Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-1285 State: PUBLISHED Published: 2007-03-06T20:00:00 Last Updated: 2024-08-07T12:50:35.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable destruction routines. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/bugs/173043 - http://www.securityfocus.com/bid/22764 - http://rhn.redhat.com/errata/RHSA-2007-0154.html - http://secunia.com/advisories/26048 - http://www.securityfocus.com/archive/1/466166/100/0/threade
/RHSA-2007-0154.html - http://secunia.com/advisories/26048 - http://www.securityfocus.com/archive/1/466166/100/0/threaded - http://security.gentoo.org/glsa/glsa-200705-19.xml - http://secunia.com/advisories/24941 - http://secunia.com/advisories/27864 - http://www.redhat.com/support/errata/RHSA-2007-0162.html - http://us2.php.net/releases/4_4_7.php - http://www.php.net/releases/4_4_8.php - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.335136 - http://www.php.net/ChangeLog-5.php#5.2.4 - http://secunia.com/advisories/28936 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:090 - http://www.php-security.org/MOPB/MOPB-03-2007.html - https://u
ww.mandriva.com/security/advisories?name=MDKSA-2007:090 - http://www.php-security.org/MOPB/MOPB-03-2007.html - https://usn.ubuntu.com/549-1/ - http://secunia.com/advisories/24909 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:087 - http://secunia.com/advisories/24945 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11017 - https://issues.rpath.com/browse/RPL-1268 - http://www.osvdb.org/32769 - http://us2.php.net/releases/5_2_2.php - http://www.securitytracker.com/id?1017771 - http://www.redhat.com/support/errata/RHSA-2007-0082.html - http://secunia.com/advisories/24924 - http://rhn.redhat.com/errata/RHSA-2007-0155.html - http://secunia.c
07-0082.html - http://secunia.com/advisories/24924 - http://rhn.redhat.com/errata/RHSA-2007-0155.html - http://secunia.com/advisories/24910 - http://www.php.net/ChangeLog-4.php - http://www.php.net/releases/5_2_4.php - http://www.mandriva.com/security/advisories?name=MDKSA-2007:089 - http://secunia.com/advisories/25445 - http://rhn.redhat.com/errata/RHSA-2007-0163.html - http://www.ubuntu.com/usn/usn-549-2 - http://secunia.com/advisories/26642 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:088 - http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html
CVE ID: CVE-2007-1286 State: PUBLISHED Published: 2007-03-06T20:00:00 Last Updated: 2024-08-07T12:50:34.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unserialize function, which triggers the overflow in the ZVAL reference counter. Additional Analyst Notes: - CVE Program Container: References: - http://www.trustix.org/errata/2007/0009/ - http://www.vupen.com/english/advisories/2007/1991 - http://www.debian.org/security/2007/dsa-1283 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506 - http://secun
dsa-1283 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506 - http://secunia.com/advisories/24606 - http://rhn.redhat.com/errata/RHSA-2007-0154.html - http://www.securityfocus.com/archive/1/466166/100/0/threaded - http://security.gentoo.org/glsa/glsa-200705-19.xml - http://secunia.com/advisories/24941 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137 - http://security.gentoo.org/glsa/glsa-200703-21.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/32796 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137 - http://secunia.com/advisories/25062 - htt
.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137 - http://secunia.com/advisories/25062 - http://www.vupen.com/english/advisories/2007/2374 - http://secunia.com/advisories/25423 - http://www.php-security.org/MOPB/MOPB-04-2007.html - http://secunia.com/advisories/24419 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:087 - http://secunia.com/advisories/24945 - http://www.debian.org/security/2007/dsa-1282 - https://issues.rpath.com/browse/RPL-1268 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506 - http://secunia.com/advisories/24924 - http://rhn.redhat.com/errata/RHSA-2007-0155.html - http://secunia.com/adv
056506 - http://secunia.com/advisories/24924 - http://rhn.redhat.com/errata/RHSA-2007-0155.html - http://secunia.com/advisories/24910 - http://secunia.com/advisories/25850 - http://secunia.com/advisories/25445 - http://rhn.redhat.com/errata/RHSA-2007-0163.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11575 - http://www.securityfocus.com/bid/22765 - http://secunia.com/advisories/25025 - http://www.osvdb.org/32771 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:088
CVE ID: CVE-2007-1287 State: PUBLISHED Published: 2007-03-06T20:00:00 Last Updated: 2024-08-07T12:50:35.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: A regression error in the phpinfo function in PHP 4.4.3 to 4.4.6, and PHP 6.0 in CVS, allows remote attackers to conduct cross-site scripting (XSS) attacks via GET, POST, or COOKIE array values, which are not escaped in the phpinfo output, as originally fixed for CVE-2005-3388. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/32774 - http://www.vupen.com/english/advisories/2007/2732 - http://www.php-security.org/MOPB/MOPB-08-2007.html - http://lists.apple.com/archives/security-announce//200
/2007/2732 - http://www.php-security.org/MOPB/MOPB-08-2007.html - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://us2.php.net/releases/4_4_7.php - http://docs.info.apple.com/article.html?artnum=306172 - http://www.securityfocus.com/bid/25159 - http://secunia.com/advisories/26235
CVE ID: CVE-2007-1288 State: PUBLISHED Published: 2007-03-07T00:00:00 Last Updated: 2024-08-07T12:50:35.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Webmobo WB News 1.4.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the config[installdir] parameter to (1) comment.php, (2) themes.php, (3) directory.php, and (4) sendmsg.php in admin/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34954 - http://osvdb.org/34953 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32774 - http://securityreason.com/securityalert/2355 - http://osvdb.org/34952 - http://osvd
ibmcloud.com/vulnerabilities/32774 - http://securityreason.com/securityalert/2355 - http://osvdb.org/34952 - http://osvdb.org/34951 - http://www.securityfocus.com/archive/1/461674/100/0/threaded
CVE ID: CVE-2007-1289 State: PUBLISHED Published: 2007-03-07T00:00:00 Last Updated: 2024-08-07T12:50:35.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ViewBugs.php in Tyger Bug Tracking System (TygerBT) 1.1.3 allows remote attackers to execute arbitrary SQL commands via the s parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32791 - http://securityreason.com/securityalert/2356 - http://osvdb.org/35817 - http://www.securityfocus.com/archive/1/461801/100/0/threaded - http://secunia.com/advisories/24385 - http://www.securityfocus.com/bid/22799 - http://www.vupen.com/eng
100/0/threaded - http://secunia.com/advisories/24385 - http://www.securityfocus.com/bid/22799 - http://www.vupen.com/english/advisories/2007/0822
CVE ID: CVE-2007-1290 State: PUBLISHED Published: 2007-03-07T00:00:00 Last Updated: 2024-08-07T12:50:35.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ViewReport.php in Tyger Bug Tracking System (TygerBT) 1.1.3 allows remote attackers to execute arbitrary SQL commands via the bug parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32791 - http://secunia.com/advisories/24385
CVE ID: CVE-2007-1291 State: PUBLISHED Published: 2007-03-07T00:00:00 Last Updated: 2024-08-07T12:50:34.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Tyger Bug Tracking System (TygerBT) 1.1.3 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) Login.php and (2) Register.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2356 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32792 - http://www.securityfocus.com/archive/1/461801/100/0/threaded - http://secunia.com/advisories/24385 - http://www.securityfocus.com/bid/22799 - h
s.com/archive/1/461801/100/0/threaded - http://secunia.com/advisories/24385 - http://www.securityfocus.com/bid/22799 - http://www.vupen.com/english/advisories/2007/0822
CVE ID: CVE-2007-1292 State: PUBLISHED Published: 2007-03-07T00:00:00 Last Updated: 2024-08-07T12:50:35.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in inlinemod.php in Jelsoft vBulletin before 3.5.8, and before 3.6.5 in the 3.6.x series, might allow remote authenticated users to execute arbitrary SQL commands via the postids parameter. NOTE: the vendor states that the attack is feasible only in circumstances "almost impossible to achieve." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33835 - http://www.vbulletin.com/forum/showthread.php?postid=1314422 - http://secunia.com/advisories/24341 - https://exchange.
- http://www.vbulletin.com/forum/showthread.php?postid=1314422 - http://secunia.com/advisories/24341 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32746 - https://www.exploit-db.com/exploits/3387 - http://www.securityfocus.com/bid/22780
CVE ID: CVE-2007-1293 State: PUBLISHED Published: 2007-03-07T00:00:00 Last Updated: 2024-08-07T12:50:35.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Rigter Portal System (RPS) 6.2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the categoria parameter to the top-level URI (index.php), possibly related to ver_descarga.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0813 - http://osvdb.org/33831 - http://www.securityfocus.com/archive/1/462146/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/32784 - http://www
urityfocus.com/archive/1/462146/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/32784 - http://www.securityfocus.com/bid/22813 - http://secunia.com/advisories/24382 - https://www.exploit-db.com/exploits/3403
CVE ID: CVE-2007-1294 State: PUBLISHED Published: 2007-03-07T00:00:00 Last Updated: 2024-08-07T12:50:35.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain ActiveX control in the DivXBrowserPlugin (npdivx32.dll) in DivX Web Player, as distributed with DivX Player 1.3.0, allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via large values to DivxWP.Resize, related to resizing images. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3392 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32759 - http://osvdb.org/35377 - http://www.securityfocus.com/bid/22776
CVE ID: CVE-2007-1295 State: PUBLISHED Published: 2007-03-07T00:00:00 Last Updated: 2024-08-07T12:50:35.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in topic_title.php in AJ Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the td_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3411 - http://secunia.com/advisories/24378 - http://osvdb.org/33827 - http://www.securityfocus.com/bid/22808 - http://www.vupen.com/english/advisories/2007/0820 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32785
CVE ID: CVE-2007-1296 State: PUBLISHED Published: 2007-03-07T00:00:00 Last Updated: 2024-08-07T12:50:35.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in postingdetails.php in AJ Classifieds 1.0 allows remote attackers to execute arbitrary SQL commands via the postingid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3410 - http://www.securityfocus.com/bid/22808 - http://osvdb.org/35452 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32786 - http://www.vupen.com/english/advisories/2007/0833
CVE ID: CVE-2007-1297 State: PUBLISHED Published: 2007-03-07T00:00:00 Last Updated: 2024-08-07T12:50:35.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_profile.php in AJDating 1.0 allows remote attackers to execute arbitrary SQL commands via the user_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42326 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32788 - http://www.securityfocus.com/bid/29154 - https://www.exploit-db.com/exploits/3409 - http://osvdb.org/33828 - http://www.securityfocus.com/bid/22808 - https://www.exploit-db.com/exploits/5593 - htt
/3409 - http://osvdb.org/33828 - http://www.securityfocus.com/bid/22808 - https://www.exploit-db.com/exploits/5593 - http://www.vupen.com/english/advisories/2007/0821 - http://secunia.com/advisories/24376
CVE ID: CVE-2007-1298 State: PUBLISHED Published: 2007-03-07T00:00:00 Last Updated: 2024-08-07T12:50:35.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in subcat.php in AJ Auction 1.0 allows remote attackers to execute arbitrary SQL commands via the cate_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32789 - http://www.securityfocus.com/bid/22808 - https://www.exploit-db.com/exploits/3408 - http://secunia.com/advisories/24375 - http://www.vupen.com/english/advisories/2007/0819 - http://osvdb.org/33826
CVE ID: CVE-2007-1299 State: PUBLISHED Published: 2007-03-07T00:00:00 Last Updated: 2024-08-07T12:50:34.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Mani Stats Reader 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ipath parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32782 - https://www.exploit-db.com/exploits/3398 - http://secunia.com/advisories/24394 - http://osvdb.org/33870 - http://www.securityfocus.com/bid/22794
CVE ID: CVE-2007-1300 State: PUBLISHED Published: 2007-03-07T00:00:00 Last Updated: 2024-08-07T12:50:35.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: DOURAN Software Technologies ISPUtil 3.32.84.1, and possibly earlier versions, stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain user and reseller data via a direct request for scripts/activesessions.ini. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33845 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
otes: - CVE Program Container: References: - http://osvdb.org/33845 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32800 - http://secunia.com/advisories/24304
CVE ID: CVE-2007-1301 State: PUBLISHED Published: 2007-03-07T00:00:00 Last Updated: 2024-08-07T12:50:35.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the IMAP service in MailEnable Enterprise and Professional Editions 2.37 and earlier allows remote authenticated users to execute arbitrary code via a long argument to the APPEND command. NOTE: this is probably different than CVE-2006-6423. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0811 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32801 - http://secunia.com/advisories/24361 - http://www.mailenable.com/hotfix/ - http://w
.ibmcloud.com/vulnerabilities/32801 - http://secunia.com/advisories/24361 - http://www.mailenable.com/hotfix/ - http://www.securityfocus.com/bid/22792 - http://www.securitytracker.com/id?1017739 - https://www.exploit-db.com/exploits/3397
CVE ID: CVE-2007-1302 State: PUBLISHED Published: 2007-03-07T00:00:00 Last Updated: 2024-08-07T12:50:35.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in guestbook.php in LI-Guestbook 1.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the country parameter. NOTE: it was later reported that 1.2 is also affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/461912/100/0/threaded - http://www.securityfocus.com/bid/22821 - http://www.security-news.ws/li-sql-injection - http://www.securityfocus.com/archive/1/483524/100/0/threaded - https://exch
tp://www.security-news.ws/li-sql-injection - http://www.securityfocus.com/archive/1/483524/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/38369 - http://securityreason.com/securityalert/2348 - http://secunia.com/advisories/27650 - http://belsec.com/advisories/139/summary.html
CVE ID: CVE-2007-1303 State: PUBLISHED Published: 2007-03-07T00:00:00 Last Updated: 2024-08-07T12:50:35.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in rb.cgi in RRDBrowse 1.6 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32793 - http://www.securityfocus.com/archive/1/461911/100/0/threaded - http://www.securityfocus.com/bid/22817 - http://www.devtarget.org/rrdbrowse-advisory-03-2007.txt - http://www.rrdbrowse.org/index.php - http://www.vupen.com/english/advisories/2007
t.org/rrdbrowse-advisory-03-2007.txt - http://www.rrdbrowse.org/index.php - http://www.vupen.com/english/advisories/2007/0834 - http://securityreason.com/securityalert/2349
CVE ID: CVE-2007-1304 State: PUBLISHED Published: 2007-03-07T00:00:00 Last Updated: 2024-08-07T12:50:35.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in add2.php in Sava's Guestbook 23.11.2006, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) name, (2) country, (3) email, (4) website, and (5) message parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22820 - http://www.securityfocus.com/archive/1/461910/100/0/threaded - http://secunia.com/advisories/24411 - http://securityreason.com/securityalert/2350 - https://exchange.xfo
0/0/threaded - http://secunia.com/advisories/24411 - http://securityreason.com/securityalert/2350 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32811 - http://belsec.com/advisories/142/summary.html
CVE ID: CVE-2007-1305 State: PUBLISHED Published: 2007-03-07T00:00:00 Last Updated: 2024-08-07T12:50:35.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in add2.php in Sava's Guestbook 23.11.2006 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) country, (3) email, and (4) website parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22820 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32812 - http://www.securityfocus.com/archive/1/461910/100/0/threaded - http://secunia.com/advisories/24411 - http://securityreason.com/securityale
yfocus.com/archive/1/461910/100/0/threaded - http://secunia.com/advisories/24411 - http://securityreason.com/securityalert/2350 - http://belsec.com/advisories/142/summary.html
CVE ID: CVE-2007-1306 State: PUBLISHED Published: 2007-03-07T00:00:00 Last Updated: 2024-08-07T12:50:35.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service (crash) by sending a Session Initiation Protocol (SIP) packet without a URI and SIP-version header, which results in a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0830 - http://www.securityfocus.com/bid/22838 - http://www.osvdb.org/33888 - http://secunia.com/advisories/24578 - http://asterisk.org/node/48319 - http://www.novell.com/linux/
ww.osvdb.org/33888 - http://secunia.com/advisories/24578 - http://asterisk.org/node/48319 - http://www.novell.com/linux/security/advisories/2007_34_asterisk.html - http://labs.musecurity.com/advisories/MU-200703-01.txt - http://asterisk.org/node/48320 - http://secunia.com/advisories/24380 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32830 - http://security.gentoo.org/glsa/glsa-200703-14.xml - http://secunia.com/advisories/25582 - http://www.securitytracker.com/id?1017723 - http://www.kb.cert.org/vuls/id/228032 - http://www.debian.org/security/2007/dsa-1358
CVE ID: CVE-2007-1307 State: PUBLISHED Published: 2007-03-07T00:00:00 Last Updated: 2024-08-07T12:50:35.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Lenovo Intel PRO/1000 LAN adapter before Build 135400, as used on IBM Lenovo ThinkPad systems, has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22822 - http://secunia.com/advisories/24349 - http://osvdb.org/33854 - http://www-307.ibm.com/pc/support/site.wss/document.do?sitestyle=lenovo&lndocid=MIGR-62922 - http://www.vupen.com/english/advisories/2007/0801
CVE ID: CVE-2007-1308 State: PUBLISHED Published: 2007-03-07T00:00:00 Last Updated: 2024-08-07T12:50:35.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: ecma/kjs_html.cpp in KDE JavaScript (KJS), as used in Konqueror in KDE 3.5.5, allows remote attackers to cause a denial of service (crash) by accessing the content of an iframe with an ftp:// URI in the src attribute, probably due to a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22814 - http://www.redhat.com/support/errata/RHSA-2007-0909.html - http://www.securityfocus.com/archive/1/461897/100/0/threaded - http://lists.grok.org.uk/pipermail/full-di
07-0909.html - http://www.securityfocus.com/archive/1/461897/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/052793.html - http://www.vupen.com/english/advisories/2007/0886 - http://bindshell.net/advisories/konq355/konq355-patch.diff - http://www.ubuntu.com/usn/usn-447-1 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:054 - http://secunia.com/advisories/27108 - http://bindshell.net/advisories/konq355 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10551 - http://securityreason.com/securityalert/2345 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32798