Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
-cert.gov/cas/techalerts/TA07-355A.html - http://www.gentoo.org/security/en/glsa/glsa-200801-07.xml - http://www.redhat.com/support/errata/RHSA-2008-0221.html - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://jvn.jp/jp/JVN%2345675516/index.html - http://www.kb.cert.org/vuls/id/935737 - http://www.adobe.com/devnet/flashplayer/articles/fplayer9_security.html - http://secunia.com/advisories/30430 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html - http://www.securityfocus.com/bid/26929 - http://secunia.com/advisories/28161 - http://secunia.com/advisories/32759 - http://secunia.co
urityfocus.com/bid/26929 - http://secunia.com/advisories/28161 - http://secunia.com/advisories/32759 - http://secunia.com/advisories/29763 - http://www.redhat.com/support/errata/RHSA-2008-0945.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1 - http://www.redhat.com/support/errata/RHSA-2008-0980.html - http://www.vupen.com/english/advisories/2007/4258 - http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm - http://securitytracker.com/id?1019116 - http://www.securityfocus.com/bid/26966 - http://www.gentoo.org/security/en/glsa/glsa-200804-21.xml - http://www.vupen.com/english/advisories/2008/1697 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1
- http://www.vupen.com/english/advisories/2008/1697 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1 - http://secunia.com/advisories/32448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39129 - http://www.us-cert.gov/cas/techalerts/TA08-100A.html - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html - http://secunia.com/advisories/28213 - http://www.adobe.com/support/security/bulletins/apsb07-20.html
CVE ID: CVE-2007-6244 State: PUBLISHED Published: 2007-12-20T01:00:00 Last Updated: 2024-08-07T16:02:36.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Adobe Flash Player 9.x up to 9.0.48.0 and 8.x up to 8.0.35.0 allow remote attackers to inject arbitrary web script or HTML via (1) a SWF file that uses the asfunction: protocol or (2) the navigateToURL function when used with the Flash Player ActiveX Control in Internet Explorer. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00007.html - http://secunia.com/advisories/28157 - http://secunia.c
s.opensuse.org/opensuse-security-announce/2007-12/msg00007.html - http://secunia.com/advisories/28157 - http://secunia.com/advisories/30507 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39131 - http://secunia.com/advisories/28570 - http://www.securityfocus.com/bid/26960 - http://www.vupen.com/english/advisories/2008/1724/references - http://www.us-cert.gov/cas/techalerts/TA07-355A.html - http://www.gentoo.org/security/en/glsa/glsa-200801-07.xml - http://crypto.stanford.edu/advisories/CVE-2007-6244/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10210 - http://www.securityfocus.com/bid/26929 - http://secunia.com/advisories/28161 - http://www.
rg.mitre.oval%3Adef%3A10210 - http://www.securityfocus.com/bid/26929 - http://secunia.com/advisories/28161 - http://www.redhat.com/support/errata/RHSA-2007-1126.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39130 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1 - http://www.vupen.com/english/advisories/2007/4258 - http://securitytracker.com/id?1019116 - http://www.securityfocus.com/bid/26949 - http://www.kb.cert.org/vuls/id/758769 - http://secunia.com/advisories/28213 - http://www.adobe.com/support/security/bulletins/apsb07-20.html
CVE ID: CVE-2007-6245 State: PUBLISHED Published: 2007-12-20T01:00:00 Last Updated: 2024-08-07T16:02:34.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 allows remote attackers to modify HTTP headers for client requests and conduct HTTP Request Splitting attacks. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00007.html - http://secunia.com/advisories/28157 - http://secunia.com/advisories/30507 - http://secunia.com/advisories/28570 - http://www.vupen.com/english/advisories/2008/1724/references - http://www.us-cert.g
ttp://secunia.com/advisories/28570 - http://www.vupen.com/english/advisories/2008/1724/references - http://www.us-cert.gov/cas/techalerts/TA07-355A.html - http://www.gentoo.org/security/en/glsa/glsa-200801-07.xml - http://www.securityfocus.com/bid/26929 - http://secunia.com/advisories/28161 - http://www.redhat.com/support/errata/RHSA-2007-1126.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1 - http://www.vupen.com/english/advisories/2007/4258 - http://securitytracker.com/id?1019116 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9546 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39134 - http://www.securityfocus.com/bid
.mitre.oval%3Adef%3A9546 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39134 - http://www.securityfocus.com/bid/26969 - http://secunia.com/advisories/28213 - http://www.adobe.com/support/security/bulletins/apsb07-20.html
CVE ID: CVE-2007-6246 State: PUBLISHED Published: 2007-12-20T01:00:00 Last Updated: 2024-08-07T16:02:35.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0, when running on Linux, uses insecure permissions for memory, which might allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00007.html - http://secunia.com/advisories/28157 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39136 - http://secunia.com/advisories/30507 - https://oval.cisecurity.org/repository/search/definition/ov
ulnerabilities/39136 - http://secunia.com/advisories/30507 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10519 - http://secunia.com/advisories/28570 - http://www.vupen.com/english/advisories/2008/1724/references - http://www.us-cert.gov/cas/techalerts/TA07-355A.html - http://www.gentoo.org/security/en/glsa/glsa-200801-07.xml - http://www.securityfocus.com/bid/26929 - http://secunia.com/advisories/28161 - http://www.redhat.com/support/errata/RHSA-2007-1126.html - http://www.securityfocus.com/bid/26965 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1 - http://www.vupen.com/english/advisories/2007/4258 - http://securitytracker.com/id
h/document.do?assetkey=1-26-238305-1 - http://www.vupen.com/english/advisories/2007/4258 - http://securitytracker.com/id?1019116 - http://secunia.com/advisories/28213 - http://www.adobe.com/support/security/bulletins/apsb07-20.html
CVE ID: CVE-2007-6247 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-6249 State: PUBLISHED Published: 2007-12-15T01:00:00 Last Updated: 2024-08-07T16:02:36.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: etc-update in Portage before 2.1.3.11 on Gentoo Linux relies on the umask to set permissions for the merge file, often resulting in permissions weaker than those of the original files, which might allow local users to obtain sensitive information by reading the merge file. Additional Analyst Notes: - CVE Program Container: References: - http://sources.gentoo.org/viewcvs.py/portage?rev=7799&view=rev - http://secunia.com/advisories/28094 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39035 - http://www.securityfocus.com/
ecunia.com/advisories/28094 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39035 - http://www.securityfocus.com/bid/26864 - http://bugs.gentoo.org/show_bug.cgi?id=193589 - http://osvdb.org/42636 - http://www.securitytracker.com/id?1019097 - http://www.gentoo.org/security/en/glsa/glsa-200712-11.xml
CVE ID: CVE-2007-6250 State: PUBLISHED Published: 2008-01-09T23:00:00 Last Updated: 2024-08-07T16:02:35.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in AOL AOLMediaPlaybackControl (AOLMediaPlaybackControl.exe), as used by AmpX ActiveX control (AmpX.dll), might allow remote attackers to execute arbitrary code via the AppendFileToPlayList method. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39592 - http://secunia.com/advisories/28399 - http://www.securitytracker.com/id?1019173 - http://www.vupen.com/english/advisories/2008/0085 - http://www.securityfocus.com/bid/27207 - http:
cker.com/id?1019173 - http://www.vupen.com/english/advisories/2008/0085 - http://www.securityfocus.com/bid/27207 - http://www.kb.cert.org/vuls/id/568681
CVE ID: CVE-2007-6252 State: PUBLISHED Published: 2008-03-03T18:00:00 Last Updated: 2024-08-07T16:02:35.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the Learn2 Corporation STRunner (aka Street Technologies) ActiveX control in iestm32.dll allow remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/524857 - http://www.securityfocus.com/bid/28058 - http://secunia.com/advisories/29195 - http://www.vupen.com/english/advisories/2008/0733 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40973
CVE ID: CVE-2007-6253 State: PUBLISHED Published: 2008-03-12T00:00:00 Last Updated: 2024-08-07T16:02:35.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Adobe Form Designer 5.0 and Form Client 5.0 allow remote attackers to execute arbitrary code via unknown vectors in the (1) Adobe File Dialog Button (FileDlg.dll) and the (2) Adobe Copy to Server Object (SvrCopy.dll) ActiveX controls. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb08-09.html - http://www.securityfocus.com/bid/28210 - http://secunia.com/advisories/29330 - http://www.securitytracker.com/id?1019601 - http://www.kb.c
yfocus.com/bid/28210 - http://secunia.com/advisories/29330 - http://www.securitytracker.com/id?1019601 - http://www.kb.cert.org/vuls/id/362849 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41142 - http://www.vupen.com/english/advisories/2008/0863/references
CVE ID: CVE-2007-6254 State: PUBLISHED Published: 2008-03-20T00:00:00 Last Updated: 2024-08-07T16:02:36.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the SAP Business Objects BusinessObjects RptViewerAX ActiveX control in RptViewerAX.dll in Business Objects 6.5 before CHF74 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28292 - http://www.securitytracker.com/id?1019668 - http://www.vupen.com/english/advisories/2008/0927/references - http://www.kb.cert.org/vuls/id/MIMG-732R7X - http://secunia.com/advisories/29437 - http:
visories/2008/0927/references - http://www.kb.cert.org/vuls/id/MIMG-732R7X - http://secunia.com/advisories/29437 - http://www.kb.cert.org/vuls/id/329673 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41256
CVE ID: CVE-2007-6255 State: PUBLISHED Published: 2008-04-23T10:00:00 Last Updated: 2024-08-07T16:02:36.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Microsoft HeartbeatCtl ActiveX control in HRTBEAT.OCX allows remote attackers to execute arbitrary code via the Host argument to an unspecified method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28882 - http://osvdb.org/44652 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41940 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-069 - http://www.kb.cert.org/vuls/id/570089
CVE ID: CVE-2007-6256 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-6258 State: PUBLISHED Published: 2008-02-18T23:00:00 Last Updated: 2024-08-07T16:02:35.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the legacy mod_jk2 2.0.3-DEV and earlier Apache module allow remote attackers to execute arbitrary code via a long (1) Host header, or (2) Hostname within a Host header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/487983/100/100/threaded - http://www.vupen.com/english/advisories/2008/0572 - http://www.securityfocus.com/bid/27752 - http://www.ioactive.com/pdfs/mod_jk2.pdf - https://www.exploit-db.com/exploits/5330 - http://secur
focus.com/bid/27752 - http://www.ioactive.com/pdfs/mod_jk2.pdf - https://www.exploit-db.com/exploits/5330 - http://securityreason.com/securityalert/3661 - http://www.kb.cert.org/vuls/id/771937 - http://www.ioactive.com/vulnerabilities/mod_jk2LegacyBufferOverflowAdvisory.pdf - https://www.exploit-db.com/exploits/5386
CVE ID: CVE-2007-6260 State: PUBLISHED Published: 2007-12-06T02:00:00 Last Updated: 2024-08-07T16:02:35.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation process for Oracle 10g and llg uses accounts with default passwords, which allows remote attackers to obtain login access by connecting to the Listener. NOTE: at the end of the installation, if performed using the Database Configuration Assistant (DBCA), most accounts are disabled or their passwords are changed. Additional Analyst Notes: - CVE Program Container: References: - http://www.davidlitchfield.com/blog/archives/00000030.htm - http://osvdb.org/43673 - http://securityreason.com/securityalert/3419 - http
litchfield.com/blog/archives/00000030.htm - http://osvdb.org/43673 - http://securityreason.com/securityalert/3419 - http://www.securityfocus.com/bid/26425 - http://www.securityfocus.com/archive/1/483652/100/200/threaded - http://www.oracle.com/technology/deploy/security/pdf/twp_security_checklist_db_database_20071108.pdf
CVE ID: CVE-2007-6261 State: PUBLISHED Published: 2007-12-06T02:00:00 Last Updated: 2024-08-07T16:02:35.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the load_threadstack function in the Mach-O loader (mach_loader.c) in the xnu kernel in Apple Mac OS X 10.4 through 10.5.1 allows local users to cause a denial of service (infinite loop) via a crafted Mach-O binary. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27884 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38854 - http://www.securityfocus.com/bid/26700 - http://www.digit-labs.org/files/exploits/xnu-macho-dos.c - http://www.vupen.com/english/adv
ecurityfocus.com/bid/26700 - http://www.digit-labs.org/files/exploits/xnu-macho-dos.c - http://www.vupen.com/english/advisories/2007/4095
CVE ID: CVE-2007-6262 State: PUBLISHED Published: 2007-12-06T02:00:00 Last Updated: 2024-08-07T16:02:35.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the (1) addTarget, (2) getVariable, or (3) setVariable function, resulting from a "bad initialized pointer," aka a "recursive plugin release vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38816 - http://www.videolan.org/sa0703.html - http://www.vupen.com/english/advisories/2007/4061 - http://ww
nerabilities/38816 - http://www.videolan.org/sa0703.html - http://www.vupen.com/english/advisories/2007/4061 - http://www.coresecurity.com/?action=item&id=2035 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14280 - http://secunia.com/advisories/27878 - http://www.securityfocus.com/archive/1/484563/100/0/threaded - http://www.securityfocus.com/bid/26675 - http://securityreason.com/securityalert/3420
CVE ID: CVE-2007-6263 State: PUBLISHED Published: 2007-12-06T15:00:00 Last Updated: 2024-08-07T16:02:36.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dataconn function in ftpd.c in netkit ftpd (netkit-ftpd) 0.17, when certain modifications to support SSL have been introduced, calls fclose on an uninitialized file stream, which allows remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via some types of FTP over SSL protocol behavior, as demonstrated by breaking a passive FTP DATA connection in a way that triggers an error in the server's SSL_accept function. NOTE: the netkit ftp issue is covered by CVE-2007-5769. Addit
hat triggers an error in the server's SSL_accept function. NOTE: the netkit ftp issue is covered by CVE-2007-5769. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26763 - http://secunia.com/advisories/28697 - http://www.gentoo.org/security/en/glsa/glsa-200801-17.xml - http://marc.info/?l=full-disclosure&m=119704348003382&w=2 - http://bugs.gentoo.org/show_bug.cgi?id=199206 - http://osvdb.org/41191
CVE ID: CVE-2007-6265 State: PUBLISHED Published: 2007-12-07T11:00:00 Last Updated: 2024-08-07T16:02:35.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in avast! 4 Home and Professional Editions before 4.7.1098 allows remote attackers to have an unknown impact via a crafted TAR archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26702 - http://secunia.com/advisories/27929 - http://www.vupen.com/english/advisories/2007/4097 - http://www.avast.com/eng/avast-4-home_pro-revision-history.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/38877
CVE ID: CVE-2007-6266 State: PUBLISHED Published: 2007-12-07T11:00:00 Last Updated: 2024-08-07T16:02:36.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in bcoos 1.0.10 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the gid parameter to modules/arcade/index.php in a show_stats action, or the lid parameter to (2) modules/myalbum/ratephoto.php or (3) modules/mylinks/ratelink.php, different vectors than CVE-2007-5104. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26629 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36752 - http://secunia.com/advisories/
ecurityfocus.com/bid/26629 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36752 - http://secunia.com/advisories/26945 - http://lostmon.blogspot.com/2007/11/bcoops-sql-injection-and-cross-site.html
CVE ID: CVE-2007-6267 State: PUBLISHED Published: 2007-12-07T11:00:00 Last Updated: 2024-08-07T16:02:35.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix EdgeSight 4.2 and 4.5 for Presentation Server, EdgeSight 4.2 and 4.5 for Endpoints, and EdgeSight for NetScaler 1.0 and 1.1 do not properly store database credentials in configuration files, which allows local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX115281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38861 - http://www.vupen.com/english/advisories/2007/4091 - http://www.securitytracker.com/id?1019050 - http://w
ilities/38861 - http://www.vupen.com/english/advisories/2007/4091 - http://www.securitytracker.com/id?1019050 - http://www.securityfocus.com/bid/26705 - http://secunia.com/advisories/27935
CVE ID: CVE-2007-6268 State: PUBLISHED Published: 2007-12-07T11:00:00 Last Updated: 2024-08-07T16:02:36.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in pages/default.aspx in Absolute News Manager.NET 5.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the template parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.procheckup.com/Vulnerability_PR07-39.php - http://osvdb.org/40575 - http://www.securityfocus.com/bid/26692 - http://www.xigla.com/news/default.aspx - http://www.xigla.com/security/ANMNET51-SecurityUpdate20071128.zip - http://marc.info/?l=bugtraq&m=119678724111351&w=2 - htt
p://www.xigla.com/security/ANMNET51-SecurityUpdate20071128.zip - http://marc.info/?l=bugtraq&m=119678724111351&w=2 - http://secunia.com/advisories/27923 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38870
CVE ID: CVE-2007-6269 State: PUBLISHED Published: 2007-12-07T11:00:00 Last Updated: 2024-08-07T16:02:36.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in xlaabsolutenm.aspx in Absolute News Manager.NET 5.1 allow remote attackers to execute arbitrary SQL commands via the (1) z, (2) pz, (3) ord, and (4) sort parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.procheckup.com/Vulnerability_PR07-39.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/38871 - http://osvdb.org/40576 - http://www.xigla.com/news/default.aspx - http://www.xigla.com/security/ANMNET51-SecurityUpdate20071128.zip - http://www
http://www.xigla.com/news/default.aspx - http://www.xigla.com/security/ANMNET51-SecurityUpdate20071128.zip - http://www.securityfocus.com/bid/26692 - http://marc.info/?l=bugtraq&m=119678724111351&w=2 - http://secunia.com/advisories/27923
CVE ID: CVE-2007-6270 State: PUBLISHED Published: 2007-12-07T11:00:00 Last Updated: 2024-08-07T16:02:36.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Absolute News Manager.NET 5.1 allow remote attackers to inject arbitrary web script or HTML via the (1) rmore parameter to xlaabsolutenm.aspx and the (2) template parameter to pages/default.aspx. Additional Analyst Notes: - CVE Program Container: References: - http://www.procheckup.com/Vulnerability_PR07-39.php - http://www.xigla.com/news/default.aspx - http://www.securityfocus.com/bid/26692 - http://osvdb.org/40578 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38
ttp://www.securityfocus.com/bid/26692 - http://osvdb.org/40578 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38872 - http://osvdb.org/40577 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38873 - http://marc.info/?l=bugtraq&m=119678724111351&w=2 - http://secunia.com/advisories/27923
CVE ID: CVE-2007-6271 State: PUBLISHED Published: 2007-12-07T11:00:00 Last Updated: 2024-08-07T16:02:35.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute News Manager.NET 5.1 allows remote attackers to obtain sensitive information via a direct request to getpath.aspx, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.procheckup.com/Vulnerability_PR07-39.php - http://www.securityfocus.com/bid/26692 - http://securityreason.com/securityalert/3421 - http://www.securityfocus.com/archive/1/484560/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/38874
CVE ID: CVE-2007-6272 State: PUBLISHED Published: 2007-12-07T11:00:00 Last Updated: 2024-08-07T16:02:36.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in Joomla! 1.5 RC3 allow remote attackers to execute arbitrary SQL commands via (1) the view parameter to the com_content component, (2) the task parameter to the com_search component, or (3) the option parameter in a search action to the com_search component. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/484603/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/38867 - http://www.securityfocus.com/b