Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-6689 State: PUBLISHED Published: 2008-01-17T01:00:00 Last Updated: 2024-08-07T16:18:20.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Menalto Gallery before 2.2.4 does not properly check for malicious file extensions during file uploads, which allows attackers to execute arbitrary code via the (1) Core application or (2) MIME module. Additional Analyst Notes: - CVE Program Container: References: - http://gallery.menalto.com/gallery_2.2.4_released - http://security.gentoo.org/glsa/glsa-200802-04.xml - http://osvdb.org/41669 - http://secunia.com/advisories/28898 - http://bugs.gentoo.org/show_bug.cgi?id=203217
CVE ID: CVE-2007-6690 State: PUBLISHED Published: 2008-01-17T01:00:00 Last Updated: 2024-08-07T16:18:20.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Gallery Remote module in Menalto Gallery before 2.2.4 does not check permissions for unspecified GR commands, which has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://gallery.menalto.com/gallery_2.2.4_released - http://security.gentoo.org/glsa/glsa-200802-04.xml - http://osvdb.org/41668 - http://secunia.com/advisories/28898 - http://bugs.gentoo.org/show_bug.cgi?id=203217
CVE ID: CVE-2007-6691 State: PUBLISHED Published: 2008-01-17T01:00:00 Last Updated: 2024-08-07T16:18:20.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Menalto Gallery before 2.2.4 have unknown impact, related to (1) "hotlink protection" in the URL rewrite module, (2) a WebDAV view in the WebDAV module, (3) a comment view in the Comment module, (4) unspecified "item information disclosure attacks" in the Core module Gallery application, (5) the slideshow in the Slideshow module, and (6) multiple Print modules. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41664 - http://gallery.menalto.com/gallery_2.2
al Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41664 - http://gallery.menalto.com/gallery_2.2.4_released - http://security.gentoo.org/glsa/glsa-200802-04.xml - http://osvdb.org/41662 - http://osvdb.org/41665 - http://osvdb.org/41667 - http://osvdb.org/41666 - http://secunia.com/advisories/28898 - http://bugs.gentoo.org/show_bug.cgi?id=203217 - http://osvdb.org/41663
CVE ID: CVE-2007-6692 State: PUBLISHED Published: 2008-01-17T01:00:00 Last Updated: 2024-08-07T16:18:20.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in Menalto Gallery before 2.2.4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) Core and (2) print modules. Additional Analyst Notes: - CVE Program Container: References: - http://gallery.menalto.com/gallery_2.2.4_released - http://security.gentoo.org/glsa/glsa-200802-04.xml - http://secunia.com/advisories/28898 - http://bugs.gentoo.org/show_bug.cgi?id=203217 - http://osvdb.org/41660 - http://osvdb.org/41661
CVE ID: CVE-2007-6693 State: PUBLISHED Published: 2008-01-17T01:00:00 Last Updated: 2024-08-07T16:18:20.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the WebCam module in Menalto Gallery before 2.2.4 has unknown impact and attack vectors related to a "proxied request." Additional Analyst Notes: - CVE Program Container: References: - http://gallery.menalto.com/gallery_2.2.4_released - http://security.gentoo.org/glsa/glsa-200802-04.xml - http://secunia.com/advisories/28898 - http://bugs.gentoo.org/show_bug.cgi?id=203217 - http://osvdb.org/41659
CVE ID: CVE-2007-6694 State: PUBLISHED Published: 2008-01-29T19:00:00 Last Updated: 2024-08-07T16:18:20.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: The chrp_show_cpuinfo function (chrp/setup.c) in Linux kernel 2.4.21 through 2.6.18-53, when running on PowerPC, might allow local users to cause a denial of service (crash) via unknown vectors that cause the of_get_property function to fail, which triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27555 - http://www.redhat.com/support/errata/RHSA-2008-0154.html - http://www.ubuntu.com/usn/usn-618-1 - https://bugzilla.redhat.com/show_bug.cgi?id
m/support/errata/RHSA-2008-0154.html - http://www.ubuntu.com/usn/usn-618-1 - https://bugzilla.redhat.com/show_bug.cgi?id=396751 - http://www.debian.org/security/2008/dsa-1565 - http://www.debian.org/security/2008/dsa-1504 - http://secunia.com/advisories/28696 - http://secunia.com/advisories/29236 - http://secunia.com/advisories/30515 - https://usn.ubuntu.com/614-1/ - http://www.debian.org/security/2008/dsa-1503 - http://secunia.com/advisories/28748 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11215 - http://secunia.com/advisories/29058 - http://www.vupen.com/english/advisories/2008/0380 - http://secunia.com/advisories/30769 - http://secunia.com/adv
29058 - http://www.vupen.com/english/advisories/2008/0380 - http://secunia.com/advisories/30769 - http://secunia.com/advisories/30018 - http://rhn.redhat.com/errata/RHSA-2008-0055.html - http://marc.info/?l=linux-kernel&m=119576191029571&w=2
CVE ID: CVE-2007-6695 State: PUBLISHED Published: 2008-02-01T19:41:00 Last Updated: 2024-08-07T16:18:20.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Drake CMS 0.4.9 allows remote attackers to inject arbitrary web script or HTML via the option parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41199 - http://www.securityfocus.com/bid/27459 - http://www.digitrustgroup.com/advisories/web-application-security-drake_cms.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39976
CVE ID: CVE-2007-6696 State: PUBLISHED Published: 2008-02-01T19:41:00 Last Updated: 2024-08-07T16:18:20.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar 1.1.6 allow remote attackers to inject arbitrary web script or HTML via (1) an event description, (2) the query string to pref.php, and (3) the adv parameter to search.php. NOTE: vector 1 requires user authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27461 - http://www.digitrustgroup.com/advisories/web-application-security-webcalendar.html - http://osvdb.org/41276 - http://osvdb.org/41275 - http:/
roup.com/advisories/web-application-security-webcalendar.html - http://osvdb.org/41276 - http://osvdb.org/41275 - http://osvdb.org/41274
CVE ID: CVE-2007-6697 State: PUBLISHED Published: 2008-02-01T19:41:00 Last Updated: 2024-08-07T16:18:20.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the LWZReadByte function in IMG_gif.c in SDL_image before 1.2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted GIF file, a similar issue to CVE-2006-4484. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.libsdl.org/cgi/viewvc.cgi/trunk/SDL_image/IMG_gif.c?r1=2970&r2=3462 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39865 - http:
iewvc.cgi/trunk/SDL_image/IMG_gif.c?r1=2970&r2=3462 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39865 - http://secunia.com/advisories/28869 - http://secunia.com/advisories/28850 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00008.html - http://secunia.com/advisories/28752 - https://issues.rpath.com/browse/RPL-2206 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00039.html - http://bugs.gentoo.org/show_bug.cgi?id=207933 - http://www.libsdl.org/cgi/viewvc.cgi/trunk/SDL_image/CHANGES?revision=3462&view=markup - http://secunia.com/advisories/29542 - http://www.debian.org/security/2008/dsa-1493 - http://www.securityfocus.com/bid/2
http://secunia.com/advisories/29542 - http://www.debian.org/security/2008/dsa-1493 - http://www.securityfocus.com/bid/27417 - http://secunia.com/advisories/28640 - http://wiki.rpath.com/Advisories:rPSA-2008-0061 - http://www.securityfocus.com/archive/1/488079/100/0/threaded - http://secunia.com/advisories/28830 - http://marc.info/?l=bugtraq&m=120110205511630&w=2 - http://www.gentoo.org/security/en/glsa/glsa-200802-01.xml - http://vexillium.org/?sec-sdlgif - http://www.ubuntu.com/usn/usn-595-1 - http://www.vupen.com/english/advisories/2008/0266 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:040 - http://secunia.com/advisories/28837
CVE ID: CVE-2007-6698 State: PUBLISHED Published: 2008-02-01T21:00:00 Last Updated: 2024-08-07T16:18:20.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BDB backend for slapd in OpenLDAP before 2.3.36 allows remote authenticated users to cause a denial of service (crash) via a potentially-successful modify operation with the NOOP control set to critical, possibly due to a double free vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:058 - http://secunia.com/advisories/29225 - http://www.securitytracker.com/id
va.com/security/advisories?name=MDVSA-2008:058 - http://secunia.com/advisories/29225 - http://www.securitytracker.com/id?1019480 - http://www.openldap.org/lists/openldap-bugs/200704/msg00067.html - http://secunia.com/advisories/28817 - http://wiki.rpath.com/Advisories:rPSA-2008-0059 - http://secunia.com/advisories/29682 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0059 - http://secunia.com/advisories/29256 - http://www.securityfocus.com/archive/1/488242/100/200/threaded - https://bugzilla.redhat.com/show_bug.cgi?id=431203 - http://secunia.com/advisories/29068 - http://www.ubuntu.com/usn/usn-584-1 - http://www.redhat.com/support/errata/RHSA-2008-0110.html - http://secunia.com/advisories/
www.ubuntu.com/usn/usn-584-1 - http://www.redhat.com/support/errata/RHSA-2008-0110.html - http://secunia.com/advisories/28953 - http://www.debian.org/security/2008/dsa-1541 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10748 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00105.html - http://www.openldap.org/lists/openldap-bugs/200704/msg00068.html - http://www.vupen.com/english/advisories/2009/3184 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://secunia.com/advisories/29957 - http://www.securityfocus.com/bid/26245 - http://support.apple.com/kb/HT3937
CVE ID: CVE-2007-6699 State: PUBLISHED Published: 2008-02-04T22:00:00 Last Updated: 2024-08-07T16:18:20.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the AIM PicEditor 9.5.1.8 ActiveX control in YGPPicEdit.dll in AOL You've Got Pictures (YGP) Picture Editor allow remote attackers to cause a denial of service (browser crash) via a long string in the (1) DisplayName, (2) FinalSavePath, (3) ForceSaveTo, (4) HiddenControls, (5) InitialEditorScreen, (6) Locale, (7) Proxy, and (8) UserAgent property values. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019143 - http://seclists.org/fulldisclosure/20
- CVE Program Container: References: - http://www.securitytracker.com/id?1019143 - http://seclists.org/fulldisclosure/2007/Dec/0561.html - http://seclists.org/fulldisclosure/2007/Dec/0574.html - http://www.securityfocus.com/bid/27026 - http://osvdb.org/41198
CVE ID: CVE-2007-6700 State: PUBLISHED Published: 2008-02-05T01:00:00 Last Updated: 2024-08-07T16:18:20.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cgi-bin/bgplg in the web interface for the BGPD daemon in OpenBSD 4.1 allows remote attackers to inject arbitrary web script or HTML via the cmd parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/bgplg/bgplg.c - http://www.securitytracker.com/id?1019288 - http://www.securityfocus.com/archive/1/487369/100/0/threaded - http://www.securityfocus.com/archive/1/487350/100/0/threaded - http://secunia.com/advisories/2
1/487369/100/0/threaded - http://www.securityfocus.com/archive/1/487350/100/0/threaded - http://secunia.com/advisories/28726 - http://www.mail-archive.com/misc%40openbsd.org/msg49057.html - http://www.securityfocus.com/bid/27535
CVE ID: CVE-2007-6701 State: PUBLISHED Published: 2008-02-13T20:00:00 Last Updated: 2024-08-07T16:18:20.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell Client 4.91 SP4 for Windows allow remote attackers to execute arbitrary code via long arguments to multiple unspecified RPC functions, aka Novell bug 287919, a different vulnerability than CVE-2007-2954. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2007-08/0082.html - http://secunia.com/advisories/26238 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5
2.html - http://secunia.com/advisories/26238 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5005400.html - http://www.securityfocus.com/bid/25092 - http://securitytracker.com/id?1018471 - http://www.zerodayinitiative.com/advisories/ZDI-07-045.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35653
CVE ID: CVE-2007-6702 State: PUBLISHED Published: 2008-03-04T19:00:00 Last Updated: 2024-08-07T16:18:20.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: goform/QuickStart_c0 on the GoAhead Web Server on the FS4104-AW (aka rooter) VDSL device contains a password in the typepassword field, which allows remote attackers to obtain this password by reading the HTML source, a different vulnerability than CVE-2002-1603. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/43168 - https://www.exploit-db.com/exploits/4744 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39149
CVE ID: CVE-2007-6703 State: PUBLISHED Published: 2008-03-04T19:00:00 Last Updated: 2024-08-07T16:18:20.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in vdccm before 0.10.1 in SynCE (SynCE-dccm) might allow attackers to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41174 - http://secunia.com/advisories/29228 - http://www.securityfocus.com/bid/28141 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00131.html - http://sourceforge.net/forum/forum.php?forum_id=766440 - http://secunia.com/advisories/29285
CVE ID: CVE-2007-6704 State: PUBLISHED Published: 2008-03-05T23:00:00 Last Updated: 2024-08-07T16:18:20.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass 4100 SSL VPN 5.4.1 through 5.5.2 and 6.0 through 6.0.1, when pre-logon sequences are enabled, allow remote attackers to inject arbitrary web script or HTML via the query string to (1) my.activation.php3 and (2) my.logon.php3. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3712 - http://www.securityfocus.com/archive/1/492511/100/0/threaded - http://secunia.com/advisories/27904 - http://www.procheckup.com/
www.securityfocus.com/archive/1/492511/100/0/threaded - http://secunia.com/advisories/27904 - http://www.procheckup.com/Vulnerability_PR07-14.php - http://www.osvdb.org/38981 - https://support.f5.com/kb/en-us/solutions/public/7000/900/SOL7923.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/38785 - http://www.securityfocus.com/bid/26659 - http://www.procheckup.com/Vulnerability_PR07-15a.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/38795 - http://www.securityfocus.com/archive/1/484411/100/0/threaded - http://www.osvdb.org/38980 - http://www.securitytracker.com/id?1019031 - http://www.securityfocus.com/bid/26661 - http://www.securityfocus.com/archive/1/484413/100/0/thr
racker.com/id?1019031 - http://www.securityfocus.com/bid/26661 - http://www.securityfocus.com/archive/1/484413/100/0/threaded
CVE ID: CVE-2007-6705 State: PUBLISHED Published: 2008-03-09T02:00:00 Last Updated: 2024-08-07T16:18:20.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebSphere MQ XA 5.3 before FP13 and 6.0.x before 6.0.2.1 client for Windows, when running in an MTS or a COM+ environment, grants the PROCESS_DUP_HANDLE privilege to the Everyone group upon connection to a queue manager, which allows local users to duplicate an arbitrary handle and possibly hijack an arbitrary process. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019529 - http://osvdb.org/43167 - http://www-1.ibm.com/support/docview.wss?uid=swg1IC50431
CVE ID: CVE-2007-6706 State: PUBLISHED Published: 2008-03-09T02:00:00 Last Updated: 2024-08-07T16:18:20.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2 CCH or 7.0.3, and possibly 8.0 allows remote attackers to execute arbitrary code via crafted text in an e-mail message sent over SMTP. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40956 - http://www-1.ibm.com/support/docview.wss?uid=swg21271957 - http://securitytracker.com/id?1019464 - http://secunia.com/advisories/27279 - http://www.vupen.com/english/advisories/2007/3597
CVE ID: CVE-2007-6707 State: PUBLISHED Published: 2008-03-13T18:00:00 Last Updated: 2024-08-07T16:18:20.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-3574. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/41270 - http://www.gnucitizen.org/projects/router-hacking-challenge/ - http://www.gnuci
rce.ibmcloud.com/vulnerabilities/41270 - http://www.gnucitizen.org/projects/router-hacking-challenge/ - http://www.gnucitizen.org/blog/persistent-xss-and-csrf-on-wireless-g-adsl-gateway-with-speedbooster-wag54gs/ - http://osvdb.org/43539
CVE ID: CVE-2007-6708 State: PUBLISHED Published: 2008-03-13T18:00:00 Last Updated: 2024-08-07T16:18:20.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware allow remote attackers to perform actions as administrators via an arbitrary valid request to an administrative URI, as demonstrated by (1) a Restore Factory Defaults action using the mtenRestore parameter to setup.cgi and (2) creation of a user account using the sysname parameter to setup.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.
sname parameter to setup.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-challenge/ - http://osvdb.org/43537 - http://www.gnucitizen.org/blog/persistent-xss-and-csrf-on-wireless-g-adsl-gateway-with-speedbooster-wag54gs/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/41269 - http://osvdb.org/43538
CVE ID: CVE-2007-6709 State: PUBLISHED Published: 2008-03-13T18:00:00 Last Updated: 2024-08-07T16:18:20.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware has "admin" as its default password for the "admin" account, which makes it easier for remote attackers to obtain access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-challenge/ - http://www.gnucitizen.org/blog/persistent-xss-and-csrf-on-wireless-g-adsl-gateway-with-speedbooster-wag54gs/ - https://exchange.xforce.
itizen.org/blog/persistent-xss-and-csrf-on-wireless-g-adsl-gateway-with-speedbooster-wag54gs/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/41268 - http://osvdb.org/43536
CVE ID: CVE-2007-6711 State: PUBLISHED Published: 2008-03-24T23:00:00 Last Updated: 2024-08-07T16:18:20.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in customer.php in FreeWebshop.org 2.2.5, 2.2.6 and 2.2.7WIP1/2 allows remote attackers to gain administrator privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.freewebshop.org/?News - http://www.freewebshop.org/?Downloads:Fixes - http://osvdb.org/43804 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41439
CVE ID: CVE-2007-6712 State: PUBLISHED Published: 2008-04-12T19:00:00 Last Updated: 2024-08-07T16:18:20.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the hrtimer_forward function (hrtimer.c) in Linux kernel 2.6.21-rc4, when running on 64-bit systems, allows local users to cause a denial of service (infinite loop) via a timer with a large expiry value, which causes the timer to always be expired. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2008-0275.html - http://git.kernel.org/?p=linux/kernel/git/chris/linux-2.6.git%3Ba=commitdiff%3Bh=13788ccc41ceea5893f9c747c59bc0b28f2416c2 - http://secunia.
rg/?p=linux/kernel/git/chris/linux-2.6.git%3Ba=commitdiff%3Bh=13788ccc41ceea5893f9c747c59bc0b28f2416c2 - http://secunia.com/advisories/30294 - http://secunia.com/advisories/30368 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9210 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41827 - http://www.debian.org/security/2008/dsa-1588 - http://www.redhat.com/support/errata/RHSA-2008-0585.html - http://secunia.com/advisories/31107 - http://secunia.com/advisories/31628 - http://www.ubuntu.com/usn/usn-625-1 - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html - http://www.securityfocus.com/bid/29294 - http://secunia.com/advisor
g/opensuse-security-announce/2008-06/msg00006.html - http://www.securityfocus.com/bid/29294 - http://secunia.com/advisories/30818
CVE ID: CVE-2007-6713 State: PUBLISHED Published: 2008-04-16T20:00:00 Last Updated: 2024-08-07T16:18:20.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Flip4Mac WMV before 2.2.0.49 has unknown impact and attack vectors related to malformed WMV files. Additional Analyst Notes: - CVE Program Container: References: - http://www.flip4mac.com/downloads/wmv_components/rel_Flip4mac_WMV_2.2.0.49.pdf - http://secunia.com/advisories/29922 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41872 - http://www.securityfocus.com/bid/28912
CVE ID: CVE-2007-6714 State: PUBLISHED Published: 2008-04-17T22:00:00 Last Updated: 2024-08-07T16:18:20.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: DBMail before 2.2.9, when using authldap with an LDAP server that supports anonymous login such as Active Directory, allows remote attackers to bypass authentication via an empty password, which causes the LDAP bind to indicate success based on anonymous authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200804-24.xml - http://www.securityfocus.com/bid/28849 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41907 - http://osvdb.org/44561 - http://se