Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-3669 State: PUBLISHED Published: 2007-07-10T19:00:00 Last Updated: 2024-08-07T14:28:51.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Innovasys DockStudioXP InnovaDSXP2.OCX ActiveX Control have unspecified attack vectors and impact, including a denial of service via "improper use" of the SaveToFile function. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/43960 - http://www.securityfocus.com/archive/1/473187 - http://www.securityfocus.com/bid/24834
CVE ID: CVE-2007-3670 State: PUBLISHED Published: 2007-07-10T19:00:00 Last Updated: 2024-08-07T14:28:51.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Firefox installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a (1) FirefoxURL or (2) FirefoxHTML URI, which are inserted into the command line that is created when invoking firefox.exe. NOTE: it has been debated as to whether the issue is in Internet Explorer or Firefox. As of 20070711, it is CVE's opinion that IE appears to
bated as to whether the issue is in Internet Explorer or Firefox. As of 20070711, it is CVE's opinion that IE appears to be failing to properly delimit the URL argument when invoking Firefox, and this issue could arise with other protocol handlers in IE as well. However, Mozilla has stated that it will address the issue with a "defense in depth" fix that will "prevent IE from sending Firefox malicious data." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2473 - http://www.ubuntu.com/usn/usn-503-1 - http://www.securitytracker.com/id?1018360 - http://www.securitytracker.com/id?1018351 - http://h20000.www2.hp.com/bizsupport/TechSupp
curitytracker.com/id?1018360 - http://www.securitytracker.com/id?1018351 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579 - http://blog.mozilla.com/security/2007/07/10/security-issue-in-url-protocol-handling-on-windows/ - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:152 - http://secunia.com/advisories/25984 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35346 - http://www.us-cert.gov/cas/techalerts/TA07-199A.html - http://secunia.com/advisories/28179 - http://www.securityfocus.com/bid/24837 - http://msinfluentials.com/blogs/jesper/archive/2007/07/10/bloc
visories/28179 - http://www.securityfocus.com/bid/24837 - http://msinfluentials.com/blogs/jesper/archive/2007/07/10/blocking-the-firefox-gt-ie-0-day.aspx - http://secunia.com/advisories/26216 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579 - http://www.virusbtn.com/news/virus_news/2007/07_11.xml - http://www.theregister.co.uk/2007/07/11/ie_firefox_vuln/ - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=565 - http://www.vupen.com/english/advisories/2007/2565 - http://www.mozilla.org/security/announce/2007/mfsa2007-40.html - http://secunia.com/advisories/26149 - http://www.vupen.com/english/advisories/2008/0082 - http://osvdb.org/38017 -
ml - http://secunia.com/advisories/26149 - http://www.vupen.com/english/advisories/2008/0082 - http://osvdb.org/38017 - http://www.mozilla.org/security/announce/2007/mfsa2007-23.html - http://www.kb.cert.org/vuls/id/358017 - http://www.xs-sniper.com/sniperscope/IE-Pwns-Firefox.html - http://www.vupen.com/english/advisories/2007/4272 - http://larholm.com/2007/07/10/internet-explorer-0day-exploit/ - http://www.novell.com/linux/security/advisories/2007_49_mozilla.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - ftp://ftp.slackware.com/pub/slackware/slackware-12.0/ChangeLog.txt - http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0160.html - ht
ub/slackware/slackware-12.0/ChangeLog.txt - http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0160.html - http://support.novell.com/techcenter/psdb/07d098f99c9fe6956523beae37f32fda.html - http://secunia.com/advisories/26258 - http://secunia.com/advisories/28363 - http://www.securityfocus.com/archive/1/473276/100/0/threaded - http://secunia.com/advisories/26271 - http://secunia.com/advisories/26204 - http://secunia.com/advisories/26572 - http://secunia.com/advisories/26096
CVE ID: CVE-2007-3671 State: PUBLISHED Published: 2007-07-10T19:00:00 Last Updated: 2024-08-07T14:28:51.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the kernel in Microsoft Windows Vista has unspecified remote attack vectors and impact, as shown in the "0day IPO" presentation at SyScan'07. Additional Analyst Notes: - CVE Program Container: References: - http://www.immunityinc.com/downloads/0day_IPO.pdf - http://osvdb.org/45809 - http://www.securityfocus.com/bid/24816 - http://blogs.zdnet.com/security/?p=358
CVE ID: CVE-2007-3672 State: PUBLISHED Published: 2007-07-10T19:00:00 Last Updated: 2024-08-07T14:28:51.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ecrire/tools.php in DotClear 1.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified form fields on the blogroll page. Additional Analyst Notes: - CVE Program Container: References: - http://ar3av.free.fr/faille-dotclear.php - http://secunia.com/advisories/25971 - http://osvdb.org/43958
CVE ID: CVE-2007-3673 State: PUBLISHED Published: 2007-07-15T21:00:00 Last Updated: 2024-08-07T14:28:51.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec symtdi.sys before 7.0.0, as distributed in Symantec AntiVirus Corporate Edition 9 through 10.1 and Client Security 2.0 through 3.1, Norton AntiSpam 2005, and Norton AntiVirus, Internet Security, Personal Firewall, and System Works 2005 and 2006; allows local users to gain privileges via a crafted Interrupt Request Packet (Irp) in an IOCTL 0x83022323 request to \\symTDI\, which results in memory overwrite. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26042 - http://secu
rite. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26042 - http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11d.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35347 - http://www.securityfocus.com/bid/22351 - http://www.vupen.com/english/advisories/2007/2507 - http://osvdb.org/36117 - http://securitytracker.com/id?1018372 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=554
CVE ID: CVE-2007-3675 State: PUBLISHED Published: 2007-10-12T20:00:00 Last Updated: 2024-08-07T14:28:51.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in the kavwebscan.CKAVWebScan ActiveX control (kavwebscan.dll) in Kaspersky Online Scanner before 5.0.98 allow remote attackers to execute arbitrary code via format string specifiers in "various string formatting functions," which trigger heap-based buffer overflows. Additional Analyst Notes: - CVE Program Container: References: - http://www.kaspersky.com/news?id=207575572 - http://securitytracker.com/id?1018800 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37057 - http://secunia
72 - http://securitytracker.com/id?1018800 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37057 - http://secunia.com/advisories/27187 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=606 - http://www.securityfocus.com/bid/26004 - http://www.vupen.com/english/advisories/2007/3455
CVE ID: CVE-2007-3676 State: PUBLISHED Published: 2008-02-12T23:00:00Z Last Updated: 2024-09-16T20:48:19.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 Universal Database (UDB) Administration Server (DAS) 8 before Fix Pack 16 and 9 before Fix Pack 4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via modified pointer values in unspecified remote administration requests, which triggers memory corruption or other invalid memory access. NOTE: this might be the same issue as CVE-2008-0698. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019318 - http://labs.idefense.com/intel
yst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019318 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=654
CVE ID: CVE-2007-3677 State: PUBLISHED Published: 2007-07-11T16:00:00 Last Updated: 2024-08-07T14:28:51.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Maxsi eVisit Analyst allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) idsp1.pl, (2) ip.pl, and (3) einsite_director.pl. NOTE: this issue can be leveraged for path disclosure from resulting error messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/36113 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35482 - http://www.osvdb.org/36112 - http://secunia.com/advisories/26110 - http://www.osvdb.org/36114
m/vulnerabilities/35482 - http://www.osvdb.org/36112 - http://secunia.com/advisories/26110 - http://www.osvdb.org/36114 - http://www.securityfocus.com/bid/24849 - http://www.attrition.org/pipermail/vim/2007-July/001716.html - http://www.portcullis.co.uk/uplds/advisories/easql%2006-057.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/35481 - http://www.nth-dimension.org.uk/pub/Portcullis-06-057.txt
CVE ID: CVE-2007-3678 State: PUBLISHED Published: 2007-07-11T16:00:00 Last Updated: 2024-08-07T14:28:51.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the MSWord text-import extension (Word 6-2000 Filter.xnt) in QuarkXPress 7.2 for Windows, when using the Rectangle Text Box tool for importing text, allows user-assisted remote attackers to execute arbitrary code via a long font name. Additional Analyst Notes: - CVE Program Container: References: - http://vuln.sg/quarkxpress72-en.html - http://secunia.com/advisories/25994 - http://www.securitytracker.com/id?1018385 - http://osvdb.org/37890 - http://www.vupen.com/english/advisories/2007/2504 - htt
://www.securitytracker.com/id?1018385 - http://osvdb.org/37890 - http://www.vupen.com/english/advisories/2007/2504 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35369 - http://www.securityfocus.com/bid/24872
CVE ID: CVE-2007-3679 State: PUBLISHED Published: 2007-07-25T17:00:00 Last Updated: 2024-08-07T14:28:51.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Citrix EPA ActiveX control (aka the "endpoint checking control" or CCAOControl Object) before 4.5.0.0 in npCtxCAO.dll in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows remote attackers to download and execute arbitrary programs onto a client system. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37845 - http://www.vupen.com/english/advisories/2007/2583 - http://securityreason.com/securityalert/2916 - http://secunia.com/advisories/26143 - htt
/english/advisories/2007/2583 - http://securityreason.com/securityalert/2916 - http://secunia.com/advisories/26143 - http://www.securityfocus.com/bid/24975 - http://www.securityfocus.com/archive/1/474204/100/0/threaded - http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-006.txt - http://support.citrix.com/article/CTX113815 - http://support.citrix.com/article/CTX114028 - http://www.securityfocus.com/bid/24865 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35511
CVE ID: CVE-2007-3680 State: PUBLISHED Published: 2007-07-11T17:00:00 Last Updated: 2024-08-07T14:28:51.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the odm_searchpath function in libodm in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary code via a long ODMPATH environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=isg1IY97632 - http://secunia.com/advisories/25970 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35321 - http://www.securityfocus.com/bid/24841 - http://securitytracker.com/id?1018345 - http://osvdb.org/36760 - http://labs.idefense.
www.securityfocus.com/bid/24841 - http://securitytracker.com/id?1018345 - http://osvdb.org/36760 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=552 - ftp://aix.software.ibm.com/aix/efixes/security/README - http://www.vupen.com/english/advisories/2007/2476
CVE ID: CVE-2007-3681 State: PUBLISHED Published: 2007-07-11T17:00:00 Last Updated: 2024-08-07T14:28:51.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IOCTL 9031 (BIOCGSTATS) handler in the NPF.SYS device driver in WinPcap before 4.0.1 allows local users to overwrite memory and execute arbitrary code via malformed Interrupt Request Packet (Irp) parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1018350 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35309 - http://www.winpcap.org/misc/changelog.htm - https://www.exploit-db.com/exploits/4165 - http://secunia.com/advisories/25982 - http://osvdb.org/37889 - http
log.htm - https://www.exploit-db.com/exploits/4165 - http://secunia.com/advisories/25982 - http://osvdb.org/37889 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=550 - http://www.securityfocus.com/bid/24829 - http://www.securityfocus.com/archive/1/473270/100/0/threaded - http://www.securityfocus.com/archive/1/473297/100/0/threaded - http://www.securityfocus.com/archive/1/473301/100/0/threaded - http://www.vupen.com/english/advisories/2007/2468
CVE ID: CVE-2007-3682 State: PUBLISHED Published: 2007-07-11T17:00:00 Last Updated: 2024-08-07T14:28:51.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in OpenLD 1.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24838 - http://secunia.com/advisories/25997 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35317 - http://www.osvdb.org/35966 - http://www.vupen.com/english/advisories/2007/2475 - https://www.exploit-db.com/exploits/4167
CVE ID: CVE-2007-3683 State: PUBLISHED Published: 2007-07-11T17:00:00 Last Updated: 2024-08-07T14:28:51.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in pagetopic.php in Aigaion 1.3.3 and earlier allows remote attackers to execute arbitrary SQL commands via the topic_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35306 - http://www.securityfocus.com/bid/24836 - http://secunia.com/advisories/25996 - http://www.vupen.com/english/advisories/2007/2474 - http://osvdb.org/35964 - https://www.exploit-db.com/exploits/4164
CVE ID: CVE-2007-3684 State: PUBLISHED Published: 2007-07-11T17:00:00 Last Updated: 2024-08-07T14:28:51.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Unobtrusive Ajax Star Rating Bar before 1.2.0 allow remote attackers to execute arbitrary SQL commands via the (1) q and (2) t parameters in (a) db.php and (b) rpc.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25985 - http://www.cirt.net/advisories/unobtrusive_ajax_star_rating.shtml - http://www.osvdb.org/35934 - http://www.securityfocus.com/bid/24840 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35328 - http://www.osvdb.or
ttp://www.securityfocus.com/bid/24840 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35328 - http://www.osvdb.org/35933
CVE ID: CVE-2007-3685 State: PUBLISHED Published: 2007-07-11T17:00:00 Last Updated: 2024-08-07T14:28:51.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in rpc.php in Unobtrusive Ajax Star Rating Bar before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25985 - http://www.cirt.net/advisories/unobtrusive_ajax_star_rating.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/35326 - http://www.securityfocus.com/bid/24840 - http://www.osvdb.org/35935
CVE ID: CVE-2007-3686 State: PUBLISHED Published: 2007-07-11T17:00:00 Last Updated: 2024-08-07T14:28:52.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in db.php in Unobtrusive Ajax Star Rating Bar before 1.2.0 allows remote attackers to inject arbitrary HTTP headers and data via CRLF sequences in the HTTP_REFERER parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25985 - http://www.cirt.net/advisories/unobtrusive_ajax_star_rating.shtml - http://www.securityfocus.com/bid/24840 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35329 - http://www.osvdb.org/35936
CVE ID: CVE-2007-3687 State: PUBLISHED Published: 2007-07-11T17:00:00 Last Updated: 2024-08-07T14:28:51.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in inferno.php in the Inferno Technologies RPG Inferno 2.4 and earlier, a vBulletin module, allows remote authenticated attackers to execute arbitrary SQL commands via the id parameter in a ScanMember do action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24839 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35319 - http://osvdb.org/35965 - http://infernotechnologies.net/ - https://www.exploit-db.com/exploits/4166 - http://secunia.com/advi
//osvdb.org/35965 - http://infernotechnologies.net/ - https://www.exploit-db.com/exploits/4166 - http://secunia.com/advisories/25986
CVE ID: CVE-2007-3688 State: PUBLISHED Published: 2007-07-11T17:00:00 Last Updated: 2024-08-07T14:28:51.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in DotClear 1.2.6 allow remote attackers to perform actions as arbitrary users via the (1) tool_url parameter to ecrire/tools.php and multiple fields on the (2) blogconf, (3) blogroll, (4) ecrire/redacteur.php, and (5) ecrire/user_prefs.php pages. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37891 - http://osvdb.org/37892 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35324 - http://archives.neohapsis.com/archives/bugtraq/20
g/37892 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35324 - http://archives.neohapsis.com/archives/bugtraq/2007-07/0102.html - http://osvdb.org/37893 - http://ar3av.free.fr/faille-dotclear.php - http://secunia.com/advisories/25971
CVE ID: CVE-2007-3689 State: PUBLISHED Published: 2007-07-11T17:00:00 Last Updated: 2024-08-07T14:28:51.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Print module before 4.7-1.0 and 5.x before 5.x-1.2 for Drupal allows remote attackers to read restricted posts in (1) Organic Groups, (2) Taxonomy Access Control, (3) Taxonomy Access Lite, and other unspecified node access modules, via modified URL arguments. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/158032 - http://secunia.com/advisories/25978 - http://www.vupen.com/english/advisories/2007/2470 - http://www.securityfocus.com/bid/24862 - https://exchange.xforce.ibmcloud.com/vul
pen.com/english/advisories/2007/2470 - http://www.securityfocus.com/bid/24862 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35314 - http://osvdb.org/37897 - http://drupal.org/node/158029 - http://drupal.org/node/152804
CVE ID: CVE-2007-3690 State: PUBLISHED Published: 2007-07-11T17:00:00 Last Updated: 2024-08-07T14:28:52.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Forward module before 4.7-1.1 and 5.x before 5.x-1.0 for Drupal allows remote attackers to read restricted posts in (1) Organic Groups, (2) Taxonomy Access Control, (3) Taxonomy Access Lite, and other unspecified node access modules, via modified URL arguments. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35318 - http://secunia.com/advisories/25999 - http://www.vupen.com/english/advisories/2007/2469 - http://www.securityfocus.com/bid/24862 - http://dr
dvisories/25999 - http://www.vupen.com/english/advisories/2007/2469 - http://www.securityfocus.com/bid/24862 - http://drupal.org/node/152806 - http://drupal.org/node/158022 - http://drupal.org/node/158025 - http://osvdb.org/37896
CVE ID: CVE-2007-3691 State: PUBLISHED Published: 2007-07-11T17:00:00 Last Updated: 2024-08-07T14:28:52.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in changePW.php in AV Tutorial Script (avtutorial) 1.0, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) userid parameters, a different issue than CVE-2007-3630. Additional Analyst Notes: - CVE Program Container: References: - http://attrition.org/pipermail/vim/2007-July/001705.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35487 - http://secunia.com/advisories/25969 - http://osvdb.org/36298
CVE ID: CVE-2007-3692 State: PUBLISHED Published: 2007-07-11T17:00:00 Last Updated: 2024-08-07T14:28:51.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download.cgi in EZFactory KDDI Download CGI 1.x allows remote attackers to read and download arbitrary files via a .. (dot dot) in the name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2472 - http://securitytracker.com/id?1018344 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35323 - http://www.au.kddi.com/ezfactory/tec/dlcgi/info.html - http://osvdb.org/38453 - http://jvn.jp/jp/JVN%2333593387/index.html
CVE ID: CVE-2007-3693 State: PUBLISHED Published: 2007-07-11T23:00:00 Last Updated: 2024-08-07T14:28:51.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Gobi as of 20070711, built on Helma, allows remote attackers to inject arbitrary web script or HTML via the q parameter to the search function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24880 - http://int21.de/cve/CVE-2007-3693-gobi.txt
CVE ID: CVE-2007-3694 State: PUBLISHED Published: 2007-11-14T23:00:00 Last Updated: 2024-08-07T14:28:52.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login.php in Miro Project Broadcast Machine 0.9.9.9 allows remote attackers to inject arbitrary web script or HTML via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26407 - http://www.securityfocus.com/archive/1/483575/100/0/threaded - http://securityreason.com/securityalert/3363 - http://www.int21.de/cve/CVE-2007-3694-bm.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/38418
CVE ID: CVE-2007-3695 State: PUBLISHED Published: 2007-07-11T22:00:00 Last Updated: 2024-08-07T14:28:52.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in LICRCMD.EXE in CA ERwin Process Modeler (formerly AllFusion Process Modeler) 7.1 allows attackers to execute arbitrary code via a long filename. NOTE: the researcher does not suggest any circumstances in which the filename would come from an untrusted source, and therefore perhaps the issue does not cross privilege boundaries and should not be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - http://www.eleytt.com/advisories/eleytt_ALLFUSIONLICRCMD.pdf - http://www.securityfoc