Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-2853 State: PUBLISHED Published: 2007-05-24T19:00:00 Last Updated: 2024-08-07T13:57:54.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VCDAPILibApi ActiveX control in vc9api.DLL 9.0.0.57 in Virtual CD 9.0.0.2 allows remote attackers to execute arbitrary commands via a command line in the first argument to the VCDLaunchAndWait function. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3967 - http://www.securityfocus.com/bid/24087 - http://osvdb.org/38099
CVE ID: CVE-2007-2854 State: PUBLISHED Published: 2007-05-24T19:00:00 Last Updated: 2024-08-07T13:57:53.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in account_change.php in BtiTracker 1.4.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) style or (2) langue parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34447 - https://www.exploit-db.com/exploits/3970 - http://secunia.com/advisories/25382 - http://osvdb.org/36316 - http://www.securityfocus.com/bid/24094 - http://www.vupen.com/english/advisories/2007/1921
CVE ID: CVE-2007-2855 State: PUBLISHED Published: 2007-05-24T19:00:00 Last Updated: 2024-08-07T13:57:53.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in a certain ActiveX control in DartZipLite.dll 1.8.5.3 in Dart ZipLite Compression for ActiveX allows user-assisted remote attackers to execute arbitrary code via a long first argument to the QuickZip function, a related issue to CVE-2007-2856. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34433 - http://osvdb.org/38110 - http://shinnai.altervista.org/viewtopic.php?id=42&t_id=25 - http://moaxb.blogspot.com/2007/05/moaxb-22-bonus-dart-zipli
http://shinnai.altervista.org/viewtopic.php?id=42&t_id=25 - http://moaxb.blogspot.com/2007/05/moaxb-22-bonus-dart-ziplite-compression.html
CVE ID: CVE-2007-2856 State: PUBLISHED Published: 2007-05-24T19:00:00 Last Updated: 2024-08-07T13:57:53.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Dart Communications PowerTCP ZIP Compression ActiveX control in DartZip.dll 1.8.5.3, when Internet Explorer 6 is used, allows user-assisted remote attackers to execute arbitrary code via a long first argument to the QuickZip function, a related issue to CVE-2007-2855. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/469592/100/0/threaded - http://osvdb.org/38111 - http://www.securityfocus.com/bid/24163 - https://exchange.xforce.ibmcloud.com/vulnerabi
eaded - http://osvdb.org/38111 - http://www.securityfocus.com/bid/24163 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34494 - http://www.securityfocus.com/archive/1/469503/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34520 - http://www.securityfocus.com/bid/24142 - http://retrogod.altervista.org/ie_DartZip_bof.html
CVE ID: CVE-2007-2857 State: PUBLISHED Published: 2007-05-24T19:00:00 Last Updated: 2024-08-07T13:57:53.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in sample/xls2mysql in ABC Excel Parser Pro 4.0 allows remote attackers to execute arbitrary PHP code via a URL in the parser_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38112 - http://securityreason.com/securityalert/2732 - http://www.xmors-seurity.com/advisory/excelparser%28rfi%29.txt - http://www.securityfocus.com/archive/1/469298/100/0/threaded - http://www.securityfocus.com/bid/24103 - https://exchange.xforce.ibmcloud.com/vulnera
/archive/1/469298/100/0/threaded - http://www.securityfocus.com/bid/24103 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34461
CVE ID: CVE-2007-2858 State: PUBLISHED Published: 2007-05-24T19:00:00 Last Updated: 2024-08-07T13:57:54.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the IP-Search functionality in the IP-Tracking Mod for phpBB 2.0.x allows remote authenticated administrators to execute arbitrary SQL commands via the Search Query field. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34384 - http://osvdb.org/37534 - http://www.securityfocus.com/archive/1/469299/100/0/threaded - http://securityreason.com/securityalert/2731
CVE ID: CVE-2007-2859 State: PUBLISHED Published: 2007-05-24T19:00:00 Last Updated: 2024-08-07T13:57:53.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in SimpGB 1.46.0 allow remote attackers to execute arbitrary PHP code via a URL in the path_simpgb parameter to (1) guestbook.php, (2) search.php, (3) mailer.php, (4) avatars.php, (5) ccode.php, (6) comments.php, (7) emoticons.php, (8) gbdownload.php, and possibly other PHP scripts. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38101 - http://www.securityfocus.com/archive/1/469219/100/0/threaded - http://osvdb.org/38105 - http://osvdb.org/38
.org/38101 - http://www.securityfocus.com/archive/1/469219/100/0/threaded - http://osvdb.org/38105 - http://osvdb.org/38104 - http://osvdb.org/38108 - http://www.xmors-seurity.com/advisory/SimpGB%28rfi%29.txt - http://osvdb.org/38102 - http://osvdb.org/38103 - http://www.attrition.org/pipermail/vim/2007-May/001626.html - http://osvdb.org/38106 - http://osvdb.org/38107 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34428 - http://securityreason.com/securityalert/2735
CVE ID: CVE-2007-2860 State: PUBLISHED Published: 2007-05-24T19:00:00 Last Updated: 2024-08-07T13:57:54.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: user.php in BoastMachine 3.0 platinum allows remote authenticated users to gain privileges via a modified id parameter, as demonstrated by an edit_post action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41027 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34462 - http://securityreason.com/securityalert/2736 - http://www.securityfocus.com/bid/24096 - http://www.securityfocus.com/archive/1/469226/100/0/threaded
CVE ID: CVE-2007-2861 State: PUBLISHED Published: 2007-05-24T19:00:00 Last Updated: 2024-08-07T13:57:54.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Simple Accessible XHTML Online News (SAXON) 4.6 allow remote attackers to execute arbitrary PHP code via a URL in the template parameter to (1) news.php, (2) preview.php, or (3) archive-display.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38354 - http://www.securityfocus.com/archive/1/469220/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34429 - http://www.xmors-seurity.com/advisory/SAXON%28rfi%29.txt - http:/
//exchange.xforce.ibmcloud.com/vulnerabilities/34429 - http://www.xmors-seurity.com/advisory/SAXON%28rfi%29.txt - http://securityreason.com/securityalert/2734 - http://osvdb.org/38355
CVE ID: CVE-2007-2862 State: PUBLISHED Published: 2007-05-24T19:00:00 Last Updated: 2024-08-07T13:57:54.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in CubeCart 3.0.16 might allow remote attackers to execute arbitrary SQL commands via an unspecified parameter to cart.inc.php and certain other files in an include directory, related to missing sanitization of the $option variable and possibly cookie modification. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34460 - http://www.securityfocus.com/bid/24100 - http://www.securityfocus.com/archiv
xforce.ibmcloud.com/vulnerabilities/34460 - http://www.securityfocus.com/bid/24100 - http://www.securityfocus.com/archive/1/469301/100/0/threaded - http://securityreason.com/securityalert/2730
CVE ID: CVE-2007-2863 State: PUBLISHED Published: 2007-06-06T21:00:00 Last Updated: 2024-08-07T13:57:53.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a long filename in a .CAB file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34741 - http://securityreason.com/securityalert/2790 - http://supportconnectw.ca.com/public/antivirus/infodocs/caantivirus-securitynotice.asp - http://www.securityfocus.com/archive/1/470601/100
ectw.ca.com/public/antivirus/infodocs/caantivirus-securitynotice.asp - http://www.securityfocus.com/archive/1/470601/100/0/threaded - http://www.vupen.com/english/advisories/2007/2072 - http://www.securityfocus.com/bid/24331 - http://www.securityfocus.com/archive/1/470754/100/0/threaded - http://www.osvdb.org/35244 - http://www.securitytracker.com/id?1018199 - http://www.zerodayinitiative.com/advisories/ZDI-07-034.html - http://www.kb.cert.org/vuls/id/739409 - http://secunia.com/advisories/25570
CVE ID: CVE-2007-2864 State: PUBLISHED Published: 2007-06-06T21:00:00 Last Updated: 2024-08-07T13:57:54.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a large invalid value of the coffFiles field in a .CAB file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24330 - http://www.securityfocus.com/archive/1/470602/100/0/threaded - http://supportconnectw.ca.com/public/antivirus/infodocs/caantivirus-securitynotice.asp - http://www.kb.cert.org/v
aded - http://supportconnectw.ca.com/public/antivirus/infodocs/caantivirus-securitynotice.asp - http://www.kb.cert.org/vuls/id/105105 - http://www.vupen.com/english/advisories/2007/2072 - http://www.zerodayinitiative.com/advisories/ZDI-07-035.html - http://www.securityfocus.com/archive/1/470754/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34737 - http://www.securitytracker.com/id?1018199 - http://www.osvdb.org/35245 - http://secunia.com/advisories/25570
CVE ID: CVE-2007-2865 State: PUBLISHED Published: 2007-05-25T18:00:00 Last Updated: 2024-08-07T13:57:54.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in sqledit.php in phpPgAdmin 4.1.1 allows remote attackers to inject arbitrary web script or HTML via the server parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34456 - http://osvdb.org/38138 - http://secunia.com/advisories/27756 - http://www.securityfocus.com/bid/24115 - http://marc.info/?l=full-disclosure&m=117987658110713&w=2 - http://www.novell.com/linux/security/advisories/2007_24_sr.html - http://secu
?l=full-disclosure&m=117987658110713&w=2 - http://www.novell.com/linux/security/advisories/2007_24_sr.html - http://secunia.com/advisories/33263 - http://www.debian.org/security/2008/dsa-1693
CVE ID: CVE-2007-2866 State: PUBLISHED Published: 2007-05-25T18:00:00 Last Updated: 2024-08-07T13:57:54.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in modules/admin/modules/gallery.php in PHPEcho CMS 2.0-rc1 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter and possibly other parameters. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1937 - http://sourceforge.net/project/shownotes.php?release_id=495821&group_id=186100 - http://osvdb.org/38053
CVE ID: CVE-2007-2867 State: PUBLISHED Published: 2007-06-01T00:00:00 Last Updated: 2024-08-07T13:57:54.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple vulnerabilities in the layout engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attackers to cause a denial of service (crash) via vectors related to dangling pointers, heap corruption, signed/unsigned, and other issues. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25496 - http://www.securitytracker.com/id?1018153 - http://fedoranews.org/cms/node/
ces: - http://secunia.com/advisories/25496 - http://www.securitytracker.com/id?1018153 - http://fedoranews.org/cms/node/2747 - http://www.debian.org/security/2007/dsa-1308 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34604 - http://www.securitytracker.com/id?1018151 - http://www.mozilla.org/security/announce/2007/mfsa2007-12.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:120 - http://secunia.com/advisories/27423 - http://www.securityfocus.com/archive/1/470172/100/200/threaded - http://secunia.com/advisories/24406 - http://secunia.com/advisories/25647 - http://secunia.com/advisorie
/200/threaded - http://secunia.com/advisories/24406 - http://secunia.com/advisories/25647 - http://secunia.com/advisories/25469 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://osvdb.org/35134 - http://www.novell.com/linux/security/advisories/2007_36_mozilla.html - http://secunia.com/advisories/25491 - http://security.gentoo.org/glsa/glsa-200706-06.xml - http://secunia.com/advisories/25635 - http://secunia.com/advisories/25534 - http://www.vupen.com/english/advisories/2007/1994 - http://www.redhat.com/support/errata/RHSA-2007-0400.html - http://fedoranews.org/cms/node/2749 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slac
html - http://fedoranews.org/cms/node/2749 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.571857 - http://www.ubuntu.com/usn/usn-469-1 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:131 - http://www.debian.org/security/2007/dsa-1305 - http://secunia.com/advisories/25533 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10066 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579 - http://www.debian.org/security/2007/dsa-1306 - https://issues.rpath.com/browse/RPL-1424 - http://www.kb.cert.org/vuls/id/751636 - http://secunia.com/advisories/25664 - http://www.mandriva.c
om/browse/RPL-1424 - http://www.kb.cert.org/vuls/id/751636 - http://secunia.com/advisories/25664 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:119 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103136-1 - http://secunia.com/advisories/24456 - http://secunia.com/advisories/25644 - http://secunia.com/advisories/25858 - http://www.ubuntu.com/usn/usn-468-1 - http://www.vupen.com/english/advisories/2008/0082 - http://www.redhat.com/support/errata/RHSA-2007-0401.html - http://secunia.com/advisories/25476 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:126 - h
07-0401.html - http://secunia.com/advisories/25476 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:126 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201532-1 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.securityfocus.com/bid/24242 - http://secunia.com/advisories/25750 - http://www.vupen.com/english/advisories/2007/3664 - http://secunia.com/advisories/25489 - http://www.debian.org/security/2007/dsa-1300 - http://secunia.com/advisories/25559 - http://secunia.com/advisories/28363 - http://secunia.com/advisories/25490 - http://secunia.com/advisories/25488 - http://secunia.com/advisories/25492 - http://www.redhat.com/su
/advisories/25490 - http://secunia.com/advisories/25488 - http://secunia.com/advisories/25492 - http://www.redhat.com/support/errata/RHSA-2007-0402.html - http://www.us-cert.gov/cas/techalerts/TA07-151A.html - http://secunia.com/advisories/25685 - http://www.securityfocus.com/archive/1/471842/100/0/threaded
CVE ID: CVE-2007-2868 State: PUBLISHED Published: 2007-06-01T00:00:00 Last Updated: 2024-08-07T13:57:54.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple vulnerabilities in the JavaScript engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors that trigger memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25496 - http://www.securitytracker.com/id?1018153 - http://fedoranews.org/cms/node/2747 - htt
p://secunia.com/advisories/25496 - http://www.securitytracker.com/id?1018153 - http://fedoranews.org/cms/node/2747 - http://www.debian.org/security/2007/dsa-1308 - http://secunia.com/advisories/27427 - http://www.securitytracker.com/id?1018151 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201505-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10711 - http://www.mozilla.org/security/announce/2007/mfsa2007-12.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:120 - http://www.securityfocus.com/archive/1/470172/100/200/threaded - http://secun
/security/advisories?name=MDKSA-2007:120 - http://www.securityfocus.com/archive/1/470172/100/200/threaded - http://secunia.com/advisories/24406 - http://secunia.com/advisories/25647 - http://secunia.com/advisories/25469 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103125-1 - http://www.novell.com/linux/security/advisories/2007_36_mozilla.html - http://secunia.com/advisories/25491 - http://security.gentoo.org/glsa/glsa-200706-06.xml - http://secunia.com/advisories/25635 - http://secunia.com/advisories/25534 - http://www.vupen.com/english/advisories/2007/1994 - http://www.redhat.com/support/errata/
secunia.com/advisories/25534 - http://www.vupen.com/english/advisories/2007/1994 - http://www.redhat.com/support/errata/RHSA-2007-0400.html - http://fedoranews.org/cms/node/2749 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.571857 - http://www.ubuntu.com/usn/usn-469-1 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:131 - http://www.debian.org/security/2007/dsa-1305 - http://secunia.com/advisories/25533 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579 - http://www.debian.org/security/2007/dsa-1306 - http://www.securitytracker.com/id?1018152 - https://issues.rpath.com/browse/RPL-1424 - http://secunia.
y/2007/dsa-1306 - http://www.securitytracker.com/id?1018152 - https://issues.rpath.com/browse/RPL-1424 - http://secunia.com/advisories/25664 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:119 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947 - http://secunia.com/advisories/24456 - http://secunia.com/advisories/25644 - http://secunia.com/advisories/25858 - http://www.ubuntu.com/usn/usn-468-1 - http://www.kb.cert.org/vuls/id/609956 - http://www.vupen.com/english/advisories/2008/0082 - http://www.redhat.com/support/errata/RHSA-2007-0401.html - http://secunia.com/advisories/25476 - http://www.vupen.com/english/advisories/2007/3632 -
t/errata/RHSA-2007-0401.html - http://secunia.com/advisories/25476 - http://www.vupen.com/english/advisories/2007/3632 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34605 - http://osvdb.org/35138 - http://www.securityfocus.com/bid/24242 - http://secunia.com/advisories/25750 - http://secunia.com/advisories/25489 - http://www.debian.org/security/2007/dsa-1300 - http://secunia.com/advisories/25559 - http://secunia.com/advisories/28363 - http://secunia.com/advisories/25490 - http://secunia.com/advisories/25488 - http://secunia.com/advisories/25492 - http://www.redhat.com/support/errata/RHSA-2007-0402.html
ia.com/advisories/25488 - http://secunia.com/advisories/25492 - http://www.redhat.com/support/errata/RHSA-2007-0402.html - http://www.us-cert.gov/cas/techalerts/TA07-151A.html - http://secunia.com/advisories/25685 - http://www.securityfocus.com/archive/1/471842/100/0/threaded
CVE ID: CVE-2007-2869 State: PUBLISHED Published: 2007-06-01T00:00:00 Last Updated: 2024-08-07T13:57:53.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: The form autocomplete feature in Mozilla Firefox 1.5.x before 1.5.0.12, 2.x before 2.0.0.4, and possibly earlier versions, allows remote attackers to cause a denial of service (persistent temporary CPU consumption) via a large number of characters in a submitted form. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2007/mfsa2007-13.html - http://www.debian.org/security/2007/dsa-1308 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:120 - http://www.securityf
bian.org/security/2007/dsa-1308 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:120 - http://www.securityfocus.com/archive/1/470172/100/200/threaded - http://secunia.com/advisories/25647 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34612 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.novell.com/linux/security/advisories/2007_36_mozilla.html - http://security.gentoo.org/glsa/glsa-200706-06.xml - http://secunia.com/advisories/25635 - http://secunia.com/advisories/25534 - http://www.vupen.com/english/advisories/2007/1994 - http://www.redhat.com/support/errata/RHSA-2007-0400.html - http://slackware.com/security/viewer.php?l
sories/2007/1994 - http://www.redhat.com/support/errata/RHSA-2007-0400.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.571857 - http://secunia.com/advisories/25533 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11208 - http://www.debian.org/security/2007/dsa-1306 - https://issues.rpath.com/browse/RPL-1424 - http://secunia.com/advisories/25858 - http://www.ubuntu.com/usn/usn-468-1 - http://www.redhat.com/support/errata/RHSA-2007-0401.html - http://secunia.com/advisories/25476 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:126 - http://osvdb.org/35135 - http://h20000.www2.hp.com/bizsupport
www.mandriva.com/security/advisories?name=MDKSA-2007:126 - http://osvdb.org/35135 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.securityfocus.com/bid/24242 - http://secunia.com/advisories/25750 - http://secunia.com/advisories/25490 - http://www.redhat.com/support/errata/RHSA-2007-0402.html - http://www.us-cert.gov/cas/techalerts/TA07-151A.html - http://secunia.com/advisories/25685 - http://www.securitytracker.com/id?1018154
CVE ID: CVE-2007-2870 State: PUBLISHED Published: 2007-06-01T00:00:00 Last Updated: 2024-08-07T13:57:54.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to bypass the same-origin policy and conduct cross-site scripting (XSS) and other attacks by using the addEventListener method to add an event listener for a site, which is executed in the context of that site. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2007/dsa-1308 - http://osvdb.org/35136 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:120 - h