Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-4614 State: PUBLISHED Published: 2007-08-31T00:00:00 Last Updated: 2024-08-07T15:01:09.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server 9.1 does not properly handle propagation of an admin server's security policy change log to temporarily unavailable managed servers, which might allow attackers to bypass intended restrictions, a different vulnerability than CVE-2007-0426. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22082 - http://osvdb.org/45839 - http://dev2dev.bea.com/pub/advisory/216
CVE ID: CVE-2007-4615 State: PUBLISHED Published: 2007-08-31T00:00:00 Last Updated: 2024-08-07T15:01:09.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSL client implementation in BEA WebLogic Server 7.0 SP7, 8.1 SP2 through SP6, 9.0, 9.1, 9.2 Gold through MP2, and 10.0 sometimes selects the null cipher when others are available, which might allow remote attackers to intercept communications. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26539 - http://dev2dev.bea.com/pub/advisory/244 - http://www.securityfocus.com/bid/25472 - http://www.vupen.com/english/advisories/2007/3008 - http://securitytracker.com/id?1018619 - https
yfocus.com/bid/25472 - http://www.vupen.com/english/advisories/2007/3008 - http://securitytracker.com/id?1018619 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36322
CVE ID: CVE-2007-4616 State: PUBLISHED Published: 2007-08-31T00:00:00 Last Updated: 2024-08-07T15:01:09.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSL server implementation in BEA WebLogic Server 7.0 Gold through SP7, 8.1 Gold through SP6, 9.0, 9.1, 9.2 Gold through MP1, and 10.0 sometimes selects the null cipher when no other cipher is compatible between the server and client, which might allow remote attackers to intercept communications. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26539 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36320 - http://www.securityfocus.com/bid/25472 - http://securitytracker.co
/exchange.xforce.ibmcloud.com/vulnerabilities/36320 - http://www.securityfocus.com/bid/25472 - http://securitytracker.com/id?1018620 - http://www.vupen.com/english/advisories/2007/3008 - http://dev2dev.bea.com/pub/advisory/245
CVE ID: CVE-2007-4617 State: PUBLISHED Published: 2007-08-31T00:00:00 Last Updated: 2024-08-07T15:01:09.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in BEA WebLogic Server 6.1 Gold through SP7, 7.0 Gold through SP7, and 8.1 Gold through SP4 allows remote attackers to cause a denial of service (server thread hang) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26539 - http://www.vupen.com/english/advisories/2007/3008 - http://osvdb.org/38518 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36319 - http://dev2dev.bea.com/pub/advisory/246
CVE ID: CVE-2007-4618 State: PUBLISHED Published: 2007-08-31T00:00:00 Last Updated: 2024-08-07T15:01:09.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in BEA WebLogic Server 6.1 Gold through SP7 and 7.0 Gold through SP7 allows remote attackers to cause a denial of service (disk consumption) via certain malformed HTTP headers. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26539 - http://osvdb.org/38517 - http://www.securityfocus.com/bid/22082 - http://www.vupen.com/english/advisories/2007/3008 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36321 - http://dev2dev.bea.com/pub/advisory/247
CVE ID: CVE-2007-4619 State: PUBLISHED Published: 2007-10-12T21:00:00 Last Updated: 2024-08-07T15:01:09.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1, as used in Winamp before 5.5 and other products, allow user-assisted remote attackers to execute arbitrary code via a malformed FLAC file that triggers improper memory allocation, resulting in a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26042 - http://security.gentoo.org/glsa/glsa-200711-15.xml - http://secunia.com/advisories/27507 - http://secunia.com/advisori
- http://security.gentoo.org/glsa/glsa-200711-15.xml - http://secunia.com/advisories/27507 - http://secunia.com/advisories/27223 - http://www.debian.org/security/2008/dsa-1469 - http://www.ubuntu.com/usn/usn-540-1 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=608 - http://secunia.com/advisories/27210 - http://secunia.com/advisories/27601 - http://www.vupen.com/english/advisories/2007/4061 - http://bugzilla.redhat.com/show_bug.cgi?id=331991 - http://secunia.com/advisories/27780 - http://secunia.com/advisories/28548 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00035.html - http://secunia.com/advisories/27878 - http://wiki.rpath.com/wiki/Ad
edora-package-announce/2007-November/msg00035.html - http://secunia.com/advisories/27878 - http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0243 - http://secunia.com/advisories/27355 - http://secunia.com/advisories/27628 - http://secunia.com/advisories/27399 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37187 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:214 - http://securitytracker.com/id?1018815 - https://issues.rpath.com/browse/RPL-1873 - https://bugzilla.redhat.com/show_bug.cgi?id=332571 - http://www.vupen.com/english/advisories/2007/3483 - http://www.redhat.com/support/errata/RHSA-2007-0975.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aor
//www.redhat.com/support/errata/RHSA-2007-0975.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10571 - http://secunia.com/advisories/27625 - http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00008.html - http://flac.sourceforge.net/changelog.html#flac_1_2_1 - http://www.vupen.com/english/advisories/2007/3484
CVE ID: CVE-2007-4620 State: PUBLISHED Published: 2008-04-07T18:00:00 Last Updated: 2024-08-07T15:01:09.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and r8, allow remote authenticated users to execute arbitrary code via crafted RPC requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019790 - http://securityreason.com/securityalert/3799 - http://ww
iner: References: - http://www.securitytracker.com/id?1019790 - http://securityreason.com/securityalert/3799 - http://www.securitytracker.com/id?1019789 - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=173103 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41639 - http://community.ca.com/blogs/casecurityresponseblog/archive/2008/04/04/ca-alert-notification-server-multiple-vulnerabilities.aspx - http://www.vupen.com/english/advisories/2008/1103/references - http://www.securityfocus.com/archive/1/490466/100/0/threaded - http://www.securityfocus.com/bid/28605 - http://secunia.com/advisories/29665 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=
/bid/28605 - http://secunia.com/advisories/29665 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=679
CVE ID: CVE-2007-4621 State: PUBLISHED Published: 2007-11-05T16:00:00 Last Updated: 2024-08-07T15:01:09.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in crontab in IBM AIX 5.2 allows local users to gain privileges via long command line arguments. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27437 - http://www.securityfocus.com/bid/26263 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38164 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=612 - http://securitytracker.com/id?1018871 - http://www.ibm.com/support/docview.wss?uid=isg1IZ04832 - ftp://aix.software.ibm.com/aix/efixes/secu
ker.com/id?1018871 - http://www.ibm.com/support/docview.wss?uid=isg1IZ04832 - ftp://aix.software.ibm.com/aix/efixes/security/crontab_ifix.tar - http://www.vupen.com/english/advisories/2007/3669
CVE ID: CVE-2007-4622 State: PUBLISHED Published: 2007-11-05T16:00:00 Last Updated: 2024-08-07T15:01:09.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the dns_name_fromtext function in (1) libdns_nonsecure.a and (2) libdns_secure.a in IBM AIX 5.2 allows local users to gain privileges via a crafted "-y" (TSIG key) command line argument to dig. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=613 - http://www.securityfocus.com/bid/26262 - http://secunia.com/advisories/27437 - http://www.ibm.com/support/docview.wss?uid=isg1IZ05017 - https://exchange.xforce.ibmcloud.com/vuln
om/advisories/27437 - http://www.ibm.com/support/docview.wss?uid=isg1IZ05017 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38169 - http://securitytracker.com/id?1018871 - ftp://aix.software.ibm.com/aix/efixes/security/dig_ifix.tar - http://www.vupen.com/english/advisories/2007/3669
CVE ID: CVE-2007-4623 State: PUBLISHED Published: 2007-11-05T16:00:00 Last Updated: 2024-08-07T15:01:09.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the sendrmt function in bellmail in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via a long parameter to the m command. Additional Analyst Notes: - CVE Program Container: References: - ftp://aix.software.ibm.com/aix/efixes/security/bellmail_ifix.tar - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ05065 - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ05066 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4943 - https://exchange.
Z05066 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4943 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38150 - http://secunia.com/advisories/27437 - http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX53&path=%2F200710%2FSECURITY%2F20071030%2Fdatafile094529 - http://securitytracker.com/id?1018871 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=617 - http://www.securityfocus.com/bid/26257 - http://www.vupen.com/english/advisories/2007/3669
CVE ID: CVE-2007-4624 State: PUBLISHED Published: 2007-08-31T01:00:00 Last Updated: 2024-08-07T15:01:09.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in pframe.php in AbleDesign Dynamic Picture Frame 1.00 allows remote attackers to inject arbitrary web script or HTML via the img_url parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3078 - http://osvdb.org/36686 - http://secunia.com/advisories/26582 - http://www.vupen.com/english/advisories/2007/2996 - https://exchange.xforce.ibmcloud.com/vulnerabili
/advisories/26582 - http://www.vupen.com/english/advisories/2007/2996 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36294 - http://www.securityfocus.com/archive/1/477845/100/0/threaded - http://www.securityfocus.com/bid/25450
CVE ID: CVE-2007-4625 State: PUBLISHED Published: 2007-08-31T01:00:00 Last Updated: 2024-08-07T15:01:09.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: Polipo before 1.0.2 allows remote HTTP servers to cause a denial of service (daemon crash) by aborting the response to a POST request. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39911 - http://www.vupen.com/english/advisories/2007/2973 - http://secunia.com/advisories/26596 - http://www.pps.jussieu.fr/~jch/software/polipo/CHANGES.text - https://exchange.xforce.ibmcloud.com/vulnerabilities/36268
CVE ID: CVE-2007-4626 State: PUBLISHED Published: 2007-08-31T01:00:00Z Last Updated: 2024-09-17T02:41:19.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Polipo before 1.0.2 allows remote attackers to cause a denial of service (daemon crash) via certain network traffic associated with entities larger than 2 Gb. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26596 - http://www.pps.jussieu.fr/~jch/software/polipo/CHANGES.text
CVE ID: CVE-2007-4627 State: PUBLISHED Published: 2007-08-31T01:00:00 Last Updated: 2024-08-07T15:01:09.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in ABC eStore 3.0 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3037 - https://www.exploit-db.com/exploits/4338 - http://osvdb.org/38434 - http://www.securityfocus.com/bid/25476 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36313
CVE ID: CVE-2007-4628 State: PUBLISHED Published: 2007-08-31T01:00:00 Last Updated: 2024-08-07T15:01:09.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in shownews.php in phpns 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36315 - http://www.vupen.com/english/advisories/2007/3038 - http://www.securityfocus.com/bid/25479 - http://osvdb.org/38352 - https://www.exploit-db.com/exploits/4339 - http://14house.blogspot.com/2007/08/phpns-sql-injection.html
CVE ID: CVE-2007-4629 State: PUBLISHED Published: 2007-08-31T01:00:00 Last Updated: 2024-08-07T15:01:09.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the processLine function in maptemplate.c in MapServer before 4.10.3 allows attackers to cause a denial of service and possibly execute arbitrary code via a mapfile with a long layer name, group name, or metadata entry name. Additional Analyst Notes: - CVE Program Container: References: - http://trac.osgeo.org/mapserver/ticket/2252 - http://secunia.com/advisories/29688 - http://mapserver.gis.umn.edu/download/current/HISTORY.TXT/ - http://securityreason.com/securityalert/3082 - http://secunia.com/advisories/2
s.umn.edu/download/current/HISTORY.TXT/ - http://securityreason.com/securityalert/3082 - http://secunia.com/advisories/26561 - http://secunia.com/advisories/26718 - https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00096.html - http://www.vupen.com/english/advisories/2007/2974 - http://www.securityfocus.com/bid/25582 - https://bugzilla.redhat.com/show_bug.cgi?id=272081 - http://www.debian.org/security/2008/dsa-1539
CVE ID: CVE-2007-4630 State: PUBLISHED Published: 2007-08-31T01:00:00 Last Updated: 2024-08-07T15:01:09.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in xlaapmview.asp in Absolute Poll Manager XE 4.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26648 - http://www.securityfocus.com/archive/1/478152/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/36362 - http://www.securityfocus.com/bid/25492 - http://securityreason.com/securityalert/3080 - http://www.osvdb.org/36709 - http://www.
ww.securityfocus.com/bid/25492 - http://securityreason.com/securityalert/3080 - http://www.osvdb.org/36709 - http://www.securitytracker.com/id?1018634
CVE ID: CVE-2007-4631 State: PUBLISHED Published: 2007-08-31T22:00:00 Last Updated: 2024-08-07T15:01:09.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DataLoader::doStart function in dataloader.cpp in QGit 1.5.6 and other versions up to 2pre1 allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on temporary files with predictable filenames. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=268381 - http://sourceforge.net/project/shownotes.php?release_id=538002 - http://secunia.com/advisories/26745 - http://security.gentoo.org/glsa/glsa-200710-05.xml - http://www.vupen.co
=538002 - http://secunia.com/advisories/26745 - http://security.gentoo.org/glsa/glsa-200710-05.xml - http://www.vupen.com/english/advisories/2007/3107 - http://secunia.com/advisories/26738 - http://secunia.com/advisories/27098 - http://sourceforge.net/project/shownotes.php?release_id=538002&group_id=139897 - http://fedoranews.org/updates/FEDORA-2007-210.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/36503 - http://www.securityfocus.com/bid/25618 - http://bugs.gentoo.org/show_bug.cgi?id=190697
CVE ID: CVE-2007-4632 State: PUBLISHED Published: 2007-08-31T23:00:00 Last Updated: 2024-08-07T15:01:10.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2E, 12.2F, and 12.2S places a "no login" line into the VTY configuration when an administrator makes certain changes to a (1) VTY/AUX or (2) CONSOLE setting on a device without AAA enabled, which allows remote attackers to bypass authentication and obtain a terminal session, a different vulnerability than CVE-1999-0293 and CVE-2005-2105. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25482 - http://www.cisco.com/en/US/products/products_security_response09186a00808
es: - http://www.securityfocus.com/bid/25482 - http://www.cisco.com/en/US/products/products_security_response09186a00808ae4ca.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5866
CVE ID: CVE-2007-4633 State: PUBLISHED Published: 2007-08-31T23:00:00 Last Updated: 2024-08-07T15:01:10.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allow remote attackers to inject arbitrary web script or HTML via the lang variable to the (1) user or (2) admin logon page, aka CSCsi10728. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1018624 - http://www.cisco.com/en/US/products/products_security_advisory09186a00808ae327.shtm
p://securitytracker.com/id?1018624 - http://www.cisco.com/en/US/products/products_security_advisory09186a00808ae327.shtml - http://secunia.com/advisories/26641 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36325 - http://www.securityfocus.com/bid/25480 - http://www.vupen.com/english/advisories/2007/3010
CVE ID: CVE-2007-4634 State: PUBLISHED Published: 2007-08-31T23:00:00 Last Updated: 2024-08-07T15:01:09.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allow remote attackers to execute arbitrary SQL commands via the lang variable to the (1) user or (2) admin logon page, aka CSCsi64265. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1018624 - http://www.cisco.com/en/US/products/products_security_advisory09186a00808ae327.shtml - http://secunia
r.com/id?1018624 - http://www.cisco.com/en/US/products/products_security_advisory09186a00808ae327.shtml - http://secunia.com/advisories/26641 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36326 - http://www.securityfocus.com/bid/25480 - http://www.vupen.com/english/advisories/2007/3010
CVE ID: CVE-2007-4635 State: PUBLISHED Published: 2007-08-31T23:00:00Z Last Updated: 2024-09-16T16:32:44.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yahoo! Messenger 8.1.0.209 and 8.1.0.402 allows remote attackers to cause a denial of service (application crash) via certain file-transfer packets, possibly involving a buffer overflow, as demonstrated by ym8bug.exe. NOTE: this might be related to CVE-2007-4515. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25484
CVE ID: CVE-2007-4636 State: PUBLISHED Published: 2007-08-31T23:00:00 Last Updated: 2024-08-07T15:01:09.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in phpBG 0.9.1 allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter to (1) intern/admin/other/backup.php, (2) intern/admin/, (3) intern/clan/member_add.php, (4) intern/config/key_2.php, or (5) intern/config/forum.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4340 - http://www.securityfocus.com/bid/25486 - http://osvdb.org/38432 - http://osvdb.org/38433 - http://osvdb.org/38430 - http
http://www.securityfocus.com/bid/25486 - http://osvdb.org/38432 - http://osvdb.org/38433 - http://osvdb.org/38430 - http://osvdb.org/38431 - http://osvdb.org/38429 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36348
CVE ID: CVE-2007-4637 State: PUBLISHED Published: 2007-08-31T23:00:00 Last Updated: 2024-08-07T15:01:09.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: xGB.php in xGB 2.0 does not require authentication for an admin edit action, which allows remote attackers to make unspecified changes via an unknown series of steps. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4336
CVE ID: CVE-2007-4638 State: PUBLISHED Published: 2007-08-31T23:00:00 Last Updated: 2024-08-07T15:01:09.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blizzard Entertainment StarCraft Brood War 1.15.1 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed map, which triggers an out-of-bounds read during a minimap preview. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25478 - http://securityreason.com/securityalert/3086 - http://www.securityfocus.com/archive/1/478052/100/0/threaded
CVE ID: CVE-2007-4639 State: PUBLISHED Published: 2007-08-31T23:00:00 Last Updated: 2024-08-07T15:01:09.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: EnterpriseDB Advanced Server 8.2 does not properly handle certain debugging function calls that occur before a call to pldbg_create_listener, which allows remote authenticated users to cause a denial of service (daemon crash) and possibly execute arbitrary code via a SELECT statement that invokes a pldbg_ function, as demonstrated by (1) pldbg_get_stack and (2) pldbg_abort_target, which triggers use of an uninitialized pointer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archiv
nitialized pointer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/478057/100/0/threaded - http://www.securityfocus.com/bid/25481 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36328 - http://www.vupen.com/english/advisories/2007/3040 - http://secunia.com/advisories/26640