Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-2244 State: PUBLISHED Published: 2007-04-25T16:00:00 Last Updated: 2024-08-07T13:33:27.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Adobe Photoshop CS2 and CS3, Illustrator CS3, and GoLive 9 allow user-assisted remote attackers to execute arbitrary code via a crafted (1) BMP, (2) DIB, or (3) RLE file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23621 - http://securitytracker.com/id?1018792 - http://www.osvdb.org/35370 - http://secunia.com/advisories/25023 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33838 - http://www.vupen.com/english/advisories/2007/3442 - https:
https://exchange.xforce.ibmcloud.com/vulnerabilities/33838 - http://www.vupen.com/english/advisories/2007/3442 - https://www.exploit-db.com/exploits/3793 - http://osvdb.org/38065 - http://osvdb.org/38064 - http://secunia.com/advisories/26864 - http://secunia.com/advisories/26846 - http://www.vupen.com/english/advisories/2007/1523 - http://www.adobe.com/support/security/bulletins/apsb07-17.html - http://osvdb.org/38066 - http://www.adobe.com/support/security/bulletins/apsb07-13.html - http://www.vupen.com/english/advisories/2007/3443 - http://www.adobe.com/support/security/bulletins/apsb07-16.html - http://www.securitytracker.com/id?1017962
CVE ID: CVE-2007-2245 State: PUBLISHED Published: 2007-04-25T16:00:00 Last Updated: 2024-08-07T13:33:27.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.10.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the fieldkey parameter to browse_foreigners.php or (2) certain input to the PMA_sanitize function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33898 - http://www.phpmyadmin.net/home_page/downloads.php?relnotes=0 - http://www.vupen.com/english/advisories/2007/1508 - http://secunia.com/advisories/26733 - ht
/downloads.php?relnotes=0 - http://www.vupen.com/english/advisories/2007/1508 - http://secunia.com/advisories/26733 - http://www.us.debian.org/security/2007/dsa-1370 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:199 - http://secunia.com/advisories/24952 - http://osvdb.org/35050 - http://www.phpmyadmin.net/ChangeLog.txt
CVE ID: CVE-2007-2246 State: PUBLISHED Published: 2007-04-25T16:00:00 Last Updated: 2024-08-07T13:33:28.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP-UX B.11.00 and B.11.11, when running sendmail 8.9.3 or 8.11.1; and HP-UX B.11.23 when running sendmail 8.11.1; allows remote attackers to cause a denial of service via unknown attack vectors. NOTE: due to the lack of details from HP, it is not known whether this issue is a duplicate of another CVE such as CVE-2006-1173 or CVE-2006-4434. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1017966 - http://www.securityfocus.com/bid/23606 - http://www.
ontainer: References: - http://www.securitytracker.com/id?1017966 - http://www.securityfocus.com/bid/23606 - http://www.kb.cert.org/vuls/id/349305 - http://secunia.com/advisories/24990 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00841370 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00841370 - http://www.vupen.com/english/advisories/2007/1504
CVE ID: CVE-2007-2247 State: PUBLISHED Published: 2007-04-25T16:00:00 Last Updated: 2024-08-07T13:33:28.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modules/news/article.php in phpMySpace Gold 8.10 allows remote attackers to execute arbitrary SQL commands via the item_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33843 - http://www.securityfocus.com/bid/23602 - http://osvdb.org/35639 - http://www.securityfocus.com/archive/1/466706/100/0/threaded - http://www.vupen.com/english/advisories/2007/1515 - http://securityreason.com/securityalert/2616
CVE ID: CVE-2007-2248 State: PUBLISHED Published: 2007-04-25T16:00:00 Last Updated: 2024-08-07T13:33:28.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in admin.php in Phorum before 5.1.22 allow remote attackers to inject arbitrary web script or HTML via the (1) group_id parameter in the groups module or (2) the smiley_id parameter in the smileys modsettings module. Additional Analyst Notes: - CVE Program Container: References: - http://www.waraxe.us/advisory-49.html - http://www.phorum.org/story.php?76 - http://www.securitytracker.com/id?1017936 - http://secunia.com/advisories/24932 - http://osvdb.org/35058 - http://www.sec
ttp://www.securitytracker.com/id?1017936 - http://secunia.com/advisories/24932 - http://osvdb.org/35058 - http://www.securityfocus.com/archive/1/466286/100/0/threaded - http://securityreason.com/securityalert/2617 - http://www.securityfocus.com/bid/23616 - http://osvdb.org/35057
CVE ID: CVE-2007-2249 State: PUBLISHED Published: 2007-04-25T16:00:00 Last Updated: 2024-08-07T13:33:28.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: include/controlcenter/users.php in Phorum before 5.1.22 allows remote authenticated moderators to gain privileges via a modified (1) user_ids POST parameter or (2) userdata array. Additional Analyst Notes: - CVE Program Container: References: - http://www.waraxe.us/advisory-49.html - http://www.phorum.org/story.php?76 - http://osvdb.org/35059 - http://www.securitytracker.com/id?1017936 - http://www.vupen.com/english/advisories/2007/1479 - http://secunia.com/advisories/24932 - http://www.securityfocus.com/archive/1/466286/100/0
english/advisories/2007/1479 - http://secunia.com/advisories/24932 - http://www.securityfocus.com/archive/1/466286/100/0/threaded - http://securityreason.com/securityalert/2617 - http://www.securityfocus.com/bid/23616
CVE ID: CVE-2007-2250 State: PUBLISHED Published: 2007-04-25T16:00:00 Last Updated: 2024-08-07T13:33:28.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin.php in Phorum before 5.1.22 allows remote attackers to obtain the full path via the module[] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.waraxe.us/advisory-49.html - http://www.phorum.org/story.php?76 - http://www.securitytracker.com/id?1017936 - http://www.vupen.com/english/advisories/2007/1479 - http://secunia.com/advisories/24932 - http://www.securityfocus.com/archive/1/466286/100/0/threaded - http://securityreason.com/securityalert/2617 - http://www.securityfocus.com/bid/236
om/archive/1/466286/100/0/threaded - http://securityreason.com/securityalert/2617 - http://www.securityfocus.com/bid/23616 - http://osvdb.org/35060
CVE ID: CVE-2007-2251 State: PUBLISHED Published: 2007-04-25T16:00:00 Last Updated: 2024-08-07T13:33:28.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Roles module in Xaraya 1.1.2 and earlier allows attackers to gain privileges via unspecified vectors, probably related to incorrect permission checking in xartemplates/user-view.xd. Additional Analyst Notes: - CVE Program Container: References: - http://www.xaraya.com/index.php/news/772 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33844 - http://www.vupen.com/english/advisories/2007/1522 - http://secunia.com/advisories/24959 - http://sourceforge.net/project/shownotes.php?release_id=50
/advisories/2007/1522 - http://secunia.com/advisories/24959 - http://sourceforge.net/project/shownotes.php?release_id=503035 - http://osvdb.org/35304 - http://www.securityfocus.com/bid/23631
CVE ID: CVE-2007-2252 State: PUBLISHED Published: 2007-04-25T17:00:00 Last Updated: 2024-08-07T13:33:28.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in iconspopup.php in Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain sensitive information via a .. (dot dot) in the icodir parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33936 - http://www.securityfocus.com/bid/23574 - http://www.bugtraq.ir/articles/advisory/exponent_multiple_vulnerabilities/10 - http://secunia.com/advisories/24934 - http://osvdb.org/35051
CVE ID: CVE-2007-2253 State: PUBLISHED Published: 2007-04-25T17:00:00 Last Updated: 2024-08-07T13:33:28.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain path information via a direct request for (1) sdk/blanks/formcontrol.php and (2) sdk/blanks/file_modules.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38842 - http://www.bugtraq.ir/articles/advisory/exponent_multiple_vulnerabilities/10 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33937 - http://osvdb.org/38843
CVE ID: CVE-2007-2254 State: PUBLISHED Published: 2007-04-25T17:00:00 Last Updated: 2024-08-07T13:33:28.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/setup/level2.php in PHP Classifieds 6.04, and probably earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: this product was referred to as "Allfaclassfieds" in the original disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/466648/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33798 - http://www.attrition.org/pipermail/vim/2007-April/0
eaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33798 - http://www.attrition.org/pipermail/vim/2007-April/001543.html - http://securityreason.com/securityalert/2618
CVE ID: CVE-2007-2255 State: PUBLISHED Published: 2007-04-25T17:00:00 Last Updated: 2024-08-07T13:33:28.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) eng_dir parameter to addmember.php, (2) lang_path parameter to admin/enginelib/class.phpmailer.php, and the (3) spaw_root parameter to admin/includes/spaw/dialogs/colorpicker.php, different vectors than CVE-2006-5291 and CVE-2006-5459. NOTE: vector 3 might be an issue in SPAW. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vu
issue in SPAW. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33723 - http://osvdb.org/35400 - http://osvdb.org/35399 - http://www.securityfocus.com/archive/1/465984/100/100/threaded - http://securityreason.com/securityalert/2619 - http://osvdb.org/35398
CVE ID: CVE-2007-2256 State: PUBLISHED Published: 2007-04-25T17:00:00 Last Updated: 2024-08-07T13:33:28.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in you.php in TJSChat 0.95 allows remote attackers to inject arbitrary web script or HTML via the user parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/466649/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33845 - http://securityreason.com/securityalert/2620 - http://www.vupen.com/english/advisories/2007/1517 - http://secunia.com/advisories/24998 - http://www.securityfocus.com/bid/23593
CVE ID: CVE-2007-2257 State: PUBLISHED Published: 2007-04-25T17:00:00 Last Updated: 2024-08-07T13:33:28.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in subscp.php in Fully Modded phpBB2 allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2621 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33751 - http://www.securityfocus.com/archive/1/466177/100/0/threaded - http://osvdb.org/35419 - http://www.securityfocus.com/bid/23565
CVE ID: CVE-2007-2258 State: PUBLISHED Published: 2007-04-25T17:00:00 Last Updated: 2024-08-07T13:33:27.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/init.inc.php in PHPMyBibli allows remote attackers to execute arbitrary PHP code via a URL in the base_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/466659/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33808 - http://www.securityfocus.com/bid/23599 - http://securityreason.com/securityalert/2622
CVE ID: CVE-2007-2259 State: PUBLISHED Published: 2007-04-25T17:00:00 Last Updated: 2024-08-07T13:33:28.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in forum.php in EsForum 3.0 allows remote attackers to execute arbitrary SQL commands via the idsalon parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1521 - http://osvdb.org/35310 - http://www.securityfocus.com/archive/1/466663/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33813 - http://www.securityfocus.com/bid/23605 - http://secunia.com/advisories/25010 - http://securityreason.com/securityalert/2623
CVE ID: CVE-2007-2260 State: PUBLISHED Published: 2007-04-25T17:00:00 Last Updated: 2024-08-07T13:33:28.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in bibtex mase beta 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the bibtexrootrel parameter to (1) unavailable.php, (2) source.php, (3) log.php, (4) latex.php, (5) indexinfo.php, (6) index.php, (7) importinfo.php, (8) import.php, (9) examplefile.php, (10) clearinfo.php, (11) clear.php, (12) aboutinfo.php, (13) about.php, and other unspecified files. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35628 - http://osvdb.
specified files. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35628 - http://osvdb.org/35624 - http://osvdb.org/35631 - http://osvdb.org/35633 - http://osvdb.org/35629 - http://osvdb.org/35622 - http://osvdb.org/35621 - http://www.securityfocus.com/archive/1/466683/100/0/threaded - http://osvdb.org/35625 - http://osvdb.org/35623 - http://osvdb.org/35632 - http://securityreason.com/securityalert/2624 - http://osvdb.org/35626 - http://osvdb.org/35630 - http://osvdb.org/35627
CVE ID: CVE-2007-2261 State: PUBLISHED Published: 2007-04-25T17:00:00 Last Updated: 2024-08-07T13:33:27.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in espaces/communiques/annotations.php in C-Arbre 0.6PR7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter, a different vector than CVE-2007-1721. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/466682/100/0/threaded - http://securityreason.com/securityalert/2625 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33816 - http://osvdb.org/35635
CVE ID: CVE-2007-2262 State: PUBLISHED Published: 2007-04-25T17:00:00 Last Updated: 2024-08-07T13:33:27.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in html/php/detail.php in Sinato jmuffin allow remote attackers to execute arbitrary PHP code via a URL in the (1) relPath and (2) folder parameters. NOTE: this product was originally reported as "File117". Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35612 - http://www.securityfocus.com/archive/1/466675/100/0/threaded - http://securityreason.com/securityalert/2626 - http://www.securityfocus.com/bid/23600 - http://www.securityfocus.com/bid/
ttp://securityreason.com/securityalert/2626 - http://www.securityfocus.com/bid/23600 - http://www.securityfocus.com/bid/23655 - http://www.vupen.com/english/advisories/2007/1520 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33815
CVE ID: CVE-2007-2263 State: PUBLISHED Published: 2007-10-31T17:00:00 Last Updated: 2024-08-07T13:33:28.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in RealNetworks RealPlayer 10.0, 10.1, and possibly 10.5, RealOne Player, and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an SWF (Flash) file with malformed record headers. Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/realplayer/security/10252007_player/en/ - http://www.zerodayinitiative.com/advisories/ZDI-07-061.html - http://osvdb.org/38344 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37436 - https://oval.cisecuri
7-061.html - http://osvdb.org/38344 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37436 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11432 - http://www.securityfocus.com/archive/1/483110/100/0/threaded - http://www.securitytracker.com/id?1018866 - http://www.attrition.org/pipermail/vim/2007-October/001841.html - http://www.vupen.com/english/advisories/2007/3628 - http://www.securityfocus.com/bid/26284 - http://secunia.com/advisories/27361 - http://www.securityfocus.com/bid/26214
CVE ID: CVE-2007-2264 State: PUBLISHED Published: 2007-10-31T17:00:00 Last Updated: 2024-08-07T13:33:28.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; and RealPlayer Enterprise allows remote attackers to execute arbitrary code via a RAM (.ra or .ram) file with a large size value in the RA header. Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/realplayer/security/10252007_player/en/ - http://www.zerodayinitiative.com/advisories/ZDI-07-063.html - http://securitytracker.com/id?1018866 - https://exchange.xforce.ibmcloud.com/vulne
tive.com/advisories/ZDI-07-063.html - http://securitytracker.com/id?1018866 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37437 - http://www.securityfocus.com/archive/1/483113/100/0/threaded - http://www.attrition.org/pipermail/vim/2007-October/001841.html - http://www.vupen.com/english/advisories/2007/3628 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9100 - http://secunia.com/advisories/27361 - http://www.securityfocus.com/bid/26214
CVE ID: CVE-2007-2265 State: PUBLISHED Published: 2007-04-25T20:00:00 Last Updated: 2024-08-07T13:33:28.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in YA Book 0.98-alpha allows remote attackers to inject arbitrary web script or HTML via the City field in a sign action in index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33894 - http://www.securityfocus.com/archive/1/466743/100/0/threaded - http://osvdb.org/35519 - http://www.securityfocus.com/bid/23626 - http://securityreason.com/securityalert/2629
CVE ID: CVE-2007-2266 State: PUBLISHED Published: 2007-04-25T20:00:00 Last Updated: 2024-08-07T13:33:28.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Progress Webspeed Messenger allows remote attackers to read, create, modify, and execute arbitrary files by invoking webutil/_cpyfile.p in the WService parameter to (1) cgiip.exe or (2) wsisa.dll in scripts/, as demonstrated by using the save,editor options to create a new file using the fileName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/466771/100/0/threaded - http://www.securityfocus.com/bid/23634 - http://secunia.com/advisories/24988 - http://www.ishar
/466771/100/0/threaded - http://www.securityfocus.com/bid/23634 - http://secunia.com/advisories/24988 - http://www.ishare.nl/ - http://www.securityfocus.com/archive/1/472574/100/0/threaded
CVE ID: CVE-2007-2267 State: PUBLISHED Published: 2007-04-25T20:00:00 Last Updated: 2024-08-07T13:33:28.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun Cluster 3.1 and Solaris Cluster 3.2 before 20070424 allows remote authenticated users, operating from a different cluster node, to cause a denial of service (data corruption or send_mondo panic) via unspecified vectors, as demonstrated by EMC Symcli backup software 6.2.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1530 - http://osvdb.org/35320 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102874-1 - http://www.secur
007/1530 - http://osvdb.org/35320 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102874-1 - http://www.securitytracker.com/id?1018642 - http://www.securitytracker.com/id?1017953 - http://www.securityfocus.com/bid/23638 - http://secunia.com/advisories/24985 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33858
CVE ID: CVE-2007-2268 State: PUBLISHED Published: 2007-04-25T20:00:00 Last Updated: 2024-08-07T13:33:28.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in SWsoft Plesk for Windows 7.6.1, 8.1.0, and 8.1.1 allow remote attackers to read arbitrary files via a .. (dot dot) in the locale_id parameter to (1) login.php3 or (2) login_up.php3. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1588 - http://kb.swsoft.com/en/1798 - http://www.osvdb.org/34081 - http://www.securityfocus.com/bid/23639 - http://forum.swsoft.com/showthread.php?s=&postid=172761#post172761 - http://www.osvd
//www.securityfocus.com/bid/23639 - http://forum.swsoft.com/showthread.php?s=&postid=172761#post172761 - http://www.osvdb.org/34082 - http://secunia.com/advisories/25036
CVE ID: CVE-2007-2269 State: PUBLISHED Published: 2007-04-25T20:00:00 Last Updated: 2024-08-07T13:33:28.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in top.php3 in SWsoft Plesk for Windows 8.1 and 8.1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the locale_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35475 - http://forum.swsoft.com/showthread.php?s=&postid=172761#post172761 - http://secunia.com/advisories/25036
CVE ID: CVE-2007-2270 State: PUBLISHED Published: 2007-04-25T20:00:00 Last Updated: 2024-08-07T13:33:28.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linksys SPA941 VoIP Phone allows remote attackers to cause a denial of service (device reboot) via a 0377 (0xff) character in the From header, and possibly certain other locations, in a SIP INVITE request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3791 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-April/053959.html - http://www.securityfocus.com/bid/23619 - http://secunia.com/advisories/25031 - http://www.securitytracker.com/id?1017957 - https://www.exp
yfocus.com/bid/23619 - http://secunia.com/advisories/25031 - http://www.securitytracker.com/id?1017957 - https://www.exploit-db.com/exploits/3792 - http://www.vupen.com/english/advisories/2007/1532 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33856