Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
http://secunia.com/advisories/24195 - http://www.securitytracker.com/id?1017671 - http://osvdb.org/32767 - http://secunia.com/advisories/24606 - http://secunia.com/advisories/24642 - http://secunia.com/advisories/24217 - http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm - http://secunia.com/advisories/24248 - http://secunia.com/advisories/24514 - http://www.securityfocus.com/bid/22496 - https://issues.rpath.com/browse/RPL-1088 - http://secunia.com/advisories/24284 - http://www.ubuntu.com/usn/usn-424-2 - http://www.php.net/releases/5_2_1.php - http://security.gentoo.org/glsa/glsa-200703-21.xml - http://secunia.com/advisories/24432 - http://secunia.com/advisories/24421 - http://secu
oo.org/glsa/glsa-200703-21.xml - http://secunia.com/advisories/24432 - http://secunia.com/advisories/24421 - http://secunia.com/advisories/24089 - http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html - http://www.redhat.com/support/errata/RHSA-2007-0076.html - http://secunia.com/advisories/24419 - http://rhn.redhat.com/errata/RHSA-2007-0089.html - http://www.redhat.com/support/errata/RHSA-2007-0088.html - http://www.securityfocus.com/archive/1/461462/100/0/threaded - http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm - http://www.redhat.com/support/errata/RHSA-2007-0082.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A
ort/errata/RHSA-2007-0082.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11321 - ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc - http://www.php.net/ChangeLog-5.php#5.2.1 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:048 - http://www.ubuntu.com/usn/usn-424-1 - http://www.redhat.com/support/errata/RHSA-2007-0081.html - http://secunia.com/advisories/24322 - http://secunia.com/advisories/24236 - http://www.vupen.com/english/advisories/2007/0546
CVE ID: CVE-2007-0908 State: PUBLISHED Published: 2007-02-13T23:00:00 Last Updated: 2024-08-07T12:34:21.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not properly initialize the key_length variable for a numerical key, which allows context-dependent attackers to read stack memory via a wddxPacket element that contains a variable with a string name before a numerical variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.us.debian.org/security/2007/dsa-1264 - http://secunia.com/advisories/24295 - http://www.trustix.org/errata/2007/0009/ - http://www.op
/security/2007/dsa-1264 - http://secunia.com/advisories/24295 - http://www.trustix.org/errata/2007/0009/ - http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html - http://secunia.com/advisories/24195 - http://www.securitytracker.com/id?1017671 - http://secunia.com/advisories/24606 - http://secunia.com/advisories/24642 - http://secunia.com/advisories/24217 - http://osvdb.org/32766 - http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm - http://secunia.com/advisories/24248 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32493 - http://secunia.com/advisories/24514 - http://www.securityfocus.com/bid/22496 - https://issues.rpath.com/browse/RPL-1088 - http://secunia.com
dvisories/24514 - http://www.securityfocus.com/bid/22496 - https://issues.rpath.com/browse/RPL-1088 - http://secunia.com/advisories/24284 - http://www.ubuntu.com/usn/usn-424-2 - http://www.php.net/releases/5_2_1.php - http://security.gentoo.org/glsa/glsa-200703-21.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11185 - http://secunia.com/advisories/24432 - http://secunia.com/advisories/24421 - http://secunia.com/advisories/24089 - http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html - http://securityreason.com/securityalert/2321 - http://www.redhat.com/support/errata/RHSA-2007-0076.html - http://secunia.com/advisories/24419 - ht
securityalert/2321 - http://www.redhat.com/support/errata/RHSA-2007-0076.html - http://secunia.com/advisories/24419 - http://rhn.redhat.com/errata/RHSA-2007-0089.html - http://www.redhat.com/support/errata/RHSA-2007-0088.html - http://www.securityfocus.com/archive/1/461462/100/0/threaded - http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm - http://www.redhat.com/support/errata/RHSA-2007-0082.html - http://www.securityfocus.com/bid/22806 - ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc - http://www.php.net/ChangeLog-5.php#5.2.1 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:048 - http://www.php-security.org/MOPB/MOPB-11-2007.html - http://ww
ww.mandriva.com/security/advisories?name=MDKSA-2007:048 - http://www.php-security.org/MOPB/MOPB-11-2007.html - http://www.ubuntu.com/usn/usn-424-1 - http://www.redhat.com/support/errata/RHSA-2007-0081.html - http://secunia.com/advisories/24322 - http://secunia.com/advisories/24236 - http://www.vupen.com/english/advisories/2007/0546
CVE ID: CVE-2007-0909 State: PUBLISHED Published: 2007-02-13T23:00:00 Last Updated: 2024-08-07T12:34:21.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to (1) all of the *print functions on 64-bit systems, and (2) the odbc_result_all function. Additional Analyst Notes: - CVE Program Container: References: - http://www.us.debian.org/security/2007/dsa-1264 - http://secunia.com/advisories/24295 - http://www.trustix.org/errata/2007/0009/ - http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html - http://secunia.com/advisories/24195 -
007/0009/ - http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html - http://secunia.com/advisories/24195 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9722 - http://www.securitytracker.com/id?1017671 - http://secunia.com/advisories/24606 - http://secunia.com/advisories/24642 - http://secunia.com/advisories/24217 - http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm - http://secunia.com/advisories/24248 - http://secunia.com/advisories/24514 - http://www.securityfocus.com/bid/22496 - https://issues.rpath.com/browse/RPL-1088 - http://secunia.com/advisories/24284 - http://www.ubuntu.com/usn/usn-424-2 - http://www.php.net/releases/5
wse/RPL-1088 - http://secunia.com/advisories/24284 - http://www.ubuntu.com/usn/usn-424-2 - http://www.php.net/releases/5_2_1.php - http://security.gentoo.org/glsa/glsa-200703-21.xml - http://secunia.com/advisories/24432 - http://secunia.com/advisories/24421 - http://secunia.com/advisories/24089 - http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html - http://www.redhat.com/support/errata/RHSA-2007-0076.html - http://secunia.com/advisories/24419 - http://rhn.redhat.com/errata/RHSA-2007-0089.html - http://www.redhat.com/support/errata/RHSA-2007-0088.html - http://www.securityfocus.com/archive/1/461462/100/0/threaded - http://support.avaya.com/elmodocs2/security/ASA-2007-136.h
ttp://www.securityfocus.com/archive/1/461462/100/0/threaded - http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm - http://www.redhat.com/support/errata/RHSA-2007-0082.html - http://osvdb.org/32764 - ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc - http://www.php.net/ChangeLog-5.php#5.2.1 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:048 - http://osvdb.org/32765 - http://www.ubuntu.com/usn/usn-424-1 - http://www.redhat.com/support/errata/RHSA-2007-0081.html - http://secunia.com/advisories/24322 - http://secunia.com/advisories/24236 - http://www.vupen.com/english/advisories/2007/0546
CVE ID: CVE-2007-0910 State: PUBLISHED Published: 2007-02-13T23:00:00 Last Updated: 2024-08-07T12:34:21.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.us.debian.org/security/2007/dsa-1264 - http://secunia.com/advisories/24295 - http://www.trustix.org/errata/2007/0009/ - http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html - http://secunia.com/advisories/24195 - http://www.securitytracker.com/id?1017671 - http://osvdb.org/32763 - http://secunia.com/advisori
.com/advisories/24195 - http://www.securitytracker.com/id?1017671 - http://osvdb.org/32763 - http://secunia.com/advisories/24606 - http://secunia.com/advisories/24642 - http://www.securityfocus.com/archive/1/466166/100/0/threaded - http://secunia.com/advisories/24217 - http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm - http://secunia.com/advisories/24248 - http://secunia.com/advisories/24514 - http://www.securityfocus.com/bid/22496 - https://issues.rpath.com/browse/RPL-1088 - http://secunia.com/advisories/24284 - http://www.ubuntu.com/usn/usn-424-2 - http://www.php.net/releases/5_2_1.php - http://security.gentoo.org/glsa/glsa-200703-21.xml - https://oval.cisecurity.org/repository
php.net/releases/5_2_1.php - http://security.gentoo.org/glsa/glsa-200703-21.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9514 - http://secunia.com/advisories/24432 - http://secunia.com/advisories/24421 - http://secunia.com/advisories/24089 - http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html - http://www.redhat.com/support/errata/RHSA-2007-0076.html - http://secunia.com/advisories/24419 - http://secunia.com/advisories/24945 - http://rhn.redhat.com/errata/RHSA-2007-0089.html - http://www.redhat.com/support/errata/RHSA-2007-0088.html - https://issues.rpath.com/browse/RPL-1268 - http://www.securityfocus.com/archive/1/461462/10
errata/RHSA-2007-0088.html - https://issues.rpath.com/browse/RPL-1268 - http://www.securityfocus.com/archive/1/461462/100/0/threaded - http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm - http://www.redhat.com/support/errata/RHSA-2007-0082.html - ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc - http://www.php.net/ChangeLog-5.php#5.2.1 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:048 - http://www.ubuntu.com/usn/usn-424-1 - http://www.redhat.com/support/errata/RHSA-2007-0081.html - http://secunia.com/advisories/24322 - http://secunia.com/advisories/24236 - http://www.vupen.com/english/advisories/2007/0546
CVE ID: CVE-2007-0911 State: PUBLISHED Published: 2007-02-13T23:00:00 Last Updated: 2024-08-07T12:34:21.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the str_ireplace function in PHP 5.2.1 might allow context-dependent attackers to cause a denial of service (crash). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24606 - http://www.securityfocus.com/archive/1/459856/100/0/threaded - http://osvdb.org/33952 - http://marc.info/?l=php-dev&m=117104930526516&w=2 - http://secunia.com/advisories/24514 - http://security.gentoo.org/glsa/glsa-200703-21.xml - http://lists.suse.com/archive/suse-security-announce/2007-Mar
514 - http://security.gentoo.org/glsa/glsa-200703-21.xml - http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html - http://www.securityfocus.com/bid/22505 - http://marc.info/?l=php-dev&m=117106751715609&w=2 - http://cvs.php.net/viewvc.cgi/php-src/ext/standard/string.c?r1=1.445.2.14.2.36&r2=1.445.2.14.2.37
CVE ID: CVE-2007-0912 State: PUBLISHED Published: 2007-02-13T23:00:00 Last Updated: 2024-08-07T12:34:21.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Request Forgery (CSRF) vulnerability in admin/admin.adm.php in Jportal 2.3.1, and possibly earlier, allows remote attackers to perform privileged actions as administrators by tricking the admin into accessing a URL with modified arguments to admin/admin.adm.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2239 - http://www.securityfocus.com/archive/1/459827/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/32458 - http://osvdb.org/33712
CVE ID: CVE-2007-0913 State: PUBLISHED Published: 2007-02-14T01:00:00 Last Updated: 2024-08-07T12:34:21.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Powerpoint allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as exploited by Trojan.PPDropper.G. NOTE: as of 20070213, it is not clear whether this is the same issue as CVE-2006-5296, CVE-2006-4694, CVE-2006-3876, CVE-2006-3877, or older issues. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35763 - http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2007-021312-5133-99&tabid=2
CVE ID: CVE-2007-0914 State: PUBLISHED Published: 2007-02-14T02:00:00 Last Updated: 2024-08-07T12:34:21.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the TCP subsystem for Solaris 10 allows remote attackers to cause a denial of service (system panic) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32484 - http://secunia.com/advisories/24166 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102796-1 - http://www.securityfocus.com/bid/22550 - http://www.vupen.com/english/advisories/2007/0588 - http://osvdb.org/33194 - http://www.securitytracker.com/id?1017649
http://www.vupen.com/english/advisories/2007/0588 - http://osvdb.org/33194 - http://www.securitytracker.com/id?1017649 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2120
CVE ID: CVE-2007-0915 State: PUBLISHED Published: 2007-02-14T02:00:00 Last Updated: 2024-08-07T12:34:21.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Distributed SLS daemon (SLSd) on HP-UX B.11.11 allows remote attackers to overwrite arbitrary files and gain privileges via a crafted RPC request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32471 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00862809 - http://www.securitytracker.com/id?1017630 - http://osvdb.org/33186 - http://www.vupen.com/english/advisories/2007/0590 - http://www.securityfocus.com/bid/22551 - http://www1.itrc.hp.com/servi
tp://www.vupen.com/english/advisories/2007/0590 - http://www.securityfocus.com/bid/22551 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00862809 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=474 - http://secunia.com/advisories/24169
CVE ID: CVE-2007-0916 State: PUBLISHED Published: 2007-02-14T02:00:00 Last Updated: 2024-08-07T12:34:21.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.11 and B.11.23 allows local users to cause an unspecified denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0596 - http://secunia.com/advisories/24173 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00863839 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32468 - https://oval.cisecurity.org/repository
do?docId=c00863839 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32468 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5239 - http://www.securitytracker.com/id?1017629 - http://osvdb.org/33198 - http://www.securityfocus.com/bid/22546 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00863839
CVE ID: CVE-2007-0917 State: PUBLISHED Published: 2007-02-14T02:00:00 Last Updated: 2024-08-07T12:34:21.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signatures that use regular expressions via fragmented packets. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5858 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32473 - http://www.securitytracker.com/id?1017631 - http://www.cisco.com/en/US/products/products_security_advisory09186a00807e0a5b.shtml - htt
uritytracker.com/id?1017631 - http://www.cisco.com/en/US/products/products_security_advisory09186a00807e0a5b.shtml - http://www.securityfocus.com/bid/22549 - http://www.cisco.com/en/US/products/products_security_response09186a00807e0a5e.html - http://osvdb.org/33052 - http://secunia.com/advisories/24142 - http://www.vupen.com/english/advisories/2007/0597
CVE ID: CVE-2007-0918 State: PUBLISHED Published: 2007-02-14T02:00:00 Last Updated: 2024-08-07T12:34:21.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ATOMIC.TCP signature engine in the Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XA, 12.3YA, 12.3T, and other trains allows remote attackers to cause a denial of service (IPS crash and traffic loss) via unspecified manipulations that are not properly handled by the regular expression feature, as demonstrated using the 3123.0 (Netbus Pro Traffic) signature. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33053 - http://www.securitytracker.com/id?1017631 - http://www.cisco.com/
gram Container: References: - http://osvdb.org/33053 - http://www.securitytracker.com/id?1017631 - http://www.cisco.com/en/US/products/products_security_advisory09186a00807e0a5b.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/32474 - http://www.securityfocus.com/bid/22549 - http://www.cisco.com/en/US/products/products_security_response09186a00807e0a5e.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5832 - http://secunia.com/advisories/24142 - http://www.vupen.com/english/advisories/2007/0597
CVE ID: CVE-2007-0919 State: PUBLISHED Published: 2007-02-14T11:00:00 Last Updated: 2024-08-07T12:34:21.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Nickolas Grigoriadis Mini Web server (MiniWebsvr) 0.0.6 allows remote attackers to list the directory immediately above the web root via a ..%00 sequence in the URI. Additional Analyst Notes: - CVE Program Container: References: - http://attrition.org/pipermail/vim/2007-February/001315.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/32451 - http://osvdb.org/33513 - http://www.securityfocus.com/bid/22523 - http://www.securityfocus.com/archive/1/459829/100/0/threaded - http://secu
13 - http://www.securityfocus.com/bid/22523 - http://www.securityfocus.com/archive/1/459829/100/0/threaded - http://securityreason.com/securityalert/2248
CVE ID: CVE-2007-0920 State: PUBLISHED Published: 2007-02-14T11:00:00 Last Updated: 2024-08-07T12:34:21.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in philboard_forum.asp in Philboard 1.14 and earlier allows remote attackers to execute arbitrary SQL commands via the forumid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3295 - http://www.securityfocus.com/bid/22532 - http://osvdb.org/35678 - http://www.vupen.com/english/advisories/2007/0600 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32442
CVE ID: CVE-2007-0921 State: PUBLISHED Published: 2007-02-14T11:00:00 Last Updated: 2024-08-07T12:34:21.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Portal Search allows remote attackers to redirect a URL to an arbitrary web site by placing the URL in the query string to the top-level URI. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32460 - http://osvdb.org/33713 - http://www.securityfocus.com/archive/1/459794/100/0/threaded - http://securityreason.com/securityalert/2247 - http://www.securityfocus.com/bid/22533
CVE ID: CVE-2007-0922 State: PUBLISHED Published: 2007-02-14T11:00:00 Last Updated: 2024-08-07T12:34:21.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in buscador/buscador.htm in Portal Search allows remote attackers to inject arbitrary web script or HTML via the query string. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33714 - http://www.securityfocus.com/archive/1/459794/100/0/threaded - http://securityreason.com/securityalert/2247 - http://www.securityfocus.com/bid/22533
CVE ID: CVE-2007-0923 State: PUBLISHED Published: 2007-02-14T11:00:00 Last Updated: 2024-08-07T12:34:21.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: buscador/buscador.htm in Portal Search allows remote attackers to obtain sensitive information (business logic) via a query string composed of a search for certain characters. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33715 - http://www.securityfocus.com/archive/1/459794/100/0/threaded - http://securityreason.com/securityalert/2247 - http://www.securityfocus.com/bid/22533 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32452
CVE ID: CVE-2007-0924 State: PUBLISHED Published: 2007-02-14T11:00:00 Last Updated: 2024-08-07T12:34:21.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Till Gerken phpPolls 1.0.3 allows remote attackers to bypass authentication and perform certain administrative actions via a direct request to phpPollAdmin.php3. NOTE: this issue might subsume CVE-2006-3764. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22522 - http://www.securityfocus.com/archive/1/459789/100/0/threaded - http://osvdb.org/33694 - http://securityreason.com/securityalert/2242
CVE ID: CVE-2007-0925 State: PUBLISHED Published: 2007-02-14T11:00:00 Last Updated: 2024-08-07T12:34:21.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search/SearchResults.aspx in Community Server allows remote attackers to inject arbitrary web script or HTML via the q parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32444 - http://securityreason.com/securityalert/2241 - http://osvdb.org/33717 - http://www.securityfocus.com/archive/1/459848/100/0/threaded - http://www.securityfocus.com/bid/22529
CVE ID: CVE-2007-0926 State: PUBLISHED Published: 2007-02-14T11:00:00 Last Updated: 2024-08-07T12:34:21.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dologin function in guestbook.php in KvGuestbook 1.0 Beta allows remote attackers to gain administrative privileges, probably via modified $mysql['pass'] and $gbpass variables. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33710 - http://securityreason.com/securityalert/2246 - http://www.securityfocus.com/archive/1/459799/100/0/threaded
CVE ID: CVE-2007-0927 State: PUBLISHED Published: 2007-02-14T11:00:00 Last Updated: 2024-08-07T12:34:21.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in uTorrent 1.6 allows remote attackers to execute arbitrary code via a torrent file with a crafted announce header. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32455 - http://www.vupen.com/english/advisories/2007/0571 - http://secunia.com/advisories/24130 - https://www.exploit-db.com/exploits/3296 - http://www.securitytracker.com/id?1017648 - http://www.osvdb.org/33180 - http://www.securityfocus.com/bid/22530 - http://www.secu
w.securitytracker.com/id?1017648 - http://www.osvdb.org/33180 - http://www.securityfocus.com/bid/22530 - http://www.securityfocus.com/archive/1/460346/100/0/threaded