Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-0219 State: PUBLISHED Published: 2007-02-13T23:00:00 Last Updated: 2024-08-07T12:12:17.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from (1) Msb1fren.dll, (2) Htmlmm.ocx, and (3) Blnmgrps.dll as ActiveX controls, which allows remote attackers to execute arbitrary code via unspecified vectors, a different issue than CVE-2006-4697. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32427 - http://www.securitytracker.com/id?1017643 - http://www.osvdb.org/31894 - http://www.kb.cert.org/vuls/id/771788 - https://oval.cisecurity.o
ytracker.com/id?1017643 - http://www.osvdb.org/31894 - http://www.kb.cert.org/vuls/id/771788 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A257 - http://www.osvdb.org/31895 - http://www.us-cert.gov/cas/techalerts/TA07-044A.html - http://www.vupen.com/english/advisories/2007/0584 - http://www.osvdb.org/31893 - http://secunia.com/advisories/24156 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-016 - http://www.securityfocus.com/bid/22504
CVE ID: CVE-2007-0220 State: PUBLISHED Published: 2007-05-08T23:00:00 Last Updated: 2024-08-07T12:12:17.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2000 SP3, and 2003 SP1 and SP2 allows remote attackers to execute arbitrary scripts, spoof content, or obtain sensitive information via certain UTF-encoded, script-based e-mail attachments, involving an "incorrectly handled UTF character set label". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/468871/100/200/threaded - http://www.securitytracker.com/id?1018015 - https://do
http://www.securityfocus.com/archive/1/468871/100/200/threaded - http://www.securitytracker.com/id?1018015 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-026 - http://www.securityfocus.com/archive/1/468871/100/200/threaded - http://www.kb.cert.org/vuls/id/124113 - http://www.securityfocus.com/bid/23806 - http://secunia.com/advisories/25183 - http://www.us-cert.gov/cas/techalerts/TA07-128A.html - http://www.vupen.com/english/advisories/2007/1711 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1371 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33887 - http://www.osvdb.org/34389
CVE ID: CVE-2007-0221 State: PUBLISHED Published: 2007-05-08T23:00:00 Last Updated: 2024-08-07T12:12:17.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the IMAP (IMAP4) support in Microsoft Exchange Server 2000 SP3 allows remote attackers to cause a denial of service (service hang) via crafted literals in an IMAP command, aka the "IMAP Literal Processing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/468871/100/200/threaded - http://www.securitytracker.com/id?1018015 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-026 - https://exchange.xforce.ibmcloud.
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-026 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33890 - http://www.securityfocus.com/archive/1/468871/100/200/threaded - http://www.securityfocus.com/bid/23810 - http://secunia.com/advisories/25183 - http://www.us-cert.gov/cas/techalerts/TA07-128A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2054 - http://www.vupen.com/english/advisories/2007/1711 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=526 - http://www.osvdb.org/34392
CVE ID: CVE-2007-0222 State: PUBLISHED Published: 2007-01-17T01:00:00 Last Updated: 2024-08-07T12:12:17.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the EmChartBean server side component for Oracle Application Server 10g allows remote attackers to read arbitrary files via unknown vectors, probably "\.." sequences in the beanId parameter. NOTE: this is likely a duplicate of another CVE that Oracle addressed in CPU Jan 2007, but due to lack of details by Oracle, it is unclear which BugID this issue is associated with, so the other CVE cannot be determined. Possibilities include EM02 (CVE-2007-0292) or EM05 (CVE-2007-0293). Additional Anal
the other CVE cannot be determined. Possibilities include EM02 (CVE-2007-0292) or EM05 (CVE-2007-0293). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/458657/100/0/threaded - http://www.securityfocus.com/archive/1/457105/100/0/threaded - http://secunia.com/advisories/23794 - http://www.securityfocus.com/bid/22083 - http://www.securityfocus.com/bid/22027 - http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html - http://securitytracker.com/id?1017522
CVE ID: CVE-2007-0223 State: PUBLISHED Published: 2007-01-13T02:00:00 Last Updated: 2024-08-07T12:12:17.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in shared/code/cp_functions_downloads.php in Nicola Asuni All In One Control Panel (AIOCP) before 1.3.009 allows remote attackers to execute arbitrary SQL commands via the download_category parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23726 - http://osvdb.org/31641 - http://www.securityfocus.com/bid/22019 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31591 - http://sourceforge.net/project/shownotes.php?release_id=477845
CVE ID: CVE-2007-0224 State: PUBLISHED Published: 2007-01-13T02:00:00 Last Updated: 2024-08-07T12:12:17.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in shopgiftregsearch.asp in VP-ASP Shopping Cart 6.09 and earlier allows remote attackers to execute arbitrary SQL commands via the LoginLastname parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32732 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31447 - http://secunia.com/advisories/23699 - https://www.exploit-db.com/exploits/3115
CVE ID: CVE-2007-0225 State: PUBLISHED Published: 2007-01-13T02:00:00 Last Updated: 2024-08-07T12:12:17.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in shopcustadmin.asp in VP-ASP Shopping Cart 6.09 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31449 - http://osvdb.org/32733 - http://secunia.com/advisories/23699 - https://www.exploit-db.com/exploits/3115
CVE ID: CVE-2007-0226 State: PUBLISHED Published: 2007-01-13T02:00:00 Last Updated: 2024-08-07T12:12:17.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in wbsearch.aspx in uniForum 4 and earlier allows remote attackers to execute arbitrary SQL commands via the "by User" field (aka the TXbyuser parameter). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21966 - http://osvdb.org/32927 - https://www.exploit-db.com/exploits/3106 - http://secunia.com/advisories/23827 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31362 - http://www.securityfocus.com/archive/1/458060/100/0/threaded
CVE ID: CVE-2007-0227 State: PUBLISHED Published: 2007-01-13T02:00:00 Last Updated: 2024-08-07T12:12:17.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: slocate 3.1 does not properly manage database entries that specify names of files in protected directories, which allows local users to obtain the names of private files. NOTE: another researcher reports that the issue is not present in slocate 2.7. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33465 - http://www.securityfocus.com/archive/1/456739/100/0/threaded - http://www.securityfocus.com/bid/21989 - http://www.securityfocus.com/archive/1/456530/100/0/threaded - http://www.securityfocus.
w.securityfocus.com/bid/21989 - http://www.securityfocus.com/archive/1/456530/100/0/threaded - http://www.securityfocus.com/archive/1/456489/100/0/threaded - http://www.securityfocus.com/archive/1/456593/100/0/threaded - http://www.securityfocus.com/archive/1/464220/30/7320/threaded - http://www.ubuntu.com/usn/usn-425-1
CVE ID: CVE-2007-0228 State: PUBLISHED Published: 2007-01-13T02:00:00 Last Updated: 2024-08-07T12:12:17.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DataCollector service in EIQ Networks Network Security Analyzer allows remote attackers to cause a denial of service (service crash) via a (1) &CONNECTSERVER& (2) &ADDENTRY& (3) &FIN& (4) &START& (5) &LOGPATH& (6) &FWADELTA& (7) &FWALOG& (8) &SETSYNCHRONOUS& (9) &SETPRGFILE&, or (10) &SETREPLYPORT& string to TCP port 10618, which triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21994 - http://secunia.com/advisories/23693 - http://archives
Container: References: - http://www.securityfocus.com/bid/21994 - http://secunia.com/advisories/23693 - http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0209.html - http://www.vupen.com/english/advisories/2007/0147 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31428 - http://osvdb.org/32725
CVE ID: CVE-2007-0229 State: PUBLISHED Published: 2007-01-13T02:00:00 Last Updated: 2024-08-07T12:12:17.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ffs_mountfs function in Mac OS X 10.4.8 and FreeBSD 6.1 allows local users to cause a denial of service (panic) and possibly gain privileges via a crafted DMG image that causes "allocation of a negative size buffer" leading to a heap-based buffer overflow, a related issue to CVE-2006-5679. NOTE: a third party states that this issue does not cross privilege boundaries in FreeBSD because only root may mount a filesystem. Additional Analyst Notes: - CVE Program Container: References: - http://projects.info
only root may mount a filesystem. Additional Analyst Notes: - CVE Program Container: References: - http://projects.info-pull.com/moab/MOAB-10-01-2007.html - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://www.osvdb.org/32684 - http://lists.freebsd.org/pipermail/freebsd-security/2007-January/004218.html - http://www.vupen.com/english/advisories/2007/0141 - http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html - http://docs.info.apple.com/article.html?artnum=305214 - http://www.securitytracker.com/id?1017751 - http://www.securityfocus.com/bid/21993 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31409 - http://secunia.com/advisories/23703 - http://apple
/21993 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31409 - http://secunia.com/advisories/23703 - http://applefun.blogspot.com/2007/01/moab-10-01-2007-apple-dmg-ufs.html - http://www.vupen.com/english/advisories/2007/0930 - http://secunia.com/advisories/24479
CVE ID: CVE-2007-0230 State: PUBLISHED Published: 2007-01-13T02:00:00 Last Updated: 2024-08-07T12:12:17.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in install.php in CS-Cart 1.3.3 allows remote attackers to execute arbitrary PHP code via a URL in the install_dir parameter. NOTE: CVE and third parties dispute this vulnerability because install_dir is defined before use Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31408 - http://osvdb.org/31277 - http://www.securityfocus.com/archive/1/456527/100/0/threaded - http://www.attrition.org/pipermail/vim/2007-January/001
- http://www.securityfocus.com/archive/1/456527/100/0/threaded - http://www.attrition.org/pipermail/vim/2007-January/001223.html
CVE ID: CVE-2007-0231 State: PUBLISHED Published: 2007-01-13T02:00:00 Last Updated: 2024-08-07T12:12:17.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Movable Type (MT) 3.33, when nofollow is disabled and unmoderated comments are enabled, allows remote attackers to inject arbitrary web script or HTML via the Comments field. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0142 - http://osvdb.org/32717 - http://golem.ph.utexas.edu/~distler/blog/archives/001102.html - http://www.zackvision.com/weblog/2007/01/movabletype-security-bug.html - http://secunia.com/advisories/2366
01102.html - http://www.zackvision.com/weblog/2007/01/movabletype-security-bug.html - http://secunia.com/advisories/23669
CVE ID: CVE-2007-0232 State: PUBLISHED Published: 2007-01-13T02:00:00 Last Updated: 2024-08-07T12:12:17.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in routines/fieldValidation.php in Jshop Server 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the jssShopFileSystem parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31425 - http://www.securityfocus.com/archive/1/456591/100/0/threaded - http://www.securityfocus.com/bid/21995 - http://osvdb.org/33459 - https://www.exploit-db.com/exploits/3113 - http://securityreason.com/securityalert/21
d/21995 - http://osvdb.org/33459 - https://www.exploit-db.com/exploits/3113 - http://securityreason.com/securityalert/2146
CVE ID: CVE-2007-0233 State: PUBLISHED Published: 2007-01-13T02:00:00 Last Updated: 2024-08-07T12:12:17.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-trackback.php in WordPress 2.0.6 and earlier does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to execute arbitrary SQL commands via the tb_id parameter. NOTE: it could be argued that this vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in WordPress. Additional Analyst Notes: - CVE Pro
d be in PHP; if so, then this should not be treated as a vulnerability in WordPress. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3109 - http://www.securityfocus.com/bid/21983 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31385 - http://osvdb.org/36860
CVE ID: CVE-2007-0234 State: REJECTED Published: 2007-01-17T00:00:00 Last Updated: 2007-01-19T10:00:00 Description: No description available.
CVE ID: CVE-2007-0235 State: PUBLISHED Published: 2007-01-16T18:00:00 Last Updated: 2024-08-07T12:12:17.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the glibtop_get_proc_map_s function in libgtop before 2.14.6 (libgtop2) allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a process with a long filename that is mapped in its address space, which triggers the overflow in gnome-system-monitor. Additional Analyst Notes: - CVE Program Container: References: - https://issues.rpath.com/browse/RPL-972 - http://www.vupen.com/english/advisories/2007/0187 - http://www.securitytracker.com/id?1018526 - http://ww
owse/RPL-972 - http://www.vupen.com/english/advisories/2007/0187 - http://www.securitytracker.com/id?1018526 - http://www.redhat.com/support/errata/RHSA-2007-0765.html - http://secunia.com/advisories/23777 - http://secunia.com/advisories/23840 - http://security.gentoo.org/glsa/glsa-200701-17.xml - http://bugzilla.gnome.org/show_bug.cgi?id=396477 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:023 - http://secunia.com/advisories/24015 - http://www.vupen.com/english/advisories/2007/0185 - http://secunia.com/advisories/23814 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31522 - http://www.ubuntu.com/usn/usn-407-1 - http://www.debian.org/security/2007/dsa-1255 - http://ftp
/vulnerabilities/31522 - http://www.ubuntu.com/usn/usn-407-1 - http://www.debian.org/security/2007/dsa-1255 - http://ftp.gnome.org/pub/gnome/sources/libgtop/2.14/libgtop-2.14.6.news - http://secunia.com/advisories/26367 - http://secunia.com/advisories/23736 - http://osvdb.org/32815 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10720 - http://secunia.com/advisories/23872 - https://launchpad.net/bugs/79206 - http://www.securityfocus.com/bid/22054
CVE ID: CVE-2007-0236 State: PUBLISHED Published: 2007-01-16T18:00:00 Last Updated: 2024-08-07T12:12:17.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the _ATPsndrsp function in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to cause a denial of service (kernel panic) and possibly execute arbitrary code via a crafted AppleTalk request that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/32687 - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://securitytracker.com/id?1017513 - http://lists.apple.com/archives/security-announce/2007/
halerts/TA07-072A.html - http://securitytracker.com/id?1017513 - http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html - http://projects.info-pull.com/moab/MOAB-14-01-2007.html - http://docs.info.apple.com/article.html?artnum=305214 - http://www.securitytracker.com/id?1017751 - http://www.securityfocus.com/bid/22041 - http://www.vupen.com/english/advisories/2007/0191 - https://www.exploit-db.com/exploits/3130 - http://www.vupen.com/english/advisories/2007/0930 - http://secunia.com/advisories/23708 - http://secunia.com/advisories/24479
CVE ID: CVE-2007-0237 State: PUBLISHED Published: 2007-03-19T19:00:00 Last Updated: 2024-08-07T12:12:17.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ndeb-binary feature in Lookup (lookup-el) allows local users to overwrite arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200712-07.xml - http://secunia.com/advisories/28023 - http://www.securitytracker.com/id?1017792 - http://www.debian.org/security/2007/dsa-1269 - http://osvdb.org/34263 - http://secunia.com/advisories/24590 - http://secunia.com/advisories/24377 - http://www.securityfocus.com/bid/23026 - https://
//secunia.com/advisories/24590 - http://secunia.com/advisories/24377 - http://www.securityfocus.com/bid/23026 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33052 - http://bugs.gentoo.org/show_bug.cgi?id=197306
CVE ID: CVE-2007-0238 State: PUBLISHED Published: 2007-03-21T19:00:00 Last Updated: 2024-08-07T12:12:17.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in filter\starcalc\scflt.cxx in the StarCalc parser in OpenOffice.org (OOo) Office Suite before 2.2, and 1.x before 1.1.5 Patch, allows user-assisted remote attackers to execute arbitrary code via a document with a long Note. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml - http://www.ngssoftware.com/advisories/high-risk-vulnerabilities-in-the-openoffice-suite/ - http://secunia.com/advisories/24588 - https://issues.foresight
ries/high-risk-vulnerabilities-in-the-openoffice-suite/ - http://secunia.com/advisories/24588 - https://issues.foresightlinux.org/browse/FL-211 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8968 - http://secunia.com/advisories/24810 - http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html - http://www.redhat.com/support/errata/RHSA-2007-0033.html - http://www.vupen.com/english/advisories/2007/1032 - http://www.ubuntu.com/usn/usn-444-1 - http://www.openoffice.org/security/CVE-2007-0238 - http://secunia.com/advisories/24613 - http://secunia.com/advisories/24676 - http://secunia.com/advisories/24550 - http://secunia.com/advisories/2446
s/24613 - http://secunia.com/advisories/24676 - http://secunia.com/advisories/24550 - http://secunia.com/advisories/24465 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102794-1 - http://www.securityfocus.com/bid/23067 - http://www.debian.org/security/2007/dsa-1270 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33112 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:073 - http://secunia.com/advisories/24646 - http://www.securitytracker.com/id?1017799 - http://www.redhat.com/support/errata/RHSA-2007-0069.html - http://secunia.com/advisories/24647 - http://www.vupen.com/english/advisories/2007/1117 - http://secunia.com/advisories/24906 - https://issues.rpath.com
647 - http://www.vupen.com/english/advisories/2007/1117 - http://secunia.com/advisories/24906 - https://issues.rpath.com/browse/RPL-1118 - http://www.securityfocus.com/archive/1/464724/100/0/threaded
CVE ID: CVE-2007-0239 State: PUBLISHED Published: 2007-03-21T19:00:00 Last Updated: 2024-08-07T12:12:17.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenOffice.org (OOo) Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared link in a crafted document. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200704-12.xml - http://secunia.com/advisories/24588 - https://issues.foresightlinux.org/browse/FL-211 - http://www.securityfocus.com/bid/22812 - http://secunia.com/advisories/24810 - http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html
id/22812 - http://secunia.com/advisories/24810 - http://lists.suse.com/archive/suse-security-announce/2007-Mar/0007.html - http://www.redhat.com/support/errata/RHSA-2007-0033.html - http://www.vupen.com/english/advisories/2007/1032 - http://www.ubuntu.com/usn/usn-444-1 - http://secunia.com/advisories/24613 - http://secunia.com/advisories/24676 - http://secunia.com/advisories/24550 - http://secunia.com/advisories/24465 - http://www.debian.org/security/2007/dsa-1270 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:073 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33113 - http://secunia.com/advisories/24646 - http://www.securitytracker.com/id?1017799 - http://www.redhat.co
abilities/33113 - http://secunia.com/advisories/24646 - http://www.securitytracker.com/id?1017799 - http://www.redhat.com/support/errata/RHSA-2007-0069.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102807-1 - http://secunia.com/advisories/24647 - http://www.vupen.com/english/advisories/2007/1117 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11422 - http://secunia.com/advisories/24906 - https://issues.rpath.com/browse/RPL-1118
CVE ID: CVE-2007-0240 State: PUBLISHED Published: 2007-03-22T18:00:00 Last Updated: 2024-08-07T12:12:17.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Zope 2.10.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1041 - http://www.debian.org/security/2007/dsa-1275 - http://www.securityfocus.com/bid/23084 - http://secunia.com/advisories/24017 - http://lists.suse.com/archive/suse-security-announce/2007-May/0005.html - http://www.zope.org/Products/Zope/Hot
/24017 - http://lists.suse.com/archive/suse-security-announce/2007-May/0005.html - http://www.zope.org/Products/Zope/Hotfix-2007-03-20/announcement/view - http://secunia.com/advisories/24713 - http://secunia.com/advisories/25239 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33187