Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-2409 State: PUBLISHED Published: 2007-08-03T10:00:00 Last Updated: 2024-08-07T13:33:28.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-domain vulnerability in WebCore on Apple Mac OS X 10.3.9 and 10.4.10 allows remote attackers to obtain sensitive information via a popup window, which is able to read the current URL of the parent window. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2732 - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://securitytracker.com/id?1018494 - http://docs.info.apple.com/article.html?artnum=306172 - https://exchange.xforce.ibmcloud
ecuritytracker.com/id?1018494 - http://docs.info.apple.com/article.html?artnum=306172 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35740 - http://www.securityfocus.com/bid/25159 - http://secunia.com/advisories/26235
CVE ID: CVE-2007-2410 State: PUBLISHED Published: 2007-08-03T10:00:00 Last Updated: 2024-08-07T13:33:28.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebCore on Apple Mac OS X 10.3.9 and 10.4.10 retains properties of certain global objects when a new URL is visited in the same window, which allows remote attackers to conduct cross-site scripting (XSS) attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2732 - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://securitytracker.com/id?1018494 - http://docs.info.apple.com/article.html?artnum=306172 - http://www.securityfocus.com/b
/securitytracker.com/id?1018494 - http://docs.info.apple.com/article.html?artnum=306172 - http://www.securityfocus.com/bid/25159 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35743 - http://secunia.com/advisories/26235
CVE ID: CVE-2007-2411 State: PUBLISHED Published: 2007-05-01T10:00:00 Last Updated: 2024-08-07T13:33:29.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Sphider 1.2.x allows remote attackers to execute arbitrary PHP code via a URL in the include_dir parameter. NOTE: a third party disputes this vulnerability, stating that "the application is not vulnerable to this issue. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2648 - http://www.securityfocus.com/archive/1/467102/100/0/threaded - http://www.securityfocus.com/bid/23699 - https://exchange.xforce.ibmcloud.com/vul
.com/archive/1/467102/100/0/threaded - http://www.securityfocus.com/bid/23699 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33963 - http://osvdb.org/34174 - http://www.securityfocus.com/archive/1/467220/100/0/threaded
CVE ID: CVE-2007-2412 State: PUBLISHED Published: 2007-05-01T10:00:00 Last Updated: 2024-08-07T13:33:28.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in modules/file.php in Seir Anphin allows remote attackers to obtain sensitive information via a .. (dot dot) in the a[filepath] parameter. NOTE: a third party has disputed this issue because the a array is populated by a database query before use Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33962 - http://www.securityfocus.com/archive/1/467103/100/0/threaded - http://www.attrition.org/pipermail/vim/2007-April/001567.html
://www.securityfocus.com/archive/1/467103/100/0/threaded - http://www.attrition.org/pipermail/vim/2007-April/001567.html - http://securityreason.com/securityalert/2651
CVE ID: CVE-2007-2413 State: REJECTED Published: 2007-05-01T10:00:00 Last Updated: 2007-05-04T09:00:00 Description: No description available.
CVE ID: CVE-2007-2414 State: PUBLISHED Published: 2007-05-01T10:00:00 Last Updated: 2024-08-07T13:33:28.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyServer before 0.8.8 allows remote attackers to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1589 - http://secunia.com/advisories/25026 - http://sourceforge.net/project/shownotes.php?release_id=504709&group_id=63119 - http://www.myserverproject.net/forum/viewtopic.php?t=1659&sid=ab6d273497a064cd3ed7a83d1c44a70a - http://www.securityfocus.com/bid/23716 - http://osvdb.org/35469 - https://exchange.xforce.ibmcloud.c
d3ed7a83d1c44a70a - http://www.securityfocus.com/bid/23716 - http://osvdb.org/35469 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33971
CVE ID: CVE-2007-2415 State: PUBLISHED Published: 2007-05-01T10:00:00 Last Updated: 2024-08-07T13:33:28.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pi3Web Web Server 2.0.3 PL1 allows remote attackers to cause a denial of service (application exit) via a long URI. NOTE: this issue was originally reported as a crash, but the vendor states that the impact is a "clean" exit in which "the server I/O loop finishes and the process exits normally." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23713 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33967 - http://www.vupen.com/english/advisories/2007/1579 - http://sourcefor
xchange.xforce.ibmcloud.com/vulnerabilities/33967 - http://www.vupen.com/english/advisories/2007/1579 - http://sourceforge.net/forum/forum.php?thread_id=1725156&forum_id=131392 - http://secunia.com/advisories/25009
CVE ID: CVE-2007-2416 State: PUBLISHED Published: 2007-05-01T10:00:00 Last Updated: 2024-08-07T13:33:29.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in home.php in E-Annu allows remote attackers to execute arbitrary SQL commands via the a parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/467230/100/0/threaded - http://www.securityfocus.com/bid/23727 - http://securityreason.com/securityalert/2650 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33975 - http://osvdb.org/35619
CVE ID: CVE-2007-2417 State: PUBLISHED Published: 2007-07-15T21:00:00 Last Updated: 2024-08-07T13:33:29.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in _mprosrv.exe in Progress Software Progress 9.1E and OpenEdge 10.1x, as used by the RSA Authentication Manager 6.0 and 6.1, SecurID Appliance 2.0, ACE/Server 5.2, and possibly other products, allows remote attackers to execute arbitrary code via crafted packets. NOTE: this issue might overlap CVE-2007-3491. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2530 - http://www.securityfocus.com/archive/1/473623/100/0/threaded - http://www.vup
w.vupen.com/english/advisories/2007/2530 - http://www.securityfocus.com/archive/1/473623/100/0/threaded - http://www.vupen.com/english/advisories/2007/2531 - http://secunia.com/advisories/26067 - http://secunia.com/advisories/26058 - http://dvlabs.tippingpoint.com/advisory/TPTI-07-12 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35385 - http://www.securitytracker.com/id?1018389 - http://osvdb.org/37934 - http://www.securityfocus.com/bid/24675
CVE ID: CVE-2007-2418 State: PUBLISHED Published: 2007-05-02T22:00:00 Last Updated: 2024-08-07T13:33:28.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Rendezvous / Extensible Messaging and Presence Protocol (XMPP) component (plugins\rendezvous.dll) for Cerulean Studios Trillian Pro before 3.1.5.1 allows remote attackers to execute arbitrary code via a message that triggers the overflow from expansion that occurs during encoding. Additional Analyst Notes: - CVE Program Container: References: - http://blog.ceruleanstudios.com/?p=131 - http://osvdb.org/35720 - http://www.securityfocus.com/bid/23781 - https://exchange.xforce.ibmcloud.com/vulnera
/?p=131 - http://osvdb.org/35720 - http://www.securityfocus.com/bid/23781 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34059 - http://dvlabs.tippingpoint.com/advisory/TPTI-07-06 - http://www.securityfocus.com/archive/1/467439/100/0/threaded
CVE ID: CVE-2007-2419 State: PUBLISHED Published: 2007-06-06T10:00:00 Last Updated: 2024-08-07T13:33:28.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in an ActiveX control (boisweb.dll) in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allow remote attackers to execute arbitrary code via the (1) the second parameter to the DownloadAndExecute method and (2) third parameter to the AddFileEx method, a different vulnerability than CVE-2007-0328. Additional Analyst Notes: - CVE Program Container: References: - http://support.installshield.com/kb/view.asp?articleid=Q113020 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34721 - http
port.installshield.com/kb/view.asp?articleid=Q113020 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34721 - http://dvlabs.tippingpoint.com/advisory/TPTI-07-09 - http://www.vupen.com/english/advisories/2007/2070 - http://osvdb.org/36983 - http://secunia.com/advisories/25509 - http://www.securityfocus.com/archive/1/470585/100/0/threaded - http://www.securitytracker.com/id?1018195
CVE ID: CVE-2007-2420 State: PUBLISHED Published: 2007-05-02T00:00:00 Last Updated: 2024-08-07T13:33:28.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in bry.asp in Burak Yilmaz Blog 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33945 - http://www.securityfocus.com/bid/23678 - http://secunia.com/advisories/25158 - http://www.securityfocus.com/archive/1/466967/100/0/threaded - http://osvdb.org/35666
CVE ID: CVE-2007-2421 State: PUBLISHED Published: 2007-05-02T00:00:00 Last Updated: 2024-08-07T13:33:29.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Hitachi Groupmax Mobile Option for Mobile-Phone 07-00 through 07-30, 5 for i-mode 05-11 through 05-23, and 6 for EZweb 06-00 through 06-04 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1562 - http://osvdb.org/35437 - http://www.securityfocus.com/bid/23690 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33953 - http://www.hitachi-support.com/security_e/vuls_e/HS07-0
0 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33953 - http://www.hitachi-support.com/security_e/vuls_e/HS07-009_e/index-e.html - http://secunia.com/advisories/25020
CVE ID: CVE-2007-2422 State: PUBLISHED Published: 2007-05-02T00:00:00 Last Updated: 2025-01-17T14:37:36.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Modules Builder (modbuild) 4.1 for Comdev One Admin allow remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter to (1) config-bak.php or (2) config.php. NOTE: CVE disputes this vulnerability because the unmodified scripts set the applicable variable to the empty string; reasonable modified copies would use a fixed pathname string Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://securityreason.
string Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://securityreason.com/securityalert/2659 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33917 - http://www.securityfocus.com/archive/1/466953/100/0/threaded
CVE ID: CVE-2007-2423 State: PUBLISHED Published: 2007-05-02T00:00:00 Last Updated: 2024-08-07T13:33:29.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in MoinMoin 1.5.7 allows remote attackers to inject arbitrary web script or HTML via the do parameter in an AttachFile action, a different vulnerability than CVE-2007-0857. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29262 - http://osvdb.org/36567 - http://www.securityfocus.com/data/vulnerabilities/exploits/236
//secunia.com/advisories/29262 - http://osvdb.org/36567 - http://www.securityfocus.com/data/vulnerabilities/exploits/23676.html - http://www.securityfocus.com/bid/23676 - http://www.debian.org/security/2008/dsa-1514
CVE ID: CVE-2007-2424 State: PUBLISHED Published: 2007-05-02T00:00:00 Last Updated: 2024-08-07T13:33:29.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in help/index.php in The Merchant (themerchant) 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the show parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3818 - http://www.vupen.com/english/advisories/2007/1585 - http://www.securityfocus.com/bid/23707 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33968 - http://secunia.com/advisories/24883 - http://osvdb.org/35503
CVE ID: CVE-2007-2425 State: PUBLISHED Published: 2007-05-02T00:00:00 Last Updated: 2024-08-07T13:33:29.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in fileview.php in Imageview 5.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the album parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25040 - http://osvdb.org/35476 - http://www.vupen.com/english/advisories/2007/1584 - http://www.securityfocus.com/bid/23710 - https://www.exploit-db.com/exploits/3817 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33954
CVE ID: CVE-2007-2426 State: PUBLISHED Published: 2007-05-02T00:00:00 Last Updated: 2024-08-07T13:33:29.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in myfunctions/mygallerybrowser.php in the myGallery 1.4b4 and earlier plugin for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the myPath parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33955 - http://secunia.com/advisories/25042 - https://www.exploit-db.com/exploits/3814 - http://osvdb.org/34356 - http://www.vupen.com/english/advisories/2007/1582 - http://www.securityfocus.co
exploits/3814 - http://osvdb.org/34356 - http://www.vupen.com/english/advisories/2007/1582 - http://www.securityfocus.com/bid/23702
CVE ID: CVE-2007-2427 State: PUBLISHED Published: 2007-05-02T00:00:00 Last Updated: 2024-08-07T13:33:29.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the pnFlashGames 1.5 module for PostNuke allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25043 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33960 - http://www.securityfocus.com/bid/23701 - https://www.exploit-db.com/exploits/3813 - http://osvdb.org/35474 - http://www.vupen.com/english/advisories/2007/1581
CVE ID: CVE-2007-2428 State: PUBLISHED Published: 2007-05-02T00:00:00 Last Updated: 2024-08-07T13:33:29.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in page.php in Ahhp-Portal allow remote attackers to execute arbitrary PHP code via a URL in the (1) fp or (2) sc parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/477253/100/0/threaded - http://www.osvdb.org/36568 - http://securityvulns.com/Qdocument838.html - http://www.securityfocus.com/bid/23658 - http://securityvulns.com/source13951.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34443
CVE ID: CVE-2007-2429 State: PUBLISHED Published: 2007-05-02T00:00:00 Last Updated: 2024-08-07T13:33:29.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: ManageEngine PasswordManager Pro (PMP) allows remote attackers to obtain administrative access to a database by injecting a certain command line for the mysql program, as demonstrated by the "-port 2345" and "-u root" arguments. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23693 - http://osvdb.org/40188
CVE ID: CVE-2007-2430 State: PUBLISHED Published: 2007-05-02T00:00:00 Last Updated: 2024-08-07T13:42:32.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: shared/code/tce_tmx.php in TCExam 4.0.011 and earlier allows remote attackers to create arbitrary PHP files in cache/ by placing file contents and directory traversal manipulations into a SessionUserLang cookie to public/code/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33958 - http://secunia.com/advisories/25008 - http://www.securityfocus.com/bid/23705 - http://sourceforge.net/forum/forum.php?forum_id=690912 - https://www.exploit-db.com/exploi
securityfocus.com/bid/23705 - http://sourceforge.net/forum/forum.php?forum_id=690912 - https://www.exploit-db.com/exploits/3816 - http://www.vupen.com/english/advisories/2007/1583 - http://www.attrition.org/pipermail/vim/2007-May/001571.html
CVE ID: CVE-2007-2431 State: PUBLISHED Published: 2007-05-02T00:00:00 Last Updated: 2024-08-07T13:42:33.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dynamic variable evaluation vulnerability in shared/config/tce_config.php in TCExam 4.0.011 and earlier allows remote attackers to conduct cross-site scripting (XSS) and possibly other attacks by modifying critical variables such as $_SERVER, as demonstrated by injecting web script via the _SERVER[SCRIPT_NAME] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25008 - http://sourceforge.net/forum/forum.php?forum_id=690912 - http://www.securityfocus.com/bid/23704 - http://w
ories/25008 - http://sourceforge.net/forum/forum.php?forum_id=690912 - http://www.securityfocus.com/bid/23704 - http://www.attrition.org/pipermail/vim/2007-May/001572.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/33957 - https://www.exploit-db.com/exploits/3816
CVE ID: CVE-2007-2432 State: PUBLISHED Published: 2007-05-02T10:00:00 Last Updated: 2024-08-07T13:42:33.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in utilities/search.asp in nukedit 4.9.7b allows remote attackers to inject arbitrary web script or HTML via the terms parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33998 - http://www.securityfocus.com/bid/23729 - http://osvdb.org/35484 - http://secunia.com/advisories/25087
CVE ID: CVE-2007-2433 State: PUBLISHED Published: 2007-05-02T10:00:00 Last Updated: 2024-08-07T13:42:32.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Ariadne 2.4.1 allows remote attackers to inject arbitrary web script or HTML via the ARLogin parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33987 - http://www.osvdb.org/35493 - http://secunia.com/advisories/25090 - http://www.securityfocus.com/bid/23735
CVE ID: CVE-2007-2434 State: PUBLISHED Published: 2007-05-02T10:00:00 Last Updated: 2024-08-07T13:42:32.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in asnsp.dll in Aventail Connect 4.1.2.13 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a malformed DNS query. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1793 - http://www.securityfocus.com/bid/23717 - http://marc.info/?l=full-disclosure&m=117795069208458&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33972
CVE ID: CVE-2007-2435 State: PUBLISHED Published: 2007-05-02T10:00:00 Last Updated: 2024-08-07T13:42:33.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, allows remote attackers to perform unauthorized actions via an application that grants privileges to itself, related to "Incorrect Use of System Classes" and probably related to support for JNLP files. Additional Analyst Notes: - CVE Program Container: References: - http://docs.info.apple.com/article.html?artnum=307177 - http://dev2dev.bea.com/pub/advisory/241 - http://www.securityfocus.com/bid/23728 - http://ww
rticle.html?artnum=307177 - http://dev2dev.bea.com/pub/advisory/241 - http://www.securityfocus.com/bid/23728 - http://www.vupen.com/english/advisories/2007/1814 - http://secunia.com/advisories/26311 - http://support.avaya.com/elmodocs2/security/ASA-2007-199.htm - http://secunia.com/advisories/25283 - http://osvdb.org/35483 - http://www.gentoo.org/security/en/glsa/glsa-200705-23.xml - http://www.vupen.com/english/advisories/2007/1598 - http://secunia.com/advisories/26369 - http://secunia.com/advisories/25413 - http://security.gentoo.org/glsa/glsa-200804-28.xml - http://secunia.com/advisories/29858 - http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html - http://www.redhat.c
ia.com/advisories/29858 - http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html - http://www.redhat.com/support/errata/RHSA-2007-0817.html - http://secunia.com/advisories/25832 - http://www.vupen.com/english/advisories/2007/4224 - http://security.gentoo.org/glsa/glsa-200706-08.xml - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102881-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33984 - http://secunia.com/advisories/30780 - http://www.securitytracker.com/id?1017986 - http://secunia.com/advisories/25069 - http://secunia.com/advisories/28115 - http://www.redhat.com/support/errata/RHSA-2008-0261.html - http://secunia.com/advisories/25474 - http://www.ge
s/28115 - http://www.redhat.com/support/errata/RHSA-2008-0261.html - http://secunia.com/advisories/25474 - http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml - http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10999 - http://www.redhat.com/support/errata/RHSA-2007-0829.html
CVE ID: CVE-2007-2436 State: REJECTED Published: 2007-05-02T10:00:00 Last Updated: 2007-05-10T09:00:00 Description: No description available.
CVE ID: CVE-2007-2437 State: PUBLISHED Published: 2007-05-02T10:00:00 Last Updated: 2024-08-07T13:42:33.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: The X render (Xrender) extension in X.org X Window System 7.0, 7.1, and 7.2, with Xserver 1.3.0 and earlier, allows remote authenticated users to cause a denial of service (daemon crash) via crafted values to the (1) XRenderCompositeTrapezoids and (2) XRenderAddTraps functions, which trigger a divide-by-zero error. Additional Analyst Notes: - CVE Program Container: References: - http://www.rapid7.com/advisories/R7-0027.jsp - http://www.vupen.com/english/advisories/2007/1658 - http://www.vupen.com/english/advisories/2007/1601 -