Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-2327 State: PUBLISHED Published: 2007-04-27T00:00:00 Last Updated: 2024-08-07T13:33:28.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in _editor.php in HTMLeditbox 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the settings[app_dir] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23664 - http://www.securityfocus.com/archive/1/466841/100/0/threaded - http://osvdb.org/35525 - http://securityreason.com/securityalert/2635 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33875
CVE ID: CVE-2007-2328 State: PUBLISHED Published: 2007-04-27T00:00:00 Last Updated: 2024-08-07T13:33:28.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in addvip.php in phpMYTGP 1.4b allows remote attackers to execute arbitrary PHP code via a URL in the msetstr[PROGSDIR] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2636 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33880 - http://www.securityfocus.com/archive/1/466845/100/0/threaded - http://osvdb.org/34161
CVE ID: CVE-2007-2329 State: PUBLISHED Published: 2007-04-27T00:00:00 Last Updated: 2024-08-07T13:33:28.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in searchbot.php in Searchactivity allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/466846/100/0/threaded - http://osvdb.org/34167 - http://securityreason.com/securityalert/2637 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33881
CVE ID: CVE-2007-2330 State: PUBLISHED Published: 2007-04-27T00:00:00 Last Updated: 2024-08-07T13:33:28.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes_handler.php in DynaTracker 151 allows remote attackers to execute arbitrary PHP code via a URL in the base_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34159 - http://osvdb.org/34160 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33873 - http://securityreason.com/securityalert/2638 - http://www.securityfocus.com/bid/23667 - http://www.securityfocus.com/archive/1/466843/100/0/threaded
CVE ID: CVE-2007-2331 State: PUBLISHED Published: 2007-04-27T00:00:00 Last Updated: 2024-08-07T13:33:28.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in cart.php in Shop-Script 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the lang_list parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/466851/100/0/threaded - http://osvdb.org/34162 - http://securityreason.com/securityalert/2633 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33877
CVE ID: CVE-2007-2332 State: PUBLISHED Published: 2007-04-27T16:00:00 Last Updated: 2024-08-07T13:33:28.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 6_05.140 uses a fixed DES key to encrypt passwords, which allows remote authenticated users to obtain a password via a brute force attack on a hash from the LDAP store. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23562 - http://secunia.com/advisories/24962 - http://www.vupen.com/english/advisories/2007/1464 - http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=567877&RenditionID=&poid=
visories/2007/1464 - http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=567877&RenditionID=&poid=null
CVE ID: CVE-2007-2333 State: PUBLISHED Published: 2007-04-27T16:00:00 Last Updated: 2024-08-07T13:33:28.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 includes the FIPSecryptedtest1219 and FIPSunecryptedtest1219 default accounts in the LDAP template, which might allow remote attackers to access the private network. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1017943 - http://www.securityfocus.com/bid/23562 - http://secunia.com/advisories/24962 - http://osvdb.org/35055 - http://www.vupen.com/engl
w.securityfocus.com/bid/23562 - http://secunia.com/advisories/24962 - http://osvdb.org/35055 - http://www.vupen.com/english/advisories/2007/1464 - http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=567877&RenditionID=&poid=null
CVE ID: CVE-2007-2334 State: PUBLISHED Published: 2007-04-27T16:00:00 Last Updated: 2024-08-07T13:33:28.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 has two template HTML files lacking certain verification tags, which allows remote attackers to access the administration interface and change the device configuration via certain requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1017943 - http://www.securityfocus.com/bid/23562 - http://secunia.com/advisories/24962 - http://osvdb.org/35056 - h
m/id?1017943 - http://www.securityfocus.com/bid/23562 - http://secunia.com/advisories/24962 - http://osvdb.org/35056 - http://www.vupen.com/english/advisories/2007/1464 - http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=567877&RenditionID=&poid=null
CVE ID: CVE-2007-2335 State: PUBLISHED Published: 2007-04-27T16:00:00 Last Updated: 2024-08-07T13:33:28.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the RSS feed reader functionality in Lunascape 4.1.3 build2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35364 - http://www.vupen.com/english/advisories/2007/1538 - http://www.securityfocus.com/bid/23665 - http://jvn.jp/jp/JVN%2336628264/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34074 - http://lunapedia.lunascape.jp/index.php
628264/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34074 - http://lunapedia.lunascape.jp/index.php?title=Lunascape_4#2007.2F04.2F25_ver_4.2.0 - http://secunia.com/advisories/25000
CVE ID: CVE-2007-2336 State: PUBLISHED Published: 2007-04-27T16:00:00 Last Updated: 2024-08-07T13:33:28.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in InterVations NaviCOPA Web Server 2.01 20070323 allows remote attackers to cause a denial of service (daemon crash) via crafted HTTP requests, as demonstrated by long requests containing '\A' characters, probably a different issue than CVE-2006-5112 and CVE-2007-1733. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34504 - https://exchange.xforce.ibmclo
Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34504 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33903 - http://secunia.com/advisories/25049
CVE ID: CVE-2007-2337 State: PUBLISHED Published: 2007-04-27T16:00:00 Last Updated: 2024-08-07T13:33:28.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Exponent CMS 0.96.6 Alpha and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter to (a) magpie_debug.php and (b) magpie_simple.php in external/magpierss/scripts/, the (2) rss_url parameter to (c) magpie_slashbox.php in external/magpierss/scripts/, and the (3) body parameter to the (d) weblogmodule (aka Weblog Comments) module. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23574
omments) module. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23574 - http://osvdb.org/35642 - http://osvdb.org/35643 - http://www.bugtraq.ir/articles/advisory/exponent_multiple_vulnerabilities/10 - http://osvdb.org/35641 - http://osvdb.org/35640 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34077
CVE ID: CVE-2007-2338 State: PUBLISHED Published: 2007-04-27T16:00:00 Last Updated: 2024-08-07T13:33:28.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in include/admin/banlist.php in Phorum before 5.1.22 allows remote attackers to perform unauthorized banlist deletions as an administrator via the delete parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.waraxe.us/advisory-49.html - http://www.phorum.org/story.php?76 - http://securitytracker.com/id?1017936 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34078 - http://www.vupen.com/english/advisories/2007/1479 - http://secunia.com/advis
xforce.ibmcloud.com/vulnerabilities/34078 - http://www.vupen.com/english/advisories/2007/1479 - http://secunia.com/advisories/24932 - http://www.securityfocus.com/archive/1/466286/100/0/threaded - http://securityreason.com/securityalert/2617 - http://www.securityfocus.com/bid/23616 - http://osvdb.org/35061
CVE ID: CVE-2007-2339 State: PUBLISHED Published: 2007-04-27T16:00:00 Last Updated: 2024-08-07T13:33:28.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Phorum before 5.1.22 allow remote attackers to execute arbitrary SQL commands via (1) a modified recipients parameter name in (a) pm.php; (2) the curr parameter to the (b) badwords (aka censorlist) or (c) banlist module in admin.php; or (3) the "Edit groups / Add group" field in the (d) groups module in admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.waraxe.us/advisory-49.html - http://www.phorum.org/story.php?76 - http://securitytracker.com/id?10
erences: - http://www.waraxe.us/advisory-49.html - http://www.phorum.org/story.php?76 - http://securitytracker.com/id?1017936 - http://osvdb.org/35062 - http://www.vupen.com/english/advisories/2007/1479 - http://secunia.com/advisories/24932 - http://www.securityfocus.com/archive/1/466286/100/0/threaded - http://securityreason.com/securityalert/2617 - http://www.securityfocus.com/bid/23616 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34081 - http://osvdb.org/35064 - http://osvdb.org/35063
CVE ID: CVE-2007-2340 State: PUBLISHED Published: 2007-04-27T16:00:00 Last Updated: 2024-08-07T13:33:28.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in inc/include_all.inc.php in phporacleview allow remote attackers to execute arbitrary PHP code via a URL in the (1) page_dir or (2) inc_dir parameters. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34300 - https://www.exploit-db.com/exploits/3803 - http://www.vupen.com/english/advisories/2007/1555 - http://www.securityfocus.com/bid/23672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33904 - http://secunia.com/advisories/25035
CVE ID: CVE-2007-2341 State: PUBLISHED Published: 2007-04-27T16:00:00 Last Updated: 2024-08-07T13:33:28.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in suite/index.php in phpBandManager 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the pg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1556 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33906 - https://www.exploit-db.com/exploits/3802 - http://osvdb.org/35606 - http://www.securityfocus.com/bid/23673
CVE ID: CVE-2007-2342 State: PUBLISHED Published: 2007-04-27T16:00:00 Last Updated: 2024-08-07T13:33:28.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in error.asp in CreaScripts CreaDirectory 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-6083. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1476 - http://osvdb.org/35638 - https://www.exploit-db.com/exploits/3767 - http://www.securityfocus.com/bid/23564
CVE ID: CVE-2007-2343 State: PUBLISHED Published: 2007-04-27T17:00:00 Last Updated: 2024-08-07T13:33:28.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the TFTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, allows remote attackers to execute arbitrary code via crafted request packets that contain long file names. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24764 - http://www.vupen.com/english/advisories/2007/1271 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=506 - http://www.securitytracker.com/id?1017876 - http://
/labs.idefense.com/intelligence/vulnerabilities/display.php?id=506 - http://www.securitytracker.com/id?1017876 - http://osvdb.org/34627 - http://www.enterasys.com/pub/NetSight/Patches/SP1/NetSight_SP1.pdf
CVE ID: CVE-2007-2344 State: PUBLISHED Published: 2007-04-27T17:00:00 Last Updated: 2024-08-07T13:33:28.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BOOTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, on Windows allows remote attackers to cause a denial of service (daemon crash) via a UDP packet that contains an invalid "packet type" field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24764 - http://www.vupen.com/english/advisories/2007/1271 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=506 - http://www.securitytracker.com/id?1017876 - htt
tp://labs.idefense.com/intelligence/vulnerabilities/display.php?id=506 - http://www.securitytracker.com/id?1017876 - http://osvdb.org/34628 - http://www.enterasys.com/pub/NetSight/Patches/SP1/NetSight_SP1.pdf
CVE ID: CVE-2007-2345 State: PUBLISHED Published: 2007-04-27T17:00:00 Last Updated: 2024-08-07T13:33:28.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/include_stream.inc.php in CodeWand phpBrowse allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23329 - https://www.exploit-db.com/exploits/3668 - http://www.vupen.com/english/advisories/2007/1273
CVE ID: CVE-2007-2346 State: PUBLISHED Published: 2007-04-27T17:00:00 Last Updated: 2024-08-07T13:33:28.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in PHP-Generics 1.0 beta allow remote attackers to execute arbitrary PHP code via a URL in the _APP_RELATIVE_PATH parameter to (1) include.php, (2) dbcommon/include.php, and (3) exception/include.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35604 - http://osvdb.org/35605 - https://www.exploit-db.com/exploits/3669 - http://www.vupen.com/english/advisories/2007/1280 - http://www.securityfocus.com/bid/23328 - http://osvdb.org/35603
CVE ID: CVE-2007-2347 State: PUBLISHED Published: 2007-04-27T17:00:00 Last Updated: 2024-08-07T13:33:28.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in main/forum/komentar.php in OneClick CMS (aka Sisplet CMS) 05.10 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the site_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3667 - http://www.vupen.com/english/advisories/2007/1281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33455 - http://www.securityfocus.com/bid/23334 - http://osvdb.org/35618
CVE ID: CVE-2007-2348 State: PUBLISHED Published: 2007-04-27T18:00:00 Last Updated: 2024-08-07T13:33:28.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: mirror --script in lftp before 3.5.9 does not properly quote shell metacharacters, which might allow remote user-assisted attackers to execute shell commands via a malicious script. NOTE: it is not clear whether this issue crosses security boundaries, since the script already supports commands such as "get" which could overwrite executable files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36559 - http://www.vupen.com/english/advisories/2007/1590 - https://issues.rpath.com/bro
- http://secunia.com/advisories/36559 - http://www.vupen.com/english/advisories/2007/1590 - https://issues.rpath.com/browse/RPL-1229 - http://bugs.gentoo.org/show_bug.cgi?id=173524 - http://secunia.com/advisories/25107 - http://rhn.redhat.com/errata/RHSA-2009-1278.html - http://www.securityfocus.com/bid/23736 - http://lftp.yar.ru/news.html - http://secunia.com/advisories/25132 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10806
CVE ID: CVE-2007-2349 State: PUBLISHED Published: 2007-04-30T22:00:00 Last Updated: 2024-08-07T13:33:28.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Invision Power Board (IP.Board) 2.1.x and 2.2.x allows remote attackers to inject arbitrary web script or HTML by uploading crafted images or PDF files. Additional Analyst Notes: - CVE Program Container: References: - http://forums.invisionpower.com/index.php?showtopic=234377 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33942 - http://osvdb.org/35427 - http://www.vupen.com/english/advisories/2007/1558 - http://secunia.com/advisories/25021
CVE ID: CVE-2007-2350 State: PUBLISHED Published: 2007-04-30T22:00:00 Last Updated: 2024-08-07T13:33:28.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/config.php in the music-on-hold module in freePBX 2.2.x allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the del parameter. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2007-April/053915.html - http://osvdb.org/35316 - http://securityreason.com/securityalert/2652 - http://secunia.com/advisories/24935 - http://www.vupen.com/english/advisories/2007/1535
CVE ID: CVE-2007-2351 State: PUBLISHED Published: 2007-04-30T22:00:00 Last Updated: 2024-08-07T13:33:28.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the HP Power Manager Remote Agent (RA) 4.0Build10 and earlier in HP-UX B.11.11 and B.11.23 allows local users to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00819543 - http://www.securityfocus.com/bid/23703 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33965 - http://www.securitytracker.com/id?1017977 - http://www.vupen.com/english/advis
orce.ibmcloud.com/vulnerabilities/33965 - http://www.securitytracker.com/id?1017977 - http://www.vupen.com/english/advisories/2007/1574 - http://secunia.com/advisories/25066 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00819543
CVE ID: CVE-2007-2352 State: PUBLISHED Published: 2007-04-30T22:00:00 Last Updated: 2024-08-07T13:33:28.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in AFFLIB 2.2.6 allow remote attackers to execute arbitrary code via certain command line parameters, which are used in (1) warn and (2) err calls, possibly involving (a) lib/s3.cpp, (b) tools/afconvert.cpp, (c) tools/afcopy.cpp, (d) tools/afinfo.cpp, (e) aimage/imager.cpp, and (f) tools/afxml.cpp. NOTE: this identifier is intended to address the vectors that were not fixed in CVE-2007-2054, but the unfixed vectors were not explicitly listed. Additional Analyst Notes: - CVE Program Contai
xed in CVE-2007-2054, but the unfixed vectors were not explicitly listed. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2657 - http://www.securityfocus.com/archive/1/467040/100/0/threaded - http://www.vsecurity.com/bulletins/advisories/2007/afflib-fmtstr.txt
CVE ID: CVE-2007-2353 State: PUBLISHED Published: 2007-04-30T22:00:00 Last Updated: 2024-08-07T13:33:28.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Axis 1.0 allows remote attackers to obtain sensitive information by requesting a non-existent WSDL file, which reveals the installation path in the resulting exception message. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/34154 - http://www.securityfocus.com/bid/23687 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34167 - http://attrition.org/pipermail/vim/2007-April/001562.html
CVE ID: CVE-2007-2354 State: PUBLISHED Published: 2007-04-30T22:00:00 Last Updated: 2024-08-07T13:33:28.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Progress Webspeed Messenger allows remote attackers to obtain sensitive information via a WService parameter containing "wsbroker1/webutil/about.r", which reveals the operating system and product information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/467184/100/0/threaded - http://www.ishare.nl/
CVE ID: CVE-2007-2355 State: PUBLISHED Published: 2007-04-30T22:00:00 Last Updated: 2024-08-07T13:33:28.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_url function in DODS_Dispatch.pm for the CGI_server in OPeNDAP 3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25060 - http://www.opendap.org/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/33997 - http://www.vupen.com/english/advisories/2007/1591 - http://www.securityfocus.com/bid/23719 - http://www.securitytracker.com/id?1017983 - http://www.opendap.org/server3-patch-04.27.
ww.securityfocus.com/bid/23719 - http://www.securitytracker.com/id?1017983 - http://www.opendap.org/server3-patch-04.27.2007.txt - http://www.kb.cert.org/vuls/id/857153
CVE ID: CVE-2007-2356 State: PUBLISHED Published: 2007-04-30T22:00:00 Last Updated: 2024-08-07T13:33:28.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=238422 - http://www.debian.org/security/2007/dsa-1301 - http://security.gentoo.org/glsa/glsa-200705-08.xml - http://secunia.com/advisories/25573 - http://secunia.com/advisories/25466 - http://www.securityfocus.com/bid/
5-08.xml - http://secunia.com/advisories/25573 - http://secunia.com/advisories/25466 - http://www.securityfocus.com/bid/23680 - http://www.securityfocus.com/archive/1/467231/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33911 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10054 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201320-1 - http://secunia.com/advisories/25359 - http://www.vupen.com/english/advisories/2007/1560 - http://www.redhat.com/support/errata/RHSA-2007-0343.html - http://www.securitytracker.com/id?1018092 - http://lists.suse.com/archive/suse-security-announce/2007-May/0005.html - http://secunia.com