 - http://www.securityfocus.com/archive/1/468070/100/0/threaded - http://www.securityfocus.com/bid/28478 - http://osvdb.org/37308 - http://securityreason.com/securityalert/2708 - http://secunia.com/advisories/29501 - http://www.debian.org/security/2008/dsa-1529
CVE ID: CVE-2007-2607 State: PUBLISHED Published: 2007-05-11T10:00:00 Last Updated: 2024-08-07T13:42:33.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in views/print/printbar.php in LaVague 0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the views_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1733 - http://www.securityfocus.com/bid/23877 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34177 - https://www.exploit-db.com/exploits/3870 - http://osvdb.org/37790
CVE ID: CVE-2007-2608 State: PUBLISHED Published: 2007-05-11T10:00:00 Last Updated: 2024-08-07T13:42:33.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in lib/smarty/SmartyFU.class.php in Miplex2 Alpha 1 allows remote attackers to execute arbitrary PHP code via a URL in the system[smarty][dir] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37789 - http://www.vupen.com/english/advisories/2007/1737 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34172 - http://www.securityfocus.com/bid/23884 - https://www.exploit-db.com/exploits/3878
CVE ID: CVE-2007-2609 State: PUBLISHED Published: 2007-05-11T10:00:00 Last Updated: 2024-08-07T13:42:33.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in gnuedu 1.3b2 allow remote attackers to execute arbitrary PHP code via a URL in the (a) ETCDIR parameter to (1) libs/lom.php; (2) lom_update.php, (3) check-lom.php, and (4) weigh_keywords.php in scripts/; the (b) LIBSDIR parameter to (5) logout.php, (6) help.php, (7) index.php, (8) login.php; and the ETCDIR parameter to (9) web/lom.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38254 - http://osvdb.org/38256 - http://osvdb.org/38250 -
otes: - CVE Program Container: References: - http://osvdb.org/38254 - http://osvdb.org/38256 - http://osvdb.org/38250 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34174 - http://osvdb.org/38249 - http://osvdb.org/38255 - http://osvdb.org/38251 - http://www.vupen.com/english/advisories/2007/1736 - http://www.securityfocus.com/bid/23883 - http://osvdb.org/38248 - http://osvdb.org/38253 - https://www.exploit-db.com/exploits/3876 - http://osvdb.org/38252
CVE ID: CVE-2007-2610 State: PUBLISHED Published: 2007-05-11T10:00:00 Last Updated: 2024-08-07T13:42:33.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in OpenLD before 1.1.9, and 1.1-modified before 1.1-modified3, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the Search feature, possibly the term parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1730 - http://www.openld.com/forum/viewtopic.php?id=217 - http://osvdb.org/35871 - http://secunia.com/advisories/25168 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34198
ttp://osvdb.org/35871 - http://secunia.com/advisories/25168 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34198 - http://sourceforge.net/project/shownotes.php?release_id=507099 - http://www.openld.com/forum/viewtopic.php?id=216 - http://www.securityfocus.com/bid/23896
CVE ID: CVE-2007-2611 State: PUBLISHED Published: 2007-05-11T10:00:00 Last Updated: 2024-08-07T13:42:33.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in CGX 20050314 allow remote attackers to execute arbitrary PHP code via a URL in the pathCGX parameter to (1) mtdialogo.php, (2) ltdialogo.php, (3) login.php, and (4) logingecon.php in inc/; and multiple unspecified files in frm/, sql/, and cns/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35881 - http://www.securityfocus.com/bid/23880 - http://osvdb.org/35885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34188 - http://secunia.c
s.com/bid/23880 - http://osvdb.org/35885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34188 - http://secunia.com/advisories/25214 - http://www.vupen.com/english/advisories/2007/1734 - http://osvdb.org/35886 - https://www.exploit-db.com/exploits/3874 - http://osvdb.org/35884 - http://osvdb.org/35883 - http://osvdb.org/35880 - http://osvdb.org/35882
CVE ID: CVE-2007-2612 State: PUBLISHED Published: 2007-05-11T10:00:00 Last Updated: 2024-08-07T13:42:33.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in libs/Wakka.class.php in WikkaWiki (Wikka Wiki) before 1.1.6.3 allows remote attackers to execute arbitrary SQL commands via the limit parameter. NOTE: this issue only applies to a "modified installation." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1725 - http://wush.net/trac/wikka/ticket/383 - http://wikkawiki.org/WikkaReleaseNotes - http://osvdb.org/35826
CVE ID: CVE-2007-2613 State: PUBLISHED Published: 2007-05-11T10:00:00 Last Updated: 2024-08-07T13:42:33.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: WikkaWiki (Wikka Wiki) before 1.1.6.3 allows attackers in a shared virtual host server environment to upload and execute an arbitrary configuration file by modifying the WAKKA_CONFIG environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35825 - http://www.vupen.com/english/advisories/2007/1725 - http://wikkawiki.org/WikkaReleaseNotes - http://wush.net/trac/wikka/ticket/98
CVE ID: CVE-2007-2614 State: PUBLISHED Published: 2007-05-11T10:00:00 Last Updated: 2024-08-07T13:42:33.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in examples/widget8.php in phpHtmlLib 2.4.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phphtmllib parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/467837/100/0/threaded - http://securityreason.com/securityalert/2690 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34166 - http://osvdb.org/36168
CVE ID: CVE-2007-2615 State: PUBLISHED Published: 2007-05-11T10:00:00 Last Updated: 2024-08-07T13:42:33.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Crie seu PHPLojaFacil 0.1.5 allow remote attackers to execute arbitrary PHP code via a URL in the path_local parameter to (1) ftp.php, (2) libs/db.php, and (3) libs/ftp.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34178 - https://www.exploit-db.com/exploits/3875 - http://www.vupen.com/english/advisories/2007/1735 - http://osvdb.org/37797 - http://osvdb.org/37796 - http://osvdb.org/37798 - http://w
n.com/english/advisories/2007/1735 - http://osvdb.org/37797 - http://osvdb.org/37796 - http://osvdb.org/37798 - http://www.securityfocus.com/bid/23879
CVE ID: CVE-2007-2616 State: PUBLISHED Published: 2007-05-11T16:00:00 Last Updated: 2024-08-07T13:42:33.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the SSL version of the NMDMC.EXE service in Novell NetMail 3.52e FTF2 and probably earlier allows remote attackers to execute arbitrary code via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25204 - http://osvdb.org/35941 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=532 - http://www.securityfocus.com/bid/23916 - http://www.securitytracker.com/id?1018045 - http://www.vupen.com/english/advisories/2007/1732
urityfocus.com/bid/23916 - http://www.securitytracker.com/id?1018045 - http://www.vupen.com/english/advisories/2007/1732 - http://download.novell.com/Download?buildid=Ad2xk29hHTg~ - https://exchange.xforce.ibmcloud.com/vulnerabilities/34221
CVE ID: CVE-2007-2617 State: PUBLISHED Published: 2007-05-11T16:00:00 Last Updated: 2024-08-07T13:42:33.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: srsexec in Sun Remote Services (SRS) Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file permissions when opening files, which allows local users to read the first line of arbitrary files via the -d and -v options. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1920 - http://osvdb.org/35940 - http://www.securitytracker.com/id?1018046 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34223 -
db.org/35940 - http://www.securitytracker.com/id?1018046 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34223 - http://secunia.com/advisories/25194 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102891-1 - http://www.securityfocus.com/bid/23915 - http://www.vupen.com/english/advisories/2007/1769 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=531
CVE ID: CVE-2007-2618 State: PUBLISHED Published: 2007-05-11T16:00:00 Last Updated: 2024-08-07T13:42:33.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in index.php in Drake CMS 0.4.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the lang parameter. NOTE: Drake CMS has only a beta version available, and the vendor has previously stated "We do not consider security reports valid until the first official release of Drake CMS." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23851 - http://osvdb.org/37303 - https://exchange.x
VE Program Container: References: - http://www.securityfocus.com/bid/23851 - http://osvdb.org/37303 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34145 - http://securityreason.com/securityalert/2691 - http://www.securityfocus.com/archive/1/467829/100/0/threaded
CVE ID: CVE-2007-2619 State: PUBLISHED Published: 2007-05-11T16:00:00 Last Updated: 2024-08-07T13:42:33.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec pcAnywhere 11.5.x and 12.0.x retains unencrypted login credentials for the most recent login within process memory, which allows local administrators to obtain the credentials by reading process memory, a different vulnerability than CVE-2006-3785. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34203 - http://www.vupen.com/english/advisories/2007/1753 - http://osvdb.org/41982 - http://securityresponse.symantec.com/avcenter/security/Content/2007.05.
/advisories/2007/1753 - http://osvdb.org/41982 - http://securityresponse.symantec.com/avcenter/security/Content/2007.05.09b.html - http://securitytracker.com/id?1018032 - http://www.securityfocus.com/bid/23875
CVE ID: CVE-2007-2620 State: PUBLISHED Published: 2007-05-11T16:00:00 Last Updated: 2024-08-07T13:42:33.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in inc/config.inc.php in Jakub Steiner (aka jimmac) original 0.11 allows remote attackers to execute arbitrary PHP code via a URL in the x[1] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3894 - http://www.vupen.com/english/advisories/2007/1767 - http://secunia.com/advisories/25213 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34234 - http://osvdb.org/35974 - http://www.securityfocus.com/bid/23913