Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-3955 State: PUBLISHED Published: 2007-07-24T18:00:00 Last Updated: 2024-08-07T14:37:05.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the IEToolbar.IEContextMenu.1 ActiveX control in LinkedInIEToolbar.dll in the LinkedIn Toolbar 3.0.2.1098 allows remote attackers to execute arbitrary code via a long second argument (varBrowser argument) to the search method. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vdalabs.com/tools/linkedin.html - http://osvdb.org/37696 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35578 - http://secunia.com/
inkedin.html - http://osvdb.org/37696 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35578 - http://secunia.com/advisories/26181 - http://www.securityfocus.com/bid/25032 - https://www.exploit-db.com/exploits/4217 - http://www.vupen.com/english/advisories/2007/2620
CVE ID: CVE-2007-3956 State: PUBLISHED Published: 2007-07-24T18:00:00 Last Updated: 2024-08-07T14:37:05.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: TeamSpeak WebServer 2.0 for Windows does not validate parameter value lengths and does not expire TCP sessions, which allows remote attackers to cause a denial of service (CPU and memory consumption) via long username and password parameters in a request to login.tscmd on TCP port 14534. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38595 - https://www.exploit-db.com/exploits/4205 - http://www.securityfocus.com/bid/24977 - http://secunia.com/advisories/26141 - https://exchange.xforce.ibmclou
ts/4205 - http://www.securityfocus.com/bid/24977 - http://secunia.com/advisories/26141 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35518
CVE ID: CVE-2007-3957 State: PUBLISHED Published: 2007-07-24T18:00:00 Last Updated: 2024-08-07T14:37:05.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Nipun Jain xserver 0.1 alpha allows remote attackers to cause a denial of service via a POST request with a long URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25030 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35612 - https://www.exploit-db.com/exploits/4216
CVE ID: CVE-2007-3958 State: PUBLISHED Published: 2007-07-24T18:00:00 Last Updated: 2024-08-07T14:37:05.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service via a certain GIF file, as demonstrated by Art.gif. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35538 - http://lostmon.blogspot.com/2007/08/windows-extended-file-attributes-buffer.html - http://osvdb.org/43773 - https://www.exploit-db.com/exploits/4215 - http://www.securityfocus.com/bid/25013
CVE ID: CVE-2007-3959 State: PUBLISHED Published: 2007-07-24T18:00:00 Last Updated: 2024-08-07T14:37:05.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IM Server (aka IMserve or IMserver) 2.0.5.30 and probably earlier in Ipswitch Instant Messaging before 2.07 in Ipswitch Collaboration Suite (ICS) allows remote attackers to cause a denial of service (daemon crash) via certain data to TCP port 5179 that overwrites a destructor, as reachable by the (1) DoAttachVideoSender, (2) DoAttachVideoReceiver, (3) DoAttachAudioSender, and (4) DoAttachAudioReceiver functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.ipswitch.com/support/instant_messagi
ctions. Additional Analyst Notes: - CVE Program Container: References: - http://www.ipswitch.com/support/instant_messaging/patch-upgrades.asp - http://www.vupen.com/english/advisories/2007/2621 - http://www.securityfocus.com/bid/25031 - http://secunia.com/advisories/26154 - http://www.securitytracker.com/id?1018440 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=566
CVE ID: CVE-2007-3960 State: PUBLISHED Published: 2007-07-24T18:00:00 Last Updated: 2024-08-07T14:37:05.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in IBM WebSphere Application Server (WAS) before Fix Pack 21 (6.0.2.21) have unknown impact and attack vectors, aka (1) PK33799, or (2) a "Potential security exposure" in the Samples component (PK40213). Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41615 - http://secunia.com/advisories/26183 - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876 - http://www.vupen.com/english/advisories/2007/2626 - http://osvdb.org/44217 - http://www.securityt
=180&uid=swg27006876 - http://www.vupen.com/english/advisories/2007/2626 - http://osvdb.org/44217 - http://www.securitytracker.com/id?1018448 - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876
CVE ID: CVE-2007-3961 State: PUBLISHED Published: 2007-07-25T17:00:00 Last Updated: 2024-08-07T14:37:05.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the fsp_readdir_r function in fsplib.c in fsplib before 0.9 allows remote attackers to cause a denial of service via a directory entry whose length is exactly MAXNAMELEN, which prevents a terminating null byte from being added. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200711-01.xml - http://bugs.gentoo.org/show_bug.cgi?id=188252 - http://osvdb.org/38568 - http://fsp.cvs.sourceforge.net/fsp/fsplib/fsplib.c?r1=1.19&r2=1.20 - http://fsp.cvs.sourcefor
- http://osvdb.org/38568 - http://fsp.cvs.sourceforge.net/fsp/fsplib/fsplib.c?r1=1.19&r2=1.20 - http://fsp.cvs.sourceforge.net/fsp/fsplib/ChangeLog?revision=1.17&view=markup - http://www.mandriva.com/security/advisories?name=MDVSA-2008:018 - http://secunia.com/advisories/26378 - http://secunia.com/advisories/27501 - http://secunia.com/advisories/26184
CVE ID: CVE-2007-3962 State: PUBLISHED Published: 2007-07-25T17:00:00 Last Updated: 2024-08-07T14:37:05.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in fsplib.c in fsplib before 0.9 might allow remote attackers to execute arbitrary code via (1) a long filename that is not properly handled by the fsp_readdir_native function when MAXNAMLEN is greater than 255, or (2) a long d_name directory (dirent) field in the fsp_readdir function. Additional Analyst Notes: - CVE Program Container: References: - http://fsp.cvs.sourceforge.net/fsp/fsplib/fsplib.c?r1=1.17&r2=1.18 - http://security.gentoo.org/glsa/glsa-200711-01.xml - http://fsp.cvs.sourc
orge.net/fsp/fsplib/fsplib.c?r1=1.17&r2=1.18 - http://security.gentoo.org/glsa/glsa-200711-01.xml - http://fsp.cvs.sourceforge.net/fsp/fsplib/fsplib.c?r1=1.21&r2=1.22 - http://bugs.gentoo.org/show_bug.cgi?id=188252 - http://osvdb.org/38569 - http://www.securityfocus.com/bid/25034 - http://fsp.cvs.sourceforge.net/fsp/fsplib/ChangeLog?revision=1.17&view=markup - http://www.mandriva.com/security/advisories?name=MDVSA-2008:018 - http://secunia.com/advisories/26378 - http://osvdb.org/38570 - http://secunia.com/advisories/27501 - http://secunia.com/advisories/26184
CVE ID: CVE-2007-3963 State: PUBLISHED Published: 2007-07-25T17:00:00 Last Updated: 2024-08-07T14:37:05.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in UseBB 1.0.7, and possibly other 1.0.x versions, allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF) to (1) upgrade-0-2-3.php, (2) upgrade-0-3.php, or (3) upgrade-0-4.php in install/, a different vulnerability than CVE-2005-4193. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/474256/100/0/threaded - http://www.securityfocus.com/bid/24990 - http://securityreason.com/securityalert/
.com/archive/1/474256/100/0/threaded - http://www.securityfocus.com/bid/24990 - http://securityreason.com/securityalert/2915
CVE ID: CVE-2007-3964 State: PUBLISHED Published: 2007-07-25T17:00:00 Last Updated: 2024-08-07T14:37:05.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Itaka before 0.2.1, when using Authentication mode, allows remote attackers to bypass authentication and obtain sensitive information by downloading screenshots via a direct request for /screenshot. Additional Analyst Notes: - CVE Program Container: References: - http://www.jardinpresente.com.ar/trac/itaka/ticket/20 - http://secunia.com/advisories/26146 - http://osvdb.org/38278 - http://www.securityfocus.com/bid/24985
CVE ID: CVE-2007-3965 State: PUBLISHED Published: 2007-07-25T17:00:00 Last Updated: 2024-08-07T14:37:05.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in uFMOD before 1.2.5 has unknown impact and attack vectors, possibly related to malformed files, and possibly an integer signedness error for relative note instruments. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24980 - http://secunia.com/advisories/26111 - http://sourceforge.net/project/shownotes.php?group_id=158498&release_id=523791 - http://osvdb.org/38275
CVE ID: CVE-2007-3966 State: PUBLISHED Published: 2007-07-25T17:00:00 Last Updated: 2024-08-07T14:37:05.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Munch Pro allows remote attackers to execute arbitrary SQL commands via the login field to /admin, a different vulnerability than CVE-2006-5880. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/474323/100/0/threaded - http://www.securityfocus.com/bid/24993 - http://securityreason.com/securityalert/2921 - http://osvdb.org/39001
CVE ID: CVE-2007-3967 State: PUBLISHED Published: 2007-07-25T17:00:00.000Z Last Updated: 2025-04-03T14:36:38.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in PHP Directory Lister (dirLIST) before 0.1.1 allows remote attackers to list the contents of a parent directory via a .. (dot dot) in the folder parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/24987 - http://sourceforge.net/project/shownotes.php?release_id=524378 - http://secunia.com/advisories/26144
CVE ID: CVE-2007-3968 State: PUBLISHED Published: 2007-07-25T17:00:00.000Z Last Updated: 2025-04-03T14:34:56.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in dirLIST before 0.1.1 allows remote attackers to list the contents of an excluded folder via a modified URL containing the folder name. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/24987 - http://sourceforge.net/project/shownotes.php?release_id=524378 - http://secunia.com/advisories/26144
CVE ID: CVE-2007-3969 State: PUBLISHED Published: 2007-07-25T17:00:00 Last Updated: 2024-08-07T14:37:05.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Panda Antivirus before 20070720 allows remote attackers to execute arbitrary code via a crafted EXE file, resulting from an "Integer Cast Around." Additional Analyst Notes: - CVE Program Container: References: - http://www.nruns.com/%5Bn.runs-SA-2007.019%5D%20-%20Panda%20Antivirus%20EXE%20parsing%20Arbitrary%20Code%20Execution%20Advisory.pdf - http://securityreason.com/securityalert/2920 - http://www.securityfocus.com/bid/24989 - http://secunia.com/advisories/26171 - http://www.securitytracker.com/id?1018437
http://www.securityfocus.com/bid/24989 - http://secunia.com/advisories/26171 - http://www.securitytracker.com/id?1018437 - http://www.nruns.com/%5Bn.runs-SA-2007.019%5D%20-%20Panda%20Antivirus%20EXE%20parsing%20Arbitrary%20Code%20Execution%20Advisory.txt - http://www.securityfocus.com/archive/1/474247/100/0/threaded
CVE ID: CVE-2007-3970 State: PUBLISHED Published: 2007-07-25T17:00:00 Last Updated: 2024-08-07T14:37:05.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in ESET NOD32 Antivirus before 2.2289 allows remote attackers to execute arbitrary code via a crafted CAB file, which triggers heap corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/474244/100/0/threaded - http://securityreason.com/securityalert/2922 - http://secunia.com/advisories/26124 - http://www.nruns.com/%5Bn.runs-SA-2007.016%5D%20-%20NOD32%20Antivirus%20CAB%20parsing%20Arbitrary%20Code%20Execution%20Advisory.txt - http://www.eset.com/joomla
16%5D%20-%20NOD32%20Antivirus%20CAB%20parsing%20Arbitrary%20Code%20Execution%20Advisory.txt - http://www.eset.com/joomla/index.php?option=com_content&task=view&id=3469&Itemid=26 - http://www.securityfocus.com/bid/24988 - http://osvdb.org/37976 - http://www.nruns.com/%5Bn.runs-SA-2007.016%5D%20-%20NOD32%20Antivirus%20CAB%20parsing%20Arbitrary%20Code%20Execution%20Advisory.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/35526 - http://www.vupen.com/english/advisories/2007/2602
CVE ID: CVE-2007-3971 State: PUBLISHED Published: 2007-07-25T17:00:00 Last Updated: 2024-08-07T14:37:05.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in ESET NOD32 Antivirus before 2.2289 allows remote attackers to cause a denial of service (CPU and disk consumption) via a crafted ASPACK packed file, which triggers an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2923 - http://www.securityfocus.com/archive/1/474245/100/0/threaded - http://secunia.com/advisories/26124 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35525 - http://www.eset.com/joomla/index.php?option=com_content&
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35525 - http://www.eset.com/joomla/index.php?option=com_content&task=view&id=3469&Itemid=26 - http://www.nruns.com/%5Bn.runs-SA-2007.017%5D%20-%20NOD32%20Antivirus%20ASPACK%20parsing%20Infinite%20Loop%20Advisory.pdf - http://www.securityfocus.com/bid/24988 - http://osvdb.org/37977 - http://www.nruns.com/%5Bn.runs-SA-2007.017%5D%20-%20NOD32%20Antivirus%20ASPACK%20parsing%20Infinite%20Loop%20Advisory.txt - http://www.securitytracker.com/id?1018436 - http://www.vupen.com/english/advisories/2007/2602
CVE ID: CVE-2007-3972 State: PUBLISHED Published: 2007-07-25T17:00:00 Last Updated: 2024-08-07T14:37:05.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: ESET NOD32 Antivirus before 2.2289 allows remote attackers to cause a denial of service via a crafted (1) ASPACK or (2) FSG packed file, which triggers a divide-by-zero error. Additional Analyst Notes: - CVE Program Container: References: - http://www.nruns.com/%5Bn.runs-SA-2007.018%5D%20-%20NOD32%20Antivirus%20ASPACK%20and%20FSG%20parsing%20Divide%20by%20Zero%20Advisory.pdf - http://secunia.com/advisories/26124 - http://securityreason.com/securityalert/2924 - http://www.eset.com/joomla/index.php?option=com_content&task=view&i
124 - http://securityreason.com/securityalert/2924 - http://www.eset.com/joomla/index.php?option=com_content&task=view&id=3469&Itemid=26 - http://www.securityfocus.com/bid/24988 - http://osvdb.org/37978 - http://www.nruns.com/%5Bn.runs-SA-2007.018%5D%20-%20NOD32%20Antivirus%20ASPACK%20and%20FSG%20parsing%20Divide%20by%20Zero%20Advisory.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/35524 - http://www.vupen.com/english/advisories/2007/2602 - http://www.securityfocus.com/archive/1/474246/100/0/threaded
CVE ID: CVE-2007-3973 State: PUBLISHED Published: 2007-07-25T17:00:00 Last Updated: 2024-08-07T14:37:05.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in JBlog 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to (a) index.php, or the (2) search parameter or (3) theme cookie to (b) recherche.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2919 - http://secunia.com/advisories/26165 - http://osvdb.org/38558 - http://osvdb.org/38557 - http://www.securityfocus.com/archive/1/474320/100/0/threaded - https://exchange.xforce.ibmcl
- http://osvdb.org/38557 - http://www.securityfocus.com/archive/1/474320/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/35551 - http://www.securityfocus.com/bid/24991 - https://www.exploit-db.com/exploits/4211 - http://www.vupen.com/english/advisories/2007/2611 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35556
CVE ID: CVE-2007-3974 State: PUBLISHED Published: 2007-07-25T17:00:00 Last Updated: 2024-08-07T14:37:05.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/ajoutaut.php in JBlog 1.0 does not require authentication, which allows remote attackers to create arbitrary accounts via modified mot and droit parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2919 - http://secunia.com/advisories/26165 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35550 - http://www.securityfocus.com/archive/1/474320/100/0/threaded - http://www.securityfocus.com/bid/24991 - https://www.exploit-db.com/exploits/4211 - http://www.
/474320/100/0/threaded - http://www.securityfocus.com/bid/24991 - https://www.exploit-db.com/exploits/4211 - http://www.vupen.com/english/advisories/2007/2611 - http://osvdb.org/38561
CVE ID: CVE-2007-3975 State: PUBLISHED Published: 2007-07-25T17:00:00 Last Updated: 2024-08-07T14:37:05.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter in a ptopic action, a different vulnerability than CVE-2005-3412. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/474228/100/0/thread - http://osvdb.org/38998 - http://securityreason.com/securityalert/2933
CVE ID: CVE-2007-3976 State: PUBLISHED Published: 2007-07-25T17:00:00 Last Updated: 2024-08-07T14:37:05.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in bwired allows remote attackers to execute arbitrary SQL commands via the newsID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4213 - http://www.vupen.com/english/advisories/2007/2612 - http://osvdb.org/39135 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35540
CVE ID: CVE-2007-3977 State: PUBLISHED Published: 2007-07-25T17:00:00 Last Updated: 2024-08-07T14:37:05.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in bwired allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4213 - http://osvdb.org/39136
CVE ID: CVE-2007-3978 State: PUBLISHED Published: 2007-07-25T17:00:00 Last Updated: 2024-08-07T14:37:05.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in bwired allows remote attackers to hijack web sessions by setting the PHPSESSID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4213 - http://osvdb.org/39137
CVE ID: CVE-2007-3979 State: PUBLISHED Published: 2007-07-25T17:00:00 Last Updated: 2024-08-07T14:37:05.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in BlogSite Professional (aka Blog System) 1.x allows remote attackers to execute arbitrary SQL commands via the news_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2607 - http://www.securityfocus.com/bid/24976 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35514 - http://osvdb.org/36278 - http://secunia.com/advisories/26170 - https://www.exploit-db.com/exploits/4206
CVE ID: CVE-2007-3980 State: PUBLISHED Published: 2007-07-25T17:00:00 Last Updated: 2024-08-07T14:37:05.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in page.php in RCMS Pro RGameScript Pro allows remote attackers to execute arbitrary PHP code via a URL in the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39108 - http://www.securityfocus.com/bid/24995 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35541 - http://www.vupen.com/english/advisories/2007/2614 - https://www.exploit-db.com/exploits/4210
CVE ID: CVE-2007-3981 State: PUBLISHED Published: 2007-07-25T17:00:00 Last Updated: 2024-08-07T14:37:05.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in WSN Links Basic Edition allows remote attackers to execute arbitrary SQL commands via the catid parameter in a displaycat action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35543 - http://osvdb.org/36270 - http://www.vupen.com/english/advisories/2007/2615 - https://www.exploit-db.com/exploits/4209 - http://secunia.com/advisories/26246 - http://www.securityfocus.com/bid/24996
CVE ID: CVE-2007-3982 State: PUBLISHED Published: 2007-07-25T17:00:00 Last Updated: 2024-08-07T14:37:05.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in the Data Dynamics ActiveReport (ActiveReports) ActiveX control in actrpt2.dll 2.5 and earlier allows remote attackers to create or overwrite arbitrary files via a full pathname in the first argument to the SaveLayout method. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4208 - http://www.securityfocus.com/bid/24994 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35539 - http://www.vupen.com/english/advisories/2007/2606 - http
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35539 - http://www.vupen.com/english/advisories/2007/2606 - http://osvdb.org/37694 - http://secunia.com/advisories/26112
CVE ID: CVE-2007-3983 State: PUBLISHED Published: 2007-07-25T17:00:00 Last Updated: 2024-08-07T14:37:05.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in the Data Dynamics DDActiveReports2.ActiveReport.2 (ActiveReports) ActiveX control in arpro2.dll in ActiveReports 2.0 Professional Edition 2.5.0.1308 (SP5 RC) allows remote attackers to create or overwrite arbitrary files via a full pathname in an argument to the SaveLayout method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcl
third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36056 - http://secunia.com/advisories/26112
CVE ID: CVE-2007-3984 State: PUBLISHED Published: 2007-07-25T17:00:00 Last Updated: 2024-08-07T14:37:05.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in a certain ActiveX control in the NixonMyPrograms class in sasatl.dll 1.5.0.531 in Zenturi ProgramChecker allows remote attackers to execute arbitrary code via a long argument to the Scan method. NOTE: this is probably a different issue than CVE-2007-2987. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25025 - http://osvdb.org/36714 - https://www.exploit-db.com/exploits/4214