Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-4347 State: PUBLISHED Published: 2007-11-29T23:00:00 Last Updated: 2024-08-07T14:53:55.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 and 11.0.6.6235 allow remote attackers to cause a denial of service (CPU and memory consumption) via a crafted packet to port 5633/tcp, which triggers an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38677 - http://secunia.com/advisories/26975 - http://securityresponse.symantec.com/avcenter/security/Conten
nerabilities/38677 - http://secunia.com/advisories/26975 - http://securityresponse.symantec.com/avcenter/security/Content/2007.11.27.html - http://www.securityfocus.com/archive/1/484318/100/0/threaded - http://secunia.com/secunia_research/2007-74/advisory/ - http://www.securityfocus.com/bid/26029 - http://www.securityfocus.com/archive/1/484333/100/0/threaded - http://www.vupen.com/english/advisories/2007/4019 - http://www.securitytracker.com/id?1019001
CVE ID: CVE-2007-4348 State: PUBLISHED Published: 2007-10-30T19:00:00 Last Updated: 2024-08-07T14:53:55.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the CAD service in IBM Tivoli Storage Manager (TSM) Client 5.3.5.3 and 5.4.1.2 for Windows allows remote attackers to inject arbitrary web script or HTML via HTTP requests to port 1581, which generate log entries in a dsmerror.log file that is accessible through a certain web interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3635 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38125 - http://www.securityfoc
n.com/english/advisories/2007/3635 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38125 - http://www.securityfocus.com/bid/26221 - http://secunia.com/advisories/27013 - http://secunia.com/secunia_research/2007-75/advisory - http://www.securitytracker.com/id?1018868
CVE ID: CVE-2007-4349 State: PUBLISHED Published: 2008-10-23T21:00:00 Last Updated: 2024-08-07T14:53:55.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Shared Trace Service (aka OVTrace) in HP Performance Agent C.04.70 (aka 4.70), HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 (aka Report 3.70) allows remote attackers to cause a denial of service via an unspecified series of RPC requests (aka Trace Event Messages) that triggers an out-of-bounds memory access, related to an erroneous object reference. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4501 - http://marc.
tional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4501 - http://marc.info/?l=bugtraq&m=122876677518654&w=2 - http://www.securitytracker.com/id?1021092 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46028 - http://secunia.com/advisories/27054 - http://secunia.com/secunia_research/2007-83/ - http://www.securityfocus.com/archive/1/497648/100/0/threaded - http://www.securityfocus.com/bid/31860 - http://www.vupen.com/english/advisories/2008/2888 - http://marc.info/?l=bugtraq&m=122876827120961&w=2 - http://marc.info/?l=bugtraq&m=122876827120961&w=2
CVE ID: CVE-2007-4350 State: PUBLISHED Published: 2008-10-21T16:00:00 Last Updated: 2024-08-07T14:53:55.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the management interface in HP SiteScope 9.0 build 911 allows remote attackers to inject arbitrary web script or HTML via an SNMP trap message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31816 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45958 - http://secunia.com/advisories/27126 - http://www.vupen.com/english/advisories/2008/2854 - http://secunia.com/secunia_research/2007-84/ - http://securitytracker.com/id?1021068 -
m/english/advisories/2008/2854 - http://secunia.com/secunia_research/2007-84/ - http://securitytracker.com/id?1021068 - http://www.securityfocus.com/archive/1/497548/100/0/threaded - http://securityreason.com/securityalert/4447
CVE ID: CVE-2007-4351 State: PUBLISHED Published: 2007-10-31T22:00:00 Last Updated: 2024-08-07T14:53:55.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted (1) textWithLanguage or (2) nameWithLanguage Internet Printing Protocol (IPP) tag, leading to a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27410 - http://secunia.com/advisories/27499 - http://www.debian.org/security/2007/dsa-1407 - http://secunia.com/secunia_research/2007-76/advisory/ - http://www.vupen.
http://www.debian.org/security/2007/dsa-1407 - http://secunia.com/secunia_research/2007-76/advisory/ - http://www.vupen.com/english/advisories/2008/1934/references - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.501902 - http://www.vupen.com/english/advisories/2007/4238 - http://www.us-cert.gov/cas/techalerts/TA07-352A.html - http://secunia.com/advisories/27577 - http://secunia.com/advisories/28136 - http://secunia.com/advisories/27474 - http://secunia.com/advisories/27233 - http://security.gentoo.org/glsa/glsa-200711-16.xml - http://www.redhat.com/support/errata/RHSA-2007-1022.html - http://secunia.com/advisories/27712 - http://support.avaya.com/e
p://www.redhat.com/support/errata/RHSA-2007-1022.html - http://secunia.com/advisories/27712 - http://support.avaya.com/elmodocs2/security/ASA-2007-476.htm - https://issues.rpath.com/browse/RPL-1875 - http://www.novell.com/linux/security/advisories/2007_58_cups.html - http://secunia.com/advisories/27447 - http://secunia.com/advisories/27540 - http://secunia.com/advisories/27494 - http://www.redhat.com/support/errata/RHSA-2007-1020.html - http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html - https://usn.ubuntu.com/539-1/ - http://www.securitytracker.com/id?1018879 - http://secunia.com/advisories/27604 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mi
d?1018879 - http://secunia.com/advisories/27604 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10604 - http://www.securityfocus.com/bid/26268 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38190 - http://docs.info.apple.com/article.html?artnum=307179 - http://secunia.com/advisories/30847 - http://www.redhat.com/support/errata/RHSA-2007-1023.html - http://www.cisco.com/en/US/products/products_security_response09186a00809a1f11.html - http://www.vupen.com/english/advisories/2007/3681 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:204 - http://www.kb.cert.org/vuls/id/446897 - http://secunia.com/advisories/27445 - https://www.redhat
s?name=MDKSA-2007:204 - http://www.kb.cert.org/vuls/id/446897 - http://secunia.com/advisories/27445 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00012.html - https://bugzilla.redhat.com/show_bug.cgi?id=361661 - http://www.cups.org/str.php?L2561
CVE ID: CVE-2007-4352 State: PUBLISHED Published: 2007-11-08T02:00:00 Last Updated: 2024-08-07T14:53:55.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruption and execute arbitrary code via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2007_60_pdf.html - http://secunia.com/advisories/27632 - http://secunia.com/advisories/27743 - http://www.mandriva.com/security/advisories?name=MD
secunia.com/advisories/27632 - http://secunia.com/advisories/27743 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:222 - http://www.vupen.com/english/advisories/2007/3774 - http://secunia.com/advisories/27260 - http://secunia.com/advisories/27856 - http://support.novell.com/techcenter/psdb/da3498f05433976cc548cc4eaf8349c8.html - http://secunia.com/advisories/27636 - http://secunia.com/advisories/29604 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:223 - http://secunia.com/advisories/27721 - http://secunia.com/advisories/27724 - http://www.vupen.com/english/advisories/2007/3776 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00224.html -
com/english/advisories/2007/3776 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00224.html - http://secunia.com/advisories/27577 - http://secunia.com/advisories/29104 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00215.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/38306 - http://secunia.com/advisories/27618 - http://secunia.com/advisories/27642 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00369.html - http://secunia.com/advisories/27656 - http://secunia.com/secunia_research/2007-88/advisory/ - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00238.html - http://support
2007-88/advisory/ - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00238.html - http://support.novell.com/techcenter/psdb/1d5fd29802b2ef7e342e733731f1e933.html - http://www.redhat.com/support/errata/RHSA-2007-1026.html - http://www.debian.org/security/2008/dsa-1509 - http://www.redhat.com/support/errata/RHSA-2007-1022.html - http://secunia.com/advisories/27573 - http://www.redhat.com/support/errata/RHSA-2007-1029.html - http://secunia.com/advisories/27641 - http://security.gentoo.org/glsa/glsa-200805-13.xml - http://secunia.com/advisories/28812 - http://www.debian.org/security/2008/dsa-1537 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg0
ttp://www.debian.org/security/2008/dsa-1537 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00724.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.761882 - http://www.securityfocus.com/bid/26367 - http://secunia.com/advisories/27615 - http://www.redhat.com/support/errata/RHSA-2007-1021.html - http://www.vupen.com/english/advisories/2007/3786 - http://secunia.com/advisories/27645 - http://www.securityfocus.com/archive/1/483372 - http://secunia.com/advisories/30168 - http://secunia.com/advisories/27574 - https://issues.rpath.com/browse/RPL-1926 - http://secunia.com/advisories/26503 - http://www.mandriva.com/security/adv
- https://issues.rpath.com/browse/RPL-1926 - http://secunia.com/advisories/26503 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:219 - http://www.debian.org/security/2008/dsa-1480 - http://security.gentoo.org/glsa/glsa-200711-22.xml - http://secunia.com/advisories/27634 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:227 - http://www.kde.org/info/security/advisory-20071107-1.txt - http://secunia.com/advisories/28043 - http://secunia.com/advisories/27619 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:220 - http://secunia.com/advisories/27705 - http://secunia.com/advisories/27578 - http://secunia.com/advisories/27640 - http://support.novell.com/techc
ries/27705 - http://secunia.com/advisories/27578 - http://secunia.com/advisories/27640 - http://support.novell.com/techcenter/psdb/43ad7b3569dba59e7ba07677edc01cad.html - http://support.novell.com/techcenter/psdb/3867a5092daac43cd6a92e6107d9fbce.html - http://security.gentoo.org/glsa/glsa-200711-34.xml - http://secunia.com/advisories/27599 - http://secunia.com/advisories/27575 - http://www.securitytracker.com/id?1018905 - http://support.novell.com/techcenter/psdb/f83e024a65d69ebc810d2117815b940d.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9979 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.html - http://www.m
e.oval%3Adef%3A9979 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:228 - http://www.vupen.com/english/advisories/2007/3775 - http://www.redhat.com/support/errata/RHSA-2007-1027.html - http://www.redhat.com/support/errata/RHSA-2007-1030.html - http://www.ubuntu.com/usn/usn-542-1 - http://secunia.com/advisories/27658 - http://www.redhat.com/support/errata/RHSA-2007-1024.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:230 - http://www.ubuntu.com/usn/usn-542-2 - http://www.redhat.com/support/errata/RHSA-2007-1025.html - http://www.vupen.com/english/advisories/2007/3779 - http:/
- http://www.redhat.com/support/errata/RHSA-2007-1025.html - http://www.vupen.com/english/advisories/2007/3779 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:221 - http://secunia.com/advisories/27553 - http://secunia.com/advisories/27637
CVE ID: CVE-2007-4353 State: PUBLISHED Published: 2007-08-15T00:00:00 Last Updated: 2024-08-07T14:53:55.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users in the system group to gain root privileges via unspecified vectors involving the (1) chpath, (2) rmpath, and (3) devinstall programs in bos.rte.methods. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2860 - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ00531 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35971 - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ01433 - http://www.secu
e.xforce.ibmcloud.com/vulnerabilities/35971 - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ01433 - http://www.securitytracker.com/id?1018549 - http://secunia.com/advisories/26420 - ftp://aix.software.ibm.com/aix/efixes/security/README - http://www.securityfocus.com/bid/25270
CVE ID: CVE-2007-4354 State: PUBLISHED Published: 2007-08-15T00:00:00 Last Updated: 2024-08-07T14:53:55.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in fileplace in bos.perf.tools in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ00149 - http://www.vupen.com/english/advisories/2007/2860 - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ00154 - http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX53&path=%2F200708%2FSECURITY%2F20070810%2Fdatafile101707 - http://secunia.com
bscriptions/ijhifoeblist?mode=7&heading=AIX53&path=%2F200708%2FSECURITY%2F20070810%2Fdatafile101707 - http://secunia.com/advisories/26420 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35972 - http://www.securityfocus.com/bid/25271 - ftp://aix.software.ibm.com/aix/efixes/security/README - http://www.securitytracker.com/id?1018550
CVE ID: CVE-2007-4355 State: PUBLISHED Published: 2007-08-15T00:00:00 Last Updated: 2024-08-07T14:53:55.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the at program on IBM AIX 5.3 allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2905 - http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX53&path=%2F200708%2FSECURITY%2F20070810%2Fdatafile101113 - http://secunia.com/advisories/26437 - http://www.securitytracker.com/id?1018570 - http://osvdb.org/36794 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
http://www.securitytracker.com/id?1018570 - http://osvdb.org/36794 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35976 - http://www.securityfocus.com/bid/25273 - ftp://aix.software.ibm.com/aix/efixes/security/README
CVE ID: CVE-2007-4356 State: PUBLISHED Published: 2007-08-15T00:00:00 Last Updated: 2024-08-07T14:53:55.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 and 7 embeds FTP credentials in HTML files that are retrieved during an FTP session, which allows context-dependent attackers to obtain sensitive information by reading the HTML source, as demonstrated by a (1) .htm, (2) .html, or (3) .mht file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36400 - http://secunia.com/advisories/26427 - http://blog.washingtonpost.com/securityfix/2007/08/ftp_files_expose_web_site_cred.html
CVE ID: CVE-2007-4357 State: PUBLISHED Published: 2007-08-15T00:00:00 Last Updated: 2024-08-07T14:53:55.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 2.0.0.6 and earlier allows remote attackers to spoof the contents of the status bar via a link to a data: URI containing an encoded URL. NOTE: the severity of this issue has been disputed by a reliable third party, since the intended functionality of the status bar allows it to be modified. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/475531/100/100/threaded - http://www.securityfocus.com/archive/1/475467/100/100/threaded - http://www.securityfocus.com/
475531/100/100/threaded - http://www.securityfocus.com/archive/1/475467/100/100/threaded - http://www.securityfocus.com/archive/1/475651/100/0/threaded - http://my.opera.com/MichalBucko/blog/firefox-2-0-0-5-uri-encoding-allows-phishing - http://www.securityfocus.com/archive/1/476062/100/0/threaded - http://www.securityfocus.com/archive/1/475970/100/0/threaded - http://www.eleytt.com/michal.bucko/Eleytt_PhishAGoGo/bucked2.html
CVE ID: CVE-2007-4358 State: PUBLISHED Published: 2007-08-15T19:00:00 Last Updated: 2024-08-07T14:53:55.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoidcom 0.6.7 and earlier allows remote attackers to cause a denial of service (application crash) via a JOIN packet (aka connection packet) containing 0x69 in the ninth byte, which triggers a "double-delete" of trace data, a different vulnerability than CVE-2005-1643. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26451 - http://www.securityfocus.com/archive/1/476523/100/0/threaded - http://securityreason.com/securityalert/3014 - https://exchange.xforce.ibmcloud.com/vulnerabilit
476523/100/0/threaded - http://securityreason.com/securityalert/3014 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36018 - http://aluigi.altervista.org/adv/zoidboom2-adv.txt - http://aluigi.org/poc/zoidboom2.zip - http://www.securityfocus.com/bid/25326
CVE ID: CVE-2007-4359 State: PUBLISHED Published: 2007-08-15T19:00:00 Last Updated: 2024-08-07T14:53:55.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in SkilMatch Staffing Systems JobLister3 allow remote attackers to execute arbitrary SQL commands via (1) the search form or (2) the jobid parameter to index.php in a showbyID action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/476282/100/0/threaded - http://secunia.com/advisories/26440 - http://securityreason.com/securityalert/3013 - http://osvdb.org/36416 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36052 - http://www
om/securityalert/3013 - http://osvdb.org/36416 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36052 - http://www.securityfocus.com/bid/25296
CVE ID: CVE-2007-4360 State: PUBLISHED Published: 2007-08-15T19:00:00 Last Updated: 2024-08-07T14:53:55.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Dell Remote Access Card 4 (DRAC4) with firmware 1.50 Build 02.16 allows remote attackers to cause a denial of service (SSH daemon crash) via certain network traffic, as demonstrated by an "nmap -O" scan with nmap 4.03, possibly related to a Mocana (Mocanada) SSH vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26428 - http://www.securityfocus.com/archive/1/476301/100/0/threaded - ftp://ftp.us.dell.com/sysman/readme_160_A00.txt - http://ww
tp://www.securityfocus.com/archive/1/476301/100/0/threaded - ftp://ftp.us.dell.com/sysman/readme_160_A00.txt - http://www.securityfocus.com/bid/25291 - http://www.securityfocus.com/archive/1/486589/100/0/threaded - http://www.vupen.com/english/advisories/2007/2908 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35998 - http://www.securityfocus.com/archive/1/476311/100/0/threaded
CVE ID: CVE-2007-4361 State: PUBLISHED Published: 2007-08-15T19:00:00 Last Updated: 2024-08-07T14:53:55.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR (formerly Infrant) ReadyNAS RAIDiator before 4.00b2-p2-T1 beta creates a default SSH root password derived from the hardware serial number, which makes it easier for remote attackers to guess the password and obtain login access. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36011 - http://www.securityfocus.com/archive/1/476266/100/0/threaded - http://www.infrant.com/forum/viewtopic.php?t=12249 - http://secunia.com/advisories/26442 - http://www.inf
0/0/threaded - http://www.infrant.com/forum/viewtopic.php?t=12249 - http://secunia.com/advisories/26442 - http://www.infrant.com/forum/viewtopic.php?t=12313 - http://securityreason.com/securityalert/3017 - http://www.osvdb.org/36357 - http://www.securityfocus.com/bid/25290 - http://www.infrant.com/forum/viewtopic.php?t=3366&start=30
CVE ID: CVE-2007-4362 State: PUBLISHED Published: 2007-08-15T19:00:00 Last Updated: 2024-08-07T14:53:55.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in category.php in Prozilla Webring allows remote attackers to execute arbitrary SQL commands via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25292 - http://osvdb.org/36420 - https://www.exploit-db.com/exploits/4284 - http://secunia.com/advisories/26446 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35990 - http://www.vupen.com/english/advisories/2007/2877
CVE ID: CVE-2007-4363 State: PUBLISHED Published: 2007-08-15T19:00:00 Last Updated: 2024-08-07T14:53:55.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the nodereference module in Drupal Content Construction Kit (CCK) before 4.7.x-1.6, and 5.x before 5.x-1.6 ,allow remote attackers to inject arbitrary web script or HTML via nodereference fields, when using (1) the plain formatter or (2) the autocomplete text field widget without Views.module. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36002 - http://osvdb.org/37209 - http://www.securityfocus.com/bi
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36002 - http://osvdb.org/37209 - http://www.securityfocus.com/bid/25321 - http://osvdb.org/37208 - http://www.vupen.com/english/advisories/2007/2876 - http://secunia.com/advisories/26416 - http://drupal.org/node/166994 - http://drupal.org/node/166992 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36000 - http://drupal.org/node/166998
CVE ID: CVE-2007-4364 State: PUBLISHED Published: 2007-08-15T19:00:00 Last Updated: 2024-08-07T14:53:55.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fedora Commons before 2.2.1 does not properly handle certain authentication requests involving Java Naming and Directory Interface (JNDI), related to (1) a nonexistent account name in combination with an empty password, which allows remote attackers to trigger a certain "unexpected / strange response" from an LDAP server, and (2) a reauthentication attempt that throws an exception, which allows remote attackers to trigger use of a cached authentication decision. NOTE: authentication can be bypassed by using vector 1 followed b