Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-2460 State: PUBLISHED Published: 2007-05-02T18:00:00 Last Updated: 2024-08-07T13:42:32.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in modules/admin/include/config.php in FireFly 1.1.01 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2007-May/001573.html - http://www.vupen.com/english/advisories/2007/1554
CVE ID: CVE-2007-2461 State: PUBLISHED Published: 2007-05-02T22:00:00 Last Updated: 2024-08-07T13:42:32.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DHCP relay agent in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 allows remote attackers to cause a denial of service (dropped packets) via a DHCPREQUEST or DHCPINFORM message that causes multiple DHCPACK messages to be sent from DHCP servers to the agent, which consumes the memory allocated for a local buffer. NOTE: this issue only occurs when multiple DHCP servers are used. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_response09186a008083317
es: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_response09186a0080833172.html - http://www.securityfocus.com/bid/23763 - http://www.securitytracker.com/id?1017999 - http://www.kb.cert.org/vuls/id/530057 - http://www.vupen.com/english/advisories/2007/1635 - http://www.securitytracker.com/id?1018000 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34026 - http://www.osvdb.org/35330 - http://secunia.com/advisories/25109
CVE ID: CVE-2007-2462 State: PUBLISHED Published: 2007-05-02T22:00:00 Last Updated: 2024-08-07T13:42:32.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 before 7.2(2)8, when using Layer 2 Tunneling Protocol (L2TP) or Remote Management Access, allows remote attackers to bypass LDAP authentication and gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1017994 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080833166.shtml - http://www.kb.cert.org/vuls/id/210876 - https://exchange.xforce.ibmclo
roducts_security_advisory09186a0080833166.shtml - http://www.kb.cert.org/vuls/id/210876 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34020 - http://www.vupen.com/english/advisories/2007/1636 - http://www.securitytracker.com/id?1017995 - http://www.osvdb.org/35331 - http://www.securityfocus.com/bid/23768 - http://secunia.com/advisories/25109
CVE ID: CVE-2007-2463 State: PUBLISHED Published: 2007-05-02T22:00:00 Last Updated: 2024-08-07T13:42:32.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.1 before 7.1(2)49 and 7.2 before 7.2(2)17 allows remote attackers to cause a denial of service (device reload) via unknown vectors related to VPN connection termination and password expiry. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080833166.shtml - http://www.osvdb.org/35332 - http://www.vupen.com/english/advisories/2007/1636 - https://exchange.xforce.ibmclo
.shtml - http://www.osvdb.org/35332 - http://www.vupen.com/english/advisories/2007/1636 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34021 - http://www.securityfocus.com/bid/23768 - http://secunia.com/advisories/25109
CVE ID: CVE-2007-2464 State: PUBLISHED Published: 2007-05-02T22:00:00 Last Updated: 2024-08-07T13:42:32.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Cisco Adaptive Security Appliance (ASA) and PIX 7.1 before 7.1(2)49 and 7.2 before 7.2(2)19, when using "clientless SSL VPNs," allows remote attackers to cause a denial of service (device reload) via "non-standard SSL sessions." Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080833166.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/34023 - http://www.vupen.com/english/advisories/2007/1636 - http://www.securityf
nge.xforce.ibmcloud.com/vulnerabilities/34023 - http://www.vupen.com/english/advisories/2007/1636 - http://www.securityfocus.com/bid/23768 - http://secunia.com/advisories/25109 - http://www.osvdb.org/35333 - http://www.kb.cert.org/vuls/id/337508
CVE ID: CVE-2007-2465 State: PUBLISHED Published: 2007-05-02T22:00:00 Last Updated: 2024-08-07T13:42:32.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun Solaris 9, when Solaris Auditing (BSM) is enabled for file read, write, attribute modify, create, or delete audit classes, allows local users to cause a denial of service (panic) via unknown vectors, possibly related to the audit_savepath function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34003 - http://www.securityfocus.com/bid/23751 - http://osvdb.org/34904 - http://secunia.com/advisories/25081 - http://sunsolve.sun.
://www.securityfocus.com/bid/23751 - http://osvdb.org/34904 - http://secunia.com/advisories/25081 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102900-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1085 - http://www.vupen.com/english/advisories/2007/1611 - http://www.securitytracker.com/id?1017992
CVE ID: CVE-2007-2466 State: PUBLISHED Published: 2007-05-02T22:00:00 Last Updated: 2024-08-07T13:42:32.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the LDAP Software Development Kit (SDK) for C, as used in Sun Java System Directory Server 5.2 up to Patch 4 and Sun ONE Directory Server 5.1, allows remote attackers to cause a denial of service (crash) via certain BER encodings. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1017991 - http://secunia.com/advisories/25091 - http://www.vupen.com/english/advisories/2007/1610 - http://osvdb.org/35743 - http://www.securityfocus.com/bid/23743 - http://
//www.vupen.com/english/advisories/2007/1610 - http://osvdb.org/35743 - http://www.securityfocus.com/bid/23743 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102895-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34002
CVE ID: CVE-2007-2467 State: PUBLISHED Published: 2007-05-02T22:00:00 Last Updated: 2024-08-07T13:42:32.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZoneAlarm Pro 6.5.737.000, 6.1.744.001, and possibly earlier versions and other products, allows local users to cause a denial of service (system crash) by sending malformed data to the vsdatant device driver, which causes an invalid memory access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23734 - http://www.vupen.com/english/advisories/2007/1608 - http://www.matousec.com/info/advisories/ZoneAlarm-Insufficient-validation-of-vsdatant-driver-input-buffer.php - https://excha
//www.matousec.com/info/advisories/ZoneAlarm-Insufficient-validation-of-vsdatant-driver-input-buffer.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/34028 - http://osvdb.org/35240 - http://www.securityfocus.com/archive/1/467269/100/0/threaded - http://secunia.com/advisories/25064
CVE ID: CVE-2007-2468 State: PUBLISHED Published: 2007-05-02T22:00:00 Last Updated: 2024-08-07T13:42:33.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP OpenVMS for Integrity Servers 8.2-1 and 8.3 allows local users to cause a denial of service (crash) via "Program actions relating to exceptions." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35504 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33999 - http://www.securityfocus.com/bid/23744 - http://secunia.com/advisories/25094 - ftp://ftp.itrc.hp.com/openvms_patches/i64/V8.2-1/VMS821I_SYS-V0400.txt - ftp://ftp.itrc.hp.com/openvms_patches/i64/V8.3/VMS8
//ftp.itrc.hp.com/openvms_patches/i64/V8.2-1/VMS821I_SYS-V0400.txt - ftp://ftp.itrc.hp.com/openvms_patches/i64/V8.3/VMS83I_SYS-V0200.txt - http://www.vupen.com/english/advisories/2007/1600
CVE ID: CVE-2007-2469 State: PUBLISHED Published: 2007-05-02T23:00:00 Last Updated: 2024-08-07T13:42:33.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in FileRun 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the fid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34006 - http://secunia.com/advisories/25075 - http://www.vupen.com/english/advisories/2007/1627 - http://pridels0.blogspot.com/2007/05/filerun-vuln.html - http://www.securityfocus.com/bid/23752
CVE ID: CVE-2007-2470 State: PUBLISHED Published: 2007-05-02T23:00:00 Last Updated: 2024-08-07T13:42:32.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in FileRun 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) page, (2) module, or (3) section parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25075 - http://www.vupen.com/english/advisories/2007/1627 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34007 - http://pridels0.blogspot.com/2007/05/filerun-vuln.html - http://www.securityfocus.com/bid/23752
CVE ID: CVE-2007-2471 State: PUBLISHED Published: 2007-05-02T23:00:00 Last Updated: 2024-08-07T13:42:32.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to read arbitrary files via a full pathname in the form parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35738 - https://www.exploit-db.com/exploits/3827 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33995 - http://secunia.com/advisories/25085
CVE ID: CVE-2007-2472 State: PUBLISHED Published: 2007-05-02T23:00:00 Last Updated: 2024-08-07T13:42:32.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the form parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34173 - http://osvdb.org/35739 - http://secunia.com/advisories/25085
CVE ID: CVE-2007-2473 State: PUBLISHED Published: 2007-05-02T23:00:00 Last Updated: 2024-08-07T13:42:32.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in stylesheet.php in CMS Made Simple 1.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the templateid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://blog.cmsmadesimple.org/2007/04/24/cms-made-simple-106-released/ - http://secunia.com/advisories/25082 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34044 - http://www.scanit.be/advisory-2007-05-02.html - http://www.vupen.com/english/advisories/2007/1628 - http://www.securityfocus
://www.scanit.be/advisory-2007-05-02.html - http://www.vupen.com/english/advisories/2007/1628 - http://www.securityfocus.com/bid/23753 - http://osvdb.org/35744
CVE ID: CVE-2007-2474 State: PUBLISHED Published: 2007-05-02T23:00:00 Last Updated: 2024-08-07T13:42:32.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart 4.0 allow remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter to (1) include/payment/payflow_pro.php, (2) global.php, or (3) libsecure.php, different vectors than CVE-2007-2070. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/466850/100/0/threaded - http://www.securityfocus.com/bid/23662
CVE ID: CVE-2007-2475 State: PUBLISHED Published: 2007-05-02T23:00:00 Last Updated: 2024-08-07T13:42:33.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the ADSCHEMA utility in Novell SecureLogin (NSL) 6 SP1 before 6.0.106 has unknown impact and remote attack vectors, related to granting "users excess permissions to their own attributes." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018006 - http://www.securityfocus.com/bid/23547 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5003822.html - http://osvdb.org/35774 - http://www.vupen.com/english/advisories/2007/1436 - h
cument/patchbuilder/readme_5003822.html - http://osvdb.org/35774 - http://www.vupen.com/english/advisories/2007/1436 - http://secunia.com/advisories/25160
CVE ID: CVE-2007-2476 State: PUBLISHED Published: 2007-05-02T23:00:00 Last Updated: 2024-08-07T13:42:33.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Novell SecureLogin (NSL) 6 SP1 before 6.0.106 has unknown impact and remote attack vectors, related to Active Directory (AD) password changes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018006 - http://www.securityfocus.com/bid/23547 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5003822.html - http://www.vupen.com/english/advisories/2007/1436 - http://osvdb.org/35775 - http://secunia.com/advisories/25160
CVE ID: CVE-2007-2477 State: PUBLISHED Published: 2007-05-03T00:00:00 Last Updated: 2024-08-07T13:42:32.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in phpMyChat.php3 in phpMyChat 0.14.5 allows remote attackers to execute arbitrary PHP code via a URL in the {ChatPath} parameter. NOTE: this has been disputed by multiple third parties and CVE because $ChatPath is set to a constant value Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2007-April/001525.html - http://www.securityfocus.com/archive/1/465874/100/0/threaded - http://www.securityfocus.com/archive/1/465741/100/100/threade
://www.securityfocus.com/archive/1/465874/100/0/threaded - http://www.securityfocus.com/archive/1/465741/100/100/threaded - http://www.attrition.org/pipermail/vim/2007-April/001531.html
CVE ID: CVE-2007-2478 State: PUBLISHED Published: 2007-05-03T00:00:00 Last Updated: 2024-08-07T13:42:32.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in the IRC component in Cerulean Studios Trillian Pro before 3.1.5.1 allow remote attackers to corrupt memory and possibly execute arbitrary code via (1) a URL with a long UTF-8 string, which triggers the overflow when the user highlights it, or (2) a font HTML tag with a face attribute containing a long UTF-8 string. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25086 - http://blog.ceruleanstudios.com/?p=131 - https://exchange.xforce.ibmclou
rences: - http://secunia.com/advisories/25086 - http://blog.ceruleanstudios.com/?p=131 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33985 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=522 - http://www.securitytracker.com/id?1017982 - http://www.securityfocus.com/bid/23730 - http://osvdb.org/35721 - http://www.vupen.com/english/advisories/2007/1596 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33986
CVE ID: CVE-2007-2479 State: PUBLISHED Published: 2007-05-03T00:00:00 Last Updated: 2024-08-07T13:42:32.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cerulean Studios Trillian Pro before 3.1.5.1 allows remote attackers to obtain potentially sensitive information via long CTCP PING messages that contain UTF-8 characters, which generates a malformed response that is not truncated by a newline, which can cause portions of a server message to be sent to the attacker. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25086 - http://blog.ceruleanstudios.com/?p=131 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=5
/25086 - http://blog.ceruleanstudios.com/?p=131 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=522 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33983 - http://www.securitytracker.com/id?1017982 - http://www.securityfocus.com/bid/23730 - http://osvdb.org/35722 - http://www.vupen.com/english/advisories/2007/1596
CVE ID: CVE-2007-2480 State: PUBLISHED Published: 2007-05-03T17:00:00 Last Updated: 2024-08-07T13:42:32.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _udp_lib_get_port function in net/ipv4/udp.c in Linux kernel 2.6.21 and earlier does not prevent a bind to a port with a local address when there is already a bind to that port with a wildcard local address, which might allow local users to intercept local traffic for daemons or other applications. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=de34ed91c4ffa4727964a832c46e624dd1495cf5 - http://osvdb.org/39235
CVE ID: CVE-2007-2481 State: PUBLISHED Published: 2007-05-03T17:00:00 Last Updated: 2024-08-07T13:42:33.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in wordtube-button.php in the wordTube 1.43 and earlier plugin for WordPress, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the wpPATH parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/34358 - http://www.securityfocus.com/bid/23737 - http://www.vupen.com/english/advisories/2007/1615 - http://www.securityfocus.com/archive/1/467362/100/0/threaded - http://secunia.com/advisories/25074 - http://
2007/1615 - http://www.securityfocus.com/archive/1/467362/100/0/threaded - http://secunia.com/advisories/25074 - http://securityreason.com/securityalert/2660 - https://www.exploit-db.com/exploits/3825 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33996 - http://alexrabe.boelinger.com/ - http://advisories.echo.or.id/adv/adv81-K-159-2007.txt
CVE ID: CVE-2007-2482 State: PUBLISHED Published: 2007-05-03T17:00:00 Last Updated: 2024-08-07T13:42:33.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in wordtube-button.php in the wordTube 1.43 and earlier plugin for WordPress, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the wpPATH parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23737 - http://www.vupen.com/english/advisories/2007/1615 - http://www.exploit-db.com/exploits/3825 - http://www.securityfocus.com/archive/1/467362/100/0/threaded - http://osv
15 - http://www.exploit-db.com/exploits/3825 - http://www.securityfocus.com/archive/1/467362/100/0/threaded - http://osvdb.org/45168 - http://secunia.com/advisories/25074 - http://securityreason.com/securityalert/2660 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33996 - http://alexrabe.boelinger.com/ - http://advisories.echo.or.id/adv/adv81-K-159-2007.txt
CVE ID: CVE-2007-2483 State: PUBLISHED Published: 2007-05-03T17:00:00 Last Updated: 2024-08-07T13:42:32.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in js/wptable-button.php in the wp-Table 1.43 and earlier plugin for WordPress, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via the wpPATH parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3824 - http://secunia.com/advisories/25063 - http://osvdb.org/37297 - http://www.securityfocus.com/archive/1/467363/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33
- http://www.securityfocus.com/archive/1/467363/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33989 - http://alexrabe.boelinger.com/ - http://www.vupen.com/english/advisories/2007/1614 - http://advisories.echo.or.id/adv/adv82-K-159-2007.txt
CVE ID: CVE-2007-2484 State: PUBLISHED Published: 2007-05-03T17:00:00 Last Updated: 2024-08-07T13:42:33.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in js/wptable-button.php in the wp-Table 1.43 and earlier plugin for WordPress, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the wpPATH parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3824 - http://secunia.com/advisories/25063 - http://osvdb.org/34357 - http://www.securityfocus.com/archive/1/467363/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33
CVE ID: CVE-2007-2485 State: PUBLISHED Published: 2007-05-03T17:00:00 Last Updated: 2024-08-07T13:42:33.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in myflash-button.php in the myflash 1.00 and earlier plugin for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the wpPATH parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3828 - http://www.securityfocus.com/bid/23749 - http://www.vupen.com/english/advisories/2007/1616 - http://osvdb.org/34359 - http://alexrabe.boelinger.com/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/34000
CVE ID: CVE-2007-2486 State: PUBLISHED Published: 2007-05-03T17:00:00 Last Updated: 2024-08-07T13:42:32.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download.asp in Motobit 1.3 and 1.5 (aka PStruh-CZ) allows remote attackers to read arbitrary files via a .. (dot dot) in the File parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34005 - http://www.vupen.com/english/advisories/2007/1629 - http://www.securityfocus.com/bid/23757 - http://osvdb.org/38458 - https://www.exploit-db.com/exploits/3831
CVE ID: CVE-2007-2487 State: PUBLISHED Published: 2007-05-03T17:00:00 Last Updated: 2024-08-07T13:42:32.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in AtomixMP3 allows remote attackers to execute arbitrary code via a long filename in an MP3 file, a different vector than CVE-2006-6287. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34022 - http://securityreason.com/securityalert/2675 - http://www.securityfocus.com/archive/1/467374/100/0/threaded - http://www.securityfocus.com/bid/23756 - http://osvdb.org/35532 - http://www.mexhackteam.org/prethoonker/descargas/Atomixb0f.zip -
.securityfocus.com/bid/23756 - http://osvdb.org/35532 - http://www.mexhackteam.org/prethoonker/descargas/Atomixb0f.zip - http://secunia.com/advisories/25126