Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-0403 State: PUBLISHED Published: 2007-01-22T18:00:00 Last Updated: 2024-08-07T12:19:30.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/memberlist.php in Easebay Resources Paypal Subscription Manager allows remote attackers to execute arbitrary SQL commands via the keyword parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2168 - http://osvdb.org/36103 - http://www.securityfocus.com/archive/1/457506/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31616 - http://osvdb.org/33560
CVE ID: CVE-2007-0404 State: PUBLISHED Published: 2007-01-23T00:00:00 Last Updated: 2024-08-07T12:19:29.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: bin/compile-messages.py in Django 0.95 does not quote argument strings before invoking the msgfmt program through the os.system function, which allows attackers to execute arbitrary commands via shell metacharacters in a (1) .po or (2) .mo file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31627 - http://secunia.com/advisories/23826 - http://code.djangoproject.com/changeset/3592 - http://www.securityfocus.com/bid/22134
CVE ID: CVE-2007-0405 State: PUBLISHED Published: 2007-01-23T00:00:00 Last Updated: 2024-08-07T12:19:29.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated users to gain the privileges of a different user. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31628 - http://secunia.com/advisories/23826 - http://code.djangoproject.com/changeset/3754 - http://www.securityfocus.com/bid/22138
CVE ID: CVE-2007-0406 State: PUBLISHED Published: 2007-01-23T00:00:00 Last Updated: 2024-08-07T12:19:30.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the (1) main function in (a) client.c, and the (2) server_setup and (3) server_client_connect functions in (b) server.c in gxine 0.5.9 and earlier allow local users to cause a denial of service (daemon crash) or gain privileges via a long HOME environment variable. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38321 - http://www.vupen.com/english/advisories/2007/0259 - http://sourceforge.net/p
ner: References: - http://osvdb.org/38321 - http://www.vupen.com/english/advisories/2007/0259 - http://sourceforge.net/project/shownotes.php?group_id=9655&release_id=476891 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31604 - http://osvdb.org/38320 - http://xinehq.de/index.php/news?show_category_id=1
CVE ID: CVE-2007-0407 State: PUBLISHED Published: 2007-01-23T00:00:00 Last Updated: 2024-08-07T12:19:30.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Operation/User.pm in Plain Black WebGUI before 7.3.5 (beta) allows remote attackers to inject arbitrary web script or HTML via the username parameter during anonymous registration, a different vector than CVE-2007-0308. NOTE: it is possible that a separate "WikiPage titles" issue was also fixed. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32928 - http://www.securityfocus.com/bid/22114 - http://www.vupen.com/english/advisories/2007/0242 - https://
/osvdb.org/32928 - http://www.securityfocus.com/bid/22114 - http://www.vupen.com/english/advisories/2007/0242 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31573 - http://www.plainblack.com/downloads/builds/7.3.5-beta/WebGUI/docs/changelog/7.x.x.txt - http://secunia.com/advisories/23754 - http://www.plainblack.com/bugs/tracker/security-update-cross-site-scripting-vulnerability
CVE ID: CVE-2007-0408 State: PUBLISHED Published: 2007-01-23T00:00:00 Last Updated: 2024-08-07T12:19:29.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA Weblogic Server 8.1 through 8.1 SP4 does not properly validate client certificates when reusing cached connections, which allows remote attackers to obtain access via an untrusted X.509 certificate. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23750 - http://www.securityfocus.com/bid/22082 - http://dev2dev.bea.com/pub/advisory/202 - http://www.vupen.com/english/advisories/2007/0213 - http://osvdb.org/38500 - http://securitytracker.com/id?1017519
CVE ID: CVE-2007-0409 State: PUBLISHED Published: 2007-01-23T00:00:00 Last Updated: 2024-08-07T12:19:30.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic 7.0 through 7.0 SP6, 8.1 through 8.1 SP4, and 9.0 initial release does not encrypt passwords stored in the JDBCDataSourceFactory MBean Properties, which allows local administrative users to read the cleartext password. Additional Analyst Notes: - CVE Program Container: References: - http://dev2dev.bea.com/pub/advisory/203 - http://securitytracker.com/id?1017525 - http://secunia.com/advisories/23750 - http://www.securityfocus.com/bid/22082 - http://osvdb.org/38501 - http://www.vupen.com/english/advisories/2007/0213
CVE ID: CVE-2007-0410 State: PUBLISHED Published: 2007-01-23T00:00:00 Last Updated: 2024-08-07T12:19:30.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the thread management in BEA WebLogic 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, 9.0, and 9.1, when T3 authentication is used, allows remote attackers to cause a denial of service (thread and system hang) via unspecified "sequences of events." Additional Analyst Notes: - CVE Program Container: References: - http://dev2dev.bea.com/pub/advisory/204 - http://securitytracker.com/id?1017525 - http://secunia.com/advisories/23750 - http://www.securityfocus.com/bid/22082 - http://osvdb.org/38502 - http://ww
7525 - http://secunia.com/advisories/23750 - http://www.securityfocus.com/bid/22082 - http://osvdb.org/38502 - http://www.vupen.com/english/advisories/2007/0213
CVE ID: CVE-2007-0411 State: PUBLISHED Published: 2007-01-23T00:00:00 Last Updated: 2024-08-07T12:19:29.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server 8.1 through 8.1 SP5, 9.0, 9.1, and 9.2 Gold, when WS-Security is used, does not properly validate certificates, which allows remote attackers to conduct a man-in-the-middle (MITM) attack. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38503 - http://securitytracker.com/id?1017525 - http://secunia.com/advisories/23750 - http://www.securityfocus.com/bid/22082 - http://www.vupen.com/english/advisories/2007/0213 - http://dev2dev.bea.com/pub/advisory/205
CVE ID: CVE-2007-0412 State: PUBLISHED Published: 2007-01-23T00:00:00 Last Updated: 2024-08-07T12:19:30.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server 6.1 through 6.1 SP7, 7.0 through 7.0 SP7, and 8.1 through 8.1 SP5 allows remote attackers to read arbitrary files inside the class-path property via .ear or exploded .ear files that use the manifest class-path property to point to utility jar files. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017525 - http://secunia.com/advisories/23750 - http://www.securityfocus.com/bid/22082 - http://dev2dev.bea.com/pub/advisory/206 - http://osvdb.org/38505 - http://www.
http://www.securityfocus.com/bid/22082 - http://dev2dev.bea.com/pub/advisory/206 - http://osvdb.org/38505 - http://www.vupen.com/english/advisories/2007/0213
CVE ID: CVE-2007-0413 State: PUBLISHED Published: 2007-01-23T00:00:00 Last Updated: 2024-08-07T12:19:29.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server 8.1 through 8.1 SP5 stores cleartext data in a backup of config.xml after offline editing, which allows local users to obtain sensitive information by reading this backup file. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017525 - http://secunia.com/advisories/23750 - http://www.securityfocus.com/bid/22082 - http://dev2dev.bea.com/pub/advisory/207 - http://www.vupen.com/english/advisories/2007/0213 - http://osvdb.org/38504
CVE ID: CVE-2007-0414 State: PUBLISHED Published: 2007-01-23T00:00:00 Last Updated: 2024-08-07T12:19:29.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server 6.1 through 6.1 SP7, 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, and 9.0 allows remote attackers to cause a denial of service (server hang) via certain requests that cause muxer threads to block when processing error pages. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017525 - http://secunia.com/advisories/23750 - http://www.securityfocus.com/bid/22082 - http://dev2dev.bea.com/pub/advisory/208 - http://www.vupen.com/english/advisories/2007/0213 - http://osvdb
m/bid/22082 - http://dev2dev.bea.com/pub/advisory/208 - http://www.vupen.com/english/advisories/2007/0213 - http://osvdb.org/38506
CVE ID: CVE-2007-0415 State: PUBLISHED Published: 2007-01-23T00:00:00 Last Updated: 2024-08-07T12:19:30.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server 8.1 through 8.1 SP5 does not properly enforce access control after a dynamic update and dynamic redeployment of an application that is implemented through exploded jars, which allows attackers to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38509 - http://securitytracker.com/id?1017525 - http://secunia.com/advisories/23750 - http://dev2dev.bea.com/pub/advisory/209 - http://www.securityfocus.com/bid/22082 - http://www.vupen.com/english
/23750 - http://dev2dev.bea.com/pub/advisory/209 - http://www.securityfocus.com/bid/22082 - http://www.vupen.com/english/advisories/2007/0213
CVE ID: CVE-2007-0416 State: PUBLISHED Published: 2007-01-23T00:00:00 Last Updated: 2024-08-07T12:19:29.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WSEE runtime (WS-Security runtime) in BEA WebLogic Server 9.0 and 9.1 does not verify credentials when decrypting client messages, which allows remote attackers to bypass application security. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017525 - http://secunia.com/advisories/23750 - http://www.securityfocus.com/bid/22082 - http://osvdb.org/38510 - http://www.vupen.com/english/advisories/2007/0213 - http://dev2dev.bea.com/pub/advisory/210
CVE ID: CVE-2007-0417 State: PUBLISHED Published: 2007-01-23T00:00:00 Last Updated: 2024-08-07T12:19:29.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server 7.0 through 7.0 SP7, 8.1 through 8.1 SP5, 9.0, and 9.1, when using the WebLogic Server 6.1 compatibility realm, allows attackers to execute certain EJB container persistence operations with an administrative identity. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38511 - http://securitytracker.com/id?1017525 - http://secunia.com/advisories/23750 - http://www.securityfocus.com/bid/22082 - http://www.vupen.com/english/advisories/2007/0213 - http://dev2dev.bea.com/pub/adviso
/www.securityfocus.com/bid/22082 - http://www.vupen.com/english/advisories/2007/0213 - http://dev2dev.bea.com/pub/advisory/211
CVE ID: CVE-2007-0418 State: PUBLISHED Published: 2007-01-23T00:00:00 Last Updated: 2024-08-07T12:19:29.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, 9.0, and 9.1 does not enforce a security policy that declares permissions for EJB methods that have array parameters, which allows remote attackers to obtain unauthorized access to these methods. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017525 - http://secunia.com/advisories/23750 - http://www.securityfocus.com/bid/22082 - http://osvdb.org/38512 - http://www.vupen.com/english/advisories/2007/0213 - http://dev2de
securityfocus.com/bid/22082 - http://osvdb.org/38512 - http://www.vupen.com/english/advisories/2007/0213 - http://dev2dev.bea.com/pub/advisory/212
CVE ID: CVE-2007-0419 State: PUBLISHED Published: 2007-01-23T00:00:00 Last Updated: 2024-08-07T12:19:30.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BEA WebLogic Server proxy plug-in before June 2006 for the Apache HTTP Server does not properly handle protocol errors, which allows remote attackers to cause a denial of service (server outage). Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017525 - http://secunia.com/advisories/23750 - http://www.securityfocus.com/bid/22082 - http://dev2dev.bea.com/pub/advisory/213 - http://osvdb.org/38513 - http://www.vupen.com/english/advisories/2007/0213
CVE ID: CVE-2007-0420 State: PUBLISHED Published: 2007-01-23T00:00:00 Last Updated: 2024-08-07T12:19:30.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server 9.0, 9.1, and 9.2 Gold allows remote attackers to obtain sensitive information via malformed HTTP requests, which reveal data from previous requests. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017525 - http://secunia.com/advisories/23750 - http://www.securityfocus.com/bid/22082 - http://www.vupen.com/english/advisories/2007/0213 - http://osvdb.org/38514 - http://dev2dev.bea.com/pub/advisory/214
CVE ID: CVE-2007-0421 State: PUBLISHED Published: 2007-01-23T00:00:00 Last Updated: 2024-08-07T12:19:29.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server 6.1 through 6.1 SP7, and 7.0 through 7.0 SP7 allows remote attackers to cause a denial of service (disk consumption) via requests containing malformed headers, which cause a large amount of data to be written to the server log. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017525 - http://secunia.com/advisories/23750 - http://www.securityfocus.com/bid/22082 - http://osvdb.org/32859 - http://dev2dev.bea.com/pub/advisory/215 - http://www.vupen.com/english/advi
cus.com/bid/22082 - http://osvdb.org/32859 - http://dev2dev.bea.com/pub/advisory/215 - http://www.vupen.com/english/advisories/2007/0213
CVE ID: CVE-2007-0422 State: PUBLISHED Published: 2007-01-23T00:00:00 Last Updated: 2024-08-07T12:19:30.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server 9.0, 9.1, and 9.2 Gold, when running on Solaris 9, allows remote attackers to cause a denial of service (server inaccessibility) via manipulated socket connections. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32858 - http://securitytracker.com/id?1017525 - http://secunia.com/advisories/23750 - http://www.securityfocus.com/bid/22082 - http://www.vupen.com/english/advisories/2007/0213 - http://dev2dev.bea.com/pub/advisory/217
CVE ID: CVE-2007-0423 State: PUBLISHED Published: 2007-01-23T00:00:00 Last Updated: 2024-08-07T12:19:30.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Portal 9.2 does not properly handle when an administrator deletes entitlements for a role, which causes other role entitlements to be "inadvertently affected," which has an unknown impact. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32857 - http://secunia.com/advisories/23750 - http://www.securityfocus.com/bid/22082 - http://securitytracker.com/id?1017521 - http://www.vupen.com/english/advisories/2007/0213 - http://dev2dev.bea.com/pub/advisory/218
CVE ID: CVE-2007-0424 State: PUBLISHED Published: 2007-01-23T00:00:00 Last Updated: 2024-08-07T12:19:30.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the BEA WebLogic Server proxy plug-in for Netscape Enterprise Server before September 2006 for Netscape Enterprise Server allow remote attackers to cause a denial of service via certain requests that trigger errors that lead to a server being marked as unavailable, hosting web server failure, or CPU consumption. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017525 - http://secunia.com/advisories/23750 - http://www.securityfocus.com/bid/22082 - http:
://securitytracker.com/id?1017525 - http://secunia.com/advisories/23750 - http://www.securityfocus.com/bid/22082 - http://osvdb.org/32856 - http://www.vupen.com/english/advisories/2007/0213 - http://dev2dev.bea.com/pub/advisory/219
CVE ID: CVE-2007-0425 State: PUBLISHED Published: 2007-01-23T00:00:00 Last Updated: 2024-08-07T12:19:30.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in BEA WebLogic Platform and Server 8.1 through 8.1 SP5, and JRockit 1.4.2 R4.5 and earlier, allows attackers to gain privileges via unspecified vectors, related to an "overflow condition," probably a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017525 - http://secunia.com/advisories/23750 - http://dev2dev.bea.com/pub/advisory/222 - http://www.vupen.com/english/advisories/2007/0213 - http://osvdb.org/38515
CVE ID: CVE-2007-0426 State: PUBLISHED Published: 2007-01-23T00:00:00 Last Updated: 2024-08-07T12:19:30.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Portal 9.2, when running in a WebLogic Server clustered environment using WebLogic Portal entitlements, does not properly propagate entitlement policy changes if the changes are made on a managed server while the Administrative Server is unavailable, which might allow attackers to bypass intended restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23750 - http://www.securityfocus.com/bid/22082 - http://securitytracker.com/id?1017521 - http://www.vupen.com/en
isories/23750 - http://www.securityfocus.com/bid/22082 - http://securitytracker.com/id?1017521 - http://www.vupen.com/english/advisories/2007/0213 - http://osvdb.org/32854 - http://dev2dev.bea.com/pub/advisory/223 - http://osvdb.org/38516
CVE ID: CVE-2007-0427 State: PUBLISHED Published: 2007-01-23T00:00:00 Last Updated: 2024-08-07T12:19:29.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitrary code via a help project (.HPJ) file with a long HLP field in the OPTIONS section. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22135 - http://securityreason.com/securityalert/2177 - http://osvdb.org/31899 - http://secunia.com/advisories/23862 - http://www.anspi.pl/~porkythepig/visualization/hpj-x01.cpp - http://www.securityfocus.com/archive/1/457436/100
s/23862 - http://www.anspi.pl/~porkythepig/visualization/hpj-x01.cpp - http://www.securityfocus.com/archive/1/457436/100/0/threaded
CVE ID: CVE-2007-0428 State: PUBLISHED Published: 2007-01-23T02:00:00 Last Updated: 2024-08-07T12:19:30.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the chtbl_lookup function in hash.c for WzdFTPD 8.0 and earlier allows remote attackers to cause a denial of service via a crafted FTP command, probably due to a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23852 - http://www.s21sec.com/avisos/s21sec-033-en.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/31599 - http://securityreason.com/securityalert/2171 - http://www.vupen.com/english/advisories/2007/0277 - htt
abilities/31599 - http://securityreason.com/securityalert/2171 - http://www.vupen.com/english/advisories/2007/0277 - http://osvdb.org/32941 - http://securitytracker.com/id?1017537 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051896.html - http://www.securityfocus.com/archive/1/457454/100/0/threaded
CVE ID: CVE-2007-0429 State: PUBLISHED Published: 2007-01-23T02:00:00 Last Updated: 2024-08-07T12:19:30.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: DivXBrowserPlugin (aka DivX Web Player) npdivx32.dll, as distributed with DivX Player 6.4.1, allows remote attackers to cause a denial of service (Internet Explorer 7 crash) by invoking the GoWindowed method for a certain instance of the ActiveX object. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3157 - http://osvdb.org/37693 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31601 - http://www.securityfocus.com/bid/22133
CVE ID: CVE-2007-0430 State: PUBLISHED Published: 2007-01-23T02:00:00 Last Updated: 2024-08-07T12:19:30.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: The shared_region_map_file_np function in Apple Mac OS X 10.4.8 and earlier kernel allows local users to cause a denial of service (memory corruption) via a large mappingCount value. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23823 - http://securityreason.com/securityalert/2178 - http://securitytracker.com/id?1017538 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31645 - http://www.securityfocus.com/archive/1/457466/100/0/threaded - http://risesecurity.org/advisory.ph
lnerabilities/31645 - http://www.securityfocus.com/archive/1/457466/100/0/threaded - http://risesecurity.org/advisory.php?id=RISE-2007001.txt - http://www.vupen.com/english/advisories/2007/0275 - http://www.osvdb.org/32942
CVE ID: CVE-2007-0431 State: PUBLISHED Published: 2007-01-23T02:00:00 Last Updated: 2024-08-07T12:19:30.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: AVM Fritz!Box 7050, and possibly other product models, allows remote attackers to cause a denial of service (VoIP application crash) via a zero-length UDP packet to the SIP port (port 5060). Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0387.html - http://www.securityfocus.com/bid/22130 - http://mazzoo.de/blog/2007/01/18#FritzBox_DoS - http://secunia.com/advisories/23868 - http://www.vupen.com/english/advisories/2007/0272 - http://www.securityfocu
_DoS - http://secunia.com/advisories/23868 - http://www.vupen.com/english/advisories/2007/0272 - http://www.securityfocus.com/archive/1/457829/100/0/threaded - ftp://ftp.avm.de/fritz.box/fritzbox.fon_wlan_7050/firmware/info.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/31633 - http://osvdb.org/32940 - http://www.securityfocus.com/archive/1/457406/100/0/threaded
CVE ID: CVE-2007-0432 State: PUBLISHED Published: 2007-01-23T02:00:00 Last Updated: 2024-08-07T12:19:30.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA AquaLogic Service Bus 2.0, 2.1, and 2.5 does not properly reject malformed request messages to a proxy service, which might allow remote attackers to bypass authorization policies and route requests to back-end services or conduct other unauthorized activities. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22082 - http://secunia.com/advisories/23786 - http://osvdb.org/32862 - http://securitytracker.com/id?1017523 - http://dev2dev.bea.com/pub/advisory/224
CVE ID: CVE-2007-0433 State: PUBLISHED Published: 2007-01-23T02:00:00 Last Updated: 2024-08-07T12:19:30.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2, when using Active Directory LDAP for authentication, allows remote authenticated users to access the server even after the account has been disabled. Additional Analyst Notes: - CVE Program Container: References: - http://dev2dev.bea.com/pub/advisory/221 - http://www.securityfocus.com/bid/22082 - http://secunia.com/advisories/23786 - http://osvdb.org/32861 - http://securitytracker.com/id?1017524