Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
http://www.securityfocus.com/archive/1/466331/100/200/threaded - http://www.securitytracker.com/id?1017897 - http://www.securityfocus.com/bid/23338 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1524 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-021 - http://www.kb.cert.org/vuls/id/219848 - http://www.vupen.com/english/advisories/2007/1325 - http://www.osvdb.org/34008 - http://securityreason.com/securityalert/2531 - http://secunia.com/advisories/24823 - http://research.eeye.com/html/advisories/published/AD20070410b.html - http://www.us-cert.gov/cas/techalerts/TA07-100A.html - http://www.securityfocus.com/archive/1/4
ished/AD20070410b.html - http://www.us-cert.gov/cas/techalerts/TA07-100A.html - http://www.securityfocus.com/archive/1/465233/100/0/threaded - http://www.securityfocus.com/archive/1/466331/100/200/threaded
CVE ID: CVE-2007-1210 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-1211 State: PUBLISHED Published: 2007-04-04T16:00:00 Last Updated: 2024-08-07T12:50:34.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified kernel GDI functions in Microsoft Windows 2000 SP4; XP SP2; and Server 2003 Gold, SP1, and SP2 allows user-assisted remote attackers to cause a denial of service (possibly persistent restart) via a crafted Windows Metafile (WMF) image that causes an invalid dereference of an offset in a kernel structure, a related issue to CVE-2005-4560. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1215 - https://oval.cisecurity.org/repository/search/definition/oval%3
s: - http://www.vupen.com/english/advisories/2007/1215 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1571 - http://www.securitytracker.com/id?1017843 - http://www.securityfocus.com/bid/23275 - http://www.securityfocus.com/archive/1/466186/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33258 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=499 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-017 - http://www.securityfocus.com/archive/1/466186/100/200/threaded
CVE ID: CVE-2007-1212 State: PUBLISHED Published: 2007-04-04T16:00:00 Last Updated: 2024-08-07T12:50:34.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4; XP SP2; Server 2003 Gold, SP1, and SP2; and Vista allows local users to gain privileges via a crafted Enhanced Metafile (EMF) image format file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1215 - http://www.securitytracker.com/id?1017844 - http://www.securityfocus.com/archive/1/466186/100/200/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.o
ocus.com/archive/1/466186/100/200/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1923 - http://www.securityfocus.com/bid/23278 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-017 - http://www.securityfocus.com/archive/1/466186/100/200/threaded
CVE ID: CVE-2007-1213 State: PUBLISHED Published: 2007-04-04T16:00:00 Last Updated: 2024-08-07T12:50:34.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TrueType Fonts rasterizer in Microsoft Windows 2000 SP4 allows local users to gain privileges via crafted TrueType fonts, which result in an uninitialized function pointer. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1215 - http://www.securityfocus.com/bid/23276 - http://www.securityfocus.com/archive/1/466186/100/200/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-017 - http://www.securitytracker.com/id?1017845 - http
.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-017 - http://www.securitytracker.com/id?1017845 - http://www.securityfocus.com/archive/1/466186/100/200/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1797
CVE ID: CVE-2007-1214 State: PUBLISHED Published: 2007-05-08T22:00:00 Last Updated: 2024-08-07T12:50:34.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a crafted AutoFilter filter record in an Excel BIFF8 format XLS file, which triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/468871/100/200/threaded - http://www.securityfocus.com/archive/1/468871/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33915 - http://www.us-cert.gov/cas/t
ve/1/468871/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33915 - http://www.us-cert.gov/cas/techalerts/TA07-128A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-023 - http://www.kb.cert.org/vuls/id/253825 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=527 - http://www.vupen.com/english/advisories/2007/1708 - http://www.securitytracker.com/id?1018012 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2064 - http://www.osvdb.org/34395 - http://www.securityfocus.com/bid/23780 - http://secunia.com/advisories/25150
CVE ID: CVE-2007-1215 State: PUBLISHED Published: 2007-04-04T16:00:00 Last Updated: 2024-08-07T12:50:34.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4; XP SP2; Server 2003 Gold, SP1, and SP2; and Vista allows local users to gain privileges via certain "color-related parameters" in crafted images. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1215 - http://www.securitytracker.com/id?1017847 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1927 - http://www.securityfocus.com/archive/1/466186
rity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1927 - http://www.securityfocus.com/archive/1/466186/100/200/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-017 - http://www.securityfocus.com/bid/23273 - http://www.securityfocus.com/archive/1/466186/100/200/threaded
CVE ID: CVE-2007-1216 State: PUBLISHED Published: 2007-04-06T01:00:00 Last Updated: 2024-08-07T12:50:34.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the GSS-API library (lib/gssapi/krb5/k5unseal.c), as used by the Kerberos administration daemon (kadmind) in MIT krb5 before 1.6.1, when used with the authentication method provided by the RPCSEC_GSS RPC library, allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via a message with an "an invalid direction encoding". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23282 - http://www.vupen.com/english/adv
Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23282 - http://www.vupen.com/english/advisories/2007/1218 - ftp://patches.sgi.com/support/free/security/advisories/20070401-01-P.asc - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056923 - http://secunia.com/advisories/24966 - http://secunia.com/advisories/24706 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11135 - http://secunia.com/advisories/24740 - http://www.securitytracker.com/id?1017852 - http://www.redhat.com/support/errata/RHSA-2007-0095.html - http://secunia.com/advisories/25388 - http://secunia.com/advisories/24786 -
at.com/support/errata/RHSA-2007-0095.html - http://secunia.com/advisories/25388 - http://secunia.com/advisories/24786 - http://docs.info.apple.com/article.html?artnum=305391 - http://www.us-cert.gov/cas/techalerts/TA07-093B.html - http://www.securityfocus.com/archive/1/464814/30/7170/threaded - http://www.debian.org/security/2007/dsa-1276 - http://secunia.com/advisories/24735 - http://www.us-cert.gov/cas/techalerts/TA07-109A.html - http://secunia.com/advisories/24750 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056923 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33413 - http://secunia.com/advisories/24817 - http://secunia.com/advisories/
xchange.xforce.ibmcloud.com/vulnerabilities/33413 - http://secunia.com/advisories/24817 - http://secunia.com/advisories/24757 - http://www.securityfocus.com/archive/1/464591/100/0/threaded - http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2007-003.txt - http://www.vupen.com/english/advisories/2007/1916 - http://www.kb.cert.org/vuls/id/419344 - http://lists.suse.com/archive/suse-security-announce/2007-Apr/0001.html - http://secunia.com/advisories/24785 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:077 - http://www.ubuntu.com/usn/usn-449-1 - http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html - http://www.vupen.com/english/advisories/2007/1470 - http:
.apple.com/archives/Security-announce/2007/Apr/msg00001.html - http://www.vupen.com/english/advisories/2007/1470 - http://secunia.com/advisories/24736 - http://www.securityfocus.com/archive/1/464666/100/0/threaded - http://security.gentoo.org/glsa/glsa-200704-02.xml
CVE ID: CVE-2007-1217 State: PUBLISHED Published: 2007-03-02T19:00:00 Last Updated: 2024-08-07T12:50:35.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the bufprint function in capiutil.c in libcapi, as used in Linux kernel 2.6.9 to 2.6.20 and isdn4k-utils, allows local users to cause a denial of service (crash) and possibly gain privileges via a crafted CAPI packet. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34742 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10503 - http://bugzilla.kernel.org/show_bug.cgi?id=8028 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:
3A10503 - http://bugzilla.kernel.org/show_bug.cgi?id=8028 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:078 - http://www.redhat.com/support/errata/RHSA-2007-0673.html - http://security.gentoo.org/glsa/glsa-200704-23.xml - http://secunia.com/advisories/24777 - http://secunia.com/advisories/27528 - http://secunia.com/advisories/26379 - http://secunia.com/advisories/26760 - http://www.redhat.com/support/errata/RHSA-2007-0705.html - http://www.securityfocus.com/bid/23333 - http://www.redhat.com/support/errata/RHSA-2007-0672.html - http://secunia.com/advisories/26709 - http://secunia.com/advisories/26478 - http://www.redhat.com/support/errata/RHSA-2007-0774.html - http://bugs.debi
6709 - http://secunia.com/advisories/26478 - http://www.redhat.com/support/errata/RHSA-2007-0774.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=408530 - http://www.redhat.com/support/errata/RHSA-2007-0671.html - http://www.securitytracker.com/id?1018539 - http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm
CVE ID: CVE-2007-1218 State: PUBLISHED Published: 2007-03-02T20:00:00 Last Updated: 2024-08-07T12:50:35.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one buffer overflow in the parse_elements function in the 802.11 printer code (print-802_11.c) for tcpdump 3.9.5 and earlier allows remote attackers to cause a denial of service (crash) via a crafted 802.11 frame. NOTE: this was originally referred to as heap-based, but it might be stack-based. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2007-0387.html - http://www.vupen.com/english/advisories/2007/4238 - http://www.securityfocus.com/bid/22772 - http://www.u
07-0387.html - http://www.vupen.com/english/advisories/2007/4238 - http://www.securityfocus.com/bid/22772 - http://www.us-cert.gov/cas/techalerts/TA07-352A.html - http://www.osvdb.org/32427 - http://www.debian.org/security/2007/dsa-1272 - http://secunia.com/advisories/27580 - http://fedoranews.org/cms/node/2798 - http://www.ubuntu.com/usn/usn-429-1 - http://secunia.com/advisories/28136 - http://www.vupen.com/english/advisories/2007/0793 - http://secunia.com/advisories/24354 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32749 - http://cvs.tcpdump.org/cgi-bin/cvsweb/tcpdump/print-802_11.c?r1=1.31.2.11&r2=1.31.2.12 - https://issues.rpath.com/browse/RPL-1100 - https://bugs.gentoo.org/sh
tcpdump/print-802_11.c?r1=1.31.2.11&r2=1.31.2.12 - https://issues.rpath.com/browse/RPL-1100 - https://bugs.gentoo.org/show_bug.cgi?id=168916 - http://www.redhat.com/support/errata/RHSA-2007-0368.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9520 - http://secunia.com/advisories/24423 - http://seclists.org/fulldisclosure/2007/Mar/0003.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:056 - http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html - http://secunia.com/advisories/24451 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:155 - http://secunia.com/advisories/24610 - http://secunia.com/advisori
mandriva.com/security/advisories?name=MDKSA-2007:155 - http://secunia.com/advisories/24610 - http://secunia.com/advisories/24583 - http://www.securitytracker.com/id?1017717 - http://docs.info.apple.com/article.html?artnum=307179 - http://fedoranews.org/cms/node/2799 - http://www.turbolinux.com/security/2007/TLSA-2007-46.txt - http://cvs.tcpdump.org/cgi-bin/cvsweb/tcpdump/print-802_11.c - http://secunia.com/advisories/24318
CVE ID: CVE-2007-1219 State: PUBLISHED Published: 2007-03-02T22:00:00 Last Updated: 2024-08-07T12:50:34.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in actions/del.php in Admin Phorum 3.3.1a allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34635 - http://www.vupen.com/english/advisories/2007/0778 - http://www.securityfocus.com/bid/22739 - https://www.exploit-db.com/exploits/3382 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32719
CVE ID: CVE-2007-1220 State: PUBLISHED Published: 2007-03-02T22:00:00 Last Updated: 2024-08-07T12:50:34.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Hypervisor in Microsoft Xbox 360 kernel 4532 and 4548 does not properly verify the parameters passed to the syscall dispatcher, which allows attackers with physical access to bypass code-signing requirements and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2367 - http://www.securityfocus.com/archive/1/461489/100/0/threaded - http://www.securityfocus.com/bid/22745
CVE ID: CVE-2007-1221 State: PUBLISHED Published: 2007-03-02T22:00:00 Last Updated: 2024-08-07T12:50:35.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Hypervisor in Microsoft Xbox 360 kernel 4532 and 4548 allows attackers with physical access to force execution of the hypervisor syscall with a certain register set, which bypasses intended code protection. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2367 - http://www.securityfocus.com/archive/1/463974/100/200/threaded - http://www.securityfocus.com/archive/1/461489/100/0/threaded - http://www.securityfocus.com/bid/22745
CVE ID: CVE-2007-1222 State: PUBLISHED Published: 2007-03-02T22:00:00 Last Updated: 2024-08-07T12:50:34.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: Parallels Desktop for Mac before 20070216 implements Drag and Drop by sharing the entire host filesystem as the .psf share, which allows local users of the guest operating system to write arbitrary files to the host filesystem, and execute arbitrary code via launchd by writing a plist file to a LaunchAgents directory. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33799 - http://secunia.com/advisories/24171 - http://lists.immunitysec.com/pipermail/dailydave/2007-February/004091.html
CVE ID: CVE-2007-1223 State: PUBLISHED Published: 2007-03-02T22:00:00 Last Updated: 2024-08-07T12:50:34.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Hitachi OSAS/FT/W before 20070223 allows attackers to cause a denial of service (responder control processing halt) by sending "data unexpectedly through the port". Additional Analyst Notes: - CVE Program Container: References: - http://www.hitachi-support.com/security_e/vuls_e/HS07-004_e/index-e.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/32696 - http://osvdb.org/36003
CVE ID: CVE-2007-1224 State: PUBLISHED Published: 2007-03-02T22:00:00 Last Updated: 2024-08-07T12:50:34.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grok Developments NetProxy 4.03 allows remote attackers to bypass URL filtering via a request that omits "http://" from the URL and specifies the destination port (:80). Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3381 - http://osvdb.org/36001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32697 - http://www.vupen.com/english/advisories/2007/0779 - http://www.securityfocus.com/bid/22741
CVE ID: CVE-2007-1225 State: PUBLISHED Published: 2007-03-02T22:00:00 Last Updated: 2024-08-07T12:50:35.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: The connection log file implementation in Grok Developments NetProxy 4.03 does not record requests that omit http:// in a URL, which might allow remote attackers to conduct unauthorized activities and avoid detection. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3381 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32697 - http://www.vupen.com/english/advisories/2007/0779 - http://osvdb.org/36002 - http://www.securityfocus.com/bid/22741
CVE ID: CVE-2007-1226 State: PUBLISHED Published: 2007-03-02T22:00:00 Last Updated: 2024-08-07T12:50:34.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee VirusScan for Mac (Virex) before 7.7 patch 1 has weak permissions (0666) for /Library/Application Support/Virex/VShieldExclude.txt, which allows local users to reconfigure Virex to skip scanning of arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22744 - http://www.securityfocus.com/archive/1/461485/100/0/threaded - http://www.securitytracker.com/id?1017707 - https://knowledge.mcafee.com/SupportSite/dynamickc.do?externalId=518722&sliceId=SAL_Public&comman
acker.com/id?1017707 - https://knowledge.mcafee.com/SupportSite/dynamickc.do?externalId=518722&sliceId=SAL_Public&command=show&forward=nonthreadedKC&kcId=518722 - http://www.vupen.com/english/advisories/2007/0777 - http://osvdb.org/33798 - http://secunia.com/advisories/24337 - http://securityreason.com/securityalert/2342
CVE ID: CVE-2007-1227 State: PUBLISHED Published: 2007-03-02T22:00:00 Last Updated: 2024-08-07T12:50:34.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: VShieldCheck in McAfee VirusScan for Mac (Virex) before 7.7 patch 1 allow local users to change permissions of arbitrary files via a symlink attack on /Library/Application Support/Virex/VShieldExclude.txt, as demonstrated by symlinking to the root crontab file to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22744 - http://www.securityfocus.com/archive/1/461485/100/0/threaded - http://osvdb.org/33797 - http://www.securitytracker.com/id?1017707 - ht
urityfocus.com/archive/1/461485/100/0/threaded - http://osvdb.org/33797 - http://www.securitytracker.com/id?1017707 - https://knowledge.mcafee.com/SupportSite/dynamickc.do?externalId=518722&sliceId=SAL_Public&command=show&forward=nonthreadedKC&kcId=518722 - http://www.vupen.com/english/advisories/2007/0777 - http://secunia.com/advisories/24337 - http://securityreason.com/securityalert/2342 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32729
CVE ID: CVE-2007-1228 State: PUBLISHED Published: 2007-03-02T22:00:00 Last Updated: 2024-08-07T12:50:34.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 UDB 8.2 before Fixpak 7 (aka fixpack 14), and DB2 9 before Fix Pack 2, on UNIX allows the "fenced" user to access certain unauthorized directories. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg1IY87492 - http://secunia.com/advisories/24387 - http://www-1.ibm.com/support/docview.wss?uid=swg1IY86711 - http://www.securitytracker.com/id?1017731 - http://www.securityfocus.com/bid/22729
CVE ID: CVE-2007-1229 State: PUBLISHED Published: 2007-03-02T22:00:00 Last Updated: 2024-08-07T12:50:35.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Nullsoft ShoutcastServer 1.9.7 allows remote attackers to inject arbitrary web script or HTML via the top-level URI on the Incoming interface (port 8001/tcp), which is not properly handled in the administrator interface when viewing the log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/461474/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/32726 - http://archives.neohapsis.com/archives/fulldiscl
threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/32726 - http://archives.neohapsis.com/archives/fulldisclosure/2007-02/0604.html - http://osvdb.org/33793 - http://secunia.com/advisories/24323 - http://www.vupen.com/english/advisories/2007/0775 - http://www.securityfocus.com/bid/22742
CVE ID: CVE-2007-1230 State: PUBLISHED Published: 2007-03-02T22:00:00 Last Updated: 2024-08-07T12:50:35.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/functions.php in WordPress before 2.1.2-alpha allow remote attackers to inject arbitrary web script or HTML via (1) the Referer HTTP header or (2) the URI, a different vulnerability than CVE-2007-1049. Additional Analyst Notes: - CVE Program Container: References: - http://trac.wordpress.org/changeset/4952 - http://www.vupen.com/english/advisories/2007/0756 - http://secunia.com/advisories/24566 - http://trac.wordpress.org/changeset/4951 - http://www.gentoo.org/
ries/2007/0756 - http://secunia.com/advisories/24566 - http://trac.wordpress.org/changeset/4951 - http://www.gentoo.org/security/en/glsa/glsa-200703-23.xml - http://osvdb.org/34361
CVE ID: CVE-2007-1231 State: PUBLISHED Published: 2007-03-03T19:00:00 Last Updated: 2024-08-07T12:50:34.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SQLiteManager 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) database name, (2) table name, (3) ViewName, (4) view, (5) trigger, and (6) function fields in main.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32692 - http://www.securityfocus.com/bid/22731 - http://www.securityfocus.com/archive/1/461304/100/0/threaded - http://securityreason.co
ww.securityfocus.com/bid/22731 - http://www.securityfocus.com/archive/1/461304/100/0/threaded - http://securityreason.com/securityalert/2366 - http://osvdb.org/34634