Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tp://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01067768 - http://www.vupen.com/english/advisories/2008/0050 - http://secunia.com/advisories/27706 - http://www.debian.org/security/2007/dsa-1291 - http://www.kb.cert.org/vuls/id/773720 - http://docs.info.apple.com/article.html?artnum=306172 - http://secunia.com/advisories/25232 - http://secunia.com/advisories/25251 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1 - http://secunia.com/advisories/25246 - http://www.securityfocus.com/archive/1/468680/100/0/threaded - http://www.securityfocus.com/bid/24197 - http://osvdb.org/34733 - https://oval.cisecurity.org/repository/search/definition/oval
www.securityfocus.com/bid/24197 - http://osvdb.org/34733 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11415 - http://www.securityfocus.com/bid/25159 - http://www.zerodayinitiative.com/advisories/ZDI-07-032.html - http://secunia.com/advisories/25255 - http://www.securityfocus.com/bid/24196 - http://www.redhat.com/support/errata/RHSA-2007-0354.html - http://www.securityfocus.com/bid/24195 - http://www.zerodayinitiative.com/advisories/ZDI-07-029.html - http://secunia.com/advisories/26235 - http://secunia.com/advisories/25675 - http://www.vupen.com/english/advisories/2007/2079
CVE ID: CVE-2007-2447 State: PUBLISHED Published: 2007-05-14T21:00:00.000Z Last Updated: 2025-11-04T21:08:04.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-2
hare management. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200705-15.xml - http://secunia.com/advisories/25289 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10062 - http://www.xerox.com/downloads/usa/en/c/cert_XRX08_001.pdf - http://www.vupen.com/english/advisories/2007/2732 - http://www.vupen.com/english/advisories/2007/1805 - http://secunia.com/advisories/26083 - http://www.vupen.com/english/advisories/2007/3229 - http://secunia.com/advisories/25772 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.j
advisories/2007/3229 - http://secunia.com/advisories/25772 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01067768 - http://www.securityfocus.com/archive/1/468565/100/0/threaded - http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html - http://secunia.com/advisories/25257 - http://www.kb.cert.org/vuls/id/268336 - http://www.securityfocus.com/bid/23972 - http://lists.suse.com/archive/suse-security-announce/2007-May/0006.html - http://secunia.com/advisories/25270 - http://www.securityfocus.com/archive/1/468670/100/0/threaded - http://www.novell.com/linux/security/advisories/2007_14_sr.html - http://lists.apple.com/archives/security-announce
ed - http://www.novell.com/linux/security/advisories/2007_14_sr.html - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://www.vupen.com/english/advisories/2007/2281 - http://www.vupen.com/english/advisories/2007/2210 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01078980 - http://www.trustix.org/errata/2007/0017/ - http://www.ubuntu.com/usn/usn-460-1 - http://secunia.com/advisories/25567 - http://secunia.com/advisories/25241 - http://secunia.com/advisories/28292 - http://www.samba.org/samba/security/CVE-2007-2447.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:104 - http://secunia.com/advisories/2525
VE-2007-2447.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:104 - http://secunia.com/advisories/25256 - https://issues.rpath.com/browse/RPL-1366 - http://secunia.com/advisories/25259 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.475906 - http://www.osvdb.org/34700 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102964-1 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=534 - http://secunia.com/advisories/26909 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01067768 - http://www.vupen.com/english/advisories/2008/0050 - http://secunia.com/advisories/27706 -
=en&cc=us&objectID=c01067768 - http://www.vupen.com/english/advisories/2008/0050 - http://secunia.com/advisories/27706 - http://www.debian.org/security/2007/dsa-1291 - http://www.securitytracker.com/id?1018051 - http://docs.info.apple.com/article.html?artnum=306172 - http://securityreason.com/securityalert/2700 - http://secunia.com/advisories/25232 - http://secunia.com/advisories/25251 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1 - http://secunia.com/advisories/25246 - http://www.securityfocus.com/bid/25159 - http://secunia.com/advisories/25255 - http://www.redhat.com/support/errata/RHSA-2007-0354.html - http://secunia.com/advisories/26235 - http://secunia.com/advisori
://www.redhat.com/support/errata/RHSA-2007-0354.html - http://secunia.com/advisories/26235 - http://secunia.com/advisories/25675 - http://www.vupen.com/english/advisories/2007/2079
CVE ID: CVE-2007-2448 State: PUBLISHED Published: 2007-06-14T23:00:00 Last Updated: 2024-08-07T13:42:33.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Subversion 1.4.3 and earlier does not properly implement the "partial access" privilege for users who have access to changed paths but not copied paths, which allows remote authenticated users to obtain sensitive information (revision properties) via svn (1) propget, (2) proplist, or (3) propedit. Additional Analyst Notes: - CVE Program Container: References: - https://issues.rpath.com/browse/RPL-1896 - http://osvdb.org/36070 - http://www.vupen.com/english/advisories/2011/0264 - http://subversion.tigris.org/security/CVE-2007-2
//osvdb.org/36070 - http://www.vupen.com/english/advisories/2011/0264 - http://subversion.tigris.org/security/CVE-2007-2448-advisory.txt - http://www.vupen.com/english/advisories/2007/2230 - http://www.ubuntu.com/usn/USN-1053-1 - http://securitytracker.com/id?1018237 - http://secunia.com/advisories/43139 - http://www.securityfocus.com/bid/24463
CVE ID: CVE-2007-2449 State: PUBLISHED Published: 2007-06-14T23:00:00 Last Updated: 2024-08-07T13:42:33.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI after the ';' character, as demonstrated by a URI containing a "snp/snoop.jsp;" sequence. Additional Analyst Notes: - CVE Program Container: References: - http://tomcat.apache.org/security-4.html - http://supp
Additional Analyst Notes: - CVE Program Container: References: - http://tomcat.apache.org/security-4.html - http://support.apple.com/kb/HT2163 - http://rhn.redhat.com/errata/RHSA-2008-0630.html - http://www.vupen.com/english/advisories/2008/1981/references - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html - http://www.securityfocus.com/bid/24476 - http://secunia.com/advisories/31493 - http://www.securityfocus.com/archive/1/471351/100/0/threaded - http://securityreason.com/securityalert/2804 - http://www.redhat.com/support/errata/RHSA-2007-0569.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34869 - http://www.securityfocus.com/archive/1/500412
7-0569.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34869 - http://www.securityfocus.com/archive/1/500412/100/0/threaded - http://www.securitytracker.com/id?1018245 - http://secunia.com/advisories/33668 - http://secunia.com/advisories/29392 - http://www.securityfocus.com/archive/1/500396/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html - http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html - http://www.vupen.com/english/advisories/2009/0233 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://tomcat.apache.org/security-6.html - http://www.vupen.com/english/advisories/2007/3386 - ht
009-02/msg00002.html - http://tomcat.apache.org/security-6.html - http://www.vupen.com/english/advisories/2007/3386 - http://secunia.com/advisories/30802 - http://secunia.com/advisories/27037 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 - http://secunia.com/advisories/27727 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 - http://tomcat.apache.org/security-5.html - http://www.redhat.com/support/errata/RHSA-2008-0261.html - http://osvdb.org/36080 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10578 - http://secunia.com/advisories/26076 - http://www.vupen.com/english/advisories/20
n/oval%3Aorg.mitre.oval%3Adef%3A10578 - http://secunia.com/advisories/26076 - http://www.vupen.com/english/advisories/2007/2213 - http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx - http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:241 - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%
tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2007-2450 State: PUBLISHED Published: 2007-06-14T23:00:00 Last Updated: 2024-08-07T13:42:32.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web applications in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote authenticated users to inject arbitrary web script or HTML via a parameter name to manager/html/upload, and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://tomcat.apache.org/security-4.html - http://secunia.com/advisories/30908 -
- CVE Program Container: References: - http://tomcat.apache.org/security-4.html - http://secunia.com/advisories/30908 - http://support.apple.com/kb/HT2163 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1 - http://www.osvdb.org/36079 - http://www.vupen.com/english/advisories/2008/1981/references - http://secunia.com/advisories/30899 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11287 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html - http://www.vupen.com/english/advisories/2008/1979/references - http://www.redhat.com/support/errata/RHSA-2007-0569.html - http://www.securityfocus.com/archive/1/500
/1979/references - http://www.redhat.com/support/errata/RHSA-2007-0569.html - http://www.securityfocus.com/archive/1/500412/100/0/threaded - http://www.securitytracker.com/id?1018245 - http://secunia.com/advisories/33668 - http://www.securityfocus.com/archive/1/500396/100/0/threaded - http://secunia.com/advisories/28549 - http://www.securityfocus.com/archive/1/471357/100/0/threaded - http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html - http://www.vupen.com/english/advisories/2009/0233 - http://secunia.com/advisories/25678 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://tomcat.apache.org/security-6.html - http://www.vupen.com/englis
pensuse-security-announce/2009-02/msg00002.html - http://tomcat.apache.org/security-6.html - http://www.vupen.com/english/advisories/2007/3386 - http://secunia.com/advisories/30802 - http://secunia.com/advisories/27037 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 - http://secunia.com/advisories/27727 - http://www.securityfocus.com/bid/24475 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 - http://tomcat.apache.org/security-5.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34868 - http://www.debian.org/security/2008/dsa-1468 - http://www.redhat.com/support/errata/RHSA-2008-0261.html - http://secunia.com/advis
.debian.org/security/2008/dsa-1468 - http://www.redhat.com/support/errata/RHSA-2008-0261.html - http://secunia.com/advisories/26076 - http://jvn.jp/jp/JVN%2307100457/index.html - http://www.vupen.com/english/advisories/2007/2213 - http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx - http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:241 - http://securityreason.com/securityalert/2813 - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db699
7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2007-2451 State: PUBLISHED Published: 2007-05-29T20:00:00 Last Updated: 2024-08-07T13:42:32.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in drivers/crypto/geode-aes.c in GEODE-AES in the Linux kernel before 2.6.21.3 allows attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21.3 - http://www.ubuntu.com/usn/usn-470-1 - http://www.securityfocus.com/bid/24150 - http://osvdb.org/35925 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34545 - http://secunia.com/advisories/25596 - http://secunia.com/advis
ps://exchange.xforce.ibmcloud.com/vulnerabilities/34545 - http://secunia.com/advisories/25596 - http://secunia.com/advisories/25398 - http://lwn.net/Articles/235711/ - http://www.vupen.com/english/advisories/2007/1987
CVE ID: CVE-2007-2452 State: PUBLISHED Published: 2007-06-04T16:00:00 Last Updated: 2024-08-07T13:42:33.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the visit_old_format function in locate/locate.c in locate in GNU findutils before 4.2.31 might allow context-dependent attackers to execute arbitrary code via a long pathname in a locate database that has the old format, a different vulnerability than CVE-2001-1036. Additional Analyst Notes: - CVE Program Container: References: - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34628 - http://itrc.hp.com/service/cki/docDisp
d=emr_na-c02286083 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34628 - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083 - http://www.vupen.com/english/advisories/2007/2015 - http://secunia.com/advisories/40551 - http://osvdb.org/36827 - http://www.securityfocus.com/archive/1/470108/100/0/threaded - http://secunia.com/advisories/25477 - http://securityreason.com/securityalert/2760 - http://www.vupen.com/english/advisories/2010/1796 - http://www.securitytracker.com/id?1018183 - http://www.securityfocus.com/bid/24250
CVE ID: CVE-2007-2453 State: PUBLISHED Published: 2007-06-11T23:00:00 Last Updated: 2024-08-07T13:42:32.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: The random number feature in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, (1) does not properly seed pools when there is no entropy, or (2) uses an incorrect cast when extracting entropy, which might cause the random number generator to provide the same values after reboots on systems without an entropy source. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-470-1 - http://www.securitytracker.com/id?1018248 - http://secunia.com/advisories/26664 - http://www.nov
ntu.com/usn/usn-470-1 - http://www.securitytracker.com/id?1018248 - http://secunia.com/advisories/26664 - http://www.novell.com/linux/security/advisories/2007_51_kernel.html - http://www.vupen.com/english/advisories/2007/2105 - http://www.novell.com/linux/security/advisories/2007_43_kernel.html - http://www.securityfocus.com/bid/24390 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:171 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34781 - http://www.debian.org/security/2007/dsa-1356 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:216 - http://secunia.com/advisories/26620 - http://www.ubuntu.com/usn/usn-489-1 - http://www.mandriva.com/security/advisories?n
ttp://secunia.com/advisories/26620 - http://www.ubuntu.com/usn/usn-489-1 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:196 - http://marc.info/?l=linux-kernel&m=118128622431272&w=2 - http://secunia.com/advisories/25961 - http://osvdb.org/37114 - http://secunia.com/advisories/25596 - https://rhn.redhat.com/errata/RHSA-2007-0376.html - http://www.ubuntu.com/usn/usn-486-1 - http://secunia.com/advisories/26450 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21.4 - http://secunia.com/advisories/25700 - http://marc.info/?l=linux-kernel&m=118128610219959&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9960 - http://secunia.com/
&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9960 - http://secunia.com/advisories/26139 - http://secunia.com/advisories/26133
CVE ID: CVE-2007-2454 State: PUBLISHED Published: 2007-05-02T17:00:00 Last Updated: 2024-08-07T13:42:32.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the VGA device in Parallels allows local users, with root access to the guest operating system, to terminate the virtual machine and possibly execute arbitrary code in the host operating system via unspecified vectors related to bitblt operations. Additional Analyst Notes: - CVE Program Container: References: - http://taviso.decsystem.org/virtsec.pdf - http://osvdb.org/40228
CVE ID: CVE-2007-2455 State: PUBLISHED Published: 2007-05-02T17:00:00 Last Updated: 2024-08-07T13:42:32.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Parallels allows local users to cause a denial of service (virtual machine abort) via (1) certain INT instructions, as demonstrated by INT 0xAA; (2) an IRET instruction when an invalid address is at the top of the stack; (3) a malformed MOVNTI instruction, as demonstrated by using a register as a destination; or a write operation to (4) SEGR6 or (5) SEGR7. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41166 - http://taviso.decsystem.org/virtsec.pdf - http://osvdb.org/41164 - http://osvdb.org
ferences: - http://osvdb.org/41166 - http://taviso.decsystem.org/virtsec.pdf - http://osvdb.org/41164 - http://osvdb.org/41167 - http://osvdb.org/41165
CVE ID: CVE-2007-2456 State: PUBLISHED Published: 2007-05-02T17:00:00 Last Updated: 2024-08-07T13:42:33.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in FireFly 1.1.01 allow remote attackers to execute arbitrary PHP code via a URL in the doc_root parameter to (1) localize.php or (2) config.php in modules/admin/include/. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2007-May/001573.html - http://www.vupen.com/english/advisories/2007/1554 - http://www.securityfocus.com/bid/23683 - https://www.exploit-db.com/exploits/3805 - http://osvdb.org/35702 - http://osvdb.org/3570
.securityfocus.com/bid/23683 - https://www.exploit-db.com/exploits/3805 - http://osvdb.org/35702 - http://osvdb.org/35701
CVE ID: CVE-2007-2457 State: PUBLISHED Published: 2007-05-02T18:00:00 Last Updated: 2024-08-07T13:42:32.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in resources/includes/class.Smarty.php in Pixaria Gallery before 1.4.3 allows remote attackers to execute arbitrary PHP code via a URL in the cfg[sys][base_path] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.pixaria.com/news/article/71/ - https://www.exploit-db.com/exploits/3733 - http://www.securityfocus.com/archive/1/465847/100/200/threaded - http://www.vupen.com/english/advisories/2007/1390 - https://exchange.xforce.ibmcloud.com/vulnerabilities
/200/threaded - http://www.vupen.com/english/advisories/2007/1390 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33662 - http://www.securityfocus.com/bid/23489 - http://www.pixaria.com/news/article/70/ - http://secunia.com/advisories/24821 - http://pixaria.com/index.history.php - http://osvdb.org/34976
CVE ID: CVE-2007-2458 State: PUBLISHED Published: 2007-05-02T18:00:00 Last Updated: 2024-08-07T13:42:32.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Pixaria Gallery before 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the cfg[sys][base_path] parameter to psg.smarty.lib.php and certain include and library scripts, a different vector than CVE-2007-2457. Additional Analyst Notes: - CVE Program Container: References: - http://www.pixaria.com/news/article/71/ - https://www.exploit-db.com/exploits/3733 - http://www.vupen.com/english/advisories/2007/1390 - https://exchange.xforce.ibmcloud.com/vulnerab
db.com/exploits/3733 - http://www.vupen.com/english/advisories/2007/1390 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33662 - http://www.pixaria.com/news/article/70/ - http://secunia.com/advisories/24821 - http://pixaria.com/index.history.php
CVE ID: CVE-2007-2459 State: PUBLISHED Published: 2007-05-02T18:00:00 Last Updated: 2024-08-07T13:42:32.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the BMP reader (bmp.c) in Imager perl module (libimager-perl) 0.45 through 0.56 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted 8-bit/pixel compressed BMP files. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35470 - http://osvdb.org/39846 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=421582 - http://www.debian.org/security/2008/dsa-1498 - http://www.securityfocus.com/bid/23711 - http:/
ugreport.cgi?bug=421582 - http://www.debian.org/security/2008/dsa-1498 - http://www.securityfocus.com/bid/23711 - http://imager.perl.org/a/65.html - http://secunia.com/advisories/25038 - http://secunia.com/advisories/28868 - http://rt.cpan.org/Public/Bug/Display.html?id=26811 - http://www.vupen.com/english/advisories/2007/1587 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34010