Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-1092 State: PUBLISHED Published: 2007-02-26T17:00:00 Last Updated: 2024-08-07T12:43:22.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 1.5.0.9 and 2.0.0.1, and SeaMonkey before 1.0.8 allow remote attackers to execute arbitrary code via JavaScript onUnload handlers that modify the structure of a document, wich triggers memory corruption due to the lack of a finalize hook on DOM window objects. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2007-0078.html - http://www.securitytracker.com/id?1017701 - http://secunia.com/advisories/24395 - http://secunia.com/advisories/24384 - http://secu
securitytracker.com/id?1017701 - http://secunia.com/advisories/24395 - http://secunia.com/advisories/24384 - http://secunia.com/advisories/24457 - http://secunia.com/advisories/24343 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.securityfocus.com/bid/22679 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32647 - http://archives.neohapsis.com/archives/fulldisclosure/2007-02/0525.html - http://www.kb.cert.org/vuls/id/393921 - http://secunia.com/advisories/24650 - http://www.ubuntu.com/usn/usn-428-1 - http://securityreason.com/securityalert/2302 - https://issues.rpath.com/browse/RPL-1103 - http://lists.suse.com/archive/suse-security-announ
n.com/securityalert/2302 - https://issues.rpath.com/browse/RPL-1103 - http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html - http://www.novell.com/linux/security/advisories/2007_22_mozilla.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/32648 - http://osvdb.org/32103 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.securityfocus.com/archive/1/461024/100/0/threaded - ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11158 - http://www.mozilla.org/security/announce/2007/mfsa2007-08.html - http://secunia.com
val%3Aorg.mitre.oval%3Adef%3A11158 - http://www.mozilla.org/security/announce/2007/mfsa2007-08.html - http://secunia.com/advisories/24333 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:050 - ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 - https://bugzilla.mozilla.org/show_bug.cgi?id=371321
CVE ID: CVE-2007-1093 State: PUBLISHED Published: 2007-02-26T17:00:00 Last Updated: 2024-08-07T12:43:22.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in JP1/Cm2/Network Node Manager (NNM) before 07-10-05, and before 08-00-02 in the 08-x series, allow remote attackers to execute arbitrary code, cause a denial of service, or trigger invalid Web utility behavior. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33528 - http://www.vupen.com/english/advisories/2007/0739 - http://osvdb.org/33529 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32683 - http://secunia.com/advisories/24276 - https://exchange
29 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32683 - http://secunia.com/advisories/24276 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32682 - http://www.hitachi-support.com/security_e/vuls_e/HS07-002_e/index-e.html
CVE ID: CVE-2007-1094 State: PUBLISHED Published: 2007-02-26T17:00:00 Last Updated: 2024-08-07T12:43:22.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service (NULL dereference and application crash) via JavaScript onUnload handlers that modify the structure of a document. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45248 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32647 - http://securityreason.com/securityalert/2302 - http://www.securityfocus.com/bid/22678 - http://www.securityfocus.com/archive/1/461024/100/0/threaded
CVE ID: CVE-2007-1095 State: PUBLISHED Published: 2007-02-26T17:00:00 Last Updated: 2024-08-07T12:43:22.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 do not properly implement JavaScript onUnload handlers, which allows remote attackers to run certain JavaScript code and access the location DOM hierarchy in the context of the next web site that is visited by a client. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00285.html - http://www.securityfocus.com/archive/1/482876/100/200/threaded - http://securityreason.com/securityalert
msg00285.html - http://www.securityfocus.com/archive/1/482876/100/200/threaded - http://securityreason.com/securityalert/2310 - http://lcamtuf.coredump.cx/ietrap/ff/ - http://www.vupen.com/english/advisories/2007/3587 - http://secunia.com/advisories/27414 - http://www.securityfocus.com/archive/1/482925/100/0/threaded - https://issues.rpath.com/browse/RPL-1858 - http://www.securityfocus.com/archive/1/461023/100/0/threaded - http://www.gentoo.org/security/en/glsa/glsa-200711-14.xml - http://secunia.com/advisories/27360 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://secunia.com/advisories/27298 - http://secunia.com/advisories/27315 - http://securityt
nt.jsp?objectID=c00771742 - http://secunia.com/advisories/27298 - http://secunia.com/advisories/27315 - http://securitytracker.com/id?1018837 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11665 - http://secunia.com/advisories/27327 - http://www.vupen.com/english/advisories/2007/3544 - http://secunia.com/advisories/27276 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32647 - https://usn.ubuntu.com/535-1/ - http://www.debian.org/security/2007/dsa-1401 - http://osvdb.org/33809 - http://www.debian.org/security/2007/dsa-1392 - http://www.redhat.com/support/errata/RHSA-2007-0980.html - http://secunia.com/advisories/27383 - http://www.novell.com/li
ttp://www.redhat.com/support/errata/RHSA-2007-0980.html - http://secunia.com/advisories/27383 - http://www.novell.com/linux/security/advisories/2007_57_mozilla.html - http://secunia.com/advisories/27356 - http://www.redhat.com/support/errata/RHSA-2007-0981.html - http://www.vupen.com/english/advisories/2008/0083 - http://www.mozilla.org/security/announce/2007/mfsa2007-30.html - http://secunia.com/advisories/27387 - http://www.securityfocus.com/archive/1/461007/100/0/threaded - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00498.html - http://secunia.com/advisories/27403 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32649 - http://secunia.com/advisories/273
ia.com/advisories/27403 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32649 - http://secunia.com/advisories/27336 - http://www.debian.org/security/2007/dsa-1396 - http://secunia.com/advisories/27425 - https://bugzilla.mozilla.org/show_bug.cgi?id=371360 - http://secunia.com/advisories/28398 - http://secunia.com/advisories/27311 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://secunia.com/advisories/27325 - http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202 - http://secunia.com/advisories/27665 - http://www.redhat.com/support/errata/RHSA-2007-0979.html - http://secunia.com/advisories/27335 - https://www.redhat.com/archives/fed
edhat.com/support/errata/RHSA-2007-0979.html - http://secunia.com/advisories/27335 - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.html - http://secunia.com/advisories/27480 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052630.html - http://secunia.com/advisories/27680 - http://www.securityfocus.com/bid/22688 - http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1 - http://www.securityfocus.com/archive/1/482932/100/200/threaded - http://www.ubuntu.com/usn/usn-536-1
CVE ID: CVE-2007-1096 State: PUBLISHED Published: 2007-02-26T17:00:00 Last Updated: 2024-08-07T12:43:22.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ps_cart.php in VirtueMart before 20070116 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this issue might overlap CVE-2007-0376. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0817 - http://virtuemart.svn.sourceforge.net/viewvc/%2Acheckout%2A/virtuemart/trunk/virtuemart/CHANGELOG.php?revision=692 - http://secunia.com/advisories/24399
CVE ID: CVE-2007-1097 State: PUBLISHED Published: 2007-02-26T17:00:00 Last Updated: 2024-08-07T12:43:22.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the onAttachFiles function in the upload tool (inc/lib/attachment.lib.php) in Wiclear before 0.11.1 allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors related to filename validation. NOTE: some details were obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://wiclear.free.fr/?Download - http://secunia.com/advisories/24286 - http://osvdb.org/33598 - http://www.vupen.com/english/advisories/200
r/?Download - http://secunia.com/advisories/24286 - http://osvdb.org/33598 - http://www.vupen.com/english/advisories/2007/0792 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32757
CVE ID: CVE-2007-1098 State: PUBLISHED Published: 2007-02-26T17:00:00 Last Updated: 2024-08-07T12:43:22.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in ScryMUD before 2.1.11 have unknown impact and attack vectors, possibly related to denial of service caused by a search that begins with a .* sequence. Additional Analyst Notes: - CVE Program Container: References: - http://www.wanfear.com/pipermail/scrymud/2007q1/001157.html - http://scrymud.net/downloads/Changelog-2.1.10-2.1.11.txt - http://osvdb.org/33600
CVE ID: CVE-2007-1099 State: PUBLISHED Published: 2007-02-26T17:00:00 Last Updated: 2024-08-07T12:43:22.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: dbclient in Dropbear SSH client before 0.49 does not sufficiently warn the user when it detects a hostkey mismatch, which might allow remote attackers to conduct man-in-the-middle attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22761 - http://secunia.com/advisories/24345 - http://www.osvdb.org/32088 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32762 - http://www.vupen.com/english/advisories/2007/0785 - http://matt.ucc.asn.au/dropbear/CHANGES - http://osvdb.or
es/32762 - http://www.vupen.com/english/advisories/2007/0785 - http://matt.ucc.asn.au/dropbear/CHANGES - http://osvdb.org/33814
CVE ID: CVE-2007-1100 State: PUBLISHED Published: 2007-02-26T17:00:00 Last Updated: 2024-08-07T12:43:22.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download.php in Ahmet Sacan Pickle before 20070301 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32712 - http://www.securityfocus.com/archive/1/461145/100/0/threaded - http://secunia.com/advisories/24294 - http://user.ceng.metu.edu.tr/~ahmet/Wiki/Software/pickle/pickle - http://www.vupen.com/english/advisories/2007/0748 - http://ww
user.ceng.metu.edu.tr/~ahmet/Wiki/Software/pickle/pickle - http://www.vupen.com/english/advisories/2007/0748 - http://www.securityfocus.com/bid/22703 - http://osvdb.org/33763 - http://securityreason.com/securityalert/2293
CVE ID: CVE-2007-1101 State: PUBLISHED Published: 2007-02-26T17:00:00 Last Updated: 2024-08-07T12:43:22.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Photostand 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) message ("comment") or (2) name field, or the (3) q parameter in a search action in index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22706 - http://securityreason.com/securityalert/2296 - http://www.securityfocus.com/bid/22707 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32701 - http://osvdb.org/33773 - http://www.
yfocus.com/bid/22707 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32701 - http://osvdb.org/33773 - http://www.vupen.com/english/advisories/2007/0752 - http://www.securityfocus.com/archive/1/461150/100/0/threaded - http://secunia.com/advisories/24310
CVE ID: CVE-2007-1102 State: PUBLISHED Published: 2007-02-26T17:00:00 Last Updated: 2024-08-07T12:43:22.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Photostand 1.2.0 allows remote attackers to obtain sensitive information via a ' (quote) character in (1) a PHPSESSID cookie or (2) the id parameter in an article action in index.php, which reveal the path in various error messages. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2296 - http://osvdb.org/33774 - http://www.vupen.com/english/advisories/2007/0752 - http://osvdb.org/33775 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32702 - http://www.securityfocus
07/0752 - http://osvdb.org/33775 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32702 - http://www.securityfocus.com/archive/1/461150/100/0/threaded
CVE ID: CVE-2007-1103 State: PUBLISHED Published: 2007-02-26T17:00:00 Last Updated: 2024-08-07T12:43:22.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor does not verify a node's uptime and bandwidth advertisements, which allows remote attackers who operate a low resource node to make false claims of greater resources, which places the node into use for many circuits and compromises the anonymity of traffic sources and destinations. Additional Analyst Notes: - CVE Program Container: References: - http://archives.seul.org/or/talk/Feb-2007/msg00197.html - http://archives.seul.org/or/talk/Feb-2007/msg00202.html - http://www.cs.colorado.edu/department/publications/reports/docs/
tp://archives.seul.org/or/talk/Feb-2007/msg00202.html - http://www.cs.colorado.edu/department/publications/reports/docs/CU-CS-1025-07.pdf - http://archives.seul.org/or/talk/Feb-2007/msg00200.html - http://osvdb.org/45249
CVE ID: CVE-2007-1104 State: PUBLISHED Published: 2007-02-26T17:00:00 Last Updated: 2024-08-07T12:43:22.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in top.php in PHP Module Implementation (PHP-MIP) 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the laypath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32672 - http://www.vupen.com/english/advisories/2007/0732 - http://www.securityfocus.com/bid/22714 - https://www.exploit-db.com/exploits/3374
CVE ID: CVE-2007-1105 State: PUBLISHED Published: 2007-02-26T17:00:00 Last Updated: 2024-08-07T12:43:22.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in functions.php in Extreme phpBB (aka phpBB Extreme) 3.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32685 - https://www.exploit-db.com/exploits/3370 - http://www.securityfocus.com/bid/22708 - http://www.vupen.com/english/advisories/2007/0733 - http://osvdb.org/36957
CVE ID: CVE-2007-1106 State: PUBLISHED Published: 2007-02-26T17:00:00 Last Updated: 2024-08-07T12:43:22.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/functions_nomoketos_rules.php in the NoMoKeTos Rules 0.0.1 module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3373 - http://www.vupen.com/english/advisories/2007/0735 - http://osvdb.org/37000 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32686 - http://www.securityfocus.com/bid/22713
CVE ID: CVE-2007-1107 State: PUBLISHED Published: 2007-02-26T17:00:00 Last Updated: 2024-08-07T12:43:22.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery (CPG) 1.3.x allows remote authenticated users to execute arbitrary SQL commands via a cpg131_fav cookie. NOTE: it was later reported that 1.4.10, 1.4.14, and other 1.4.x versions are also affected using similar cookies. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/461158/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/32688 - http://securityreason.com/securityalert/2297 - ht
hreaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/32688 - http://securityreason.com/securityalert/2297 - http://www.securityfocus.com/bid/22709 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39806 - https://www.exploit-db.com/exploits/3371 - https://www.exploit-db.com/exploits/4950 - http://www.securityfocus.com/bid/27372 - https://www.exploit-db.com/exploits/4961 - http://osvdb.org/33133
CVE ID: CVE-2007-1108 State: PUBLISHED Published: 2007-02-26T17:00:00 Last Updated: 2024-08-07T12:43:22.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Christian Schneider CS-Gallery 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the album parameter during a securealbum todo action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32674 - http://www.securityfocus.com/bid/22712 - http://secunia.com/advisories/24291 - https://www.exploit-db.com/exploits/3372 - http://www.vupen.com/english/advisories/2007/0734 - http://o
visories/24291 - https://www.exploit-db.com/exploits/3372 - http://www.vupen.com/english/advisories/2007/0734 - http://osvdb.org/33754
CVE ID: CVE-2007-1109 State: PUBLISHED Published: 2007-02-26T17:00:00 Last Updated: 2024-08-07T12:43:22.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Phpwebgallery 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) login or (2) mail_address field in Register.php, or the (3) search_author, (4) mode, (5) start_year, (6) end_year, or (7) date_type field in Search.php, a different vulnerability than CVE-2006-1674. NOTE: 1.6.2 and other versions might also be affected. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33762 - http://securityreason.com/securityalert
l Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33762 - http://securityreason.com/securityalert/2298 - http://www.securityfocus.com/archive/1/461160/100/0/threaded - http://secunia.com/advisories/24308 - http://www.securityfocus.com/bid/22711 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32687 - http://osvdb.org/33761
CVE ID: CVE-2007-1110 State: PUBLISHED Published: 2007-02-26T17:00:00 Last Updated: 2024-08-07T12:43:22.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in data/showcode.php in ActiveCalendar 1.2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2299 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32691 - http://www.vupen.com/english/advisories/2007/0759 - http://www.securityfocus.com/archive/1/461313/100/0/threaded - http://www.osvdb.org/33144 - http://www.securityfocus.com/archive/1/461146/
yfocus.com/archive/1/461313/100/0/threaded - http://www.osvdb.org/33144 - http://www.securityfocus.com/archive/1/461146/100/0/threaded - http://www.securityfocus.com/bid/22704
CVE ID: CVE-2007-1111 State: PUBLISHED Published: 2007-02-26T17:00:00 Last Updated: 2024-08-07T12:43:22.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the css parameter to (1) flatevents.php, (2) js.php, (3) mysqlevents.php, (4) m_2.php, (5) m_3.php, (6) m_4.php, (7) xmlevents.php, (8) y_2.php, or (9) y_3.php in data/. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/33150 - http://securityreason.com/securityalert/2299 - http://www.vupen.com/english/advisories/2007/0759 - http://www.securityfocus.co
/securityreason.com/securityalert/2299 - http://www.vupen.com/english/advisories/2007/0759 - http://www.securityfocus.com/bid/22705 - http://www.osvdb.org/33148 - http://www.osvdb.org/33147 - http://www.osvdb.org/33149 - http://www.securityfocus.com/archive/1/461313/100/0/threaded - http://www.osvdb.org/33145 - http://www.osvdb.org/33152 - http://www.osvdb.org/33151 - http://www.osvdb.org/33146 - http://www.osvdb.org/33153 - http://www.securityfocus.com/archive/1/461146/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/32690
CVE ID: CVE-2007-1112 State: PUBLISHED Published: 2007-04-06T00:00:00 Last Updated: 2024-08-07T12:43:22.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kaspersky Anti-Virus 6.0 and Internet Security 6.0 exposes unsafe methods in the (a) AXKLPROD60Lib.KAV60Info (AxKLProd60.dll) and (b) AXKLSYSINFOLib.SysInfo (AxKLSysInfo.dll) ActiveX controls, which allows remote attackers to "download" or delete arbitrary files via crafted arguments to the (1) DeleteFile, (2) StartBatchUploading, (3) StartStrBatchUploading, or (4) StartUploading methods. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1017884 - http://www.securitytracker.com/
otes: - CVE Program Container: References: - http://www.securitytracker.com/id?1017884 - http://www.securitytracker.com/id?1017885 - http://secunia.com/advisories/24778 - http://www.kaspersky.com/technews?id=203038694 - http://www.zerodayinitiative.com/advisories/ZDI-07-014.html - http://www.vupen.com/english/advisories/2007/1268 - http://www.securityfocus.com/bid/23345 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33464 - http://www.securityfocus.com/archive/1/464882/100/0/threaded
CVE ID: CVE-2007-1114 State: PUBLISHED Published: 2007-02-26T23:00:00 Last Updated: 2024-08-07T12:43:22.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: The child frames in Microsoft Internet Explorer 7 inherit the default charset from the parent window when a charset is not specified in an HTTP Content-Type header or META tag, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated using the UTF-7 character set. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22701 - http://secunia.com/advisories/24314 - http://www.securityfocus.com/archive/1/461076/100/0/threaded - http://www.hardened-php.
//secunia.com/advisories/24314 - http://www.securityfocus.com/archive/1/461076/100/0/threaded - http://www.hardened-php.net/advisory_032007.142.html - http://www.vupen.com/english/advisories/2007/0744 - http://www.osvdb.org/32119