Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-4496 State: PUBLISHED Published: 2007-09-21T18:00:00 Last Updated: 2024-08-07T15:01:09.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows authenticated users with administrative privileges on a guest operating system to corrupt memory and possibly execute arbitrary code on the host operating system via unspecified vectors. Additional Analyst Notes: - CVE Program Container: Refe
trary code on the host operating system via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html - http://security.gentoo.org/glsa/glsa-200711-23.xml - http://www.ubuntu.com/usn/usn-543-1 - http://www.vupen.com/english/advisories/2007/3229 - http://secunia.com/advisories/27694 - http://www.vmware.com/support/server/doc/releasenotes_server.html - http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html - http://www.securityfocus.com/bid/25728 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html - http://secunia.com/advisories/26890 - http://www.vmware.com/suppor
e.com/support/player2/doc/releasenotes_player2.html - http://secunia.com/advisories/26890 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html - http://www.vmware.com/support/player/doc/releasenotes_player.html - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html - http://secunia.com/advisories/27706 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html - http://www.securitytracker.com/id?1018718
CVE ID: CVE-2007-4497 State: PUBLISHED Published: 2007-09-21T18:00:00 Last Updated: 2024-08-07T15:01:09.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows users with login access to a guest operating system to cause a denial of service (guest outage and host process crash or hang) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/
ang) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html - http://security.gentoo.org/glsa/glsa-200711-23.xml - http://www.ubuntu.com/usn/usn-543-1 - http://www.vupen.com/english/advisories/2007/3229 - http://secunia.com/advisories/27694 - http://www.vmware.com/support/server/doc/releasenotes_server.html - http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html - http://www.vmware.com/support/player2/doc/releasenotes_player2.html - http://www.securityfocus.com/bid/25731 - http://secunia.com/advisories/26890 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html - h
us.com/bid/25731 - http://secunia.com/advisories/26890 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html - http://www.vmware.com/support/player/doc/releasenotes_player.html - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html - http://secunia.com/advisories/27706 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html - http://www.securitytracker.com/id?1018718
CVE ID: CVE-2007-4498 State: PUBLISHED Published: 2007-08-23T19:00:00 Last Updated: 2024-08-07T15:01:09.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Grandstream SIP Phone GXV-3000 with firmware 1.0.1.7, Loader 1.0.0.6, and Boot 1.0.0.18 allows remote attackers to force silent call completion, eavesdrop on the phone's local environment, and cause a denial of service (blocked call reception) via a certain SIP INVITE message followed by a certain "SIP/2.0 183 Session Progress" message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26568 - http://www.vupen.com/english/advisories/2007/2970 - http://www.securityfocus.com/bid/2
://secunia.com/advisories/26568 - http://www.vupen.com/english/advisories/2007/2970 - http://www.securityfocus.com/bid/25399 - http://www.securitytracker.com/id?1018598 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065417.html - http://securityreason.com/securityalert/3059 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36170 - http://osvdb.org/40185
CVE ID: CVE-2007-4499 State: PUBLISHED Published: 2007-08-23T19:00:00 Last Updated: 2024-08-07T15:01:09.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in output.php in American Financing eMail Image Upload 4.1 allows remote attackers to upload and execute arbitrary code via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45827 - http://www.securityfocus.com/bid/25404
CVE ID: CVE-2007-4500 State: PUBLISHED Published: 2007-08-23T19:00:00Z Last Updated: 2024-09-16T19:52:23.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in TunnelRunner in SSHKeychain before 0.8.2 beta, and possibly later versions, allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.sshkeychain.org/pipermail/users/2007-August/000102.html - http://www.securitytracker.com/id?1018630 - http://www.sshkeychain.org/pipermail/users/2007-August/000098.html - http://secunia.com/advisories/26617 - http://www.sshkeychain.org/pipermail/users/2007-August/000104.html - http://ww
l - http://secunia.com/advisories/26617 - http://www.sshkeychain.org/pipermail/users/2007-August/000104.html - http://www.securityfocus.com/bid/25409
CVE ID: CVE-2007-4501 State: PUBLISHED Published: 2007-08-23T19:00:00Z Last Updated: 2024-09-17T00:01:57.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in PassphraseRequester in SSHKeychain before 0.8.2 beta allows attackers to obtain sensitive information (passwords) via unknown vectors, related to "poor protection." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018632 - http://www.sshkeychain.org/pipermail/users/2007-August/000102.html - http://www.sshkeychain.org/pipermail/users/2007-August/000098.html - http://secunia.com/advisories/26617 - http://www.sshkeychain.org/pipermail/users/2007-Augu
ers/2007-August/000098.html - http://secunia.com/advisories/26617 - http://www.sshkeychain.org/pipermail/users/2007-August/000104.html - http://www.securityfocus.com/bid/25409
CVE ID: CVE-2007-4502 State: PUBLISHED Published: 2007-08-23T19:00:00 Last Updated: 2024-08-07T15:01:08.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the BibTeX component (com_jombib) 1.3 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the afilter parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38357 - https://www.exploit-db.com/exploits/4310 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36225
CVE ID: CVE-2007-4503 State: PUBLISHED Published: 2007-08-23T19:00:00 Last Updated: 2024-08-07T15:01:09.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the Nice Talk component (com_nicetalk) 0.9.3 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the tagid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6794 - https://www.exploit-db.com/exploits/4308 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36224 - http://secunia.com/advisories/26576 - http://www.securityfocus.com/bid/31818 - http://www.osvdb.org/36587 - http://www.vupen
://secunia.com/advisories/26576 - http://www.securityfocus.com/bid/31818 - http://www.osvdb.org/36587 - http://www.vupen.com/english/advisories/2008/2858
CVE ID: CVE-2007-4504 State: PUBLISHED Published: 2007-08-23T19:00:00 Last Updated: 2024-08-07T15:01:08.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in the RSfiles component (com_rsfiles) 1.0.2 and earlier for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the path parameter in a files.display action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36222 - https://www.exploit-db.com/exploits/4307
CVE ID: CVE-2007-4505 State: PUBLISHED Published: 2007-08-23T19:00:00 Last Updated: 2024-08-07T15:01:09.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the RemoSitory component (com_remository) for Mambo allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4306 - http://osvdb.org/38359 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36220
CVE ID: CVE-2007-4506 State: PUBLISHED Published: 2007-08-23T19:00:00 Last Updated: 2024-08-07T15:01:09.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the NeoRecruit component (com_neorecruit) 1.4 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an offer_view action. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3079 - http://www.neojoomla.com/en/news-joomla/extensions-neojoomla/mise-a-jour-de-securite-pour-neorecruit-1.4-20070824135.html - http://osvdb.org/36852 - http://www.securityfocus.com/bid/25578 - https:/
ecurite-pour-neorecruit-1.4-20070824135.html - http://osvdb.org/36852 - http://www.securityfocus.com/bid/25578 - https://www.exploit-db.com/exploits/4305 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36216 - http://secunia.com/advisories/26689
CVE ID: CVE-2007-4507 State: PUBLISHED Published: 2007-08-23T19:00:00 Last Updated: 2024-08-07T15:01:09.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the php_ntuser component for PHP 5.2.3 allow context-dependent attackers to cause a denial of service or execute arbitrary code via long arguments to the (1) ntuser_getuserlist, (2) ntuser_getuserinfo, (3) ntuser_getusergroups, or (4) ntuser_getdomaincontroller functions. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4304
CVE ID: CVE-2007-4508 State: PUBLISHED Published: 2007-08-23T19:00:00 Last Updated: 2024-08-07T15:01:09.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Rebellion Asura engine, as used for the server in Rogue Trooper 1.0 and earlier and Prism 1.1.1.0 and earlier, allows remote attackers to execute arbitrary code via a long string in a 0xf007 packet for the challenge B query. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2956 - http://www.securityfocus.com/archive/1/477357/100/0/threaded - http://aluigi.altervista.org/adv/asurabof-adv.txt - http://osvdb.org/39799 - http://www.vupen.co
477357/100/0/threaded - http://aluigi.altervista.org/adv/asurabof-adv.txt - http://osvdb.org/39799 - http://www.vupen.com/english/advisories/2007/2955 - http://www.securityfocus.com/bid/25411 - http://secunia.com/advisories/26571 - http://secunia.com/advisories/24023 - http://securityreason.com/securityalert/3053 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36221
CVE ID: CVE-2007-4509 State: PUBLISHED Published: 2007-08-23T19:00:00 Last Updated: 2024-08-07T15:01:08.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the EventList component (com_eventlist) 0.8 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the did parameter in a details action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4309 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36223 - http://osvdb.org/38360
CVE ID: CVE-2007-4510 State: PUBLISHED Published: 2007-08-23T19:00:00 Last Updated: 2024-08-07T15:01:09.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: ClamAV before 0.91.2, as used in Kolab Server 2.0 through 2.2beta1 and other products, allows remote attackers to cause a denial of service (application crash) via (1) a crafted RTF file, which triggers a NULL dereference in the cli_scanrtf function in libclamav/rtf.c; or (2) a crafted HTML document with a data: URI, which triggers a NULL dereference in the cli_html_normalise function in libclamav/htmlnorm.c. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Containe
NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36173 - http://security.gentoo.org/glsa/glsa-200709-14.xml - http://secunia.com/advisories/26552 - http://secunia.com/advisories/26822 - http://secunia.com/advisories/26916 - http://www.securityfocus.com/bid/25398 - http://secunia.com/advisories/26683 - https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00104.html - http://www.debian.org/security/2007/dsa-1366 - http://kolab.org/security/kolab-vendor-notice-17.txt - http://securityreason.com/securityalert/3054 - http://www.vupen.com
tp://kolab.org/security/kolab-vendor-notice-17.txt - http://securityreason.com/securityalert/3054 - http://www.vupen.com/english/advisories/2008/0924/references - http://secunia.com/advisories/26530 - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=611 - http://www.trustix.org/errata/2007/0026/ - http://secunia.com/advisories/29420 - http://www.novell.com/linux/security/advisories/2007_18_sr.html - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=582 - http://secunia.com/advisories/26751 - http://secunia.com/advisories/26654 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36177 - http://docs.info.apple.com/art
cunia.com/advisories/26654 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36177 - http://docs.info.apple.com/article.html?artnum=307562 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:172 - http://sourceforge.net/project/shownotes.php?release_id=533658 - http://www.vupen.com/english/advisories/2007/2952 - http://secunia.com/advisories/26674
CVE ID: CVE-2007-4511 State: PUBLISHED Published: 2007-08-23T19:00:00 Last Updated: 2024-08-07T15:01:09.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sun Admin Console in Sun Application Server 9.0_0.1 does not apply certain configuration changes persistently, which causes the (1) SSL and (2) SSL_MutualAuth ORB listener services to enable all protocols and ciphers after the services are restarted, possibly allowing remote attackers to bypass intended policy. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45828 - http://www.securityfocus.com/bid/25400 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36169 - http://www.securityfocu
//www.securityfocus.com/bid/25400 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36169 - http://www.securityfocus.com/archive/1/477315/100/0/threaded
CVE ID: CVE-2007-4512 State: PUBLISHED Published: 2007-09-10T17:00:00 Last Updated: 2024-08-07T15:01:09.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Sophos Anti-Virus for Windows 6.x before 6.5.8 and 7.x before 7.0.1 allows remote attackers to inject arbitrary web script or HTML via an archive with a file that matches a virus signature and has a crafted filename that is not properly handled by the print function in SavMain.exe. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3107 - http://www.vupen.com/english/advisories/2007/3077 - http://www.sophos.com/support/knowledgeba
n.com/securityalert/3107 - http://www.vupen.com/english/advisories/2007/3077 - http://www.sophos.com/support/knowledgebase/article/29150.html - http://osvdb.org/37527 - http://secunia.com/advisories/26714 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36478 - http://www.securityfocus.com/archive/1/478708/100/0/threaded - http://www.securityfocus.com/bid/25572
CVE ID: CVE-2007-4513 State: PUBLISHED Published: 2007-11-05T16:00:00 Last Updated: 2024-08-07T15:01:09.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in IBM AIX 5.2 and 5.3 allow local users to gain privileges via a long argument to the (1) "-p" option to lqueryvg or (2) the "-V" option to lquerypv. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ05349 - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ05877 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=614 - ftp://aix.software.ibm.com/aix/efixes/security/lqueryvg_ifix.tar - http://secunia.com
lnerabilities/display.php?id=614 - ftp://aix.software.ibm.com/aix/efixes/security/lqueryvg_ifix.tar - http://secunia.com/advisories/27437 - http://www.securityfocus.com/bid/26259 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38165 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5650 - http://securitytracker.com/id?1018871 - http://www.securityfocus.com/bid/26256 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=615 - ftp://aix.software.ibm.com/aix/efixes/security/lquerypv_ifix.tar - http://www.vupen.com/english/advisories/2007/3669 - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ05129 - http://www-1.ibm.com/support/d
english/advisories/2007/3669 - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ05129 - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ05971
CVE ID: CVE-2007-4514 State: PUBLISHED Published: 2009-04-15T10:00:00 Last Updated: 2024-08-07T15:01:09.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP ProCurve Manager and HP ProCurve Manager Plus 2.3 and earlier allows remote attackers to obtain sensitive information from the ProCurve Manager server via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022022 - http://www.vupen.com/english/advisories/2009/1016 - http://www.securityfocus.com/bid/34451 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49781 - http://osvdb.org/53596 - http://marc.info/?l=bugtraq&m=123
https://exchange.xforce.ibmcloud.com/vulnerabilities/49781 - http://osvdb.org/53596 - http://marc.info/?l=bugtraq&m=123930135924665&w=2 - http://marc.info/?l=bugtraq&m=123930135924665&w=2 - http://secunia.com/advisories/34705
CVE ID: CVE-2007-4515 State: PUBLISHED Published: 2007-08-31T22:00:00 Last Updated: 2024-08-07T15:01:09.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1.0.419 allows remote attackers to execute arbitrary code via unspecified vectors involving arguments to the (1) fvCom and (2) info methods. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37739 - http://secunia.com/advisories/26579 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
: - http://osvdb.org/37739 - http://secunia.com/advisories/26579 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36363 - http://messenger.yahoo.com/security_update.php?id=082907 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=591 - http://securityreason.com/securityalert/3083 - http://securitytracker.com/id?1018628 - http://www.securityfocus.com/bid/25494 - http://www.vupen.com/english/advisories/2007/3011
CVE ID: CVE-2007-4516 State: PUBLISHED Published: 2008-02-21T20:00:00 Last Updated: 2024-08-07T15:01:09.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Volume Manager Scheduler Service (aka VxSchedService.exe) in Symantec Veritas Storage Foundation 5.0 for Windows allows remote attackers to cause a denial of service (daemon crash or hang) via malformed packets. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29033 - http://www.symantec.com/avcenter/security/Content/2008.02.20.html - http://securitytracker.com/id?1019458 - http://www.vupen.com/english/advisories/2008/0624 - http://www.securityfocus.com/bid/27440 - http://labs.
m/id?1019458 - http://www.vupen.com/english/advisories/2008/0624 - http://www.securityfocus.com/bid/27440 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=665
CVE ID: CVE-2007-4517 State: PUBLISHED Published: 2007-11-08T20:00:00 Last Updated: 2024-08-07T15:01:09.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the XDB.XDB_PITRIG_PKG.PITRIG_DROPMETADATA procedure in Oracle 10g R2 allows remote authenticated users to execute arbitrary code via a long (1) OWNER or (2) NAME argument. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27526 - http://www.securitytracker.com/id?1018908 - http://www.vupen.com/english/advisories/2007/3803 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38318 - http://www.securityfocus.com/bid/26374 - http://labs.idefense.com/intelligence/v
ce.ibmcloud.com/vulnerabilities/38318 - http://www.securityfocus.com/bid/26374 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=622 - http://securityreason.com/securityalert/8524 - http://www.securityfocus.com/archive/1/483434/100/0/threaded
CVE ID: CVE-2007-4521 State: PUBLISHED Published: 2007-08-28T01:00:00 Last Updated: 2024-08-07T15:01:09.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Asterisk Open Source 1.4.5 through 1.4.11, when configured to use an IMAP voicemail storage backend, allows remote attackers to cause a denial of service via an e-mail with an "invalid/corrupted" MIME body, which triggers a crash when the recipient listens to voicemail. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26601 - http://www.securitytracker.com/id?1018606 - http://downloads.digium.com/pub/asa/AST-2007-021.html - http://www.securityfocus.com/archive/1/477729/100/0/thread
606 - http://downloads.digium.com/pub/asa/AST-2007-021.html - http://www.securityfocus.com/archive/1/477729/100/0/threaded - http://secunia.com/advisories/26602 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36261 - http://www.vupen.com/english/advisories/2007/2978 - http://www.securityfocus.com/bid/25438 - http://securityreason.com/securityalert/3065
CVE ID: CVE-2007-4522 State: PUBLISHED Published: 2007-08-25T00:00:00 Last Updated: 2024-08-07T15:01:09.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via one or more of the following vectors: the (1) id parameter to (a) pages/delete_page.php, (b) navigation/delete_menu.php, and (c) navigation/delete_item.php in admin/; the (2) menu_id, (3) name, (3) page_id, and (4) url parameters in (d) admin/navigation/do_new_item.php; the (5) new_menuname parameter in (e) admin/navigation/do_new_nav.php; and (6) area1, name, and url parameter