Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-1754 State: PUBLISHED Published: 2007-07-10T22:00:00 Last Updated: 2024-08-07T13:06:26.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: PUBCONV.DLL in Microsoft Office Publisher 2007 does not properly clear memory when transferring data from disk to memory, which allows user-assisted remote attackers to execute arbitrary code via a malformed .pub page via a certain negative value, which bypasses a sanitization procedure that initializes critical pointers to NULL, aka the "Publisher Invalid Memory Reference Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html - https:
otes: - CVE Program Container: References: - http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-037 - http://www.securitytracker.com/id?1018353 - http://research.eeye.com/html/advisories/published/AD20070710.html - http://www.vupen.com/english/advisories/2007/2479 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1871 - http://www.us-cert.gov/cas/techalerts/TA07-191A.html - http://secunia.com/advisories/25988 - http://osvdb.org/35953 - http://www.securityfocus.com/archive/1/473309/100/0/threaded
CVE ID: CVE-2007-1755 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-1756 State: PUBLISHED Published: 2007-07-10T22:00:00 Last Updated: 2024-08-07T13:06:26.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and Office Excel 2007 does not properly validate version information, which allows user-assisted remote attackers to execute arbitrary code via a crafted Excel file, aka "Calculation Error Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html - http://www.securityfocus.com/bid/24801 - http://www.securitytracker.com/id?1018352 - https://docs.microsoft.com/en-us/security-updates
urityfocus.com/bid/24801 - http://www.securitytracker.com/id?1018352 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-036 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35210 - http://www.vupen.com/english/advisories/2007/2478 - http://osvdb.org/35957 - http://secunia.com/advisories/25995 - http://www.us-cert.gov/cas/techalerts/TA07-191A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2123
CVE ID: CVE-2007-1757 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-1758 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-1759 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-1760 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-1761 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-1762 State: PUBLISHED Published: 2007-03-30T00:00:00 Last Updated: 2024-08-07T13:06:26.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 2.0.0.1 through 2.0.0.3 does not canonicalize URLs before checking them against the phishing site blacklist, which allows remote attackers to bypass phishing protection via multiple / (slash) characters in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34535 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33486 - http://www.securityfocus.com/archive/1/464149/100/0/threaded
CVE ID: CVE-2007-1763 State: PUBLISHED Published: 2007-03-30T00:00:00 Last Updated: 2024-08-07T13:06:26.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ATI kernel driver (atikmdag.sys) in Microsoft Windows Vista allows user-assisted remote attackers to cause a denial of service (crash) via a crafted JPG image, as demonstrated by a slideshow, possibly due to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33300 - http://archives.neohapsis.com/archives/vulnwatch/2007-q1/0077.html - http://www.vupen.com/english/advisories/2007/1160 - http://secunia.com/advisories/24667 - http://leovillet
1/0077.html - http://www.vupen.com/english/advisories/2007/1160 - http://secunia.com/advisories/24667 - http://leovilletownsquare.com/fusionbb/showtopic.php?fid/27/tid/17600/ - http://www.osvdb.org/33635 - http://securityvulns.com/news/Microsoft/Vista/ATI.html
CVE ID: CVE-2007-1764 State: PUBLISHED Published: 2007-03-30T00:00:00 Last Updated: 2024-08-07T13:06:26.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in FastStone Image Viewer 2.8 allows user-assisted remote attackers to execute arbitrary code via a crafted JPG image. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2510 - http://www.securityfocus.com/bid/23196 - http://osvdb.org/42054 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33485 - http://www.securityfocus.com/archive/1/464148/100/0/threaded
CVE ID: CVE-2007-1765 State: PUBLISHED Published: 2007-03-30T00:00:00 Last Updated: 2024-08-07T13:06:26.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a malformed ANI file, which results in memory corruption when processing cursors, animated cursors, and icons, a similar issue to CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7. NOTE: this issue might be a duplicate of CVE-2007-0038; if so, then use CVE-2007-0038 instead of this identifier. Additional Analyst Notes: - CVE Program
ate of CVE-2007-0038; if so, then use CVE-2007-0038 instead of this identifier. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/464287/100/0/threaded - http://research.eeye.com/html/alerts/zeroday/20070328.html - http://www.securityfocus.com/archive/1/464345/100/0/threaded - http://www.vupen.com/english/advisories/2007/1151 - http://vil.nai.com/vil/content/v_141860.htm - http://www.avertlabs.com/research/blog/?p=230 - http://www.securityfocus.com/bid/23194 - http://www.microsoft.com/technet/security/advisory/935423.mspx - http://www.securitytracker.com/id?1017827 - http://www.avertlabs.com/research/blog/?p=233 - http://asert.arbornetwor
x - http://www.securitytracker.com/id?1017827 - http://www.avertlabs.com/research/blog/?p=233 - http://asert.arbornetworks.com/2007/03/any-ani-file-could-infect-you/
CVE ID: CVE-2007-1766 State: PUBLISHED Published: 2007-03-30T00:00:00 Last Updated: 2024-08-07T13:06:26.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in login/engine/db/profiledit.php in Advanced Login 0.76 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24695 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33321 - http://osvdb.org/34587 - http://www.vupen.com/english/advisories/2007/1179 - http://www.securityfocus.com/archive/1/464147/100/0/threaded - https://www.exploit-db.com/explo
h/advisories/2007/1179 - http://www.securityfocus.com/archive/1/464147/100/0/threaded - https://www.exploit-db.com/exploits/3608 - http://www.securityfocus.com/bid/23197 - http://securityreason.com/securityalert/2508
CVE ID: CVE-2007-1767 State: PUBLISHED Published: 2007-03-30T00:00:00 Last Updated: 2024-08-07T13:06:26.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in (1) Deskbar.dll and (2) Toolbar.dll in AOL 9.0 before February 2007 allows remote attackers to cause a denial of service (browser crash) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33309 - http://osvdb.org/35207 - http://archives.neohapsis.com/archives/bugtraq/2007-03/0392.html
CVE ID: CVE-2007-1768 State: PUBLISHED Published: 2007-03-30T01:00:00 Last Updated: 2024-08-07T13:06:26.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in app/helpers/application_helper.rb in Mephisto 0.7.3 and Mephisto Edge 20070325 allows remote attackers to inject arbitrary web script or HTML via the author name field in a comment. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23137 - http://www.securityfocus.com/archive/1/463825/100/0/threaded - http://securityreason.com/securityalert/2490 - http://osvdb.org/35309 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33230
CVE ID: CVE-2007-1769 State: REJECTED Published: 2007-03-30T01:00:00 Last Updated: 2007-06-09T09:00:00 Description: No description available.
CVE ID: CVE-2007-1770 State: PUBLISHED Published: 2007-03-30T01:00:00 Last Updated: 2024-08-07T13:06:26.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ArcSDE service (giomgr) in Environmental Systems Research Institute (ESRI) ArcGIS before 9.2 Service Pack 2, when using three tiered ArcSDE configurations, allows remote attackers to cause a denial of service (giomgr crash) and execute arbitrary code via long parameters in crafted requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1017874 - http://www.securityfocus.com/bid/23175 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33457 - http:/
d?1017874 - http://www.securityfocus.com/bid/23175 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33457 - http://secunia.com/advisories/24639 - http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=19&MetaID=1261 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33282 - http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=19&MetaID=1262 - http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=19&MetaID=1260 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=507 - http://www.vupen.com/english/advisories/2007/1140
CVE ID: CVE-2007-1771 State: PUBLISHED Published: 2007-03-30T01:00:00 Last Updated: 2024-08-07T13:06:26.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in manage/javascript/formjavascript.php in Ay System Solutions Web Content System (WCS) 2.7.1 allows remote attackers to execute arbitrary PHP code via a URL in the path[JavascriptEdit] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24663 - http://osvdb.org/34500 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33281 - https://www.exploit-db.com/exploits/3592 - http://www.securityfocus.com/bid/23171 - http://www.vupen.com/e
ities/33281 - https://www.exploit-db.com/exploits/3592 - http://www.securityfocus.com/bid/23171 - http://www.vupen.com/english/advisories/2007/1139
CVE ID: CVE-2007-1772 State: PUBLISHED Published: 2007-03-30T01:00:00 Last Updated: 2024-08-07T13:06:26.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FTP service in HP JetDirect print servers allows remote attackers to cause a denial of service (engine crash) via a RETR command with a long pathname. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=117502315312302&w=2 - http://www.securityfocus.com/bid/23168 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33273
CVE ID: CVE-2007-1773 State: PUBLISHED Published: 2007-03-30T01:00:00 Last Updated: 2024-08-07T13:06:26.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in aBitWhizzy allow remote attackers to list arbitrary directories via a .. (dot dot) in the d parameter to (1) whizzery/whizzypic.php or (2) whizzery/whizzylink.php, different vectors than CVE-2006-6384. Additional Analyst Notes: - CVE Program Container: References: - http://lostmon.blogspot.com/2007/03/abitwhizzy-traversal-folder-enumeration.html - http://www.vupen.com/english/advisories/2007/1136 - http://www.osvdb.org/34505 - http://www.osvdb.org/34506 - http://www.securityfocus
en.com/english/advisories/2007/1136 - http://www.osvdb.org/34505 - http://www.osvdb.org/34506 - http://www.securityfocus.com/bid/23167 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33277 - http://downloads.securityfocus.com/vulnerabilities/exploits/23167.html - http://secunia.com/advisories/24679
CVE ID: CVE-2007-1774 State: PUBLISHED Published: 2007-03-30T01:00:00 Last Updated: 2024-08-07T13:06:26.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in aBitWhizzy allow remote attackers to inject arbitrary web script or HTML via the d parameter to (1) whizzery/whizzypic.php or (2) whizzery/whizzylink.php. Additional Analyst Notes: - CVE Program Container: References: - http://lostmon.blogspot.com/2007/03/abitwhizzy-traversal-folder-enumeration.html - http://www.vupen.com/english/advisories/2007/1136 - http://www.securityfocus.com/bid/23167 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33279 - http://downloads.sec
tp://www.securityfocus.com/bid/23167 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33279 - http://downloads.securityfocus.com/vulnerabilities/exploits/23167.html - http://www.osvdb.org/34507 - http://www.osvdb.org/34508 - http://secunia.com/advisories/24679
CVE ID: CVE-2007-1775 State: PUBLISHED Published: 2007-03-30T01:00:00 Last Updated: 2024-08-07T13:06:26.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in upload.php3 in JBrowser 2.4 and earlier allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23166 - http://osvdb.org/43445
CVE ID: CVE-2007-1776 State: PUBLISHED Published: 2007-03-30T01:00:00 Last Updated: 2024-08-07T13:06:26.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the DesignForJoomla.com D4J eZine (com_ezine) 2.8 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the article parameter in a read action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23165 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33249 - http://www.vupen.com/english/advisories/2007/1135 - https://www.exploit-db.com/exploits/3590 - http://secunia.com/advisories/24675 - ht
n.com/english/advisories/2007/1135 - https://www.exploit-db.com/exploits/3590 - http://secunia.com/advisories/24675 - http://osvdb.org/34511
CVE ID: CVE-2007-1777 State: PUBLISHED Published: 2007-03-30T01:00:00 Last Updated: 2024-08-07T13:06:26.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the zip_read_entry function in PHP 4 before 4.4.5 allows remote attackers to execute arbitrary code via a ZIP archive that contains an entry with a length value of 0xffffffff, which is incremented before use in an emalloc call, triggering a heap overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2007/dsa-1283 - http://www.php-security.org/MOPB/MOPB-35-2007.html - http://secunia.com/advisories/25062 - http://www.securityfocus.com/bid/23169 - https://exch
org/MOPB/MOPB-35-2007.html - http://secunia.com/advisories/25062 - http://www.securityfocus.com/bid/23169 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33652 - http://www.debian.org/security/2007/dsa-1282 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:130 - http://secunia.com/advisories/25025
CVE ID: CVE-2007-1778 State: PUBLISHED Published: 2007-03-30T01:00:00 Last Updated: 2024-08-07T13:06:26.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in db/mysql.php in the Eve-Nuke 0.1 (EN-Forums) module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37195 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33285 - https://www.exploit-db.com/exploits/3591 - http://www.vupen.com/english/advisories/2007/1138 - http://www.securityfocus.com/bid/23176
CVE ID: CVE-2007-1779 State: PUBLISHED Published: 2007-03-30T01:00:00 Last Updated: 2024-08-07T13:06:26.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the MySQL back-end in Advanced Website Creator (AWC) before 1.9.0 might allow remote attackers to execute arbitrary SQL commands via unspecified parameters, related to use of mysql_escape_string instead of mysql_real_escape_string. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33875 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33388 - http://secunia.com/advisories/24685 - http://forums.awcreator.com/viewtopic.php?t=45 - http://www.securityf
ties/33388 - http://secunia.com/advisories/24685 - http://forums.awcreator.com/viewtopic.php?t=45 - http://www.securityfocus.com/bid/23268
CVE ID: CVE-2007-1780 State: PUBLISHED Published: 2007-03-30T10:00:00 Last Updated: 2024-08-07T13:06:26.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the DHT shell (owdhtshell) in Overlay Weaver 0.5.9 to 0.5.11, when invoked with the -x option, allows remote attackers to inject arbitrary web script or HTML via fields in certain input forms. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24669 - http://overlayweaver.sourceforge.net/news/ - http://www.vupen.com/english/advisories/2007/1167 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33340 - http://www.securityfocus.com/bid/2
h/advisories/2007/1167 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33340 - http://www.securityfocus.com/bid/23195 - http://jvn.jp/jp/JVN%2362399483/index.html
CVE ID: CVE-2007-1781 State: PUBLISHED Published: 2007-03-30T10:00:00 Last Updated: 2024-08-07T13:06:26.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Minna De Office 1.x and 2.x does not properly restrict user access to certain privileged actions, which allows local users to change the configuration or have other unspecified impact. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1162 - http://www.securityfocus.com/bid/23198 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33341 - http://osvdb.org/34518 - http://jvn.jp/jp/JVN%2373258608/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33341 - http://osvdb.org/34518 - http://jvn.jp/jp/JVN%2373258608/index.html - http://www.aisantec.co.jp/mof/index.html - http://secunia.com/advisories/24691
CVE ID: CVE-2007-1782 State: PUBLISHED Published: 2007-03-30T10:00:00 Last Updated: 2024-08-07T13:06:26.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: CruiseWorks 1.09e and earlier does not properly restrict user access to certain privileged actions, which allows local users to change the configuration or have other unspecified impact. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23198 - http://www.kynos.co.jp/cws-support/index.html - http://www.vupen.com/english/advisories/2007/1163 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33323 - http://
http://www.vupen.com/english/advisories/2007/1163 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33323 - http://osvdb.org/34543 - http://jvn.jp/jp/JVN%2373258608/index.html - http://secunia.com/advisories/24674
CVE ID: CVE-2007-1783 State: REJECTED Published: 2011-02-24T15:00:00 Last Updated: 2012-11-06T10:00:00 Description: No description available.
CVE ID: CVE-2007-1784 State: PUBLISHED Published: 2007-03-31T01:00:00 Last Updated: 2024-08-07T13:06:26.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JNILoader ActiveX control (STJNILoader.ocx) 3.1.0.26 in IBM Lotus Notes Sametime before 7.5 allows remote attackers to load arbitrary DLL libraries and execute arbitrary code via arbitrary arguments to the loadLibrary function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23201 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33314 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=495 - http://www-1.ibm.com/support/docview.wss?uid=swg21257029 -
defense.com/intelligence/vulnerabilities/display.php?id=495 - http://www-1.ibm.com/support/docview.wss?uid=swg21257029 - http://www.securitytracker.com/id?1017828
CVE ID: CVE-2007-1785 State: PUBLISHED Published: 2007-03-31T01:00:00 Last Updated: 2024-08-07T13:06:26.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RPC service in mediasvr.exe in CA BrightStor ARCserve Backup 11.5 SP2 build 4237 allows remote attackers to execute arbitrary code via crafted xdr_handle_t data in RPC packets, which is used in calculating an address for a function call, as demonstrated using the 191 (0xbf) RPC request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1017830 - http://www.shirkdog.us/shk-004.html - http://archives.neohapsis.com/archives/fulldisclosure/2007-03/0467.html - http://supportconne
shirkdog.us/shk-004.html - http://archives.neohapsis.com/archives/fulldisclosure/2007-03/0467.html - http://supportconnectw.ca.com/public/storage/infodocs/babmedser-secnotice.asp - http://www.shirkdog.us/camediasvrremote.py - https://exchange.xforce.ibmcloud.com/vulnerabilities/33316 - http://secunia.com/advisories/24682 - http://www.kb.cert.org/vuls/id/151305 - http://www.securityfocus.com/bid/23209 - http://securityreason.com/securityalert/2509 - http://www.securityfocus.com/archive/1/464343/100/0/threaded - http://www.securityfocus.com/archive/1/464270/100/0/threaded - http://www.vupen.com/english/advisories/2007/1161
CVE ID: CVE-2007-1786 State: PUBLISHED Published: 2007-03-31T10:00:00 Last Updated: 2024-08-07T13:06:26.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Hitachi Collaboration - Online Community Management 01-00 through 01-30, as used in Groupmax Collaboration Portal, Groupmax Collaboration Web Client, uCosminexus Collaboration Portal, Cosminexus Collaboration Portal, and uCosminexus Content Manager, allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.hitachi-support.com/security_e/vuls_e/HS07-008_e/index-e.html - http://www.securityfocus.com
r: References: - http://www.hitachi-support.com/security_e/vuls_e/HS07-008_e/index-e.html - http://www.securityfocus.com/bid/23208 - http://www.vupen.com/english/advisories/2007/1168 - http://osvdb.org/34544 - http://secunia.com/advisories/24693 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33348