Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-6168 State: PUBLISHED Published: 2007-11-29T01:00:00 Last Updated: 2024-08-07T15:54:26.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the username parameter, a different vector than CVE-2007-6143. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3967 - http://www.securityfocus.com/archive/1/484019 - http://www.securityfocus.com/bid/26643 - http://secunia.com/advis
3967 - http://www.securityfocus.com/archive/1/484019 - http://www.securityfocus.com/bid/26643 - http://secunia.com/advisories/27779
CVE ID: CVE-2007-6169 State: PUBLISHED Published: 2007-11-29T01:00:00 Last Updated: 2024-08-07T15:54:26.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/index2.asp in GOUAE DWD Realty allows remote attackers to execute arbitrary SQL commands via the uname parameter, a different vector than CVE-2007-6163. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27822 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38651
CVE ID: CVE-2007-6170 State: PUBLISHED Published: 2007-11-30T01:00:00 Last Updated: 2024-08-07T15:54:26.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Call Detail Record Postgres logging engine (cdr_pgsql) in Asterisk 1.4.x before 1.4.15, 1.2.x before 1.2.25, B.x before B.2.3.4, and C.x before C.1.0-beta6 allows remote authenticated users to execute arbitrary SQL commands via (1) ANI and (2) DNIS arguments. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29782 - http://security.gentoo.org/glsa/glsa-200804-13.xml - http://secunia.com/advisories/29242 - http://secunia.com/advisories/27892 - http:
y.gentoo.org/glsa/glsa-200804-13.xml - http://secunia.com/advisories/29242 - http://secunia.com/advisories/27892 - http://www.securityfocus.com/archive/1/484388/100/0/threaded - http://downloads.digium.com/pub/security/AST-2007-026.html - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html - http://securitytracker.com/id?1019020 - http://www.securityfocus.com/bid/26647 - http://www.debian.org/security/2007/dsa-1417 - http://secunia.com/advisories/27827 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38765 - http://www.vupen.com/english/advisories/2007/4056
CVE ID: CVE-2007-6171 State: PUBLISHED Published: 2007-11-30T01:00:00 Last Updated: 2024-08-07T15:54:26.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Postgres Realtime Engine (res_config_pgsql) in Asterisk 1.4.x before 1.4.15 and C.x before C.1.0-beta6 allows remote attackers to execute arbitrary SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38933 - http://securitytracker.com/id?1019021 - http://www.securityfocus.com/archive/1/484387/100/0/threaded - http://www.vupen.com/english/advisories/2007/4055 - http://downloads.digium.com/pub/security/AST-2007-025.html - http://se
tp://www.vupen.com/english/advisories/2007/4055 - http://downloads.digium.com/pub/security/AST-2007-025.html - http://secunia.com/advisories/27873 - http://www.securityfocus.com/bid/26645 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38766
CVE ID: CVE-2007-6172 State: PUBLISHED Published: 2007-11-30T00:00:00 Last Updated: 2024-08-07T15:54:26.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) viewimage.php and (2) comments.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27843 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38680 - http://www.securityfocus.com/bid/26611 - http://www.securityfocus.com/bid/26621 - https://www.exploit-db.com/exploits/4668
CVE ID: CVE-2007-6173 State: PUBLISHED Published: 2007-11-30T00:00:00 Last Updated: 2024-08-07T15:54:26.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in c/portal/login in Liferay Enterprise Portal 4.3.1 allows remote attackers to inject arbitrary web script or HTML via the emailAddress parameter in a Send New Password action, a different vector than CVE-2007-6055. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1048 - http://secunia.com/advisories/34714 - http://www.securityfocus.com/bid/26606 - http://
om/english/advisories/2009/1048 - http://secunia.com/advisories/34714 - http://www.securityfocus.com/bid/26606 - http://www.securitytracker.com/id?1019003 - http://www.vupen.com/english/advisories/2007/4027 - http://www.securitytracker.com/id?1022063 - http://osvdb.org/38891 - http://secunia.com/advisories/27821 - http://www.securityfocus.com/archive/1/484286/100/0/threaded - http://securityreason.com/securityalert/3404
CVE ID: CVE-2007-6174 State: PUBLISHED Published: 2007-11-30T00:00:00 Last Updated: 2024-08-07T15:54:26.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPDevShell before 0.7.0 allows remote authenticated users to gain privileges via a crafted request to update a user profile. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26615 - http://secunia.com/advisories/27828 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38736 - http://www.phpdevshell.org/changelog
CVE ID: CVE-2007-6175 State: PUBLISHED Published: 2007-11-30T00:00:00 Last Updated: 2024-08-07T15:54:26.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive, a different vector than CVE-2007-5048. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/jp/JVN%2382610488/index.html - http://www.securityfocus.com/bid/26531 - http://www.vupen.com/english/advisories/2007/3960 - http://www7a.biglobe.ne.jp/~schezo/lzh_vul.html - http://secunia.com/advisories/27734 - http://osvdb.org/40583 - https://exchange.xforce.ibmcloud.com/vulnerabilities/386
http://secunia.com/advisories/27734 - http://osvdb.org/40583 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38624
CVE ID: CVE-2007-6176 State: PUBLISHED Published: 2007-11-30T00:00:00 Last Updated: 2024-08-07T15:54:26.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: kb_whois.cgi in K+B-Bestellsystem (aka KB-Bestellsystem) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) domain or (2) tld parameter in a check_owner action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26541 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38635 - http://marc.info/?l=bugtraq&m=119574911612874&w=2 - https://www.exploit-db.com/exploits/4647 - http://secunia.com/advisories/27782
CVE ID: CVE-2007-6177 State: PUBLISHED Published: 2007-11-30T00:00:00 Last Updated: 2024-08-07T15:54:27.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in Exchange/include.php in PHP_CON 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the webappcfg[APPPATH] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38915 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38679 - http://www.securityfocus.com/bid/26622 - http://secunia.com/advisories/27852 - https://www.exploit-db.com/exploits/4670
CVE ID: CVE-2007-6178 State: PUBLISHED Published: 2007-11-30T00:00:00 Last Updated: 2024-08-07T15:54:27.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Easy Hosting Control Panel for Ubuntu (EHCP) 0.22.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the confdir parameter to (1) dbutil.bck.php and (2) dbutil.php in config/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26623 - https://www.exploit-db.com/exploits/4671 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38698
CVE ID: CVE-2007-6179 State: PUBLISHED Published: 2007-11-30T00:00:00 Last Updated: 2024-08-07T15:54:27.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Charray's CMS 0.9.3 allow remote attackers to execute arbitrary PHP code via a URL in the ccms_library_path parameter to (1) markdown.php and (2) gallery.php in decoder/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38678 - https://www.exploit-db.com/exploits/4672 - http://osvdb.org/38913 - http://www.securityfocus.com/bid/26619 - http://secunia.com/advisories/27854 - http://osvdb.org/38912
CVE ID: CVE-2007-6180 State: PUBLISHED Published: 2007-11-30T00:00:00 Last Updated: 2024-08-07T15:54:27.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the Remote Procedure Call kernel module (rpcmod) in Sun Solaris 8 through 10 allows local users to cause a denial of service (NULL dereference and panic) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38718 - http://www.securityfocus.com/bid/26627 - http://www.vupen.com/english/advisories/2007/4035 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200661-1 - http://www.securitytracker.com/id?1019011 - http
5 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200661-1 - http://www.securitytracker.com/id?1019011 - http://secunia.com/advisories/28057 - http://support.avaya.com/elmodocs2/security/ASA-2007-508.htm - http://osvdb.org/40821 - http://secunia.com/advisories/27831 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103083-1
CVE ID: CVE-2007-6181 State: PUBLISHED Published: 2007-11-30T00:00:00 Last Updated: 2024-08-07T15:54:26.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in cygwin1.dll in Cygwin 1.5.7 and earlier allows context-dependent attackers to execute arbitrary code via a filename with a certain length, as demonstrated by a remote authenticated user who uses the SCP protocol to send a file to the Cygwin machine, and thereby causes scp.exe on this machine to execute, and then overwrite heap memory with characters from the filename. NOTE: it is also reported that a related issue might exist in 1.5.7 through 1.5.19. Additional Analyst Notes: - CVE Program Contain
also reported that a related issue might exist in 1.5.7 through 1.5.19. Additional Analyst Notes: - CVE Program Container: References: - http://cygwin.com/ml/cygwin-developers/2007-11/msg00026.html - http://www.securityfocus.com/archive/1/484153/100/0/threaded - http://cygwin.com/ml/cygwin-developers/2007-11/msg00024.html - http://securityreason.com/securityalert/3406 - http://www.securityfocus.com/bid/26557 - http://cygwin.com/ml/cygwin-developers/2007-11/msg00005.html
CVE ID: CVE-2007-6182 State: PUBLISHED Published: 2007-11-30T00:00:00 Last Updated: 2024-08-07T15:54:27.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: The responder program in ISPsystem ISPmanager (aka ISPmgr) 4.2.15.1 allows local users to gain privileges via shell metacharacters in command line arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26503 - http://osvdb.org/42337 - http://www.fortconsult.net/images/pdf/advisories/ispmgr_nov2007.pdf - http://ispsystem.com/en/support/changelog/ispmgr.html?all=yes - http://secunia.com/advisories/27585 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38564
CVE ID: CVE-2007-6183 State: PUBLISHED Published: 2007-11-30T00:00:00 Last Updated: 2024-08-07T15:54:27.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the mdiag_initialize function in gtk/src/rbgtkmessagedialog.c in Ruby-GNOME 2 (aka Ruby/Gnome2) 0.16.0, and SVN versions before 20071127, allows context-dependent attackers to execute arbitrary code via format string specifiers in the message parameter. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200712-09.xml - http://secunia.com/advisories/27825 - http://ruby-gnome2.svn.sourceforge.net/viewvc/ruby-gnome2/ruby-gnome2/trunk/gtk/src/rbgtkme
cunia.com/advisories/27825 - http://ruby-gnome2.svn.sourceforge.net/viewvc/ruby-gnome2/ruby-gnome2/trunk/gtk/src/rbgtkmessagedialog.c?view=log - http://secunia.com/advisories/28022 - http://www.securityfocus.com/bid/26616 - http://www.securityfocus.com/archive/1/484240/100/0/threaded - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00214.html - https://bugzilla.redhat.com/show_bug.cgi?id=402871 - http://securityreason.com/securityalert/3407 - http://www.vupen.com/english/advisories/2007/4022 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00251.html - http://secunia.com/advisories/27975 - http://bugs.gentoo.org/show_bug.cgi?id=200623 - htt
/2007-December/msg00251.html - http://secunia.com/advisories/27975 - http://bugs.gentoo.org/show_bug.cgi?id=200623 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=453689 - http://secunia.com/advisories/28060 - http://osvdb.org/40774 - http://www.debian.org/security/2007/dsa-1431 - http://em386.blogspot.com/2007/11/your-favorite-better-than-c-scripting.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:033 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38757
CVE ID: CVE-2007-6184 State: PUBLISHED Published: 2007-11-30T00:00:00 Last Updated: 2024-08-07T15:54:27.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Project Alumni 1.0.9 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the act parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4669 - http://downloads.sourceforge.net/project-alumni/security-patch-1.0.9.zip?modtime=1196251519&big_mirror=0 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38681 - http://www.securityfocus.com/bid/26612 - http://secunia.com/advisories/2782
.xforce.ibmcloud.com/vulnerabilities/38681 - http://www.securityfocus.com/bid/26612 - http://secunia.com/advisories/27820
CVE ID: CVE-2007-6185 State: PUBLISHED Published: 2007-11-30T00:00:00 Last Updated: 2024-08-07T15:54:27.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in users/files.php in Eurologon CMS allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter in a download action, as demonstrated by a certain PHP file containing database credentials. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3408 - https://www.exploit-db.com/exploits/4666 - http://osvdb.org/39685 - http://www.securityfocus.com/archive/1/484268/100/0/threaded - https://exchange.xforce.ibmcloud.com/
//osvdb.org/39685 - http://www.securityfocus.com/archive/1/484268/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/38659 - http://www.securityfocus.com/bid/26600
CVE ID: CVE-2007-6186 State: PUBLISHED Published: 2007-11-30T00:00:00 Last Updated: 2024-08-07T15:54:26.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in PHPDevShell before 0.7.0 has unknown impact and attack vectors, involving a "minor security bug in repair & optimize database." Additional Analyst Notes: - CVE Program Container: References: - http://www.phpdevshell.org/changelog - https://exchange.xforce.ibmcloud.com/vulnerabilities/38803
CVE ID: CVE-2007-6187 State: PUBLISHED Published: 2007-11-30T01:00:00 Last Updated: 2024-08-07T15:54:27.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in PHP Content Architect (aka NoAh) 0.9 pre 1.2 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the filepath parameter to (1) css_file.php, (2) js_file.php, or (3) xml_file.php in noah/modules/nosystem/templates/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39682 - http://osvdb.org/39683 - http://www.securityfocus.com/bid/26633 - http://osvdb.org/39684 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38727
//www.securityfocus.com/bid/26633 - http://osvdb.org/39684 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38727 - https://www.exploit-db.com/exploits/4675
CVE ID: CVE-2007-6188 State: PUBLISHED Published: 2007-11-30T01:00:00 Last Updated: 2024-08-07T15:54:27.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in TuMusika Evolution 1.7R5 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter to (1) languages_n.php, (2) languages_f.php, or (3) languages.php in inc/; and (4) allow remote attackers to read arbitrary local files via a .. (dot dot) in the uri parameter to frames/nogui/sc_download.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/42451 - https://exchange.xforce.ibmcloud.com/vulnerabil
t Notes: - CVE Program Container: References: - http://osvdb.org/42451 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38720 - http://osvdb.org/42450 - http://secunia.com/advisories/27866 - http://osvdb.org/42452 - http://www.securityfocus.com/bid/26631 - http://www.securityfocus.com/bid/26632 - https://www.exploit-db.com/exploits/4674 - http://osvdb.org/42453 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38719
CVE ID: CVE-2007-6189 State: PUBLISHED Published: 2007-11-30T01:00:00 Last Updated: 2024-08-07T15:54:27.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain ActiveX control in (1) OScan8.ocx and (2) Oscan81.ocx in BitDefender Online Anti-Virus Scanner 8.0 allows remote attackers to execute arbitrary code via a long argument to the InitX method that begins with a "%%" sequence, which is misinterpreted as a Unicode string and decoded twice, leading to improper memory allocation and a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1018986 - http://research.eeye.com/html/advisories/published/AD200711
ainer: References: - http://securitytracker.com/id?1018986 - http://research.eeye.com/html/advisories/published/AD20071120.html - http://securityreason.com/securityalert/3405 - http://www.vupen.com/english/advisories/2007/3935 - http://secunia.com/advisories/27717 - https://www.exploit-db.com/exploits/4663 - http://www.securityfocus.com/archive/1/483986/100/100/threaded
CVE ID: CVE-2007-6190 State: PUBLISHED Published: 2007-11-30T01:00:00 Last Updated: 2024-08-07T15:54:27.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP daemon in the Cisco Unified IP Phone, when the Extension Mobility feature is enabled, allows remote authenticated users of other phones associated with the same CUCM server to eavesdrop on the physical environment via a CiscoIPPhoneExecute message containing a URL attribute of an ExecuteItem element that specifies a Real-Time Transport Protocol (RTP) audio stream. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26668 - http://www.cisco.com/en/US/products/products_secur
ram Container: References: - http://www.securityfocus.com/bid/26668 - http://www.cisco.com/en/US/products/products_security_response09186a0080903a6d.html - http://securitytracker.com/id?1019006 - http://secunia.com/advisories/27829 - http://osvdb.org/40874 - http://www.vupen.com/english/advisories/2007/4036 - http://www.hack.lu/pres/hacklu07_Remote_wiretapping.pdf
CVE ID: CVE-2007-6191 State: PUBLISHED Published: 2007-11-30T01:00:00 Last Updated: 2024-08-07T15:54:27.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Armin Burger p.mapper 3.2.0 beta3 allow remote attackers to execute arbitrary PHP code via a URL in the _SESSION[PM_INCPHP] parameter to (1) incphp/globals.php or (2) plugins/export/mc_table.php. NOTE: it could be argued that this vulnerability is caused by a problem in PHP and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in p.mapper. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/b
lnerability in p.mapper. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26614 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38732 - http://secunia.com/advisories/27876 - http://www.packetstormsecurity.org/0711-exploits/pmapper-rfi.txt
CVE ID: CVE-2007-6192 State: PUBLISHED Published: 2007-11-30T01:00:00 Last Updated: 2024-08-07T15:54:27.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web management interface in Citrix NetScaler 8.0 build 47.8 uses weak encryption (XOR of unpadded data) to store credentials within a cookie, which makes it easier for remote attackers to obtain cleartext credentials when a cookie is captured via a known-plaintext attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/484182/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/38646 - http://securitytracker.com/id?1018991 - http://securityreason.com/
/exchange.xforce.ibmcloud.com/vulnerabilities/38646 - http://securitytracker.com/id?1018991 - http://securityreason.com/securityalert/3409
CVE ID: CVE-2007-6193 State: PUBLISHED Published: 2007-11-30T01:00:00 Last Updated: 2024-08-07T15:54:27.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web management interface in Citrix NetScaler 8.0 build 47.8 stores the device's primary IP address in a cookie, which might allow remote attackers to obtain sensitive network configuration information if this address is not the same as the address being used by the web interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/484182/100/0/threaded - http://securityreason.com/securityalert/3409
CVE ID: CVE-2007-6194 State: PUBLISHED Published: 2007-12-06T02:00:00 Last Updated: 2024-08-07T15:54:27.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Select Identity 4.01 before 4.01.012 and 4.1x before 4.13.003 allows remote attackers to obtain unspecified access via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019037 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01293337 - http://www.vupen.com/english/advisories/2007/4093 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01293337 - http://www.securityfocus.com/bid/2669
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01293337 - http://www.securityfocus.com/bid/26694 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38840 - http://secunia.com/advisories/27924 - http://osvdb.org/40143