Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tp://secunia.com/advisories/25721 - http://www.vupen.com/english/advisories/2007/2732 - http://rhn.redhat.com/errata/RHSA-2008-0630.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1 - http://www.vupen.com/english/advisories/2007/3087 - http://secunia.com/advisories/30899 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html - http://secunia.com/advisories/31493 - http://www.vupen.com/english/advisories/2008/1979/references - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://www.securityfocus.com/archive/1/500412/100/0/threaded - http://secunia.com/advisories/33668 - http://www.securityfocus.com/archive/1/
ocus.com/archive/1/500412/100/0/threaded - http://secunia.com/advisories/33668 - http://www.securityfocus.com/archive/1/500396/100/0/threaded - http://www.vupen.com/english/advisories/2007/1729 - http://osvdb.org/34881 - http://www.securityfocus.com/bid/24524 - http://www.vupen.com/english/advisories/2009/0233 - http://www.fujitsu.com/global/support/software/security/products-f/interstage-200704e.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10679 - http://www.vupen.com/english/advisories/2007/3386 - http://www.securityfocus.com/archive/1/471719/100/0/threaded - http://secunia.com/advisories/27037 - http://docs.info.apple.com/article.html?artnu
om/archive/1/471719/100/0/threaded - http://secunia.com/advisories/27037 - http://docs.info.apple.com/article.html?artnum=306172 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 - http://secunia.com/advisories/27727 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 - http://jvn.jp/jp/JVN%2316535199/index.html - http://www.securityfocus.com/bid/25159 - http://secunia.com/advisories/26660 - http://www.redhat.com/support/errata/RHSA-2008-0261.html - http://www.securitytracker.com/id?1018269 - http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx - http://support.ca.com/irj/portal/anonymous/phpsupcontent?co
a.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx - http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540 - http://secunia.com/advisories/26235 - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2007-1359 State: PUBLISHED Published: 2007-03-08T17:00:00 Last Updated: 2024-08-07T12:50:35.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Interpretation conflict in ModSecurity (mod_security) 2.1.0 and earlier allows remote attackers to bypass request rules via application/x-www-form-urlencoded POST data that contains an ASCIIZ (0x00) byte, which mod_security treats as a terminator even though it is still processed as normal data by some HTTP parsers including PHP 5.2.0, and possibly parsers in Perl, and Python. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html - http://www.v
Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html - http://www.vupen.com/english/advisories/2008/2115 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32872 - http://www.vupen.com/english/advisories/2007/0868 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143 - http://www.php-security.org/MOPB/BONUS-12-2007.html - http://www.modsecurity.org/blog/archives/2007/03/modsecurity_asc.html - http://secunia.com/advisories/25316 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143 - http://www.vupen.com/english/advisories/2008/2109/references - http://secunia.com/advisories/2437
p?objectID=c00727143 - http://www.vupen.com/english/advisories/2008/2109/references - http://secunia.com/advisories/24373 - http://secunia.com/advisories/31087 - http://www.gentoo.org/security/en/glsa/glsa-200705-17.xml - http://secunia.com/advisories/31113 - http://www.securityfocus.com/bid/22831 - http://www.osvdb.org/32778
CVE ID: CVE-2007-1360 State: PUBLISHED Published: 2007-03-08T17:00:00 Last Updated: 2024-08-07T12:50:35.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Nodefamily module for Drupal 5.x before 5.x-1.0 allows remote authenticated users to access and modify other users' profiles via unspecified URL parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0855 - http://www.securityfocus.com/bid/22853 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32873 - http://drupal.org/node/125324 - http://secunia.com/advisories/24372 - http://osvdb.org/33911
CVE ID: CVE-2007-1361 State: PUBLISHED Published: 2007-03-08T17:00:00 Last Updated: 2024-08-07T12:50:35.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in virtuemart_parser.php in VirtueMart before 20070213 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this issue is probably different than CVE-2007-0376. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0817 - http://sourceforge.net/project/shownotes.php?release_id=490831 - http://osvdb.org/33829 - http://secunia.com/advisories/24399 - http://www.securityfocus.com/bid/22816
CVE ID: CVE-2007-1362 State: PUBLISHED Published: 2007-06-01T00:00:00 Last Updated: 2024-08-07T12:50:35.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to cause a denial of service via (1) a large cookie path parameter, which triggers memory consumption, or (2) an internal delimiter within cookie path or name values, which could trigger a misinterpretation of cookie data, aka "Path Abuse in Cookies." Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2007/dsa-1308 - http://www.securitytracker.com/id?1018163 - https:/
tainer: References: - http://www.debian.org/security/2007/dsa-1308 - http://www.securitytracker.com/id?1018163 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10759 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:120 - http://www.securityfocus.com/archive/1/470172/100/200/threaded - http://secunia.com/advisories/25647 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34613 - http://www.novell.com/linux/security/advisories/2007_36_mozilla.html - http://security.gentoo.org/glsa/glsa-200706-06.xml - http://secunia.com/advisories/25635 - http://secunia.co
illa.html - http://security.gentoo.org/glsa/glsa-200706-06.xml - http://secunia.com/advisories/25635 - http://secunia.com/advisories/25534 - http://www.vupen.com/english/advisories/2007/1994 - http://www.redhat.com/support/errata/RHSA-2007-0400.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.571857 - http://secunia.com/advisories/25533 - http://osvdb.org/35140 - http://www.debian.org/security/2007/dsa-1306 - https://issues.rpath.com/browse/RPL-1424 - http://secunia.com/advisories/25858 - http://www.mozilla.org/security/announce/2007/mfsa2007-14.html - http://www.ubuntu.com/usn/usn-468-1 - http://www.redhat.com/support/errata/RHSA-2007-0401.htm
ce/2007/mfsa2007-14.html - http://www.ubuntu.com/usn/usn-468-1 - http://www.redhat.com/support/errata/RHSA-2007-0401.html - http://secunia.com/advisories/25476 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:126 - http://www.securitytracker.com/id?1018162 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.securityfocus.com/bid/24242 - http://secunia.com/advisories/25750 - http://www.debian.org/security/2007/dsa-1300 - http://secunia.com/advisories/25559 - http://www.osvdb.org/35139 - http://secunia.com/advisories/25490 - http://www.securityfocus.com/bid/22879 - http://www.redhat.com/support/errata/RHSA-2007-0402.html - http://www.us-
490 - http://www.securityfocus.com/bid/22879 - http://www.redhat.com/support/errata/RHSA-2007-0402.html - http://www.us-cert.gov/cas/techalerts/TA07-151A.html - http://secunia.com/advisories/25685
CVE ID: CVE-2007-1363 State: PUBLISHED Published: 2007-04-11T22:00:00 Last Updated: 2024-08-07T12:50:35.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in DropAFew before 0.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in the delete action in (a) search.php or (b) search-pda.php, or the (2) calories parameter in a save action in editlogcal.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.dropafew.com/sphpblog/comments.php?y=07&m=04&entry=entry070403-224437 - http://secunia.com/advisories/24861 - http://www.cynops.de/advisories/CVE-2007-1363.txt - https://exchange.xfo
-224437 - http://secunia.com/advisories/24861 - http://www.cynops.de/advisories/CVE-2007-1363.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/33560 - http://www.securityfocus.com/bid/23400
CVE ID: CVE-2007-1364 State: PUBLISHED Published: 2007-04-11T22:00:00 Last Updated: 2024-08-07T12:50:35.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: DropAFew before 0.2.1 does not require authorization for certain privileged actions, which allows remote attackers to (1) view the logged calorie information of arbitrary users via the id parameter in editlogcal.php, (2) add arbitrary links via links.php, or (3) create arbitrary users via newaccount2.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.dropafew.com/sphpblog/comments.php?y=07&m=04&entry=entry070403-224437 - http://secunia.com/advisories/24861 - https://exchange.xforce.ibmcloud.com/vu
s.php?y=07&m=04&entry=entry070403-224437 - http://secunia.com/advisories/24861 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33561 - http://www.securityfocus.com/bid/23400 - https://www.cynops.de/advisories/CVE-2007-1363.txt
CVE ID: CVE-2007-1365 State: PUBLISHED Published: 2007-03-10T21:00:00 Last Updated: 2024-08-07T12:50:35.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in kern/uipc_mbuf2.c in OpenBSD 3.9 and 4.0 allows remote attackers to execute arbitrary code via fragmented IPv6 packets due to "incorrect mbuf handling for ICMP6 packets." NOTE: this was originally reported as a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/986425 - http://securitytracker.com/id?1017735 - http://marc.info/?l=openbsd-cvs&m=117252151023868&w=2 - http://www.coresecurity.com/?action=item&id=1703 - http://www.osvdb.org/33050 - ht
l=openbsd-cvs&m=117252151023868&w=2 - http://www.coresecurity.com/?action=item&id=1703 - http://www.osvdb.org/33050 - http://www.openbsd.org/errata40.html#m_dup1 - http://www.securitytracker.com/id?1017744 - http://www.openbsd.org/errata39.html#m_dup1 - http://www.securityfocus.com/bid/22901 - http://secunia.com/advisories/24490
CVE ID: CVE-2007-1366 State: PUBLISHED Published: 2007-05-02T17:00:00 Last Updated: 2024-08-07T12:50:35.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU 0.8.2 allows local users to crash a virtual machine via the divisor operand to the aam instruction, as demonstrated by "aam 0x0," which triggers a divide-by-zero error. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23731 - http://www.debian.org/security/2007/dsa-1284 - http://secunia.com/advisories/25073 - http://taviso.decsystem.org/virtsec.pdf - http://lists.gnu.org/archive/html/qemu-devel/2007-04/msg00650.html - http://www.mandriva.com/security/advisories?name=MDVSA-2
//lists.gnu.org/archive/html/qemu-devel/2007-04/msg00650.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:162 - http://osvdb.org/35498 - http://www.vupen.com/english/advisories/2007/1597 - http://secunia.com/advisories/29129 - http://secunia.com/advisories/25095 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34046 - http://lists.gnu.org/archive/html/qemu-devel/2007-04/msg00651.html
CVE ID: CVE-2007-1367 State: PUBLISHED Published: 2007-03-09T22:00:00 Last Updated: 2024-08-07T12:50:35.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the login page in Avaya Communications Manager (CM) S87XX, S8500, and S8300 products before 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the Login field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22866 - http://support.avaya.com/elmodocs2/security/ASA-2007-064.htm - http://www.osvdb.org/33297 - http://secunia.com/advisories/24397
CVE ID: CVE-2007-1368 State: PUBLISHED Published: 2007-03-09T22:00:00 Last Updated: 2024-08-07T12:50:35.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Project issue tracking module before 4.7.x-1.3, 4.7.x-2.* before 4.7.x-2.3, and 5 before 5.x-0.2-beta for Drupal allows remote authenticated users, with "access project issues" permission, to read the contents of a private node via a URL with a modified node identifier. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22867 - http://www.vupen.com/english/advisories/2007/0873 - http://drupal.org/node/125832 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32871 - http:/
visories/2007/0873 - http://drupal.org/node/125832 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32871 - http://osvdb.org/33913 - http://drupal.org/node/125833 - http://secunia.com/advisories/24409
CVE ID: CVE-2007-1369 State: PUBLISHED Published: 2007-03-09T22:00:00 Last Updated: 2024-08-07T12:50:35.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: ini_modifier (sgid-zendtech) in Zend Platform 2.2.3 and earlier allows local users to modify the system php.ini file by editing a copy of php.ini file using the -f parameter, and then performing a symlink attack using the directory that contains the attacker-controlled php.ini file, and linking this directory to /usr/local/Zend/etc. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33930 - http://www.vupen.com/english/advisories/2007/0829 - http://www.securityfocus.com/bid/22802 - http://secunia
.org/33930 - http://www.vupen.com/english/advisories/2007/0829 - http://www.securityfocus.com/bid/22802 - http://secunia.com/advisories/24501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32820 - http://www.osvdb.org/32773 - http://www.php-security.org/MOPB/BONUS-07-2007.html - http://www.zend.com/products/zend_platform/security_vulnerabilities
CVE ID: CVE-2007-1370 State: PUBLISHED Published: 2007-03-09T22:00:00 Last Updated: 2024-08-07T12:50:34.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zend Platform 2.2.3 and earlier has incorrect ownership for scd.sh and certain other files, which allows local users to gain root privileges by modifying the files. NOTE: this only occurs when safe_mode and open_basedir are disabled; other settings require leverage for other vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - http://www.php-security.org/MOPB/BONUS-06-2007.html - http://www.vupen.com/english/advisories/2007/0829 - http://www.osvdb.org/32772 - http://www.securityfocus.com/bid/22801
http://www.vupen.com/english/advisories/2007/0829 - http://www.osvdb.org/32772 - http://www.securityfocus.com/bid/22801 - http://secunia.com/advisories/24501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32825 - http://www.zend.com/products/zend_platform/security_vulnerabilities
CVE ID: CVE-2007-1371 State: PUBLISHED Published: 2007-03-10T00:00:00 Last Updated: 2024-08-07T12:50:35.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Conquest 8.2a and earlier (1) allow local users to gain privileges by querying a metaserver that sends a long server entry processed by metaGetServerList and allow remote metaservers to execute arbitrary code via a long server entry processed by metaGetServerList; (2) allow attackers to have an unknown impact by exceeding the configured number of metaservers; and allow remote attackers to corrupt memory via a SP_CLIENTSTAT packet with certain values of (3) unum or (4) snum, different vulnerabilitie
ckers to corrupt memory via a SP_CLIENTSTAT packet with certain values of (3) unum or (4) snum, different vulnerabilities than CVE-2003-0933. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22855 - http://secunia.com/advisories/24370 - http://securityreason.com/securityalert/2399 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32860 - http://www.securityfocus.com/archive/1/462184/100/0/threaded - http://www.vupen.com/english/advisories/2007/0854 - http://www.radscan.com/conquest/cq-ml/msg00169.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/32849
CVE ID: CVE-2007-1372 State: PUBLISHED Published: 2007-03-10T00:00:00 Last Updated: 2024-08-07T12:50:35.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in styles/internal/header.php in the PostGuestbook 0.6.1 module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the tpl_pgb_moddir parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3423 - http://www.securityfocus.com/bid/22858 - http://osvdb.org/36320 - http://www.vupen.com/english/advisories/2007/0880 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32866
CVE ID: CVE-2007-1373 State: PUBLISHED Published: 2007-03-10T00:00:00 Last Updated: 2024-08-07T12:50:35.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Mercury/32 (aka Mercury Mail Transport System) 4.01b and earlier allows remote attackers to execute arbitrary code via a long LOGIN command. NOTE: this might be the same issue as CVE-2006-5961. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33883 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/052802.html - http://securityreason.com/securityalert/2398 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32848 - http://secunia.com/advisories/243
.com/securityalert/2398 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32848 - http://secunia.com/advisories/24367
CVE ID: CVE-2007-1374 State: PUBLISHED Published: 2007-03-10T00:00:00 Last Updated: 2024-08-07T12:50:35.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in pop_profile.asp in Snitz Forums 2000 3.4.06 allows remote attackers to inject arbitrary web script or HTML via the MSN parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32879 - http://secunia.com/advisories/24358 - http://www.securityfocus.com/bid/22869
CVE ID: CVE-2007-1375 State: PUBLISHED Published: 2007-03-10T00:00:00 Last Updated: 2024-08-07T12:50:35.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the substr_compare function in PHP 5.2.1 and earlier allows context-dependent attackers to read sensitive memory via a large value in the length argument, a different vulnerability than CVE-2006-1991. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/32780 - http://secunia.com/advisories/25056 - http://www.debian.org/security/2007/dsa-1283 - http://secunia.com/advisories/24606 - https://www.exploit-db.com/exploits/3424 - http://www.securityfocus.com/bid/22851 - http://sec
ia.com/advisories/24606 - https://www.exploit-db.com/exploits/3424 - http://www.securityfocus.com/bid/22851 - http://security.gentoo.org/glsa/glsa-200703-21.xml - http://secunia.com/advisories/25062 - http://www.ubuntu.com/usn/usn-455-1 - http://www.php-security.org/MOPB/MOPB-14-2007.html - http://us2.php.net/releases/5_2_2.php - http://www.mandriva.com/security/advisories?name=MDKSA-2007:187 - http://secunia.com/advisories/26895 - http://secunia.com/advisories/25057 - http://www.novell.com/linux/security/advisories/2007_32_php.html
CVE ID: CVE-2007-1376 State: PUBLISHED Published: 2007-03-10T00:00:00 Last Updated: 2024-08-07T12:50:35.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: The shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not verify that their arguments correspond to a shmop resource, which allows context-dependent attackers to read and write arbitrary memory locations via arguments associated with an inappropriate resource, as demonstrated by a GD Image resource. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25056 - http://www.osvdb.org/32781 - http://www.debian.org/security/2007/dsa-1283 - http://secunia.com/advisor
dvisories/25056 - http://www.osvdb.org/32781 - http://www.debian.org/security/2007/dsa-1283 - http://secunia.com/advisories/24606 - http://security.gentoo.org/glsa/glsa-200703-21.xml - http://secunia.com/advisories/25062 - https://www.exploit-db.com/exploits/3427 - http://www.ubuntu.com/usn/usn-455-1 - http://www.securityfocus.com/bid/22862 - https://www.exploit-db.com/exploits/3426 - http://secunia.com/advisories/25057 - http://www.php-security.org/MOPB/MOPB-15-2007.html - http://www.novell.com/linux/security/advisories/2007_32_php.html
CVE ID: CVE-2007-1377 State: PUBLISHED Published: 2007-03-10T00:00:00 Last Updated: 2024-08-07T12:50:35.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cause a denial of service (unspecified resource consumption) via a .pdf URL with an anchor identifier that begins with search= followed by many %n sequences, a different vulnerability than CVE-2006-6027 and CVE-2006-6236. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/data/vulnerabilities/exploits/22856.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/3289
w.securityfocus.com/data/vulnerabilities/exploits/22856.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/32896 - http://www.securityfocus.com/bid/22856
CVE ID: CVE-2007-1378 State: PUBLISHED Published: 2007-03-10T00:00:00 Last Updated: 2024-08-07T12:50:35.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ovrimos_longreadlen function in the Ovrimos extension for PHP before 4.4.5 allows context-dependent attackers to write to arbitrary memory locations via the result_id and length arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.php-security.org/MOPB/MOPB-13-2007.html - http://www.securityfocus.com/bid/22833 - http://www.osvdb.org/32779
CVE ID: CVE-2007-1379 State: PUBLISHED Published: 2007-03-10T00:00:00 Last Updated: 2024-08-07T12:50:35.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ovrimos_close function in the Ovrimos extension for PHP before 4.4.5 can trigger efree of an arbitrary address, which might allow context-dependent attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.php-security.org/MOPB/MOPB-13-2007.html - http://www.securityfocus.com/bid/22833 - http://www.osvdb.org/34691