Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-2916 State: PUBLISHED Published: 2007-05-30T10:00:00 Last Updated: 2024-08-07T13:57:54.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in showown.php in GMTT Music Distro 1.2 allows remote attackers to inject arbitrary web script or HTML via the st parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25385 - http://osvdb.org/36571 - http://www.securityfocus.com/archive/1/469269/100/0/threaded - http://securityreason.com/securityalert/2745 - http://www.vupen.com/english/advisories/2007/1938 - http://www.securityfocus.com/bid/24108 - https://exchange.xforce.ibmcloud.co
ww.vupen.com/english/advisories/2007/1938 - http://www.securityfocus.com/bid/24108 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34440 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063515.html
CVE ID: CVE-2007-2917 State: PUBLISHED Published: 2007-06-01T01:00:00 Last Updated: 2024-08-07T13:57:54.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in a certain ActiveX control in odapi.dll in Authentium Command Antivirus before 4.93.8 allow remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/563401 - http://secunia.com/advisories/25500 - http://www.vupen.com/english/advisories/2007/2019 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34657 - http://www.securityfocus.com/bid/24255 - http://osvdb.org/36801
CVE ID: CVE-2007-2918 State: PUBLISHED Published: 2007-06-01T01:00:00 Last Updated: 2024-08-07T13:57:54.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in ActiveX controls (1) VibeC in (a) vibecontrol.dll, (2) CallManager and (3) ViewerClient in (b) StarClient.dll, (4) ComLink in (c) uicomlink.dll, and (5) WebCamXMP in (d) wcamxmp.dll in Logitech VideoCall allow remote attackers to cause a denial of service (browser crash) and execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/330289 - http://osvdb.org/36821 - http://secunia.com/advisories/25514 -
er: References: - http://www.kb.cert.org/vuls/id/330289 - http://osvdb.org/36821 - http://secunia.com/advisories/25514 - http://osvdb.org/36820 - http://osvdb.org/36824 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34658 - http://www.securityfocus.com/bid/24254 - http://www.vupen.com/english/advisories/2007/2018 - http://osvdb.org/36822 - http://osvdb.org/36823
CVE ID: CVE-2007-2919 State: PUBLISHED Published: 2007-06-06T22:00:00 Last Updated: 2024-08-07T13:57:54.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the FViewerLoading ActiveX control (FlipViewerX.dll) in E-Book Systems FlipViewer before 4.1 allow remote attackers to cause a denial of service (crash) or execute arbitrary code via long (1) UID, (2) Opf, (3) PAGENO, (4) LaunchMode, (5) SubID, (6) BookID, (7) LibraryID, (8) SubURL, and (9) LoadOpf properties. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25568 - http://www.securityfocus.com/bid/24328 - http://www.vupen.com/english/adviso
es: - http://secunia.com/advisories/25568 - http://www.securityfocus.com/bid/24328 - http://www.vupen.com/english/advisories/2007/2081 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34742 - http://osvdb.org/37042 - http://www.kb.cert.org/vuls/id/449089
CVE ID: CVE-2007-2920 State: PUBLISHED Published: 2007-06-11T22:00:00 Last Updated: 2024-08-07T13:57:54.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the Zoomify Viewer ActiveX control in ZActiveX.dll might allow remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34825 - http://www.vupen.com/english/advisories/2007/2142 - http://secunia.com/advisories/25625 - http://osvdb.org/37207 - http://www.securityfocus.com/bid/24421 - http://www.kb.cert.org/vuls/id/174177
CVE ID: CVE-2007-2921 State: PUBLISHED Published: 2007-06-14T23:00:00 Last Updated: 2024-08-07T13:57:54.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in acgm.dll in the Corel / Micrografx ActiveCGM Browser ActiveX control before 7.1.4.19 allow remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/35468 - http://secunia.com/advisories/25672 - http://www.kb.cert.org/vuls/id/983249 - http://www.nessus.org/plugins/index.php?view=single&id=25494 - http://www.securityfocus.com/bid/24464 - http://www.vupen.com/english/advisories/2007/2191 - https://exchange
id=25494 - http://www.securityfocus.com/bid/24464 - http://www.vupen.com/english/advisories/2007/2191 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34863
CVE ID: CVE-2007-2923 State: PUBLISHED Published: 2007-06-18T10:00:00 Last Updated: 2024-08-07T13:57:54.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: The launch method in the LocalExec ActiveX control (LocalExec.ocx) in Novell exteNd Director 4.1 and Portal Services allows remote attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37318 - https://secure-support.novell.com/KanisaPlatform/Publishing/360/3169416_f.SAL_Public.html - http://www.vupen.com/english/advisories/2007/2235 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34898 - http://www.kb.cert.org/vuls/id/793433 - http://secunia.com/adviso
//exchange.xforce.ibmcloud.com/vulnerabilities/34898 - http://www.kb.cert.org/vuls/id/793433 - http://secunia.com/advisories/25710 - http://www.novell.com/documentation/nedse41/readmesp2.txt - http://www.securityfocus.com/bid/24493 - http://www.securitytracker.com/id?1018258
CVE ID: CVE-2007-2924 State: PUBLISHED Published: 2007-06-19T21:00:00 Last Updated: 2024-08-07T13:57:54.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in RealNetworks GameHouse dldisplay ActiveX control (ghdlctl.dll) allow remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/179105 - http://www.vupen.com/english/advisories/2007/2261 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34935 - http://osvdb.org/37671 - http://www.securityfocus.com/bid/24534 - http://secunia.com/advisories/25757
CVE ID: CVE-2007-2925 State: PUBLISHED Published: 2007-07-24T17:00:00 Last Updated: 2024-08-07T13:57:54.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default access control lists (ACL) in ISC BIND 9.4.0, 9.4.1, and 9.5.0a1 through 9.5.0a5 do not set the allow-recursion and allow-query-cache ACLs, which allows remote attackers to make recursive queries and query the cache. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25076 - http://www.vupen.com/english/advisories/2007/2914 - http://www.securitytracker.com/id?1018441 - http://www.vupen.com/english/advisories/2007/2628 - http://secunia.com/advisories/26509 - http://www.
r.com/id?1018441 - http://www.vupen.com/english/advisories/2007/2628 - http://secunia.com/advisories/26509 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:149 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35571 - http://www.gentoo.org/security/en/glsa/glsa-200708-13.xml - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=623903 - http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.521385 - http://www.isc.org/index.pl?/sw/bind/bind-security.php - http://secunia.com/advisories/26227 - http://secunia.com/advisories/26515 - http://secunia.com/advisories/26236 - http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.022.
advisories/26515 - http://secunia.com/advisories/26236 - http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.022.html
CVE ID: CVE-2007-2926 State: PUBLISHED Published: 2007-07-24T17:00:00 Last Updated: 2024-08-07T13:57:54.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2007-389.htm - http://www.trusteer.com/docs/bind9dns_s.html - http://secunia.com/advisories/26231 - http://www.vupen.com/english/advis
http://www.trusteer.com/docs/bind9dns_s.html - http://secunia.com/advisories/26231 - http://www.vupen.com/english/advisories/2007/2932 - http://marc.info/?l=bugtraq&m=141879471518471&w=2 - http://secunia.com/advisories/26847 - http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02218&apar=only - http://www.vupen.com/english/advisories/2007/2914 - http://www.redhat.com/support/errata/RHSA-2007-0740.html - http://secunia.com/advisories/26217 - http://marc.info/?l=bugtraq&m=141879471518471&w=2 - http://secunia.com/advisories/26509 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01174368 - http://www.securityfocus.com/bid/26444 - http://www.securiteam.com/securitynews/5VP
rt/Document.jsp?objectID=c01174368 - http://www.securityfocus.com/bid/26444 - http://www.securiteam.com/securitynews/5VP0L0UM0A.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426 - http://secunia.com/advisories/26605 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103018-1 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:149 - http://secunia.com/advisories/26607 - http://www.securityfocus.com/archive/1/474856/100/0/threaded - http://secunia.com/advisories/26148 - http://security.freebsd.org/advisories/FreeBSD-SA-07:07.bind.asc - http://www.kb.cert.org/vuls/id/252735 - http://www.trusteer.com/docs/bind9dns.html - http://secunia.com/
7:07.bind.asc - http://www.kb.cert.org/vuls/id/252735 - http://www.trusteer.com/docs/bind9dns.html - http://secunia.com/advisories/26180 - http://www.gentoo.org/security/en/glsa/glsa-200708-13.xml - http://secunia.com/advisories/26152 - http://www.trustix.org/errata/2007/0023/ - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=623903 - http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.521385 - http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html - http://docs.info.apple.com/article.html?artnum=307041 - http://www.securityfocus.com/archive/1/474516/100/0/threaded - http://www.isc.org/index.pl?/sw/bind/bind-security.php -
http://www.securityfocus.com/archive/1/474516/100/0/threaded - http://www.isc.org/index.pl?/sw/bind/bind-security.php - http://www-1.ibm.com/support/search.wss?rs=0&q=IZ02219&apar=only - https://exchange.xforce.ibmcloud.com/vulnerabilities/35575 - http://www.vupen.com/english/advisories/2007/2782 - http://secunia.com/advisories/26227 - http://secunia.com/advisories/26261 - http://www.vupen.com/english/advisories/2007/3868 - http://www.securityfocus.com/bid/25037 - http://secunia.com/advisories/26515 - http://www.ubuntu.com/usn/usn-491-1 - http://secunia.com/advisories/26330 - https://issues.rpath.com/browse/RPL-1587 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c0
0 - https://issues.rpath.com/browse/RPL-1587 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01154600 - http://www.securitytracker.com/id?1018442 - ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.asc - http://www.debian.org/security/2007/dsa-1341 - http://secunia.com/advisories/26308 - http://www.novell.com/linux/security/advisories/2007_47_bind.html - http://www.vupen.com/english/advisories/2007/2627 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2226 - http://secunia.com/advisories/27643 - http://secunia.com/advisories/26236 - http://www.vupen.com/english/advisories/2007/2662 - http://secunia.com/advis
643 - http://secunia.com/advisories/26236 - http://www.vupen.com/english/advisories/2007/2662 - http://secunia.com/advisories/26195 - ftp://aix.software.ibm.com/aix/efixes/security/README - http://www.vupen.com/english/advisories/2007/3242 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10293 - http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.022.html - http://www.us-cert.gov/cas/techalerts/TA07-319A.html - http://secunia.com/advisories/26925 - http://secunia.com/advisories/26160 - http://www.securityfocus.com/archive/1/474545/100/0/threaded - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426 - http://www.secur
545/100/0/threaded - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01123426 - http://www.securityfocus.com/archive/1/474808/100/0/threaded - http://secunia.com/advisories/26531
CVE ID: CVE-2007-2927 State: PUBLISHED Published: 2007-08-08T01:11:00 Last Updated: 2024-08-07T13:57:54.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Atheros 802.11 a/b/g wireless adapter drivers before 5.3.0.35, and 6.x before 6.0.3.67, on Windows allows remote attackers to cause a denial of service via a crafted 802.11 management frame. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2756 - http://secunia.com/advisories/26348 - http://osvdb.org/37992 - http://www.kb.cert.org/vuls/id/730169 - http://www.securityfocus.com/bid/25160 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
b.cert.org/vuls/id/730169 - http://www.securityfocus.com/bid/25160 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35788
CVE ID: CVE-2007-2928 State: PUBLISHED Published: 2007-08-15T19:00:00 Last Updated: 2024-08-07T13:57:54.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1.0.0.9 (Automated Solutions 1.0 before fix pack 1), allows remote attackers to execute arbitrary code via format string specifiers in unknown data. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2882 - http://www-307.ibm.com/pc/support/site.wss/document.do?sitestyle=lenovo&lndocid=MIGR-67649 - http
advisories/2007/2882 - http://www-307.ibm.com/pc/support/site.wss/document.do?sitestyle=lenovo&lndocid=MIGR-67649 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-045 - http://secunia.com/advisories/26482 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36033 - http://www.kb.cert.org/vuls/id/599657 - http://www.securityfocus.com/bid/25311
CVE ID: CVE-2007-2929 State: PUBLISHED Published: 2007-08-15T19:00:00 Last Updated: 2024-08-07T13:57:54.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1.0.0.9 (Automated Solutions 1.0 before fix pack 1), exposes unsafe methods to arbitrary web domains, which allows remote attackers to download arbitrary code onto a client system and execute this code. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2882 - http://www-307.ibm.com/pc/support/site.wss/document.do?sitestyle=lenovo&ln
/www.vupen.com/english/advisories/2007/2882 - http://www-307.ibm.com/pc/support/site.wss/document.do?sitestyle=lenovo&lndocid=MIGR-67649 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36035 - http://www.kb.cert.org/vuls/id/426737 - http://secunia.com/advisories/26482 - http://www.securityfocus.com/bid/25311
CVE ID: CVE-2007-2930 State: PUBLISHED Published: 2007-09-12T01:00:00 Last Updated: 2024-08-07T13:57:54.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) NSID_SHUFFLE_ONLY and (2) NSID_USE_POOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing queries such as NOTIFY messages when answering questions as a resolver, which allows remote attackers to poison DNS caches via unknown vectors. NOTE: this issue is different from CVE-2007-2926. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2007-448.htm - http://sunsolve.sun.com/search/document.do?assetkey
es: - http://support.avaya.com/elmodocs2/security/ASA-2007-448.htm - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200859-1 - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=653968 - http://www.vupen.com/english/advisories/2007/3936 - http://secunia.com/advisories/27433 - http://www.securityfocus.com/archive/1/481424/100/0/threaded - http://www.vupen.com/english/advisories/2007/3192 - http://www.vupen.com/english/advisories/2007/2991 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01283837 - http://secunia.com/advisories/26629 - http://www.securitytracker.com/id?1018615 - http://www.trusteer.com/docs/bind8dns.html - http://secunia.com/advisories
- http://www.securitytracker.com/id?1018615 - http://www.trusteer.com/docs/bind8dns.html - http://secunia.com/advisories/27459 - http://www.securityfocus.com/bid/25459 - http://www.vupen.com/english/advisories/2007/3668 - http://secunia.com/advisories/27696 - http://www.isc.org/index.pl?/sw/bind/bind8-eol.php - http://www.securityfocus.com/archive/1/477870/100/100/threaded - http://secunia.com/advisories/27465 - http://www.vupen.com/english/advisories/2007/3639 - http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2007/43/022954-01.pdf - http://secunia.com/advisories/26858 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2154 - http://www.kb.cert.
6858 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2154 - http://www.kb.cert.org/vuls/id/927905 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103063-1 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01283837 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3975 - http://www.ciac.org/ciac/bulletins/r-333.shtml - http://www.securityfocus.com/archive/1/481659/100/0/threaded
CVE ID: CVE-2007-2931 State: PUBLISHED Published: 2007-08-31T22:00:00 Last Updated: 2024-08-07T13:57:54.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving video conversation handling in Web Cam and video chat sessions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26570 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36314 - http://www.securityfocus.com/bid/25461 - http://www.vupen.com/english/advisories/2007/2987 - http://www.securi
s/36314 - http://www.securityfocus.com/bid/25461 - http://www.vupen.com/english/advisories/2007/2987 - http://www.securitytracker.com/id?1018622 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2063 - http://www.team509.com/modules.php?name=News&file=article&sid=50 - http://osvdb.org/40126 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-054 - http://www.us-cert.gov/cas/techalerts/TA07-254A.html - http://www.kb.cert.org/vuls/id/166521
CVE ID: CVE-2007-2932 State: PUBLISHED Published: 2007-05-31T00:00:00 Last Updated: 2024-08-07T13:57:54.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in BoastMachine allows remote attackers to inject arbitrary web script or HTML via the blog parameter in a content search action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24156 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34509 - http://www.securityfocus.com/archive/1/469590/100/0/threaded - http://securityreason.com/securityalert/2743 - http://osvdb.org/38060 - http://jvn.jp/en/jp/JVN65660590/index.html
CVE ID: CVE-2007-2933 State: PUBLISHED Published: 2007-05-31T00:00:00 Last Updated: 2024-08-07T13:57:54.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the Phil-a-Form (com_philaform) 1.2.0.0 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the form_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34562 - https://www.exploit-db.com/exploits/4003 - http://osvdb.org/38150
CVE ID: CVE-2007-2934 State: PUBLISHED Published: 2007-05-31T00:00:00 Last Updated: 2024-08-07T13:57:54.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in skins/common.css.php in Vistered Little 1.6a allows remote attackers to read arbitrary files via a .. (dot dot) in the skin parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2007-May/001632.html - http://osvdb.org/38350 - http://www.securityfocus.com/bid/24178 - https://www.exploit-db.com/exploits/3999 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34546
CVE ID: CVE-2007-2935 State: PUBLISHED Published: 2007-05-31T00:00:00 Last Updated: 2024-08-07T13:57:54.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: core/spellcheck/spellcheck.php in Fundanemt before 2.2.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the dict parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34543 - http://secunia.com/advisories/25421 - https://www.exploit-db.com/exploits/3998 - http://www.securityfocus.com/bid/24185 - http://www.fundanemt.org/newsarchive/?number=23 - http://osvdb.org/36657
CVE ID: CVE-2007-2936 State: PUBLISHED Published: 2007-05-31T00:00:00 Last Updated: 2024-08-07T13:57:54.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Frequency Clock 0.1b (Beta 0.1) allow remote attackers to execute arbitrary PHP code via a URL in the securelib parameter to (1) conf.php or (2) cp2.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38151 - http://osvdb.org/38152 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34541 - https://www.exploit-db.com/exploits/3997 - http://www.securityfocus.com/bid/24176
CVE ID: CVE-2007-2937 State: PUBLISHED Published: 2007-05-31T00:00:00 Last Updated: 2024-08-07T13:57:54.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/admin.php in TROforum 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the site_url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24170 - https://www.exploit-db.com/exploits/3995 - http://osvdb.org/38153