Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-2170 State: PUBLISHED Published: 2007-04-24T20:00:00 Last Updated: 2024-08-07T13:23:50.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: The APPLSYS.FND_DM_NODES package in Oracle E-Business Suite does not check for valid sessions, which allows remote attackers to delete arbitrary nodes. NOTE: due to lack of details from Oracle, it is not clear whether this issue is related to other CVE identifiers such as CVE-2007-2126, CVE-2007-2127, or CVE-2007-2128. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuapr2007.html - http://securityreason.com/securityalert/2611 - http://ww
nology/deploy/security/critical-patch-updates/cpuapr2007.html - http://securityreason.com/securityalert/2611 - http://www.red-database-security.com/advisory/oracle_cpu_apr_2007.html - http://www.securityfocus.com/archive/1/466214/100/0/threaded - http://osvdb.org/39958 - http://www.zerodayinitiative.com/advisories/ZDI-07-016.html
CVE ID: CVE-2007-2171 State: PUBLISHED Published: 2007-04-24T20:00:00 Last Updated: 2024-08-07T13:23:51.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the base64_decode function in GWINTER.exe in Novell GroupWise (GW) WebAccess before 7.0 SP2 allows remote attackers to execute arbitrary code via long base64 content in an HTTP Basic Authentication request. Additional Analyst Notes: - CVE Program Container: References: - http://download.novell.com/Download?buildid=8RF83go0nZg~ - http://www.vupen.com/english/advisories/2007/1455 - http://www.securitytracker.com/id?1017932 - http://secunia.com/advisories/24944 - http://download.novell.com/Download?
- http://www.securitytracker.com/id?1017932 - http://secunia.com/advisories/24944 - http://download.novell.com/Download?buildid=O9ucpbS1bK0~ - http://www.zerodayinitiative.com/advisories/ZDI-07-015.html - http://www.securityfocus.com/bid/23556 - http://www.securityfocus.com/archive/1/466212/100/0/threaded - http://securityreason.com/securityalert/2610
CVE ID: CVE-2007-2172 State: PUBLISHED Published: 2007-04-22T19:00:00 Last Updated: 2024-08-07T13:23:51.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes RTA_MAX to be used as an array size instead of RTN_MAX, which leads to an "out of bound access" by the (1) dn_fib_props (dn_fib.c, DECNet) and (2) fib_props (fib_semantics.c, IPv4) functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2007-0347.html - http://www.ubuntu.com/usn/usn-464-1 - http://www.redhat.com/support/errata/RHSA-2007-1049.html - http://secunia.com/advisories/27913 - http://
usn/usn-464-1 - http://www.redhat.com/support/errata/RHSA-2007-1049.html - http://secunia.com/advisories/27913 - http://www.debian.org/security/2007/dsa-1363 - http://secunia.com/advisories/26289 - http://www.mail-archive.com/git-commits-head%40vger.kernel.org/msg08270.html - http://secunia.com/advisories/25838 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:171 - http://www.debian.org/security/2008/dsa-1504 - http://www.debian.org/security/2007/dsa-1356 - http://secunia.com/advisories/26647 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:216 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10764 - http://www.kernel.org/pub/
ttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10764 - http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35 - http://secunia.com/advisories/33280 - http://secunia.com/advisories/25288 - http://secunia.com/advisories/26620 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33979 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:196 - http://secunia.com/advisories/25068 - http://www.debian.org/security/2008/dsa-1503 - http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm - http://secunia.com/advisories/25392 - http://secunia.com/advisories/29058 - http://www.redhat.com/support/errata/RHSA-2008-0787.html - http://secunia.com/
2 - http://secunia.com/advisories/29058 - http://www.redhat.com/support/errata/RHSA-2008-0787.html - http://secunia.com/advisories/26450 - http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.21-rc6 - http://www.securityfocus.com/bid/23447 - http://www.vupen.com/english/advisories/2007/2690 - http://rhn.redhat.com/errata/RHSA-2007-0488.html - http://www.mail-archive.com/git-commits-head%40vger.kernel.org/msg08269.html
CVE ID: CVE-2007-2173 State: PUBLISHED Published: 2007-04-24T16:00:00 Last Updated: 2024-08-07T13:23:51.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in (1) courier-imapd.indirect and (2) courier-pop3d.indirect in Courier-IMAP before 4.0.6-r2, and 4.1.x before 4.1.2-r1, on Gentoo Linux allows remote attackers to execute arbitrary commands via the XMAILDIR variable, related to the LOGINRUN variable. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33805 - http://security.gentoo.org/glsa/glsa-200704-18.xml - http://www.securityfocus.com/bid/23589 - http://osvdb.org/35274 - http:/
//security.gentoo.org/glsa/glsa-200704-18.xml - http://www.securityfocus.com/bid/23589 - http://osvdb.org/35274 - http://secunia.com/advisories/24963 - http://bugs.gentoo.org/show_bug.cgi?id=168196
CVE ID: CVE-2007-2174 State: PUBLISHED Published: 2007-04-24T16:00:00 Last Updated: 2024-08-07T13:23:50.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IOCTL handling in srescan.sys in the ZoneAlarm Spyware Removal Engine (SRE) in Check Point ZoneAlarm before 5.0.156.0 allows local users to execute arbitrary code via certain IOCTL lrp parameter addresses. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=517 - http://secunia.com/advisories/24986 - http://www.vupen.com/english/advisories/2007/1491 - http://www.securitytracker.com/id?1017953 - http://www.securityfocus.com/bid/23579 - http://
lish/advisories/2007/1491 - http://www.securitytracker.com/id?1017953 - http://www.securityfocus.com/bid/23579 - http://www.securityfocus.com/archive/1/466656/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33786 - http://www.securitytracker.com/id?1017948
CVE ID: CVE-2007-2175 State: PUBLISHED Published: 2007-04-24T16:00:00 Last Updated: 2024-08-07T13:23:50.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java is enabled, allows remote attackers to execute arbitrary code via parameters to the toQTPointer method in quicktime.util.QTHandleRef, which can be used to modify arbitrary memory when creating QTPointerRef objects, as demonstrated during the "PWN 2 0WN" contest at CanSecWest 2007. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-07-023.html - http://cansecwest.com/pos
Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-07-023.html - http://cansecwest.com/post/2007-04-20-14:54:00.First_Mac_Hacked_Cancel_Or_Allow - https://exchange.xforce.ibmcloud.com/vulnerabilities/33827 - http://www.securitytracker.com/id?1017950 - http://lists.apple.com/archives/security-announce/2007/May/msg00001.html - http://www.theregister.co.uk/2007/04/20/pwn-2-own_winner/ - http://docs.info.apple.com/article.html?artnum=305446 - http://www.securityfocus.com/archive/1/467319/100/0/threaded - http://www.matasano.com/log/806/hot-off-the-matasano-sms-queue-cansec-macbook-challenge-won/ - http://www.osvdb.org/34178 - http://www.kb.cert.org/vuls/id/420668 -
matasano-sms-queue-cansec-macbook-challenge-won/ - http://www.osvdb.org/34178 - http://www.kb.cert.org/vuls/id/420668 - http://www.matasano.com/log/812/breaking-macbook-vuln-in-quicktime-affects-win32-apple-code/
CVE ID: CVE-2007-2176 State: PUBLISHED Published: 2007-04-24T16:00:00 Last Updated: 2024-08-07T13:23:51.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Mozilla Firefox allows remote attackers to execute arbitrary code via unspecified vectors involving Javascript errors. NOTE: this might be the same issue as CVE-2007-2175. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38857 - http://www.matasano.com/log/806/hot-off-the-matasano-sms-queue-cansec-macbook-challenge-won/
CVE ID: CVE-2007-2177 State: PUBLISHED Published: 2007-04-24T16:00:00 Last Updated: 2024-08-07T13:23:50.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Microgaming Download Helper ActiveX control (dlhelper.dll) before 7.2.0.19, and the WebHandler Class control, allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23595 - http://osvdb.org/34329 - http://secunia.com/advisories/25017 - http://www.vupen.com/english/advisories/2007/1507 - http://www.kb.cert.org/vuls/id/184473
CVE ID: CVE-2007-2178 State: PUBLISHED Published: 2007-04-24T17:00:00 Last Updated: 2024-08-07T13:23:51.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Objective Development Sharity before 3.3 allow remote attackers to cause a denial of service (daemon crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33774 - http://www.obdev.at/products/sharity/releasenotes.html - http://osvdb.org/35044 - http://secunia.com/advisories/24925 - http://www.securityfocus.com/bid/23572
CVE ID: CVE-2007-2179 State: PUBLISHED Published: 2007-04-24T17:00:00 Last Updated: 2024-08-07T13:23:50.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in IXceedCompression in XceddZipLib (RaidenFTPD.dll) in RaidenFTPD 2.4 allow remote attackers to cause a denial of service (crash) via unspecified vectors involving the (1) CalculateCrc, (2) Compress, and (3) Uncompress functions, which result in a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33776 - http://www.securityfocus.com/bid/23570 - http://www.securityfocus.com/archive/1/466319/100/0/t
m/vulnerabilities/33776 - http://www.securityfocus.com/bid/23570 - http://www.securityfocus.com/archive/1/466319/100/0/threaded - http://securityreason.com/securityalert/2606
CVE ID: CVE-2007-2180 State: PUBLISHED Published: 2007-04-24T17:00:00 Last Updated: 2024-08-07T13:23:51.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Nullsoft Winamp 5.3 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted WMV file. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15697 - https://www.exploit-db.com/exploits/3768 - http://securityreason.com/securityalert/2601 - http://www.securityfocus.com/bid/23568 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33764 - http://www.securityfocus.com/archive/1/466
.com/bid/23568 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33764 - http://www.securityfocus.com/archive/1/466291/100/0/threaded
CVE ID: CVE-2007-2181 State: PUBLISHED Published: 2007-04-24T17:00:00 Last Updated: 2024-08-07T13:23:50.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/login.php in Webinsta FM Manager 0.1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the absolute_path parameter, a different product and vector than CVE-2005-0748. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3778 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33793 - http://www.vupen.com/english/advisories/2007/1494 - http://www.securityfocus.com/bid/23592 - http://secunia.com/advi
3 - http://www.vupen.com/english/advisories/2007/1494 - http://www.securityfocus.com/bid/23592 - http://secunia.com/advisories/24958 - http://osvdb.org/35261
CVE ID: CVE-2007-2182 State: PUBLISHED Published: 2007-04-24T17:00:00 Last Updated: 2024-08-07T13:23:51.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in forum_write.php in Maran PHP Forum allows remote attackers to upload and execute arbitrary PHP files via a trailing %00 in a filename in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3775 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33802 - http://www.securityfocus.com/bid/23614 - http://www.vupen.com/english/advisories/2007/1493 - http://secunia.com/advisories/24968
CVE ID: CVE-2007-2183 State: PUBLISHED Published: 2007-04-24T17:00:00 Last Updated: 2024-08-07T13:23:51.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in PHP-Ring Webring System (aka uPHP_ring_website) 0.9 allows remote attackers to execute arbitrary SQL commands via the ring parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3774 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33804 - http://www.securityfocus.com/bid/23586 - http://osvdb.org/37558
CVE ID: CVE-2007-2184 State: PUBLISHED Published: 2007-04-24T17:00:00 Last Updated: 2024-08-07T13:23:51.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in imgsrv.php in jchit counter 1.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the acc parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23585 - https://www.exploit-db.com/exploits/3773 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33806 - http://osvdb.org/38856
CVE ID: CVE-2007-2185 State: PUBLISHED Published: 2007-04-24T17:00:00 Last Updated: 2024-08-07T13:23:51.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Supasite 1.23b allow remote attackers to execute arbitrary PHP code via a URL in the supa[db_path] parameter to (1) common_functions.php, (2) admin_auth_cookies.php, (3) admin_mods.php, (4) admin_news.php, (5) admin_topics.php, (6) admin_users.php, (7) admin_utilities.php, (8) site_comment.php, or (9) site_news.php; or the supa[include_path] parameter to (10) admin_settings.php or (11) backend_site.php. Additional Analyst Notes: - CVE Program Container: References: - https:
10) admin_settings.php or (11) backend_site.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33796 - http://osvdb.org/38845 - http://osvdb.org/38849 - http://osvdb.org/38846 - http://osvdb.org/38851 - http://osvdb.org/38855 - http://osvdb.org/38854 - http://osvdb.org/38853 - http://www.securityfocus.com/bid/23581 - https://www.exploit-db.com/exploits/3771 - http://osvdb.org/38847 - http://osvdb.org/38848 - http://www.vupen.com/english/advisories/2007/1492 - http://osvdb.org/38850 - http://osvdb.org/38852
CVE ID: CVE-2007-2186 State: PUBLISHED Published: 2007-04-24T17:00:00 Last Updated: 2024-08-07T13:23:51.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit Reader 2.0 allows remote attackers to cause a denial of service (application crash) via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39054 - http://www.securityfocus.com/bid/23576 - https://www.exploit-db.com/exploits/3770 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33784
CVE ID: CVE-2007-2187 State: PUBLISHED Published: 2007-04-24T17:00:00 Last Updated: 2024-08-07T13:23:51.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in eXtremail 2.1.1 and earlier allows remote attackers to execute arbitrary code via a long DNS response. NOTE: this might be related to CVE-2006-6926. Additional Analyst Notes: - CVE Program Container: References: - http://www.digit-labs.org/files/exploits/extremail-v9.c - http://osvdb.org/35583 - https://www.exploit-db.com/exploits/3769 - http://www.securityfocus.com/bid/23577 - http://archives.neohapsis.com/archives/fulldisclosure/2007-04/0569.html
CVE ID: CVE-2007-2188 State: PUBLISHED Published: 2007-04-24T17:00:00 Last Updated: 2024-08-07T13:23:51.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: eXtremail 2.1.1 and earlier does not verify the ID field (aka transaction id) in DNS responses, which makes it easier for remote attackers to conduct DNS spoofing. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35584 - http://www.securityfocus.com/bid/23577 - http://archives.neohapsis.com/archives/fulldisclosure/2007-04/0569.html
CVE ID: CVE-2007-2189 State: PUBLISHED Published: 2007-04-24T17:00:00 Last Updated: 2024-08-07T13:23:51.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/admin_album_otf.php in the MX Smartor Full Album Pack (FAP) 2.0 RC1 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33760 - https://www.exploit-db.com/exploits/3766 - http://www.securityfocus.com/bid/23561
CVE ID: CVE-2007-2190 State: PUBLISHED Published: 2007-04-24T17:00:00 Last Updated: 2024-08-07T13:23:51.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/public/webpages.php in Eba News 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://ebascripts.com/ - http://www.securityfocus.com/archive/1/466406/100/0/threaded - http://securityreason.com/securityalert/2607 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33783
CVE ID: CVE-2007-2191 State: PUBLISHED Published: 2007-04-24T17:00:00 Last Updated: 2024-08-07T13:23:51.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in freePBX 2.2.x allow remote attackers to inject arbitrary web script or HTML via the (1) From, (2) To, (3) Call-ID, (4) User-Agent, and unspecified other SIP protocol fields, which are stored in /var/log/asterisk/full and displayed by admin/modules/logfiles/asterisk-full-log.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33772 - http://www.securityfocus.com/bid/23575 - http://lists.grok.org.uk/piper
ange.xforce.ibmcloud.com/vulnerabilities/33772 - http://www.securityfocus.com/bid/23575 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-April/053882.html - http://securityreason.com/securityalert/2627 - http://osvdb.org/35315 - http://secunia.com/advisories/24935 - http://www.vupen.com/english/advisories/2007/1535
CVE ID: CVE-2007-2192 State: PUBLISHED Published: 2007-04-24T17:00:00 Last Updated: 2024-08-07T13:23:51.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Photofiltre Studio 8.1.1 allows user-assisted remote attackers to execute arbitrary code via a crafted .tif file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35265 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33807 - https://www.exploit-db.com/exploits/3772 - http://www.securityfocus.com/bid/23582 - http://secunia.com/advisories/24981 - http://www.vupen.com/english/advisories/2007/1490
CVE ID: CVE-2007-2193 State: PUBLISHED Published: 2007-04-24T17:00:00 Last Updated: 2024-08-07T13:23:51.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the ID_X.apl plugin in ACDSee 9.0 Build 108, Pro 8.1 Build 99, and Photo Editor 4.0 Build 195 allows user-assisted remote attackers to execute arbitrary code via a crafted XPM file with a long section string. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24994 - http://www.vupen.com/english/advisories/2007/1489 - https://www.exploit-db.com/exploits/3776 - http://www.securityfocu
- http://www.vupen.com/english/advisories/2007/1489 - https://www.exploit-db.com/exploits/3776 - http://www.securityfocus.com/bid/23620 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33812 - http://www.acdsee.com/support/knowledgebase/article?id=2800 - http://osvdb.org/35236
CVE ID: CVE-2007-2194 State: PUBLISHED Published: 2007-04-24T17:00:00 Last Updated: 2024-08-07T13:23:51.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in XnView 1.90.3 allows user-assisted remote attackers to execute arbitrary code via a crafted XPM file with a long section string. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35235 - https://www.exploit-db.com/exploits/3777 - http://www.vupen.com/english/advisories/2007/1488 - http://www.securityfocus.com/bid/23625 - http://secunia.com/advisories/24973 - http://security.gentoo.org/glsa/glsa-
8 - http://www.securityfocus.com/bid/23625 - http://secunia.com/advisories/24973 - http://security.gentoo.org/glsa/glsa-200707-06.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/33810 - http://secunia.com/advisories/26006
CVE ID: CVE-2007-2195 State: PUBLISHED Published: 2007-04-24T17:00:00 Last Updated: 2024-08-07T13:23:51.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: aMSN (aka Alvaro's Messenger) 0.96 and earlier allows remote attackers to cause a denial of service (application crash) by sending invalid data to TCP port 31337. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39116 - http://www.securityfocus.com/data/vulnerabilities/exploits/23583.c - http://www.securityfocus.com/bid/23583
CVE ID: CVE-2007-2196 State: PUBLISHED Published: 2007-04-24T17:00:00 Last Updated: 2024-08-07T13:23:51.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in jambook.php in the Jambook (com_Jambook) 1.0 beta7 module for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: this issue has been disputed by a reliable third party because the jambook.php protects against direct request Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/465843/100/100/threaded - http://securityreason.com/securityalert/2603 - http://ww
ttp://www.securityfocus.com/archive/1/465843/100/100/threaded - http://securityreason.com/securityalert/2603 - http://www.osvdb.org/34151 - http://www.jxdevelopment.com/ - http://www.securityfocus.com/bid/23509 - http://attrition.org/pipermail/vim/2007-April/001535.html
CVE ID: CVE-2007-2197 State: PUBLISHED Published: 2007-04-24T17:00:00 Last Updated: 2024-08-07T13:23:51.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the NeatUpload ASP.NET component 1.2.11 through 1.2.16, 1.1.18 through 1.1.23, and trunk.379 through trunk.445 allows remote attackers to obtain other clients' HTTP responses via multiple simultaneous requests, which triggers multiple calls to HttpWorkerRequest.FlushResponse for the same HttpWorkerRequest object and causes a buffer to be reused for a different request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23578 - https://exchange.xforce.ibmcloud.com