Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Y/DOCUMENT/2008/05/023342-01.pdf - http://secunia.com/advisories/28471 - http://www.securityfocus.com/bid/27237 - http://www.securityfocus.com/archive/1/498523/100/0/threaded - http://www.vupen.com/english/advisories/2008/1697 - http://www.redhat.com/support/errata/RHSA-2008-0261.html - http://www.ubuntu.com/usn/usn-575-1 - http://secunia.com/advisories/29640 - http://secunia.com/advisories/32800 - http://secunia.com/advisories/28977 - http://secunia.com/advisories/30732 - http://www.vupen.com/english/advisories/2008/1224/references - http://www-1.ibm.com/support/search.wss?rs=0&q=PK59667&apar=only - http://www.mandriva.com/security/advisories?name=MDVSA-2008:016 - https://lists.apache.org/t
?rs=0&q=PK59667&apar=only - http://www.mandriva.com/security/advisories?name=MDVSA-2008:016 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.ht
ache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r7dd6be4dc38148704f
8361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https:
s.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f
1073a8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2007-6389 State: PUBLISHED Published: 2007-12-17T18:00:00 Last Updated: 2024-08-07T16:02:36.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: The notify feature in GNOME screensaver (gnome-screensaver) 2.20.0 might allow local users to read the clipboard contents and X selection data for a locked session by using ctrl-V. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html - http://www.securityfocus.com/bid/30096 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:135 - http://bugzilla.gnome.org/show_bug.cgi?id=482159 - http://secunia.com/advisories/31687 - https://www.r
=MDVSA-2008:135 - http://bugzilla.gnome.org/show_bug.cgi?id=482159 - http://secunia.com/advisories/31687 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00078.html - http://www.ubuntu.com/usn/USN-669-1 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=455484 - https://bugzilla.redhat.com/show_bug.cgi?id=421461 - http://secunia.com/advisories/29666 - https://bugs.launchpad.net/ubuntu/+source/gnome-screensaver/+bug/146862 - http://secunia.com/advisories/29595 - http://bugzilla.gnome.org/show_bug.cgi?id=503005 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00020.html - http://secunia.com/advisories/32691
CVE ID: CVE-2007-6390 State: PUBLISHED Published: 2007-12-17T18:00:00 Last Updated: 2024-08-07T16:02:36.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the mycalendar plugin before 0.13 for Serendipity allows remote attackers to perform actions as blog administrators, which can be leveraged to conduct cross-site scripting (XSS) attacks on the blog page. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28152 - http://www.hboeck.de/archives/572-Some-XSS-issues-in-Serendipity-found.html - http://www.securityfocus.com/bid/26955
CVE ID: CVE-2007-6391 State: PUBLISHED Published: 2007-12-17T18:00:00 Last Updated: 2024-08-07T16:02:36.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in patch/comments.php in SH-News 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/4178 - https://www.exploit-db.com/exploits/4709 - http://www.securityfocus.com/bid/26778
CVE ID: CVE-2007-6392 State: PUBLISHED Published: 2007-12-17T18:00:00 Last Updated: 2024-08-07T16:02:36.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in DWdirectory 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the search parameter to the /search URI. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38938 - http://secunia.com/advisories/27990 - https://www.exploit-db.com/exploits/4708 - http://www.securityfocus.com/bid/26779 - http://www.vupen.com/english/advisories/2007/4177
CVE ID: CVE-2007-6393 State: PUBLISHED Published: 2007-12-17T18:00:00 Last Updated: 2024-08-07T16:02:36.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in albums.php in Ace Image Hosting Script allows remote authenticated users to execute arbitrary SQL commands via the id parameter in editalbum mode. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27988 - http://www.securityfocus.com/bid/26780 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38941 - http://www.vupen.com/english/advisories/2007/4176 - https://www.exploit-db.com/exploits/4707
CVE ID: CVE-2007-6394 State: PUBLISHED Published: 2007-12-17T18:00:00 Last Updated: 2024-08-07T16:02:36.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Content Injector 1.53 allows remote attackers to execute arbitrary SQL commands via the id parameter in an expand action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4706 - http://www.securityfocus.com/bid/26781 - http://www.vupen.com/english/advisories/2007/4175 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38939 - http://secunia.com/advisories/27986
CVE ID: CVE-2007-6395 State: PUBLISHED Published: 2007-12-17T18:00:00 Last Updated: 2024-08-07T16:02:36.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Flat PHP Board 1.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain credentials via a direct request for the username php file for any user account in users/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/484803/100/100/threaded - https://www.exploit-db.com/exploits/4705 - http://www.securityfocus.com/bid/26782 - http://osvdb.org/43893
CVE ID: CVE-2007-6396 State: PUBLISHED Published: 2007-12-17T18:00:00 Last Updated: 2024-08-07T16:02:36.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in index.php in Flat PHP Board 1.2 and earlier allows remote attackers to inject arbitrary PHP code via the (1) username, (2) password, and (3) email parameters when registering a user account, which can be executed by accessing the user's php file for this account. NOTE: similar code injection might be possible in a user profile. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/484803/100/100/threaded - http://osvdb.org/43675 - h
ram Container: References: - http://www.securityfocus.com/archive/1/484803/100/100/threaded - http://osvdb.org/43675 - https://www.exploit-db.com/exploits/4705 - http://www.securityfocus.com/bid/26782
CVE ID: CVE-2007-6397 State: PUBLISHED Published: 2007-12-17T18:00:00 Last Updated: 2024-08-07T16:02:36.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in index.php in Flat PHP Board 1.2 and earlier allow remote attackers to (1) create arbitrary files via a .. (dot dot) in the username parameter when registering a user account, and (2) read arbitrary PHP files via a .. (dot dot) in (a) the topic parameter in a topic action or (b) the username parameter in a viewprofile action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/484803/100/100/threaded - https://www.exploit-db.com/
am Container: References: - http://www.securityfocus.com/archive/1/484803/100/100/threaded - https://www.exploit-db.com/exploits/4705 - http://osvdb.org/43892 - http://osvdb.org/43891 - http://osvdb.org/43890 - http://www.securityfocus.com/bid/26782
CVE ID: CVE-2007-6398 State: PUBLISHED Published: 2007-12-17T18:00:00 Last Updated: 2024-08-07T16:02:36.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Flat PHP Board 1.2 and earlier allows remote attackers to bypass authentication and obtain limited access to an arbitrary user account via the fpb_username cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/484803/100/100/threaded - https://www.exploit-db.com/exploits/4705 - http://www.securityfocus.com/bid/26782 - http://osvdb.org/43678
CVE ID: CVE-2007-6399 State: PUBLISHED Published: 2007-12-17T18:00:00 Last Updated: 2024-08-07T16:02:37.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in Flat PHP Board 1.2 and earlier allows remote authenticated users to obtain the password for the current user account by reading the password parameter value in the HTML source for the page generated by a profile action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/44118 - http://www.securityfocus.com/archive/1/484803/100/100/threaded - https://www.exploit-db.com/exploits/4705 - http://www.securityfocus.com/bid/26782
CVE ID: CVE-2007-6400 State: PUBLISHED Published: 2007-12-17T18:00:00 Last Updated: 2024-08-07T16:02:37.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download_file.php in PolDoc CMS (aka PDDMS) 0.96 allows remote attackers to read arbitrary files via a .. (dot dot) or absolute pathname in the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38937 - http://www.securityfocus.com/bid/26775 - http://secunia.com/advisories/28013 - https://www.exploit-db.com/exploits/4704 - http://www.vupen.com/english/advisories/2007/4159
CVE ID: CVE-2007-6401 State: PUBLISHED Published: 2007-12-17T18:00:00 Last Updated: 2024-08-07T16:02:36.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in mplayer2.exe in Microsoft Windows Media Player (WMP) 6.4, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows remote attackers to execute arbitrary code via a certain .mp4 file, possibly a related issue to CVE-2007-6402. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3453 - http://www.securityfocus.com/bid/26773 - http://www.vupen.com/english/advisories/2007/4141 - http://www.securityfocus.com/archive/1/484779/100/0/threaded - http://www.
/www.vupen.com/english/advisories/2007/4141 - http://www.securityfocus.com/archive/1/484779/100/0/threaded - http://www.securitytracker.com/id?1019064
CVE ID: CVE-2007-6402 State: PUBLISHED Published: 2007-12-17T18:00:00 Last Updated: 2024-08-07T16:02:37.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in mplayerc.exe in Media Player Classic (MPC) 6.4.9, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows remote attackers to execute arbitrary code via a certain .mp4 file, possibly a related issue to CVE-2007-6401. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26774 - http://www.securityfocus.com/archive/1/484832/100/100/threaded - http://www.vupen.com/english/advisories/2007/4141 - http://www.securityfocus.com/archive/1/484781/100/0/threaded - h
d - http://www.vupen.com/english/advisories/2007/4141 - http://www.securityfocus.com/archive/1/484781/100/0/threaded - http://www.securitytracker.com/id?1019064
CVE ID: CVE-2007-6403 State: PUBLISHED Published: 2007-12-17T18:00:00 Last Updated: 2024-08-07T16:02:36.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Nullsoft Winamp 5.32 allows user-assisted remote attackers to execute arbitrary code via crafted unicode in a .mp4 file, with crafted tags, contained in a certain .rar archive, a related issue to CVE-2007-2498. NOTE: for exploitation, the victim must select a certain menu option at the time of the attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/484776/100/0/threaded - http://securityreason.com/securityalert/3456 - https://oval.cisecu
w.securityfocus.com/archive/1/484776/100/0/threaded - http://securityreason.com/securityalert/3456 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15562
CVE ID: CVE-2007-6404 State: PUBLISHED Published: 2007-12-17T18:00:00 Last Updated: 2024-08-07T16:02:36.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Sergey Lyubka Simple HTTPD (shttpd) 1.38 and earlier on Windows allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/484761/100/0/threaded - http://securityreason.com/securityalert/3457 - http://osvdb.org/44013 - https://www.exploit-db.com/exploits/4700 - http://www.securityfocus.com/bid/26768 - http://sourceforge.net/mailarchive/forum.php?thread_name=
b.com/exploits/4700 - http://www.securityfocus.com/bid/26768 - http://sourceforge.net/mailarchive/forum.php?thread_name=20071203130540.6e482c20.aluigi%40autistici.org&forum_name=shttpd-general - http://aluigi.altervista.org/adv/shttpd-adv.txt
CVE ID: CVE-2007-6405 State: PUBLISHED Published: 2007-12-17T18:00:00 Last Updated: 2024-08-07T16:02:36.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sergey Lyubka Simple HTTPD (shttpd) 1.38 and earlier on Windows allows remote attackers to download arbitrary CGI programs or scripts via a URI with an appended (1) '+' character, (2) '.' character, (3) %2e sequence (hex-encoded dot), or (4) hex-encoded character greater than 0x7f. NOTE: the %20 vector is already covered by CVE-2007-3407. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/484761/100/0/threaded - http://securityreason.com/securityalert/3457 - https://www.expl
/www.securityfocus.com/archive/1/484761/100/0/threaded - http://securityreason.com/securityalert/3457 - https://www.exploit-db.com/exploits/4700 - http://osvdb.org/44119 - http://www.securityfocus.com/bid/26768 - http://sourceforge.net/mailarchive/forum.php?thread_name=20071203130540.6e482c20.aluigi%40autistici.org&forum_name=shttpd-general - http://aluigi.altervista.org/adv/shttpd-adv.txt
CVE ID: CVE-2007-6406 State: PUBLISHED Published: 2007-12-17T18:00:00 Last Updated: 2024-08-07T16:02:36.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in CA (formerly Computer Associates) eTrust Threat Management Console allow remote attackers to inject arbitrary web script or HTML via the IP Address field and other unspecified fields. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019047 - http://www.securityfocus.com/archive/1/484607/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/38868 - http://securityreason.com/securityalert/3458
CVE ID: CVE-2007-6407 State: PUBLISHED Published: 2007-12-17T18:00:00 Last Updated: 2024-08-07T16:02:36.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Provisioning Manager Express allow remote attackers to inject arbitrary web script or HTML via the (1) "assess modification," (2) user-id, and other unspecified fields to the /tpmx URI; or (3) involving unspecified vectors related to "error processing." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/484607/100/0/threaded - http://securitytracker.com/id?1019045 - https://exchange.xforce.ibmcloud.com/vulnera
m/archive/1/484607/100/0/threaded - http://securitytracker.com/id?1019045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38864 - http://securityreason.com/securityalert/3458
CVE ID: CVE-2007-6408 State: PUBLISHED Published: 2007-12-17T18:00:00 Last Updated: 2024-08-07T16:02:36.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Provisioning Manager Express provides unspecified information in error messages when (1) attempted duplication of a username occurs when creating an account or (2) when trying to login using a valid username, which makes it easier for remote attackers to enumerate usernames. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/484607/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/38866 - http://securityreason.com/securityalert/3458 - http://ww
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38866 - http://securityreason.com/securityalert/3458 - http://www.securityfocus.com/bid/26724
CVE ID: CVE-2007-6409 State: PUBLISHED Published: 2007-12-17T18:00:00 Last Updated: 2024-08-07T16:02:36.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gg protocol handler in Gadu-Gadu, when this product is installed but not running, does not properly handle the skin attribute, which allows remote attackers to cause a denial of service (resource consumption) via unspecified network traffic. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/484607/100/0/threaded - http://securityreason.com/securityalert/3458
CVE ID: CVE-2007-6410 State: PUBLISHED Published: 2007-12-17T18:00:00 Last Updated: 2024-08-07T16:02:36.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gadu-Gadu does not properly perform protocol handling, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and add arbitrary user accounts or cause a denial of service as administrators via an unspecified "crafted link," possibly related to the gg protocol. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/484607/100/0/threaded - http://securityreason.com/securityalert/3458
CVE ID: CVE-2007-6411 State: PUBLISHED Published: 2007-12-17T18:00:00 Last Updated: 2024-08-07T16:02:37.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the HandleEmotsConfig function in the GG Client in Gadu-Gadu 7.7 Build 3669 allow user-assisted remote attackers to execute arbitrary code or cause a denial of service (gg.exe process crash) via a long string in an emots.txt file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/484086/100/200/threaded - http://www.securityfocus.com/archive/1/484607/100/0/threaded - http://securityreason.com/securityalert/3455 - http://vexillium.org/advisory_en
us.com/archive/1/484607/100/0/threaded - http://securityreason.com/securityalert/3455 - http://vexillium.org/advisory_eng.txt - http://www.securityfocus.com/archive/1/484119/100/200/threaded - http://www.securityfocus.com/archive/1/484126/100/200/threaded - http://www.securityfocus.com/archive/1/484105/100/200/threaded - http://www.securityfocus.com/archive/1/484122/100/200/threaded - http://www.securityfocus.com/archive/1/484077/100/200/threaded
CVE ID: CVE-2007-6412 State: PUBLISHED Published: 2007-12-17T18:00:00 Last Updated: 2024-08-07T16:02:36.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in wiki/index.php in Bitweaver 2.0.0 and earlier, when comments are enabled, allows remote attackers to inject arbitrary PHP code via an editcomments action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40148 - http://securityreason.com/securityalert/3454 - http://www.hackerscenter.com/archive/view.asp?id=28129 - http://www.securityfocus.com/archive/1/484805/100/0/threaded - http://securityreason.com/securityalert/3428 - http://www.securityfocus.co
tyfocus.com/archive/1/484805/100/0/threaded - http://securityreason.com/securityalert/3428 - http://www.securityfocus.com/bid/26801
CVE ID: CVE-2007-6413 State: PUBLISHED Published: 2007-12-17T23:00:00 Last Updated: 2024-08-07T16:02:36.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Solaris 10 with the 120011-04 and 120012-04 patches, and later 120011-* and 120012-* patches, allows remote attackers to bypass certain netgroup restrictions and obtain root access to a filesystem via NFS requests from a client root user. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201317-1 - http://www.securityfocus.com/bid/26872 - http://www.securitytracker.com/id?1019102 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103162-1 - htt
72 - http://www.securitytracker.com/id?1019102 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103162-1 - http://secunia.com/advisories/28096 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39033 - http://osvdb.org/40829 - http://www.vupen.com/english/advisories/2007/4218