Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-1705 State: PUBLISHED Published: 2007-03-27T01:00:00 Last Updated: 2024-08-07T13:06:25.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in Active Trade 2 allows remote attackers to execute arbitrary SQL commands via the catid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3549 - http://secunia.com/advisories/24631 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33184 - http://www.vupen.com/english/advisories/2007/1095
CVE ID: CVE-2007-1706 State: PUBLISHED Published: 2007-03-27T01:00:00 Last Updated: 2024-08-07T13:06:26.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in eWebQuiz.asp in eWebQuiz 8 allows remote attackers to execute arbitrary SQL commands via the QuizID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3558 - http://secunia.com/advisories/24653 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33195 - http://osvdb.org/34439 - http://www.vupen.com/english/advisories/2007/1101
CVE ID: CVE-2007-1707 State: PUBLISHED Published: 2007-03-27T01:00:00 Last Updated: 2024-08-07T13:06:26.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Net Side Content Management System (Net-Side.net CMS) allows remote attackers to execute arbitrary PHP code via a URL in the cms parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37194 - https://www.exploit-db.com/exploits/3562 - http://www.securityfocus.com/bid/23130
CVE ID: CVE-2007-1708 State: PUBLISHED Published: 2007-03-27T01:00:00 Last Updated: 2024-08-07T13:06:26.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in lib/db/ez_sql.php in ttCMS 4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the lib_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3563 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33202 - http://www.vupen.com/english/advisories/2007/1102 - http://osvdb.org/37198 - http://www.securityfocus.com/bid/23139
CVE ID: CVE-2007-1709 State: PUBLISHED Published: 2007-03-27T01:00:00 Last Updated: 2024-08-07T13:06:25.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the confirm_phpdoc_compiled function in the phpDOC extension (PECL phpDOC) in PHP 5.2.1 allows context-dependent attackers to execute arbitrary code via a long argument string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23124 - http://securityreason.com/securityalert/2512 - https://www.exploit-db.com/exploits/3576 - http://www.securityfocus.com/archive/1/463843/100/0/threaded - http://retrogod.altervista.org/php521_phpdoc_bof.html - https://exchange.xfor
ocus.com/archive/1/463843/100/0/threaded - http://retrogod.altervista.org/php521_phpdoc_bof.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/33236
CVE ID: CVE-2007-1710 State: PUBLISHED Published: 2007-03-27T01:00:00 Last Updated: 2024-08-07T13:06:26.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: The readfile function in PHP 4.4.4, 5.1.6, and 5.2.1 allows context-dependent attackers to bypass safe_mode restrictions and read arbitrary files by referring to local files with a certain URL syntax instead of a pathname syntax, as demonstrated by a filename preceded a "php://../../" sequence. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1991 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506 - http://h20000.www2.hp.
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137 - http://www.vupen.com/english/advisories/2007/2374 - http://secunia.com/advisories/25423 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506 - http://secunia.com/advisories/25850 - https://www.exploit-db.com/exploits/3573
CVE ID: CVE-2007-1711 State: PUBLISHED Published: 2007-03-27T01:00:00 Last Updated: 2024-08-07T13:06:25.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent attackers to execute arbitrary code by overwriting variables pointing to (1) the GLOBALS array or (2) the session data in _SESSION. NOTE: this issue was introduced when attempting to patch CVE-2007-1701 (MOPB-31-2007). Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2732 - http://www.securityfocus.com/bid/23121 - http://www.debian.org/security/2007/dsa-1283 - http://rhn.red
ories/2007/2732 - http://www.securityfocus.com/bid/23121 - http://www.debian.org/security/2007/dsa-1283 - http://rhn.redhat.com/errata/RHSA-2007-0154.html - http://www.securityfocus.com/archive/1/466166/100/0/threaded - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://security.gentoo.org/glsa/glsa-200705-19.xml - http://secunia.com/advisories/24941 - http://secunia.com/advisories/25062 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10406 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:087 - http://secunia.com/advisories/24945 - http://www.debian.org/security/2007/dsa-1282 - https://issues.rpath.com/brow
087 - http://secunia.com/advisories/24945 - http://www.debian.org/security/2007/dsa-1282 - https://issues.rpath.com/browse/RPL-1268 - http://docs.info.apple.com/article.html?artnum=306172 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33575 - http://secunia.com/advisories/24924 - http://rhn.redhat.com/errata/RHSA-2007-0155.html - http://secunia.com/advisories/24910 - http://www.securityfocus.com/bid/25159 - http://secunia.com/advisories/25445 - http://www.php-security.org/MOPB/MOPB-32-2007.html - http://rhn.redhat.com/errata/RHSA-2007-0163.html - http://secunia.com/advisories/25025 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:088 - http://secunia.com/advisories/26235
CVE ID: CVE-2007-1712 State: PUBLISHED Published: 2007-03-27T21:00:00 Last Updated: 2024-08-07T13:06:26.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Auction Pro 7.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3551 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33182 - http://www.osvdb.org/34420 - http://secunia.com/advisories/24626 - http://www.vupen.com/english/advisories/2007/1097
CVE ID: CVE-2007-1713 State: PUBLISHED Published: 2007-03-27T21:00:00 Last Updated: 2024-08-07T13:06:26.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in BSMTP.DLL in B21Soft BASP21 2003.0211, and BASP21 Pro 1.0.702.27 and earlier, allows remote attackers to inject arbitrary headers into e-mail messages via CRLF sequences in Subject lines. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33211 - http://www.hi-ho.ne.jp/babaq/basp21.html - http://osvdb.org/34495 - http://www.vupen.com/english/advisories/2007/1113 - http://www.securityfocus.com/bid/23134 - http://jvn.jp/jp/JVN%2386
- http://www.vupen.com/english/advisories/2007/1113 - http://www.securityfocus.com/bid/23134 - http://jvn.jp/jp/JVN%2386092776/index.html - http://secunia.com/advisories/24652
CVE ID: CVE-2007-1714 State: PUBLISHED Published: 2007-03-27T21:00:00 Last Updated: 2024-08-07T13:06:26.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in CcCounter 2.0 allows remote attackers to inject arbitrary web script or HTML via dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2481 - http://www.securityfocus.com/bid/23135 - http://secunia.com/advisories/24655 - http://osvdb.org/34485 - http://www.securityfocus.com/archive/1/463820/100/0/threaded - http://www.vupen.com/english/advisories/2007/1120 - https://exchange.xforce.ibmcloud.com/vulnerabili
20/100/0/threaded - http://www.vupen.com/english/advisories/2007/1120 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33213
CVE ID: CVE-2007-1715 State: PUBLISHED Published: 2007-03-27T21:00:00 Last Updated: 2024-08-07T13:06:26.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in frontpage.php in Free Image Hosting 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter. NOTE: the forgot_pass.php vector is already covered by CVE-2006-5670, and the login.php vector overlaps CVE-2006-5763. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37179 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33196 - https://www.exploit-db.com/exploits/3568
CVE ID: CVE-2007-1716 State: PUBLISHED Published: 2007-03-27T22:00:00 Last Updated: 2024-08-07T13:06:26.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: pam_console does not properly restore ownership for certain console devices when there are multiple users logged into the console and one user logs out, which might allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28319 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html - http://security.gentoo.org/glsa/glsa-200711-23.xml - http://secunia.com/advisories/25894 - http://www.vupen.com/english/advisories/2007/3229 - htt
/glsa/glsa-200711-23.xml - http://secunia.com/advisories/25894 - http://www.vupen.com/english/advisories/2007/3229 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11483 - http://www.redhat.com/support/errata/RHSA-2007-0555.html - http://www.redhat.com/support/errata/RHSA-2007-0465.html - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=230823 - http://www.redhat.com/support/errata/RHSA-2007-0737.html - http://secunia.com/advisories/26909 - http://secunia.com/advisories/27706 - http://osvdb.org/37271 - http://secunia.com/advisories/27590 - ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc - http://support.avaya.com/elmodocs2/
s/27590 - ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc - http://support.avaya.com/elmodocs2/security/ASA-2007-526.htm - http://secunia.com/advisories/25631
CVE ID: CVE-2007-1717 State: PUBLISHED Published: 2007-03-28T00:00:00 Last Updated: 2024-08-07T13:06:26.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 truncates e-mail messages at the first ASCIIZ ('\0') byte, which might allow context-dependent attackers to prevent intended information from being delivered in e-mail messages. NOTE: this issue might be security-relevant in cases when the trailing contents of e-mail messages are important, such as logging information or if the message is expected to be well-formed. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/
pected to be well-formed. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2732 - http://secunia.com/advisories/25056 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33518 - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://security.gentoo.org/glsa/glsa-200705-19.xml - http://www.securityfocus.com/bid/23146 - http://www.php-security.org/MOPB/MOPB-33-2007.html - http://us2.php.net/releases/4_4_7.php - http://us2.php.net/releases/5_2_2.php - http://docs.info.apple.com/article.html?artnum=306172 - http://www.securityfocus.com/bid/25159 - http://secunia.com/advisories/25445 - http://www.novell.co
html?artnum=306172 - http://www.securityfocus.com/bid/25159 - http://secunia.com/advisories/25445 - http://www.novell.com/linux/security/advisories/2007_32_php.html - http://secunia.com/advisories/26235
CVE ID: CVE-2007-1718 State: PUBLISHED Published: 2007-03-28T00:00:00 Last Updated: 2024-08-07T13:06:26.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows remote attackers to inject arbitrary e-mail headers and possibly conduct spam attacks via a control character immediately following folding of the (1) Subject or (2) To parameter, as demonstrated by a parameter containing a "\r\n\t\n" sequence, related to an increment bug in the SKIP_LONG_HEADER_SEP macro. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23145 - http://sec
ro. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23145 - http://secunia.com/advisories/25056 - http://www.debian.org/security/2007/dsa-1283 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10951 - http://security.gentoo.org/glsa/glsa-200705-19.xml - http://www.securitytracker.com/id?1017946 - http://www.redhat.com/support/errata/RHSA-2007-0162.html - http://secunia.com/advisories/25062 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33516 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:090 - http://www.ubuntu.com/usn/usn-455-1 - http://secunia.com/advisories/24909 - http://www.ma
visories?name=MDKSA-2007:090 - http://www.ubuntu.com/usn/usn-455-1 - http://secunia.com/advisories/24909 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:087 - http://www.debian.org/security/2007/dsa-1282 - http://www.php-security.org/MOPB/MOPB-34-2007.html - http://us2.php.net/releases/5_2_2.php - http://secunia.com/advisories/24924 - http://rhn.redhat.com/errata/RHSA-2007-0155.html - http://secunia.com/advisories/24965 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:089 - http://secunia.com/advisories/25445 - http://secunia.com/advisories/25057 - http://www.novell.com/linux/security/advisories/2007_32_php.html - http://secunia.com/advisories/25025 - http://www.ma
- http://www.novell.com/linux/security/advisories/2007_32_php.html - http://secunia.com/advisories/25025 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:088 - http://www.redhat.com/support/errata/RHSA-2007-0153.html
CVE ID: CVE-2007-1719 State: PUBLISHED Published: 2007-03-28T00:00:00 Last Updated: 2024-08-07T13:06:26.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in eject.c in Jason W. Bacon mcweject 0.9 on FreeBSD, and possibly other versions, allows local users to execute arbitrary code via a long command line argument, possibly involving the device name. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3578 - http://www.vupen.com/english/advisories/2007/1125 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33212 - http://secunia.com/advisories/24641
CVE ID: CVE-2007-1720 State: PUBLISHED Published: 2007-03-28T00:00:00 Last Updated: 2024-08-07T13:06:26.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in addressbook.php in the Addressbook 1.2 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module_name parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1118 - http://secunia.com/advisories/24697 - http://www.securityfocus.com/bid/23156 - https://www.exploit-db.com/exploits/3582 -
ttp://secunia.com/advisories/24697 - http://www.securityfocus.com/bid/23156 - https://www.exploit-db.com/exploits/3582 - http://osvdb.org/36572 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33243
CVE ID: CVE-2007-1721 State: PUBLISHED Published: 2007-03-28T00:00:00 Last Updated: 2024-08-07T13:06:26.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in C-Arbre 0.6PR7 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) Richtxt_functions.inc.php, (2) adddocfile.php, (3) auth_check.php, (4) browse_current_category.inc.php, (5) docfile_details.php, (6) main.php, (7) mainarticle.php, (8) maindocfile.php, (9) modify.php, (10) new.php, (11) resource_details.php, or (12) smallsearch.php in lib/; or (13) mwiki/LocalSettings.php. Additional Analyst Notes: - CVE Program Contai
ls.php, or (12) smallsearch.php in lib/; or (13) mwiki/LocalSettings.php. Additional Analyst Notes: - CVE Program Container: References: - http://advisories.echo.or.id/adv/adv78-K-159-2007.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/33238 - http://www.vupen.com/english/advisories/2007/1119 - http://www.securityfocus.com/bid/23154 - http://www.securityfocus.com/archive/1/463925/100/0/threaded - http://securityreason.com/securityalert/2491 - https://www.exploit-db.com/exploits/3583
CVE ID: CVE-2007-1722 State: PUBLISHED Published: 2007-03-28T00:00:00 Last Updated: 2024-08-07T13:06:25.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the DownloadCertificateExt function in SignKorea SKCommAX ActiveX control module 7.2.0.2 and 3280 6.6.0.1 allows remote attackers to execute arbitrary code via a long pszUserID argument. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33245 - http://www.securityfocus.com/bid/23149 - http://www.vupen.com/english/advisories/2007/1114 - http://marc.info/?l=full-disclosure&m=117497124018827&w=2 - http://secunia.com/advisories/24587
CVE ID: CVE-2007-1723 State: PUBLISHED Published: 2007-03-28T00:00:00 Last Updated: 2024-08-07T13:06:26.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the administration console in Secure Computing CipherTrust IronMail 6.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) network, (2) defRouterIp, (3) hostName, (4) domainName, (5) ipAddress, (6) defaultRouter, (7) dns1, or (8) dns2 parameter to (a) admin/system_IronMail.do; the (9) ipAddress parameter to (b) admin/systemOutOfBand.do; the (10) password or (11) confirmPassword parameter to (c) admin/systemBackup.do; the (12) Klicense parameter to
nd.do; the (10) password or (11) confirmPassword parameter to (c) admin/systemBackup.do; the (12) Klicense parameter to (d) admin/systemLicenseManager.do; the (13) rows[1].attrValueStr or (14) rows[2].attrValueStr parameter to (e) admin/systemWebAdminConfig.do; the (15) rows[0].attrValueStr, rows[1].attrValueStr, (16) rows[2].attrValue, or (17) rows[2].attrValueStrClone parameter to (f) admin/ldap_ConfigureServiceProperties.do; the (18) input1 parameter to (g) admin/mailFirewall_MailRoutingInternal.do; or the (19) rows[2].attrValueStr, (20) rows[3].attrValueStr, (21) rows[5].attrValueStr, or (22) rows[6].attrValueStr parameter to (h) admin/mailIdsConfig.do. Additional Analyst Notes: - CVE Pr
].attrValueStr, or (22) rows[6].attrValueStr parameter to (h) admin/mailIdsConfig.do. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34528 - http://osvdb.org/34531 - http://www.securitytracker.com/id?1017821 - http://securityreason.com/securityalert/2484 - http://osvdb.org/34529 - http://www.vupen.com/english/advisories/2007/1164 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33232 - http://www.securityfocus.com/archive/1/463827/100/0/threaded - http://osvdb.org/34530 - http://osvdb.org/34533 - http://www.514.es/2007/03/siaadv07004_multiples_vulnerab.html - http://secunia.com/advisories/24657 - http://osvdb.org/34527 - http://osvdb.org/34532 - http:
_multiples_vulnerab.html - http://secunia.com/advisories/24657 - http://osvdb.org/34527 - http://osvdb.org/34532 - http://osvdb.org/34526
CVE ID: CVE-2007-1724 State: PUBLISHED Published: 2007-03-28T00:00:00 Last Updated: 2024-08-07T13:06:26.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ReactOS 0.3.1 has unknown impact and attack vectors, related to a fix for "dozens of win32k bugs and failures," in which the fix itself introduces a vulnerability, possibly related to user-mode and kernel-mode copy failures. Additional Analyst Notes: - CVE Program Container: References: - http://www.reactos.org/wiki/index.php/ChangeLog-0.3.1 - http://osvdb.org/43446
CVE ID: CVE-2007-1725 State: PUBLISHED Published: 2007-03-28T10:00:00 Last Updated: 2024-08-07T13:06:26.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in IceBB 1.0-rc5 allows remote authenticated users to execute arbitrary SQL commands via the filename of an uploaded file to the avatar function, as demonstrated by setting admin privileges. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24644 - http://www.vupen.com/english/advisories/2007/1116 - http://www.securityfocus.com/bid/23158 - https://www.exploit-db.com/exploits/3581 - http://osvdb.org/34497 - https://www.exploit-db.com/exploits/
com/bid/23158 - https://www.exploit-db.com/exploits/3581 - http://osvdb.org/34497 - https://www.exploit-db.com/exploits/3580 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33240
CVE ID: CVE-2007-1726 State: PUBLISHED Published: 2007-03-28T10:00:00 Last Updated: 2024-08-07T13:06:25.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in index.php in IceBB 1.0-rc5 allows remote authenticated users to upload arbitrary files via the avatar function, which can later be accessed in uploads/. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24644 - http://www.vupen.com/english/advisories/2007/1116 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33242 - https://www.exploit-db.com/exploits/3581 - http://www.securityfocus.com/bid/23151 - http://osvdb.org/34498
CVE ID: CVE-2007-1727 State: PUBLISHED Published: 2007-03-28T10:00:00 Last Updated: 2024-08-07T13:06:26.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 6.20, 6.4x, 7.01, 7.50, and 7.51 allows remote authenticated users to access certain privileged "facilities" via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00854999 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33241 - http://www.securityfocus.com/bid/23163 - http://www.vupen.com/english/advisories/2007/1121 - http://www1.itrc.hp.com/service/cki/docD
curityfocus.com/bid/23163 - http://www.vupen.com/english/advisories/2007/1121 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00854999 - http://secunia.com/advisories/24746 - http://www.securitytracker.com/id?1017817
CVE ID: CVE-2007-1728 State: PUBLISHED Published: 2007-03-28T10:00:00 Last Updated: 2024-08-07T13:06:26.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Remote Play feature in Sony Playstation 3 (PS3) 1.60 and Playstation Portable (PSP) 3.10 OE-A allows remote attackers to cause a denial of service via a flood of UDP packets. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33503 - http://securityreason.com/securityalert/2485 - http://www.securityfocus.com/archive/1/463847/100/0/threaded - http://osvdb.org/35184