Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-5922 State: PUBLISHED Published: 2007-11-10T02:00:00 Last Updated: 2024-08-07T15:47:00.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: The modules/mdop.m in the Cypress 1.0k script for BitchX, as downloaded from a distribution site in November 2007, contains an externally introduced backdoor that e-mails sensitive information (hostnames, usernames, and shell history) to a fixed address. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/483350/100/0/threaded - http://secunia.com/advisories/27556 - http://www.securityfocus.com/bid/26372 - http://osvdb.org/42073
CVE ID: CVE-2007-5923 State: PUBLISHED Published: 2007-11-10T02:00:00 Last Updated: 2024-08-07T15:47:00.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in forms/smpwservices.fcc in CA (formerly Computer Associates) eTrust SiteMinder Agent allows remote attackers to inject arbitrary web script or HTML via the SMAUTHREASON parameter, a different vector than CVE-2005-2204. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/483367/100/0/threaded - http://www.securityfocus.com/bid/26375
CVE ID: CVE-2007-5924 State: PUBLISHED Published: 2007-11-10T02:00:00 Last Updated: 2024-08-07T15:47:00.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web Server (HTTP) task in IBM Lotus Domino before 6.5.6 FP2, and 7.x before 7.0.2 FP2, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/jp/JVN%2384565055/index.html - http://osvdb.org/39720 - http://www-1.ibm.com/support/docview.wss?uid=swg27010980 - http://www-1.ibm.com/support/docview.wss?uid=swg21263871 - http://secunia.com/advisories/27509 - http://w
=swg27010980 - http://www-1.ibm.com/support/docview.wss?uid=swg21263871 - http://secunia.com/advisories/27509 - http://www.vupen.com/english/advisories/2007/3700
CVE ID: CVE-2007-5925 State: PUBLISHED Published: 2007-11-10T02:00:00 Last Updated: 2024-08-07T15:47:00.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows remote authenticated users to cause a denial of service (database crash) via a certain CONTAINS operation on an indexed column, which triggers an assertion error. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27823 - http://www.ubuntu.com/usn/USN-1397-1 - http://security.gentoo.org/glsa/glsa-200711-25.xml - https://oval.cisecurity.org/repository/search/definiti
USN-1397-1 - http://security.gentoo.org/glsa/glsa-200711-25.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11390 - http://www.vupen.com/english/advisories/2007/3903 - http://secunia.com/advisories/27649 - http://www.securitytracker.com/id?1018978 - https://usn.ubuntu.com/559-1/ - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.428959 - http://www.debian.org/security/2007/dsa-1413 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00467.html - http://secunia.com/advisories/28040 - http://www.redhat.com/support/errata/RHSA-2007-1157.html - http://secunia.com/advisories/28099 - http:/
visories/28040 - http://www.redhat.com/support/errata/RHSA-2007-1157.html - http://secunia.com/advisories/28099 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-November/067350.html - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00475.html - http://www.securityfocus.com/bid/26353 - http://www.redhat.com/support/errata/RHSA-2007-1155.html - http://bugs.gentoo.org/show_bug.cgi?id=198988 - http://secunia.com/advisories/28108 - http://secunia.com/advisories/28025 - http://secunia.com/advisories/28838 - http://secunia.com/advisories/28128 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:243 - http://lists.opensuse.org/opensuse-security-announce/20
ttp://www.mandriva.com/security/advisories?name=MDKSA-2007:243 - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html - http://bugs.mysql.com/bug.php?id=32125 - http://secunia.com/advisories/27568 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38284
CVE ID: CVE-2007-5926 State: PUBLISHED Published: 2007-11-10T02:00:00 Last Updated: 2024-08-07T15:47:00.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenBase 10.0.5 and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in arguments to the (1) AsciiBackup, (2) OEMLicenseInstall, and possibly other stored procedures. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26347 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38291 - http://www.netragard.com/pdfs/research/NETRAGARD-20070313-OPENBASE.txt - http://secunia.com/advisories/27525
CVE ID: CVE-2007-5927 State: PUBLISHED Published: 2007-11-10T02:00:00.000Z Last Updated: 2025-04-03T14:12:09.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in OpenBase 10.0.5 and earlier allows remote authenticated users to create files with arbitrary contents via a .. (dot dot) in the first argument to the GlobalLog stored procedure. NOTE: this can be leveraged to execute arbitrary code using CVE-2007-5926. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/26347 - http://www.netragard.com/pdfs/research/NETRAGARD-20070313-OPENBASE.txt - http://secunia.com/advisories/275
m/bid/26347 - http://www.netragard.com/pdfs/research/NETRAGARD-20070313-OPENBASE.txt - http://secunia.com/advisories/27525
CVE ID: CVE-2007-5928 State: PUBLISHED Published: 2007-11-10T02:00:00.000Z Last Updated: 2025-04-03T14:09:28.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenBase 10.0.5 and earlier allows remote authenticated users to trigger a free of an arbitrary memory location via long strings in a SELECT statement. NOTE: this might be a buffer overflow, but it is not clear. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.netragard.com/pdfs/research/NETRAGARD-20070313-OPENBASE.txt
CVE ID: CVE-2007-5929 State: PUBLISHED Published: 2007-11-10T02:00:00 Last Updated: 2024-08-07T15:47:00.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in OpenBase 10.0.5 and earlier might allow remote authenticated users to execute arbitrary code or cause a denial of service (daemon crash) by creating a stored procedure with a long name and invoking this procedure, which triggers heap corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26347 - http://www.netragard.com/pdfs/research/NETRAGARD-20070313-OPENBASE.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/38289 - http://secunia.com/advisori
TRAGARD-20070313-OPENBASE.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/38289 - http://secunia.com/advisories/27525
CVE ID: CVE-2007-5930 State: PUBLISHED Published: 2007-11-10T11:00:00 Last Updated: 2024-08-07T15:47:00.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web interface in Cerberus FTP Server before 2.46 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26381 - http://osvdb.org/38789 - http://secunia.com/advisories/27569 - http://www.vupen.com/english/advisories/2007/3805 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38320 - http://www.cerberusftp.com/cerberus-releasenotes.htm#ReleaseNotes
CVE ID: CVE-2007-5931 State: PUBLISHED Published: 2007-11-10T11:00:00 Last Updated: 2024-08-07T15:47:00.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: The reDirect function in lib/controllers/RepViewController.php in OrangeHRM before 2.2.2 does not verify the privileges of a user, which allows remote attackers to obtain access to data via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26351 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38245 - http://sourceforge.net/project/shownote
cus.com/bid/26351 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38245 - http://sourceforge.net/project/shownotes.php?release_id=550550&group_id=156477 - http://www.vupen.com/english/advisories/2007/3719 - http://osvdb.org/45295
CVE ID: CVE-2007-5932 State: PUBLISHED Published: 2007-11-10T11:00:00 Last Updated: 2024-08-07T15:47:00.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Fatwire Content Server (CS) CMS 6.3.0 allow remote attackers to inject arbitrary web script or HTML via unspecified form fields related to the (1) search function, (2) advanced search function, and possibly other components. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38704 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38305 - http://secunia.com/advisories/27663 - http://www.securityfocus.com/bid/26472 - http://www.portcullis-
rabilities/38305 - http://secunia.com/advisories/27663 - http://www.securityfocus.com/bid/26472 - http://www.portcullis-security.com/223.php - http://osvdb.org/38703 - http://www.vupen.com/english/advisories/2007/3910
CVE ID: CVE-2007-5933 State: PUBLISHED Published: 2007-11-13T20:00:00 Last Updated: 2024-08-07T15:47:00.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pioneers (formerly gnocatan) before 0.11.3 allows remote attackers to cause a denial of service (crash) by triggering a delete operation while the Session object is still being used, as demonstrated by causing a "Broken pipe" error. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200711-20.xml - http://secunia.com/advisories/27522 - http://secunia.com/advisories/27646 - http://www.securityfocus.com/bid/26391 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=449541 - http:/
sories/27646 - http://www.securityfocus.com/bid/26391 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=449541 - http://sourceforge.net/tracker/index.php?func=detail&aid=1791176&group_id=5095&atid=305095 - http://securitytracker.com/id?1019024 - http://bugs.gentoo.org/show_bug.cgi?id=198807
CVE ID: CVE-2007-5934 State: PUBLISHED Published: 2007-11-13T22:00:00 Last Updated: 2024-08-07T15:47:00.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LOB functionality in PEAR MDB2 before 2.5.0a1 interprets a request to store a URL string as a request to retrieve and store the contents of the URL, which might allow remote attackers to use MDB2 as an indirect proxy or obtain sensitive information via a URL into a form field in an MDB2 application, as demonstrated by a file:// URL or a URL for an intranet web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26382 - http://bugs.gentoo.org/show_bug.cgi?id=198446 - http:
Container: References: - http://www.securityfocus.com/bid/26382 - http://bugs.gentoo.org/show_bug.cgi?id=198446 - http://pear.php.net/package/MDB2/download/2.5.0a1 - http://osvdb.org/42107 - http://security.gentoo.org/glsa/glsa-200712-05.xml - http://pear.php.net/bugs/bug.php?id=10024 - http://secunia.com/advisories/27983 - http://secunia.com/advisories/27626 - http://marc.info/?l=pear-cvs&m=117823082829114&w=2 - http://secunia.com/advisories/27572 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00434.html - http://www.vupen.com/english/advisories/2007/3806
CVE ID: CVE-2007-5935 State: PUBLISHED Published: 2007-11-13T22:00:00 Last Updated: 2024-08-07T15:47:00.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary code via a DVI file with a long href tag. Additional Analyst Notes: - CVE Program Container: References: - https://issues.rpath.com/browse/RPL-1928 - http://secunia.com/advisories/27672 - http://secunia.com/advisories/27743 - http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html - http://secunia.com/advisories/28412 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=447081
ce/2008-05/msg00000.html - http://secunia.com/advisories/28412 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=447081 - http://secunia.com/advisories/27686 - https://usn.ubuntu.com/554-1/ - http://www.securityfocus.com/bid/26469 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11311 - http://security.gentoo.org/glsa/glsa-200805-13.xml - http://security.gentoo.org/glsa/glsa-200711-26.xml - http://bugs.gentoo.org/show_bug.cgi?id=198238 - http://secunia.com/advisories/30168 - https://bugzilla.redhat.com/show_bug.cgi?id=368591 - http://www.vupen.com/english/advisories/2007/3896 - http://secunia.com/advisories/27718 - http://security.gentoo.org/glsa/glsa
/www.vupen.com/english/advisories/2007/3896 - http://secunia.com/advisories/27718 - http://security.gentoo.org/glsa/glsa-200711-34.xml - http://secunia.com/advisories/27967 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0266 - http://www.securitytracker.com/id?1019058 - http://secunia.com/advisories/28107 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:230 - http://www.securityfocus.com/archive/1/487984/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
CVE ID: CVE-2007-5936 State: PUBLISHED Published: 2007-11-13T22:00:00 Last Updated: 2024-08-07T15:47:00.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/attachment.cgi?id=135423 - https://issues.rpath.com/browse/RPL-1928 - http://secunia.com/advisories/27672 - http://secunia.com/advisories/27743 - http://lists.opensuse.org/opensuse-security-announce/2008-05/
m/advisories/27672 - http://secunia.com/advisories/27743 - http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html - http://secunia.com/advisories/28412 - http://secunia.com/advisories/27686 - https://usn.ubuntu.com/554-1/ - http://osvdb.org/42238 - http://www.securityfocus.com/bid/26469 - http://security.gentoo.org/glsa/glsa-200805-13.xml - http://security.gentoo.org/glsa/glsa-200711-26.xml - http://bugs.gentoo.org/show_bug.cgi?id=198238 - http://secunia.com/advisories/30168 - http://www.vupen.com/english/advisories/2007/3896 - http://secunia.com/advisories/27718 - https://bugzilla.redhat.com/show_bug.cgi?id=368611 - http://security.gentoo.org/glsa/glsa-200711-34.xml - ht
ies/27718 - https://bugzilla.redhat.com/show_bug.cgi?id=368611 - http://security.gentoo.org/glsa/glsa-200711-34.xml - http://secunia.com/advisories/27967 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0266 - http://www.securitytracker.com/id?1019058 - http://secunia.com/advisories/28107 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:230 - http://www.securityfocus.com/archive/1/487984/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
CVE ID: CVE-2007-5937 State: PUBLISHED Published: 2007-11-13T22:00:00 Last Updated: 2024-08-07T15:47:00.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitrary code via a crafted DVI input file. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/attachment.cgi?id=135423 - https://issues.rpath.com/browse/RPL-1928 - http://secunia.com/advisories/27672 - http://secunia.com/advisories/27743 - http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html - http://secunia.com/advisories/28412 - http:
http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html - http://secunia.com/advisories/28412 - http://secunia.com/advisories/27686 - https://usn.ubuntu.com/554-1/ - http://www.securityfocus.com/bid/26469 - http://security.gentoo.org/glsa/glsa-200805-13.xml - http://security.gentoo.org/glsa/glsa-200711-26.xml - http://bugs.gentoo.org/show_bug.cgi?id=198238 - http://secunia.com/advisories/30168 - http://www.vupen.com/english/advisories/2007/3896 - http://secunia.com/advisories/27718 - http://security.gentoo.org/glsa/glsa-200711-34.xml - https://bugzilla.redhat.com/show_bug.cgi?id=368641 - http://secunia.com/advisories/27967 - https://www.redhat.com/archives/fedora-package-a
dhat.com/show_bug.cgi?id=368641 - http://secunia.com/advisories/27967 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0266 - http://www.securitytracker.com/id?1019058 - http://secunia.com/advisories/28107 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:230 - http://www.securityfocus.com/archive/1/487984/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
CVE ID: CVE-2007-5938 State: PUBLISHED Published: 2007-12-06T15:00:00 Last Updated: 2024-08-07T15:47:00.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iwl_set_rate function in compatible/iwl3945-base.c in iwlwifi 1.1.21 and earlier dereferences an iwl_get_hw_mode return value without checking for NULL, which might allow remote attackers to cause a denial of service (kernel panic) via unspecified vectors during module initialization. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=199209 - http://www.redhat.com/support/errata/RHSA-2008-0154.html - http://osvdb.org/44749 - http://www.vupen.com/english/advisories/2007/
w.redhat.com/support/errata/RHSA-2008-0154.html - http://osvdb.org/44749 - http://www.vupen.com/english/advisories/2007/4211 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10787 - http://secunia.com/advisories/29236 - http://www.securityfocus.com/bid/26842 - http://article.gmane.org/gmane.linux.drivers.ipw3945.devel/1618 - http://www.intellinuxwireless.org/repos/?p=iwlwifi.git%3Ba=commitdiff%3Bh=25db44d4cdfe31d59223d74cb577f4a71aff1a40
CVE ID: CVE-2007-5939 State: PUBLISHED Published: 2007-12-06T15:00:00 Last Updated: 2024-08-07T15:47:00.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gss_userok function in appl/ftp/ftpd/gss_userok.c in Heimdal 0.7.2 does not allocate memory for the ticketfile pointer before calling free, which allows remote attackers to have an unknown impact via an invalid username. NOTE: the vulnerability was originally reported for ftpd.c, but this is incorrect. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019057 - http://osvdb.org/44750 - http://www.securityfocus.com/bid/26758 - http://bugs.gentoo.org/show_bug.cgi?id=199207 - http:
http://osvdb.org/44750 - http://www.securityfocus.com/bid/26758 - http://bugs.gentoo.org/show_bug.cgi?id=199207 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:239 - http://marc.info/?l=full-disclosure&m=119704362903699&w=2
CVE ID: CVE-2007-5940 State: PUBLISHED Published: 2007-11-13T23:00:00 Last Updated: 2024-08-07T15:47:00.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: feynmf.pl in feynmf 1.08, as used in TeXLive 2007, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the feynmf$$.pl temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=198231 - http://secunia.com/advisories/27739 - http://security.gentoo.org/glsa/glsa-200711-32.xml - http://osvdb.org/42397 - http://secunia.com/advisories/27737 - http://www.vupen.com/english/advisories/2007/3974 - http://www.securityfocus.com/bi
ttp://secunia.com/advisories/27737 - http://www.vupen.com/english/advisories/2007/3974 - http://www.securityfocus.com/bid/26507
CVE ID: CVE-2007-5941 State: PUBLISHED Published: 2007-11-14T01:00:00 Last Updated: 2024-08-07T15:47:00.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the SWCtl.SWCtl ActiveX control in Adobe Shockwave allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument to the ShockwaveVersion method. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4613 - http://www.securityfocus.com/bid/26388 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38359
CVE ID: CVE-2007-5942 State: PUBLISHED Published: 2007-11-14T01:00:00 Last Updated: 2024-08-07T15:47:00.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bandersnatch 0.4 allows remote attackers to obtain sensitive information via a malformed request for index.php with (1) a certain func parameter value; or (2) certain func, jid, page, and limit parameter values; which reveals the path in various error messages. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38308 - http://www.portcullis-security.com/175.php
CVE ID: CVE-2007-5943 State: PUBLISHED Published: 2007-11-14T01:00:00 Last Updated: 2024-08-07T15:47:00.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Machines Forum (SMF) 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show results as messages" option, then searching for possible keywords contained in that message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26508 - http://www.securityfocus.com/archive/1/483437/100/0/threaded
CVE ID: CVE-2007-5944 State: PUBLISHED Published: 2007-11-14T01:00:00 Last Updated: 2024-08-07T15:47:00.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Servlet Engine / Web Container in IBM WebSphere Application Server (WAS) 5.1.1.4 through 5.1.1.16 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header. NOTE: this might be the same issue as CVE-2006-3918, but there are insufficient details to be sure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26457 - http://www-1.ibm.com/support/docview.wss?uid=swg24017314 - http://secunia.com/advisories/2767
urityfocus.com/bid/26457 - http://www-1.ibm.com/support/docview.wss?uid=swg24017314 - http://secunia.com/advisories/27674 - http://www.vupen.com/english/advisories/2007/3680 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK51068 - http://osvdb.org/38700 - http://www.securitytracker.com/id?1018963
CVE ID: CVE-2007-5945 State: PUBLISHED Published: 2007-11-14T01:00:00 Last Updated: 2024-08-07T15:47:00.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: USVN before 0.6.5 allows remote attackers to obtain a list of repository contents via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38365 - http://forum.usvn.info/viewtopic.php?f=4&t=320 - http://osvdb.org/39862 - http://www.usvn.info/news/ - http://www.securityfocus.com/bid/26384 - http://secunia.com/advisories/27521