Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-1380 State: PUBLISHED Published: 2007-03-10T00:00:00 Last Updated: 2024-08-07T12:50:35.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: The php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before 5.2.1, allows context-dependent attackers to obtain sensitive information (memory contents) via a serialized variable entry with a large length value, which triggers a buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1991 - http://secunia.com/advisories/25056 - http://www.php-security.org/MOPB/MOPB-10-2007.html - http://www.debian.org/security/2007/dsa-
nia.com/advisories/25056 - http://www.php-security.org/MOPB/MOPB-10-2007.html - http://www.debian.org/security/2007/dsa-1283 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506 - http://secunia.com/advisories/24606 - http://secunia.com/advisories/24514 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137 - http://security.gentoo.org/glsa/glsa-200703-21.xml - http://www.securityfocus.com/bid/22805 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137 - http://secunia.com/advisories/25062 - http://www.vupen.com/english/advisories/2007/2374 - http://lists.suse.com/
86137 - http://secunia.com/advisories/25062 - http://www.vupen.com/english/advisories/2007/2374 - http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html - http://secunia.com/advisories/25423 - http://www.ubuntu.com/usn/usn-455-1 - https://www.exploit-db.com/exploits/3413 - http://www.debian.org/security/2007/dsa-1282 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10792 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506 - http://secunia.com/advisories/25850 - http://secunia.com/advisories/25057 - http://www.novell.com/linux/security/advisories/2007_32_php.html - http://secunia.com/advisori
ia.com/advisories/25057 - http://www.novell.com/linux/security/advisories/2007_32_php.html - http://secunia.com/advisories/25025
CVE ID: CVE-2007-1381 State: PUBLISHED Published: 2007-03-10T00:00:00 Last Updated: 2024-08-07T12:50:35.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wddx_deserialize function in wddx.c 1.119.2.10.2.12 and 1.119.2.10.2.13 in PHP 5, as modified in CVS on 20070224 and fixed on 20070304, calls strlcpy where strlcat was intended and uses improper arguments, which allows context-dependent attackers to execute arbitrary code via a WDDX packet with a malformed overlap of a STRING element, which triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://cvs.php.net/viewvc.cgi/php-src/ext/wddx/wddx.c?revision=1.119.2.10.2.14&view=markup -
am Container: References: - http://cvs.php.net/viewvc.cgi/php-src/ext/wddx/wddx.c?revision=1.119.2.10.2.14&view=markup - http://www.php-security.org/MOPB/MOPB-09-2007.html - http://cvs.php.net/viewvc.cgi/php-src/ext/wddx/wddx.c?r1=1.119.2.10.2.13&r2=1.119.2.10.2.14 - http://www.osvdb.org/32775
CVE ID: CVE-2007-1382 State: PUBLISHED Published: 2007-03-10T00:00:00 Last Updated: 2024-08-07T12:50:35.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PHP COM extensions for PHP on Windows systems allow context-dependent attackers to execute arbitrary code via a WScript.Shell COM object, as demonstrated by using the Run method of this object to execute cmd.exe, which bypasses PHP's safe mode. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3429
CVE ID: CVE-2007-1383 State: PUBLISHED Published: 2007-03-10T00:00:00.000Z Last Updated: 2025-04-03T14:53:51.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the 16 bit variable reference counter in PHP 4 allows context-dependent attackers to execute arbitrary code by overflowing this counter, which causes the same variable to be destroyed twice, a related issue to CVE-2007-1286. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://secunia.com/advisories/25056 - http://secunia.com/advisories/24606 - http://www.php-security.org/MOPB/MOPB-01-2007.html - http://www.osvdb.org/32770 - http://security.gentoo.org/glsa/gl
6 - http://www.php-security.org/MOPB/MOPB-01-2007.html - http://www.osvdb.org/32770 - http://security.gentoo.org/glsa/glsa-200703-21.xml - http://www.novell.com/linux/security/advisories/2007_32_php.html - http://www.securityfocus.com/bid/22765
CVE ID: CVE-2007-1384 State: PUBLISHED Published: 2007-03-10T18:00:00 Last Updated: 2024-08-07T12:50:35.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.2 allows remote attackers to overwrite arbitrary files via ".." sequences in a torrent filename. Additional Analyst Notes: - CVE Program Container: References: - http://ktorrent.org/forum/viewtopic.php?t=1401 - http://www.ubuntu.com/usn/usn-436-1 - http://lists.kde.org/?l=kde-announce&m=117346514411140&w=2 - http://secunia.com/advisories/24753 - http://www.novell.com/linux/security/advisories/2007_007_suse.html - http://secunia.com/advisories/24486 - http:
24753 - http://www.novell.com/linux/security/advisories/2007_007_suse.html - http://secunia.com/advisories/24486 - http://secunia.com/advisories/24995 - http://secunia.com/advisories/25097 - http://www.vupen.com/english/advisories/2007/0913 - http://secunia.com/advisories/24459 - http://www.securityfocus.com/bid/22930 - https://launchpad.net/bugs/91174 - http://www.securitytracker.com/id?1017747 - http://security.gentoo.org/glsa/glsa-200705-01.xml - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.401332
CVE ID: CVE-2007-1385 State: PUBLISHED Published: 2007-03-10T18:00:00 Last Updated: 2024-08-07T12:50:35.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: chunkcounter.cpp in KTorrent before 2.1.2 allows remote attackers to cause a denial of service (crash) and heap corruption via a negative or large idx value. Additional Analyst Notes: - CVE Program Container: References: - http://ktorrent.org/forum/viewtopic.php?t=1401 - http://www.ubuntu.com/usn/usn-436-1 - http://lists.kde.org/?l=kde-announce&m=117346514411140&w=2 - http://secunia.com/advisories/24753 - http://www.novell.com/linux/security/advisories/2007_007_suse.html - http://secunia.com/advisories/24486 - http://secunia.c
p://www.novell.com/linux/security/advisories/2007_007_suse.html - http://secunia.com/advisories/24486 - http://secunia.com/advisories/24995 - http://secunia.com/advisories/25097 - http://www.vupen.com/english/advisories/2007/0913 - http://secunia.com/advisories/24459 - http://www.securityfocus.com/bid/22930 - https://launchpad.net/bugs/91174 - http://www.securitytracker.com/id?1017747 - http://security.gentoo.org/glsa/glsa-200705-01.xml - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.401332
CVE ID: CVE-2007-1387 State: PUBLISHED Published: 2007-03-13T19:00:00 Last Updated: 2024-08-07T12:50:35.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DirectShow loader (loader/dshow/DS_VideoDecoder.c) in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code, a different vulnerability than CVE-2007-1246. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=414072 - http://secunia.com/advisories/24462 - http://www.securityfocus.com/bid/22933 - http://www.mandriva.c
rt.cgi?bug=414072 - http://secunia.com/advisories/24462 - http://www.securityfocus.com/bid/22933 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:061 - http://secunia.com/advisories/29601 - https://usn.ubuntu.com/435-1/ - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=414072%3Bmsg=12%3Bfilename=DS_VideoDecoder.c---SVN--22205.patch%3Batt=1 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:062 - http://secunia.com/advisories/25462 - http://www.debian.org/security/2008/dsa-1536 - http://secunia.com/advisories/24444 - http://secunia.com/advisories/24443 - http://security.gentoo.org/glsa/glsa-200705-21.xml
CVE ID: CVE-2007-1388 State: PUBLISHED Published: 2007-03-10T19:00:00 Last Updated: 2024-08-07T12:50:35.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_ipv6_setsockopt function in net/ipv6/ipv6_sockglue.c in Linux kernel before 2.6.20, and possibly other versions, allows local users to cause a denial of service (oops) by calling setsockopt with the IPV6_RTHDR option name and possibly a zero option length or invalid option value, which triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-464-1 - http://www.vupen.com/english/advisories/2007/1122 - http://www.securityfocus.com/bid/23142 - http:
u.com/usn/usn-464-1 - http://www.vupen.com/english/advisories/2007/1122 - http://www.securityfocus.com/bid/23142 - http://secunia.com/advisories/24901 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:078 - https://issues.rpath.com/browse/RPL-1154 - http://secunia.com/advisories/24777 - http://lists.suse.com/archive/suse-security-announce/2007-May/0001.html - http://secunia.com/advisories/25099 - http://www.redhat.com/support/errata/RHSA-2007-0169.html - http://secunia.com/advisories/25080 - http://bugzilla.kernel.org/show_bug.cgi?id=8155 - http://secunia.com/advisories/25392 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.4 - https://oval.cisecurity.org/repository
visories/25392 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.4 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11509
CVE ID: CVE-2007-1389 State: PUBLISHED Published: 2007-03-10T22:00:00 Last Updated: 2024-08-07T12:50:35.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: dynaliens 2.0 and 2.1 allows remote attackers to bypass authentication and perform certain privileged actions via a direct request for (1) validlien.php3 (2) supprlien.php3 (3) supprub.php3 (4) validlien.php3 (5) confsuppr.php3 (6) modiflien.php3, or (7) confmodif.php3 in admin/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/462221/100/0/threaded - http://forums.avenir-geopolitique.net/viewtopic.php?t=2722 - http://www.securityfocus.com/bid/22873 - http://securityreason
p://forums.avenir-geopolitique.net/viewtopic.php?t=2722 - http://www.securityfocus.com/bid/22873 - http://securityreason.com/securityalert/2403
CVE ID: CVE-2007-1390 State: PUBLISHED Published: 2007-03-10T22:00:00 Last Updated: 2024-08-07T12:50:35.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in dynaliens 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) recherche.php3 or (2) ajouter.php3. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/462221/100/0/threaded - http://forums.avenir-geopolitique.net/viewtopic.php?t=2722 - http://securityreason.com/securityalert/2403 - http://www.securityfocus.com/bid/22874
CVE ID: CVE-2007-1391 State: PUBLISHED Published: 2007-03-10T22:00:00 Last Updated: 2024-08-07T12:50:35.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in modules/abook/foldertree.php in Leo West WEBO (aka weborganizer) 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the baseDir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/462294/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/32877 - https://www.exploit-db.com/exploits/3436 - http://www.securityfocus.com/bid/22877 - http://advisories.echo.or.id/adv/adv67-K-159-2007.txt - h
b.com/exploits/3436 - http://www.securityfocus.com/bid/22877 - http://advisories.echo.or.id/adv/adv67-K-159-2007.txt - http://www.vupen.com/english/advisories/2007/0883
CVE ID: CVE-2007-1392 State: PUBLISHED Published: 2007-03-10T22:00:00 Last Updated: 2024-08-07T12:50:35.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in down.php in netForo! 0.1g allows remote attackers to read arbitrary files via a .. (dot dot) in the file_to_download parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24449 - http://www.vupen.com/english/advisories/2007/0884 - https://www.exploit-db.com/exploits/3435 - http://www.securityfocus.com/bid/22875 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32878
CVE ID: CVE-2007-1393 State: PUBLISHED Published: 2007-03-10T22:00:00 Last Updated: 2024-08-07T12:50:35.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in mysave.php in Magic CMS 4.2.747 allows remote attackers to execute arbitrary PHP code via a URL in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24439 - https://www.exploit-db.com/exploits/3438 - http://osvdb.org/33893 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32883 - http://www.vupen.com/english/advisories/2007/0881 - http://www.securityfocus.com/bid/22162
CVE ID: CVE-2007-1394 State: PUBLISHED Published: 2007-03-10T22:00:00 Last Updated: 2024-08-07T12:50:35.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in startsession.php in Flat Chat 2.0 allows remote attackers to execute arbitrary PHP code via the Chat Name field, which is inserted into online.txt and included by users.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0871 - https://www.exploit-db.com/exploits/3428 - http://secunia.com/advisories/24433 - http://www.securityfocus.com/bid/22865 - ht
s://www.exploit-db.com/exploits/3428 - http://secunia.com/advisories/24433 - http://www.securityfocus.com/bid/22865 - http://osvdb.org/33890 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32882
CVE ID: CVE-2007-1395 State: PUBLISHED Published: 2007-03-10T22:00:00 Last Updated: 2024-08-07T12:50:35.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in index.php in phpMyAdmin 2.8.0 through 2.9.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by injecting arbitrary JavaScript or HTML in a (1) db or (2) table parameter value followed by an uppercase </SCRIPT> end tag, which bypasses the protection against lowercase </script>. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32858 - http://secunia.com/advisories/26733 - http://osvdb.org/35048 - http:
xchange.xforce.ibmcloud.com/vulnerabilities/32858 - http://secunia.com/advisories/26733 - http://osvdb.org/35048 - http://securityreason.com/securityalert/2402 - http://www.virtuax.be/advisories/Advisory2-24012007.txt - http://www.us.debian.org/security/2007/dsa-1370 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:199 - http://www.securityfocus.com/archive/1/462139/100/0/threaded
CVE ID: CVE-2007-1396 State: PUBLISHED Published: 2007-03-10T22:00:00 Last Updated: 2024-08-07T12:50:35.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: The import_request_variables function in PHP 4.0.7 through 4.4.6, and 5.x before 5.2.2, when called without a prefix, does not prevent the (1) GET, (2) POST, (3) COOKIE, (4) FILES, (5) SERVER, (6) SESSION, and other superglobals from being overwritten, which allows remote attackers to spoof source IP address and Referer data, and have other unspecified impact. NOTE: it could be argued that this is a design limitation of PHP and that only the misuse of this feature, i.e. implementation bugs in applications, should be included i
mitation of PHP and that only the misuse of this feature, i.e. implementation bugs in applications, should be included in CVE. However, it has been fixed by the vendor. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/462263/100/0/threaded - http://www.securityfocus.com/archive/1/462800/100/0/threaded - http://secunia.com/advisories/26048 - http://www.securityfocus.com/bid/22886 - http://us2.php.net/releases/4_4_7.php - http://securityreason.com/securityalert/2406 - http://www.securityfocus.com/archive/1/462457/100/0/threaded - http://www.securityfocus.com/archive/1/462658/100/0/threaded - http://us2.php.net/releases/5_2_2.php - http://l
readed - http://www.securityfocus.com/archive/1/462658/100/0/threaded - http://us2.php.net/releases/5_2_2.php - http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html
CVE ID: CVE-2007-1397 State: PUBLISHED Published: 2007-03-10T22:00:00 Last Updated: 2024-08-07T12:50:35.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the (1) ExtractRnick and (2) decrypt_topic_332 functions in FiSH allow remote attackers to execute arbitrary code via long strings. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0910 - http://securityreason.com/securityalert/8216 - http://blogs.23.nu/ilja/stories/14493/ - http://www.securityfocus.com/bid/22880 - http://secunia.com/advisories/24495 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32892
CVE ID: CVE-2007-1398 State: PUBLISHED Published: 2007-03-10T22:00:00 Last Updated: 2024-08-07T12:50:35.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: The frag3 preprocessor in Snort 2.6.1.1, 2.6.1.2, and 2.7.0 beta, when configured for inline use on Linux without the ip_conntrack module loaded, allows remote attackers to cause a denial of service (segmentation fault and application crash) via certain UDP packets produced by send_morefrag_packet and send_overlap_packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/33024 - http://www.snort.org/docs/release_notes/release_notes_2613.txt - https://www.exploit-db.com/exploits/3434 - http:/
024 - http://www.snort.org/docs/release_notes/release_notes_2613.txt - https://www.exploit-db.com/exploits/3434 - http://www.securityfocus.com/bid/22872
CVE ID: CVE-2007-1399 State: PUBLISHED Published: 2007-03-10T22:00:00 Last Updated: 2024-08-07T12:50:35.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the zip:// URL wrapper in PECL ZIP 1.8.3 and earlier, as bundled with PHP 5.2.0 and 5.2.1, allows remote attackers to execute arbitrary code via a long zip:// URL, as demonstrated by actively triggering URL access from a remote PHP interpreter via avatar upload or blog pingback. Additional Analyst Notes: - CVE Program Container: References: - http://www.php-security.org/MOPB/MOPB-16-2007.html - http://secunia.com/advisories/24514 - http://www.osvdb.org/32782 - http://www.securityfocus.com/bid/228
B-16-2007.html - http://secunia.com/advisories/24514 - http://www.osvdb.org/32782 - http://www.securityfocus.com/bid/22883 - http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html - http://www.debian.org/security/2007/dsa-1330 - http://www.vupen.com/english/advisories/2007/0898 - http://secunia.com/advisories/24471 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32889 - http://secunia.com/advisories/25938
CVE ID: CVE-2007-1400 State: PUBLISHED Published: 2007-03-10T22:00:00 Last Updated: 2024-08-07T12:50:35.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Plash permits sandboxed processes to open /dev/tty, which allows local users to escape sandbox restrictions and execute arbitrary commands by sending characters to a shell process on the same termimal via the TIOCSTI ioctl. Additional Analyst Notes: - CVE Program Container: References: - http://plash.beasts.org/wiki/PlashIssues/TtyVulnerability - http://www.securityfocus.com/bid/22892 - http://secunia.com/advisories/24498 - http://www.vupen.com/english/advisories/2007/0909 - http://www.osvdb.org/32598 - http://lists.gnu.org/ar
isories/24498 - http://www.vupen.com/english/advisories/2007/0909 - http://www.osvdb.org/32598 - http://lists.gnu.org/archive/html/plash/2007-03/msg00000.html
CVE ID: CVE-2007-1401 State: PUBLISHED Published: 2007-03-10T22:00:00 Last Updated: 2024-08-07T12:50:35.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the crack extension (CrackLib), as bundled with PHP 4.4.6 and other versions before 5.0.0, might allow local users to gain privileges via a long argument to the crack_opendict function. Additional Analyst Notes: - CVE Program Container: References: - http://retrogod.altervista.org/php_446_crack_opendict_local_bof.html - https://www.exploit-db.com/exploits/3431 - http://securityreason.com/securityalert/2405 - http://www.securityfocus.com/archive/1/462226/100/0/threaded
CVE ID: CVE-2007-1402 State: PUBLISHED Published: 2007-03-10T22:00:00 Last Updated: 2024-08-07T12:50:35.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Rediff Toolbar 2.0 ActiveX control in redifftoolbar.dll allows remote attackers to cause a denial of service via unspecified manipulations, possibly involving improper initialization or blank arguments. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.securityfocus.com/vulnerabilities/exploits/21924.html - http://osvdb.org/36899 - http://www.securityfocus.com/bid/21924
CVE ID: CVE-2007-1403 State: PUBLISHED Published: 2007-03-10T22:00:00 Last Updated: 2024-08-07T12:50:35.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in an ActiveX control in SwDir.dll 10.1.4.20 in Macromedia Shockwave allow remote attackers to cause a denial of service (Internet Explorer 7 crash) and possibly execute arbitrary code via a long (1) BGCOLOR, (2) SRC, (3) AutoStart, (4) Sound, (5) DrawLogo, or (6) DrawProgress property value, different vectors than CVE-2006-6885. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36005 - http://www.securityfocus.com/bid/22842 - https://www.exploit-db.com/expl
ntainer: References: - http://osvdb.org/36005 - http://www.securityfocus.com/bid/22842 - https://www.exploit-db.com/exploits/3421
CVE ID: CVE-2007-1404 State: PUBLISHED Published: 2007-03-10T22:00:00 Last Updated: 2024-08-07T12:50:35.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 allows remote attackers to cause a denial of service via a long UDP packet that is not properly handled in a recv_from call. NOTE: this issue might be related to CVE-2006-4948. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33919 - http://secunia.com/advisories/24452 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32886 - https://www.exploit-db.com/exploits/3432
CVE ID: CVE-2007-1405 State: PUBLISHED Published: 2007-03-10T22:00:00 Last Updated: 2024-08-07T12:59:06.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the "download wiki page as text" feature in Trac before 0.10.3.1, when Microsoft Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24470 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32897 - http://www.vupen.com/english/advisories/2007/0900 - http://www.securityfocus.com/bid/22888 - http://trac.edgewall.org/wiki/Ch
//www.vupen.com/english/advisories/2007/0900 - http://www.securityfocus.com/bid/22888 - http://trac.edgewall.org/wiki/ChangeLog