Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-3905 State: PUBLISHED Published: 2007-07-19T17:00:00 Last Updated: 2024-08-07T14:37:05.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Zoph before 0.7.0.1 might allow remote attackers to execute arbitrary SQL commands via the _order parameter to (1) photos.php and (2) edit_photos.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35446 - http://sourceforge.net/project/shownotes.php?release_id=523104&group_id=69353 - http://secunia.com/advisories/27303 - http://www.securityfocus.com/bid/24933 - http://www.debian.org/security/2007/dsa-1389 - http://secunia.com
ories/27303 - http://www.securityfocus.com/bid/24933 - http://www.debian.org/security/2007/dsa-1389 - http://secunia.com/advisories/26077
CVE ID: CVE-2007-3906 State: PUBLISHED Published: 2007-07-19T17:00:00 Last Updated: 2024-08-07T14:37:04.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Kaspersky Anti-Virus for Check Point FireWall-1 before Critical Fix 1 (5.5.161.0) might allow attackers to cause a denial of service (kernel hang) via unspecified vectors. NOTE: it is not clear whether there is an attacker role. Additional Analyst Notes: - CVE Program Container: References: - http://support.kaspersky.com/checkpoint?qid=208279464 - http://www.securityfocus.com/bid/24932 - http://secunia.com/advisories/26064 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35454 - http://osvdb.
24932 - http://secunia.com/advisories/26064 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35454 - http://osvdb.org/36127 - http://www.vupen.com/english/advisories/2007/2561
CVE ID: CVE-2007-3907 State: PUBLISHED Published: 2007-07-19T17:00:00 Last Updated: 2024-08-07T14:37:05.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in login.pl in LedgerSMB 1.2.0 through 1.2.6 allows remote attackers to bypass authentication and perform certain actions as an arbitrary user via unspecified vectors involving a URL with a redirect parameter value, along with a callback parameter containing an escaped URL that specifies the action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/473993/100/0/threaded - http://sourceforge.net/project/shownotes.php?release_id=523576&group_id=17596
ocus.com/archive/1/473993/100/0/threaded - http://sourceforge.net/project/shownotes.php?release_id=523576&group_id=175965 - http://secunia.com/advisories/26121 - http://www.vupen.com/english/advisories/2007/2576 - http://www.securityfocus.com/archive/1/473987/100/0/threaded - http://www.ledgersmb.org/node/52 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35507 - http://www.securityfocus.com/bid/24940
CVE ID: CVE-2007-3908 State: PUBLISHED Published: 2007-07-19T17:00:00 Last Updated: 2024-08-07T14:37:04.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP ServiceGuard for Linux for Red Hat Enterprise Linux (RHEL) 2.1 SG A.11.14.04 through A.11.14.06; RHEL 3.0 SG A.11.16.04 through A.11.16.10; and ServiceGuard Cluster Object Manager B.03.01.02 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2007-0980. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/473783/100/0/threaded - http://www.securitytracker.com/id?1018395 - http://www.securityfocus.com
rityfocus.com/archive/1/473783/100/0/threaded - http://www.securitytracker.com/id?1018395 - http://www.securityfocus.com/archive/1/473783/100/0/threaded - http://osvdb.org/38159 - http://securityreason.com/securityalert/2907 - http://secunia.com/advisories/26051 - http://www.securityfocus.com/bid/24920 - http://www.vupen.com/english/advisories/2007/2544
CVE ID: CVE-2007-3909 State: PUBLISHED Published: 2007-07-19T17:00:00 Last Updated: 2024-08-07T14:37:05.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Bandersnatch 0.4 allow remote attackers to execute arbitrary SQL commands via the (1) date and (2) limit parameters to index.php, and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26202 - http://www.securityfocus.com/bid/25094 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35406 - http://www.osvdb.org/38268 - http://www.portcullis-security.com/uplds/advisories/Bandersnatch%20-%2007-006.txt
CVE ID: CVE-2007-3910 State: PUBLISHED Published: 2007-07-19T17:00:00 Last Updated: 2024-08-07T14:37:05.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Bandersnatch 0.4 allows remote attackers to inject arbitrary JavaScript via a Jabber resource name and possibly other data items, which are stored in conversation logs. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35407 - http://www.portcullis-security.com/182.php - http://secunia.com/advisories/26202 - http://www.osvdb.org/38269 - http://www.securityfocus.com/bid/25094 - http://www.portcullis-security.com/uplds
s/26202 - http://www.osvdb.org/38269 - http://www.securityfocus.com/bid/25094 - http://www.portcullis-security.com/uplds/advisories/Bandersnatch%20-%2007-004.txt
CVE ID: CVE-2007-3911 State: PUBLISHED Published: 2007-07-30T17:00:00 Last Updated: 2024-08-07T14:37:05.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in (1) clsscheduler.exe (aka scheduler client) and (2) srvscheduler.exe (aka scheduler server) in BakBone NetVault Reporter 3.5 before Update4 allow remote attackers to execute arbitrary code via long filename arguments in HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018460 - http://secunia.com/advisories/26222 - http://www.securityfocus.com/archive/1/474626/100/0/threaded - http://www.vupen.com/english/advisories/2007/26
s/26222 - http://www.securityfocus.com/archive/1/474626/100/0/threaded - http://www.vupen.com/english/advisories/2007/2658 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35588 - http://www.zerodayinitiative.com/advisories/ZDI-07-044.html - http://www.securityfocus.com/bid/25068 - http://securityreason.com/securityalert/2954
CVE ID: CVE-2007-3912 State: PUBLISHED Published: 2007-09-10T17:00:00 Last Updated: 2024-08-07T14:37:05.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: checkrestart in debian-goodies before 0.34 allows local users to gain privileges via shell metacharacters in the name of the executable file for a running process. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36475 - http://secunia.com/advisories/27079 - http://www.debian.org/security/2008/dsa-1527 - http://www.ubuntu.com/usn/usn-526-1 - http://www.securityfocus.com/bid/25569 - http://osvdb.org/40483 - http://secunia.com/advisories/26675 - http://bugs.deb
http://www.securityfocus.com/bid/25569 - http://osvdb.org/40483 - http://secunia.com/advisories/26675 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=440411
CVE ID: CVE-2007-3913 State: PUBLISHED Published: 2007-09-06T22:00:00 Last Updated: 2024-08-07T14:37:06.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Gforge before 3.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25585 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36505 - http://secunia.com/advisories/26723 - http://www.debian.org/security/2007/dsa-1369
CVE ID: CVE-2007-3915 State: PUBLISHED Published: 2019-11-07T21:38:34 Last Updated: 2024-08-07T14:37:05.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mondo 2.24 has insecure handling of temporary files. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2007-3915
CVE ID: CVE-2007-3916 State: PUBLISHED Published: 2007-09-24T00:00:00 Last Updated: 2024-08-07T14:37:05.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: The main function in skkdic-expr.c in SKK Tools 1.2 allows local users to overwrite or delete arbitrary files via a symlink attack on a skkdic$PID temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://security-tracker.debian.net/tracker/CVE-2007-3916 - http://secunia.com/advisories/26866 - http://www.securityfocus.com/bid/25739 - http://security.gentoo.org/glsa/glsa-200710-10.xml - http://osvdb.org/40557 - http://bugs.gentoo.org/show_bug.cgi?id=193121 - http://secunia.com/advisories/27247 - ht
.xml - http://osvdb.org/40557 - http://bugs.gentoo.org/show_bug.cgi?id=193121 - http://secunia.com/advisories/27247 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36699
CVE ID: CVE-2007-3917 State: PUBLISHED Published: 2007-10-11T10:00:00 Last Updated: 2024-08-07T14:37:05.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: The multiplayer engine in Wesnoth 1.2.x before 1.2.7 and 1.3.x before 1.3.9 allows remote servers to cause a denial of service (crash) via a long message with multibyte characters that can produce an invalid UTF-8 string after it is truncated, which triggers an uncaught exception, involving the truncate_message function in server/server.cpp. NOTE: this issue affects both clients and servers. Additional Analyst Notes: - CVE Program Container: References: - http://www.wesnoth.org/forum/viewtopic.php?p=256618 - https://bugzilla.r
t Notes: - CVE Program Container: References: - http://www.wesnoth.org/forum/viewtopic.php?p=256618 - https://bugzilla.redhat.com/show_bug.cgi?id=324841 - http://www.wesnoth.org/forum/viewtopic.php?t=18188 - http://osvdb.org/41711 - http://www.securityfocus.com/bid/25995 - http://svn.gna.org/viewcvs/wesnoth/tags/1.2.7/changelog?rev=20982&view=download - http://secunia.com/advisories/27218 - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00194.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/37047 - http://secunia.com/advisories/27241 - http://www.debian.org/security/2007/dsa-1386 - http://www.vupen.com/english/advisories/2007/3449 - http://secunia.com/advi
tp://www.debian.org/security/2007/dsa-1386 - http://www.vupen.com/english/advisories/2007/3449 - http://secunia.com/advisories/27137
CVE ID: CVE-2007-3918 State: PUBLISHED Published: 2007-10-05T22:00:00 Last Updated: 2024-08-07T14:37:04.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in account/verify.php in GForge 4.6b2 allows remote attackers to inject arbitrary web script or HTML via the confirm_hash parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25923 - http://gforge.org/tracker/?func=detail&atid=105&aid=3094&group_id=1 - http://www.debian.org/security/2007/dsa-1383 - http://www.vupen.com/english/advisories/2007/3356 - http://gforge.org/scm/viewvc.php/trunk/gforge/www/account/verify.php?root=gforge&r1
n.com/english/advisories/2007/3356 - http://gforge.org/scm/viewvc.php/trunk/gforge/www/account/verify.php?root=gforge&r1=5967&r2=6092 - http://secunia.com/advisories/27046 - http://secunia.com/advisories/27042
CVE ID: CVE-2007-3919 State: PUBLISHED Published: 2007-10-28T16:00:00 Last Updated: 2024-08-07T14:37:05.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: (1) xenbaked and (2) xenmon.py in Xen 3.1 and earlier allow local users to truncate arbitrary files via a symlink attack on /tmp/xenq-shm. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3621 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:203 - http://secunia.com/advisories/27408 - http://www.redhat.com/support/errata/RHSA-2008-0194.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9913 - http://www.security
html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9913 - http://www.securitytracker.com/id?1018859 - http://osvdb.org/41343 - http://secunia.com/advisories/27486 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37403 - http://secunia.com/advisories/29963 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00004.html - http://www.securityfocus.com/bid/26190 - http://secunia.com/advisories/27389 - http://secunia.com/advisories/27497 - http://www.debian.org/security/2007/dsa-1395 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=447795 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00075.html -
cgi-bin/bugreport.cgi?bug=447795 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00075.html - http://osvdb.org/41342
CVE ID: CVE-2007-3920 State: PUBLISHED Published: 2007-10-29T21:00:00 Last Updated: 2024-08-07T14:37:05.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an Alt-Tab sequence, a related issue to CVE-2007-3069. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=363061 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10192 - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg0
finition/oval%3Aorg.mitre.oval%3Adef%3A10192 - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00841.html - http://www.ubuntu.com/usn/usn-537-2 - https://bugzilla.redhat.com/show_bug.cgi?id=357071 - http://secunia.com/advisories/30715 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37410 - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00002.html - http://www.ubuntu.com/usn/usn-537-1 - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00811.html - http://www.securityfocus.com/bid/26188 - http://www.redhat.com/support/errata/RHSA-2008-0485.html - http://secunia.com/advisories/27381 - http://secunia.com/advisories/28627 - ht
.com/support/errata/RHSA-2008-0485.html - http://secunia.com/advisories/27381 - http://secunia.com/advisories/28627 - http://secunia.com/advisories/30329
CVE ID: CVE-2007-3921 State: PUBLISHED Published: 2007-11-08T11:00:00 Last Updated: 2024-08-07T14:37:04.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: gforge 3.1 and 4.5.14 allows local users to truncate arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3773 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38329 - http://secunia.com/advisories/27586 - http://www.debian.org/security/2007/dsa-1402 - http://osvdb.org/42117 - http://secunia.com/advisories/27549 - http://www.securityfocus.com/bid/26373
CVE ID: CVE-2007-3922 State: PUBLISHED Published: 2007-07-21T00:00:00 Last Updated: 2024-08-07T14:37:05.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java Runtime Environment (JRE) Applet Class Loader in Sun JDK and JRE 5.0 Update 11 and earlier, 6 through 6 Update 1, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to violate the security model for an applet's outbound connections by connecting to certain localhost services running on the machine that loaded the applet. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2007-0818.html - http://secunia.com/advisories/26933
Container: References: - http://www.redhat.com/support/errata/RHSA-2007-0818.html - http://secunia.com/advisories/26933 - http://docs.info.apple.com/article.html?artnum=307177 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102995-1 - http://secunia.com/advisories/26314 - http://dev2dev.bea.com/pub/advisory/248 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.486841 - http://secunia.com/advisories/30805 - http://www.securitytracker.com/id?1018428 - http://support.avaya.com/elmodocs2/security/ASA-2007-322.htm - http://secunia.com/advisories/26369 - http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html - http://www.vupen.
unia.com/advisories/26369 - http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html - http://www.vupen.com/english/advisories/2007/2573 - http://secunia.com/advisories/26645 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35491 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01269450 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01269450 - http://www.vupen.com/english/advisories/2007/4224 - http://www.vupen.com/english/advisories/2007/3861 - http://www.vupen.com/english/advisories/2007/3009 - http://secunia.com/advisories/27266 - http://www.novell.com/linux/security/advisories/2007_56_ibmjava.html - http://www.gent
://secunia.com/advisories/27266 - http://www.novell.com/linux/security/advisories/2007_56_ibmjava.html - http://www.gentoo.org/security/en/glsa/glsa-200709-15.xml - http://www.securityfocus.com/bid/25054 - http://secunia.com/advisories/28115 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10387 - http://www.redhat.com/support/errata/RHSA-2007-0829.html - http://secunia.com/advisories/26631 - http://secunia.com/advisories/27635 - http://www.redhat.com/support/errata/RHSA-2008-0133.html
CVE ID: CVE-2007-3923 State: PUBLISHED Published: 2007-07-21T00:00:00 Last Updated: 2024-08-07T14:37:05.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Common Internet File System (CIFS) optimization in Cisco Wide Area Application Services (WAAS) 4.0.7 and 4.0.9, as used by Cisco WAE appliance and the NM-WAE-502 network module, when Edge Services are configured, allows remote attackers to cause a denial of service (loss of service) via a flood of TCP SYN packets to port (1) 139 or (2) 445. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-sa-20070718-waas.shtml - http://www.vupen.com/english/advisories/2007/2572 -
http://www.cisco.com/warp/public/707/cisco-sa-20070718-waas.shtml - http://www.vupen.com/english/advisories/2007/2572 - http://www.securityfocus.com/bid/24956 - http://www.osvdb.org/36120 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35477 - http://www.securitytracker.com/id?1018416 - http://secunia.com/advisories/26122
CVE ID: CVE-2007-3924 State: PUBLISHED Published: 2007-07-21T00:00:00Z Last Updated: 2024-09-17T00:55:56.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Netscape installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a -chrome argument to the navigatorurl URI, which are inserted into the command line that is created when invoking netscape.exe, a related issue to CVE-2007-3670. NOTE: there has been debate about whether the issue is in Internet Explorer or Netscape. As of 20070
e to CVE-2007-3670. NOTE: there has been debate about whether the issue is in Internet Explorer or Netscape. As of 20070713, it is CVE's opinion that IE appears to not properly delimit the URL argument when invoking Netscape; this issue could arise with other protocol handlers in IE. Additional Analyst Notes: - CVE Program Container: References: - http://sla.ckers.org/forum/read.php?3%2C13732%2C13739 - http://secunia.com/advisories/26082
CVE ID: CVE-2007-3925 State: PUBLISHED Published: 2007-07-21T00:00:00 Last Updated: 2024-08-07T14:37:05.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Search or (2) Search Charset command. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2574 - http://www.securityfocus.com/bid/24962 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=563 - http://www.securitytracker.com/id?1018419 - https://exchange.xforce.ibmcloud.com/vuln
lnerabilities/display.php?id=563 - http://www.securitytracker.com/id?1018419 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35496 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35500 - http://docs.ipswitch.com/IMail%202006.21/ReleaseNotes/IMail_RelNotes.htm#NewRelease - http://secunia.com/advisories/26123
CVE ID: CVE-2007-3926 State: PUBLISHED Published: 2007-07-21T00:00:00 Last Updated: 2024-08-07T14:37:05.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ipswitch IMail Server 2006 before 2006.21 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors involving an "overwritten destructor." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2574 - http://docs.ipswitch.com/IMail%202006.21/ReleaseNotes/IMail_RelNotes.htm#NewRelease - http://secunia.com/advisories/26123
CVE ID: CVE-2007-3927 State: PUBLISHED Published: 2007-07-21T00:00:00 Last Updated: 2024-08-07T14:37:05.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers to execute arbitrary code via unspecified vectors in Imailsec and (2) allow attackers to have an unknown impact via an unspecified vector related to "subscribe." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2574 - http://www.securityfocus.com/bid/24962 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35505 - http://osvdb.org/45819 - http://docs.ipswitch.com/IMa
962 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35505 - http://osvdb.org/45819 - http://docs.ipswitch.com/IMail%202006.21/ReleaseNotes/IMail_RelNotes.htm#NewRelease - http://osvdb.org/45818 - http://www.securitytracker.com/id?1018421 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35504 - http://secunia.com/advisories/26123
CVE ID: CVE-2007-3928 State: PUBLISHED Published: 2007-07-21T00:00:00 Last Updated: 2024-08-07T14:37:04.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users to execute arbitrary code via a long e-mail address in an address book entry. NOTE: this might overlap CVE-2007-3638. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26066 - http://www.xdisclose.com/advisory/XD100002.html - http://www.securityfocus.com/bid/24926 - http://www.securitytracker.com/id?1018398 - http://securityreason.com/securityalert/2906 - https://exchange.xforce.ibmcloud.com/vuln
ecuritytracker.com/id?1018398 - http://securityreason.com/securityalert/2906 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35434 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064669.html
CVE ID: CVE-2007-3929 State: PUBLISHED Published: 2007-07-21T00:00:00 Last Updated: 2024-08-07T14:37:05.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the BitTorrent support in Opera before 9.22 allows user-assisted remote attackers to execute arbitrary code via a crafted header in a torrent file, which leaves a dangling pointer to an invalid object. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24970 - http://www.opera.com/support/search/view/862/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/35509 - http://www.securitytracker.com/id?1018431 - http://security.gentoo.org/glsa/glsa-20