Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ve/1/484603/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/38867 - http://www.securityfocus.com/bid/26707 - http://securityreason.com/securityalert/3422
CVE ID: CVE-2007-6273 State: PUBLISHED Published: 2007-12-07T11:00:00 Last Updated: 2024-08-07T16:02:36.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in the configuration file in SonicWALL GLobal VPN Client 3.1.556 and 4.0.0.810 allow user-assisted remote attackers to execute arbitrary code via format string specifiers in the (1) Hostname tag or the (2) name attribute in the Connection tag. NOTE: there might not be any realistic circumstances in which this issue crosses privilege boundaries. Additional Analyst Notes: - CVE Program Container: References: - http://www.sec-consult.com/305.html - http://marc.info/?l=bugtraq&m=1196782726030
- CVE Program Container: References: - http://www.sec-consult.com/305.html - http://marc.info/?l=bugtraq&m=119678272603064&w=2 - http://www.securityfocus.com/bid/26689 - http://www.securitytracker.com/id?1019038 - http://www.vupen.com/english/advisories/2007/4094 - http://secunia.com/advisories/27917
CVE ID: CVE-2007-6274 State: PUBLISHED Published: 2007-12-07T11:00:00 Last Updated: 2024-08-07T16:02:35.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in modules/ecal/display.php in the Event Calendar in bcoos 1.0.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) day or (2) year parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26629 - http://secunia.com/advisories/26945 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38734 - http://lostmon.blogspot.com/2007/11/bcoops-sql-injection-and-cross-site.html
CVE ID: CVE-2007-6275 State: PUBLISHED Published: 2007-12-07T11:00:00 Last Updated: 2024-08-07T16:02:35.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modules/adresses/ratefile.php in bcoos 1.0.10 and earlier allows remote attackers to execute arbitrary SQL commands via the lid parameter, a different vector than CVE-2007-6266. Additional Analyst Notes: - CVE Program Container: References: - http://lostmon.blogspot.com/2007/11/bcoops-adressesratefilephp-lid-variable.html - http://secunia.com/advisories/26945
CVE ID: CVE-2007-6276 State: PUBLISHED Published: 2007-12-07T11:00:00 Last Updated: 2024-08-07T16:02:36.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: The accept_connections function in the virtual private network daemon (vpnd) in Apple Mac OS X 10.5 before 10.5.4 allows remote attackers to cause a denial of service (divide-by-zero error and daemon crash) via a crafted load balancing packet to UDP port 4112. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT2163 - http://www.vupen.com/english/advisories/2008/1981/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/38855 - http://www.securityfocus.com/bid/26699 - http
/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/38855 - http://www.securityfocus.com/bid/26699 - http://www.vupen.com/english/advisories/2007/4145 - http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html - http://secunia.com/advisories/27938 - http://secunia.com/advisories/30802 - http://www.securitytracker.com/id?1019052 - https://www.exploit-db.com/exploits/4690
CVE ID: CVE-2007-6277 State: PUBLISHED Published: 2007-12-07T11:00:00 Last Updated: 2024-08-07T16:02:35.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via large (1) Metadata Block Size, (2) VORBIS Comment String Size, (3) Picture Metadata MIME-TYPE Size, (4) Picture Description Size, (5) Picture Data Length, (6) Padding Length, and (7) PICTURE Metadata width and height values in a .FLAC file, which result in a heap-based overflow; and large (8) VORBIS Comment String Size Length, (9) Picture MIME-Type, (10) Picture MIME-Type URL, an
p-based overflow; and large (8) VORBIS Comment String Size Length, (9) Picture MIME-Type, (10) Picture MIME-Type URL, and (11) Picture Description Length values in a .FLAC file, which result in a stack-based overflow. NOTE: some of these issues may overlap CVE-2007-4619. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2008/dsa-1469 - http://research.eeye.com/html/advisories/published/AD20071115.html - http://www.securitytracker.com/id?1018974 - http://securityreason.com/securityalert/3423 - http://secunia.com/advisories/28548 - http://www.kb.cert.org/vuls/id/544656 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval
- http://www.kb.cert.org/vuls/id/544656 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10435 - http://www.securityfocus.com/archive/1/483765/100/200/threaded
CVE ID: CVE-2007-6278 State: PUBLISHED Published: 2007-12-07T11:00:00 Last Updated: 2024-08-07T16:02:36.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allows user-assisted remote attackers to force a client to download arbitrary files via the MIME-Type URL flag (-->) for the FLAC image file in a crafted .FLAC file. Additional Analyst Notes: - CVE Program Container: References: - http://research.eeye.com/html/advisories/published/AD20071115.html - http://www.securitytracker.com/id?1018974 - http://securityreason.com/securityalert/3423 - http://www.kb.cert.org/vuls/id/544656 - http://www.securityfocus.com/archive/1/483765/1
yreason.com/securityalert/3423 - http://www.kb.cert.org/vuls/id/544656 - http://www.securityfocus.com/archive/1/483765/100/200/threaded
CVE ID: CVE-2007-6279 State: PUBLISHED Published: 2007-12-07T11:00:00 Last Updated: 2024-08-07T16:02:36.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple double free vulnerabilities in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via malformed (1) Seektable values or (2) Seektable Data Offsets in a .FLAC file. Additional Analyst Notes: - CVE Program Container: References: - http://research.eeye.com/html/advisories/published/AD20071115.html - http://www.securitytracker.com/id?1018974 - http://securityreason.com/securityalert/3423 - http://www.kb.cert.org/vuls/id/544656 - http://www.securityfocus.com
74 - http://securityreason.com/securityalert/3423 - http://www.kb.cert.org/vuls/id/544656 - http://www.securityfocus.com/archive/1/483765/100/200/threaded
CVE ID: CVE-2007-6281 State: PUBLISHED Published: 2007-12-20T00:00:00 Last Updated: 2024-08-07T16:02:36.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Open File Manager service (ofmnt.exe) in St. Bernard Open File Manager 9.5 allows remote attackers to execute arbitrary code via a long request. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-07-078.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39110 - http://www.securityfocus.com/bid/26914 - http://secunia.com/advisories/28131 - http://www.vupen.com/english/advisories/2007/4249 - http://marc.info/?l=full-disclosure&m=
ecunia.com/advisories/28131 - http://www.vupen.com/english/advisories/2007/4249 - http://marc.info/?l=full-disclosure&m=119793689730535&w=2
CVE ID: CVE-2007-6282 State: PUBLISHED Published: 2008-05-08T00:00:00 Last Updated: 2024-08-07T16:02:36.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPsec implementation in Linux kernel before 2.6.25 allows remote routers to cause a denial of service (crash) via a fragmented ESP packet in which the first fragment does not contain the entire ESP header and IV. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2008-0275.html - http://secunia.com/advisories/30962 - http://www.debian.org/security/2008/dsa-1630 - http://secunia.com/advisories/30294 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.
08/dsa-1630 - http://secunia.com/advisories/30294 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10549 - http://www.redhat.com/support/errata/RHSA-2008-0237.html - http://www.securityfocus.com/bid/29081 - http://secunia.com/advisories/31551 - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00000.html - http://www.redhat.com/support/errata/RHSA-2008-0585.html - https://bugzilla.redhat.com/show_bug.cgi?id=404291 - http://secunia.com/advisories/31107 - http://secunia.com/advisories/30890 - http://secunia.com/advisories/31628 - http://www.ubuntu.com/usn/usn-625-1 - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html
31628 - http://www.ubuntu.com/usn/usn-625-1 - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/42276 - http://secunia.com/advisories/30818 - http://marc.info/?l=linux-netdev&m=120372380411259&w=2 - http://secunia.com/advisories/30112 - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html
CVE ID: CVE-2007-6283 State: PUBLISHED Published: 2007-12-18T01:00:00 Last Updated: 2024-08-07T16:02:36.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows local users to perform unauthorized named commands, such as causing a denial of service by stopping named. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00671.html - http://www.redhat.com/support/errata/RHSA-2008-0300.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2007-6283 - http://secunia.com/advisories/28180
ta/RHSA-2008-0300.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2007-6283 - http://secunia.com/advisories/28180 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9977 - http://secunia.com/advisories/30313 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00587.html
CVE ID: CVE-2007-6284 State: PUBLISHED Published: 2008-01-12T02:00:00 Last Updated: 2024-08-07T16:02:36.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service (infinite loop) via XML containing invalid UTF-8 sequences. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28439 - http://security.gentoo.org/glsa/glsa-200801-20.xml - http://secunia.com/advisories/28466 - http://www.vupen.com/english/advisories/2008/1033/references - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103201-1 - http://www.debian.org/security
008/1033/references - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103201-1 - http://www.debian.org/security/2008/dsa-1461 - https://usn.ubuntu.com/569-1/ - http://www.novell.com/linux/security/advisories/suse_security_summary_report.html - http://www.securityfocus.com/archive/1/490306/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5216 - http://www.securityfocus.com/bid/27248 - http://secunia.com/advisories/28444 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:010 - http://www.vupen.com/english/advisories/2008/0117 - http://www.xmlsoft.org/news.html - http://secunia.com/advisories/28716 - http://secunia.com/a
ish/advisories/2008/0117 - http://www.xmlsoft.org/news.html - http://secunia.com/advisories/28716 - http://secunia.com/advisories/28740 - http://mail.gnome.org/archives/xml/2008-January/msg00036.html - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00379.html - http://secunia.com/advisories/28475 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11594 - http://www.securityfocus.com/archive/1/486410/100/0/threaded - http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html - http://support.avaya.com/elmodocs2/security/ASA-2008-047.htm - http://www.vupen.com/english/advisories/2008/0144 - http://secunia.com/advisor
com/elmodocs2/security/ASA-2008-047.htm - http://www.vupen.com/english/advisories/2008/0144 - http://secunia.com/advisories/28458 - http://secunia.com/advisories/29591 - http://www.vupen.com/english/advisories/2008/2094/references - http://secunia.com/advisories/28636 - http://support.avaya.com/elmodocs2/security/ASA-2008-050.htm - https://issues.rpath.com/browse/RPL-2121 - http://lists.vmware.com/pipermail/security-announce/2008/000009.html - http://www.redhat.com/support/errata/RHSA-2008-0032.html - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00396.html - http://secunia.com/advisories/28470 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201514-1 - ht
0396.html - http://secunia.com/advisories/28470 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201514-1 - http://secunia.com/advisories/28450 - http://secunia.com/advisories/31074 - https://bugzilla.redhat.com/show_bug.cgi?id=425927 - http://bugs.gentoo.org/show_bug.cgi?id=202628 - http://secunia.com/advisories/28452 - http://securitytracker.com/id?1019181
CVE ID: CVE-2007-6285 State: PUBLISHED Published: 2007-12-20T22:00:00 Last Updated: 2024-08-07T16:02:36.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration for autofs 5 (autofs5) in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 4 and 5, does not specify the nodev mount option for the -hosts map, which allows local users to access "important devices" by operating a remote NFS server and creating special device files on that server, as demonstrated by the /dev/mem device. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00726.html - http://osvdb.org
er: References: - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00726.html - http://osvdb.org/40442 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00732.html - http://secunia.com/advisories/28168 - http://secunia.com/advisories/28456 - http://rhn.redhat.com/errata/RHSA-2007-1177.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39188 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11457 - http://rhn.redhat.com/errata/RHSA-2007-1176.html - http://securitytracker.com/id?1019137 - https://bugzilla.redhat.com/show_bug.cgi?id=426218 - http://www.securityfocus.com/bid/26970 - http://www.mandri
019137 - https://bugzilla.redhat.com/show_bug.cgi?id=426218 - http://www.securityfocus.com/bid/26970 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:009 - http://secunia.com/advisories/28156
CVE ID: CVE-2007-6286 State: PUBLISHED Published: 2008-02-12T00:00:00 Last Updated: 2024-08-07T16:02:36.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty request to the SSL port, which allows remote attackers to trigger handling of "a duplicate copy of one of the recent requests," as demonstrated by using netcat to send the empty request. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3637 - http://secunia.com/advisories/30676 - http://secunia.com/advisories/28915 - http://secunia.com/adv
/securityalert/3637 - http://secunia.com/advisories/30676 - http://secunia.com/advisories/28915 - http://secunia.com/advisories/37460 - http://www.securityfocus.com/bid/31681 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://secunia.com/advisories/28878 - http://www.securityfocus.com/archive/1/487823/100/0/threaded - http://www.vupen.com/english/advisories/2008/0488 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://tomcat.apache.org/security-6.html - http://secunia.com/advisories/57126 - http://secunia.com/advisories/32222 - https://www.redhat.com/archives/fedora-package-
p://secunia.com/advisories/57126 - http://secunia.com/advisories/32222 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00315.html - http://security.gentoo.org/glsa/glsa-200804-10.xml - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00460.html - http://www.vupen.com/english/advisories/2008/1856/references - http://www.vmware.com/security/advisories/VMSA-2008-0010.html - http://tomcat.apache.org/security-5.html - http://www.vupen.com/english/advisories/2008/2780 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:136 - http://marc.info/?l=bugtraq&m=139344343412337&w=2 - http://lists.apple.com/archives/security-announce/2008/Oct/msg
136 - http://marc.info/?l=bugtraq&m=139344343412337&w=2 - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216 - http://secunia.com/advisories/29711 - http://www.vupen.com/english/advisories/2009/3316 - https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2007-6287 State: PUBLISHED Published: 2007-12-10T18:00:00 Last Updated: 2024-08-07T16:02:36.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the login page in Lxlabs HyperVM 2.0 allows remote attackers to inject arbitrary web script or HTML via the frm_emessage parameter, a different vector than CVE-2006-6649. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26751 - http://secunia.com/advisories/27893 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38926
CVE ID: CVE-2007-6288 State: PUBLISHED Published: 2007-12-10T18:00:00 Last Updated: 2024-08-07T16:02:36.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in TCExam before 5.1.000 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38920 - http://sourceforge.net/project/shownotes.php?release_id=559646&group_id=159398 - http://secunia.com/advisories/27940 - http://www.securityfocus.com/bid/26760
CVE ID: CVE-2007-6289 State: PUBLISHED Published: 2007-12-10T18:00:00 Last Updated: 2024-08-07T16:02:35.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in SerWeb 2.0.0 dev1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) _SERWEB[configdir] parameter to load_lang.php, (2) _SERWEB[functionsdir] parameter to main_prepend.php, and the (3) _PHPLIB[libdir] parameter to load_phplib.php, different vectors than CVE-2007-3359 and CVE-2007-3358. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26747 - https://www.exploit-db.com/exploits/9284 - https:/
ram Container: References: - http://www.securityfocus.com/bid/26747 - https://www.exploit-db.com/exploits/9284 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38906 - https://www.exploit-db.com/exploits/4696
CVE ID: CVE-2007-6290 State: PUBLISHED Published: 2007-12-10T18:00:00 Last Updated: 2024-08-07T16:02:36.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in js/get_js.php in SERWeb 2.0.0 dev1 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) mod and (2) js parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26747 - http://osvdb.org/39220 - https://www.exploit-db.com/exploits/4696 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38907
CVE ID: CVE-2007-6291 State: PUBLISHED Published: 2007-12-10T18:00:00 Last Updated: 2024-08-07T16:02:36.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in abm.aspx in Xigla Absolute Banner Manager .NET 4.0 allows remote attackers to execute arbitrary SQL commands via the z parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27958 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/058896.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/38921 - http://www.securityfocus.com/bid/26754
CVE ID: CVE-2007-6292 State: PUBLISHED Published: 2007-12-10T18:00:00 Last Updated: 2024-08-07T16:02:35.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in leggi_commenti.asp in MWOpen 1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4697 - http://www.securityfocus.com/bid/26746 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38905 - http://secunia.com/advisories/27956
CVE ID: CVE-2007-6293 State: PUBLISHED Published: 2007-12-10T18:00:00 Last Updated: 2024-08-07T16:02:35.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 6 R1.3 allow attackers to gain privileges via "some HMC commands." Additional Analyst Notes: - CVE Program Container: References: - http://www14.software.ibm.com/webapp/set2/sas/f/hmc/power5/install/v61.Readme.html#MH01064 - http://www.securitytracker.com/id?1019062 - http://secunia.com/advisories/27961 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4037 - http://www-1.ibm.com/support/docview.wss?uid=isg1MB02223 - http:/
om/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4037 - http://www-1.ibm.com/support/docview.wss?uid=isg1MB02223 - http://www.vupen.com/english/advisories/2007/4144 - http://osvdb.org/40946
CVE ID: CVE-2007-6294 State: PUBLISHED Published: 2007-12-10T18:00:00 Last Updated: 2024-08-07T16:02:36.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 3 R3.7 allow attackers to gain privileges via "some HMC commands." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26769 - http://www14.software.ibm.com/webapp/set2/sas/f/hmc/power4/install/ptf_U814685.html - http://www.securitytracker.com/id?1019062 - http://secunia.com/advisories/27970 - http://www.vupen.com/english/advisories/2007/4143 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38914 -
7970 - http://www.vupen.com/english/advisories/2007/4143 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38914 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4036 - http://osvdb.org/41623