Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-6195 State: PUBLISHED Published: 2007-12-15T01:00:00 Last Updated: 2024-08-07T15:54:27.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the sw_rpc_agent_init function in swagentd in Software Distributor (SD), and possibly other DCE applications, in HP HP-UX B.11.11 and B.11.23 allows remote attackers to execute arbitrary code or cause a denial of service via malformed arguments in an opcode 0x04 DCE RPC request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39018 - http://www.vupen.com/english/advisories/2007/4220 - https://oval.cisecurity.org/repository/search/definitio
ties/39018 - http://www.vupen.com/english/advisories/2007/4220 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5710 - http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01294212-1 - http://www.zerodayinitiative.com/advisories/ZDI-07-079.html - http://www.securityfocus.com/archive/1/485260/100/0/threaded - http://www.securityfocus.com/bid/26855 - http://secunia.com/advisories/28087 - http://www.securitytracker.com/id?1019098 - http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01294212-1
CVE ID: CVE-2007-6196 State: PUBLISHED Published: 2007-12-01T01:00:00 Last Updated: 2024-08-07T15:54:27.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in util.php in Calacode @Mail before 5.2 allows remote attackers to inject arbitrary web script or HTML via the func parameter. Additional Analyst Notes: - CVE Program Container: References: - http://terra.calacode.com/mail/docs/changelog.html - http://osvdb.org/38911 - http://www.securitytracker.com/id?1019013 - http://secunia.com/advisories/27837 - http://www.securityfocus.com/bid/26635 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38758
CVE ID: CVE-2007-6197 State: PUBLISHED Published: 2007-12-01T01:00:00 Last Updated: 2024-08-07T15:54:27.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows remote attackers to obtain version numbers and internal hostnames by reading comments in the HTML source of any page. Additional Analyst Notes: - CVE Program Container: References: - http://procheckup.com/Vulnerability_PR06-08.php - http://www.securitytracker.com/id?1019005 - http://www.vupen.com/english/advisories/2007/4040 - http://www.securityfocus.com/archive/1/484467/100/0/threaded - http://procheckup.com/Vulnerability_PR06-09.php
07/4040 - http://www.securityfocus.com/archive/1/484467/100/0/threaded - http://procheckup.com/Vulnerability_PR06-09.php - http://secunia.com/advisories/27840
CVE ID: CVE-2007-6198 State: PUBLISHED Published: 2007-12-01T01:00:00 Last Updated: 2024-08-07T15:54:27.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: portal/server.pt in the Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows wildcards in advanced searches for usernames, which allows remote attackers to enumerate valid usernames via the in_tx_fulltext parameter. Additional Analyst Notes: - CVE Program Container: References: - http://procheckup.com/Vulnerability_PR06-11.php - http://www.securityfocus.com/archive/1/484469/100/0/threaded - http://www.securityfocus.com/bid/26620 - http://www.vupen.com/english/advisories/2007/4040 - http://ww
/100/0/threaded - http://www.securityfocus.com/bid/26620 - http://www.vupen.com/english/advisories/2007/4040 - http://www.securitytracker.com/id?1019004 - http://secunia.com/advisories/27840
CVE ID: CVE-2007-6199 State: PUBLISHED Published: 2007-12-01T01:00:00 Last Updated: 2024-08-07T15:54:27.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: rsync before 3.0.0pre6, when running a writable rsync daemon that is not using chroot, allows remote attackers to access restricted files via unknown vectors that cause rsync to create a symlink that points outside of the module's hierarchy. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28412 - http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15549.html - http://www.vupen.com/english/advisories/2007/4057 - http://lists.apple.com/archives/security-announce//2008/Jul/m
html - http://www.vupen.com/english/advisories/2007/4057 - http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html - http://www.vupen.com/english/advisories/2008/2268 - http://secunia.com/advisories/27853 - http://www.securityfocus.com/archive/1/487991/100/0/threaded - http://secunia.com/advisories/27863 - http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0257 - http://rsync.samba.org/security.html#s3_0_0 - http://secunia.com/advisories/61005 - http://secunia.com/advisories/28457 - http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:011 - http://secunia.com/advisories/31326 - http://www.securityfocus.com/bid/26638 - http://securitytracker.com/id?1019012 - http://li
ecunia.com/advisories/31326 - http://www.securityfocus.com/bid/26638 - http://securitytracker.com/id?1019012 - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
CVE ID: CVE-2007-6200 State: PUBLISHED Published: 2007-12-01T01:00:00 Last Updated: 2024-08-07T15:54:27.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, exclude_from, and filter and read or write hidden files via (1) symlink, (2) partial-dir, (3) backup-dir, and unspecified (4) dest options. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28412 - http://www.vupen.com/english/advisories/2007/4057 - http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html - http://www.redhat.com/suppo
ries/2007/4057 - http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html - http://www.redhat.com/support/errata/RHSA-2011-0999.html - http://www.securityfocus.com/bid/26639 - http://www.vupen.com/english/advisories/2008/2268 - http://secunia.com/advisories/27853 - http://www.securityfocus.com/archive/1/487991/100/0/threaded - http://secunia.com/advisories/27863 - http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0257 - http://rsync.samba.org/security.html#s3_0_0 - http://secunia.com/advisories/28457 - http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:011 - http://secunia.com/advisories/31326 - http://securitytracker.com/id?1019012 - http://lists.opensuse.org/open
-2008:011 - http://secunia.com/advisories/31326 - http://securitytracker.com/id?1019012 - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
CVE ID: CVE-2007-6201 State: PUBLISHED Published: 2007-12-01T02:00:00 Last Updated: 2024-08-07T15:54:27.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows attackers to cause a denial of service (hang) via a "faulty add-on" and possibly execute other commands via unknown vectors related to the turn_cmd option. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=557098 - http://www.securityfocus.com/bid/26625 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38751 - http://secunia.com/advisories/27786 - http://www.wesnot
5 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38751 - http://secunia.com/advisories/27786 - http://www.wesnoth.org/forum/viewtopic.php?p=264289#264289 - http://www.vupen.com/english/advisories/2007/4026 - http://www.wesnoth.org/forum/viewtopic.php?t=18844
CVE ID: CVE-2007-6202 State: PUBLISHED Published: 2007-12-01T02:00:00 Last Updated: 2024-08-07T15:54:27.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in plugins/search/search.php in Neocrome Seditio CMS 121 and earlier allows remote attackers to execute arbitrary SQL commands via the pag_sub[] parameter to plug.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.neocrome.net/page.php?id=2349 - https://www.exploit-db.com/exploits/4678 - http://osvdb.org/38924 - http://www.securityfocus.com/bid/26655 - http://secunia.com/advisories/27881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38774
CVE ID: CVE-2007-6203 State: PUBLISHED Published: 2007-12-03T22:00:00 Last Updated: 2024-08-07T15:54:27.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an HTTP request when it is reflected back in a "413 Request Entity Too Large" error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated via an HTTP request containing an invalid Content-length value, a similar issue to CVE-2006-3918. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.
to CVE-2006-3918. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg1PK57952 - http://security.gentoo.org/glsa/glsa-200803-19.xml - http://www.securityfocus.com/bid/26663 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12166 - http://secunia.com/advisories/34219 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://secunia.com/advisories/27906 - http://www.vupen.com/english/advisories/2008/1623/references - http://www.vupen.com/english/advisories/2008/0924/references - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://securityreason.com/securityalert/3411 - http://www.vupen
es - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://securityreason.com/securityalert/3411 - http://www.vupen.com/english/advisories/2007/4301 - http://www.ubuntu.com/usn/USN-731-1 - http://marc.info/?l=bugtraq&m=129190899612998&w=2 - http://secunia.com/advisories/29420 - http://www.vupen.com/english/advisories/2007/4060 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://secunia.com/advisories/33105 - http://www.securitytracker.com/id?1019030 - http://www-1.ibm.com/support/docview.wss?uid=swg24019245 - http://www.securityfocus.com/archive/1/484410/100/0/threaded - http://secunia.com/advisories/29348 - http://www.fujitsu.com/global/support/software/
/archive/1/484410/100/0/threaded - http://secunia.com/advisories/29348 - http://www.fujitsu.com/global/support/software/security/products-f/interstage-200807e.html - http://secunia.com/advisories/28196 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html - http://secunia.com/advisories/30356 - http://docs.info.apple.com/article.html?artnum=307562 - http://marc.info/?l=bugtraq&m=129190899612998&w=2 - http://secunia.com/advisories/29640 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38800 - http://www.vupen.com/english/advisories/2008/1875/references - http://secunia.com/advisories/30732 - http://procheckup.com/Vulnerability_PR07-37.php
CVE ID: CVE-2007-6204 State: PUBLISHED Published: 2007-12-13T21:00:00 Last Updated: 2024-08-07T15:54:27.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allow remote attackers to execute arbitrary code via unspecified long arguments to (1) ovlogin.exe, (2) OpenView5.exe, (3) snmpviewer.exe, and (4) webappmon.exe, as demonstrated via a long Action parameter to OpenView5.exe. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26741 - http://www.vupen.com/english/advisories/2007/4111 - http://secunia.com/advisories/27964 - http://h
focus.com/bid/26741 - http://www.vupen.com/english/advisories/2007/4111 - http://secunia.com/advisories/27964 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01188923 - https://www.exploit-db.com/exploits/4724 - http://securityreason.com/securityalert/3441 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01188923 - http://www.securitytracker.com/id?1019055 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38892 - http://www.zerodayinitiative.com/advisories/ZDI-07-071.html - http://www.securityfocus.com/archive/1/484704/100/0/threaded
CVE ID: CVE-2007-6205 State: PUBLISHED Published: 2007-12-11T20:00:00 Last Updated: 2024-08-07T15:54:27.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the remote RSS sidebar plugin (serendipity_plugin_remoterss) in S9Y Serendipity before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via a link in an RSS feed. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39143 - http://blog.s9y.org/archives/187-Serendipity-1.2.1-released.html - http://secunia.com/advisories/28012 - http://www.int21.de/cve/CVE-2007-6205-s9y.html - http://www.securityfocus.com/bid/26783 - http://securityreaso
s/28012 - http://www.int21.de/cve/CVE-2007-6205-s9y.html - http://www.securityfocus.com/bid/26783 - http://securityreason.com/securityalert/3437 - http://www.debian.org/security/2008/dsa-1528 - http://www.securityfocus.com/archive/1/484800/100/0/threaded - http://secunia.com/advisories/29502 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38947 - http://www.vupen.com/english/advisories/2007/4171
CVE ID: CVE-2007-6206 State: PUBLISHED Published: 2007-12-04T00:00:00 Last Updated: 2024-08-07T15:54:27.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/487808/100/0/threaded - http://secunia.com/advisories/30962 - http://bugzilla.kernel.org/show_bug.cgi?id=3043 - http://secunia.
100/0/threaded - http://secunia.com/advisories/30962 - http://bugzilla.kernel.org/show_bug.cgi?id=3043 - http://secunia.com/advisories/27908 - http://www.debian.org/security/2007/dsa-1436 - http://secunia.com/advisories/28643 - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00005.html - http://secunia.com/advisories/28141 - http://secunia.com/advisories/28826 - http://secunia.com/advisories/28706 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:112 - http://www.debian.org/security/2008/dsa-1504 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38841 - http://www.securityfocus.com/bid/26701 - http://secunia.com/advisories/28889 - http://wiki.rpath.com/wiki/A
ties/38841 - http://www.securityfocus.com/bid/26701 - http://secunia.com/advisories/28889 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0048 - http://secunia.com/advisories/30110 - http://www.vupen.com/english/advisories/2008/2222/references - http://secunia.com/advisories/33280 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:086 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:044 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10719 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=c46f739dd39db3b07ab5deb4e3ec81e1c04a91af - http://www.debian.org/security/2008/dsa-1503 - http://secuni
a=commitdiff%3Bh=c46f739dd39db3b07ab5deb4e3ec81e1c04a91af - http://www.debian.org/security/2008/dsa-1503 - http://secunia.com/advisories/28748 - http://www.ubuntu.com/usn/usn-574-1 - http://www.vupen.com/english/advisories/2007/4090 - http://secunia.com/advisories/29058 - http://www.redhat.com/support/errata/RHSA-2008-0211.html - http://secunia.com/advisories/28971 - http://www.redhat.com/support/errata/RHSA-2008-0787.html - http://www.redhat.com/support/errata/RHSA-2008-0089.html - http://lists.vmware.com/pipermail/security-announce/2008/000023.html - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html - http://www.ubuntu.com/usn/usn-578-1 - http://secunia.com/advisor
.org/opensuse-security-announce/2008-06/msg00006.html - http://www.ubuntu.com/usn/usn-578-1 - http://secunia.com/advisories/31246 - http://rhn.redhat.com/errata/RHSA-2008-0055.html - http://secunia.com/advisories/30818 - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html
CVE ID: CVE-2007-6207 State: PUBLISHED Published: 2007-12-04T00:00:00 Last Updated: 2024-08-07T15:54:27.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 3.x, possibly before 3.1.2, when running on IA64 systems, does not check the RID value for mov_to_rr, which allows a VTi domain to read memory of other domains. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41341 - http://www.redhat.com/support/errata/RHSA-2008-0154.html - http://lists.xensource.com/archives/html/xen-announce/2007-11/msg00000.html - http://secunia.com/advisories/27915 - http://secunia.com/advisories/29236 - https://oval.cisecurity.org/repository/search/definition/oval%3A
dvisories/27915 - http://secunia.com/advisories/29236 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9471 - http://lists.xensource.com/archives/html/xen-ia64-devel/2007-10/msg00189.html - http://www.securityfocus.com/bid/26716
CVE ID: CVE-2007-6208 State: PUBLISHED Published: 2007-12-04T00:00:00 Last Updated: 2024-08-07T15:54:27.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: sylprint.pl in claws mail tools (claws-mail-tools) allows local users to overwrite arbitrary files via a symlink attack on the sylprint.[USER].[PID] temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28402 - http://osvdb.org/42478 - http://security.gentoo.org/glsa/glsa-200801-03.xml - http://www.securityfocus.com/bid/26676 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=454089 - http://secunia.com/advisories/27897
CVE ID: CVE-2007-6209 State: PUBLISHED Published: 2007-12-04T00:00:00 Last Updated: 2024-08-07T15:54:27.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Util/difflog.pl in zsh 4.3.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/42481 - http://www.zsh.org/mla/workers/2007/msg01066.html - http://www.zsh.org/mla/workers/2007/msg01060.html - https://bugs.gentoo.org/show_bug.cgi?id=201022 - http://www.securityfocus.com/bid/26674 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38812 - http://www.zsh.org/mla/workers/2007/msg01065.html - http://secunia.co
change.xforce.ibmcloud.com/vulnerabilities/38812 - http://www.zsh.org/mla/workers/2007/msg01065.html - http://secunia.com/advisories/27899
CVE ID: CVE-2007-6210 State: PUBLISHED Published: 2007-12-04T01:00:00 Last Updated: 2024-08-07T15:54:27.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: zabbix_agentd 1.1.4 in ZABBIX before 1.4.3 runs "UserParameter" scripts with gid 0, which might allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00196.html - http://www.debian.org/security/2007/dsa-1420 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00232.html - http://secunia.com/advisories/27903 - http://www.zabbix.com/forum/showthread.php?t=8400 - http://bugs.debian.org/c
tml - http://secunia.com/advisories/27903 - http://www.zabbix.com/forum/showthread.php?t=8400 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=452682 - http://secunia.com/advisories/27948 - http://secunia.com/advisories/27978 - http://www.securityfocus.com/bid/26680
CVE ID: CVE-2007-6211 State: PUBLISHED Published: 2007-12-04T01:00:00 Last Updated: 2024-08-07T15:54:27.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Send ICMP Nasty Garbage (sing) on Debian GNU/Linux allows local users to append to arbitrary files and gain privileges via the -L (output log file) option. NOTE: this issue is only a vulnerability in limited environments, since sing is not installed setuid, and the administrator would need to override a non-setuid default during installation. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/44157 - http://www.securityfocus.com/archive/1/484591/100/200/threaded - http://www.securityfocus.com/arc
tp://osvdb.org/44157 - http://www.securityfocus.com/archive/1/484591/100/200/threaded - http://www.securityfocus.com/archive/1/484472/100/0/threaded - http://securityreason.com/securityalert/3412 - http://www.securityfocus.com/bid/26679 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38822
CVE ID: CVE-2007-6212 State: PUBLISHED Published: 2007-12-04T15:00:00 Last Updated: 2024-08-07T15:54:27.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in region.php in KML share 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the layer parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26649 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38775 - https://www.exploit-db.com/exploits/4679 - http://osvdb.org/39700
CVE ID: CVE-2007-6213 State: PUBLISHED Published: 2007-12-04T15:00:00 Last Updated: 2024-08-07T15:54:27.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in mod/chat/index.php in WebED 0.0.9 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) Root and (2) Path parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26640 - https://www.exploit-db.com/exploits/4677 - http://osvdb.org/39699
CVE ID: CVE-2007-6214 State: PUBLISHED Published: 2007-12-04T15:00:00 Last Updated: 2024-08-07T15:54:27.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in include/file_download.php in LearnLoop 2.0 beta7 allows remote attackers to read arbitrary files via a .. (dot dot) in the sFilePath parameter. NOTE: exploitation requires that the product is configured, but has zero files in the database. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26651 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38776 - https://www.exploit-db.com/exploits/4680
CVE ID: CVE-2007-6215 State: PUBLISHED Published: 2007-12-04T15:00:00 Last Updated: 2024-08-07T15:54:27.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in play.php in Web-MeetMe 3.0.3 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) roomNo and possibly the (2) bookid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38772 - https://www.exploit-db.com/exploits/4676 - http://www.securityfocus.com/bid/26641
CVE ID: CVE-2007-6216 State: PUBLISHED Published: 2007-12-04T15:00:00 Last Updated: 2024-08-07T15:54:27.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the Fibre Channel protocol (fcp) driver and Devices filesystem (devfs) in Sun Solaris 10 allows local users to cause a denial of service (system hang) via some programs that access hardware resources, as demonstrated by the (1) cfgadm and (2) format programs. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38767 - http://www.securitytracker.com/id?1019025 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200182-1 - http://sunsolve.