Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-5978 State: PUBLISHED Published: 2007-11-15T00:00:00 Last Updated: 2024-08-07T15:47:00.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in brokenlink.php in the mylinks module for XOOPS allows remote attackers to execute arbitrary SQL commands via the lid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/483525/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/38370 - http://www.securityfocus.com/bid/26392 - http://securityreason.com/securityalert/3362 - http://osvdb.org/38747
CVE ID: CVE-2007-5979 State: PUBLISHED Published: 2007-11-15T00:00:00 Last Updated: 2024-08-07T15:47:00.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in download_plugin.php3 in F5 Firepass 4100 SSL VPN 5.4 through 5.5.2 and 6.0 through 6.0.1 allows remote attackers to inject arbitrary web script or HTML via the backurl parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/483601/100/0/threaded - http://www.securitytracker.com/id?1018937 - http://securityreason.com/securityalert/3364 - http://osvdb.org/38665 - http://www.securityfocus.com/bid/26412 - https://exchange.xforce.
ason.com/securityalert/3364 - http://osvdb.org/38665 - http://www.securityfocus.com/bid/26412 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38439 - https://support.f5.com/kb/en-us/solutions/public/7000/400/sol7498.html - http://www.procheckup.com/Vulnerability_PR07-13.php - http://www.vupen.com/english/advisories/2007/3847 - http://secunia.com/advisories/27647
CVE ID: CVE-2007-5980 State: PUBLISHED Published: 2007-11-15T00:00:00 Last Updated: 2024-08-07T15:47:00.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in home/rss.php in eggblog before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38420 - http://secunia.com/advisories/27668 - http://www.securityfocus.com/archive/1/483569/100/0/threaded - http://www.securityfocus.com/bid/26408 - http://www.h-labs.org/blog/2007/11/11/eggblog_v3_1_0_xss_issues.html - http://sourceforge.
securityfocus.com/bid/26408 - http://www.h-labs.org/blog/2007/11/11/eggblog_v3_1_0_xss_issues.html - http://sourceforge.net/project/shownotes.php?group_id=155425&release_id=553433 - http://securityreason.com/securityalert/3361
CVE ID: CVE-2007-5981 State: PUBLISHED Published: 2007-11-15T00:00:00 Last Updated: 2024-08-07T15:47:00.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lantronix SCS3200 does not properly handle public-key requests, which allows remote attackers to cause a denial of service (unresponsive device) via unspecified keyscan requests. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26404 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38405 - http://secunia.com/advisories/26276
CVE ID: CVE-2007-5982 State: PUBLISHED Published: 2007-11-15T00:00:00 Last Updated: 2024-08-07T15:47:00.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in X7 Chat 2.0.4, 2.0.5, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the (1) room parameter to sources/frame.php, the (2) theme_c parameter to help/index.php, or the (3) INSTALL_X7CHATVERSION parameter to upgradev1.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38745 - http://osvdb.org/38746 - http://secunia.com/advisories/27677 - http://packetstorm.linuxsecurity.com/0711-exploits/x7-xss
http://osvdb.org/38746 - http://secunia.com/advisories/27677 - http://packetstorm.linuxsecurity.com/0711-exploits/x7-xss.txt - http://www.securityfocus.com/bid/26417
CVE ID: CVE-2007-5983 State: PUBLISHED Published: 2007-11-15T00:00:00 Last Updated: 2024-08-07T15:47:00.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Justin Hagstrom AutoIndex PHP Script before 2.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26411 - http://www.securityfocus.com/archive/1/483592/100/0/threaded - http://osvdb.org/38664 - http://autoindex.sourceforge.net/change_log.html - http://securityreason.com/securityalert/3360 - http://secunia.com/advisories/27671 - ht
ourceforge.net/change_log.html - http://securityreason.com/securityalert/3360 - http://secunia.com/advisories/27671 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38436
CVE ID: CVE-2007-5984 State: PUBLISHED Published: 2007-11-15T00:00:00 Last Updated: 2024-08-07T15:47:00.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: classes/Url.php in Justin Hagstrom AutoIndex PHP Script before 2.2.4 allows remote attackers to cause a denial of service (CPU and memory consumption) via a %00 sequence in the dir parameter to index.php, which triggers an erroneous "recursive calculation." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26410 - http://www.securityfocus.com/archive/1/483592/100/0/threaded - http://osvdb.org/45282 - http://autoindex.sourceforge.net/change_log.html - http://securityreason.com/sec
0/0/threaded - http://osvdb.org/45282 - http://autoindex.sourceforge.net/change_log.html - http://securityreason.com/securityalert/3360 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38437
CVE ID: CVE-2007-5985 State: PUBLISHED Published: 2007-11-15T00:00:00 Last Updated: 2024-08-07T15:47:00.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in BtiTracker before 1.4.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) account.php, (2) moresmiles.php, or (3) recover.php; or (4) the "to" parameter to usercp.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38753 - http://osvdb.org/42219 - http://sourceforge.net/tracker/index.php?func=detail&aid=1753797&group_id=146822&atid=766508 - https://exchange.xforce.ibmcloud.com/vulnerabilities/384
index.php?func=detail&aid=1753797&group_id=146822&atid=766508 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38413 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38414 - http://osvdb.org/38754 - http://osvdb.org/42222 - http://osvdb.org/42220 - http://sourceforge.net/project/shownotes.php?group_id=146822&release_id=552477 - http://osvdb.org/38751 - http://sourceforge.net/forum/forum.php?forum_id=752472 - http://secunia.com/advisories/27550 - http://www.securityfocus.com/bid/26551 - http://osvdb.org/42221 - http://osvdb.org/38752
CVE ID: CVE-2007-5986 State: PUBLISHED Published: 2007-11-15T00:00:00 Last Updated: 2024-08-07T15:47:00.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in include/functions.php in BtiTracker before 1.4.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38415 - http://sourceforge.net/project/shownotes.php?release_id=552477 - http://sourceforge.net/forum/forum.php?forum_id=752472 - http://secunia.com/advisories/27550 - http://www.securityfocus.com/bid/26551
CVE ID: CVE-2007-5987 State: PUBLISHED Published: 2007-11-15T00:00:00 Last Updated: 2024-08-07T15:47:00.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: details.php in BtiTracker before 1.4.5, when torrent viewing is disabled for guests, allows remote attackers to bypass protection mechanisms via a direct request, as demonstrated by (1) reading the details of an arbitrary torrent and (2) modifying a torrent owned by a guest. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=552477 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38416 - http://sourceforge.net/tracker/index.php?func=detail&aid=1748243&
//exchange.xforce.ibmcloud.com/vulnerabilities/38416 - http://sourceforge.net/tracker/index.php?func=detail&aid=1748243&group_id=146822&atid=766508 - http://osvdb.org/42217 - http://secunia.com/advisories/27550 - http://www.securityfocus.com/bid/26551
CVE ID: CVE-2007-5988 State: PUBLISHED Published: 2007-11-15T00:00:00 Last Updated: 2024-08-07T15:47:00.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: blocks/shoutbox_block.php in BtiTracker 1.4.4 does not verify user accounts, which allows remote attackers to post shoutbox entries as arbitrary users via a modified nick field. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/42216 - http://sourceforge.net/project/shownotes.php?release_id=552477 - http://sourceforge.net/tracker/index.php?func=detail&aid=1764809&group_id=146822&atid=766508 - http://secunia.com/advisories/27550 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38417 - http:
2&atid=766508 - http://secunia.com/advisories/27550 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38417 - http://www.securityfocus.com/bid/26551
CVE ID: CVE-2007-5989 State: PUBLISHED Published: 2007-12-13T21:00:00 Last Updated: 2024-08-07T15:47:00.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the skype4com URI handler in Skype before 3.6 GOLD allows remote attackers to execute arbitrary code via "short string values" that result in heap corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/4110 - http://securitytracker.com/id?1019056 - http://secunia.com/advisories/27934 - http://securityreason.com/securityalert/3440 - http://www.securityfocus.com/archive/1/484703/100/0/threaded - http://osvdb.org/39170 - http://www.sec
urityalert/3440 - http://www.securityfocus.com/archive/1/484703/100/0/threaded - http://osvdb.org/39170 - http://www.securityfocus.com/bid/26748 - http://www.zerodayinitiative.com/advisories/ZDI-07-070.html
CVE ID: CVE-2007-5990 State: PUBLISHED Published: 2007-11-15T22:00:00 Last Updated: 2024-08-07T15:47:00.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ExoPHPdesk allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a user profile, possibly the (1) name and (2) website parameters to register.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27638 - http://www.securityfocus.com/archive/1/483673/100/0/threaded - http://osvdb.org/38672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38447 - http://securityreason.com/securityalert/3368 - http:/
672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38447 - http://securityreason.com/securityalert/3368 - http://www.securityfocus.com/bid/26453 - http://www.securityfocus.com/bid/26431
CVE ID: CVE-2007-5991 State: PUBLISHED Published: 2007-11-15T22:00:00 Last Updated: 2024-08-07T15:47:00.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in ExoPHPdesk allows remote attackers to execute arbitrary SQL commands via the user parameter in a profile fn action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/483673/100/0/threaded - http://securityreason.com/securityalert/3368 - http://www.securityfocus.com/bid/26431 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38448
CVE ID: CVE-2007-5992 State: PUBLISHED Published: 2007-11-15T22:00:00 Last Updated: 2024-08-07T15:47:00.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in datecomm Social Networking Script (aka Myspace Clone Script) allows remote attackers to execute arbitrary SQL commands via the seid parameter in a viewcat s action on the forums page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26422 - https://www.exploit-db.com/exploits/4622 - http://www.vupen.com/english/advisories/2007/3905 - http://osvdb.org/39728
CVE ID: CVE-2007-5993 State: PUBLISHED Published: 2007-11-15T22:00:00 Last Updated: 2024-08-07T15:47:00.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Visionary Technology in Library Solutions (VTLS) vtls.web.gateway before 48.1.1 allows remote attackers to inject arbitrary web script or HTML via the searchtype parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38444 - http://secunia.com/advisories/27661 - http://www.securityfocus.com/bid/26419 - http://osvdb.org/38708 - http://www.securityfocus.com/archive/1/483622/100/0/threaded - http://securityreason.
d/26419 - http://osvdb.org/38708 - http://www.securityfocus.com/archive/1/483622/100/0/threaded - http://securityreason.com/securityalert/3369
CVE ID: CVE-2007-5994 State: PUBLISHED Published: 2007-11-15T22:00:00 Last Updated: 2024-08-07T15:47:00.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in check_noimage.php in Fritz Berger yet another php photo album - next generation (yappa-ng) 2.3.2 allows remote attackers to execute arbitrary PHP code via a URL in the config[path_src_include] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0711-exploits/yappa-ng-rfi.txt - http://www.securityfocus.com/bid/26398 - http://osvdb.org/39727
CVE ID: CVE-2007-5995 State: PUBLISHED Published: 2007-11-15T22:00:00 Last Updated: 2024-08-07T15:47:00.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in examples/patExampleGen/bbcodeSource.php in patBBcode 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the example parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4621 - http://www.securityfocus.com/bid/26416 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38425 - http://www.vupen.com/english/advisories/2007/3904
CVE ID: CVE-2007-5996 State: PUBLISHED Published: 2007-11-15T22:00:00 Last Updated: 2024-08-07T15:47:00.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in searchresult.php in Softbiz Link Directory Script allows remote attackers to execute arbitrary SQL commands via the sbcat_id parameter, a related issue to CVE-2007-5449. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38398 - https://www.exploit-db.com/exploits/4620 - http://www.securityfocus.com/bid/26402
CVE ID: CVE-2007-5997 State: PUBLISHED Published: 2007-11-15T22:00:00 Last Updated: 2024-08-07T15:47:00.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in campaign_stats.php in Softbiz Banner Exchange Network Script 1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4619 - http://www.securityfocus.com/bid/26401 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38401
CVE ID: CVE-2007-5998 State: PUBLISHED Published: 2007-11-15T22:00:00 Last Updated: 2024-08-07T15:47:00.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ads.php in Softbiz Ad Management plus Script 1 allows remote authenticated users to execute arbitrary SQL commands via the package parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26400 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38400 - https://www.exploit-db.com/exploits/4618
CVE ID: CVE-2007-5999 State: PUBLISHED Published: 2007-11-15T22:00:00 Last Updated: 2024-08-07T15:47:00.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in product_desc.php in Softbiz Auctions Script allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26399 - https://www.exploit-db.com/exploits/4617 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38399
CVE ID: CVE-2007-6000 State: PUBLISHED Published: 2007-11-15T22:00:00 Last Updated: 2024-08-07T15:47:00.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: KDE Konqueror 3.5.6 and earlier allows remote attackers to cause a denial of service (crash) via large HTTP cookie parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3370 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38456 - http://www.securityfocus.com/bid/26435 - http://www.securityfocus.com/archive/1/483705/100/0/threaded
CVE ID: CVE-2007-6001 State: PUBLISHED Published: 2007-11-15T22:00:00 Last Updated: 2024-08-07T15:47:00.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Bandersnatch 0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) func or (2) date parameter, or the jid parameter in a (3) log or (4) user action, a different vulnerability than CVE-2007-3910. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38360 - http://www.portcullis-security.com/180.php - http://www.securityfocus.com/bid/26553
CVE ID: CVE-2007-6002 State: PUBLISHED Published: 2007-11-15T22:00:00 Last Updated: 2024-08-07T15:47:00.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Fenriru (1) Sleipnir 2.5.17 R2 and earlier and (2) Grani 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search field in a search for additions to the Favorites section. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/jp/JVN%2365427327/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/38441 - http://osvdb.org/38875 - http://www.securityfocus.com/bid/26418 - http://osvdb.org/38876 - http://www.fenrir
ies/38441 - http://osvdb.org/38875 - http://www.securityfocus.com/bid/26418 - http://osvdb.org/38876 - http://www.fenrir.co.jp/grani/note.html - http://secunia.com/advisories/27675 - http://www.fenrir.co.jp/sleipnir/note.html - http://secunia.com/advisories/27655
CVE ID: CVE-2007-6003 State: PUBLISHED Published: 2007-11-15T22:00:00 Last Updated: 2024-08-07T15:47:00.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cgi/b/ic/connect in the Thomson SpeedTouch 716 with firmware 5.4.0.14 allows remote attackers to inject arbitrary web script or HTML via the url parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38419 - http://secunia.com/advisories/27564
CVE ID: CVE-2007-6004 State: PUBLISHED Published: 2007-11-15T22:00:00 Last Updated: 2024-08-07T15:47:00.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in Toko Instan 7.6 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in an artikel action or (2) the katid parameter in a produk action. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3906 - http://www.securityfocus.com/bid/26433 - https://www.exploit-db.com/exploits/4623 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38449
CVE ID: CVE-2007-6005 State: PUBLISHED Published: 2007-11-15T22:00:00 Last Updated: 2024-08-07T15:47:00.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the GpcContainer.GpcContainer.1 ActiveX control in WebEx allows remote attackers to cause a denial of service (memory access violation and crash) via (1) an invalid argument to the InitParam method or (2) an unspecified vector involving the SetParam method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26430 - http://osvdb.org/45294 - http://marc.info/?l=full-disclosure&m=119498701505838&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/3
294 - http://marc.info/?l=full-disclosure&m=119498701505838&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38445
CVE ID: CVE-2007-6006 State: PUBLISHED Published: 2007-11-15T22:00:00 Last Updated: 2024-08-07T15:47:00.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: TestLink before 1.7.1 does not enforce an unspecified authorization mechanism, which has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/42211 - http://secunia.com/advisories/27600 - http://sourceforge.net/project/shownotes.php?release_id=548619&group_id=90976 - http://www.securityfocus.com/bid/26439
CVE ID: CVE-2007-6007 State: PUBLISHED Published: 2007-11-15T22:00:00 Last Updated: 2024-08-07T15:47:00.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ID_PSP.apl plug-in for ACD ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, and Photo Editor 4.0 build 195 allows user-assisted remote attackers to execute arbitrary code via a crafted PSP image that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/483188/100/0/threaded - http://www.acdsee.com/support/knowledgebase/article?id=2800 - http://www.vupen.com/english/advisories/2007/3695 - http://s
tp://www.acdsee.com/support/knowledgebase/article?id=2800 - http://www.vupen.com/english/advisories/2007/3695 - http://secunia.com/advisories/25952 - http://www.securityfocus.com/bid/26297 - http://secunia.com/secunia_research/2007-73/advisory/ - http://securityreason.com/securityalert/3367
CVE ID: CVE-2007-6008 State: PUBLISHED Published: 2007-11-15T22:00:00Z Last Updated: 2024-09-16T17:47:47.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in emlsr.dll before 2.0.0.4 in Autonomy (formerly Verity) KeyView Viewer, Filter, and Export SDK allows remote attackers to execute arbitrary code via a long Content-Type header line in an EML file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27304
CVE ID: CVE-2007-6009 State: PUBLISHED Published: 2007-11-15T22:00:00 Last Updated: 2024-08-07T15:54:25.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in ACD products allow user-assisted remote attackers to execute arbitrary code via a long section string in a (1) XBM or (2) XPM file to (a) ID_X.apl or (b) IDE_ACDStd.apl. NOTE: the PSP and LHA vectors are already covered by CVE-2007-4344 and CVE-2007-6007. NOTE: these might be integer overflows rather than buffer overflows. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26554 - http://www.acdsee.com/support/knowledgebase/article?id=2800 - http://osv
ces: - http://www.securityfocus.com/bid/26554 - http://www.acdsee.com/support/knowledgebase/article?id=2800 - http://osvdb.org/45278