Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-3586 State: PUBLISHED Published: 2007-07-05T20:00:00 Last Updated: 2024-08-07T14:21:36.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple direct static code injection vulnerabilities in MyCMS 0.9.8 and earlier allow remote attackers to inject arbitrary PHP code into (1) a _score.txt file via the score parameter, or (2) a _setby.txt file via a login cookie, which is then included by games.php. NOTE: programs that use games.php might include (a) snakep.php, (b) tetrisp.php, and possibly other site-specific files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35254 - http://osvdb.org/4
: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35254 - http://osvdb.org/45778 - https://www.exploit-db.com/exploits/4144 - http://www.securityfocus.com/bid/24757
CVE ID: CVE-2007-3587 State: PUBLISHED Published: 2007-07-05T20:00:00 Last Updated: 2024-08-07T14:21:36.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyCMS 0.9.8 and earlier allows remote attackers to gain privileges via the admin cookie parameter, as demonstrated by a post to admin/settings.php that injects PHP code into settings.inc, which can then be executed via a direct request to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45779 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35254 - https://www.exploit-db.com/exploits/4145 - http://www.securityfocus.com/archive/1/484064/100/100/threaded - http://www.securityfocu
.exploit-db.com/exploits/4145 - http://www.securityfocus.com/archive/1/484064/100/100/threaded - http://www.securityfocus.com/archive/1/484111/100/100/threaded - http://www.securityfocus.com/bid/24757
CVE ID: CVE-2007-3588 State: PUBLISHED Published: 2007-07-05T20:00:00 Last Updated: 2024-08-07T14:21:36.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in reply.php in VBZooM 1.12 allows remote attackers to execute arbitrary SQL commands via the UserID parameter to sub-join.php. NOTE: this may be the same as CVE-2006-3691.4. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35171 - http://securityreason.com/securityalert/2861 - http://www.securityfocus.com/archive/1/472510/100/0/threaded
CVE ID: CVE-2007-3589 State: PUBLISHED Published: 2007-07-05T22:00:00 Last Updated: 2024-08-07T14:21:36.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in b1gbb 2.24.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) showthread.php or (2) showboard.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35129 - http://www.securityfocus.com/bid/24696 - http://osvdb.org/38950 - http://osvdb.org/38951 - https://www.exploit-db.com/exploits/4122
CVE ID: CVE-2007-3590 State: PUBLISHED Published: 2007-07-05T22:00:00 Last Updated: 2024-08-07T14:21:36.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in visitenkarte.php in b1gBB 2.24.0 allows remote attackers to inject arbitrary web script or HTML via the user parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24698 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35131 - https://www.exploit-db.com/exploits/4122 - http://osvdb.org/38937
CVE ID: CVE-2007-3591 State: PUBLISHED Published: 2007-07-06T18:00:00 Last Updated: 2024-08-07T14:21:36.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Profile.php in Elite Bulletin Board before 1.0.10 allows remote attackers to modify profile information via unspecified vectors related to "a remote form," probably related to direct requests and missing authorization checks. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25926 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35261 - http://sourceforge.net/project/shownotes.php?release_id=520558&group_id=175118 - http://osvdb.org/37819 - http://
5261 - http://sourceforge.net/project/shownotes.php?release_id=520558&group_id=175118 - http://osvdb.org/37819 - http://www.securityfocus.com/bid/24763
CVE ID: CVE-2007-3592 State: PUBLISHED Published: 2007-07-06T18:00:00 Last Updated: 2024-08-07T14:21:36.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: PM.php in Elite Bulletin Board before 1.0.10 allows remote authenticated users to delete arbitrary PM messages and conduct other attacks via modified id fields. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37820 - http://secunia.com/advisories/25926 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35262 - http://sourceforge.net/project/shownotes.php?release_id=520558&group_id=175118 - http://www.securityfocus.com/bid/24763
CVE ID: CVE-2007-3593 State: PUBLISHED Published: 2007-07-06T18:00:00 Last Updated: 2024-08-07T14:21:36.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine NetFlow Analyzer 5 allow remote attackers to inject arbitrary web script or HTML via the (1) alpha parameter in (a) netflow/jspui/applicationList.jsp, the (2) task parameter in (b) netflow/jspui/appConfig.jsp, the (3) view parameter in (c) netflow/jspui/index.jsp, and the (4) rtype parameter in (d) netflow/jspui/selectDevice.jsp and (e) netflow/jspui/customReport.jsp. NOTE: it was later reported that vector 3 also affects 7.5 build 7500. Additional Analyst Not
ow/jspui/customReport.jsp. NOTE: it was later reported that vector 3 also affects 7.5 build 7500. Additional Analyst Notes: - CVE Program Container: References: - http://lostmon.blogspot.com/2007/07/netflow-analizer-5-opmanager-7-multiple.html - http://osvdb.org/37827 - http://osvdb.org/37828 - http://osvdb.org/37830 - http://osvdb.org/37829 - http://osvdb.org/37826 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35263 - http://secunia.com/advisories/25947 - http://www.securityfocus.com/bid/24766
CVE ID: CVE-2007-3594 State: PUBLISHED Published: 2007-07-06T18:00:00 Last Updated: 2024-08-07T14:21:36.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in AdventNet ManageEngine OpManager 6 and 7 allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter in (a) ping.do and (b) traceRoute.do in map/; the (2) reportName, (3) displayName, and (4) selectedNode parameters to (c) reports/ReportViewAction.do; the (5) operation parameter to (d) admin/ServiceConfiguration.do; and the (6) selectedNode and (7) selectedTab parameters to (e) admin/DeviceAssociation.do. NOTE: the searchTerm parameter in Searc
) selectedNode and (7) selectedTab parameters to (e) admin/DeviceAssociation.do. NOTE: the searchTerm parameter in Search.do is already covered by CVE-2006-2343. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24767 - http://osvdb.org/38949 - http://osvdb.org/37825 - http://lostmon.blogspot.com/2007/07/netflow-analizer-5-opmanager-7-multiple.html - http://osvdb.org/38947 - http://osvdb.org/37821 - http://osvdb.org/38946 - http://osvdb.org/37824 - http://osvdb.org/37822 - http://osvdb.org/38945 - http://osvdb.org/38948 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35263 - http://osvdb.org/37823
CVE ID: CVE-2007-3595 State: REJECTED Published: 2007-07-06T18:00:00 Last Updated: 2007-12-06T10:00:00 Description: No description available.
CVE ID: CVE-2007-3596 State: PUBLISHED Published: 2007-07-06T18:00:00 Last Updated: 2024-08-07T14:21:36.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: inc/vul_check.inc in phpVideoPro before 0.8.8 permits non-alphanumeric characters in the sess_id parameter, which has unknown impact and remote attack vectors, probably cross-site scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - http://www.qumran.org/homes/izzy/software/pvp-dev/help/?topic=history - http://sourceforge.net/project/shownotes.php?release_id=518490&group_id=18639 - http://www.securityfocus.com/bid/24644 - http://secunia.com/advisories/25815 - http://phpvideopro.cvs.sourceforge.net/
- http://www.securityfocus.com/bid/24644 - http://secunia.com/advisories/25815 - http://phpvideopro.cvs.sourceforge.net/phpvideopro/phpvideopro/inc/vul_check.inc?r1=1.10&r2=1.11 - http://osvdb.org/36349 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35120
CVE ID: CVE-2007-3597 State: PUBLISHED Published: 2007-07-06T18:00:00 Last Updated: 2024-08-07T14:21:36.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Zen Cart 1.3.7 and earlier allows remote attackers to hijack web sessions by setting the Cookie parameter. Additional Analyst Notes: - CVE Program Container: References: - http://superb-east.dl.sourceforge.net/sourceforge/zencart/zen-cart-v1.3.7-admin-patch.zip - http://www.securityfocus.com/archive/1/472875/100/0/threaded - http://osvdb.org/37836 - http://securityreason.com/securityalert/2866 - http://sourceforge.net/project/shownotes.php?release_id=474574&group_id=83781 - http://secunia.com/
securityalert/2866 - http://sourceforge.net/project/shownotes.php?release_id=474574&group_id=83781 - http://secunia.com/advisories/25942
CVE ID: CVE-2007-3598 State: PUBLISHED Published: 2007-07-06T19:00:00Z Last Updated: 2024-09-16T18:44:01.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in vtiger CRM before 5.0.3 allows remote authenticated users to obtain all users' names and e-mail addresses, and possibly change user settings, via a modified record parameter in a DetailView action to the Users module. NOTE: the vendor disputes the changing of settings, reporting that the attack vector results in a "You are not permitted to execute this Operation" error message in a 5.0.3 demo. Additional Analyst Notes: - CVE Program Container: References: - http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/2985 - ht
dditional Analyst Notes: - CVE Program Container: References: - http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/2985 - http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/2664 - http://forums.vtiger.com/viewtopic.php?p=38609 - http://trac.vtiger.com/cgi-bin/trac.cgi/report/9
CVE ID: CVE-2007-3599 State: PUBLISHED Published: 2007-07-06T19:00:00 Last Updated: 2024-08-07T14:21:36.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: vtiger CRM before 5.0.3 allows remote authenticated users to import and export the information for a contact even when they only have the View permission. Additional Analyst Notes: - CVE Program Container: References: - http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/2968 - http://osvdb.org/45781 - http://trac.vtiger.com/cgi-bin/trac.cgi/report/9
CVE ID: CVE-2007-3600 State: PUBLISHED Published: 2007-07-06T19:00:00 Last Updated: 2024-08-07T14:21:36.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPlugin in the wordintegration component in vtiger CRM before 5.0.3 allows remote authenticated users to bypass field level security permissions and merge arbitrary fields in an Email template, as demonstrated by the fields in the Contact module. Additional Analyst Notes: - CVE Program Container: References: - http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/3790 - http://osvdb.org/45784 - http://trac.vtiger.com/cgi-bin/trac.cgi/report/9 - http://trac.vtiger.com/cgi-bin/trac.cgi/changeset/10845
CVE ID: CVE-2007-3601 State: PUBLISHED Published: 2007-07-06T19:00:00 Last Updated: 2024-08-07T14:21:36.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: vtiger CRM before 5.0.3, when a migrated build is used, allows remote authenticated users to read certain other users' calendar activities via a (1) home page or (2) event list view. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45785 - http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/3990 - http://trac.vtiger.com/cgi-bin/trac.cgi/report/9
CVE ID: CVE-2007-3602 State: PUBLISHED Published: 2007-07-06T19:00:00Z Last Updated: 2024-09-17T01:10:29.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SOAP webservice in vtiger CRM before 5.0.3 does not ensure that authenticated accounts are active, which allows remote authenticated users with inactive accounts to access and modify data, as demonstrated by the Thunderbird plugin. Additional Analyst Notes: - CVE Program Container: References: - http://trac.vtiger.com/cgi-bin/trac.cgi/changeset/10245 - http://forums.vtiger.com/viewtopic.php?p=44233 - http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/3084 - http://trac.vtiger.com/cgi-bin/trac.cgi/report/9
CVE ID: CVE-2007-3603 State: PUBLISHED Published: 2007-07-06T19:00:00 Last Updated: 2024-08-07T14:21:36.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the dashboard (include/utils/SearchUtils.php) in vtiger CRM before 5.0.3 allows remote authenticated users to execute arbitrary SQL commands via the assigned_user_id parameter in a Potentials ListView action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/3196 - http://forums.vtiger.com/viewtopic.php?p=44717 - http://trac.vtiger.com/cgi-bin/trac.cgi/report/9 - http://osvdb.org/45782 - http://trac.vtiger.com/cgi-bin/trac
=44717 - http://trac.vtiger.com/cgi-bin/trac.cgi/report/9 - http://osvdb.org/45782 - http://trac.vtiger.com/cgi-bin/trac.cgi/changeset/10423
CVE ID: CVE-2007-3604 State: PUBLISHED Published: 2007-07-06T19:00:00 Last Updated: 2024-08-07T14:21:36.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: vtiger CRM before 5.0.3 allows remote authenticated users with access to the Analytics DashBoard menu to bypass data restrictions and read the pipeline of the entire organization, possibly involving modules/Potentials/Potentials.php. Additional Analyst Notes: - CVE Program Container: References: - http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/3196 - http://forums.vtiger.com/viewtopic.php?p=44717 - http://trac.vtiger.com/cgi-bin/trac.cgi/report/9 - http://trac.vtiger.com/cgi-bin/trac.cgi/changeset/10423 - http://osvdb.org/4578
c.vtiger.com/cgi-bin/trac.cgi/report/9 - http://trac.vtiger.com/cgi-bin/trac.cgi/changeset/10423 - http://osvdb.org/45783
CVE ID: CVE-2007-3605 State: PUBLISHED Published: 2007-07-06T19:00:00 Last Updated: 2024-08-07T14:21:36.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the kweditcontrol.kwedit.1 ActiveX control in FrontEnd\SapGui\kwedit.dll in the EnjoySAP SAP GUI allows remote attackers to execute arbitrary code via a long argument to the PrepareToPostHTML function. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37690 - http://www.securityfocus.com/bid/24772 - http://securityreason.com/securityalert/2873 - http://www.securityfocus.com/bid/24776 - http://secunia.com/advisories/25959 - https://exchange.xforce.ibmcloud.com/vulne
ttp://www.securityfocus.com/bid/24776 - http://secunia.com/advisories/25959 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35267 - https://www.exploit-db.com/exploits/4148 - http://www.securityfocus.com/archive/1/472887/100/0/threaded - http://www.vupen.com/english/advisories/2007/2449 - http://www.ngssoftware.com/advisories/high-risk-vulnerability-in-enjoysap-stack-overflow/
CVE ID: CVE-2007-3606 State: PUBLISHED Published: 2007-07-06T19:00:00 Last Updated: 2024-08-07T14:21:36.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the rfcguisink.rfcguisink.1 ActiveX control in the EnjoySAP SAP GUI, on systems using ASCII versions, allows remote attackers to execute arbitrary code via a long first argument to the LaunchGui function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24777 - http://osvdb.org/37689 - http://www.securityfocus.com/bid/24776 - http://secunia.com/advisories/25959 - https://www.exploit-db.com/exploits/4149 - http://www.vupen.com/english/advisories/2007
//secunia.com/advisories/25959 - https://www.exploit-db.com/exploits/4149 - http://www.vupen.com/english/advisories/2007/2449 - http://www.ngssoftware.com/advisories/high-risk-vulnerability-in-enjoysap-stack-overflow/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/35268
CVE ID: CVE-2007-3607 State: PUBLISHED Published: 2007-07-06T19:00:00 Last Updated: 2024-08-07T14:21:36.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to cause a denial of service (process crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2873 - http://osvdb.org/37688 - http://www.securityfocus.com/bid/24776 - https://www.exploit-db.com/exploits/4148 - http://www.securityfocus.com/archive/1/472887/100/0/threaded - https://www.exploit-db.com/exploits/4149 - http://www.ngssoftware.com/advi
tyfocus.com/archive/1/472887/100/0/threaded - https://www.exploit-db.com/exploits/4149 - http://www.ngssoftware.com/advisories/high-risk-vulnerability-in-enjoysap-stack-overflow/
CVE ID: CVE-2007-3608 State: PUBLISHED Published: 2007-07-06T19:00:00 Last Updated: 2024-08-07T14:21:36.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to create certain files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37687 - http://securityreason.com/securityalert/2873 - http://www.securityfocus.com/bid/24776 - https://www.exploit-db.com/exploits/4148 - http://www.securityfocus.com/archive/1/472887/100/0/threaded - https://www.exploit-db.com/exploits/4149 - http://www.ngssoftware.com/advisories/high-risk-vuln
/472887/100/0/threaded - https://www.exploit-db.com/exploits/4149 - http://www.ngssoftware.com/advisories/high-risk-vulnerability-in-enjoysap-stack-overflow/
CVE ID: CVE-2007-3609 State: PUBLISHED Published: 2007-07-06T19:00:00 Last Updated: 2024-08-07T14:21:36.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in eMeeting Online Dating Software 5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) b.php and (2) account/gallery.php, and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24786 - http://www.vupen.com/english/advisories/2007/2448 - https://www.exploit-db.com/exploits/4154 - http://osvdb.org/36363 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35274 - http://osvdb.org
m/exploits/4154 - http://osvdb.org/36363 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35274 - http://osvdb.org/36364 - http://secunia.com/advisories/25974 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35275
CVE ID: CVE-2007-3610 State: PUBLISHED Published: 2007-07-06T19:00:00 Last Updated: 2024-08-07T14:21:36.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in categories_type.php in phpVID 0.9.9 allows remote attackers to execute arbitrary SQL commands via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4153 - http://osvdb.org/35963 - http://www.securityfocus.com/bid/24788 - http://www.vupen.com/english/advisories/2007/2447 - http://secunia.com/advisories/25975 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35273
CVE ID: CVE-2007-3611 State: PUBLISHED Published: 2007-07-06T19:00:00 Last Updated: 2024-08-07T14:21:36.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin.php in VRNews 1.1.1, and possibly other 1.x versions, does not require authentication, which allows remote attackers to perform certain administrative actions via a direct request with a (1) edit, (2) add, (3) config, or (4) del value in the act parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4150 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35271 - http://osvdb.org/45787
CVE ID: CVE-2007-3612 State: PUBLISHED Published: 2007-07-06T19:00:00 Last Updated: 2024-08-07T14:21:36.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Visual IRC (ViRC) 2.0 allows remote IRC servers to execute arbitrary code via a long response to a JOIN command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25977 - http://www.securityfocus.com/bid/24798 - http://osvdb.org/37888 - http://www.vupen.com/english/advisories/2007/2467 - https://www.exploit-db.com/exploits/4152 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35276
CVE ID: CVE-2007-3613 State: PUBLISHED Published: 2007-07-06T19:00:00 Last Updated: 2024-08-07T14:21:36.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ADM:GETLOGFILE in SAP Internet Graphics Service (IGS) allows remote attackers to inject arbitrary web script or HTML via the PARAMS parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018339 - http://osvdb.org/36480 - http://www.securityfocus.com/archive/1/472889/100/0/threaded - http://www.securityfocus.com/bid/24775 - http://securityreason.com/securityalert/2865 - http://secunia.com/advisories/25950 - http://www.vupen.com/e
/bid/24775 - http://securityreason.com/securityalert/2865 - http://secunia.com/advisories/25950 - http://www.vupen.com/english/advisories/2007/2452 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35280 - http://www.ngssoftware.com/advisories/medium-risk-vulnerability-in-sap-internet-graphics-server/
CVE ID: CVE-2007-3614 State: PUBLISHED Published: 2007-07-06T19:00:00 Last Updated: 2024-08-07T14:21:36.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in waHTTP.exe (aka the SAP DB Web Server) in SAP DB, possibly 7.3 through 7.5, allow remote attackers to execute arbitrary code via (1) a certain cookie value; (2) a certain additional parameter, related to sapdbwa_GetQueryString; and other unspecified vectors related to "numerous other fields." Additional Analyst Notes: - CVE Program Container: References: - http://www.ngssoftware.com/advisories/critical-risk-vulnerability-in-sap-db-web-server-stack-overflow/ - http://www.securitytracker.
gssoftware.com/advisories/critical-risk-vulnerability-in-sap-db-web-server-stack-overflow/ - http://www.securitytracker.com/id?1018341 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35277 - http://www.securityfocus.com/bid/24773 - http://osvdb.org/37838 - http://www.securityfocus.com/archive/1/472891/100/0/threaded - http://securityreason.com/securityalert/2867 - http://www.kb.cert.org/vuls/id/679041 - http://www.vupen.com/english/advisories/2007/2453 - http://secunia.com/advisories/25954
CVE ID: CVE-2007-3615 State: PUBLISHED Published: 2007-07-06T19:00:00 Last Updated: 2024-08-07T14:21:36.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Communication Manager (aka ICMAN.exe or ICM) in SAP NetWeaver Application Server 6.x and 7.x, possibly only on Windows, allows remote attackers to cause a denial of service (process crash) via a URI of a certain length that contains a sap-isc-key parameter, related to configuration of a web cache. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0105.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35278 - http://www.securityfocus