Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-0242 State: PUBLISHED Published: 2007-04-03T16:00:00 Last Updated: 2024-08-07T12:12:17.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: The UTF-8 decoder in codecs/qutfcodec.cpp in Qt 3.3.8 and 4.2.3 does not reject long UTF-8 sequences as required by the standard, which allows remote attackers to conduct cross-site scripting (XSS) and directory traversal attacks via long sequences that decode to dangerous metacharacters. Additional Analyst Notes: - CVE Program Container: References: - http://support.novell.com/techcenter/psdb/39ea4b325a7da742cb8b6995fa585b14.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/33397 - http://secunia.com/advisories/2469
2cb8b6995fa585b14.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/33397 - http://secunia.com/advisories/24699 - http://www.redhat.com/support/errata/RHSA-2007-0909.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:074 - https://issues.rpath.com/browse/RPL-1202 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:076 - http://support.avaya.com/elmodocs2/security/ASA-2007-424.htm - http://secunia.com/advisories/24889 - http://secunia.com/advisories/27275 - http://secunia.com/advisories/24727 - http://secunia.com/advisories/26857 - http://www.trolltech.com/company/newsroom/announcements/press.2007-03-30.9172215350 - http://www.novell.com/linux/security/advi
www.trolltech.com/company/newsroom/announcements/press.2007-03-30.9172215350 - http://www.novell.com/linux/security/advisories/2007_6_sr.html - http://www.nabble.com/Bug-417390:-CVE-2007-0242%2C--Qt-UTF-8-overlong-sequence-decoding-vulnerability-t3506065.html - http://www.debian.org/security/2007/dsa-1292 - http://secunia.com/advisories/24847 - http://secunia.com/advisories/24705 - http://rhn.redhat.com/errata/RHSA-2011-1324.html - http://www.securityfocus.com/bid/23269 - http://secunia.com/advisories/46117 - http://secunia.com/advisories/27108 - http://secunia.com/advisories/24759 - http://www.ubuntu.com/usn/usn-452-1 - http://secunia.com/advisories/24726 - ftp://patches.sgi.com/support/fre
es/24759 - http://www.ubuntu.com/usn/usn-452-1 - http://secunia.com/advisories/24726 - ftp://patches.sgi.com/support/free/security/advisories/20070901-01-P.asc - http://www.vupen.com/english/advisories/2007/1212 - http://secunia.com/advisories/25263 - http://secunia.com/advisories/26804 - http://fedoranews.org/updates/FEDORA-2007-703.shtml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11510 - http://www.redhat.com/support/errata/RHSA-2007-0883.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.348591 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:075 - http://support.novell.com/techcenter/
ecurity.348591 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:075 - http://support.novell.com/techcenter/psdb/fc79b7f48d739f9c803a24ddad933384.html - http://secunia.com/advisories/24797
CVE ID: CVE-2007-0243 State: PUBLISHED Published: 2007-01-17T22:00:00 Last Updated: 2024-08-07T12:12:17.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Sun JDK and Java Runtime Environment (JRE) 5.0 Update 9 and earlier, SDK and JRE 1.4.2_12 and earlier, and SDK and JRE 1.3.1_18 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/457159/100/0/threaded - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102760-1 - http://docs.info.apple.com/article.html?artnum=307177 - ht
/sunsolve.sun.com/search/document.do?assetkey=1-26-102760-1 - http://docs.info.apple.com/article.html?artnum=307177 - http://secunia.com/advisories/24468 - http://www.redhat.com/support/errata/RHSA-2007-0166.html - http://www.kb.cert.org/vuls/id/388289 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00876579 - http://secunia.com/advisories/26049 - http://www.vupen.com/english/advisories/2007/1814 - http://secunia.com/advisories/24202 - http://www.securityfocus.com/archive/1/457638/100/0/threaded - http://secunia.com/advisories/25283 - http://osvdb.org/32834 - http://secunia.com/advisories/24189 - http://h20000.www2.hp.com/bizsupport/TechSupport/Documen
http://osvdb.org/32834 - http://secunia.com/advisories/24189 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00876579 - http://www.novell.com/linux/security/advisories/2007_45_java.html - http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html - http://securityreason.com/securityalert/2158 - http://securitytracker.com/id?1017520 - http://www.redhat.com/support/errata/RHSA-2007-0956.html - http://support.novell.com/techcenter/psdb/4f850d1e2b871db609de64ec70f0089c.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11073 - http://secunia.com/advisories/26645 - http://www.redhat.com/support/errat
finition/oval%3Aorg.mitre.oval%3Adef%3A11073 - http://secunia.com/advisories/26645 - http://www.redhat.com/support/errata/RHSA-2007-0167.html - http://secunia.com/advisories/26119 - http://secunia.com/advisories/23757 - http://www.securityfocus.com/bid/22085 - http://www.vupen.com/english/advisories/2007/4224 - http://secunia.com/advisories/24993 - http://secunia.com/advisories/28115 - http://www.redhat.com/support/errata/RHSA-2008-0261.html - http://www.zerodayinitiative.com/advisories/ZDI-07-005.html - http://www.vupen.com/english/advisories/2007/0211 - http://secunia.com/advisories/27203 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31537 - http://www.vupen.com/english/advisories
/advisories/27203 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31537 - http://www.vupen.com/english/advisories/2007/0936 - http://security.gentoo.org/glsa/glsa-200702-08.xml - http://support.novell.com/techcenter/psdb/d2f549cc040cd81ae4a268bb5edfe918.html - http://www.gentoo.org/security/en/glsa/glsa-200702-07.xml - http://www.us-cert.gov/cas/techalerts/TA07-022A.html - http://dev2dev.bea.com/pub/advisory/242
CVE ID: CVE-2007-0244 State: PUBLISHED Published: 2007-05-11T03:55:00 Last Updated: 2024-08-07T12:12:17.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: pptpgre.c in PoPToP Point to Point Tunneling Server (pptpd) before 1.3.4 allows remote attackers to cause a denial of service (PPTP connection tear-down) via (1) GRE packets with out-of-order sequence numbers or (2) certain GRE packets that are processed using a wrong pointer and improperly dequeued. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1743 - http://www.novell.com/linux/security/advisories/2007_19_sr.html - http://www.securitytracker.com/id?1018064 - htt
1743 - http://www.novell.com/linux/security/advisories/2007_19_sr.html - http://www.securitytracker.com/id?1018064 - http://www.securityfocus.com/bid/23886 - http://sourceforge.net/project/shownotes.php?release_id=501476&group_id=44827 - http://www.trustix.org/errata/2007/0017/ - http://secunia.com/advisories/26987 - http://www.ubuntu.com/usn/usn-459-1 - http://www.novell.com/linux/security/advisories/2007_10_sr.html - http://secunia.com/advisories/25255 - http://www.ubuntu.com/usn/usn-459-2 - http://security.gentoo.org/glsa/glsa-200705-18.xml - http://secunia.com/advisories/25220 - http://www.debian.org/security/2007/dsa-1288
CVE ID: CVE-2007-0245 State: PUBLISHED Published: 2007-06-12T21:00:00 Last Updated: 2024-08-07T12:12:17.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in OpenOffice.org (OOo) 2.2.1 and earlier allows remote attackers to execute arbitrary code via a RTF file with a crafted prtdata tag with a length parameter inconsistency, which causes vtable entries to be overwritten. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25648 - https://issues.rpath.com/browse/RPL-1570 - http://www.vupen.com/english/advisories/2007/2229 - http://secunia.com/advisories/25894 - http://secunia.com/advisories/26476 - http://www.
m/english/advisories/2007/2229 - http://secunia.com/advisories/25894 - http://secunia.com/advisories/26476 - http://www.securitytracker.com/id?1018239 - http://secunia.com/advisories/25705 - http://www.ubuntu.com/usn/usn-482-1 - http://secunia.com/advisories/25862 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:144 - http://sw.openoffice.org/source/browse/sw/sw/source/filter/rtf/swparrtf.cxx?rev=1.67 - http://www.securityfocus.com/archive/1/471274/100/0/threaded - http://www.debian.org/security/2007/dsa-1307 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102917-1 - http://secunia.com/advisories/26010 - http://www.vupen.com/english/advisories/2007/2166 - http://secun
y=1-26-102917-1 - http://secunia.com/advisories/26010 - http://www.vupen.com/english/advisories/2007/2166 - http://secunia.com/advisories/26022 - http://www.gentoo.org/security/en/glsa/glsa-200707-02.xml - http://www.redhat.com/support/errata/RHSA-2007-0406.html - http://secunia.com/advisories/25673 - http://www.novell.com/linux/security/advisories/2007_37_openoffice.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34843 - http://www.securityfocus.com/bid/24450 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10002 - http://secunia.com/advisories/25650 - ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc - http://secuni
/secunia.com/advisories/25650 - ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc - http://secunia.com/advisories/25905 - http://osvdb.org/35378
CVE ID: CVE-2007-0246 State: PUBLISHED Published: 2007-05-29T21:00:00 Last Updated: 2024-08-07T12:12:17.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: plugins/scmcvs/www/cvsweb.php in the CVSWeb CGI in GForge 4.5.16 before 20070524, aka gforge-plugin-scmcvs, allows remote attackers to execute arbitrary commands via shell metacharacters in the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://gforge.org/scm/viewvc.php/branches/Branch_4_5/gforge/plugins/scmcvs/www/cvsweb.php?root=gforge&r1=5849&r2=6038&pathrev=6038 - http://www.vupen.com/english/advisories/2007/1942 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34510 - http://osvdb.org
w.vupen.com/english/advisories/2007/1942 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34510 - http://osvdb.org/36526 - http://www.debian.org/security/2007/dsa-1297 - http://secunia.com/advisories/25395 - http://secunia.com/advisories/25416 - http://www.securityfocus.com/bid/24141
CVE ID: CVE-2007-0247 State: PUBLISHED Published: 2007-01-16T18:00:00 Last Updated: 2024-08-07T12:12:17.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory listing responses, possibly related to the (1) ftpListingFinish and (2) ftpHtmlifyListEntry functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE7-RELEASENOTES.html#s12 - http://www.squid-cache.org/bugs/show_bug.cgi?id=1857 - http://secunia.com/advisories/23921 - http://secunia.com/advisories/23946 - http://www.
.org/bugs/show_bug.cgi?id=1857 - http://secunia.com/advisories/23921 - http://secunia.com/advisories/23946 - http://www.securityfocus.com/bid/22079 - http://www.vupen.com/english/advisories/2007/0199 - http://www.gentoo.org/security/en/glsa/glsa-200701-22.xml - http://secunia.com/advisories/23810 - http://www.novell.com/linux/security/advisories/2007_12_squid.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:026 - http://www.trustix.org/errata/2007/0003/ - http://www.ubuntu.com/usn/usn-414-1 - http://secunia.com/advisories/23837 - http://secunia.com/advisories/23805 - http://secunia.com/advisories/23767 - http://osvdb.org/39839 - http://fedoranews.org/cms/node/2442 - http://
ies/23805 - http://secunia.com/advisories/23767 - http://osvdb.org/39839 - http://fedoranews.org/cms/node/2442 - http://secunia.com/advisories/23889 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31523
CVE ID: CVE-2007-0248 State: PUBLISHED Published: 2007-01-16T18:00:00 Last Updated: 2024-08-07T12:12:17.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: The aclMatchExternal function in Squid before 2.6.STABLE7 allows remote attackers to cause a denial of service (crash) by causing an external_acl queue overload, which triggers an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE7-RELEASENOTES.html#s12 - http://www.securityfocus.com/bid/22203 - http://secunia.com/advisories/23921 - http://secunia.com/advisories/23946 - http://www.vupen.com/english/advisories/2007/0199 - http://www.gentoo.
ies/23921 - http://secunia.com/advisories/23946 - http://www.vupen.com/english/advisories/2007/0199 - http://www.gentoo.org/security/en/glsa/glsa-200701-22.xml - http://www.novell.com/linux/security/advisories/2007_12_squid.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:026 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31525 - http://www.ubuntu.com/usn/usn-414-1 - http://secunia.com/advisories/23805 - http://secunia.com/advisories/23767 - http://secunia.com/advisories/23889 - http://www.squid-cache.org/bugs/show_bug.cgi?id=1848
CVE ID: CVE-2007-0249 State: PUBLISHED Published: 2007-01-16T23:00:00 Last Updated: 2024-08-07T12:12:17.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Nwom topsites 3.0 allows remote attackers to inject arbitrary web script or HTML via the o parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33461 - http://www.securityfocus.com/archive/1/456636/100/0/threaded - http://www.securityfocus.com/bid/22012 - http://securityreason.com/securityalert/2149
CVE ID: CVE-2007-0250 State: PUBLISHED Published: 2007-01-16T23:00:00 Last Updated: 2024-08-07T12:12:18.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in Nwom topsites 3.0 allows remote attackers to obtain potentially sensitive information via a ' (quote) character in the o parameter, which forces a SQL error. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33462 - http://www.securityfocus.com/archive/1/456636/100/0/threaded - http://www.securityfocus.com/bid/22012 - http://securityreason.com/securityalert/2149
CVE ID: CVE-2007-0251 State: PUBLISHED Published: 2007-01-16T23:00:00 Last Updated: 2024-08-07T12:12:17.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the DecodeGRE function in src/decode.c in Snort 2.6.1.2 allows remote attackers to trigger dereferencing of certain memory locations via crafted GRE packets, which may cause corruption of log files or writing of sensitive information into log files. Additional Analyst Notes: - CVE Program Container: References: - http://labs.calyptix.com/advisories/CX-2007-01.txt - http://www.vupen.com/english/advisories/2007/0152 - http://osvdb.org/32095 - http://www.snort.org/got_source/source.html - http://securitytrack
glish/advisories/2007/0152 - http://osvdb.org/32095 - http://www.snort.org/got_source/source.html - http://securitytracker.com/id?1017507 - http://osvdb.org/33464 - http://www.securityfocus.com/archive/1/456598/100/0/threaded - http://www.securityfocus.com/bid/22004 - http://securityreason.com/securityalert/2165
CVE ID: CVE-2007-0252 State: PUBLISHED Published: 2007-01-16T23:00:00 Last Updated: 2024-08-07T12:12:17.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in easy-content filemanager allows remote attackers to upload or modify arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33463 - http://www.securityfocus.com/archive/1/456622/100/0/threaded
CVE ID: CVE-2007-0253 State: PUBLISHED Published: 2007-01-16T23:00:00 Last Updated: 2024-08-07T12:12:17.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the grsecurity patch has unspecified impact and remote attack vectors, a different vulnerability than the expand_stack vulnerability from the Digital Armaments 20070110 pre-advisory. NOTE: the grsecurity developer has disputed this issue, stating that "the function they claim the vulnerability to be in is a trivial function, which can, and has been, easily checked for any supposed vulnerabilities." The developer also cites a past disclosure that was not proven Additional Analyst Notes: - CVE Progra
vulnerabilities." The developer also cites a past disclosure that was not proven Additional Analyst Notes: - CVE Program Container: References: - http://www.digitalarmaments.com/news_news.shtml - http://grsecurity.net/news.php#digitalfud - http://forums.grsecurity.net/viewtopic.php?t=1646
CVE ID: CVE-2007-0254 State: PUBLISHED Published: 2007-01-16T23:00:00 Last Updated: 2024-08-07T12:12:17.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the errors_create_window function in errors.c in xine-ui allows attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/31594 - http://secunia.com/advisories/23891 - http://secunia.com/advisories/23931 - http://www.securityfocus.com/bid/22002 - http://secunia.com/advisories/23709 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:154 - http://www.securityfocus.com/archive/1/456590/100/0/threaded - http:/
riva.com/security/advisories?name=MDKSA-2007:154 - http://www.securityfocus.com/archive/1/456590/100/0/threaded - http://security.gentoo.org/glsa/glsa-200701-18.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/31505 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:027
CVE ID: CVE-2007-0255 State: PUBLISHED Published: 2007-01-16T23:00:00 Last Updated: 2024-08-07T12:12:17.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a certain M3U file that contains a long #EXTINF line and contains format string specifiers in an invalid udp:// URI, possibly a variant of CVE-2007-0017. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22252 - http://www.securityfocus.com/archive/1/456523/100/0/threaded - http://secunia.com/advisories/23931 - http://www.mandriva.com/security
curityfocus.com/archive/1/456523/100/0/threaded - http://secunia.com/advisories/23931 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:154 - http://osvdb.org/31666 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:027
CVE ID: CVE-2007-0256 State: PUBLISHED Published: 2007-01-16T23:00:00 Last Updated: 2024-08-07T12:12:17.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: VideoLAN VLC 0.8.6a allows remote attackers to cause a denial of service (application crash) via a crafted .wmv file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22003 - http://osvdb.org/39022 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14698 - http://downloads.securityfocus.com/vulnerabilities/exploits/22003.py - http://wiki.videolan.org/Changelog/0.8.6b - https://exchange.xforce.ibmcloud.com/vulnerabilities/31515
CVE ID: CVE-2007-0257 State: PUBLISHED Published: 2007-01-16T23:00:00 Last Updated: 2025-01-17T14:11:44.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the expand_stack function in grsecurity PaX allows local users to gain privileges via unspecified vectors. NOTE: the grsecurity developer has disputed this issue, stating that "the function they claim the vulnerability to be in is a trivial function, which can, and has been, easily checked for any supposed vulnerabilities." The developer also cites a past disclosure that was not proven. As of 20070120, the original researcher has released demonstration code Additional Analyst Notes: - CVE Program C
roven. As of 20070120, the original researcher has released demonstration code Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://securitytracker.com/id?1017509 - http://www.digitalarmaments.com/pre2007-00018659.html - http://www.securityfocus.com/archive/1/456626/100/0/threaded - http://www.securityfocus.com/archive/1/456722/100/0/threaded - http://www.securityfocus.com/archive/1/462302/100/100/threaded - http://www.digitalarmaments.com/news_news.shtml - http://grsecurity.net/news.php#digitalfud - http://secunia.com/advisories/23713 - http://www.securityfocus.com/bid/22014 - http://forums.grsecurity.net/viewtopic.php?t=1646 - http://www.security
23713 - http://www.securityfocus.com/bid/22014 - http://forums.grsecurity.net/viewtopic.php?t=1646 - http://www.securityfocus.com/archive/1/457509/100/0/threaded - http://www.vupen.com/english/advisories/2007/0155 - http://osvdb.org/32727
CVE ID: CVE-2007-0258 State: PUBLISHED Published: 2007-01-16T23:00:00 Last Updated: 2024-08-07T12:12:17.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in (1) Fastilo 2.0 and (2) Open Solution Quick.Cart 2.0 allows remote attackers to inject arbitrary web script or HTML via the p parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://14house.blogspot.com/2007/01/fastilo-open-source-shopping-cart-vuln.html - http://www.vupen.com/english/advisories/2007/0156 - http://secunia.com/advisories/23733 - http://osvdb.org/32731 - http:
http://www.vupen.com/english/advisories/2007/0156 - http://secunia.com/advisories/23733 - http://osvdb.org/32731 - http://www.securityfocus.com/bid/21971 - http://secunia.com/advisories/23738 - http://www.securityfocus.com/bid/22007 - http://osvdb.org/32730 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31475 - http://www.vupen.com/english/advisories/2007/0157
CVE ID: CVE-2007-0259 State: PUBLISHED Published: 2007-01-16T23:00:00 Last Updated: 2024-08-07T12:12:17.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ezboxx Portal System Beta 0.7.6 and earlier allows remote attackers to obtain sensitive information via an invalid cat parameter to boxx/knowledgebase.asp, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0208 - http://www.bugsec.com/articles.php?Security=20 - http://osvdb.org/33470 - http://www.securityfocus.com/archive/1/456699/100/0/threaded - http://osvdb.org/32829
CVE ID: CVE-2007-0260 State: PUBLISHED Published: 2007-01-16T23:00:00 Last Updated: 2024-08-07T12:12:17.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Naig 0.5.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the this_path parameter. NOTE: a reliable third party disputes this vulnerability because this_path is defined before use Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/456744/100/0/threaded - http://www.securityfocus.com/archive/1/456785/100/0/threaded - http://www.attrition.org/pipermail/vim/2007-January/001239.html - http://
ityfocus.com/archive/1/456785/100/0/threaded - http://www.attrition.org/pipermail/vim/2007-January/001239.html - http://securityreason.com/securityalert/2145 - http://osvdb.org/33472