Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ibmcloud.com/vulnerabilities/35509 - http://www.securitytracker.com/id?1018431 - http://security.gentoo.org/glsa/glsa-200708-17.xml - http://secunia.com/advisories/26138 - http://www.vupen.com/english/advisories/2007/2584 - http://secunia.com/advisories/26545 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=564 - http://www.novell.com/linux/security/advisories/2007_15_sr.html
CVE ID: CVE-2007-3930 State: PUBLISHED Published: 2007-07-21T00:00:00 Last Updated: 2024-08-07T14:37:06.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Interpretation conflict between Microsoft Internet Explorer and DocuWiki before 2007-06-26b allows remote attackers to inject arbitrary JavaScript and conduct cross-site scripting (XSS) attacks when spellchecking UTF-8 encoded messages via the spell_utf8test function in lib/exe/spellcheck.php, which triggers HTML document identification and script execution by Internet Explorer even though the Content-Type header is text/plain. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.co
ader is text/plain. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35501 - http://securityreason.com/securityalert/2908 - http://wiki.splitbrain.org/wiki%3Achanges - http://osvdb.org/38319 - http://secunia.com/advisories/26150 - http://bugs.splitbrain.org/index.php?do=details&task_id=1195 - http://www.securityfocus.com/archive/1/474144/100/0/threaded - http://www.vupen.com/english/advisories/2007/2617 - http://www.securityfocus.com/bid/24973
CVE ID: CVE-2007-3931 State: PUBLISHED Published: 2007-07-21T00:00:00 Last Updated: 2024-08-07T14:37:05.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wrap_setuid_third_party_application function in the installation script for the Samsung SCX-4200 Driver 2.00.95 adds setuid permissions to third party applications such as xsane and xscanimage, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://it.slashdot.org/it/07/07/18/0319203.shtml - http://secunia.com/advisories/26092 - http://osvdb.org/38214 - http://www.securityfocus.com/bid/24953 - http://linuxfr.org/forums/15/22562.html
CVE ID: CVE-2007-3932 State: PUBLISHED Published: 2007-07-21T00:00:00 Last Updated: 2024-08-07T14:37:05.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: uploadimg.php in the Expose RC35 and earlier (com_expose) component for Joomla! sends an error message but does not exit when it detects an attempt to upload a non-JPEG file, which allows remote attackers to upload and execute arbitrary PHP code in the img/ folder. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35488 - http://www.securityfocus.com/bid/24958 - http://osvdb.org/41262 - http://www.attrition.org/pipermail/vim/2007-July/001717.html - https://www
ocus.com/bid/24958 - http://osvdb.org/41262 - http://www.attrition.org/pipermail/vim/2007-July/001717.html - https://www.exploit-db.com/exploits/4194
CVE ID: CVE-2007-3933 State: PUBLISHED Published: 2007-07-21T00:00:00 Last Updated: 2024-08-07T14:37:05.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in insertorder.cfm in QuickEStore 8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the CFTOKEN parameter, a different vector than CVE-2006-2053. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4193 - http://osvdb.org/36358 - http://secunia.com/advisories/26097 - http://www.securityfocus.com/bid/24961 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35463
CVE ID: CVE-2007-3934 State: PUBLISHED Published: 2007-07-21T00:00:00 Last Updated: 2024-08-07T14:37:05.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in postscript/postscript.php in BBS E-Market allows remote attackers to execute arbitrary PHP code via a URL in the p_mode parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24957 - http://www.vupen.com/english/advisories/2007/2608 - https://www.exploit-db.com/exploits/4195 - http://osvdb.org/36279 - http://darkcode.ath.cx/f0rum/ind3x.php?action=vthread&forum=12&topic=80 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35476
ode.ath.cx/f0rum/ind3x.php?action=vthread&forum=12&topic=80 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35476 - http://secunia.com/advisories/26117
CVE ID: CVE-2007-3935 State: PUBLISHED Published: 2007-07-21T00:00:00 Last Updated: 2024-08-07T14:37:05.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in link_main.php in the SupaNav 1.0.0 module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36275 - http://www.vupen.com/english/advisories/2007/2575 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35485 - http://secunia.com/advisories/26127 - https://www.exploit-db.com/exploits/4197
CVE ID: CVE-2007-3936 State: PUBLISHED Published: 2007-07-21T00:00:00 Last Updated: 2024-08-07T14:37:05.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin/filebrowser.asp in A-shop 0.70 and earlier, and possibly 0.71, allows remote attackers to delete arbitrary files via unspecified filename references in the delfiles parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35483 - https://www.exploit-db.com/exploits/4198 - http://www.securityfocus.com/bid/24971 - http://secunia.com/advisories/26126
CVE ID: CVE-2007-3937 State: PUBLISHED Published: 2007-07-21T00:00:00 Last Updated: 2024-08-07T14:37:05.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in A-shop 0.70 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4198 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35484
CVE ID: CVE-2007-3938 State: PUBLISHED Published: 2007-07-21T00:00:00 Last Updated: 2024-08-07T14:37:05.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in MAXdev MDPro (MD-Pro) 1.0.8x and earlier before 20070720 allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a view action in the Topics module, a different vulnerability than CVE-2006-1676. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26113 - http://www.maxdev.com/mod-Areafiles-display-lid-557.phtml - https://www.exploit-db.com/exploits/4199 - http://www.maxdev.com/Article637.phtml - https://exchang
play-lid-557.phtml - https://www.exploit-db.com/exploits/4199 - http://www.maxdev.com/Article637.phtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/35506 - http://www.securityfocus.com/bid/24969 - http://osvdb.org/36336
CVE ID: CVE-2007-3939 State: PUBLISHED Published: 2007-07-21T00:00:00 Last Updated: 2024-08-07T14:37:05.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) CMS 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24955 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35464 - https://www.exploit-db.com/exploits/4192 - http://osvdb.org/39110
CVE ID: CVE-2007-3940 State: PUBLISHED Published: 2007-07-21T00:00:00 Last Updated: 2024-08-07T14:37:05.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in default.asp in QuickerSite 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the svalue parameter in a search action. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24948 - http://secunia.com/advisories/26094 - http://securityreason.com/securityalert/2910 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35470 - http://packetstormsecuri
ityreason.com/securityalert/2910 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35470 - http://packetstormsecurity.org/0707-advisories/quickersite-xss.txt
CVE ID: CVE-2007-3941 State: PUBLISHED Published: 2007-07-21T00:00:00 Last Updated: 2024-08-07T14:37:05.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in profile.php in Jasmine CMS 1.0_1 allows remote authenticated users to inject arbitrary web script or HTML via the profile_email parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37531 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35453 - http://secunia.com/advisories/26071 - http://www.securityfocus.com/bid/24939
CVE ID: CVE-2007-3942 State: PUBLISHED Published: 2007-07-21T00:00:00 Last Updated: 2024-08-07T14:37:05.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.1.3 allows remote attackers to include local files via unspecified vectors related to the sourcedir parameter or the actionArray hash. NOTE: CVE and multiple third parties dispute this vulnerability because both sourcedir and actionArray are defined before use Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35451 - http://www.securityfocus.com/archive/1/473866/100/0/threaded - ht
//exchange.xforce.ibmcloud.com/vulnerabilities/35451 - http://www.securityfocus.com/archive/1/473866/100/0/threaded - http://www.securityfocus.com/archive/1/480572/100/0/threaded - http://www.securityfocus.com/archive/1/473991/100/0/threaded
CVE ID: CVE-2007-3943 State: PUBLISHED Published: 2007-07-21T00:00:00 Last Updated: 2024-08-07T14:37:06.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Infinite Responder before 1.48 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35452 - http://secunia.com/advisories/26008 - http://sourceforge.net/project/shownotes.php?release_id=523684&group_id=199618 - http://www.securityfocus.com/bid/24931
CVE ID: CVE-2007-3944 State: PUBLISHED Published: 2007-07-23T16:00:00 Last Updated: 2024-08-07T14:37:05.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in the Perl Compatible Regular Expressions (PCRE) library in the JavaScript engine in WebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before 1.0.1, allow remote attackers to execute arbitrary code via certain JavaScript regular expressions. NOTE: this issue was originally reported only for MobileSafari on the iPhone. NOTE: it is not clear whether this stems from an issue in the original distribution of PCRE, which might already have a separate CVE identifier. Additional Analys
rom an issue in the original distribution of PCRE, which might already have a separate CVE identifier. Additional Analyst Notes: - CVE Program Container: References: - http://docs.info.apple.com/article.html?artnum=306173 - http://www.securityfocus.com/bid/25002 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35577 - http://www.vupen.com/english/advisories/2007/2730 - http://www.securityevaluators.com/iphone/ - http://www.securitytracker.com/id?1018439 - http://docs.info.apple.com/article.html?artnum=306174 - http://secunia.com/advisories/26287 - http://www.nytimes.com/2007/07/23/technology/23iphone.html?_r=1&adxnnl=1&adxnnlx=1185163364-1OTsRJvbylLamj17FY2wnw&oref=slogin - http://www.
om/2007/07/23/technology/23iphone.html?_r=1&adxnnl=1&adxnnlx=1185163364-1OTsRJvbylLamj17FY2wnw&oref=slogin - http://www.vupen.com/english/advisories/2007/2731 - http://www.securityevaluators.com/iphone/exploitingiphone.pdf
CVE ID: CVE-2007-3945 State: PUBLISHED Published: 2007-07-23T23:00:00 Last Updated: 2024-08-07T14:37:05.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rule Set Based Access Control (RSBAC) before 1.3.5 does not properly use the Linux Kernel Crypto API for the Linux kernel 2.6.x, which allows context-dependent attackers to bypass authentication controls via unspecified vectors, possibly involving User Management password hashing and unchecked function return codes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25001 - http://secunia.com/advisories/26147 - http://www.securityfocus.com/archive/1/474161/100/0/threaded - http://
bid/25001 - http://secunia.com/advisories/26147 - http://www.securityfocus.com/archive/1/474161/100/0/threaded - http://www.vupen.com/english/advisories/2007/2610 - http://securityreason.com/securityalert/2911 - http://download.rsbac.org/code/1.3.5/changes-1.3.5.txt
CVE ID: CVE-2007-3946 State: PUBLISHED Published: 2007-07-24T00:00:00 Last Updated: 2024-08-07T14:37:05.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_auth (http_auth.c) in lighttpd before 1.4.16 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors involving (1) a memory leak, (2) use of md5-sess without a cnonce, (3) base64 encoded strings, and (4) trailing whitespace in the Auth-Digest header. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26158 - http://osvdb.org/38314 - http://www.vupen.com/english/advisories/2007/2585 - https://issues.rpath.com/browse/RPL-1550 - http://secunia.com
8314 - http://www.vupen.com/english/advisories/2007/2585 - https://issues.rpath.com/browse/RPL-1550 - http://secunia.com/advisories/26130 - http://osvdb.org/38316 - http://www.securityfocus.com/archive/1/474131/100/0/threaded - http://www.securityfocus.com/bid/24967 - http://osvdb.org/38317 - http://secunia.com/advisories/26593 - http://www.debian.org/security/2007/dsa-1362 - http://trac.lighttpd.net/trac/changeset/1875 - http://security.gentoo.org/glsa/glsa-200708-11.xml - http://trac.lighttpd.net/trac/browser/branches/lighttpd-1.4.x/NEWS?rev=1875 - https://issues.rpath.com/browse/RPL-1554 - http://www.novell.com/linux/security/advisories/2007_15_sr.html - http://osvdb.org/38315 - http://se
m/browse/RPL-1554 - http://www.novell.com/linux/security/advisories/2007_15_sr.html - http://osvdb.org/38315 - http://secunia.com/advisories/26505
CVE ID: CVE-2007-3947 State: PUBLISHED Published: 2007-07-24T00:00:00 Last Updated: 2024-08-07T14:37:05.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: request.c in lighttpd 1.4.15 allows remote attackers to cause a denial of service (daemon crash) by sending an HTTP request with duplicate headers, as demonstrated by a request containing two Location header lines, which results in a segmentation fault. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26158 - http://trac.lighttpd.net/trac/changeset/1869 - http://osvdb.org/38313 - http://www.vupen.com/english/advisories/2007/2585 - http://secunia.com/advisories/26130 - http://www.se
svdb.org/38313 - http://www.vupen.com/english/advisories/2007/2585 - http://secunia.com/advisories/26130 - http://www.securityfocus.com/archive/1/474131/100/0/threaded - http://www.securityfocus.com/bid/24967 - http://secunia.com/advisories/26593 - http://trac.lighttpd.net/trac/ticket/1232 - http://www.debian.org/security/2007/dsa-1362 - http://security.gentoo.org/glsa/glsa-200708-11.xml - http://www.novell.com/linux/security/advisories/2007_15_sr.html - http://secunia.com/advisories/26505
CVE ID: CVE-2007-3948 State: PUBLISHED Published: 2007-07-24T00:00:00 Last Updated: 2024-08-07T14:37:05.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: connections.c in lighttpd before 1.4.16 might accept more connections than the configured maximum, which allows remote attackers to cause a denial of service (failed assertion) via a large number of connection attempts. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26158 - http://trac.lighttpd.net/trac/changeset/1873 - http://www.vupen.com/english/advisories/2007/2585 - http://secunia.com/advisories/26130 - http://www.debian.org/security/2008/dsa-1609 - http://www.securityfocus.
07/2585 - http://secunia.com/advisories/26130 - http://www.debian.org/security/2008/dsa-1609 - http://www.securityfocus.com/archive/1/474131/100/0/threaded - http://www.securityfocus.com/bid/24967 - http://security.gentoo.org/glsa/glsa-200708-11.xml - http://secunia.com/advisories/31104 - http://trac.lighttpd.net/trac/ticket/1216 - http://www.novell.com/linux/security/advisories/2007_15_sr.html - http://secunia.com/advisories/26505 - http://osvdb.org/38312
CVE ID: CVE-2007-3949 State: PUBLISHED Published: 2007-07-24T00:00:00 Last Updated: 2024-08-07T14:37:05.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_access.c in lighttpd 1.4.15 ignores trailing / (slash) characters in the URL, which allows remote attackers to bypass url.access-deny settings. Additional Analyst Notes: - CVE Program Container: References: - http://www.lighttpd.net/2007/7/24/1-4-16-let-s-ship-it - http://osvdb.org/38311 - http://secunia.com/advisories/26158 - http://www.vupen.com/english/advisories/2007/2585 - http://secunia.com/advisories/26130 - http://www.securityfocus.com/archive/1/474131/100/0/threaded - http://www.securityfocus.com/bid/24967 - http:
es/26130 - http://www.securityfocus.com/archive/1/474131/100/0/threaded - http://www.securityfocus.com/bid/24967 - http://secunia.com/advisories/26593 - http://www.debian.org/security/2007/dsa-1362 - http://security.gentoo.org/glsa/glsa-200708-11.xml - http://trac.lighttpd.net/trac/changeset/1871 - http://trac.lighttpd.net/trac/ticket/1230 - http://www.novell.com/linux/security/advisories/2007_15_sr.html - http://secunia.com/advisories/26505
CVE ID: CVE-2007-3950 State: PUBLISHED Published: 2007-07-24T00:00:00 Last Updated: 2024-08-07T14:37:05.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: lighttpd 1.4.15, when run on 32 bit platforms, allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors involving the use of incompatible format specifiers in certain debugging messages in the (1) mod_scgi, (2) mod_fastcgi, and (3) mod_webdav modules. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2909 - http://secunia.com/advisories/26158 - http://www.vupen.com/english/advisories/2007/2585 - http://secunia.com/advisories/26130 - http:
a.com/advisories/26158 - http://www.vupen.com/english/advisories/2007/2585 - http://secunia.com/advisories/26130 - http://trac.lighttpd.net/trac/changeset/1882 - http://www.securityfocus.com/archive/1/474131/100/0/threaded - http://www.securityfocus.com/bid/24967 - http://secunia.com/advisories/26593 - http://www.debian.org/security/2007/dsa-1362 - http://security.gentoo.org/glsa/glsa-200708-11.xml - http://trac.lighttpd.net/trac/ticket/1263 - http://www.novell.com/linux/security/advisories/2007_15_sr.html - http://secunia.com/advisories/26505
CVE ID: CVE-2007-3951 State: PUBLISHED Published: 2007-07-24T17:00:00 Last Updated: 2024-08-07T14:37:05.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Norman Antivirus 5.90 allow remote attackers to execute arbitrary code via a crafted (1) ACE or (2) LZH file, resulting from an "integer cast around." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37982 - http://www.securityfocus.com/bid/25003 - http://osvdb.org/37983 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35561 - http://www.vupen.com/english/advisories/2007/2619 - http://www.securityfocus.com/archive/1/474423/100/0/threaded - http://www.nruns.com
n.com/english/advisories/2007/2619 - http://www.securityfocus.com/archive/1/474423/100/0/threaded - http://www.nruns.com/security_advisory_norman_antivirus_lzh_buffer_overflow.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/35559 - http://secunia.com/advisories/26178 - http://www.nruns.com/security_advisory_Norman_all_ace_buffer_overflow.php - http://www.securityfocus.com/bid/25015 - http://www.securitytracker.com/id?1018438 - http://www.securityfocus.com/archive/1/474432/100/0/threaded - http://securityreason.com/securityalert/2912
CVE ID: CVE-2007-3952 State: PUBLISHED Published: 2007-07-24T17:00:00 Last Updated: 2024-08-07T14:37:05.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OLE2 parsing in Norman Antivirus before 5.91.02 allows remote attackers to bypass the malware detection via a crafted DOC file, resulting from an "integer cast around". Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2619 - http://www.securityfocus.com/archive/1/474428/100/0/threaded - http://securityreason.com/securityalert/2913 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35558 - http://osvdb.org/37981 - http://www.securityfocus.com/bid/25020 - http:
ange.xforce.ibmcloud.com/vulnerabilities/35558 - http://osvdb.org/37981 - http://www.securityfocus.com/bid/25020 - http://secunia.com/advisories/26178 - http://www.securitytracker.com/id?1018438 - http://www.nruns.com/security_advisory_norman_antivirus_doc_depection_bypass.php
CVE ID: CVE-2007-3953 State: PUBLISHED Published: 2007-07-24T17:00:00 Last Updated: 2024-08-07T14:37:05.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OLE2 parsing in Norman Antivirus before 5.91.02 allows remote attackers to cause a denial of service via a crafted DOC file that triggers a divide-by-zero error. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2619 - http://www.securityfocus.com/archive/1/474450/100/0/threaded - http://www.nruns.com/security_advisory_norton_antivirus_doc_divide_by_zero_dos.php - http://www.securityfocus.com/bid/25014 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35554 -
_by_zero_dos.php - http://www.securityfocus.com/bid/25014 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35554 - http://secunia.com/advisories/26178 - http://securityreason.com/securityalert/2914 - http://www.securitytracker.com/id?1018438 - http://osvdb.org/37980
CVE ID: CVE-2007-3954 State: PUBLISHED Published: 2007-07-24T17:00:00Z Last Updated: 2024-09-16T20:43:40.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with SeaMonkey installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a mailto URI, which are inserted into the command line that is created when invoking SeaMonkey.exe, a related issue to CVE-2007-3670. Additional Analyst Notes: - CVE Program Container: References: - http://larholm.com/2007/07/23/seamonkey-suite-affected-by-url-v
al Analyst Notes: - CVE Program Container: References: - http://larholm.com/2007/07/23/seamonkey-suite-affected-by-url-vulnerability/ - http://www.securityfocus.com/bid/25021