Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
- https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00168.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:246 - https://usn.ubuntu.com/546-1/ - http://www.vupen.com/english/advisories/2007/4018 - http://www.securityfocus.com/archive/1/488971/100/0/threaded - http://secunia.com/advisories/27838 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00135.html - http://securitytracker.com/id?1018995 - http://www.securityfocus.com/archive/1/488002/100/0/threaded - http://www.vupen.com/english/advisories/2007/4002 - http://sunsolve.sun.com/search/docum
chive/1/488002/100/0/threaded - http://www.vupen.com/english/advisories/2007/4002 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1018977.1-1 - http://secunia.com/advisories/27793 - http://bugs.gentoo.org/show_bug.cgi?id=198965 - http://www.vupen.com/english/advisories/2008/0083 - http://secunia.com/advisories/27955 - http://wiki.rpath.com/Advisories:rPSA-2008-0093 - http://www.ubuntu.com/usn/usn-546-2 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00115.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-231441-1 - http://secunia.com/advisories/27957 - http://secunia.com/advisories/28398 - http://secunia.com/advisories/29164 - https://excha
secunia.com/advisories/27957 - http://secunia.com/advisories/28398 - http://secunia.com/advisories/29164 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38644 - http://secunia.com/advisories/28001 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://secunia.com/advisories/27796 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.365006 - https://issues.rpath.com/browse/RPL-1984 - http://secunia.com/advisories/27797 - http://secunia.com/advisories/27979 - http://secunia.com/advisories/28171 - http://secunia.com/advisories/27800 - http://www.redhat.com/support/errata/RHSA-2007-1084.html - http://www.debian.or
- http://secunia.com/advisories/27800 - http://www.redhat.com/support/errata/RHSA-2007-1084.html - http://www.debian.org/security/2007/dsa-1425 - http://www.mozilla.org/security/announce/2007/mfsa2007-39.html - http://secunia.com/advisories/27944 - http://secunia.com/advisories/27725
CVE ID: CVE-2007-5961 State: PUBLISHED Published: 2008-05-23T14:00:00 Last Updated: 2024-08-07T15:47:00.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Red Hat Network channel search feature, as used in RHN and Red Hat Network Satellite before 5.0.2, allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020051 - https://bugzilla.redhat.com/show_bug.cgi?id=396641 - http://www.redhat.com/support/errata/RHSA-2008-0261.html - http://osvdb.org/45765 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42
om/support/errata/RHSA-2008-0261.html - http://osvdb.org/45765 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42559
CVE ID: CVE-2007-5962 State: PUBLISHED Published: 2008-05-22T10:00:00 Last Updated: 2024-08-07T15:47:00.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux (RHEL) 5 and Fedora 6 through 8, and on Foresight Linux and rPath appliances, allows remote attackers to cause a denial of service (memory consumption) via a large number of CWD commands, as demonstrated by an attack on a daemon with the deny_file configuration option. Additional Analyst Notes: - CVE Program Container: References: - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0185 - https://www.redhat.com/archives/fedora-package-ann
References: - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0185 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00681.html - http://secunia.com/advisories/30341 - https://www.exploit-db.com/exploits/5814 - http://secunia.com/advisories/30354 - http://www.redhat.com/support/errata/RHSA-2008-0295.html - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00691.html - http://www.openwall.com/lists/oss-security/2008/05/21/10 - https://bugzilla.redhat.com/show_bug.cgi?id=397011 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42593 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00699.html - http://www.vupen.com/english/advisor
- https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00699.html - http://www.vupen.com/english/advisories/2008/1600 - http://www.openwall.com/lists/oss-security/2008/05/21/12 - http://www.securityfocus.com/bid/29322 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8850 - http://www.openwall.com/lists/oss-security/2008/05/21/8 - http://www.securityfocus.com/archive/1/493167/100/0/threaded - http://securitytracker.com/id?1020079
CVE ID: CVE-2007-5963 State: PUBLISHED Published: 2007-12-19T23:00:00 Last Updated: 2024-08-07T15:47:00.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in kdebase allows local users to cause a denial of service (KDM login inaccessible, or resource consumption) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/archives/fedora-package-announce/2008-February/msg00031.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39168 - http://securityreason.com/securityalert/3469 - http://www.redhat.com/archives/fedora-package-announce/2008-February/msg00038.html - http://wiki.rpath.com/wiki/Adviso
- http://www.redhat.com/archives/fedora-package-announce/2008-February/msg00038.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0268 - https://issues.rpath.com/browse/RPL-1992 - http://osvdb.org/41395 - http://www.securityfocus.com/archive/1/485238 - http://www.vupen.com/english/advisories/2007/4267 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:017 - http://www.securityfocus.com/bid/26909 - http://secunia.com/advisories/28104 - http://secunia.com/advisories/28181 - http://secunia.com/advisories/28751
CVE ID: CVE-2007-5964 State: PUBLISHED Published: 2007-12-13T18:00:00 Last Updated: 2024-08-07T15:47:00.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of autofs 5 in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 5, omits the nosuid option for the hosts (/net filesystem) map, which allows local users to gain privileges via a setuid program on a remote NFS server. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2007-1129.html - http://www.securityfocus.com/bid/26841 - http://secunia.com/advisories/28052 - http://secunia.com/advisories/28456 - http://osvdb.org/40441 - https:
/bid/26841 - http://secunia.com/advisories/28052 - http://secunia.com/advisories/28456 - http://osvdb.org/40441 - https://bugzilla.redhat.com/show_bug.cgi?id=409701 - http://www.redhat.com/support/errata/RHSA-2007-1128.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10158 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00549.html - http://securitytracker.com/id?1019087 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:009 - http://secunia.com/advisories/28097 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00474.html - https://bugzilla.redhat.com/show_bug.cgi?id=410031
CVE ID: CVE-2007-5965 State: PUBLISHED Published: 2008-01-08T01:00:00 Last Updated: 2024-08-07T15:47:00.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: QSslSocket in Trolltech Qt 4.3.0 through 4.3.2 does not properly verify SSL certificates, which might make it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service, or trick a service into accepting an invalid client certificate for a user. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00131.html - http://secunia.com/advisories/28999 - http://www.novell.com/linux/security/advisorie
nounce/2008-January/msg00131.html - http://secunia.com/advisories/28999 - http://www.novell.com/linux/security/advisories/suse_security_summary_report.html - http://www.securityfocus.com/bid/27112 - https://bugzilla.redhat.com/show_bug.cgi?id=427232 - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00005.html - http://secunia.com/advisories/28228 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:042 - http://www.vupen.com/english/advisories/2008/0018 - http://www.ubuntu.com/usn/usn-579-1 - http://secunia.com/advisories/28636 - http://trolltech.com/company/newsroom/announcements/press.2007-12-21.2182567220 - http://secunia.com/advisories/28321
CVE ID: CVE-2007-5966 State: PUBLISHED Published: 2007-12-20T00:00:00 Last Updated: 2024-08-07T15:47:00.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the hrtimer_start function in kernel/hrtimer.c in the Linux kernel before 2.6.23.10 allows local users to execute arbitrary code or cause a denial of service (panic) via a large relative timeout value. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10774 - http://secunia.com/advisories/36131 - http://www.securityfocus.com/archive/1/48
on/oval%3Aorg.mitre.oval%3Adef%3A10774 - http://secunia.com/advisories/36131 - http://www.securityfocus.com/archive/1/485282/100/0/threaded - http://www.securityfocus.com/bid/26880 - http://secunia.com/advisories/28806 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8125 - http://www.debian.org/security/2007/dsa-1436 - http://secunia.com/advisories/37471 - https://issues.rpath.com/browse/RPL-2038 - http://secunia.com/advisories/28141 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://secunia.com/advisories/28105 - http://www.redhat.com/support/errata/RHSA-2009-1193.html - http://secunia.com/advisories/28706 - http://www.mandriva.
- http://www.redhat.com/support/errata/RHSA-2009-1193.html - http://secunia.com/advisories/28706 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:112 - http://www.vupen.com/english/advisories/2007/4225 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.10 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2008-0585.html - http://secunia.com/advisories/28088 - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html - http://www.ubuntu.com/usn/usn-574-1 - http://secunia.com/advisories/31628 - http://www.vupen.com/english/advisories/2009/3316
CVE ID: CVE-2007-5967 State: PUBLISHED Published: 2021-05-17T11:50:13 Last Updated: 2024-08-07T15:47:00.630Z Vendors: n/a Products: Mozilla Firefox Problem Types: CWE-295 Description: A flaw in Mozilla's embedded certificate code might allow web sites to install root certificates on devices without user approval. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla-dev.allizom.org/show_bug.cgi?id=406724
CVE ID: CVE-2007-5968 State: REJECTED Published: 2007-12-10T19:00:00 Last Updated: 2008-02-26T10:00:00 Description: No description available.
CVE ID: CVE-2007-5969 State: PUBLISHED Published: 2007-12-10T19:00:00 Last Updated: 2024-08-07T15:47:00.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks created through explicit DATA DIRECTORY and INDEX DIRECTORY options, allows remote authenticated users to overwrite system table information and gain privileges via a RENAME TABLE statement that changes the symlink to point to an existing file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28343 - http://sec
file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28343 - http://security.gentoo.org/glsa/glsa-200804-04.xml - http://secunia.com/advisories/29706 - http://bugs.mysql.com/32111 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10509 - http://www.securityfocus.com/bid/31681 - http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-51.html - http://www.debian.org/security/2008/dsa-1451 - http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html - http://www.securitytracker.com/id?1019060 - http://www.vupen.com/english/advisories/2007/4142 - https://usn.ubuntu.com/559-1/ - http://www.securityfocus.com/ar
60 - http://www.vupen.com/english/advisories/2007/4142 - https://usn.ubuntu.com/559-1/ - http://www.securityfocus.com/archive/1/486477/100/0/threaded - http://www.vupen.com/english/advisories/2008/1000/references - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.428959 - http://www.vupen.com/english/advisories/2008/0560/references - http://www.securityfocus.com/bid/26765 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00467.html - http://secunia.com/advisories/28040 - http://www.redhat.com/support/errata/RHSA-2007-1157.html - http://secunia.com/advisories/28099 - http://secunia.com/advisories/28559 - http://secunia.com/advi
HSA-2007-1157.html - http://secunia.com/advisories/28099 - http://secunia.com/advisories/28559 - http://secunia.com/advisories/32222 - http://secunia.com/advisories/27981 - http://www.vupen.com/english/advisories/2007/4198 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00475.html - http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-52.html - http://lists.mysql.com/announce/495 - http://www.redhat.com/support/errata/RHSA-2007-1155.html - http://secunia.com/advisories/28108 - http://secunia.com/advisories/28025 - http://www.vupen.com/english/advisories/2008/2780 - http://forums.mysql.com/read.php?3%2C186931%2C186931 - http://secunia.com/advisories/28838 - ht
h/advisories/2008/2780 - http://forums.mysql.com/read.php?3%2C186931%2C186931 - http://secunia.com/advisories/28838 - http://secunia.com/advisories/28128 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:243 - http://secunia.com/advisories/28063 - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216 - https://issues.rpath.com/browse/RPL-1999
CVE ID: CVE-2007-5970 State: PUBLISHED Published: 2007-12-10T19:00:00 Last Updated: 2024-08-07T15:47:00.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL 5.1.x before 5.1.23 and 6.0.x before 6.0.4 allows remote authenticated users to gain privileges on arbitrary tables via unspecified vectors involving use of table-level DATA DIRECTORY and INDEX DIRECTORY options when creating a partitioned table with the same name as a table on which the user lacks privileges. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.mysql.com/bug.php?id=32091 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38988 - http://securitytracker.com/id?1019084 - http://
?id=32091 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38988 - http://securitytracker.com/id?1019084 - http://www.vupen.com/english/advisories/2008/0560/references - http://osvdb.org/42607 - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html - http://dev.mysql.com/doc/refman/6.0/en/news-6-0-4.html
CVE ID: CVE-2007-5971 State: PUBLISHED Published: 2007-12-06T02:00:00 Last Updated: 2024-08-07T15:47:00.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the gss_krb5int_make_seal_token_v3 function in lib/gssapi/krb5/k5sealv3.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39784 - http://www.ubuntu.com/usn/USN-940-1 - http://secunia.com/advisories/29457 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:069 - http://secunia.com/advisories/29464 - http://www.novell.com/linux/security/advisories/suse_security_summary_report.html
http://secunia.com/advisories/29464 - http://www.novell.com/linux/security/advisories/suse_security_summary_report.html - http://www.securityfocus.com/bid/26750 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html - http://wiki.rpath.com/Advisories:rPSA-2008-0112 - http://secunia.com/advisories/29451 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html - http://seclists.org/fulldisclosure/2007/Dec/0321.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112 - http://www.vupen.com/english/advisories/2008/0924/references - http://www.vupen.com/english/advisories/2010/1192 - http://www.redhat.com/support/errata/RHSA-2008-0164.html
ferences - http://www.vupen.com/english/advisories/2010/1192 - http://www.redhat.com/support/errata/RHSA-2008-0164.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:070 - http://secunia.com/advisories/29450 - http://osvdb.org/43345 - http://www.securityfocus.com/archive/1/489883/100/0/threaded - http://secunia.com/advisories/29420 - http://bugs.gentoo.org/show_bug.cgi?id=199212 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://seclists.org/fulldisclosure/2007/Dec/0176.html - http://www.redhat.com/support/errata/RHSA-2008-0180.html - http://secunia.com/advisories/29516 - http://secunia.com/advisories/39290 - http://secunia.com/advisories/2946
80.html - http://secunia.com/advisories/29516 - http://secunia.com/advisories/39290 - http://secunia.com/advisories/29462 - http://docs.info.apple.com/article.html?artnum=307562 - http://ubuntu.com/usn/usn-924-1 - http://secunia.com/advisories/28636 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10296 - http://security.gentoo.org/glsa/glsa-200803-31.xml - https://issues.rpath.com/browse/RPL-2012
CVE ID: CVE-2007-5972 State: PUBLISHED Published: 2007-12-06T02:00:00 Last Updated: 2024-08-07T15:47:00.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the krb5_def_store_mkey function in lib/kdb/kdb_default.c in MIT Kerberos 5 (krb5) 1.5 has unknown impact and remote authenticated attack vectors. NOTE: the free operations occur in code that stores the krb5kdc master key, and so the attacker must have privileges to store this key. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39784 - http://www.ubuntu.com/usn/USN-940-1 - http://www.novell.com/linux/security/advisories/suse_security_summary_report.ht
- http://www.ubuntu.com/usn/USN-940-1 - http://www.novell.com/linux/security/advisories/suse_security_summary_report.html - http://www.securityfocus.com/bid/26750 - http://seclists.org/fulldisclosure/2007/Dec/0321.html - http://www.vupen.com/english/advisories/2010/1192 - http://osvdb.org/44747 - http://seclists.org/fulldisclosure/2007/Dec/0176.html - http://secunia.com/advisories/39290 - http://ubuntu.com/usn/usn-924-1 - http://secunia.com/advisories/28636 - http://bugs.gentoo.org/show_bug.cgi?id=199211 - https://issues.rpath.com/browse/RPL-2012
CVE ID: CVE-2007-5973 State: PUBLISHED Published: 2007-11-15T00:00:00 Last Updated: 2024-08-07T15:47:00.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in articles.php in JPortal 2.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the topic parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38363 - http://osvdb.org/38750 - http://www.securityfocus.com/bid/26395 - https://www.exploit-db.com/exploits/4614
CVE ID: CVE-2007-5974 State: PUBLISHED Published: 2007-11-15T00:00:00 Last Updated: 2024-08-07T15:47:00.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mailer.php in JPortal 2 allows remote attackers to execute arbitrary SQL commands via the to parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26360 - http://osvdb.org/38749 - https://www.exploit-db.com/exploits/4611 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38293
CVE ID: CVE-2007-5975 State: PUBLISHED Published: 2007-11-15T00:00:00 Last Updated: 2024-08-07T15:47:00.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in TBSource, as used in (1) TBDev and (2) TorrentStrike 0.4, allows remote authenticated users to execute arbitrary SQL commands via the choice parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38667 - http://www.securityfocus.com/archive/1/483552/100/0/threaded - http://marc.info/?l=bugtraq&m=119472280121280&w=2 - http://www.securityfocus.com/bid/26415 - http://secunia.com/
eaded - http://marc.info/?l=bugtraq&m=119472280121280&w=2 - http://www.securityfocus.com/bid/26415 - http://secunia.com/advisories/27566 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38402
CVE ID: CVE-2007-5976 State: PUBLISHED Published: 2007-11-15T00:00:00 Last Updated: 2024-08-07T15:47:00.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in db_create.php in phpMyAdmin before 2.11.2.1 allows remote authenticated users with CREATE DATABASE privileges to execute arbitrary SQL commands via the db parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27630 - http://www.securityfocus.com/bid/26512 - http://www.vupen.com/english/advisories/2007/3824 - http://secunia.com/advisories/27753 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38403 - http://sourceforge.net/project/shownotes
advisories/27753 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38403 - http://sourceforge.net/project/shownotes.php?release_id=553333 - http://www.digitrustgroup.com/advisories/tdg-advisory071108a.html - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00777.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:229
CVE ID: CVE-2007-5977 State: PUBLISHED Published: 2007-11-15T00:00:00 Last Updated: 2024-08-07T15:47:00.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in db_create.php in phpMyAdmin before 2.11.2.1 allows remote authenticated users with CREATE DATABASE privileges to inject arbitrary web script or HTML via a hex-encoded IMG element in the db parameter in a POST request, a different vulnerability than CVE-2006-6942. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27630 - http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2007-7 - http://www.securityfocus.com/bid/26512 - https://ex
ttp://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2007-7 - http://www.securityfocus.com/bid/26512 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38404 - http://www.vupen.com/english/advisories/2007/3824 - http://secunia.com/advisories/27753 - http://sourceforge.net/project/shownotes.php?release_id=553333 - http://www.digitrustgroup.com/advisories/tdg-advisory071108a.html - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00777.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:229