Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
/23967 - http://secunia.com/advisories/25266 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34334 - http://osvdb.org/36011 - http://securityreason.com/securityalert/2705 - http://www.securityfocus.com/archive/1/468361/100/0/threaded
CVE ID: CVE-2007-2650 State: PUBLISHED Published: 2007-05-14T21:00:00 Last Updated: 2024-08-07T13:49:57.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OLE2 parser in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service (resource consumption) via an OLE2 file with (1) a large property size or (2) a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25796 - http://lurker.clamav.net/message/20070418.111144.0df6c5d3.en.html - http://www.novell.com/linux/security/advisories/2007_33_clamav.html - http://sec
sage/20070418.111144.0df6c5d3.en.html - http://www.novell.com/linux/security/advisories/2007_33_clamav.html - http://secunia.com/advisories/25525 - http://secunia.com/advisories/25553 - http://www.vupen.com/english/advisories/2007/1776 - http://secunia.com/advisories/25523 - http://www.debian.org/security/2007/dsa-1320 - http://www.trustix.org/errata/2007/0020/ - http://www.securityfocus.com/bid/24316 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:115 - http://secunia.com/advisories/25244 - http://secunia.com/advisories/25558 - http://kolab.org/security/kolab-vendor-notice-15.txt - http://article.gmane.org/gmane.comp.security.virus.clamav.devel/2853 - http://secunia.com/adviso
-vendor-notice-15.txt - http://article.gmane.org/gmane.comp.security.virus.clamav.devel/2853 - http://secunia.com/advisories/25688 - http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog - http://security.gentoo.org/glsa/glsa-200706-05.xml
CVE ID: CVE-2007-2651 State: PUBLISHED Published: 2007-05-14T21:00:00 Last Updated: 2024-08-07T13:49:56.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple off-by-one errors in VooDoo cIRCle before 1.1.beta27 allow remote attackers to cause a denial of service (connection loss) or possibly execute arbitrary code via a (1) DNS name response of the exact length as a buffer; or a long (2) channel name, (3) partyline channel name, or unspecified vectors in crafted BOTNET packets. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41985 - http://osvdb.org/41986 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34229 - http://www.vupen.com/e
org/41985 - http://osvdb.org/41986 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34229 - http://www.vupen.com/english/advisories/2007/1756 - http://sourceforge.net/project/shownotes.php?release_id=497807&group_id=116847 - http://www.securityfocus.com/bid/23929
CVE ID: CVE-2007-2652 State: PUBLISHED Published: 2007-05-14T21:00:00 Last Updated: 2024-08-07T13:49:57.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Free-SA before 1.2.2 allow remote attackers to execute arbitrary code via unspecified vectors involving certain (1) sprintf and (2) vsprintf calls in (a) r_index.c, (b) r_reports.c, (c) r_topsites.c, (d) r_topuser.c, (e) r_typical.c, (f) r_userdatetime.c, and (g) r_users.c in reports/; and (h) w_fs.c, (i) w_internal.c, and (j) w_log_operations.c in work/, probably related to buffer overflows. NOTE: some of these details are obtained from third party information. Additional Analyst Notes:
ed to buffer overflows. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34218 - http://www.securityfocus.com/bid/23924 - http://sourceforge.net/project/shownotes.php?release_id=500691&group_id=191513 - http://www.vupen.com/english/advisories/2007/1757
CVE ID: CVE-2007-2653 State: REJECTED Published: 2007-05-14T21:00:00 Last Updated: 2007-09-13T09:00:00 Description: No description available.
CVE ID: CVE-2007-2654 State: PUBLISHED Published: 2007-05-14T21:00:00 Last Updated: 2024-08-07T13:49:56.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25761 - http://www.securityfocus.com/bid/23922 - http://osvdb.org/36716 - http://secunia.com/advisories/26867 - http://www.ubuntu.com/usn/usn-516-1 - http://secunia.com/advisories/25425 - http://www.novell.com/linux/security/advisories/2007_10_sr.html - http://bugs.debian.o
://secunia.com/advisories/25425 - http://www.novell.com/linux/security/advisories/2007_10_sr.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=417894 - http://secunia.com/advisories/25220 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:134
CVE ID: CVE-2007-2655 State: PUBLISHED Published: 2007-05-14T21:00:00 Last Updated: 2024-08-07T13:49:56.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in NetWin Webmail 3.1s-1 in SurgeMail before 3.8i2 has unknown impact and remote attack vectors, possibly a format string vulnerability that allows remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34217 - http://osvdb.org/35891 - http://www.vupen.com/english/advisories/2007/1755 - http://www.netwinsite.com/surgemail/help/updates.htm - http://www.securityfocus.com/bid/23908 - http://secunia.com/advisories/25207
CVE ID: CVE-2007-2656 State: PUBLISHED Published: 2007-05-14T23:00:00 Last Updated: 2024-08-07T13:49:57.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Hewlett-Packard (HP) Magview ActiveX control in hpqvwocx.dll 1.0.0.309 allows remote attackers to cause a denial of service (application crash) and possibly have other impact via a long argument to the DeleteProfile method. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34239 - https://www.exploit-db.com/exploits/3898 - http://osvdb.org/37787 - http://www.securityfocus.com/bid/23941
CVE ID: CVE-2007-2657 State: PUBLISHED Published: 2007-05-14T23:00:00 Last Updated: 2024-08-07T13:49:57.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PrecisionID Barcode 1.3 ActiveX control in PrecisionID_DataMatrix.DLL allows remote attackers to cause a denial of service via a long argument to the SaveBarCode method. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1790 - http://moaxb.blogspot.com/2007/05/moaxb-12-precisionid-barcode-activex.html - http://secunia.com/advisories/25258 - http://www.shinnai.altervista.org/viewtopic.php?id=42&t_id=14 - http://osvdb.org/36012 - https:/
.com/advisories/25258 - http://www.shinnai.altervista.org/viewtopic.php?id=42&t_id=14 - http://osvdb.org/36012 - https://www.exploit-db.com/exploits/3910 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34267 - http://www.securityfocus.com/bid/23957
CVE ID: CVE-2007-2658 State: PUBLISHED Published: 2007-05-14T23:00:00 Last Updated: 2024-08-07T13:49:56.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the ID Automation Linear Barcode 1.6.0.5 ActiveX control in IDAutomationLinear6.dll allows remote attackers to cause a denial of service via a long argument to the SaveEnhWMF method. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3917 - http://www.vupen.com/english/advisories/2007/1791 - http://osvdb.org/36020 - http://www.securityfocus.com/bid/23954 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34263 - http://www.shinnai.altervista.org
rityfocus.com/bid/23954 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34263 - http://www.shinnai.altervista.org/moaxb/20070513/IDAutomation.html - http://www.shinnai.altervista.org/viewtopic.php?id=42&t_id=15 - http://secunia.com/advisories/25231 - http://moaxb.blogspot.com/2007/05/moaxb-13-id-automation-linear-barcode.html
CVE ID: CVE-2007-2659 State: PUBLISHED Published: 2007-05-14T23:00:00 Last Updated: 2024-08-07T13:49:56.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in PHP Advanced Transfer Manager (phpATM) 1.30 allows remote attackers to read arbitrary files and obtain script source code via a .. (dot dot) in the directory parameter in a downloadfile action. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1799 - http://www.securityfocus.com/bid/23952 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34255 - https://www.exploit-db.com/exploits/3918 - http://osvdb.org/41990
CVE ID: CVE-2007-2660 State: PUBLISHED Published: 2007-05-14T23:00:00 Last Updated: 2024-08-07T13:49:57.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in pcltrace.lib.php in the PclTar module in Vincent Blavet PhpConcept Library, as used in CJG EXPLORER PRO 3.3 and earlier and probably other products, allows remote attackers to execute arbitrary PHP code via a URL in the g_pcltar_lib_dir parameter. NOTE: CVE disputes this issue since there is no include statement in pcltrace.lib.php. NOTE: the pcltar.lib.php vector is already covered by CVE-2007-2199 Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/ad
already covered by CVE-2007-2199 Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25230 - http://www.vupen.com/english/advisories/2007/1786 - http://www.attrition.org/pipermail/vim/2007-May/001618.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34273 - https://www.exploit-db.com/exploits/3915 - http://osvdb.org/36010
CVE ID: CVE-2007-2661 State: PUBLISHED Published: 2007-05-14T23:00:00 Last Updated: 2024-08-07T13:49:56.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in archshow.asp in BlogMe 3.0 allows remote attackers to execute arbitrary SQL commands via the var parameter, a different vector than CVE-2006-5976. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23956 - http://secunia.com/advisories/25229 - http://www.vupen.com/english/advisories/2007/1784 - http://osvdb.org/36008 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34253 - https://www.exploit-db.com/exploits/3914
CVE ID: CVE-2007-2662 State: PUBLISHED Published: 2007-05-14T23:00:00 Last Updated: 2024-08-07T13:49:57.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in EfesTECH Haber 5.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to the top-level URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23960 - https://www.exploit-db.com/exploits/3911 - http://osvdb.org/36014 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34272 - http://secunia.com/advisories/25247
CVE ID: CVE-2007-2663 State: PUBLISHED Published: 2007-05-14T23:00:00 Last Updated: 2024-08-07T13:49:56.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in language/1/splash.lang.php in Beacon 0.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the languagePath parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3909 - http://www.securityfocus.com/bid/23959 - http://www.vupen.com/english/advisories/2007/1798 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34270 - http://osvdb.org/37816
CVE ID: CVE-2007-2664 State: PUBLISHED Published: 2007-05-14T23:00:00 Last Updated: 2024-08-07T13:49:57.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/common.php in Yaap 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter, possibly related to the __autoload function. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36060 - https://www.exploit-db.com/exploits/3908 - http://www.vupen.com/english/advisories/2007/1797 - http://secunia.com/advisories/25254 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34264
CVE ID: CVE-2007-2665 State: PUBLISHED Published: 2007-05-14T23:00:00 Last Updated: 2024-08-07T13:49:56.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in block.php in PhpFirstPost 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the Include parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3906 - http://osvdb.org/38257 - http://www.securityfocus.com/bid/23947
CVE ID: CVE-2007-2666 State: PUBLISHED Published: 2007-05-14T23:00:00 Last Updated: 2024-08-07T13:49:56.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in LexRuby.cxx (SciLexer.dll) in Scintilla 1.73, as used by notepad++ 4.1.1 and earlier, allows user-assisted remote attackers to execute arbitrary code via certain Ruby (.rb) files with long lines. NOTE: this was originally reported as a vulnerability in notepad++. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1794 - http://www.securityfocus.com/archive/1/468529/100/0/threaded - https://www.exploit-db.com/exploits/3912 - http://secunia
http://www.securityfocus.com/archive/1/468529/100/0/threaded - https://www.exploit-db.com/exploits/3912 - http://secunia.com/advisories/25327 - http://www.vupen.com/english/advisories/2007/1867 - http://www.securityfocus.com/archive/1/469348/100/100/threaded - http://www.securityfocus.com/bid/23961 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34269 - http://scintilla.cvs.sourceforge.net/scintilla/scintilla/src/LexRuby.cxx?view=log#rev1.13 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34372 - http://osvdb.org/36007 - http://secunia.com/advisories/25245
CVE ID: CVE-2007-2667 State: PUBLISHED Published: 2007-05-14T23:00:00 Last Updated: 2024-08-07T13:49:57.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the DB Software Laboratory VImpX ActiveX control in VImpX.ocx 4.7.3 allows remote attackers to execute arbitrary code via a long LogFile parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36156 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34260 - http://secunia.com/advisories/25330 - http://www.securityfocus.com/bid/23953 - https://www.exploit-db.com/exploits/3916
CVE ID: CVE-2007-2668 State: PUBLISHED Published: 2007-05-14T23:00:00 Last Updated: 2024-08-07T13:49:57.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in webdesproxy 0.0.1 allows remote attackers to execute arbitrary code via a long URL, possibly involving the process_connection_request function in webdesproxy.c. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40741 - http://www.securityfocus.com/bid/23962 - http://www.vupen.com/english/advisories/2007/1802 - https://www.exploit-db.com/exploits/3913
CVE ID: CVE-2007-2669 State: PUBLISHED Published: 2007-05-14T23:00:00 Last Updated: 2024-08-07T13:49:57.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHPChain 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the catid parameter to (1) settings.php or (2) cat.php. NOTE: certain parameter values also trigger path disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2007/05/phpchain-vuln.html - http://www.vupen.com/english/advisories/2007/1647 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34018 - http://www.securityfocus.com/bid/
sh/advisories/2007/1647 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34018 - http://www.securityfocus.com/bid/23761 - http://osvdb.org/35536 - http://osvdb.org/35537 - http://secunia.com/advisories/25128
CVE ID: CVE-2007-2670 State: PUBLISHED Published: 2007-05-14T23:00:00 Last Updated: 2024-08-07T13:49:57.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPChain 1.0 and earlier allows remote attackers to obtain the installation path via invalid values of the catid parameter to (1) settings.php or (2) cat.php, as demonstrated by XSS manipulations. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2007/05/phpchain-vuln.html - http://osvdb.org/35538 - http://www.vupen.com/english/advisories/2007/1647 - http://www.securityfocus.com/bid/23761 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34019 - http://secunia.com/advisories/251
rityfocus.com/bid/23761 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34019 - http://secunia.com/advisories/25128
CVE ID: CVE-2007-2671 State: PUBLISHED Published: 2007-05-14T23:00:00 Last Updated: 2024-08-07T13:49:56.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 2.0.0.3 allows remote attackers to cause a denial of service (application crash) via a long hostname in an HREF attribute in an A element, which triggers an out-of-bounds memory access. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2704 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33982 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/062773.html - http://www.securityfocus.com/bid/23747 - http://osvdb.org/35700 - http://www.critic
ll-disclosure/2007-May/062773.html - http://www.securityfocus.com/bid/23747 - http://osvdb.org/35700 - http://www.critical.lt/research/opera_die_happy.html
CVE ID: CVE-2007-2672 State: PUBLISHED Published: 2007-05-14T23:00:00 Last Updated: 2024-08-07T13:49:56.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in PHP Coupon Script 3.0 allows remote attackers to execute arbitrary SQL commands via the bus parameter in a viewbus page. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3839 - http://www.securityfocus.com/bid/23799 - http://secunia.com/advisories/25145 - http://osvdb.org/35590 - http://www.vupen.com/english/advisories/2007/1653 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34045
CVE ID: CVE-2007-2673 State: PUBLISHED Published: 2007-05-14T23:00:00 Last Updated: 2024-08-07T13:49:57.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in includes/funcs_vendors.php in Censura 1.15.04, and other versions before 1.16.04, allows remote attackers to execute arbitrary SQL commands via the vendorid parameter in a vendor_info cmd action to censura.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3843 - http://secunia.com/advisories/25141 - http://www.securityfocus.com/bid/23796 - http://osvdb.org/35598 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34040 - http://www.censur
.com/bid/23796 - http://osvdb.org/35598 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34040 - http://www.censura.info/forums/showthread.php?t=556
CVE ID: CVE-2007-2674 State: PUBLISHED Published: 2007-05-14T23:00:00 Last Updated: 2024-08-07T13:49:57.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in detail.php in Pre Shopping Mall 1.0 allows remote attackers to execute arbitrary SQL commands via the prodid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3842 - http://www.securityfocus.com/bid/23794 - http://osvdb.org/37814 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34034
CVE ID: CVE-2007-2675 State: PUBLISHED Published: 2007-05-14T23:00:00 Last Updated: 2024-08-07T13:49:57.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in Pre Classifieds Listings 1.0 allows remote attackers to execute arbitrary SQL commands via the category parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3840 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34037 - http://www.vupen.com/english/advisories/2007/1655 - http://www.securityfocus.com/bid/23795 - http://www.securityfocus.com/bid/52543/exploit - http://osvdb.org/35597 - http://secunia.com/advisories/25144
d/23795 - http://www.securityfocus.com/bid/52543/exploit - http://osvdb.org/35597 - http://secunia.com/advisories/25144 - http://www.securityfocus.com/bid/52543
CVE ID: CVE-2007-2676 State: PUBLISHED Published: 2007-05-14T23:00:00 Last Updated: 2024-08-07T13:49:57.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in skins/header.php in Open Translation Engine (OTE) 0.7.8 allows remote attackers to execute arbitrary PHP code via a URL in the ote_home parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3838 - http://osvdb.org/35591 - http://www.securityfocus.com/bid/23793 - http://attrition.org/pipermail/vim/2007-May/001585.html - http://secunia.com/advisories/25146 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34053 - http://www.
85.html - http://secunia.com/advisories/25146 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34053 - http://www.vupen.com/english/advisories/2007/1650
CVE ID: CVE-2007-2677 State: PUBLISHED Published: 2007-05-14T23:00:00 Last Updated: 2024-08-07T13:49:57.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in phpChess Community Edition 2.0 allow remote attackers to execute arbitrary PHP code via a URL in (1) the config parameter to includes/language.php, or the Root_Path parameter to (2) layout_admin_cfg.php, (3) layout_cfg.php, or (4) layout_t_top.php in skins/phpchess/. NOTE: vector 1 has been disputed by CVE, since the code is defined within a function that is not called from within includes/language.php. Additional Analyst Notes: - CVE Program Container: References: - http:/
is not called from within includes/language.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35593 - http://osvdb.org/35595 - http://attrition.org/pipermail/vim/2007-May/001586.html - http://www.securityfocus.com/bid/23797 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34056 - http://osvdb.org/35594 - http://osvdb.org/35592 - http://www.vupen.com/english/advisories/2007/1649 - https://www.exploit-db.com/exploits/3837 - http://secunia.com/advisories/25147
CVE ID: CVE-2007-2678 State: PUBLISHED Published: 2007-05-15T00:00:00 Last Updated: 2024-08-07T13:49:57.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the isChecked function in toolbar.dll in Netsprint Toolbar 1.1 might allow remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/465992/100/0/threaded - http://www.securityfocus.com/archive/1/465980/100/0/threaded