Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ecunia.com/advisories/24384 - http://www.securitytracker.com/id?1017700 - http://secunia.com/advisories/24457 - http://secunia.com/advisories/24343 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.vupen.com/english/advisories/2007/0718 - http://secunia.com/advisories/24650 - http://www.ubuntu.com/usn/usn-428-1 - http://secunia.com/advisories/24320 - https://issues.rpath.com/browse/RPL-1103 - http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html - http://www.vupen.com/english/advisories/2008/0083 - http://www.securityfocus.com/archive/1/461809/100/0/threaded - http://www.novell.com/linux/security/advisories/2007_22_mozilla.html
ecurityfocus.com/archive/1/461809/100/0/threaded - http://www.novell.com/linux/security/advisories/2007_22_mozilla.html - http://secunia.com/advisories/24293 - http://secunia.com/advisories/24238 - http://secunia.com/advisories/24393 - http://secunia.com/advisories/24342 - http://secunia.com/advisories/24287 - http://www.securityfocus.com/bid/22694 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://fedoranews.org/cms/node/2713 - http://www.redhat.com/support/errata/RHSA-2007-0097.html - http://fedoranews.org/cms/node/2728 - ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc - http://secunia.com/advisories/24205 - https://issues.r
ches.sgi.com/support/free/security/advisories/20070301-01-P.asc - http://secunia.com/advisories/24205 - https://issues.rpath.com/browse/RPL-1081 - http://secunia.com/advisories/24333 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:050 - http://secunia.com/advisories/24290 - http://secunia.com/advisories/24455 - http://rhn.redhat.com/errata/RHSA-2007-0077.html - ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc - http://osvdb.org/32109 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 - http://www.redhat.com/support/errata/RHSA-2007-0079.html - http://www.mozilla.org/security/announce/2007/mfsa2007-04.html -
p://www.redhat.com/support/errata/RHSA-2007-0079.html - http://www.mozilla.org/security/announce/2007/mfsa2007-04.html - http://secunia.com/advisories/24437
CVE ID: CVE-2007-0780 State: PUBLISHED Published: 2007-02-26T20:00:00 Last Updated: 2024-08-07T12:34:21.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: browser.js in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 uses the requesting URI to identify child windows, which allows remote attackers to conduct cross-site scripting (XSS) attacks by opening a blocked popup originating from a javascript: URI in combination with multiple frames having the same data: URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2007-0078.html - http://www.mozilla.org/security/announce/2007/mfsa200
nces: - http://www.redhat.com/support/errata/RHSA-2007-0078.html - http://www.mozilla.org/security/announce/2007/mfsa2007-05.html - http://secunia.com/advisories/24395 - https://bugzilla.mozilla.org/show_bug.cgi?id=354973 - http://www.securityfocus.com/archive/1/461336/100/0/threaded - http://secunia.com/advisories/24328 - http://www.redhat.com/support/errata/RHSA-2007-0108.html - http://security.gentoo.org/glsa/glsa-200703-04.xml - http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9884 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851 - http://sec
f%3A9884 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851 - http://secunia.com/advisories/24384 - http://secunia.com/advisories/24457 - http://secunia.com/advisories/24343 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.vupen.com/english/advisories/2007/0718 - http://secunia.com/advisories/24650 - http://www.ubuntu.com/usn/usn-428-1 - http://secunia.com/advisories/24320 - https://issues.rpath.com/browse/RPL-1103 - http://www.osvdb.org/32107 - http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html - http://www.securityfocus.com/archive/1/461809/100/0/threaded - http://www.novell.
security-announce/2007-Mar/0001.html - http://www.securityfocus.com/archive/1/461809/100/0/threaded - http://www.novell.com/linux/security/advisories/2007_22_mozilla.html - http://secunia.com/advisories/24293 - http://secunia.com/advisories/24238 - http://secunia.com/advisories/24393 - http://secunia.com/advisories/24342 - http://secunia.com/advisories/24287 - http://www.securityfocus.com/bid/22694 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://fedoranews.org/cms/node/2713 - http://www.redhat.com/support/errata/RHSA-2007-0097.html - http://www.securitytracker.com/id?1017702 - http://fedoranews.org/cms/node/2728 - ftp://patches.sgi.com/support/free
l - http://www.securitytracker.com/id?1017702 - http://fedoranews.org/cms/node/2728 - ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/32667 - http://secunia.com/advisories/24205 - https://issues.rpath.com/browse/RPL-1081 - http://secunia.com/advisories/24333 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:050 - http://secunia.com/advisories/24290 - http://secunia.com/advisories/24455 - http://rhn.redhat.com/errata/RHSA-2007-0077.html - ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.3
visories/20070202-01-P.asc - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 - http://www.redhat.com/support/errata/RHSA-2007-0079.html - http://secunia.com/advisories/24437
CVE ID: CVE-2007-0784 State: PUBLISHED Published: 2007-02-06T17:00:00 Last Updated: 2024-08-07T12:34:20.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.asp for tPassword in the Raymond BERTHOU script collection (aka RBL - ASP) allows remote attackers to execute arbitrary SQL commands via the (1) User and (2) Password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/458495/100/0/threaded - http://forums.avenir-geopolitique.net/viewtopic.php?t=2607 - http://www.attrition.org/pipermail/vim/2007-January/001259.html - http://securityreason.com/securityalert/2225 - http://www.sec
www.attrition.org/pipermail/vim/2007-January/001259.html - http://securityreason.com/securityalert/2225 - http://www.securityfocus.com/archive/1/458560/100/0/threaded
CVE ID: CVE-2007-0785 State: PUBLISHED Published: 2007-02-06T19:00:00 Last Updated: 2024-08-07T12:34:20.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in previewtheme.php in Flipsource Flip 2.01-final 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the inc_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32174 - https://www.exploit-db.com/exploits/3266 - http://osvdb.org/35748 - http://www.vupen.com/english/advisories/2007/0476 - http://www.securityfocus.com/bid/22385
CVE ID: CVE-2007-0786 State: PUBLISHED Published: 2007-02-06T19:00:00 Last Updated: 2024-08-07T12:34:21.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view.php in Noname Media Photo Galerie Standard 1.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32171 - https://www.exploit-db.com/exploits/3261 - http://osvdb.org/33089 - http://secunia.com/advisories/24029 - http://www.securityfocus.com/bid/22384 - http://www.vupen.com/english/advisories/2007/0475
CVE ID: CVE-2007-0787 State: PUBLISHED Published: 2007-02-06T19:00:00 Last Updated: 2024-08-07T12:34:20.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in controller.php in Simple Invoices before 20070202 allows remote attackers to execute arbitrary PHP code via a URL in the (1) module or (2) view parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/31796 - http://secunia.com/advisories/24040 - http://www.simpleinvoices.org/index.php?news=25 - http://www.securityfocus.com/bid/22389 - https://exchange.xforce.ibmcloud.com/vulnera
leinvoices.org/index.php?news=25 - http://www.securityfocus.com/bid/22389 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32207 - http://www.vupen.com/english/advisories/2007/0481
CVE ID: CVE-2007-0788 State: PUBLISHED Published: 2007-02-06T19:00:00 Last Updated: 2024-08-07T12:34:20.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MediaWiki 1.9.x before 1.9.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "sortable tables JavaScript." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0490 - http://secunia.com/advisories/24039 - http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_9_2/phase3/RELEASE-NOTES - http://lists.wikimedia.org/pipermail/mediawiki-announce/2007-February/000059.html - https://exch
/phase3/RELEASE-NOTES - http://lists.wikimedia.org/pipermail/mediawiki-announce/2007-February/000059.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/32217 - http://osvdb.org/33091 - http://www.securityfocus.com/bid/22397
CVE ID: CVE-2007-0789 State: PUBLISHED Published: 2007-02-06T19:00:00 Last Updated: 2024-08-07T12:34:20.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Mambo before 4.5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors in cancel edit functions, possibly related to the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33088 - http://secunia.com/advisories/24044 - http://mamboxchange.com/frs/shownotes.php?release_id=6232 - http://www.vupen.com/english/advisories/2007/0480
CVE ID: CVE-2007-0790 State: PUBLISHED Published: 2007-02-06T19:00:00 Last Updated: 2024-08-07T12:34:21.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in SmartFTP 2.0.1002 allows remote FTP servers to execute arbitrary code via a large banner. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3277 - http://www.securityfocus.com/bid/22390 - http://secunia.com/advisories/24051 - http://osvdb.org/33086 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32214
CVE ID: CVE-2007-0791 State: PUBLISHED Published: 2007-02-06T19:00:00 Last Updated: 2024-08-07T12:34:21.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Atom feeds in Bugzilla 2.20.3, 2.22.1, and 2.23.3, and earlier versions down to 2.20.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33090 - http://securityreason.com/securityalert/2222 - http://www.securityfocus.com/bid/22380 - http://securitytracker.com/id?1017585 - http://secunia.com/advisories/24031 - http://www.securityfocus.com/archive/1/459025/100/0/thre
ytracker.com/id?1017585 - http://secunia.com/advisories/24031 - http://www.securityfocus.com/archive/1/459025/100/0/threaded - http://www.bugzilla.org/security/2.20.3/ - http://www.vupen.com/english/advisories/2007/0477 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32248
CVE ID: CVE-2007-0792 State: PUBLISHED Published: 2007-02-06T19:00:00 Last Updated: 2024-08-07T12:34:20.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mod_perl initialization script in Bugzilla 2.23.3 does not set the Bugzilla Apache configuration to allow .htaccess permissions to override file permissions, which allows remote attackers to obtain the database username and password via a direct request for the localconfig file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35862 - http://securityreason.com/securityalert/2222 - http://www.securityfocus.com/bid/22380 - http://securitytracker.com/id?1017585 - http://www.securityfocus.com/a
t/2222 - http://www.securityfocus.com/bid/22380 - http://securitytracker.com/id?1017585 - http://www.securityfocus.com/archive/1/459025/100/0/threaded - http://www.bugzilla.org/security/2.20.3/ - http://www.vupen.com/english/advisories/2007/0477 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32252
CVE ID: CVE-2007-0793 State: PUBLISHED Published: 2007-02-06T19:00:00 Last Updated: 2024-08-07T12:34:21.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in inc/common.php in GlobalMegaCorp dvddb 0.6 allows remote attackers to execute arbitrary PHP code via a URL in the config parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/459149/100/0/threaded - http://osvdb.org/33679 - http://securityreason.com/securityalert/2221
CVE ID: CVE-2007-0794 State: PUBLISHED Published: 2007-02-06T19:00:00 Last Updated: 2024-08-07T12:34:21.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in inc/common.php in GlobalMegaCorp dvddb 0.6 allows remote attackers to execute arbitrary SQL commands via the user parameter. NOTE: this issue has been disputed by a reliable third party, who states that inc/common.php only contains function definitions Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/459180/100/0/threaded - http://www.securityfocus.com/archive/1/481327/100/100/threaded - http://www.securityfocus.com/archive/1/459151/100/0/thr
http://www.securityfocus.com/archive/1/481327/100/100/threaded - http://www.securityfocus.com/archive/1/459151/100/0/threaded - http://osvdb.org/33670
CVE ID: CVE-2007-0795 State: PUBLISHED Published: 2007-02-06T19:00:00 Last Updated: 2024-08-07T12:34:20.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Wap Portal Server 1.x allow remote attackers to execute arbitrary PHP code via a URL in the language parameter to (1) index.php and (2) admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2216 - http://osvdb.org/33672 - http://www.securityfocus.com/archive/1/459147/100/0/threaded - http://osvdb.org/33671 - http://osvdb.org/35770 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32196
CVE ID: CVE-2007-0796 State: PUBLISHED Published: 2007-02-06T19:00:00 Last Updated: 2024-08-07T12:34:21.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blue Coat Systems WinProxy 6.1a and 6.0 r1c, and possibly earlier, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long HTTP CONNECT request, which triggers heap corruption. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33097 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32204 - http://www.securityfocus.com/bid/22393 - http://securitytracker.com/id?1017586 - http://www.vupen.com/english/advisories/2007/0482 - http://secuni
om/bid/22393 - http://securitytracker.com/id?1017586 - http://www.vupen.com/english/advisories/2007/0482 - http://secunia.com/advisories/24049 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=471
CVE ID: CVE-2007-0797 State: PUBLISHED Published: 2007-02-06T19:00:00 Last Updated: 2024-08-07T12:34:20.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in theme/settings.php in bluevirus-design SMA-DB 0.3.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pfad_z parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0494 - http://secunia.com/advisories/24035 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32190 - http://osvdb.org/33096 - http://www.securityfocus.com/bid/22391 - https://www.exploit-db.com/exploits/3268
CVE ID: CVE-2007-0798 State: PUBLISHED Published: 2007-02-06T19:00:00 Last Updated: 2024-08-07T12:34:20.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) login.asp; and allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters to (2) badword.asp, (3) polls.asp, and (4) users.asp. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33643 - http://www.hackerscenter.com/archive/view.asp?id=27270 - https://exchange.xforce.ibmcloud.com/vulnerabil
vdb.org/33643 - http://www.hackerscenter.com/archive/view.asp?id=27270 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32185 - http://osvdb.org/33644 - http://www.securityfocus.com/archive/1/459027/100/0/threaded - http://osvdb.org/33642 - http://www.securityfocus.com/bid/22382 - http://osvdb.org/33641
CVE ID: CVE-2007-0799 State: PUBLISHED Published: 2007-02-06T19:00:00 Last Updated: 2024-08-07T12:34:20.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in badword.asp in Ublog Reload 1.0.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33640 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32187 - http://www.hackerscenter.com/archive/view.asp?id=27270 - http://www.securityfocus.com/archive/1/459027/100/0/threaded - http://www.securityfocus.com/bid/22382
CVE ID: CVE-2007-0800 State: PUBLISHED Published: 2007-02-07T11:00:00 Last Updated: 2024-08-07T12:34:20.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-zone vulnerability in Mozilla Firefox 1.5.0.9 considers blocked popups to have an internal zone origin, which allows user-assisted remote attackers to cross zone restrictions and read arbitrary file:// URIs by convincing a user to show a blocked popup. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2007-0078.html - http://www.mozilla.org/security/announce/2007/mfsa2007-05.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/32194 - http://secunia.com/advi
ty/announce/2007/mfsa2007-05.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/32194 - http://secunia.com/advisories/24395 - http://www.securityfocus.com/archive/1/461336/100/0/threaded - http://secunia.com/advisories/24328 - http://www.redhat.com/support/errata/RHSA-2007-0108.html - http://security.gentoo.org/glsa/glsa-200703-04.xml - http://www.securityfocus.com/bid/22396 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10654 - http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml - http://secunia.com/advisories/24384 - http://secunia.com/advisories/24457 - http://secunia.com/advisories/24343 - http://h20000.www2.hp.com/bizsupport/TechS
- http://secunia.com/advisories/24457 - http://secunia.com/advisories/24343 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.vupen.com/english/advisories/2007/0718 - http://secunia.com/advisories/24650 - http://www.ubuntu.com/usn/usn-428-1 - http://secunia.com/advisories/24320 - https://issues.rpath.com/browse/RPL-1103 - http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html - http://www.vupen.com/english/advisories/2008/0083 - http://www.securityfocus.com/archive/1/461809/100/0/threaded - http://www.novell.com/linux/security/advisories/2007_22_mozilla.html - http://secunia.com/advisories/24293 - http://secunia.com/advisories/24
/linux/security/advisories/2007_22_mozilla.html - http://secunia.com/advisories/24293 - http://secunia.com/advisories/24238 - http://secunia.com/advisories/24393 - http://secunia.com/advisories/24342 - http://secunia.com/advisories/24287 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052211.html - http://www.securityfocus.com/bid/22694 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.osvdb.org/32108 - http://fedoranews.org/cms/node/2713 - http://www.redhat.com/support/errata/RHSA-2007-0097.html - http://www.securitytracker.com/id?1017702 - http://fedoranews.org/cms/node/2728 - ftp://patches.sgi.com/support/free/security/advis
securitytracker.com/id?1017702 - http://fedoranews.org/cms/node/2728 - ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc - http://secunia.com/advisories/24205 - https://issues.rpath.com/browse/RPL-1081 - http://secunia.com/advisories/24333 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:050 - http://secunia.com/advisories/24290 - http://rhn.redhat.com/errata/RHSA-2007-0077.html - ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 - http://www.redhat.com/support/errata/RHSA-2007-0079.html - http://www.securityfocus.com/archive/1/459163/1
rity.338131 - http://www.redhat.com/support/errata/RHSA-2007-0079.html - http://www.securityfocus.com/archive/1/459163/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052209.html - http://www.securityfocus.com/archive/1/459162/100/0/threaded - http://secunia.com/advisories/24437
CVE ID: CVE-2007-0801 State: PUBLISHED Published: 2007-02-07T11:00:00 Last Updated: 2024-08-07T12:34:21.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nsExternalAppHandler::SetUpTempFile function in Mozilla Firefox 1.5.0.9 creates temporary files with predictable filenames based on creation time, which allows remote attackers to execute arbitrary web script or HTML via a crafted XMLHttpRequest. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200703-04.xml - http://www.securityfocus.com/bid/22396 - http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml - http://secunia.com/advisories/24393 - http://www.osvdb.org/321
tp://www.gentoo.org/security/en/glsa/glsa-200703-08.xml - http://secunia.com/advisories/24393 - http://www.osvdb.org/32108 - http://www.securityfocus.com/archive/1/459163/100/0/threaded - http://www.securityfocus.com/archive/1/459162/100/0/threaded - http://secunia.com/advisories/24437
CVE ID: CVE-2007-0802 State: PUBLISHED Published: 2007-02-07T11:00:00 Last Updated: 2024-08-07T12:34:20.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 2.0.0.1 allows remote attackers to bypass the Phishing Protection mechanism by adding certain characters to the end of the domain name, as demonstrated by the "." and "/" characters, which is not caught by the Phishing List blacklist filter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/459265/100/0/threaded - https://bugzilla.mozilla.org/show_bug.cgi?id=367538 - http://osvdb.org/33705 - http://archives.neohapsis.com/archives/fulldisclosure/2007-04/0516.
rg/show_bug.cgi?id=367538 - http://osvdb.org/33705 - http://archives.neohapsis.com/archives/fulldisclosure/2007-04/0516.html - http://kaneda.bohater.net/security/20070111-firefox_2.0.0.1_bypass_phishing_protection.php