Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-6010 State: PUBLISHED Published: 2007-11-15T23:00:00 Last Updated: 2024-08-07T15:54:25.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in pioneers (formerly gnocatan) 0.11.3 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors that trigger an assert error. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2007-5933. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=449541 - http://securitytracker.com/id?1019024 - http://osvdb.org/45293
CVE ID: CVE-2007-6011 State: PUBLISHED Published: 2007-11-16T00:00:00Z Last Updated: 2024-09-16T17:08:11.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in main.php of BugHotel Reservation System before 4.9.9 P3 allows remote attackers to bypass authentication and gain administrative access via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26178
CVE ID: CVE-2007-6012 State: PUBLISHED Published: 2007-11-16T20:00:00 Last Updated: 2024-08-07T15:54:25.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SearchR.asp in DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrary SQL commands via the artnr parameter (aka the search section). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38455 - http://www.securityfocus.com/bid/26442 - http://secunia.com/advisories/27660 - http://securityreason.com/securityalert/3374 - http://www.securityfocus.com/a
42 - http://secunia.com/advisories/27660 - http://securityreason.com/securityalert/3374 - http://www.securityfocus.com/archive/1/483694/100/0/threaded
CVE ID: CVE-2007-6013 State: PUBLISHED Published: 2007-11-19T21:00:00 Last Updated: 2024-08-07T15:54:25.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wordpress 1.5 through 2.3.1 uses cookie values based on the MD5 hash of a password MD5 hash, which allows attackers to bypass authentication by obtaining the MD5 hash from the user database, then generating the authentication cookie from that hash. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2007-November/058576.html - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00098.html - http://www.cl.cam.ac.uk/~sjm217/advisories/wordpress-c
com/archives/fedora-package-announce/2008-January/msg00098.html - http://www.cl.cam.ac.uk/~sjm217/advisories/wordpress-cookie-auth.txt - http://trac.wordpress.org/ticket/5367 - http://securityreason.com/securityalert/3375 - http://www.securityfocus.com/archive/1/483927/100/0/threaded - http://www.vupen.com/english/advisories/2007/3941 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38578 - http://secunia.com/advisories/28310 - http://www.securitytracker.com/id?1018980 - http://osvdb.org/40801 - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00079.html - http://secunia.com/advisories/27714
CVE ID: CVE-2007-6014 State: PUBLISHED Published: 2007-12-05T11:00:00 Last Updated: 2024-08-07T15:54:25.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in post.php in Beehive Forum 0.7.1 and earlier allows remote attackers to execute arbitrary SQL commands via the t_dedupe parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3417 - http://secunia.com/advisories/27909 - http://www.securitytracker.com/id?1019035 - http://www.securityfocus.com/archive/1/484501/100/0/threaded - http://www.securityfocus.com/bid/26492 - http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-014.
ded - http://www.securityfocus.com/bid/26492 - http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-014.txt - http://sourceforge.net/project/shownotes.php?group_id=50772&release_id=551758
CVE ID: CVE-2007-6015 State: PUBLISHED Published: 2007-12-13T21:00:00 Last Updated: 2024-08-07T15:54:25.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON logon request. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2007-1117.html - http://docs.info.apple.com/article.html?artnum=307430 - http://lists.vmware.com/pipermail/securit
/RHSA-2007-1117.html - http://docs.info.apple.com/article.html?artnum=307430 - http://lists.vmware.com/pipermail/security-announce/2008/000005.html - http://secunia.com/advisories/28891 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019295.1-1 - http://secunia.com/advisories/30835 - http://secunia.com/advisories/29341 - http://marc.info/?l=bugtraq&m=120524782005154&w=2 - http://www.kb.cert.org/vuls/id/438395 - http://www.securityfocus.com/bid/26791 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238251-1 - http://www.novell.com/linux/security/advisories/2007_68_samba.html - http://www.ubuntu.com/usn/usn-556-1 - http://www.vupen.com/english/advisories/2008/1908 - http:
ies/2007_68_samba.html - http://www.ubuntu.com/usn/usn-556-1 - http://www.vupen.com/english/advisories/2008/1908 - http://www.vupen.com/english/advisories/2008/0495/references - http://marc.info/?l=bugtraq&m=120524782005154&w=2 - http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01475657 - http://secunia.com/advisories/27999 - http://www.securityfocus.com/archive/1/485144/100/0/threaded - http://secunia.com/advisories/30484 - http://secunia.com/advisories/29032 - http://www.samba.org/samba/security/CVE-2007-6015.html - http://secunia.com/advisories/27993 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38965 - http://www.debian.org/security/2007/dsa-1427 - http://www.sec
tps://exchange.xforce.ibmcloud.com/vulnerabilities/38965 - http://www.debian.org/security/2007/dsa-1427 - http://www.securityfocus.com/archive/1/488457/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDKSA-2007:244 - http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01475657 - http://bugs.gentoo.org/show_bug.cgi?id=200773 - http://www.securityfocus.com/archive/1/484818/100/0/threaded - http://www.securitytracker.com/id?1019065 - http://secunia.com/advisories/27977 - http://www.vupen.com/english/advisories/2008/0637 - http://secunia.com/advisories/28029 - http://www.vupen.com/english/advisories/2007/4153 - http://support.avaya.com/elmodocs2/security/ASA-2007-5
ories/28029 - http://www.vupen.com/english/advisories/2007/4153 - http://support.avaya.com/elmodocs2/security/ASA-2007-520.htm - http://secunia.com/advisories/28089 - http://secunia.com/advisories/28003 - https://issues.rpath.com/browse/RPL-1976 - http://www.us-cert.gov/cas/techalerts/TA08-043B.html - http://www.redhat.com/support/errata/RHSA-2007-1114.html - http://securityreason.com/securityalert/3438 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.451554 - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00304.html - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00308.html - http://secunia.com/a
g00304.html - https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00308.html - http://secunia.com/advisories/27894 - http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html - http://secunia.com/advisories/27760 - http://www.vupen.com/english/advisories/2008/1712/references - http://secunia.com/secunia_research/2007-99/advisory/ - http://secunia.com/advisories/28067 - http://secunia.com/advisories/28037 - http://www.vupen.com/english/advisories/2008/0859/references - http://www.securityfocus.com/archive/1/484825/100/0/threaded - http://www.securityfocus.com/archive/1/484827/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Ao
ww.securityfocus.com/archive/1/484827/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11572 - http://secunia.com/advisories/28028 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5605 - http://security.gentoo.org/glsa/glsa-200712-10.xml
CVE ID: CVE-2007-6016 State: PUBLISHED Published: 2008-02-29T19:00:00 Last Updated: 2024-08-07T15:54:25.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the Media Server in Symantec Backup Exec for Windows Server (BEWS) 11d 11.0.6235 and 11.0.7170, and 12.0 12.0.1364, allow remote attackers to execute arbitrary code via a long (1) _DOWText0, (2) _DOWText1, (3) _DOWText2, (4) _DOWText3, (5) _DOWText4, (6) _DOWText5, (7) _DOWText6, (8) _MonthText0, (9) _MonthText1, (10) _MonthText2, (11) _MonthText3, (12) _MonthText4, (13) _MonthText5, (14) _Mon
xt6, (8) _MonthText0, (9) _MonthText1, (10) _MonthText2, (11) _MonthText3, (12) _MonthText4, (13) _MonthText5, (14) _MonthText6, (15) _MonthText7, (16) _MonthText8, (17) _MonthText9, (18) _MonthText10, or (19) _MonthText11 property value when executing the Save method. NOTE: the vendor states "Authenticated user involvement required," but authentication is not needed to attack a client machine that loads this control. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26904 - http://www.symantec.com/avcenter/security/Content/2008.02.29.html - http://seer.support.veritas.com/docs/308669.htm - http://securitytracker.com/id?1019524 - http://www.sym
08.02.29.html - http://seer.support.veritas.com/docs/308669.htm - http://securitytracker.com/id?1019524 - http://www.symantec.com/avcenter/security/Content/2008.02.28.html - http://secunia.com/secunia_research/2007-101/advisory/ - http://www.vupen.com/english/advisories/2008/0718 - http://secunia.com/advisories/27885 - https://www.exploit-db.com/exploits/5205 - http://www.vupen.com/english/advisories/2008/2672
CVE ID: CVE-2007-6017 State: PUBLISHED Published: 2008-02-29T19:00:00 Last Updated: 2024-08-07T15:54:26.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the Media Server in Symantec Backup Exec for Windows Server (BEWS) 11d 11.0.6235 and 11.0.7170, and 12.0 12.0.1364, exposes the unsafe Save method, which allows remote attackers to cause a denial of service (browser crash), or create or overwrite arbitrary files, via string values of the (1) _DOWText0, (2) _DOWText1, (3) _DOWText2, (4) _DOWText3, (5) _DOWText4, (6) _DOWText5, (7) _DOWText6, (8) _MonthText0, (9) _MonthText1, (10) _Mon
, (3) _DOWText2, (4) _DOWText3, (5) _DOWText4, (6) _DOWText5, (7) _DOWText6, (8) _MonthText0, (9) _MonthText1, (10) _MonthText2, (11) _MonthText3, (12) _MonthText4, (13) _MonthText5, (14) _MonthText6, (15) _MonthText7, (16) _MonthText8, (17) _MonthText9, (18) _MonthText10, and (19) _MonthText11 properties. NOTE: the vendor states "Authenticated user involvement required," but authentication is not needed to attack a client machine that loads this control. Additional Analyst Notes: - CVE Program Container: References: - http://support.veritas.com/docs/300471 - http://securitytracker.com/id?1019525 - http://www.symantec.com/avcenter/security/Content/2008.02.29.html - http://seer.entsupport.sym
ytracker.com/id?1019525 - http://www.symantec.com/avcenter/security/Content/2008.02.29.html - http://seer.entsupport.symantec.com/docs/300471.htm - http://seer.support.veritas.com/docs/308669.htm - http://www.symantec.com/avcenter/security/Content/2008.02.28.html - http://www.vupen.com/english/advisories/2008/0718 - http://secunia.com/advisories/27885 - http://secunia.com/secunia_research/2007-101/ - http://www.securityfocus.com/bid/28008 - http://www.vupen.com/english/advisories/2008/2672
CVE ID: CVE-2007-6018 State: PUBLISHED Published: 2008-01-11T02:00:00 Last Updated: 2024-08-07T15:54:25.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP requests, which allows remote attackers to (1) delete arbitrary e-mail messages via a modified numeric ID or (2) "purge" deleted emails via a crafted email message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29186 - https://bugzilla.redhat.com/show_bug.cgi?id=428625 - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.htm
//bugzilla.redhat.com/show_bug.cgi?id=428625 - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39595 - http://cvs.horde.org/diff.php/groupware/docs/groupware/CHANGES?r1=1.17&r2=1.17.2.1&ty=h - http://lists.horde.org/archives/announce/2008/000365.html - http://lists.horde.org/archives/announce/2008/000360.html - http://secunia.com/advisories/34418 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00927.html - http://www.securityfocus.com/bid/27223 - http://lists.horde.org/archives/announce/2008/000366.html - http://cvs.horde.org/diff.php/groupware/docs/webmail/CHANGES?r1=1.12&r2=1.12.2.1
rg/archives/announce/2008/000366.html - http://cvs.horde.org/diff.php/groupware/docs/webmail/CHANGES?r1=1.12&r2=1.12.2.1&ty=h - http://secunia.com/secunia_research/2007-102/advisory/ - http://secunia.com/advisories/28020 - http://secunia.com/advisories/29185 - http://secunia.com/advisories/28546 - http://secunia.com/advisories/29184 - http://www.debian.org/security/2008/dsa-1470 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00888.html
CVE ID: CVE-2007-6019 State: PUBLISHED Published: 2008-04-09T21:00:00 Last Updated: 2024-08-07T15:54:25.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via an SWF file with a modified DeclareFunction2 Actionscript tag, which prevents an object from being instantiated properly. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29865 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10160 - http://secunia.com/advisories/30507 - http://www.securitytracker.com/id?1019810 - http://w
rg.mitre.oval%3Adef%3A10160 - http://secunia.com/advisories/30507 - http://www.securitytracker.com/id?1019810 - http://www.adobe.com/support/security/bulletins/apsb08-11.html - http://www.vupen.com/english/advisories/2008/1724/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/41717 - http://www.redhat.com/support/errata/RHSA-2008-0221.html - http://securityreason.com/securityalert/3805 - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://secunia.com/advisories/30430 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html - http://www.securityfocus.com/archive/1/490824/1
://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html - http://www.securityfocus.com/archive/1/490824/100/0/threaded - http://secunia.com/advisories/29763 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1 - http://www.securityfocus.com/archive/1/490623/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-08-021 - http://www.gentoo.org/security/en/glsa/glsa-200804-21.xml - http://www.vupen.com/english/advisories/2008/1697 - http://www.securityfocus.com/bid/28694 - http://www.us-cert.gov/cas/techalerts/TA08-100A.html
CVE ID: CVE-2007-6020 State: PUBLISHED Published: 2008-04-10T18:00:00 Last Updated: 2024-08-07T15:54:26.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in foliosr.dll in the Folio Flat File speed reader in Autonomy (formerly Verity) KeyView 10.3.0.0, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, allow remote attackers to execute arbitrary code via a long attribute value in a (1) DI, (2) FD, (3) FT, (4) JD, (5) JL, (6) LE, (7) OB, (8) OD, (9) OL, (10) PN, (11) PS, (12) PW, (13) RD, (14) QL, or (15) TS tag in a .fff file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/ad
L, or (15) TS tag in a .fff file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28140 - http://secunia.com/secunia_research/2007-106/advisory/ - http://secunia.com/advisories/29342 - http://secunia.com/advisories/27763 - http://www.symantec.com/avcenter/security/Content/2008.04.08e.html - http://secunia.com/advisories/28209 - http://www.vupen.com/english/advisories/2008/1156 - http://www.securityfocus.com/archive/1/490827/100/0/threaded - http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453 - http://www.securityfocus.com/bid/28454 - http://secunia.com/secunia_research/2007-105/advisory/ - http://www.securityfocus.com/archive/1/49082
us.com/bid/28454 - http://secunia.com/secunia_research/2007-105/advisory/ - http://www.securityfocus.com/archive/1/490829/100/0/threaded - http://secunia.com/advisories/28210 - http://www.securityfocus.com/archive/1/490830/100/0/threaded - http://www.securityfocus.com/archive/1/490831/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/41716 - http://www.vupen.com/english/advisories/2008/1154 - http://www.securitytracker.com/id?1019841 - http://securitytracker.com/id?1019805 - http://www.vupen.com/english/advisories/2008/1153 - http://secunia.com/secunia_research/2007-104/advisory/ - http://secunia.com/secunia_research/2007-107/advisory/
CVE ID: CVE-2007-6021 State: PUBLISHED Published: 2008-10-30T19:19:00 Last Updated: 2024-08-07T15:54:26.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Adobe PageMaker 7.0.1 and 7.0.2 allows user-assisted remote attackers to execute arbitrary code via a .PMD file with a crafted font structure. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2955 - http://secunia.com/advisories/27200 - http://www.securityfocus.com/archive/1/497901/100/0/threaded - http://www.securitytracker.com/id?1021119 - http://www.securityfocus.com/bid/31975 - http://www.adobe.com/support/security/advisories/apsa08-
acker.com/id?1021119 - http://www.securityfocus.com/bid/31975 - http://www.adobe.com/support/security/advisories/apsa08-10.html - http://secunia.com/secunia_research/2007-80/
CVE ID: CVE-2007-6025 State: PUBLISHED Published: 2007-11-19T22:00:00 Last Updated: 2024-08-07T15:54:25.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in driver_wext.c in wpa_supplicant 0.6.0 and earlier allows remote attackers to cause a denial of service (crash) via crafted TSF data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26555 - https://bugzilla.redhat.com/show_bug.cgi?id=292991 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:245 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=442387
CVE ID: CVE-2007-6026 State: PUBLISHED Published: 2007-11-20T00:00:00 Last Updated: 2024-08-07T15:54:26.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file database file containing a column structure with a modified column count. NOTE: this might be the same issue as CVE-2005-0944. Additional Analyst Notes: - CVE Program Container: References: - http://dvlabs.tippingpoint.com/advisory/TPTI-08-04 - http://www.kb.cert.org/vuls/id/936529 - http://www.securityfoc
s: - http://dvlabs.tippingpoint.com/advisory/TPTI-08-04 - http://www.kb.cert.org/vuls/id/936529 - http://www.securityfocus.com/archive/1/483858/100/100/threaded - http://www.securityfocus.com/archive/1/483888/100/100/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-028 - http://securityreason.com/securityalert/3376 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5578 - http://www.securityfocus.com/archive/1/492019/100/0/threaded - http://www.securityfocus.com/bid/28398 - http://marc.info/?l=bugtraq&m=121129490723574&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-November/058531.html - http://www.s
traq&m=121129490723574&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-November/058531.html - http://www.securityfocus.com/bid/26468 - http://www.securityfocus.com/archive/1/483887/100/100/threaded - http://www.us-cert.gov/cas/techalerts/TA08-134A.html - http://ruder.cdut.net/blogview.asp?logID=227 - http://www.securitytracker.com/id?1018976 - http://marc.info/?l=bugtraq&m=121129490723574&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38499 - http://www.securityfocus.com/archive/1/483797/100/0/threaded
CVE ID: CVE-2007-6027 State: PUBLISHED Published: 2007-11-20T01:00:00 Last Updated: 2024-08-07T15:54:26.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin.jjgallery.php in the Carousel Flash Image Gallery (com_jjgallery) component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38500 - https://www.exploit-db.com/exploits/4626 - http://www.securityfocus.com/bid/26471 - http://www.vupen.com/english/advisories/2007/3907
CVE ID: CVE-2007-6028 State: PUBLISHED Published: 2007-11-20T01:00:00 Last Updated: 2024-08-07T15:54:26.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the VSFlexGrid.VSFlexGridL ActiveX control in ComponentOne FlexGrid 7.1 Light allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long string in the (1) Text, (2) EditSelText, (3) EditText, and (4) CellFontName property values. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38507 - http://www.securityfocus.com/bid/26467 - http://marc.info/?l=full-disclosure&m=119517573408574&
/vulnerabilities/38507 - http://www.securityfocus.com/bid/26467 - http://marc.info/?l=full-disclosure&m=119517573408574&w=2
CVE ID: CVE-2007-6029 State: PUBLISHED Published: 2007-11-20T02:00:00Z Last Updated: 2024-09-16T16:33:53.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ClamAV 0.91.1 and 0.91.2 allows remote attackers to execute arbitrary code via a crafted e-mail message. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has been assigned for tracking purposes, but duplicates with other CVEs are difficult to determine. Additional Analyst Notes: - CVE Program Container: References: - http://wslabi.com/wabisabilabi/showBidInfo.do?code
ine. Additional Analyst Notes: - CVE Program Container: References: - http://wslabi.com/wabisabilabi/showBidInfo.do?code=ZD-00000069 - http://wabisabilabi.blogspot.com/2007/11/focus-on-clamav-remote-code-execution.html - http://www.securityfocus.com/bid/26463