Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-4708 State: PUBLISHED Published: 2007-12-19T21:00:00 Last Updated: 2024-08-07T15:08:33.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Address Book in Apple Mac OS X 10.4.11 allows remote attackers to execute arbitrary code via the URL handler. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/4238 - http://www.us-cert.gov/cas/techalerts/TA07-352A.html - http://secunia.com/advisories/28136 - http://www.securityfocus.com/bid/26910 - http://securitytracker.com/id?1019106 - http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html - https://exchange.xforce.i
er.com/id?1019106 - http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39092 - http://docs.info.apple.com/article.html?artnum=307179
CVE ID: CVE-2007-4709 State: PUBLISHED Published: 2007-12-19T21:00:00 Last Updated: 2024-08-07T15:08:32.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in CFNetwork in Apple Mac OS X 10.5.1 allows remote attackers to overwrite arbitrary files via a crafted HTTP response. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/4238 - http://www.us-cert.gov/cas/techalerts/TA07-352A.html - http://secunia.com/advisories/28136 - http://www.securityfocus.com/bid/26910 - http://securitytracker.com/id?1019106 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39093 - http://lists.apple.com/arc
securitytracker.com/id?1019106 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39093 - http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html - http://docs.info.apple.com/article.html?artnum=307179
CVE ID: CVE-2007-4710 State: PUBLISHED Published: 2007-12-19T21:00:00 Last Updated: 2024-08-07T15:08:32.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ColorSync in Apple Mac OS X 10.4.11 allows remote attackers to cause a denial of service (application termination) or execute arbitrary code via an image with a crafted ColorSync profile, which triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/4238 - http://www.us-cert.gov/cas/techalerts/TA07-352A.html - http://secunia.com/advisories/28136 - http://www.securityfocus.com/bid/26910 - http://securitytracker.com/id?
52A.html - http://secunia.com/advisories/28136 - http://www.securityfocus.com/bid/26910 - http://securitytracker.com/id?1019106 - http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39094 - http://docs.info.apple.com/article.html?artnum=307179
CVE ID: CVE-2007-4711 State: PUBLISHED Published: 2007-09-05T19:00:00 Last Updated: 2024-08-07T15:08:33.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Toms Gaestebuch 1.00 allow remote attackers to inject arbitrary web script or HTML via the (1) homepage, (2) mail, and (3) name parameters in a show action to (a) form.php; the (4) language and (5) anzeigebreite parameters to (b) admin/header.php; and the (6) msg parameter to (c) install.php, different vectors than CVE-2006-0706. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/478803/100/0/threaded - http://www.osvdb.
- CVE Program Container: References: - http://www.securityfocus.com/archive/1/478803/100/0/threaded - http://www.osvdb.org/36736 - http://securityreason.com/securityalert/3097 - http://www.securityfocus.com/archive/1/478360/100/0/threaded - http://secunia.com/advisories/26662 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36404 - http://www.securityfocus.com/bid/25507 - http://www.osvdb.org/36735
CVE ID: CVE-2007-4712 State: PUBLISHED Published: 2007-09-05T19:00:00 Last Updated: 2024-08-07T15:08:33.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in eNetman 1 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/36806 - https://www.exploit-db.com/exploits/4356 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36418 - http://www.vupen.com/english/advisories/2007/3091 - http://www.securityfocus.com/bid/25527 - http://secunia.com/advisories/26656
CVE ID: CVE-2007-4713 State: PUBLISHED Published: 2007-09-05T19:00:00 Last Updated: 2024-08-07T15:08:33.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in urchin.cgi in Urchin 5.6.00r2 allow remote attackers to inject arbitrary web script or HTML via the (1) dtc, (2) vid, (3) n, (4) dt, (5) ed, and (6) bd parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36401 - http://www.vupen.com/english/advisories/2007/3085 - http://pridels-team.blogspot.com/2007/09/urchin-5x-multiple-xss-vuln.html - http://osvdb.org/36807 - http://secunia.com/advisories/2668
team.blogspot.com/2007/09/urchin-5x-multiple-xss-vuln.html - http://osvdb.org/36807 - http://secunia.com/advisories/26682 - http://www.securityfocus.com/bid/25530
CVE ID: CVE-2007-4714 State: PUBLISHED Published: 2007-09-05T19:00:00 Last Updated: 2024-08-07T15:08:32.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in error_view.php in Yvora 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38426 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36415 - http://www.securityfocus.com/bid/25511 - https://www.exploit-db.com/exploits/4353 - http://www.vupen.com/english/advisories/2007/3090
CVE ID: CVE-2007-4715 State: PUBLISHED Published: 2007-09-05T19:00:00 Last Updated: 2024-08-07T15:08:33.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Weblogicnet allow remote attackers to execute arbitrary PHP code via a URL in the files_dir parameter in (1) es_desp.php, (2) es_custom_menu.php, and (3) es_offer.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3089 - http://osvdb.org/38425 - http://www.securityfocus.com/archive/1/478379/100/0/threaded - https://www.exploit-db.com/exploits/4352 - http://www.securityfocus.com/bid/25506 - http://osvdb.org/3842
0/0/threaded - https://www.exploit-db.com/exploits/4352 - http://www.securityfocus.com/bid/25506 - http://osvdb.org/38423 - http://securityreason.com/securityalert/3096 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36409 - http://www.solpotcrew.org/adv/home_edition2001-adv-02.txt - http://osvdb.org/38424
CVE ID: CVE-2007-4716 State: PUBLISHED Published: 2007-09-05T19:00:00 Last Updated: 2024-08-07T15:08:33.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PHD Help Desk before 1.31 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/forum/forum.php?forum_id=731460 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36431 - http://secunia.com/advisories/26688 - http://www.osvdb.org/36789 - http://sourceforge.net/project/shownotes.php?release_id=536503 - http://www.vupen.com/english/advisories/2007/3039 - http://www.secu
eforge.net/project/shownotes.php?release_id=536503 - http://www.vupen.com/english/advisories/2007/3039 - http://www.securityfocus.com/bid/25517 - http://sourceforge.net/project/shownotes.php?release_id=536503&group_id=170208
CVE ID: CVE-2007-4717 State: PUBLISHED Published: 2007-09-05T19:00:00 Last Updated: 2024-08-07T15:08:33.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.8.6 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) dir parameter in admin/adminusers.php, the (2) action parameter in admin/advancedUserSearch.php, and the (3) view parameter in admin/campusProblem.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.claroline.net/forum/viewtopic.php?t=13448 - http://osvdb.org/38925 - http://www.claroline.net/wiki/index.php/Changelog_1.8.x#Security
/forum/viewtopic.php?t=13448 - http://osvdb.org/38925 - http://www.claroline.net/wiki/index.php/Changelog_1.8.x#Security - http://osvdb.org/38927 - http://www.securityfocus.com/bid/25521 - http://secunia.com/advisories/26685 - http://www.vupen.com/english/advisories/2007/3045 - http://osvdb.org/38926
CVE ID: CVE-2007-4718 State: PUBLISHED Published: 2007-09-05T19:00:00 Last Updated: 2024-08-07T15:08:33.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in inc/lib/language.lib.php in Claroline before 1.8.6 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.claroline.net/forum/viewtopic.php?t=13533 - http://www.claroline.net/wiki/index.php/Changelog_1.8.x#Security - http://www.securityfocus.com/bid/25521 - http://secunia.com/advisories/26685 - http://www.vupen.com/english/advisories/2007/3045 - http://osvd
us.com/bid/25521 - http://secunia.com/advisories/26685 - http://www.vupen.com/english/advisories/2007/3045 - http://osvdb.org/38987
CVE ID: CVE-2007-4719 State: PUBLISHED Published: 2007-09-05T19:00:00 Last Updated: 2024-08-07T15:08:32.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in read.php in 212cafeBoard 6.30 Beta allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/478496/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/36403 - http://securityreason.com/securityalert/3099 - http://www.securityfocus.com/bid/25526 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065581.html - http://osvdb.org/38334
CVE ID: CVE-2007-4720 State: PUBLISHED Published: 2007-09-05T19:00:00 Last Updated: 2024-08-07T15:08:33.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Shared Trace Service in Hitachi JP1/Cm2/Network Node Manager (NNM) 07-10 through 07-10-05, and NNM Starter Edition Enterprise and 250 08-00 through 08-10, allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3035 - http://osvdb.org/37859 - http://secunia.com/advisories/26668 - http://www.hitachi-support.com/security_e/vuls_e/HS07-030_e/index-e.html - http://www.sec
secunia.com/advisories/26668 - http://www.hitachi-support.com/security_e/vuls_e/HS07-030_e/index-e.html - http://www.securityfocus.com/bid/25520 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36374
CVE ID: CVE-2007-4721 State: REJECTED Published: 2007-09-05T19:00:00 Last Updated: 2007-11-28T10:00:00 Description: No description available.
CVE ID: CVE-2007-4722 State: PUBLISHED Published: 2007-09-05T19:00:00 Last Updated: 2024-08-07T15:08:33.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the Quantum Streaming Internet Explorer Player ActiveX control in qsp2ie07051001.dll 1.0.0.1 in Move Media Player allow remote attackers to execute arbitrary code via a long string to the (1) Play and (2) Buzzer methods. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/298345 - http://secunia.com/advisories/26600 - http://www.securityfocus.com/bid/25529 - http://osvdb.org/37778 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36433 -
www.securityfocus.com/bid/25529 - http://osvdb.org/37778 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36433 - https://www.exploit-db.com/exploits/4868
CVE ID: CVE-2007-4723 State: PUBLISHED Published: 2007-09-05T19:00:00 Last Updated: 2024-08-07T15:08:32.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Ragnarok Online Control Panel 4.3.4a, when the Apache HTTP Server is used, allows remote attackers to bypass authentication via directory traversal sequences in a URI that ends with the name of a publicly available page, as demonstrated by a "/...../" sequence and an account_manage.php/login.php final component for reaching the protected account_manage.php page. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3100 - http://www.securit
Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3100 - http://www.securityfocus.com/archive/1/478263/100/0/threaded - http://osvdb.org/45879
CVE ID: CVE-2007-4724 State: PUBLISHED Published: 2007-09-05T19:00:00 Last Updated: 2024-08-07T15:08:33.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbitrary users via the time and description parameters. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2007-09/0040.html - http://securityreason.com/securityalert/3094 - http://www.securityfocus.com/archive/1/478491/100/0/threaded - http://osvdb.org/41029
CVE ID: CVE-2007-4725 State: PUBLISHED Published: 2007-09-05T19:00:00 Last Updated: 2024-08-07T15:08:32.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack consumption vulnerability in AkkyWareHOUSE 7-zip32.dll before 4.42.00.04, as derived from Igor Pavlov 7-Zip before 4.53 beta, allows user-assisted remote attackers to execute arbitrary code via a long filename in an archive, leading to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26624 - http://jvn.jp/jp/JVN%2362868899/index.html - http://www.securityfocus.com/bid/25545 - http://sourceforge.net/project/shownotes.php?release_id=535160&group_id
.html - http://www.securityfocus.com/bid/25545 - http://sourceforge.net/project/shownotes.php?release_id=535160&group_id=14481 - http://osvdb.org/40482 - http://akky.cjb.net/security/7-zip3.txt - http://www.vupen.com/english/advisories/2007/3086 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36459
CVE ID: CVE-2007-4726 State: PUBLISHED Published: 2007-09-05T19:00:00 Last Updated: 2024-08-07T15:08:33.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Web Oddity 0.09b allows remote attackers to read arbitrary files via a .. (dot dot) in the URI. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36427 - https://www.exploit-db.com/exploits/4362 - http://osvdb.org/41028 - http://www.securityfocus.com/bid/25535
CVE ID: CVE-2007-4727 State: PUBLISHED Published: 2007-09-12T19:00:00 Last Updated: 2024-08-07T15:08:33.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the fcgi_env_add function in mod_proxy_backend_fastcgi.c in the mod_fastcgi extension in lighttpd before 1.4.18 allows remote attackers to overwrite arbitrary CGI variables and execute arbitrary code via an HTTP request with a long content length, as demonstrated by overwriting the SCRIPT_FILENAME variable, aka a "header overflow." Additional Analyst Notes: - CVE Program Container: References: - https://issues.rpath.com/browse/RPL-1715 - http://www.securityfocus.com/archive/1/479763/100/0/threaded - http://f
es: - https://issues.rpath.com/browse/RPL-1715 - http://www.securityfocus.com/archive/1/479763/100/0/threaded - http://fedoranews.org/updates/FEDORA-2007-213.shtml - http://secunia.com/advisories/26732 - http://www.gentoo.org/security/en/glsa/glsa-200709-16.xml - http://secweb.se/en/advisories/lighttpd-fastcgi-remote-vulnerability/ - http://www.securityfocus.com/bid/25622 - https://bugzilla.redhat.com/show_bug.cgi?id=284511 - http://www.lighttpd.net/assets/2007/9/9/lighttpd_sa_2007_12.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/36526 - http://securityreason.com/securityalert/3127 - http://secunia.com/advisories/26997 - http://trac.lighttpd.net/trac/changeset/1986 - http://secu
om/securityalert/3127 - http://secunia.com/advisories/26997 - http://trac.lighttpd.net/trac/changeset/1986 - http://secunia.com/advisories/26824 - http://www.vupen.com/english/advisories/2007/3110 - http://secunia.com/advisories/27229 - http://secunia.com/advisories/26794 - http://www.novell.com/linux/security/advisories/2007_20_sr.html
CVE ID: CVE-2007-4730 State: PUBLISHED Published: 2007-09-11T19:00:00 Last Updated: 2024-08-07T15:08:33.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X.org X11 server before 1.4 allows local users to execute arbitrary code by copying data from a large pixel depth pixmap into a smaller pixel depth pixmap. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2007_54_xorg.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:178 - http://lists.freedesktop.org/archives/xorg-announce/2007-September/000378.html -
urity/advisories?name=MDKSA-2007:178 - http://lists.freedesktop.org/archives/xorg-announce/2007-September/000378.html - http://osvdb.org/37726 - http://secunia.com/advisories/26823 - https://issues.rpath.com/browse/RPL-1728 - http://security.gentoo.org/glsa/glsa-200710-16.xml - http://secunia.com/advisories/26859 - http://secunia.com/advisories/27147 - http://www.redhat.com/support/errata/RHSA-2007-0898.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:022 - http://www.securityfocus.com/bid/25606 - http://www.ubuntu.com/usn/usn-514-1 - http://secunia.com/advisories/26743 - http://secunia.com/advisories/27228 - http://secunia.com/advisories/30161 - https://exchange.xforce.ibm
visories/26743 - http://secunia.com/advisories/27228 - http://secunia.com/advisories/30161 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36535 - http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml - http://www.securitytracker.com/id?1018665 - http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0187 - http://secunia.com/advisories/26897 - http://secunia.com/advisories/26755 - http://bugs.freedesktop.org/show_bug.cgi?id=7447 - http://secunia.com/advisories/26763 - http://support.avaya.com/elmodocs2/security/ASA-2007-394.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10430 - http://secunia.com/advisories/27179 - http://bugs.gentoo.org/sho
search/definition/oval%3Aorg.mitre.oval%3Adef%3A10430 - http://secunia.com/advisories/27179 - http://bugs.gentoo.org/show_bug.cgi?id=191964 - http://www.debian.org/security/2007/dsa-1372 - http://www.vupen.com/english/advisories/2007/3098
CVE ID: CVE-2007-4731 State: PUBLISHED Published: 2007-09-12T01:00:00 Last Updated: 2024-08-07T15:08:33.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the TMregChange function in TMReg.dll in Trend Micro ServerProtect before 5.58 Security Patch 4 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 5005. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45878 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36512 - http://www.zerodayinitiative.com/advisories/ZDI-07-051.html - http://www.securityfocus.com/archive/1/478867/100/0/threaded - http://securityreason.com/securityalert/
DI-07-051.html - http://www.securityfocus.com/archive/1/478867/100/0/threaded - http://securityreason.com/securityalert/3128 - http://securitytracker.com/id?1018594
CVE ID: CVE-2007-4732 State: PUBLISHED Published: 2007-09-06T19:00:00 Last Updated: 2024-08-07T15:08:33.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the strfreectty function in the Special File System (SPECFS) in Sun Solaris 8 through 10 allows local users to cause a denial of service (system panic), related to passing a NULL pointer to the pgsignal function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36379 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2173 - http://support.avaya.com/elmodocs2/security/ASA-2007-374.htm - http://
h/definition/oval%3Aorg.mitre.oval%3Adef%3A2173 - http://support.avaya.com/elmodocs2/security/ASA-2007-374.htm - http://securitytracker.com/id?1018643 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103009-1 - http://secunia.com/advisories/26528 - http://secunia.com/advisories/26731 - http://osvdb.org/37323 - http://www.vupen.com/english/advisories/2007/3031 - http://www.securityfocus.com/bid/25510
CVE ID: CVE-2007-4733 State: PUBLISHED Published: 2007-09-06T19:00:00 Last Updated: 2024-08-07T15:08:33.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Aztech DSL600EU router, when WAN access to the web interface is disabled, does not properly block inbound traffic on TCP port 80, which allows remote attackers to connect to the web interface by guessing a TCP sequence number, possibly involving spoofing of an ARP packet, a related issue to CVE-1999-0077. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3093 - http://securitytracker.com/id?1018641 - http://osvdb.org/45877 - http://www.securityfocus.com/archive/1/47831
ert/3093 - http://securitytracker.com/id?1018641 - http://osvdb.org/45877 - http://www.securityfocus.com/archive/1/478314/100/0/threaded
CVE ID: CVE-2007-4734 State: PUBLISHED Published: 2007-09-06T19:00:00 Last Updated: 2024-08-07T15:08:33.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Ots Labs OTSTurntables 1.00 allows user-assisted remote attackers to execute arbitrary code via a long file path in an m3u file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26667 - http://osvdb.org/40173 - http://www.exploit-db.com/exploits/9589 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36429 - http://www.securityfocus.com/bid/25514 - https://www.exploit-db.com/exploits/4355 - http://www.vupen.com/english/advisories/2007/3043
CVE ID: CVE-2007-4735 State: PUBLISHED Published: 2007-09-06T19:00:00 Last Updated: 2024-08-07T15:08:33.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Next Generation Software Virtual DJ (VDJ) 5.0 allows user-assisted remote attackers to execute arbitrary code via a long file path in an m3u file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25513 - http://www.securityfocus.com/bid/25512 - http://secunia.com/advisories/26665 - https://www.exploit-db.com/exploits/4354 - http://osvdb.org/40307 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36430 - http://www.vupen.com/english/advisories/2007/3036
CVE ID: CVE-2007-4736 State: PUBLISHED Published: 2007-09-06T19:00:00 Last Updated: 2024-08-07T15:08:33.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in category.php in CartKeeper CKGold Shopping Cart 2.0 allows remote attackers to execute arbitrary SQL commands via the category_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4349 - http://osvdb.org/38422 - http://www.vupen.com/english/advisories/2007/3088 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36419