Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-5588 State: PUBLISHED Published: 2007-10-19T23:00:00 Last Updated: 2024-08-07T15:39:13.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mnoGoSearch before 3.2.43 allows remote attackers to inject arbitrary web script or HTML via the t parameter in search.cgi, as reachable from search.htm-dist. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27263 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37269 - http://osvdb.org/37929 - http://www.mnogosearch.org/doc/msearch-changelog.html - http://www.securityfocus.com/bid/26114
CVE ID: CVE-2007-5589 State: PUBLISHED Published: 2007-10-19T23:00:00 Last Updated: 2024-08-07T15:39:13.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.11.1.2 allow remote attackers to inject arbitrary web script or HTML via certain input available in (1) PHP_SELF in (a) server_status.php, and (b) grab_globals.lib.php, (c) display_change_password.lib.php, and (d) common.lib.php in libraries/; and certain input available in PHP_SELF and (2) PATH_INFO in libraries/common.inc.php. NOTE: there might also be other vectors related to (3) REQUEST_URI. Additional Analyst Notes: - CVE Program Container: Referen
there might also be other vectors related to (3) REQUEST_URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3535 - http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/MAINT_2_11_1/phpMyAdmin/ChangeLog?r1=10796&r2=10795&pathrev=10796 - http://secunia.com/advisories/27246 - http://www.digitrustgroup.com/advisories/TDG-advisory071015a.html - http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2007-6 - http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin?view=rev&revision=10796 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00040.html - https://exchange.xforce.ibmcloud.com/vulnera
w.redhat.com/archives/fedora-package-announce/2007-November/msg00040.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/37292 - http://secunia.com/advisories/27506 - http://www.securityfocus.com/bid/26301 - http://www.debian.org/security/2007/dsa-1403 - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html - http://osvdb.org/37939 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:199 - http://secunia.com/advisories/27595 - https://bugzilla.redhat.com/show_bug.cgi?id=333661 - http://secunia.com/advisories/29323
CVE ID: CVE-2007-5590 State: PUBLISHED Published: 2007-10-19T23:00:00 Last Updated: 2024-08-07T15:39:13.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Miranda before 0.7.1 allow remote attackers to execute arbitrary code via unspecified vectors involving (1) IRC options, (2) Jabber forms, and unspecified aspects of the (3) ICQ and (4) Yahoo! instant messaging functionality. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?group_id=94142&release_id=547866 - http://osvdb.org/41805 - http://secunia.com/advisories/27287
t/project/shownotes.php?group_id=94142&release_id=547866 - http://osvdb.org/41805 - http://secunia.com/advisories/27287 - http://osvdb.org/41806 - http://osvdb.org/41807 - http://osvdb.org/41804 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37291 - http://www.vupen.com/english/advisories/2007/3539 - http://www.securityfocus.com/bid/26115
CVE ID: CVE-2007-5591 State: PUBLISHED Published: 2007-10-19T23:00:00 Last Updated: 2024-08-07T15:39:13.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CS1000 signaling server in Nortel Enterprise VoIP-Core-CS 1000M Chassis/Cabinet, Enterprise VoIP-Core-CS 1000E and 1000S, Meridian-Core-Option 11C Chassis and Cabinet, and Meridian-Core-Option 51C, 61C, and 81C allows remote attackers to cause a denial of service (telephony application outage) via a flood of packets to Embedded LAN (ELAN) ports. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27282 - http://www.vupen.com/english/advisories/2007/3536 - https://exchange.xforce.i
s: - http://secunia.com/advisories/27282 - http://www.vupen.com/english/advisories/2007/3536 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37252 - http://osvdb.org/41799 - http://www.csnc.ch/static/advisory/csnc/nortel_telephony_server_denial_of_service_v1.0.txt - http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2007/42/022871-01.pdf - http://www.securityfocus.com/bid/26113 - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=655204 - http://www.securityfocus.com/archive/1/482484/100/0/threaded
CVE ID: CVE-2007-5592 State: PUBLISHED Published: 2007-10-19T23:00:00 Last Updated: 2024-08-07T15:39:12.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in awzMB 4.2 beta 1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the Setting[OPT_includepath] parameter to (1) adminhelp.php; and (2) admin.incl.php, (3) reg.incl.php, (4) help.incl.php, (5) gbook.incl.php, and (6) core/core.incl.php in modules/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4545 - http://www.securityfocus.com/bid/26116 - http://www.vupen.com/english/advisories/2007/3569 -
oit-db.com/exploits/4545 - http://www.securityfocus.com/bid/26116 - http://www.vupen.com/english/advisories/2007/3569 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37272
CVE ID: CVE-2007-5593 State: PUBLISHED Published: 2007-10-19T23:00:00 Last Updated: 2024-08-07T15:39:13.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: install.php in Drupal 5.x before 5.3, when the configured database server is not reachable, allows remote attackers to execute arbitrary code via vectors that cause settings.php to be modified. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/files/sa-2007-025/SA-2007-025-5.2.patch - http://osvdb.org/39648 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37265 - http://drupal.org/node/184316 - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00328.html - http://sec
drupal.org/node/184316 - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00328.html - http://secunia.com/advisories/27352 - http://secunia.com/advisories/27290 - http://www.securityfocus.com/bid/26119
CVE ID: CVE-2007-5594 State: PUBLISHED Published: 2007-10-19T23:00:00 Last Updated: 2024-08-07T15:39:13.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Drupal 5.x before 5.3 does not apply its Drupal Forms API protection against the user deletion form, which allows remote attackers to delete users via a cross-site request forgery (CSRF) attack. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/184348 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37268 - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00328.html - http://secunia.com/advisories/27352 - http://secunia.com/advisories/27290 - http://www.securit
7-October/msg00328.html - http://secunia.com/advisories/27352 - http://secunia.com/advisories/27290 - http://www.securityfocus.com/bid/26119
CVE ID: CVE-2007-5595 State: PUBLISHED Published: 2007-10-19T23:00:00 Last Updated: 2024-08-07T15:39:13.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the drupal_goto function in includes/common.inc Drupal 4.7.x before 4.7.8 and 5.x before 5.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/184315 - http://www.vupen.com/english/advisories/2007/3546 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37264 - http://secunia.com/advisories/27292 - https://www.redhat.com/archives/f
ange.xforce.ibmcloud.com/vulnerabilities/37264 - http://secunia.com/advisories/27292 - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00328.html - http://secunia.com/advisories/27352 - http://www.securityfocus.com/bid/26119
CVE ID: CVE-2007-5596 State: PUBLISHED Published: 2007-10-19T23:00:00 Last Updated: 2024-08-07T15:39:13.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: The core Upload module in Drupal 4.7.x before 4.7.8 and 5.x before 5.3 places the .html extension on a whitelist, which allows remote attackers to conduct cross-site scripting (XSS) attacks by uploading .html files. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3546 - http://secunia.com/advisories/27292 - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00328.html - http://secunia.com/advisories/27352 - https://exchange.xforce.ibmcloud.com/v
ckage-announce/2007-October/msg00328.html - http://secunia.com/advisories/27352 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37274 - http://drupal.org/node/184320 - http://www.securityfocus.com/bid/26119
CVE ID: CVE-2007-5597 State: PUBLISHED Published: 2007-10-19T23:00:00 Last Updated: 2024-08-07T15:39:13.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hook_comments API in Drupal 4.7.x before 4.7.8 and 5.x before 5.3 does not pass publication status, which might allow attackers to bypass access restrictions and trigger e-mail with unpublished comments from some modules, as demonstrated by (1) Organic groups and (2) Subscriptions. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3546 - http://drupal.org/node/184354 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37296 - http://secunia.com/advisories/27292
rupal.org/node/184354 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37296 - http://secunia.com/advisories/27292 - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00328.html - http://secunia.com/advisories/27352 - http://www.securityfocus.com/bid/26119
CVE ID: CVE-2007-5598 State: PUBLISHED Published: 2007-10-19T23:00:00 Last Updated: 2024-08-07T15:39:13.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Weblinks for Drupal 4.7.x before 4.7.x-1.0 and 5.x before 5.x-1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/184323 - http://osvdb.org/37904 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37278 - http://www.securityfocus.com/bid/26125 - http://secunia.com/advisories/27289
CVE ID: CVE-2007-5599 State: PUBLISHED Published: 2007-10-19T23:00:00 Last Updated: 2024-08-07T15:39:13.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in awrate 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the toroot parameter to (1) 404.php or (2) topbar.php, different vectors than CVE-2006-6368. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26336 - http://arfis.wordpress.com/2007/09/13/rfi-02-awratecom-message-board/ - http://osvdb.org/45528 - http://osvdb.org/45529
CVE ID: CVE-2007-5600 State: PUBLISHED Published: 2007-10-19T23:00:00 Last Updated: 2024-08-07T15:39:13.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in index.php in Artmedic CMS 3.4 and earlier allows remote attackers to execute arbitrary PHP code via a (1) UNC share pathname, or a (2) ftps, (3) ssh2.sftp, or (4) ssh2.scp URL, in the page parameter, for which PHP remote file inclusion is blocked only for http, https, and ftp URLs. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4538
CVE ID: CVE-2007-5601 State: PUBLISHED Published: 2007-10-20T20:00:00 Last Updated: 2024-08-07T15:39:13.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Database Component in MPAMedia.dll in RealNetworks RealPlayer 10.5 and 11 beta, and earlier versions including 10, RealOne Player, and RealOne Player 2, allows remote attackers to execute arbitrary code via certain playlist names, as demonstrated via the import method to the IERPCtl ActiveX control in ierpplug.dll. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27248 - http://www.kb.cert.org/vuls/id/871673 - http://www.securitytracker.com/id?101
s: - http://secunia.com/advisories/27248 - http://www.kb.cert.org/vuls/id/871673 - http://www.securitytracker.com/id?1018843 - http://www.vupen.com/english/advisories/2007/3548 - http://www.infosecblog.org/2007/10/nasa-bans-ie.html - http://www.securityfocus.com/bid/26130 - http://www.symantec.com/enterprise/security_response/weblog/2007/10/realplayer_exploit_on_the_loos.html - http://www.us-cert.gov/cas/techalerts/TA07-297A.html - http://service.real.com/realplayer/security/191007_player/en/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/37280
CVE ID: CVE-2007-5602 State: PUBLISHED Published: 2008-02-05T00:00:00 Last Updated: 2024-08-07T15:39:13.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in SwiftView Viewer before 8.3.5, as used by SwiftView and SwiftSend, allow remote attackers to execute arbitrary code via unspecified vectors to the (1) svocx.ocx ActiveX control or the (2) npsview.dll plugin for Mozilla and Firefox. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/639169 - http://secunia.com/advisories/28724 - http://www.vupen.com/english/advisories/2008/0330 - http://www.swiftview.com/tech/security/bulletins/SBSV-07-10-02.h
4 - http://www.vupen.com/english/advisories/2008/0330 - http://www.swiftview.com/tech/security/bulletins/SBSV-07-10-02.htm - http://www.securityfocus.com/bid/27527 - http://osvdb.org/42836 - http://www.securitytracker.com/id?1019287 - http://osvdb.org/42837
CVE ID: CVE-2007-5603 State: PUBLISHED Published: 2007-11-05T18:00:00 Last Updated: 2024-08-07T15:39:13.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x before 2.5.0.56, allows remote attackers to execute arbitrary code via a long string in the second argument to the AddRouteEntry method. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/WDON-78K56M - http://www.kb.cert.org/vuls/id/298521 - http://www.vupen.com/english/advisories/2007/3696 - http://www.sec-consult.com/fileadmin/Advisories/20071101-0_sonicwall_mul
://www.vupen.com/english/advisories/2007/3696 - http://www.sec-consult.com/fileadmin/Advisories/20071101-0_sonicwall_multiple.txt - https://www.exploit-db.com/exploits/4594 - http://securityreason.com/securityalert/3342 - http://www.securityfocus.com/bid/26288 - http://www.securitytracker.com/id?1018891 - http://secunia.com/advisories/27469 - http://www.securityfocus.com/archive/1/483097/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/38220 - http://www.sec-consult.com/303.html
CVE ID: CVE-2007-5604 State: PUBLISHED Published: 2008-06-04T20:00:00 Last Updated: 2024-08-07T15:39:13.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ExtractCab function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long first argument, a different vulnerability than CVE-2007-5605, CVE-2007-5606, and CVE-2007-5607. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30516 - http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264 - https://exchange.xforce.ibmcloud.com/vulne
- http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42844 - http://www.kb.cert.org/vuls/id/754403 - http://www.securityfocus.com/bid/29526 - http://www.vupen.com/english/advisories/2008/1740/references - http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf - http://www.securitytracker.com/id?1020165 - http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264
CVE ID: CVE-2007-5605 State: PUBLISHED Published: 2008-06-04T20:00:00 Last Updated: 2024-08-07T15:39:13.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the GetFileTime function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long argument, a different vulnerability than CVE-2007-5604, CVE-2007-5606, and CVE-2007-5607. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30516 - http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264 - http://www.securityfocus.com/bid/29526 - https:
p://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264 - http://www.securityfocus.com/bid/29526 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42845 - http://www.vupen.com/english/advisories/2008/1740/references - http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf - http://www.securityfocus.com/bid/29531 - http://www.kb.cert.org/vuls/id/558163 - http://www.securitytracker.com/id?1020165 - http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264
CVE ID: CVE-2007-5606 State: PUBLISHED Published: 2008-06-04T20:00:00 Last Updated: 2024-08-07T15:39:13.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the MoveFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long argument, a different vulnerability than CVE-2007-5604, CVE-2007-5605, and CVE-2007-5607. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30516 - http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264 - http://www.securityfocus.com/bid/29526 - http://ww
/www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264 - http://www.securityfocus.com/bid/29526 - http://www.kb.cert.org/vuls/id/221123 - http://www.vupen.com/english/advisories/2008/1740/references - http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/42846 - http://www.securityfocus.com/bid/29532 - http://www.securitytracker.com/id?1020165 - http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264
CVE ID: CVE-2007-5607 State: PUBLISHED Published: 2008-06-04T20:00:00 Last Updated: 2024-08-07T15:39:13.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the RegistryString function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long first argument, a different vulnerability than CVE-2007-5604, CVE-2007-5605, and CVE-2007-5606. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42848 - http://secunia.com/advisories/30516 - http://www12.itrc.hp.com/service/cki/docDisplay.do?do
.com/vulnerabilities/42848 - http://secunia.com/advisories/30516 - http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264 - http://www.securityfocus.com/bid/29534 - http://www.securityfocus.com/bid/29526 - http://www.vupen.com/english/advisories/2008/1740/references - http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf - http://www.kb.cert.org/vuls/id/526131 - http://www.securitytracker.com/id?1020165 - http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264
CVE ID: CVE-2007-5608 State: PUBLISHED Published: 2008-06-04T20:00:00 Last Updated: 2024-08-07T15:39:13.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DownloadFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to force a download of an arbitrary file onto a client machine via a URL in the first argument and a destination filename in the second argument, a different vulnerability than CVE-2008-0952 and CVE-2008-0953. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30516 - http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=e
ontainer: References: - http://secunia.com/advisories/30516 - http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42850 - http://www.securityfocus.com/bid/29526 - http://www.vupen.com/english/advisories/2008/1740/references - http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf - http://www.kb.cert.org/vuls/id/949587 - http://www.securityfocus.com/bid/29530 - http://www.securitytracker.com/id?1020165 - http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264
CVE ID: CVE-2007-5610 State: PUBLISHED Published: 2008-06-04T20:00:00 Last Updated: 2024-08-07T15:39:13.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DeleteSingleFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to delete an arbitrary file via a full pathname in the argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/857539 - http://secunia.com/advisories/30516 - http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264 - http://www.securityfocus.com/bid/29526 - https://exchange.xforce.ibmcloud.com/vulne
cDisplay.do?docId=emr_na-c01422264 - http://www.securityfocus.com/bid/29526 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42852 - http://www.vupen.com/english/advisories/2008/1740/references - http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf - http://www.securityfocus.com/bid/29536 - http://www.securitytracker.com/id?1020165 - http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264
CVE ID: CVE-2007-5612 State: PUBLISHED Published: 2007-11-21T22:00:00 Last Updated: 2024-08-07T15:39:13.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: CIM Server in IBM Director 5.20.1 and earlier allows remote attackers to cause a denial of service (CPU consumption, connection slot exhaustion, and daemon crash) via a large number of idle connections. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/MIMG-78YMXE - http://www.securityfocus.com/bid/26509 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38583 - http://www.kb.cert.org/vuls/id/512193 - http://secunia.com/advisories/27752 - http://securitytracker.com/id?1018985 -
- http://www.kb.cert.org/vuls/id/512193 - http://secunia.com/advisories/27752 - http://securitytracker.com/id?1018985 - http://www.vupen.com/english/advisories/2007/3942
CVE ID: CVE-2007-5613 State: PUBLISHED Published: 2007-12-05T11:00:00 Last Updated: 2024-08-07T15:39:13.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Dump Servlet in Mortbay Jetty before 6.1.6rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters and cookies. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00227.html - http://www.securityfocus.com/bid/26697 - http://osvdb.org/42497 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00250.html - http://secunia.com/advisories/30941 - http:/