Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-6137 State: PUBLISHED Published: 2007-11-27T19:00:00 Last Updated: 2024-08-07T15:54:26.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php in Content Injector 1.52 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3994 - http://www.securityfocus.com/bid/26547 - https://www.exploit-db.com/exploits/4645 - http://secunia.com/advisories/27792 - http://osvdb.org/38801 - https://exchange.xforce.ibmcloud.com/v
om/exploits/4645 - http://secunia.com/advisories/27792 - http://osvdb.org/38801 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38627
CVE ID: CVE-2007-6138 State: PUBLISHED Published: 2007-11-27T19:00:00 Last Updated: 2024-08-07T15:54:26.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in redir.asp in VU Mass Mailer allows remote attackers to execute arbitrary SQL commands via the password parameter to Default.asp (aka the Login Page). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26522 - http://osvdb.org/38807 - http://www.securityfocus.com/archive/1/484021/100/0/threaded - http://secunia.com/advisories/27758 - http://www.vupen.com/english/advisories/2007/396
archive/1/484021/100/0/threaded - http://secunia.com/advisories/27758 - http://www.vupen.com/english/advisories/2007/3966 - http://aria-security.net/forum/showthread.php?t=447
CVE ID: CVE-2007-6139 State: PUBLISHED Published: 2007-11-27T19:00:00 Last Updated: 2024-08-07T15:54:26.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Mp3 ToolBox 1.0 beta 5 allows remote attackers to execute arbitrary PHP code via a URL in the skin_file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/484121/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/38598 - https://www.exploit-db.com/exploits/4650 - http://www.vupen.com/english/advisories/2007/3997
CVE ID: CVE-2007-6140 State: PUBLISHED Published: 2007-11-27T19:00:00 Last Updated: 2024-08-07T15:54:27.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Dora Emlak 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) emlak_detay.asp and (b) haber_detay.asp, the (2) kategori parameter to (c) kategorisirala.asp, and the (3) tip parameter to (d) tipsirala.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26574 - http://secunia.com/advisories/27812 - http://osvdb.org/38820 - http://osvdb.org/38821 - http://osvdb.org/38822 - http://www.packetstormse
m/advisories/27812 - http://osvdb.org/38820 - http://osvdb.org/38821 - http://osvdb.org/38822 - http://www.packetstormsecurity.org/0711-exploits/dora-sql.txt - http://www.vupen.com/english/advisories/2007/4000 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38634
CVE ID: CVE-2007-6141 State: PUBLISHED Published: 2007-11-27T19:00:00 Last Updated: 2024-08-07T15:54:26.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in vBTube.php in vBTube 1.1 Beta allows remote attackers to inject arbitrary web script or HTML via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26566 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38672 - http://secunia.com/advisories/27814 - http://www.securityfocus.com/archive/1/484155/100/0/threaded
CVE ID: CVE-2007-6142 State: PUBLISHED Published: 2007-11-27T19:00:00 Last Updated: 2024-08-07T15:54:27.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ph03y3nk just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to inject arbitrary web script or HTML via the (1) show parameter to index.php and the (2) print parameter to print.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26581 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38637 - h
r: References: - http://www.securityfocus.com/bid/26581 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38637 - http://secunia.com/advisories/27807
CVE ID: CVE-2007-6143 State: PUBLISHED Published: 2007-11-27T19:00:00 Last Updated: 2024-08-07T15:54:26.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp (aka the Login Page) in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the password parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3967 - http://aria-security.net/forum/showthread.php?t=448 - http://secunia.com/advisories/27779 - http://www.securityfocus.com/archive/1/484019/100/0/threaded - http://www.securityfocus.com/bid/26523
CVE ID: CVE-2007-6144 State: PUBLISHED Published: 2007-11-27T19:00:00 Last Updated: 2024-08-07T15:54:26.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the PPlayer.XPPlayer.1 ActiveX control in pplayer.dll_1_work in Xunlei Thunder 5.7.4.401 allows remote attackers to execute arbitrary code via a long string in a FlvPlayerUrl property value. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.nohack.cn/hacknews/20071119/1916.html - http://www.vupen.com/english/advisories/2007/3982 - http://osvdb.org/39680 - http://www.securityfocus.com/bid/26536 - http:/
://www.vupen.com/english/advisories/2007/3982 - http://osvdb.org/39680 - http://www.securityfocus.com/bid/26536 - http://www.sebug.net/exploit/2575 - http://secunia.com/advisories/27795
CVE ID: CVE-2007-6145 State: PUBLISHED Published: 2007-11-27T19:00:00 Last Updated: 2024-08-07T15:54:26.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Hitachi JP1/File Transmission Server/FTP 01-00 through 08-10-01 allows remote attackers to bypass authentication and "view files" via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38610 - http://secunia.com/advisories/27735 - http://www.vupen.com/english/advisories/2007/3957 - http://osvdb.org/42353 - http://www.hitachi-support.com/security_e/vuls_e/HS07-037_e/index-e.html - http://www.securityfocus.com/bid
.org/42353 - http://www.hitachi-support.com/security_e/vuls_e/HS07-037_e/index-e.html - http://www.securityfocus.com/bid/26530
CVE ID: CVE-2007-6146 State: PUBLISHED Published: 2007-11-27T19:00:00 Last Updated: 2024-08-07T15:54:26.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hitachi JP1/File Transmission Server/FTP 01-00 through 08-10-02 on Windows might allow remote attackers to cause a denial of service (service stop) via a "specific file" argument to an FTP command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26542 - http://secunia.com/advisories/27735 - http://www.vupen.com/english/advisories/2007/3957 - http://osvdb.org/42354 - http://www.hitachi-support.com/security_e/vuls_e/HS07-038_e/index-e.html
CVE ID: CVE-2007-6147 State: PUBLISHED Published: 2007-11-27T19:00:00 Last Updated: 2024-08-07T15:54:26.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in IAPR COMMENCE 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the (a) php_root_path and sometimes the (b) privilege_root_path parameter to various PHP scripts under (1) admin/includes/, (2) admin/phase/, (3) includes/, (4) includes/page_includes/, (5) reviewer/includes/, (6) reviewer/phase/, and (7) user/phase/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4659 - http://secunia.com/advisories/2778
es: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4659 - http://secunia.com/advisories/27788 - http://www.securityfocus.com/bid/26570 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38641
CVE ID: CVE-2007-6148 State: PUBLISHED Published: 2008-02-13T20:00:00 Last Updated: 2024-08-07T15:54:26.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the Edge server in Adobe Flash Media Server 2 before 2.0.5, and Connect Enterprise Server 6 before SP3, allows remote attackers to execute arbitrary code via an unspecified sequence of Real Time Message Protocol (RTMP) requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb08-04.html - http://www.vupen.com/english/advisories/2008/0539 - http://secunia.com/advisories/28947 - http://www.securitytracker.com/id?1019398 - http://
english/advisories/2008/0539 - http://secunia.com/advisories/28947 - http://www.securitytracker.com/id?1019398 - http://www.securityfocus.com/bid/27762 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=663 - http://www.vupen.com/english/advisories/2008/0538/references - http://secunia.com/advisories/28946 - http://www.adobe.com/support/security/bulletins/apsb08-03.html
CVE ID: CVE-2007-6149 State: PUBLISHED Published: 2008-02-13T20:00:00 Last Updated: 2024-08-07T15:54:26.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the Edge server in Adobe Flash Media Server 2 before 2.0.5, and Connect Enterprise Server 6 before SP3, allow remote attackers to execute arbitrary code via a Real Time Message Protocol (RTMP) message with a crafted integer field that is used for allocation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019399 - http://www.adobe.com/support/security/bulletins/apsb08-04.html - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=
be.com/support/security/bulletins/apsb08-04.html - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=662 - http://www.vupen.com/english/advisories/2008/0539 - http://secunia.com/advisories/28947 - http://www.securityfocus.com/bid/27762 - http://www.vupen.com/english/advisories/2008/0538/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/40471 - http://secunia.com/advisories/28946 - http://www.adobe.com/support/security/bulletins/apsb08-03.html
CVE ID: CVE-2007-6150 State: PUBLISHED Published: 2007-11-30T01:00:00 Last Updated: 2024-08-07T15:54:26.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "internal state tracking" code for the random and urandom devices in FreeBSD 5.5, 6.1 through 6.3, and 7.0 beta 4 allows local users to obtain portions of previously-accessed random values, which could be leveraged to bypass protection mechanisms that rely on secrecy of those values. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26642 - http://security.FreeBSD.org/advisories/FreeBSD-SA-07:09.random.asc - http://www.securitytracker.com/id?1019022 - https://exchange.xforce.
reeBSD.org/advisories/FreeBSD-SA-07:09.random.asc - http://www.securitytracker.com/id?1019022 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38764 - http://secunia.com/advisories/27879 - http://osvdb.org/39600 - http://www.vupen.com/english/advisories/2007/4053
CVE ID: CVE-2007-6151 State: PUBLISHED Published: 2007-12-15T01:00:00 Last Updated: 2024-08-07T15:54:27.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: The isdn_ioctl function in isdn_common.c in Linux kernel 2.6.23 allows local users to cause a denial of service via a crafted ioctl struct in which iocts is not null terminated, which triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30962 - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html - http://www.securityfocus.com/bid/27497 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=eafe1aa37e6ec2d
ocus.com/bid/27497 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=eafe1aa37e6ec2d56f14732b5240c4dd09f0613a - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00005.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10971 - http://secunia.com/advisories/28706 - http://secunia.com/advisories/28626 - http://www.debian.org/security/2008/dsa-1479 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:112 - http://www.debian.org/security/2008/dsa-1504 - http://secunia.com/advisories/28889 - http://secunia.com/advisories/30110 - http://www.vupen.com/english/advisories/2008/2222/references - http:
ories/28889 - http://secunia.com/advisories/30110 - http://www.vupen.com/english/advisories/2008/2222/references - http://secunia.com/advisories/33280 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:086 - http://www.debian.org/security/2008/dsa-1503 - http://secunia.com/advisories/28748 - http://www.ubuntu.com/usn/usn-574-1 - http://secunia.com/advisories/29058 - http://www.redhat.com/support/errata/RHSA-2008-0211.html - http://secunia.com/advisories/28971 - http://www.redhat.com/support/errata/RHSA-2008-0787.html - http://lists.vmware.com/pipermail/security-announce/2008/000023.html - http://www.ubuntu.com/usn/usn-578-1 - http://secunia.com/advisories/31246 - http://secunia.co
nnounce/2008/000023.html - http://www.ubuntu.com/usn/usn-578-1 - http://secunia.com/advisories/31246 - http://secunia.com/advisories/29570 - http://rhn.redhat.com/errata/RHSA-2008-0055.html - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html
CVE ID: CVE-2007-6156 State: PUBLISHED Published: 2007-11-29T01:00:00 Last Updated: 2024-08-07T15:54:26.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in base_qry_main.php in Base Analysis and Security Engine (BASE) before 1.3.9 allow remote attackers to inject arbitrary web script or HTML via the (1) sig[0] and (2) sig[1] parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26596 - http://sourceforge.net/project/shownotes.php?group_id=103348&release_id=555614 - http://secunia.com/advisories/27834 - http://www.osvdb.org/38792 - http://www.vupen.com/english/advisories/
_id=555614 - http://secunia.com/advisories/27834 - http://www.osvdb.org/38792 - http://www.vupen.com/english/advisories/2007/4021 - http://sourceforge.net/tracker/index.php?func=detail&aid=1801192&group_id=103348&atid=635582
CVE ID: CVE-2007-6157 State: PUBLISHED Published: 2007-11-29T01:00:00 Last Updated: 2024-08-07T15:54:26.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in SimpleGallery 0.1.3 allows remote attackers to inject arbitrary web script or HTML via the album parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26585 - http://www.securityfocus.com/archive/1/484202/100/0/threaded - http://securityreason.com/securityalert/3400
CVE ID: CVE-2007-6158 State: PUBLISHED Published: 2007-11-29T01:00:00 Last Updated: 2024-08-07T15:54:26.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in caladmin.inc.php in Proverbs Web Calendar 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) loginname (aka Username) and (2) loginpass (aka Password) parameters to caladmin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26584 - http://securityreason.com/securityalert/3401 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38628 - http://www.securityfocus.com/archive/1/484193/100/0/threaded
CVE ID: CVE-2007-6159 State: PUBLISHED Published: 2007-11-29T01:00:00 Last Updated: 2024-08-07T15:54:26.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Tilde CMS 4.x and earlier allows remote attackers to execute arbitrary SQL commands via the aarstal parameter in a yeardetail action, a different vector than CVE-2006-1500. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38647 - http://securityreason.com/securityalert/3402 - http://www.securityfocus.com/bid/26591 - http://www.securityfocus.com/archive/1/484206/100/0/threaded
CVE ID: CVE-2007-6160 State: PUBLISHED Published: 2007-11-29T01:00:00 Last Updated: 2024-08-07T15:54:26.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Tilde CMS 4.x and earlier allows remote attackers to inject arbitrary web script or HTML via the aarstal parameter in a yeardetail action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26592 - http://securityreason.com/securityalert/3402 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38648 - http://www.securityfocus.com/archive/1/484206/100/0/threaded
CVE ID: CVE-2007-6161 State: PUBLISHED Published: 2007-11-29T01:00:00 Last Updated: 2024-08-07T15:54:26.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in Tilde CMS 4.x and earlier allows remote attackers to obtain sensitive information via a certain search parameter value in a search action, which reveals the path. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3402 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38649 - http://www.securityfocus.com/archive/1/484206/100/0/threaded
CVE ID: CVE-2007-6162 State: PUBLISHED Published: 2007-11-29T01:00:00 Last Updated: 2024-08-07T15:54:26.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in FMDeluxe 2.1.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a category action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38642 - http://secunia.com/advisories/27826 - http://securityreason.com/securityalert/3403 - http://www.securityfocus.com/archive/1/484191/100/0/threaded - http://www.securityfocus.com/bid/26587
CVE ID: CVE-2007-6163 State: PUBLISHED Published: 2007-11-29T01:00:00 Last Updated: 2024-08-07T15:54:26.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/index2.asp in GOUAE DWD Realty allows remote attackers to execute arbitrary SQL commands via the pword (aka Password) parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27822 - http://www.securityfocus.com/archive/1/484181/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/38651 - http://aria-security.net/forum/showthread.php?p=1116 - http://www.se
xchange.xforce.ibmcloud.com/vulnerabilities/38651 - http://aria-security.net/forum/showthread.php?p=1116 - http://www.securityfocus.com/bid/26579
CVE ID: CVE-2007-6164 State: PUBLISHED Published: 2007-11-29T01:00:00 Last Updated: 2024-08-07T15:54:26.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Eurologon CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) reviews.php, (2) links.php and (3) articles.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4665 - http://www.securityfocus.com/bid/26599 - http://www.securityfocus.com/archive/1/484275/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/38656
CVE ID: CVE-2007-6165 State: PUBLISHED Published: 2007-11-29T01:00:00 Last Updated: 2024-08-07T15:54:26.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mail in Apple Mac OS X Leopard (10.5.1) allows user-assisted remote attackers to execute arbitrary code via an AppleDouble attachment containing an apparently-safe file type and script in a resource fork, which does not warn the user that a separate program is going to be executed. NOTE: this is a regression error related to CVE-2006-0395. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/4238 - http://www.us-cert.gov/cas/techalerts/TA07-352A.html - http://www.kb.cert
//www.vupen.com/english/advisories/2007/4238 - http://www.us-cert.gov/cas/techalerts/TA07-352A.html - http://www.kb.cert.org/vuls/id/433819 - http://secunia.com/advisories/28136 - http://www.vupen.com/english/advisories/2007/3958 - http://securitytracker.com/id?1019106 - http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html - http://docs.info.apple.com/article.html?artnum=307179 - http://secunia.com/advisories/27785 - http://www.heise-security.co.uk/news/99257 - http://www.securityfocus.com/bid/26510
CVE ID: CVE-2007-6166 State: PUBLISHED Published: 2007-11-29T01:00:00 Last Updated: 2024-08-07T15:54:26.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remote Real Time Streaming Protocol (RTSP) servers to execute arbitrary code via an RTSP response with a long Content-Type header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26549 - http://www.beskerming.com/security/2007/11/25/74/QuickTime_-_Remote_hacker_automatic_control - http://securityreason.com/securityalert/3410 - https://www.exploit
1/25/74/QuickTime_-_Remote_hacker_automatic_control - http://securityreason.com/securityalert/3410 - https://www.exploit-db.com/exploits/4648 - http://docs.info.apple.com/article.html?artnum=307176 - http://lists.apple.com/archives/Security-announce/2007/Dec/msg00000.html - http://security.gentoo.org/glsa/glsa-200803-08.xml - http://www.securityfocus.com/bid/26560 - http://www.us-cert.gov/cas/techalerts/TA07-334A.html - http://www.kb.cert.org/vuls/id/659761 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38604 - https://www.exploit-db.com/exploits/6013 - http://www.vupen.com/english/advisories/2007/3984 - http://secunia.com/advisories/27755 - http://secunia.com/advisories/29182 - http
upen.com/english/advisories/2007/3984 - http://secunia.com/advisories/27755 - http://secunia.com/advisories/29182 - http://www.securitytracker.com/id?1018989
CVE ID: CVE-2007-6167 State: PUBLISHED Published: 2007-11-29T01:00:00 Last Updated: 2024-08-07T15:54:27.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in yast2-core in SUSE Linux might allow local users to execute arbitrary code by creating a malicious yast2 module in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/44158 - http://www.securityfocus.com/bid/26634 - http://secunia.com/advisories/27756 - http://www.novell.com/linux/security/advisories/2007_24_sr.html