Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-5946 State: PUBLISHED Published: 2007-11-14T01:00:00 Last Updated: 2024-08-07T15:47:00.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Aries PA-RISC emulator on HP-UX B.11.23 and B.11.31 on the IA-64 platform allows local users to obtain unspecified access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26383 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5548 - http://securitytracker.com/id?1018925 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01241483 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
w2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01241483 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38361 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01241483 - http://www.vupen.com/english/advisories/2007/3820 - http://secunia.com/advisories/27606
CVE ID: CVE-2007-5947 State: PUBLISHED Published: 2007-11-14T01:00:00 Last Updated: 2024-08-07T15:47:00.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 retrieves the inner URL regardless of its MIME type, and considers HTML documents within a jar archive to have the same origin as the inner URL, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a jar: URI. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27816 - http://browser.netscape.com/releasenotes/ - http://secunia.com/advisories/27855 - http://www.debian.org/s
sories/27816 - http://browser.netscape.com/releasenotes/ - http://secunia.com/advisories/27855 - http://www.debian.org/security/2007/dsa-1424 - http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00004.html - http://security.gentoo.org/glsa/glsa-200712-21.xml - http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0260 - https://issues.rpath.com/browse/RPL-1995 - http://secunia.com/advisories/28277 - http://www.mozilla.org/security/announce/2007/mfsa2007-37.html - http://secunia.com/advisories/27845 - http://www.redhat.com/support/errata/RHSA-2007-1083.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093 - http://bugs.gentoo.org/show_bug.cgi?id=200909 - https://oval.cisecurity.o
iki.rpath.com/wiki/Advisories:rPSA-2008-0093 - http://bugs.gentoo.org/show_bug.cgi?id=200909 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9873 - http://www.vupen.com/english/advisories/2008/0643 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg01011.html - http://www.redhat.com/support/errata/RHSA-2007-1082.html - http://secunia.com/advisories/27605 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374833 - http://secunia.com/advisories/28016 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00168.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Docu
com/archives/fedora-package-announce/2007-December/msg00168.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:246 - https://usn.ubuntu.com/546-1/ - http://www.vupen.com/english/advisories/2007/4018 - http://www.securityfocus.com/archive/1/488971/100/0/threaded - http://secunia.com/advisories/27838 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00135.html - http://www.securityfocus.com/archive/1/488002/100/0/threaded - http://www.vupen.com/english/advisories/2007/4002 - http://www.securityfocus.com/bid/26385 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-
dvisories/2007/4002 - http://www.securityfocus.com/bid/26385 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1018977.1-1 - http://www.kb.cert.org/vuls/id/715737 - http://secunia.com/advisories/27793 - http://bugs.gentoo.org/show_bug.cgi?id=198965 - http://www.vupen.com/english/advisories/2008/0083 - http://www.gnucitizen.org/blog/web-mayhem-firefoxs-jar-protocol-issues - http://secunia.com/advisories/27955 - http://wiki.rpath.com/Advisories:rPSA-2008-0093 - http://www.ubuntu.com/usn/usn-546-2 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00115.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-231441-1 - http://secunia.com/advisories/27957
/msg00115.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-231441-1 - http://secunia.com/advisories/27957 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38356 - http://secunia.com/advisories/28398 - http://secunia.com/advisories/29164 - http://secunia.com/advisories/28001 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://secunia.com/advisories/27796 - http://www.securitytracker.com/id?1018928 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.365006 - https://issues.rpath.com/browse/RPL-1984 - http://secunia.com/advisories/27797 - http://secunia.com/advisories/27979 - http://secunia.com/
th.com/browse/RPL-1984 - http://secunia.com/advisories/27797 - http://secunia.com/advisories/27979 - http://secunia.com/advisories/28171 - http://secunia.com/advisories/27800 - http://www.redhat.com/support/errata/RHSA-2007-1084.html - http://www.debian.org/security/2007/dsa-1425 - https://bugzilla.mozilla.org/show_bug.cgi?id=369814 - http://www.vupen.com/english/advisories/2007/3818 - http://secunia.com/advisories/27944
CVE ID: CVE-2007-5948 State: PUBLISHED Published: 2007-11-14T01:00:00 Last Updated: 2024-08-07T15:47:00.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in main.php in SF-Shoutbox 1.2.1 through 1.4 allow remote attackers to inject arbitrary web script or HTML via the (1) nick (aka Name) and (2) shout (aka Shout) parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.smash-the-stack.net/articles/SF-Shoutbox_Injection_Advisory.txt - http://secunia.com/advisories/27487 - http://www.securityfocus.com/bid/26320 - http://www.vupen.com/english/advisories/2007/3722 - http://osvdb.org/38401
CVE ID: CVE-2007-5949 State: PUBLISHED Published: 2007-11-14T01:00:00 Last Updated: 2024-08-07T15:47:00.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Tivoli Service Desk 6.2 allows remote authenticated users to inject arbitrary web script or HTML via the Description parameter in a Maximo change action. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3709 - http://osvdb.org/38394 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38214 - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06387 - http://secunia.com/advisories/27472 - http://www.securityfocus.com/b
www-1.ibm.com/support/docview.wss?uid=swg1IZ06387 - http://secunia.com/advisories/27472 - http://www.securityfocus.com/bid/26305
CVE ID: CVE-2007-5950 State: PUBLISHED Published: 2007-11-14T01:00:00 Last Updated: 2024-08-07T15:47:00.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in NetCommons before 1.0.11, and 1.1.x before 1.1.2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2006-4165. Additional Analyst Notes: - CVE Program Container: References: - http://www.netcommons.org/modules/journal/journal_detail.php?block_id=2121&news_id=316&op=comment#2121 - http://www.securityfocus.com/bid/26328 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38257 - http://www.vupen.com/english/adv
urityfocus.com/bid/26328 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38257 - http://www.vupen.com/english/advisories/2007/3717 - http://jvn.jp/jp/JVN%2379295963/index.html - http://secunia.com/advisories/27484
CVE ID: CVE-2007-5951 State: PUBLISHED Published: 2007-11-14T01:00:00 Last Updated: 2024-08-07T15:47:00.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in articles.php in E-Vendejo 0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26330 - http://secunia.com/advisories/27517 - http://www.vupen.com/english/advisories/2007/3721 - http://www.ihteam.net/exploits/e-vendejo-0.2.txt - http://osvdb.org/38405
CVE ID: CVE-2007-5952 State: PUBLISHED Published: 2007-11-14T01:00:00 Last Updated: 2024-08-07T15:47:00.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/index.php in Helios Calendar 1.2.1 Beta allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27490 - http://osvdb.org/38408 - http://www.securityfocus.com/bid/26312 - http://securityreason.com/securityalert/3337
CVE ID: CVE-2007-5953 State: PUBLISHED Published: 2007-11-14T01:00:00 Last Updated: 2024-08-07T15:47:00.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Really Simple CalDAV Store (RSCDS) before 0.9.0 allows attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=549414&group_id=179845 - http://www.securityfocus.com/bid/26352 - http://osvdb.org/39865 - http://www.vupen.com/english/advisories/2007/3720
CVE ID: CVE-2007-5954 State: PUBLISHED Published: 2007-11-14T01:00:00.000Z Last Updated: 2025-04-03T14:05:49.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in buscador.php in JLMForo System allows remote attackers to inject arbitrary web script or HTML via the clave parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/26331
CVE ID: CVE-2007-5955 State: PUBLISHED Published: 2007-11-14T02:00:00 Last Updated: 2024-08-07T15:47:00.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in updir.php in UPDIR.NET before 2.04 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38787 - http://jvn.jp/jp/JVN%2399453765/index.html - http://www.securityfocus.com/bid/26394 - http://secunia.com/advisories/27581 - http://updir.net/osirase.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/38364
CVE ID: CVE-2007-5956 State: PUBLISHED Published: 2007-11-14T11:00:00 Last Updated: 2024-08-07T15:47:00.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in IBM Informix Dynamic Server (IDS) before 10.00.xC7W1 allows local users to gain privileges by referencing modified NLS message files through directory traversal sequences in the DBLANG environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27542 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=624 - http://www.securityfocus.com/bid/26363 - http://www-1.ibm.com/support/docview.wss?uid=swg1IC54252 - http://www
?id=624 - http://www.securityfocus.com/bid/26363 - http://www-1.ibm.com/support/docview.wss?uid=swg1IC54252 - http://www.vupen.com/english/advisories/2007/3757 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38297 - http://www-1.ibm.com/support/docview.wss?uid=swg27011082
CVE ID: CVE-2007-5957 State: PUBLISHED Published: 2007-11-14T11:00:00 Last Updated: 2024-08-07T15:47:00.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Informix Dynamic Server (IDS) 10.00.TC3TL and 11.10.TB4TL on Windows allows attackers to cause a denial of service (application crash) via unspecified SQ_ONASSIST requests. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38296 - http://secunia.com/advisories/27542 - http://www.securityfocus.com/bid/26363 - http://osvdb.org/41621 - http://www-1.ibm.com/support/docview.wss?uid=swg1IC53588 - http://www.vupen.com/english/advisori
ttp://osvdb.org/41621 - http://www-1.ibm.com/support/docview.wss?uid=swg1IC53588 - http://www.vupen.com/english/advisories/2007/3757 - http://www-1.ibm.com/support/docview.wss?uid=swg27011082
CVE ID: CVE-2007-5958 State: PUBLISHED Published: 2008-01-18T22:00:00 Last Updated: 2024-08-07T15:47:00.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28542 - http://www.securityfocus.com/bid/27336 - http://www.vupen.com/english/advisories/2008/0184 - http://secunia.com/advisories/29622 - https://www.redhat.com/archives/fedora-package-announce/2008-Jan
ories/2008/0184 - http://secunia.com/advisories/29622 - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html - http://secunia.com/advisories/28532 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103205-1 - http://secunia.com/advisories/29707 - https://www.exploit-db.com/exploits/5152 - http://secunia.com/advisories/28843 - http://www.debian.org/security/2008/dsa-1466 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10991 - http://secunia.com/advisories/28540 -
cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10991 - http://secunia.com/advisories/28540 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321 - https://issues.rpath.com/browse/RPL-1970 - http://www.securityfocus.com/archive/1/487335/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDVSA-2008:021 - http://www.vupen.com/english/advisories/2008/0924/references - http://secunia.com/advisories/28997 - http://secunia.com/advisories/28718 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-230901-1 - http://www.redhat.com/support/errata/RHSA-2008-0029.html - http://secunia.com/advisories/28584 - http://www.openbsd.or
- http://www.redhat.com/support/errata/RHSA-2008-0029.html - http://secunia.com/advisories/28584 - http://www.openbsd.org/errata41.html#012_xorg - http://secunia.com/advisories/28592 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321 - http://secunia.com/advisories/29420 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:022 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5393 - http://secunia.com/advisories/30161 - http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml - http://www.redhat.com/support/errata/RHSA-2008-0030.html - ht
ttp://www.gentoo.org/security/en/glsa/glsa-200805-07.xml - http://www.redhat.com/support/errata/RHSA-2008-0030.html - http://secunia.com/advisories/28543 - http://secunia.com/advisories/28273 - http://www.redhat.com/support/errata/RHSA-2008-0031.html - http://secunia.com/advisories/28550 - http://www.vupen.com/english/advisories/2008/0497/references - http://bugs.gentoo.org/show_bug.cgi?id=204362 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:023 - http://secunia.com/advisories/28885 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:025 - http://support.avaya.com/elmodocs2/security/ASA-2008-084.htm - https://usn.ubuntu.com/571-1/ - http://security.gentoo.org/glsa/g
upport.avaya.com/elmodocs2/security/ASA-2008-084.htm - https://usn.ubuntu.com/571-1/ - http://security.gentoo.org/glsa/glsa-200804-05.xml - http://secunia.com/advisories/28535 - http://www.vupen.com/english/advisories/2008/3000 - http://docs.info.apple.com/article.html?artnum=307562 - http://lists.freedesktop.org/archives/xorg/2008-January/031918.html - http://secunia.com/advisories/32545 - http://securitytracker.com/id?1019232 - http://www.openbsd.org/errata42.html#006_xorg - http://secunia.com/advisories/28539 - http://secunia.com/advisories/28616 - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html - http://secunia.com/advisories/28536 - http://www.security
/archives/fedora-package-announce/2008-January/msg00641.html - http://secunia.com/advisories/28536 - http://www.securityfocus.com/bid/27356 - http://security.gentoo.org/glsa/glsa-200801-09.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/39769 - http://www.vupen.com/english/advisories/2008/0179
CVE ID: CVE-2007-5959 State: PUBLISHED Published: 2007-11-26T23:00:00 Last Updated: 2024-08-07T15:47:00.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27816 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38643 - http://browser.netscape.com/releasenotes/ - http://secunia.com/advisories/27855 - http://www.debian.org/security/2007/dsa
ttp://browser.netscape.com/releasenotes/ - http://secunia.com/advisories/27855 - http://www.debian.org/security/2007/dsa-1424 - http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00004.html - http://security.gentoo.org/glsa/glsa-200712-21.xml - http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0260 - https://issues.rpath.com/browse/RPL-1995 - http://secunia.com/advisories/28277 - http://secunia.com/advisories/27845 - http://www.redhat.com/support/errata/RHSA-2007-1083.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093 - http://bugs.gentoo.org/show_bug.cgi?id=200909 - http://www.mozilla.org/security/announce/2007/mfsa2007-38.html - http://www.vupen.com/english/advisories/2
i?id=200909 - http://www.mozilla.org/security/announce/2007/mfsa2007-38.html - http://www.vupen.com/english/advisories/2008/0643 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg01011.html - http://www.redhat.com/support/errata/RHSA-2007-1082.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374833 - http://secunia.com/advisories/28016 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00168.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:246 - https://usn.ubuntu.com/546-1/ - http://www.vupen.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:246 - https://usn.ubuntu.com/546-1/ - http://www.vupen.com/english/advisories/2007/4018 - http://www.securityfocus.com/archive/1/488971/100/0/threaded - http://secunia.com/advisories/27838 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00135.html - http://www.securityfocus.com/archive/1/488002/100/0/threaded - http://www.vupen.com/english/advisories/2007/4002 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1018977.1-1 - http://secunia.com/advisories/27793 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11014 - http://bugs.gentoo.org/show_bug.cgi?id=198
curity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11014 - http://bugs.gentoo.org/show_bug.cgi?id=198965 - http://www.vupen.com/english/advisories/2008/0083 - http://secunia.com/advisories/27955 - http://wiki.rpath.com/Advisories:rPSA-2008-0093 - http://securitytracker.com/id?1018994 - http://www.ubuntu.com/usn/usn-546-2 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00115.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-231441-1 - http://secunia.com/advisories/27957 - http://secunia.com/advisories/28398 - http://secunia.com/advisories/29164 - http://secunia.com/advisories/28001 - http://h20000.www2.hp.com/bizsupport/TechSupport/D
/secunia.com/advisories/29164 - http://secunia.com/advisories/28001 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://secunia.com/advisories/27796 - http://www.securityfocus.com/bid/26593 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.365006 - https://issues.rpath.com/browse/RPL-1984 - http://secunia.com/advisories/27797 - http://secunia.com/advisories/27979 - http://secunia.com/advisories/28171 - http://secunia.com/advisories/27800 - http://www.redhat.com/support/errata/RHSA-2007-1084.html - http://www.debian.org/security/2007/dsa-1425 - http://secunia.com/advisories/27944 - http://secunia.com/advisories/
ml - http://www.debian.org/security/2007/dsa-1425 - http://secunia.com/advisories/27944 - http://secunia.com/advisories/27725
CVE ID: CVE-2007-5960 State: PUBLISHED Published: 2007-11-26T23:00:00 Last Updated: 2024-08-07T15:47:00.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 sets the Referer header to the window or frame in which script is running, instead of the address of the content that initiated the script, which allows remote attackers to spoof HTTP Referer headers and bypass Referer-based CSRF protection schemes by setting window.location and using a modal alert dialog that causes the wrong Referer to be sent. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27816 - http://browser.netsca
tional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27816 - http://browser.netscape.com/releasenotes/ - http://secunia.com/advisories/27855 - http://www.debian.org/security/2007/dsa-1424 - http://www.securityfocus.com/bid/26589 - http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00004.html - http://security.gentoo.org/glsa/glsa-200712-21.xml - http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0260 - https://issues.rpath.com/browse/RPL-1995 - http://secunia.com/advisories/28277 - http://secunia.com/advisories/27845 - http://www.redhat.com/support/errata/RHSA-2007-1083.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093 - https://oval.
www.redhat.com/support/errata/RHSA-2007-1083.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9794 - http://bugs.gentoo.org/show_bug.cgi?id=200909 - http://www.vupen.com/english/advisories/2008/0643 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg01011.html - http://www.redhat.com/support/errata/RHSA-2007-1082.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374833 - http://secunia.com/advisories/28016 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00168.html - http://h20000.www2.hp.com/bizsu