Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-0928 State: PUBLISHED Published: 2007-02-14T11:00:00 Last Updated: 2024-08-07T12:34:21.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Virtual Calendar stores sensitive information under the web root with insufficient access control, which allows remote attackers to download an encoded password via a direct request for pwd.txt. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2240 - http://secunia.com/advisories/24125 - http://osvdb.org/33183 - http://www.securityfocus.com/archive/1/459844/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/32446
CVE ID: CVE-2007-0929 State: PUBLISHED Published: 2007-02-14T11:00:00 Last Updated: 2024-08-07T12:34:21.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in php rrd browser before 0.2.1 allows remote attackers to read arbitrary files via ".." sequences in the p parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2245 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32425 - http://osvdb.org/33693 - http://sourceforge.net/project/shownotes.php?group_id=176562&release_id=485414 - http://attrition.org/pipermail/vim/2007-February/001307.html - http://www.securityfocus.com/archive/
release_id=485414 - http://attrition.org/pipermail/vim/2007-February/001307.html - http://www.securityfocus.com/archive/1/459804/100/0/threaded
CVE ID: CVE-2007-0930 State: PUBLISHED Published: 2007-02-14T11:00:00 Last Updated: 2024-08-07T12:34:21.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Variable extract vulnerability in Apache Stats before 0.0.3beta allows attackers to modify arbitrary variables and conduct attacks via unknown vectors involving the use of PHP's extract function. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/forum/forum.php?forum_id=660919 - http://www.securityfocus.com/bid/22388 - http://www.vupen.com/english/advisories/2007/0559
CVE ID: CVE-2007-0931 State: PUBLISHED Published: 2007-02-14T11:00:00 Last Updated: 2024-08-07T12:34:21.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the management interfaces in (1) Aruba Mobility Controllers 200, 800, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via long credential strings. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/459928/100/0/threaded - http://www.kb.cert.org/vuls/id/319913 - http://secunia.com/advisories/24144 - https://exchange.xfo
9928/100/0/threaded - http://www.kb.cert.org/vuls/id/319913 - http://secunia.com/advisories/24144 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32459 - http://www.securityfocus.com/bid/22538 - http://osvdb.org/33184 - http://securityreason.com/securityalert/2244 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052380.html
CVE ID: CVE-2007-0932 State: PUBLISHED Published: 2007-02-14T11:00:00 Last Updated: 2024-08-07T12:34:21.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Aruba Mobility Controllers 200, 600, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege assignment for the guest account, which allows remote attackers to access administrative interfaces or the WLAN. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33185 - http://www.securityfocus.com/archive/1/459927/100/0/threaded - http://secunia.com/advisories/24144 - http://securityreason.com/securityalert/2243 - http://ww
1/459927/100/0/threaded - http://secunia.com/advisories/24144 - http://securityreason.com/securityalert/2243 - http://www.securityfocus.com/bid/22538 - http://www.kb.cert.org/vuls/id/613833 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052382.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/32461
CVE ID: CVE-2007-0933 State: PUBLISHED Published: 2007-06-05T21:00:00 Last Updated: 2024-08-07T12:34:21.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the wireless driver 6.0.0.18 for D-Link DWL-G650+ (Rev. A1) on Windows XP allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a beacon frame with a long TIM Information Element. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25602 - http://osvdb.org/36160 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34831 - http://www.blackhat.com/presentations/bh-europe-07/Butti/Presentation/bh-eu-07-Butti.pdf - http:/
ulnerabilities/34831 - http://www.blackhat.com/presentations/bh-europe-07/Butti/Presentation/bh-eu-07-Butti.pdf - http://www.securityfocus.com/bid/24438
CVE ID: CVE-2007-0934 State: PUBLISHED Published: 2007-06-12T19:00:00 Last Updated: 2024-08-07T12:34:21.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Visio 2002 allows remote user-assisted attackers to execute arbitrary code via a Visio (.VSD, VSS, .VST) file with a crafted version number that triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1925 - http://secunia.com/advisories/25619 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-030 - http://www.securityfocus.com/archive/1/
ps://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-030 - http://www.securityfocus.com/archive/1/471947/100/0/threaded - http://www.vupen.com/english/advisories/2007/2150 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34607 - http://www.securitytracker.com/id?1018227 - http://www.us-cert.gov/cas/techalerts/TA07-163A.html - http://www.securityfocus.com/bid/24349 - http://osvdb.org/35342 - http://www.securityfocus.com/archive/1/471947/100/0/threaded
CVE ID: CVE-2007-0935 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-0936 State: PUBLISHED Published: 2007-06-12T19:00:00 Last Updated: 2024-08-07T12:34:21.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Microsoft Visio 2002 allow remote user-assisted attackers to execute arbitrary code via a Visio (.VSD, VSS, .VST) file with a crafted packed object that triggers memory corruption, aka "Visio Document Packaging Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25619 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-030 - http://www.securityfocus.com/archive/1/471947/100/0/threaded - http://www.vupe
updates/securitybulletins/2007/ms07-030 - http://www.securityfocus.com/archive/1/471947/100/0/threaded - http://www.vupen.com/english/advisories/2007/2150 - http://www.securitytracker.com/id?1018227 - http://www.securityfocus.com/bid/24384 - http://osvdb.org/35343 - http://www.us-cert.gov/cas/techalerts/TA07-163A.html - http://www.securityfocus.com/archive/1/471947/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1369
CVE ID: CVE-2007-0937 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-0938 State: PUBLISHED Published: 2007-04-10T21:00:00 Last Updated: 2024-08-07T12:34:21.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 does not properly handle certain characters in a crafted HTTP GET request, which allows remote attackers to execute arbitrary code, aka the "CMS Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/466331/100/200/threaded - http://www.osvdb.org/34006 - http://www.vupen.com/english/advisories/2007/1322 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova
w.vupen.com/english/advisories/2007/1322 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2001 - http://www.securitytracker.com/id?1017894 - http://www.kb.cert.org/vuls/id/434137 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32736 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-018 - http://www.securityfocus.com/bid/22861 - http://secunia.com/advisories/24819 - http://www.securityfocus.com/archive/1/466331/100/200/threaded
CVE ID: CVE-2007-0939 State: PUBLISHED Published: 2007-04-10T21:00:00 Last Updated: 2024-08-07T12:34:21.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving HTML redirection queries, aka "Cross-site Scripting and Spoofing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/466331/100/200/threaded - http://www.vupen.com/english/advisories/2007/1322 - http://www.securitytracker.com/id?1017894 - http://www.osvdb.or
ed - http://www.vupen.com/english/advisories/2007/1322 - http://www.securitytracker.com/id?1017894 - http://www.osvdb.org/34007 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-018 - http://secunia.com/advisories/24819 - http://www.securityfocus.com/bid/22860 - http://www.securityfocus.com/archive/1/466331/100/200/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1575
CVE ID: CVE-2007-0940 State: PUBLISHED Published: 2007-05-08T23:00:00 Last Updated: 2024-08-07T12:34:21.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Cryptographic API Component Object Model Certificates ActiveX control (CAPICOM.dll) in Microsoft CAPICOM and BizTalk Server 2004 SP1 and SP2 allows remote attackers to execute arbitrary code via unspecified vectors, aka the "CAPICOM.Certificates Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/468871/100/200/threaded - http://www.securityfocus.com/archive/1/468871/100/200/threaded - http://www.vupen.com/english/advisories/20
0/threaded - http://www.securityfocus.com/archive/1/468871/100/200/threaded - http://www.vupen.com/english/advisories/2007/1713 - http://www.kb.cert.org/vuls/id/866305 - http://www.us-cert.gov/cas/techalerts/TA07-128A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1670 - http://secunia.com/advisories/25185 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32739 - http://www.securitytracker.com/id?1018016 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-028 - http://www.osvdb.org/34397 - http://www.securitytracker.com/id?1018017 - http://www.securityfocus.com/bid/23782
CVE ID: CVE-2007-0941 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-0942 State: PUBLISHED Published: 2007-05-08T23:00:00 Last Updated: 2024-08-07T12:34:21.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; and possibly 7 on Windows Vista does not properly "instantiate certain COM objects as ActiveX controls," which allows remote attackers to execute arbitrary code via a crafted COM object from chtskdic.dll. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1939 - http://www.securityfo
s: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1939 - http://www.securityfocus.com/archive/1/468871/100/200/threaded - http://www.vupen.com/english/advisories/2007/1712 - http://www.osvdb.org/34399 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33252 - http://www.securitytracker.com/id?1018019 - http://www.securityfocus.com/archive/1/468871/100/200/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-027 - http://secunia.com/advisories/23769 - http://www.us-cert.gov/cas/techalerts/TA07-128A.html
CVE ID: CVE-2007-0943 State: PUBLISHED Published: 2007-08-14T21:00:00 Last Updated: 2024-08-07T12:34:21.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Internet Explorer 5.01 and 6 SP1 allows remote attackers to execute arbitrary code via crafted Cascading Style Sheets (CSS) strings that trigger memory corruption during parsing, related to use of out-of-bounds pointers. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-045 - http://www.us-cert.gov/cas/techalerts/TA07-226A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval
-cert.gov/cas/techalerts/TA07-226A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1673 - http://www.vupen.com/english/advisories/2007/2869 - http://secunia.com/advisories/26419 - http://www.nsfocus.com/english/homepage/research/0701.htm - http://www.osvdb.org/36397 - http://www.securityfocus.com/bid/25288 - http://securitytracker.com/id?1018562
CVE ID: CVE-2007-0944 State: PUBLISHED Published: 2007-05-08T23:00:00 Last Updated: 2024-08-07T12:34:21.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the CTableCol::OnPropertyChange method in Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; and 6 on Windows XP SP2, or Windows Server 2003 SP1 or SP2 allows remote attackers to execute arbitrary code by calling deleteCell on a named table row in a named table column, then accessing the column, which causes Internet Explorer to access previously deleted objects, aka the "Uninitialized Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Contai
deleted objects, aka the "Uninitialized Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33253 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1722 - http://www.securityfocus.com/archive/1/468871/100/200/threaded - http://www.vupen.com/english/advisories/2007/1712 - http://www.securitytracker.com/id?1018019 - http://www.securityfocus.com/archive/1/468871/100/200/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-027 - http://secunia.com/advisories/23769 - http://www.zerodayinitiative.com/advisories/ZDI-07-027.htm
lletins/2007/ms07-027 - http://secunia.com/advisories/23769 - http://www.zerodayinitiative.com/advisories/ZDI-07-027.html - http://www.osvdb.org/34400 - http://www.us-cert.gov/cas/techalerts/TA07-128A.html - http://www.securityfocus.com/archive/1/467989/100/0/threaded - http://www.securityfocus.com/bid/23771
CVE ID: CVE-2007-0945 State: PUBLISHED Published: 2007-05-08T23:00:00 Last Updated: 2024-08-07T12:34:21.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; and 7 on Windows Vista allows remote attackers to execute arbitrary code via certain property methods that may trigger memory corruption, aka "Property Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/34401 - http://www.securityfocus.com/archive/1/468871/100/200/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mi
rityfocus.com/archive/1/468871/100/200/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1463 - http://www.vupen.com/english/advisories/2007/1712 - http://www.securitytracker.com/id?1018019 - http://www.securityfocus.com/archive/1/468871/100/200/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-027 - http://secunia.com/advisories/23769 - http://www.us-cert.gov/cas/techalerts/TA07-128A.html - http://www.securityfocus.com/bid/23769
CVE ID: CVE-2007-0946 State: PUBLISHED Published: 2007-05-08T23:00:00 Last Updated: 2024-08-07T12:34:21.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows remote attackers to execute arbitrary code via crafted HTML objects, which results in memory corruption, aka the first of two "HTML Objects Memory Corruption Vulnerabilities" and a different issue than CVE-2007-0947. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/468871/100/200/threaded - http://www.vupen.com/english/advisories/2007/1712 -
: - http://www.securityfocus.com/archive/1/468871/100/200/threaded - http://www.vupen.com/english/advisories/2007/1712 - http://www.osvdb.org/34402 - http://www.securityfocus.com/bid/23770 - http://www.securitytracker.com/id?1018019 - http://www.securityfocus.com/archive/1/468871/100/200/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-027 - http://secunia.com/advisories/23769 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33255 - http://www.us-cert.gov/cas/techalerts/TA07-128A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1441
CVE ID: CVE-2007-0947 State: PUBLISHED Published: 2007-05-08T23:00:00 Last Updated: 2024-08-07T12:34:21.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows remote attackers to execute arbitrary code via crafted HTML objects, resulting in accessing deallocated memory of CMarkup objects, aka the second of two "HTML Objects Memory Corruption Vulnerabilities" and a different issue than CVE-2007-0946. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2007-36/advisory/ - http://www.securityfocus.com/a
Program Container: References: - http://secunia.com/secunia_research/2007-36/advisory/ - http://www.securityfocus.com/archive/1/468871/100/200/threaded - http://www.vupen.com/english/advisories/2007/1712 - http://www.securitytracker.com/id?1018019 - http://www.securityfocus.com/archive/1/468871/100/200/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2048 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-027 - http://secunia.com/advisories/23769 - http://www.securityfocus.com/bid/23772 - http://www.osvdb.org/34403 - http://www.us-cert.gov/cas/techalerts/TA07-128A.html - https://exchange.xforce.ibmcloud.com/vulner
www.osvdb.org/34403 - http://www.us-cert.gov/cas/techalerts/TA07-128A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/33256
CVE ID: CVE-2007-0948 State: PUBLISHED Published: 2007-08-14T22:00:00 Last Updated: 2024-08-07T12:34:21.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administrators to execute arbitrary code on the host OS via unspecified vectors related to "interaction and initialization of components." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1259 - http://www.us-cert.gov/cas/techalerts/TA07-226A.html - http://www.securitytracker.com/id?1018
.mitre.oval%3Adef%3A1259 - http://www.us-cert.gov/cas/techalerts/TA07-226A.html - http://www.securitytracker.com/id?1018567 - http://www.vupen.com/english/advisories/2007/2873 - http://www.securityfocus.com/bid/25298 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-049 - http://secunia.com/advisories/26444
CVE ID: CVE-2007-0949 State: PUBLISHED Published: 2007-02-15T02:00:00 Last Updated: 2024-08-07T12:34:21.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers to execute arbitrary code via a M3U playlist file that contains a long file name. NOTE: it was later reported that 1.20 and 1.30 are also affected. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32479 - http://osvdb.org/33187 - http://www.securityfocus.com/bid/22553 - https://www.exploit-db.com/exploits/5032 - http://secunia.com/advisories/
187 - http://www.securityfocus.com/bid/22553 - https://www.exploit-db.com/exploits/5032 - http://secunia.com/advisories/23999 - https://www.exploit-db.com/exploits/5077
CVE ID: CVE-2007-0950 State: PUBLISHED Published: 2007-02-15T02:00:00 Last Updated: 2024-08-07T12:34:21.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in listmain.asp in Fullaspsite ASP Hosting Site allows remote attackers to inject arbitrary web script or HTML via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/459979/100/0/threaded - http://osvdb.org/33720 - http://www.securityfocus.com/bid/22545 - http://securityreason.com/securityalert/2250 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32469
CVE ID: CVE-2007-0951 State: PUBLISHED Published: 2007-02-15T02:00:00 Last Updated: 2024-08-07T12:34:21.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in listmain.asp in Fullaspsite ASP Hosting Site allows remote attackers to execute arbitrary SQL commands via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32470 - http://www.securityfocus.com/archive/1/459979/100/0/threaded - http://www.securityfocus.com/bid/22545 - http://securityreason.com/securityalert/2250 - http://osvdb.org/33721
CVE ID: CVE-2007-0952 State: PUBLISHED Published: 2007-02-15T02:00:00 Last Updated: 2024-08-07T12:34:21.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net Virtual Calendar allow remote attackers to inject arbitrary web script or HTML via the (1) t and (2) yr parameters, and the (3) sho parameter when the m parameter is outside the intended range. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32448 - http://secunia.com/advisories/24125 - http://osvdb.org/33182 - http://www.securityfocus.com/bid/22536
CVE ID: CVE-2007-0953 State: PUBLISHED Published: 2007-02-15T02:00:00 Last Updated: 2024-08-07T12:34:21.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.pl in @Mail 4.61 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32483 - http://www.securityfocus.com/bid/22552 - http://kb.atmail.com/?p=410 - http://www.vupen.com/english/advisories/2007/0603 - http://lostmon.blogspot.com/2007/02/mail-searchpl-keywords-variable-cross.html - http://osvdb.org/33193 - http:/
/0603 - http://lostmon.blogspot.com/2007/02/mail-searchpl-keywords-variable-cross.html - http://osvdb.org/33193 - http://secunia.com/advisories/24155