Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-2621 State: PUBLISHED Published: 2007-05-11T16:00:00 Last Updated: 2024-08-07T13:42:33.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in event_view.php in Thyme Calendar 1.3 allows remote attackers to execute arbitrary SQL commands via the eid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25234 - http://www.vupen.com/english/advisories/2007/1771 - http://osvdb.org/35971 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34211 - https://www.exploit-db.com/exploits/3895 - http://www.securityfocus.com/bid/23912
CVE ID: CVE-2007-2622 State: PUBLISHED Published: 2007-05-11T16:00:00 Last Updated: 2024-08-07T13:42:33.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in TaskDriver 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the username parameter to login.php or (2) the taskid parameter to notes.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1768 - http://secunia.com/advisories/25221 - http://osvdb.org/35973 - https://www.exploit-db.com/exploits/3896 - http://osvdb.org/35972 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34249 - http://www.
db.com/exploits/3896 - http://osvdb.org/35972 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34249 - http://www.securityfocus.com/bid/23919
CVE ID: CVE-2007-2623 State: PUBLISHED Published: 2007-05-11T16:00:00 Last Updated: 2024-08-07T13:42:33.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in RControl.dll in Remote Display Dev kit 1.2.1.0 allow remote attackers to cause a denial of service (Internet Explorer 7 crash) via (1) a long first argument to the connect function or (2) a long InternalServer property value, possibly involving ntdll.dll. Additional Analyst Notes: - CVE Program Container: References: - http://moaxb.blogspot.com/2007/05/moaxb-10-rcontroldll-v-1210-denial-of.html - http://www.securityfocus.com/bid/23914 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34231 - h
denial-of.html - http://www.securityfocus.com/bid/23914 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34231 - http://osvdb.org/36022 - http://www.shinnai.altervista.org/moaxb/20070510/rControl.txt - https://www.exploit-db.com/exploits/3891
CVE ID: CVE-2007-2624 State: PUBLISHED Published: 2007-05-11T17:00:00 Last Updated: 2024-08-07T13:42:33.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dynamic variable evaluation vulnerability in shared/config/cp_config.php in All In One Control Panel (AIOCP) before 1.3.016 allows remote attackers to conduct cross-site scripting (XSS) and possibly other attacks via the SERVER superglobal array. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25088 - http://sourceforge.net/project/shownotes.php?release_id=504924 - https://exchange.xforce.ibmcloud.com/vulnerabi
/25088 - http://sourceforge.net/project/shownotes.php?release_id=504924 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34038 - http://www.securityfocus.com/bid/23790 - http://www.vupen.com/english/advisories/2007/1637 - http://osvdb.org/35534
CVE ID: CVE-2007-2625 State: PUBLISHED Published: 2007-05-11T17:00:00 Last Updated: 2024-08-07T13:42:33.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in shared/code/cp_authorization.php in All In One Control Panel (AIOCP) before 1.3.016 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=504924 - http://www.vupen.com/english/advisories/2007/1637 - http://osvdb.org/35535
CVE ID: CVE-2007-2626 State: PUBLISHED Published: 2007-05-11T17:00:00 Last Updated: 2024-08-07T13:42:33.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin.php in SchoolBoard allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters. NOTE: CVE disputes this issue, because 'username' does not exist, and the password is not used in any queries Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/467486/100/0/threaded - http://www.securityfocus.com/bid/23798 - http://osvdb.org/36162 - http://securityreason.com/securityalert/2695 - http://www.attrit
.securityfocus.com/bid/23798 - http://osvdb.org/36162 - http://securityreason.com/securityalert/2695 - http://www.attrition.org/pipermail/vim/2007-May/001609.html
CVE ID: CVE-2007-2627 State: PUBLISHED Published: 2007-05-11T17:00:00 Last Updated: 2024-08-07T13:42:33.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in sidebar.php in WordPress, when custom 404 pages that call get_sidebar are used, allows remote attackers to inject arbitrary web script or HTML via the query string (PHP_SELF), a different vulnerability than CVE-2007-1622. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37296 - http://securityreason.com/securityalert/2694 - http://www.securityfocus.com/archive/1/467360/100/0/threaded
CVE ID: CVE-2007-2628 State: PUBLISHED Published: 2007-05-11T17:00:00 Last Updated: 2024-08-07T13:42:33.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/logout.php in Justin Koivisto SecurityAdmin for PHP (aka PHPSecurityAdmin, PSA) 4.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the PSA_PATH parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36155 - http://securityreason.com/securityalert/2693 - http://www.securityfocus.com/bid/23801 - http://www.securityfocus.com/archive/1/467662/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34091
CVE ID: CVE-2007-2629 State: PUBLISHED Published: 2007-05-11T17:00:00 Last Updated: 2024-08-07T13:42:33.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bradford CampusManager Network Control Application Server 3.1(6) allows remote attackers to obtain sensitive information (backup, log, and configuration files) via direct request for certain files in (1) /runTime/ or (2) /remediationReports/. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2698 - http://www.securityfocus.com/archive/1/467490/100/0/threaded - http://osvdb.org/35820 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34042 - http://www.john-martinelli.c
ded - http://osvdb.org/35820 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34042 - http://www.john-martinelli.com/work/campusmanager.txt - http://secunia.com/advisories/25138
CVE ID: CVE-2007-2630 State: PUBLISHED Published: 2007-05-11T17:00:00 Last Updated: 2024-08-07T13:42:33.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in filemanager/browser/default/connectors/php/config.php in the FCKeditor module, as used in ActiveCampaign 1-2-All (aka 12All) 4.50 through 4.53.13, and possibly other products, allows remote authenticated administrators to upload and possibly execute .php4 and .php5 files via unspecified vectors. NOTE: this issue is reachable through filemanager/browser/default/browser.html. Additional Analyst Notes: - CVE Program Container: References: - http://www.activecampaign.com/support/forum/showthre
l. Additional Analyst Notes: - CVE Program Container: References: - http://www.activecampaign.com/support/forum/showthread.php?t=3293 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34049 - http://www.securityfocus.com/archive/1/467879/100/0/threaded - http://www.securityfocus.com/archive/1/467483/100/0/threaded - http://osvdb.org/36161 - http://www.securityfocus.com/bid/23792
CVE ID: CVE-2007-2631 State: PUBLISHED Published: 2007-05-13T23:00:00 Last Updated: 2024-08-07T13:42:33.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in SquirrelMail 1.4.8-4.fc6 and earlier allows remote attackers to perform unspecified actions as arbitrary users via unspecified vectors. NOTE: this issue might overlap CVE-2007-2589 or CVE-2002-1648. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/468253/100/0/threaded - http://www.securityfocus.com/archive/1/468220/100/0/threaded - http://osvdb.org/35890
CVE ID: CVE-2007-2632 State: PUBLISHED Published: 2007-05-13T23:00:00 Last Updated: 2024-08-07T13:42:33.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHP Multi User Randomizer (phpMUR) 2006.09.13 allow remote attackers to inject arbitrary web script or HTML via (1) the edit_plugin parameter to configure_plugin.tpl.php, or (2) certain array parameters to web/phpinfo.php, as demonstrated by 1[] or a[]. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1796 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34228 - http://www.securityfocus.com/bid/23917 - http
s/2007/1796 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34228 - http://www.securityfocus.com/bid/23917 - http://marc.info/?l=bugtraq&m=117883301207293&w=2 - http://osvdb.org/36212 - http://osvdb.org/36213
CVE ID: CVE-2007-2633 State: PUBLISHED Published: 2007-05-13T23:00:00 Last Updated: 2024-08-07T13:42:33.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in H-Sphere SiteStudio 1.6 allows remote attackers to read, or include and execute, arbitrary local files via a .. (dot dot) in the template parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34243 - http://www.vupen.com/english/advisories/2007/1772 - http://secunia.com/advisories/25243 - http://www.psoft.net/SS/fixes/index.php?id=94 - http://osvdb.org/35977
CVE ID: CVE-2007-2634 State: PUBLISHED Published: 2007-05-13T23:00:00 Last Updated: 2024-08-07T13:42:33.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in common/errormsg.php in aForum 1.32 and possibly earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the header parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25224 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34202 - http://osvdb.org/35906
CVE ID: CVE-2007-2635 State: PUBLISHED Published: 2007-05-13T23:00:00 Last Updated: 2024-08-07T13:49:56.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Interchange before 5.4.2 allows remote attackers to cause an unspecified denial of service (possibly server hang) via crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - http://ftp.icdevgroup.org/interchange/5.4/ANNOUNCEMENT-5.4.2.txt - http://www.vupen.com/english/advisories/2007/1758 - http://osvdb.org/33488 - http://secunia.com/advisories/25311
CVE ID: CVE-2007-2636 State: PUBLISHED Published: 2007-05-13T23:00:00 Last Updated: 2024-08-07T13:49:55.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in phpTodo before 0.8.1 allows remote attackers to have an unknown impact via newlines in regular expressions to (1) index.php, (2) feed.php, (3) prefs.php, and (4) todolist.php; and (5) classTodoItem.php and (6) phpTodoUser.php in libs/. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1774 - http://www.securityfocus.com/bid/23928 - https://exchange.xforce.ibmcloud.com/v
vupen.com/english/advisories/2007/1774 - http://www.securityfocus.com/bid/23928 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34275 - http://phptodo.godshell.com/ChangeLog
CVE ID: CVE-2007-2637 State: PUBLISHED Published: 2007-05-13T23:00:00 Last Updated: 2024-08-07T13:49:56.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36269 - http://secunia.com/advisories/29262 - http://secunia.com/advisories/25208 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34474 - http://www.ubuntu.com/usn/usn-458-1 - http://www.debian.org/security/2008/dsa-1514
CVE ID: CVE-2007-2638 State: PUBLISHED Published: 2007-05-13T23:00:00 Last Updated: 2024-08-07T13:49:56.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: eFileCabinet 3.3 allows remote attackers to bypass authentication and access restricted portions of the interface via an invalid filecabinetnumber, which can be leveraged to obtain sensitive information or create new data structures. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2696 - http://www.securityfocus.com/bid/23944 - http://osvdb.org/34774 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34251 - http://www.securityfocus.com/archive/1/468314/100/0/threade
https://exchange.xforce.ibmcloud.com/vulnerabilities/34251 - http://www.securityfocus.com/archive/1/468314/100/0/threaded
CVE ID: CVE-2007-2639 State: PUBLISHED Published: 2007-05-13T23:00:00 Last Updated: 2024-08-07T13:49:56.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in TFTPdWin 0.4.2 allows remote attackers to read or modify arbitrary files outside the TFTP root via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2699 - http://osvdb.org/36252 - http://www.securityfocus.com/bid/23937 - http://www.securityfocus.com/archive/1/468313/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34247
CVE ID: CVE-2007-2640 State: PUBLISHED Published: 2007-05-13T23:00:00 Last Updated: 2024-08-07T13:49:56.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibTMCG before 1.1.1 does not perform a range check to avoid "trivial group generators," which allows attackers to obtain sensitive information about private cards. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1760 - http://secunia.com/advisories/25317 - http://osvdb.org/34772 - http://www.securityfocus.com/bid/23930 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34235 - http://savannah.nongnu.org/forum/forum.php?forum_id=4847
CVE ID: CVE-2007-2641 State: PUBLISHED Published: 2007-05-13T23:00:00 Last Updated: 2024-08-07T13:49:55.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in W1L3D4_bolum.asp in W1L3D4 Philboard 0.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter, a different vector than CVE-2007-0920. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3905 - http://www.vupen.com/english/advisories/2007/1789 - http://www.securityfocus.com/archive/1/468354/100/0/threaded - http://osvdb.org/35679 - http://www.securityfocus.com/bid/23945 - https://exchange.xforce.ibmcloud.com/vulnerabil
aded - http://osvdb.org/35679 - http://www.securityfocus.com/bid/23945 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34245 - http://securityreason.com/securityalert/2692 - http://secunia.com/advisories/25265
CVE ID: CVE-2007-2642 State: PUBLISHED Published: 2007-05-13T23:00:00 Last Updated: 2024-08-07T13:49:56.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in galeria.php in R2K Gallery 1.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the lang2 parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36015 - http://www.vupen.com/english/advisories/2007/1783 - http://attrition.org/pipermail/vim/2007-May/001615.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34238 - http://www.securityfocus.com/bid/23938 - https://www.exploit-db.com/exploits/3902 - http://secunia.com/advisorie
34238 - http://www.securityfocus.com/bid/23938 - https://www.exploit-db.com/exploits/3902 - http://secunia.com/advisories/25261
CVE ID: CVE-2007-2643 State: PUBLISHED Published: 2007-05-13T23:00:00 Last Updated: 2024-08-07T13:49:56.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in phpThumb.php in PinkCrow Designs Gallery or maGAZIn 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the src parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36016 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34240 - http://0day.2600.ir/exploits/3901 - http://www.vupen.com/english/advisories/2007/1782 - https://www.exploit-db.com/exploits/3901 - http://secunia.com/advisories/25262 - http://www.securityfocus.com/b
7/1782 - https://www.exploit-db.com/exploits/3901 - http://secunia.com/advisories/25262 - http://www.securityfocus.com/bid/23943
CVE ID: CVE-2007-2644 State: PUBLISHED Published: 2007-05-13T23:00:00 Last Updated: 2024-08-07T13:49:56.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitrary files by calling the Save method with an arbitrary filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.shinnai.altervista.org/viewtopic.php?id=42&t_id=13 - http://moaxb.blogspot.com/2007/05/morovia-barcode-activex-professional.html - https://www.exploit-db.com/exploits/3899 - http://osvdb.org/37786 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34248 - http://www.se
.com/exploits/3899 - http://osvdb.org/37786 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34248 - http://www.securityfocus.com/bid/23934
CVE ID: CVE-2007-2645 State: PUBLISHED Published: 2007-05-14T21:00:00 Last Updated: 2024-08-07T13:49:56.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the exif_data_load_data_entry function in exif-data.c in libexif before 0.6.14 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted EXIF data, involving the (1) doff or (2) s variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/470502/100/100/threaded - http://secunia.com/advisories/25599 - http://security.gentoo.org/glsa/glsa-200706-01.xml - http://secunia.com/advisories/25235 -
ecunia.com/advisories/25599 - http://security.gentoo.org/glsa/glsa-200706-01.xml - http://secunia.com/advisories/25235 - http://www.novell.com/linux/security/advisories/2007_39_libexif.html - http://secunia.com/advisories/26083 - http://secunia.com/advisories/25540 - http://secunia.com/advisories/28776 - http://www.novell.com/linux/security/advisories/2007_14_sr.html - http://secunia.com/advisories/25621 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:118 - http://sourceforge.net/project/shownotes.php?release_id=507447 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34233 - http://secunia.com/advisories/25569 - http://www.vupen.com/english/advisories/2007/1761 - http://s
lnerabilities/34233 - http://secunia.com/advisories/25569 - http://www.vupen.com/english/advisories/2007/1761 - http://sourceforge.net/tracker/index.php?func=detail&aid=1716196&group_id=12272&atid=112272 - http://osvdb.org/35978 - http://secunia.com/advisories/25932 - http://www.debian.org/security/2008/dsa-1487 - http://www.ubuntu.com/usn/usn-471-1 - http://www.securityfocus.com/bid/23927 - https://issues.rpath.com/browse/RPL-1431
CVE ID: CVE-2007-2646 State: PUBLISHED Published: 2007-05-14T21:00:00 Last Updated: 2024-08-07T13:49:56.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in yEnc32 1.0.7.207 allows user-assisted remote attackers to execute arbitrary code via a long filename in an NTX file. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2706 - http://osvdb.org/36006 - http://www.vupen.com/english/advisories/2007/1787 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34271 - http://www.securityfocus.com/archive/1/468448/100/0/threaded - http://secunia.com/advisories/25252 - http://vuln.sg/yenc32-107-en.html
rityfocus.com/archive/1/468448/100/0/threaded - http://secunia.com/advisories/25252 - http://vuln.sg/yenc32-107-en.html - http://www.securityfocus.com/bid/23948
CVE ID: CVE-2007-2647 State: PUBLISHED Published: 2007-05-14T21:00:00 Last Updated: 2024-08-07T13:49:56.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in admin/admin_configuration.php in Monalbum 0.8.7 allows remote authenticated users to inject arbitrary PHP code into the conf/config.inc.php file via the (1) gadm_pass, (2) gadm_user, (3) gcfgHote, (4) gcfgPass, (5) gcfgUser, (6) gclassement_rep, (7) gcontour, (8) gfond, (9) ggd_version, (10) ghome, (11) ghor, (12) gimg_copyright, (13) glangage, (14) gmenu_visible, (15) gmini_hasard, (16) gordre_rep, (17) gpage, (18) gracine, (19) grech_inactive, (20) grep_mini, (21) grepertoire, (22) gsit
mini_hasard, (16) gordre_rep, (17) gpage, (18) gracine, (19) grech_inactive, (20) grep_mini, (21) grepertoire, (22) gsite, (23) gslide, (24) gtitre, (25) guse_copyright, (26) gversion, (27) gvert, or (28) gcfgBase parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3903 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34250 - http://0day.2600.ir/exploits/3903 - http://osvdb.org/36013 - http://www.securityfocus.com/bid/23939 - http://www.vupen.com/english/advisories/2007/1785 - http://secunia.com/advisories/25260
CVE ID: CVE-2007-2648 State: PUBLISHED Published: 2007-05-14T21:00:00 Last Updated: 2024-08-07T13:49:56.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control (comparerax.ocx) allows remote attackers to execute arbitrary code via a long argument to the ConnectToDatabase function. Additional Analyst Notes: - CVE Program Container: References: - http://www.shinnai.altervista.org/moaxb/20070514/clever.html - http://moaxb.blogspot.com/2007/05/moaxb-14-clever-database-comparer.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34261 - http://www.vupen.com/english/advisories/2007/1792 - http://www.sec
/exchange.xforce.ibmcloud.com/vulnerabilities/34261 - http://www.vupen.com/english/advisories/2007/1792 - http://www.securityfocus.com/bid/23969 - http://secunia.com/advisories/25227 - http://osvdb.org/36019
CVE ID: CVE-2007-2649 State: PUBLISHED Published: 2007-05-14T21:00:00 Last Updated: 2024-08-07T13:49:56.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Deutsche Telekom (T-com) Speedport W 700v uses JavaScript delays for invalid authentication attempts to the CGI script, which allows remote attackers to bypass the delays and conduct brute-force attacks via direct calls to the authentication CGI script. Additional Analyst Notes: - CVE Program Container: References: - http://www.devtarget.org/speedport700-advisory-05-2007.txt - http://www.securityfocus.com/bid/23967 - http://secunia.com/advisories/25266 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34334 - http://osvdb