Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-3040 State: PUBLISHED Published: 2007-09-12T01:00:00 Last Updated: 2024-08-07T13:57:54.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in agentdpv.dll 2.0.0.3425 in Microsoft Agent on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a crafted URL to the Agent (Agent.Control) ActiveX control, which triggers an overflow within the Agent Service (agentsrv.exe) process, a different issue than CVE-2007-1205. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=592 - http://www.securityfocus.com/bid/25566 - http://securityreason.com/sec
intelligence/vulnerabilities/display.php?id=592 - http://www.securityfocus.com/bid/25566 - http://securityreason.com/securityalert/3124 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-051 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35752 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2116 - http://secunia.com/advisories/26753 - http://www.us-cert.gov/cas/techalerts/TA07-254A.html - http://securitytracker.com/id?1018677 - http://www.vupen.com/english/advisories/2007/3113 - http://www.osvdb.org/36934 - http://www.kb.cert.org/vuls/id/716872 - http://www.securityfocus.com/archive/1/479096/100/0/threaded
CVE ID: CVE-2007-3041 State: PUBLISHED Published: 2007-08-14T21:00:00 Last Updated: 2024-08-07T13:57:55.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the pdwizard.ocx ActiveX object for Internet Explorer 5.01, 6 SP1, and 7 allows remote attackers to execute arbitrary code via unknown vectors related to Microsoft Visual Basic 6 objects and memory corruption, aka "ActiveX Object Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/36395 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-045 - http://www.us-cert.gov/cas/techalerts/TA07-226A.html - https:
m/en-us/security-updates/securitybulletins/2007/ms07-045 - http://www.us-cert.gov/cas/techalerts/TA07-226A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2232 - http://www.vupen.com/english/advisories/2007/2869 - http://secunia.com/advisories/26419 - http://securitytracker.com/id?1018562 - http://www.securityfocus.com/bid/25295
CVE ID: CVE-2007-3042 State: PUBLISHED Published: 2007-06-05T23:00:00 Last Updated: 2024-08-07T13:57:54.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Meneame before 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25510 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34702 - http://www.securityfocus.com/bid/24290 - http://osvdb.org/36411 - http://svn.meneame.net/index.cgi/branches/version2/www/register.php?rev=534&view=log - http://jvn.jp/jp/JVN%2389497739/index.html - http://www.vupen.com/
branches/version2/www/register.php?rev=534&view=log - http://jvn.jp/jp/JVN%2389497739/index.html - http://www.vupen.com/english/advisories/2007/2040
CVE ID: CVE-2007-3043 State: PUBLISHED Published: 2007-06-05T23:00:00 Last Updated: 2024-08-07T13:57:54.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Collaboration - File Sharing 01-20 up to 01-20-/B and 01-30 up to 01-30-/B in Hitachi Groupmax Collaboration Portal up to 07-30-/D, Groupmax Collaboration Web Client - Forum/File Sharing up to 07-30-/C, uCosminexus Collaboration Portal up to 06-30-/D, and uCosminexus Collaboration Portal - Forum/File Sharing up to 06-30-/C on Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: -
t arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24263 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34659 - http://osvdb.org/36828 - http://www.vupen.com/english/advisories/2007/2020 - http://www.hitachi-support.com/security_e/vuls_e/HS07-011_e/index-e.html - http://secunia.com/advisories/25507
CVE ID: CVE-2007-3044 State: PUBLISHED Published: 2007-06-05T23:00:00 Last Updated: 2024-08-07T13:57:54.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Map I/O Service (xpwmap) in Hitachi XP/W on HI-UX/WE2 before 20070319, and XP/W on HP-UX before 20070405, allows remote attackers to cause a denial of service via certain data to the service port. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25494 - http://www.vupen.com/english/advisories/2007/2022 - http://osvdb.org/36895 - http://www.hitachi-support.com/security_e/vuls_e/HS07-013_e/index-e.html - https://exchange.xforce.ibmcloud.com/vulnerabil
tp://www.hitachi-support.com/security_e/vuls_e/HS07-013_e/index-e.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34653 - http://www.securityfocus.com/bid/24262
CVE ID: CVE-2007-3045 State: PUBLISHED Published: 2007-06-05T23:00:00 Last Updated: 2024-08-07T13:57:54.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Hitachi TP1/NET/OSI-TP-Extended on HI-UX/WE2 before 20070213, and on HP-UX before 20070314, allows remote attackers to cause a denial of service via certain data to a port. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36825 - http://www.hitachi-support.com/security_e/vuls_e/HS07-012_e/index-e.html - http://www.vupen.com/english/advisories/2007/2021 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34661 - http://secunia.com/advisories/25511
CVE ID: CVE-2007-3046 State: PUBLISHED Published: 2007-06-05T23:00:00 Last Updated: 2024-08-07T13:57:55.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Advanced Software Production Line Vortex Library before 1.0.3 allows remote attackers to cause a denial of service (listener crash) via unspecified vectors related to the select I/O implementation and the file set buffer. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36819 - http://secunia.com/advisories/25442 - http://lists.aspl.es/pipermail/vortex/2007-May/000152.html
CVE ID: CVE-2007-3047 State: PUBLISHED Published: 2007-06-05T23:00:00 Last Updated: 2024-08-07T13:57:54.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Vonage VoIP Telephone Adapter has a default administrator username "user" and password "user," which allows remote attackers to obtain administrative access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/470443/100/0/threaded - http://osvdb.org/38522 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34710 - http://securityreason.com/securityalert/2771
CVE ID: CVE-2007-3048 State: PUBLISHED Published: 2007-06-05T23:00:00 Last Updated: 2024-08-07T14:05:27.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt. NOTE: multiple third parties report inability to reproduce this issue Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063721.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34693 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063706.html - http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063710.html - http://l
l-disclosure/2007-June/063706.html - http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063710.html - http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063728.html
CVE ID: CVE-2007-3049 State: PUBLISHED Published: 2007-06-06T01:00:00 Last Updated: 2024-08-07T14:05:27.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Buttercup web file manager (BWFM) May 2007 allows remote attackers to inject arbitrary web script or HTML via the title parameter. Additional Analyst Notes: - CVE Program Container: References: - http://redlevel.org/wp-content/uploads/buttercup.txt - http://osvdb.org/38805 - http://www.securityfocus.com/bid/24269 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34817
CVE ID: CVE-2007-3050 State: PUBLISHED Published: 2007-06-06T01:00:00 Last Updated: 2024-08-07T14:05:27.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in chameleon cms 3.0 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.majorsecurity.de/index_2.php?major_rls=major_rls50 - http://osvdb.org/36912 - http://secunia.com/advisories/25526 - http://www.securityfocus.com/archive/1/470759/100/0/threaded - http://www.securityfocus.com/archive/1/470273/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34684
CVE ID: CVE-2007-3051 State: PUBLISHED Published: 2007-06-06T01:00:00 Last Updated: 2024-08-07T14:05:27.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in inc/class_users.php in RevokeSoft RevokeBB 1.0 RC4 and earlier allows remote attackers to execute arbitrary SQL commands via the revokebb_user cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24272 - http://osvdb.org/38366 - http://www.vupen.com/english/advisories/2007/2041 - http://www.securityfocus.com/archive/1/470276/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34666 - https://www.exploit-db.com/exploits/4020
CVE ID: CVE-2007-3052 State: PUBLISHED Published: 2007-06-06T01:00:00 Last Updated: 2024-08-07T14:05:28.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the PNphpBB2 1.2i and earlier module for PostNuke allows remote attackers to execute arbitrary SQL commands via the c parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2037 - http://osvdb.org/35424 - http://secunia.com/advisories/25480 - https://www.exploit-db.com/exploits/4026 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34668 - http://www.securityfocus.com/bid/24295
CVE ID: CVE-2007-3053 State: PUBLISHED Published: 2007-06-06T01:00:00 Last Updated: 2024-08-07T14:05:28.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Calimero.CMS 3.3.1232 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/470272/100/0/threaded - http://osvdb.org/36984 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34685 - http://www.majorsecurity.de/index_2.php?major_rls=major_rls49 - http://secunia.com/advisories/25521
CVE ID: CVE-2007-3054 State: PUBLISHED Published: 2007-06-06T01:00:00 Last Updated: 2024-08-07T14:05:28.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in Codelib Linker 2.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the kword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36412 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34695 - http://www.securityfocus.com/bid/24296 - http://secunia.com/advisories/25517
CVE ID: CVE-2007-3055 State: PUBLISHED Published: 2007-06-06T01:00:00 Last Updated: 2024-08-07T14:05:28.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Codelib Linker 2.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36413 - http://www.securityfocus.com/bid/24277 - http://www.vupen.com/english/advisories/2007/2039 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34695 - http://www.securityfocus.com/archive/1/470346/100/0/threaded - http://osvdb.org/38374 - http://secunia.com/advis
34695 - http://www.securityfocus.com/archive/1/470346/100/0/threaded - http://osvdb.org/38374 - http://secunia.com/advisories/25517
CVE ID: CVE-2007-3056 State: PUBLISHED Published: 2007-06-06T01:00:00 Last Updated: 2024-08-07T14:05:27.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in filedetails.php in WebSVN 2.0rc4, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=180879 - http://www.securityfocus.com/bid/24310 - http://osvdb.org/36409 - http://websvn.tigris.org/servlets/ReadMsg?list=dev&msgNo=1328 - http://secunia.com/advisories/25532 - http://www.attrition.org/pipermail/vim/2007-August/001771.html -
=dev&msgNo=1328 - http://secunia.com/advisories/25532 - http://www.attrition.org/pipermail/vim/2007-August/001771.html - http://bugs.gentoo.org/show_bug.cgi?id=180879 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34726 - http://www.nabble.com/CVE-2007-3056-tf4246678.html - http://securitytracker.com/id?1018601
CVE ID: CVE-2007-3057 State: PUBLISHED Published: 2007-06-06T01:00:00 Last Updated: 2024-08-07T14:05:29.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/wysiwyg/spaw_control.class.php in the icontent 4.5 module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter. NOTE: this issue is probably a duplicate of CVE-2006-4656. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35381 - http://secunia.com/advisories/25522 - http://attrition.org/pipermail/vim/2007-June/001639.html - http://www.vupen.com/english/advisories/2007/2047 - https://exchange.xforce
on.org/pipermail/vim/2007-June/001639.html - http://www.vupen.com/english/advisories/2007/2047 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34681 - https://www.exploit-db.com/exploits/4022 - http://www.securityfocus.com/bid/24302
CVE ID: CVE-2007-3058 State: PUBLISHED Published: 2007-06-06T01:00:00 Last Updated: 2024-08-07T14:05:29.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Madirish Webmail 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[basedir] parameter to (1) calendar.php, (2) compose.php, and (3) index.php, different vectors than CVE-2007-2826. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25475 - http://osvdb.org/36803 - http://osvdb.org/36804
E Program Container: References: - http://secunia.com/advisories/25475 - http://osvdb.org/36803 - http://osvdb.org/36804 - http://osvdb.org/36805 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34667
CVE ID: CVE-2007-3059 State: PUBLISHED Published: 2007-06-06T01:00:00 Last Updated: 2024-08-07T14:05:29.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: SendCard 3.3.0 allows remote attackers to obtain sensitive information via an invalid sc_language parameter to sendcard.php, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34672 - http://www.securityfocus.com/archive/1/470237/100/0/threaded - http://osvdb.org/35740 - http://securityreason.com/securityalert/2770
CVE ID: CVE-2007-3060 State: PUBLISHED Published: 2007-06-06T01:00:00 Last Updated: 2024-08-07T14:05:27.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHP Live! 3.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) sid parameter to (a) chat.php, (2) LANG[DEFAULT_BRANDING] and (3) PHPLIVE_VERSION parameters to (b) help.php, the (4) admin[name] parameter to (c) admin/header.php, and the (5) BASE_URL parameter to (d) super/info.php, and in some cases, the LANG[DEFAULT_BRANDING], PHPLIVE_VERSION, and (6) nav_line parameters to setup/footer.php, different vectors than CVE-2006-6769. Additional Analys
HPLIVE_VERSION, and (6) nav_line parameters to setup/footer.php, different vectors than CVE-2006-6769. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36986 - http://osvdb.org/36989 - http://osvdb.org/36987 - http://osvdb.org/38383 - http://www.vupen.com/english/advisories/2007/2082 - http://osvdb.org/36988 - http://marc.info/?l=full-disclosure&m=118072121020357&w=2 - http://www.securityfocus.com/archive/1/470275 - http://osvdb.org/38381 - http://www.securityfocus.com/bid/24276 - http://osvdb.org/38379 - http://osvdb.org/38382 - http://secunia.com/advisories/25441 - http://osvdb.org/36990 - http://osvdb.org/38380 - http://www.securityfocus.com/archive/1/4705
nia.com/advisories/25441 - http://osvdb.org/36990 - http://osvdb.org/38380 - http://www.securityfocus.com/archive/1/470508/100/0/threaded
CVE ID: CVE-2007-3061 State: PUBLISHED Published: 2007-06-06T01:00:00 Last Updated: 2024-08-07T14:05:28.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cactushop 6 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) cactushop6.mdb or (2) cactushop5.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2780 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34706 - http://osvdb.org/42052 - http://osvdb.org/42053 - http://www.securityfocus.com/archive/1/470439/100/0/threaded
CVE ID: CVE-2007-3062 State: PUBLISHED Published: 2007-06-06T01:00:00 Last Updated: 2024-08-07T14:05:27.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 2.1.2 running on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34656 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01056592 - http://jvn.jp/jp/JVN%2319240523/index.html - http://www.securitytracker.com/id?1018179 - http://h20000.www2.hp.co
6592 - http://jvn.jp/jp/JVN%2319240523/index.html - http://www.securitytracker.com/id?1018179 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01056592 - http://secunia.com/advisories/25493 - http://www.vupen.com/english/advisories/2007/2013 - http://www.kb.cert.org/vuls/id/292457 - http://osvdb.org/36829 - http://www.securityfocus.com/bid/24256
CVE ID: CVE-2007-3063 State: PUBLISHED Published: 2007-06-06T01:00:00 Last Updated: 2024-08-07T14:05:27.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in diary.php in My Databook allows remote attackers to execute arbitrary SQL commands via the delete parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/470483/100/0/threaded - http://www.securityfocus.com/bid/24311 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34716 - http://osvdb.org/38384
CVE ID: CVE-2007-3064 State: PUBLISHED Published: 2007-06-06T01:00:00 Last Updated: 2024-08-07T14:05:29.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in diary.php in My Databook allows remote attackers to inject arbitrary web script or HTML via the year parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34717 - http://www.securityfocus.com/archive/1/470483/100/0/threaded - http://www.vupen.com/english/advisories/2007/2062 - http://www.securityfocus.com/bid/24311 - http://osvdb.org/38385
CVE ID: CVE-2007-3065 State: PUBLISHED Published: 2007-06-06T01:00:00 Last Updated: 2024-08-07T14:05:28.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewimage.php in Particle Soft Particle Gallery 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the editcomment parameter, a different version and vector than CVE-2006-2862. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2044 - http://www.securityfocus.com/bid/24273 - http://osvdb.org/36309 - https://www.exploit-db.com/exploits/4019 - http://secunia.com/advisories/25524
CVE ID: CVE-2007-3066 State: PUBLISHED Published: 2007-06-06T01:00:00 Last Updated: 2024-08-07T14:05:27.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in php(Reactor) 1.2.7 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pathtohomedir parameter to (1) view.inc.php, (2) users.inc.php, (3) updatecms.inc.php, and (4) polls.inc.php in inc/; and other unspecified files, different vectors than CVE-2006-3983. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38377 - http://osvdb.org/38378 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34674 - http://securityr
osvdb.org/38377 - http://osvdb.org/38378 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34674 - http://securityreason.com/securityalert/2773 - http://osvdb.org/38375 - http://osvdb.org/38376 - http://www.securityfocus.com/archive/1/470241/100/0/threaded
CVE ID: CVE-2007-3067 State: PUBLISHED Published: 2007-06-06T01:00:00 Last Updated: 2024-08-07T14:05:28.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Attunement and Key Tracker 0.95 and earlier plugin for EQdkp allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the (1) keyshow, (2) sortkey, and (3) show parameters to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2045 - http://sourceforge.net/project/shownotes.php?release_id=512860&group_id=167016 - http://osvdb.org/36930 - http://secunia.com/adviso
ceforge.net/project/shownotes.php?release_id=512860&group_id=167016 - http://osvdb.org/36930 - http://secunia.com/advisories/25538 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34700
CVE ID: CVE-2007-3068 State: PUBLISHED Published: 2007-06-06T01:00:00 Last Updated: 2024-08-07T14:05:28.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in DVD X Player 4.1 Professional allows remote attackers to execute arbitrary code via a PLF playlist containing a long filename. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34690 - https://www.exploit-db.com/exploits/4024 - http://www.securityfocus.com/bid/24278 - http://www.vupen.com/english/advisories/2007/2043 - http://secunia.com/advisories/25508 - http://osvdb.org/36956