Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-3138 State: PUBLISHED Published: 2007-06-08T16:00:00 Last Updated: 2024-08-07T14:05:29.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Open Solution Quick.Cart 2.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in an sLanguage cookie, which is used to define a value in config/general.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25513 - http://www.vupen.com/english/advisories/2007/2038 - http://www.securityfocus.com/bid/24299 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34687 - https://www.explo
http://www.securityfocus.com/bid/24299 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34687 - https://www.exploit-db.com/exploits/4025 - http://osvdb.org/36960
CVE ID: CVE-2007-3139 State: PUBLISHED Published: 2007-06-08T16:00:00 Last Updated: 2024-08-07T14:05:29.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: config/general.php in Quick.Cart 2.2 and earlier uses a default username and password, which allows remote attackers to access the application via a login action to admin.php. NOTE: this can be leveraged to upload and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25513 - http://osvdb.org/36961 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34688 - https://www.exploit-db.com/exploits/4025
CVE ID: CVE-2007-3140 State: PUBLISHED Published: 2007-06-08T16:00:00 Last Updated: 2024-08-07T14:05:28.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in xmlrpc.php in WordPress 2.2 allows remote authenticated users to execute arbitrary SQL commands via a parameter value in an XML RPC wp.suggestCategories methodCall, a different vector than CVE-2007-1897. Additional Analyst Notes: - CVE Program Container: References: - http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.021.html - https://www.exploit-db.com/exploits/4039 - http://secunia.com/advisories/25552 - http://www.vupen.com/english/advisories/2007/2099 - http://osvdb.org/36321 - http
http://secunia.com/advisories/25552 - http://www.vupen.com/english/advisories/2007/2099 - http://osvdb.org/36321 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34746 - http://www.securityfocus.com/bid/24344
CVE ID: CVE-2007-3141 State: PUBLISHED Published: 2007-06-11T18:00:00 Last Updated: 2024-08-07T14:05:29.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 allows remote attackers to execute arbitrary PHP code via a URL in the editor_insert_top parameter. NOTE: the editor_insert_bottom vector is already covered by CVE-2006-6042. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/470794/100/0/threaded - http://securityreason.com/securityalert/2786
CVE ID: CVE-2007-3142 State: PUBLISHED Published: 2007-06-11T18:00:00 Last Updated: 2024-08-07T14:05:29.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: Visual truncation vulnerability in Opera 9.21 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after 34 characters, as demonstrated by a phishing attack using HTTP Basic Authentication. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/43463 - http://www.securityfocus.com/bid/24352 - http://security.gentoo.org/glsa/glsa-200708-17.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/34983 - http://secunia.com/advi
entoo.org/glsa/glsa-200708-17.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/34983 - http://secunia.com/advisories/26545 - http://www.novell.com/linux/security/advisories/2007_15_sr.html - http://testing.bitsploit.de/test.html - http://www.0x000000.com/?i=334
CVE ID: CVE-2007-3143 State: PUBLISHED Published: 2007-06-11T18:00:00 Last Updated: 2024-08-07T14:05:28.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Visual truncation vulnerability in Konqueror 3.5.5 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24352 - http://osvdb.org/43465 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34983 - http://testing.bitsploit.de/test.html - http://www.0x0
65 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34983 - http://testing.bitsploit.de/test.html - http://www.0x000000.com/?i=334
CVE ID: CVE-2007-3144 State: PUBLISHED Published: 2007-06-11T18:00:00 Last Updated: 2024-08-07T14:05:28.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Visual truncation vulnerability in Mozilla 1.7.12 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24352 - http://osvdb.org/43466 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34983 - http://testing.bitsploit.de/test.html - http://www.0x00
6 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34983 - http://testing.bitsploit.de/test.html - http://www.0x000000.com/?i=334
CVE ID: CVE-2007-3145 State: PUBLISHED Published: 2007-06-11T18:00:00 Last Updated: 2024-08-07T14:05:28.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Visual truncation vulnerability in Galeon 2.0.1 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24352 - http://osvdb.org/43467 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34983 - http://testing.bitsploit.de/test.html - http://www.0x0000
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34983 - http://testing.bitsploit.de/test.html - http://www.0x000000.com/?i=334
CVE ID: CVE-2007-3146 State: PUBLISHED Published: 2007-06-11T18:00:00 Last Updated: 2024-08-07T14:05:29.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zen Help Desk 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for ZenHelpDesk.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39231 - http://www.securityfocus.com/archive/1/470803/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34770 - http://securityreason.com/securityalert/2788
CVE ID: CVE-2007-3147 State: PUBLISHED Published: 2007-06-11T18:00:00 Last Updated: 2024-08-07T14:05:28.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the send method. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063817.html - https://www.exploit-db.com/exploits/4042 - http://www.securityfocus.com/bid/24354 - http://research.eeye.
/063817.html - https://www.exploit-db.com/exploits/4042 - http://www.securityfocus.com/bid/24354 - http://research.eeye.com/html/advisories/upcoming/20070605.html - http://www.kb.cert.org/vuls/id/949817 - http://messenger.yahoo.com/security_update.php?id=060707 - http://www.vupen.com/english/advisories/2007/2094 - http://secunia.com/advisories/25547 - http://www.securityfocus.com/archive/1/470861/100/0/threaded - http://securitytracker.com/id?1018204 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34758 - http://www.securityfocus.com/bid/24341 - http://www.securitytracker.com/id?1018203 - http://securityreason.com/securityalert/2809 - http://research.eeye.com/html/advisories/published
acker.com/id?1018203 - http://securityreason.com/securityalert/2809 - http://research.eeye.com/html/advisories/published/AD20070608.html
CVE ID: CVE-2007-3148 State: PUBLISHED Published: 2007-06-11T18:00:00 Last Updated: 2024-08-07T14:05:29.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the receive method. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4043 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34759 - http://osvdb.org/37081 - http://research.eeye.com/html/advisories/upcoming/20070605.html - http://www.securityfocus.com/bid/24355 - http://messe
http://research.eeye.com/html/advisories/upcoming/20070605.html - http://www.securityfocus.com/bid/24355 - http://messenger.yahoo.com/security_update.php?id=060707 - http://www.vupen.com/english/advisories/2007/2094 - http://secunia.com/advisories/25547 - http://www.securityfocus.com/archive/1/470861/100/0/threaded - http://securitytracker.com/id?1018204 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063819.html - http://www.securityfocus.com/bid/24341 - http://www.securitytracker.com/id?1018203 - http://research.eeye.com/html/advisories/published/AD20070608.html - http://www.kb.cert.org/vuls/id/932217
CVE ID: CVE-2007-3149 State: PUBLISHED Published: 2007-06-11T18:00:00 Last Updated: 2024-08-07T14:05:29.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: sudo, when linked with MIT Kerberos 5 (krb5), does not properly check whether a user can currently authenticate to Kerberos, which allows local users to gain privileges, in a manner unintended by the sudo security model, via certain KRB5_ environment variable settings. NOTE: another researcher disputes this vulnerability, stating that the attacker must be "a user, who can already log into your system, and can already use sudo." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24
already use sudo." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24368 - http://www.sudo.ws/cgi-bin/cvsweb/sudo/auth/kerb5.c - http://www.securityfocus.com/archive/1/470752/100/0/threaded - http://www.securityfocus.com/archive/1/470739/100/0/threaded - http://secunia.com/advisories/26540 - http://www.securityfocus.com/archive/1/470774/100/0/threaded
CVE ID: CVE-2007-3150 State: PUBLISHED Published: 2007-06-11T19:00:00 Last Updated: 2024-08-07T14:05:29.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Desktop allows user-assisted remote attackers to execute arbitrary programs via a man-in-the-middle attack that injects JavaScript, a www.google.com search IFRAME, and a META HTTP-EQUIV="refresh" that targets a www.google.com search for a local .exe file, which is displayed in the "results stored on your computer" portion of the search results, and when clicked invokes Google Desktop to execute this file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40566 - http://ha.ckers.org/blog/2
le. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40566 - http://ha.ckers.org/blog/20070531/google-desktop-0day/ - http://ha.ckers.org/google-desktop-0day/
CVE ID: CVE-2007-3151 State: PUBLISHED Published: 2007-06-11T22:00:00 Last Updated: 2024-08-07T14:05:29.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: rpttop.htm in the web management interface in Packeteer PacketShaper 7.3.0g2 and 7.5.0g1 allows remote attackers to cause a denial of service (device reboot) via a request with empty values of the OP.MEAS.DATAQUERY and MEAS.TYPE parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2801 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34780 - http://www.securityfocus.com/archive/1/470835/100/0/threaded - http://www.securityfocus.com/bid/24388 - http://secunia
- http://www.securityfocus.com/archive/1/470835/100/0/threaded - http://www.securityfocus.com/bid/24388 - http://secunia.com/advisories/25577 - http://osvdb.org/37230
CVE ID: CVE-2007-3152 State: PUBLISHED Published: 2007-06-11T22:00:00 Last Updated: 2024-08-07T14:05:29.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: c-ares before 1.4.0 uses a predictable seed for the random number generator for the DNS Transaction ID field, which might allow remote attackers to spoof DNS responses by guessing the field value. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34979 - http://osvdb.org/37171 - http://secunia.com/advisories/25579 - http://cool.haxx.se/cvs.cgi/curl/ares/CHANGES?rev=HEAD&content-type=text/vnd.viewcvs-markup - http://www.securityfocus.com/bid/24386
CVE ID: CVE-2007-3153 State: PUBLISHED Published: 2007-06-11T22:00:00 Last Updated: 2024-08-07T14:05:29.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ares_init:randomize_key function in c-ares, on platforms other than Windows, uses a weak facility for producing a random number sequence (Unix rand), which makes it easier for remote attackers to spoof DNS responses by guessing certain values. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37172 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34980 - http://cool.haxx.se/cvs.cgi/curl/ares/CHANGES?rev=HEAD&content-type=text/vnd.viewcvs-markup - http://www.securityfocus.com/bid/24386
CVE ID: CVE-2007-3154 State: PUBLISHED Published: 2007-06-11T22:00:00 Last Updated: 2024-08-07T14:05:28.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Walter Zorn wz_tooltip.js (aka wz_tooltips) before 4.01, as used by eGroupWare before 1.2.107-2 and other packages, has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34913 - http://osvdb.org/37187 - http://secunia.com/advisories/25454 - http://www.securityfocus.com/bid/24378 - http://sourceforge.net/project/shownotes.php?release_id=513749&group_id=78745 - http://www.walterzorn.com/toolt
/24378 - http://sourceforge.net/project/shownotes.php?release_id=513749&group_id=78745 - http://www.walterzorn.com/tooltip/history.htm - http://sourceforge.net/project/shownotes.php?release_id=513311&group_id=78745
CVE ID: CVE-2007-3155 State: PUBLISHED Published: 2007-06-11T22:00:00 Last Updated: 2024-08-07T14:05:29.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in eGroupWare before 1.2.107-2 has unknown impact and attack vectors related to ADOdb. NOTE: due to lack of details from the vendor, it is uncertain whether this issue is already covered by another CVE identifier. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37188 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34914 - http://secunia.com/advisories/25454 - http://www.securityfocus.com/bid/24378 - http://sourceforge.net/project/shownotes.php?release_id=513749
visories/25454 - http://www.securityfocus.com/bid/24378 - http://sourceforge.net/project/shownotes.php?release_id=513749&group_id=78745 - http://sourceforge.net/project/shownotes.php?release_id=513311&group_id=78745
CVE ID: CVE-2007-3156 State: PUBLISHED Published: 2007-06-11T22:00:00 Last Updated: 2024-08-07T14:05:29.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in pam_login.cgi in Webmin before 1.350 and Usermin before 1.280 allow remote attackers to inject arbitrary web script or HTML via the (1) cid, (2) message, or (3) question parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.webmin.com/security.html - http://secunia.com/advisories/25785 - http://www.vupen.com/english/advisories/2007/2117 - http://www.securityfocus.com/bid
tp://secunia.com/advisories/25785 - http://www.vupen.com/english/advisories/2007/2117 - http://www.securityfocus.com/bid/24381 - http://www.webmin.com/changes-1.350.html - http://security.gentoo.org/glsa/glsa-200707-05.xml - http://secunia.com/advisories/25580 - http://osvdb.org/36932 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:135 - http://secunia.com/advisories/25956
CVE ID: CVE-2007-3157 State: PUBLISHED Published: 2007-06-11T22:00:00 Last Updated: 2024-08-07T14:05:29.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: IPSecDrv.sys 10.4.0.12 in SafeNET High Assurance Remote 1.4.0 Build 12, and SoftRemote, allows remote attackers to cause a denial of service (infinite loop and system hang) via an invalid packet with certain bytes in an option header, possibly related to the IPv6 support for IPSec. Additional Analyst Notes: - CVE Program Container: References: - http://www.digit-labs.org/files/exploits/safenet-dos.c - http://osvdb.org/37137 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063859.html - http://secunia.com/advisori
osvdb.org/37137 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063859.html - http://secunia.com/advisories/25574 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34775 - http://securityreason.com/securityalert/2803 - http://www.securityfocus.com/bid/24385
CVE ID: CVE-2007-3158 State: PUBLISHED Published: 2007-06-11T22:00:00 Last Updated: 2024-08-07T14:05:29.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: download_script.asp in ASP Folder Gallery allows remote attackers to read arbitrary files via a filename in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24345 - http://www.securityfocus.com/archive/1/470667/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34906 - http://securityreason.com/securityalert/2793 - http://osvdb.org/38372
CVE ID: CVE-2007-3159 State: PUBLISHED Published: 2007-06-11T22:00:00 Last Updated: 2024-08-07T14:05:28.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: http.c in MiniWeb Http Server 0.8.x allows remote attackers to cause a denial of service (application crash) via a negative value in the Content-Length HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4046 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34774 - http://secunia.com/advisories/25528 - http://osvdb.org/37185 - http://www.securityfocus.com/bid/24375
CVE ID: CVE-2007-3160 State: PUBLISHED Published: 2007-06-11T22:00:00 Last Updated: 2024-08-07T14:05:29.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/header.php in PHP Real Estate Classifieds Premium Plus allows remote attackers to execute arbitrary PHP code via a URL in the loc parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24399 - http://www.vupen.com/english/advisories/2007/2168 - https://www.exploit-db.com/exploits/4055 - http://secunia.com/advisories/25615 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34790 - http://osvdb.org/36890
CVE ID: CVE-2007-3161 State: PUBLISHED Published: 2007-06-11T22:00:00 Last Updated: 2024-08-07T14:05:29.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Ace-FTP Client 1.24a allows user-assisted, remote FTP servers to execute arbitrary code via a long response. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4058 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34795 - http://www.securityfocus.com/bid/24403
CVE ID: CVE-2007-3162 State: PUBLISHED Published: 2007-06-11T22:00:00 Last Updated: 2024-08-07T14:05:29.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the NotSafe function in the idaiehlp ActiveX control in idaiehlp.dll 1.9.1.74 in Internet Download Accelerator (ida) 5.2 allows remote attackers to cause a denial of service (Internet Explorer crash) via a long argument. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34796 - https://www.exploit-db.com/exploits/4056 - http://seclists.org/bugtraq/2010/Sep/76 - http://osvdb.org/40120 - http://www.exploit-db.com/exploits/14938 - http://www.se
p://seclists.org/bugtraq/2010/Sep/76 - http://osvdb.org/40120 - http://www.exploit-db.com/exploits/14938 - http://www.securityfocus.com/bid/24400
CVE ID: CVE-2007-3163 State: PUBLISHED Published: 2007-06-11T22:00:00 Last Updated: 2024-08-07T14:05:29.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in the filemanager in Frederico Caldeira Knabben FCKeditor 2.4.2 allows remote attackers to upload arbitrary .php files via an alternate data stream syntax, as demonstrated by .php::$DATA filenames, a related issue to CVE-2006-0658. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34982 - http://ha.ckers.org/blog/20070606/additional-image-bypass-on-windows/ - http://secunia.com/advisories/25719 - http://secunia.com/advisorie
g/blog/20070606/additional-image-bypass-on-windows/ - http://secunia.com/advisories/25719 - http://secunia.com/advisories/25923 - http://osvdb.org/37554 - http://www.bitchiller.de/?p=20 - http://sourceforge.net/project/shownotes.php?release_id=520159 - http://www.securityfocus.com/bid/24510
CVE ID: CVE-2007-3164 State: PUBLISHED Published: 2007-06-11T22:00:00 Last Updated: 2024-08-07T14:05:29.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7, when prompting for HTTP Basic Authentication for an IDN web site, uses ACE labels for the domain name in the status bar, but uses internationalized labels for this name in the authentication dialog, which might allow remote attackers to perform phishing attacks if the user misinterprets confusable characters in the internationalized labels, as demonstrated by displaying xn--theshmogroup-bgk.com only in the status bar. Additional Analyst Notes: - CVE Program Container: References: - http://secunia
hmogroup-bgk.com only in the status bar. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25663 - http://osvdb.org/36142 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34867 - http://www.securityfocus.com/bid/24483 - http://ha.ckers.org/blog/20070608/cross-domain-basic-auth-phishing-tactics/ - http://www.bitsploit.de/archives/428-Cross-Domain-Basic-Auth-Phishing-Tactics.html
CVE ID: CVE-2007-3165 State: PUBLISHED Published: 2007-06-11T22:00:00 Last Updated: 2024-08-07T14:05:29.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the exit node, which might compromise the anonymity of traffic sources and destinations by exposing traffic to inappropriate remote observers. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25415 - http://www.vupen.com/english/advisories/2007/1964 - http://osvdb.org/35670 - http://www.securityfocus.com/bid/24180 - http://archives.seul.org/or/announce/May-2007/msg00000.html