Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-6343 State: PUBLISHED Published: 2007-12-13T22:00:00 Last Updated: 2024-08-07T16:02:36.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27846 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01218087 - http://www.vupen.com/english/advisories/2007/4041 - http://www.securitytracker.com/id?1019016 - http://h20000.www2.hp.com/bizsupport/TechSupport/Docume
visories/2007/4041 - http://www.securitytracker.com/id?1019016 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01218087 - http://www.securityfocus.com/bid/26637
CVE ID: CVE-2007-6344 State: PUBLISHED Published: 2007-12-13T22:00:00 Last Updated: 2024-08-07T16:02:36.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in modules/cms/index.php in Mcms Easy Web Make 1.3, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the template parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/4209 - http://osvdb.org/39139 - http://secunia.com/advisories/28053 - https://www.exploit-db.com/exploits/4719 - http://www.securityfocus.com/bid/26821 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38976
CVE ID: CVE-2007-6345 State: PUBLISHED Published: 2007-12-13T22:00:00 Last Updated: 2024-08-07T16:02:36.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in aurora framework before 20071208 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly the value parameter to the pack_var function in module/db.lib/db_mysql.lib. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38999 - http://sourceforge.net/project/shownotes.php?release_id=560073 - http://www.securityfocus.com/bid/26829
bilities/38999 - http://sourceforge.net/project/shownotes.php?release_id=560073 - http://www.securityfocus.com/bid/26829 - http://secunia.com/advisories/28014 - http://osvdb.org/39145
CVE ID: CVE-2007-6346 State: PUBLISHED Published: 2007-12-13T22:00:00 Last Updated: 2024-08-07T16:02:36.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Rainboard before 2.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26830 - http://secunia.com/advisories/28069 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38995 - http://udon.be/xss.uhtml - http://jvn.jp/jp/JVN%2323120863/index.html - http://www.osvdb.org/39181
CVE ID: CVE-2007-6347 State: PUBLISHED Published: 2007-12-13T22:00:00 Last Updated: 2024-08-07T16:02:36.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in blocks/block_site_map.php in ViArt (1) CMS 3.3.2, (2) HelpDesk 3.3.2, (3) Shop Evaluation 3.3.2, and (4) Shop Free 3.3.2 allows remote attackers to execute arbitrary PHP code via a URL in the root_folder_path parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38993 - http://www.securityfocus.com/bid/26828 - https://www.exploit-db.com/expl
nge.xforce.ibmcloud.com/vulnerabilities/38993 - http://www.securityfocus.com/bid/26828 - https://www.exploit-db.com/exploits/4722 - http://osvdb.org/42628 - http://www.vupen.com/english/advisories/2007/4207 - http://secunia.com/advisories/28066
CVE ID: CVE-2007-6348 State: PUBLISHED Published: 2007-12-14T19:00:00 Last Updated: 2024-08-07T16:02:36.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: SquirrelMail 1.4.11 and 1.4.12, as distributed on sourceforge.net before 20071213, has been externally modified to create a Trojan Horse that introduces a PHP remote file inclusion vulnerability, which allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=squirrelmail-devel&m=119765235203392&w=2 - http://www.securityfocus.com/archive/1/485037/100/0/threaded - http://marc.info/?l=bugtraq&m=119765643909825&w=2 - http://secunia.com/advisories/28095
chive/1/485037/100/0/threaded - http://marc.info/?l=bugtraq&m=119765643909825&w=2 - http://secunia.com/advisories/28095 - http://www.squirrelmail.org/index.php - http://marc.info/?l=squirrelmail-devel&m=119756462212214&w=2 - http://osvdb.org/42633
CVE ID: CVE-2007-6349 State: PUBLISHED Published: 2007-12-20T23:00:00 Last Updated: 2024-08-07T16:02:36.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: P4Webs.exe in Perforce P4Web 2006.2 and earlier, when running on Windows, allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with an empty body and a Content-Length greater than 0. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3476 - http://secunia.com/advisories/28158 - http://www.osvdb.org/39297 - http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-015.txt - http://www.securityfocus.com/bid/26806 - https://exch
ymantec.com/content/en/us/enterprise/research/SYMSA-2007-015.txt - http://www.securityfocus.com/bid/26806 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39142 - http://www.securityfocus.com/archive/1/485321/100/0/threaded
CVE ID: CVE-2007-6350 State: PUBLISHED Published: 2007-12-14T20:00:00 Last Updated: 2024-08-07T16:02:36.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: scponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and execute code by invoking dangerous subcommands including (1) unison, (2) rsync, (3) svn, and (4) svnserve, as originally demonstrated by creating a Subversion (SVN) repository with malicious hooks, then using svn to trigger execution of those hooks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26900 - http://www.debian.org/security/2008/dsa-1473 - http://bugs.gentoo.org/show_bug.cgi
p://www.securityfocus.com/bid/26900 - http://www.debian.org/security/2008/dsa-1473 - http://bugs.gentoo.org/show_bug.cgi?id=201726 - http://scponly.cvs.sourceforge.net/scponly/scponly/SECURITY?view=markup - http://www.vupen.com/english/advisories/2007/4243 - http://security.gentoo.org/glsa/glsa-200802-06.xml - http://secunia.com/advisories/28123 - http://osvdb.org/44137 - http://www.securitytracker.com/id?1019103 - http://secunia.com/advisories/28944 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00595.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=437148 - http://secunia.com/advisories/28538 - https://www.redhat.com/archives/fedora-package-announce/2008-
ort.cgi?bug=437148 - http://secunia.com/advisories/28538 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00546.html - http://secunia.com/advisories/28981
CVE ID: CVE-2007-6351 State: PUBLISHED Published: 2007-12-20T02:00:00 Last Updated: 2024-08-07T16:02:36.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an image file with crafted EXIF tags, possibly involving the exif_loader_write function in exif_loader.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26976 - http://security.gentoo.org/glsa/glsa-200712-15.xml - https://issues.rpath.com/browse/RPL-2068 - http://www.novell.com/linux/security/advisories/suse_security_summary_report.html - http://secunia.com/advis
/RPL-2068 - http://www.novell.com/linux/security/advisories/suse_security_summary_report.html - http://secunia.com/advisories/28195 - https://bugzilla.redhat.com/show_bug.cgi?id=425631 - http://secunia.com/advisories/32274 - http://osvdb.org/42652 - http://secunia.com/advisories/28776 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39166 - http://secunia.com/advisories/28076 - http://secunia.com/advisories/28346 - http://www.securityfocus.com/archive/1/485822/100/0/threaded - http://bugs.gentoo.org/show_bug.cgi?id=202350 - https://bugzilla.redhat.com/show_bug.cgi?id=425621 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00597.html - http://www.securitytracke
425621 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00597.html - http://www.securitytracker.com/id?1019124 - http://www.vupen.com/english/advisories/2007/4278 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00626.html - https://bugzilla.redhat.com/show_bug.cgi?id=425551 - http://www.redhat.com/support/errata/RHSA-2007-1165.html - http://www.debian.org/security/2008/dsa-1487 - http://secunia.com/advisories/28636 - http://secunia.com/advisories/28266 - http://secunia.com/advisories/28400 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:005 - http://secunia.com/advisories/28127 - http://www.ubuntu.com/usn/usn-654-1 - https://
ty/advisories?name=MDVSA-2008:005 - http://secunia.com/advisories/28127 - http://www.ubuntu.com/usn/usn-654-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9420
CVE ID: CVE-2007-6352 State: PUBLISHED Published: 2007-12-20T02:00:00 Last Updated: 2024-08-07T16:02:36.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exif_data_load_data_thumbnail function in exif-data.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2007-1166.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4814 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-234701-1 - http://security.gentoo.
rg.mitre.oval%3Adef%3A4814 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-234701-1 - http://security.gentoo.org/glsa/glsa-200712-15.xml - https://issues.rpath.com/browse/RPL-2068 - http://www.novell.com/linux/security/advisories/suse_security_summary_report.html - http://secunia.com/advisories/28195 - https://bugzilla.redhat.com/show_bug.cgi?id=425631 - http://secunia.com/advisories/32274 - http://www.securityfocus.com/bid/26942 - http://secunia.com/advisories/28776 - http://secunia.com/advisories/28076 - http://osvdb.org/42653 - http://secunia.com/advisories/28346 - http://www.securityfocus.com/archive/1/485822/100/0/threaded - http://www.vupen.com/english/advisories/2008/0947/r
346 - http://www.securityfocus.com/archive/1/485822/100/0/threaded - http://www.vupen.com/english/advisories/2008/0947/references - http://bugs.gentoo.org/show_bug.cgi?id=202350 - https://bugzilla.redhat.com/show_bug.cgi?id=425621 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11029 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39167 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00597.html - https://bugzilla.redhat.com/show_bug.cgi?id=425561 - http://www.securitytracker.com/id?1019124 - http://www.vupen.com/english/advisories/2007/4278 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg006
ww.vupen.com/english/advisories/2007/4278 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00626.html - http://secunia.com/advisories/29381 - http://www.redhat.com/support/errata/RHSA-2007-1165.html - http://www.debian.org/security/2008/dsa-1487 - http://secunia.com/advisories/28636 - http://secunia.com/advisories/28266 - http://secunia.com/advisories/28400 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:005 - http://secunia.com/advisories/28127 - http://www.ubuntu.com/usn/usn-654-1
CVE ID: CVE-2007-6353 State: PUBLISHED Published: 2007-12-20T01:00:00 Last Updated: 2024-08-07T16:02:36.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2008:006 - http://secunia.com/advisories/28412 - http://secunia.com/advisories/28610 - http://www.ubuntu.com/usn/usn-655-1 - http://www.vupen.com/english/advisories/2007/4252 - https://www.redhat.com/archives/fedora-package-announce/2007
655-1 - http://www.vupen.com/english/advisories/2007/4252 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00652.html - http://secunia.com/advisories/28267 - http://bugs.gentoo.org/show_bug.cgi?id=202351 - http://secunia.com/advisories/28132 - http://security.gentoo.org/glsa/glsa-200712-16.xml - http://www.securityfocus.com/bid/26918 - http://secunia.com/advisories/28178 - http://www.debian.org/security/2008/dsa-1474 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39118 - http://secunia.com/advisories/32273 - https://bugzilla.redhat.com/show_bug.cgi?id=425921 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00674.html - http://lists.
_bug.cgi?id=425921 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00674.html - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
CVE ID: CVE-2007-6354 State: PUBLISHED Published: 2007-12-18T20:00:00 Last Updated: 2024-08-07T16:02:36.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6355. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29580 - http://bugs.gentoo.org/show_bug.cgi?id=202354 - http://secunia.com/advisories/28110 - http://www.debian.org/security/2008/dsa-1533 - http://secunia.com/advisories/28268 - http://security.gentoo.org/glsa/glsa-200
//www.debian.org/security/2008/dsa-1533 - http://secunia.com/advisories/28268 - http://security.gentoo.org/glsa/glsa-200712-17.xml - http://www.vupen.com/english/advisories/2007/4251 - http://johnst.org/sw/exiftags/CHANGES - http://www.securityfocus.com/bid/26892
CVE ID: CVE-2007-6355 State: PUBLISHED Published: 2007-12-18T20:00:00 Last Updated: 2024-08-07T16:02:36.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6354. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29580 - http://bugs.gentoo.org/show_bug.cgi?id=202354 - http://secunia.com/advisories/28110 - http://www.debian.org/security/2008/dsa-1533 - http://secunia.com/advisories/28268 - http://security.gentoo.org/glsa/glsa-200712-17.xm
ian.org/security/2008/dsa-1533 - http://secunia.com/advisories/28268 - http://security.gentoo.org/glsa/glsa-200712-17.xml - http://www.vupen.com/english/advisories/2007/4251 - http://johnst.org/sw/exiftags/CHANGES - http://www.securityfocus.com/bid/26892
CVE ID: CVE-2007-6356 State: PUBLISHED Published: 2007-12-18T20:00:00 Last Updated: 2024-08-07T16:02:36.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: exiftags before 1.01 allows attackers to cause a denial of service (infinite loop) via recursive IFD references in the EXIF data in a JPEG image. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29580 - http://bugs.gentoo.org/show_bug.cgi?id=202354 - http://secunia.com/advisories/28110 - http://www.debian.org/security/2008/dsa-1533 - http://secunia.com/advisories/28268 - http://security.gentoo.org/glsa/glsa-200712-17.xml - http://www.vupen.com/english/advisories/2007/4251 - http://
28268 - http://security.gentoo.org/glsa/glsa-200712-17.xml - http://www.vupen.com/english/advisories/2007/4251 - http://johnst.org/sw/exiftags/CHANGES - http://www.securityfocus.com/bid/26892
CVE ID: CVE-2007-6357 State: PUBLISHED Published: 2007-12-15T01:00:00 Last Updated: 2024-08-07T16:02:36.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Microsoft Office Access allows remote, user-assisted attackers to execute arbitrary code via a crafted Microsoft Access Database (.mdb) file. NOTE: due to the lack of details as of 20071210, it is not clear whether this issue is the same as CVE-2007-6026 or CVE-2005-0944. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/44150 - http://www.informationweek.com/shared/printableArticle.jhtml?articleID=204802012 - http://www.us-cert.gov/current/index.html#microsoft_acc
tionweek.com/shared/printableArticle.jhtml?articleID=204802012 - http://www.us-cert.gov/current/index.html#microsoft_access_database_file_attachment - http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9052538&source=rss_topic17
CVE ID: CVE-2007-6358 State: PUBLISHED Published: 2007-12-15T01:00:00 Last Updated: 2024-08-07T16:02:36.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: pdftops.pl before 1.20 in alternate pdftops filter allows local users to overwrite arbitrary files via a symlink attack on the pdfin.[PID].tmp temporary file, which is created when pdftops reads a PDF file from stdin, such as when pdftops is invoked by CUPS. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28113 - http://secunia.com/advisories/28200 - http://www.ubuntu.com/usn/usn-563-1 - https://bugs.gentoo.org/show_bug.cgi?id=201042 - http://www.gentoo.org/security/en/glsa/glsa-2
buntu.com/usn/usn-563-1 - https://bugs.gentoo.org/show_bug.cgi?id=201042 - http://www.gentoo.org/security/en/glsa/glsa-200712-14.xml - http://www.securityfocus.com/bid/26919 - http://www.cups.org/articles.php?L515 - http://www.debian.org/security/2007/dsa-1437 - http://secunia.com/advisories/28386 - http://osvdb.org/42029 - http://secunia.com/advisories/28139
CVE ID: CVE-2007-6359 State: PUBLISHED Published: 2007-12-15T01:00:00 Last Updated: 2024-08-07T16:02:36.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cs_validate_page function in bsd/kern/ubc_subr.c in the xnu kernel 1228.0 and earlier in Apple Mac OS X 10.5.1 allows local users to cause a denial of service (failed assertion and system crash) via a crafted signed Mach-O binary that causes the hashes function to return NULL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26840 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38997 - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://secunia.com/advisorie
ibmcloud.com/vulnerabilities/38997 - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://secunia.com/advisories/30430 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - http://www.vupen.com/english/advisories/2007/4216 - http://digit-labs.org/files/exploits/xnu-superblob-dos.c - http://www.vupen.com/english/advisories/2008/1697 - http://secunia.com/advisories/28048
CVE ID: CVE-2007-6360 State: PUBLISHED Published: 2007-12-15T01:00:00 Last Updated: 2024-08-07T16:02:36.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Sun eXtended System Control Facility (XSCF) Control Package (XCP) firmware before 1050 on SPARC Enterprise M4000, M5000, M8000, and M9000 servers allows remote attackers to cause a denial of service (reboot) via (1) telnet, (2) ssh, or (3) http network traffic that triggers memory exhaustion. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103159-1 - http://www.securityfocus.com/bid/26712 - http://securitytracker.com/id?1
com/search/document.do?assetkey=1-26-103159-1 - http://www.securityfocus.com/bid/26712 - http://securitytracker.com/id?1019048 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38860 - http://osvdb.org/40843 - http://secunia.com/advisories/27926 - http://osvdb.org/40844 - http://www.vupen.com/english/advisories/2007/4098 - http://osvdb.org/40842 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201333-1
CVE ID: CVE-2007-6361 State: PUBLISHED Published: 2007-12-15T01:00:00 Last Updated: 2024-08-07T16:02:36.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gekko 0.8.2 and earlier stores sensitive information under the web root with possibly insufficient access control, which might allow remote attackers to read certain files under temp/, as demonstrated by a log file that records the titles of blog entries. NOTE: access to temp/ is blocked by .htaccess in most deployments that use Apache HTTP Server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/484330/100/0/threaded - http://securityreason.com/securityalert/3451 - http:/
: - http://www.securityfocus.com/archive/1/484330/100/0/threaded - http://securityreason.com/securityalert/3451 - http://osvdb.org/44151 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38735 - http://www.securityfocus.com/archive/1/484343/100/0/threaded
CVE ID: CVE-2007-6362 State: PUBLISHED Published: 2007-12-15T01:00:00 Last Updated: 2024-08-07T16:02:36.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the RSGallery (com_rsgallery) 2.0 beta 5 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an inline page action. Additional Analyst Notes: - CVE Program Container: References: - http://advisories.echo.or.id/adv/adv86-K-159-2007.txt - https://www.exploit-db.com/exploits/4691 - http://www.securityfocus.com/bid/26704 - http://www.securityfocus.com/archive/1/484606/100/100/threaded
CVE ID: CVE-2007-6363 State: PUBLISHED Published: 2007-12-15T01:00:00 Last Updated: 2024-08-07T16:02:36.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Netcool Security Manager 1.3.0 before Interim Fix 1, when using Active Directory (AD) LDAP authentication, allows remote attackers to obtain login access via unspecified vectors without entering a password. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ04768 - http://osvdb.org/43718 - http://www-1.ibm.com/support/docview.wss?uid=swg24017385
CVE ID: CVE-2007-6364 State: PUBLISHED Published: 2007-12-15T01:00:00 Last Updated: 2024-08-07T16:02:36.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in modificarPerfil.php in JLMForo System allows remote authenticated users to inject arbitrary web script or HTML via a signature. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3445 - http://osvdb.org/39504 - http://www.securityfocus.com/archive/1/484227/100/100/threaded