rainbutterfly/cve_corpus huggingface dataset:
CVE-2007-0676 
SQL injection vulnerability in faq.php in ExoPHPDesk 1.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-03T01:00:00.000Z
CVE-2007-0677 
PHP remote file inclusion vulnerability in fw/class.Quick_Config_Browser.php in Cadre PHP Framework 20020724 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[config][framework_path] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-03T01:00:00.000Z
CVE-2007-0678 
SQL injection vulnerability in windows.asp in Fullaspsite Asp Hosting Sitesi allows remote attackers to execute arbitrary SQL commands via the kategori_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-03T01:00:00.000Z
CVE-2007-0679 
PHP remote file inclusion vulnerability in lang/leslangues.php in Nicolas Grandjean PHPMyRing 4.1.3b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fichier parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-03T01:00:00.000Z
CVE-2007-0680 
PHP remote file inclusion vulnerability in includes/functions.php in Phpbb Tweaked 3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-03T01:00:00.000Z
CVE-2007-0681 
profile.php in ExtCalendar 2 and earlier allows remote attackers to change the passwords of arbitrary users without providing the original password, and possibly perform other unauthorized actions, via modified values to register.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-03T01:00:00.000Z
CVE-2007-0682 
PHP remote file inclusion vulnerability in theme/include_mode/template.php in JV2 Folder Gallery 3.0.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the galleryfilesdir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-03T01:00:00.000Z
CVE-2007-0683 
PHP remote file inclusion vulnerability in includes/functions.php in Omegaboard 1.0beta4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-03T01:00:00.000Z
CVE-2007-0684 
PHP remote file inclusion vulnerability in portal.php in Cerulean Portal System 0.7b allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-03T01:00:00.000Z
CVE-2007-0685 
Internet Explorer on Windows Mobile 5.0 and Windows Mobile 2003 and 2003SE for Smartphones and PocketPC allows attackers to cause a denial of service (application crash and device instability) via unspecified vectors, possibly related to a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-03T01:00:00.000Z
CVE-2007-0686 
The Intel 2200BG 802.11 Wireless Mini-PCI driver 9.0.3.9 (w29n51.sys) allows remote attackers to cause a denial of service (system crash) via crafted disassociation packets, which triggers memory corruption of "internal kernel structures," a different vulnerability than CVE-2006-6651.  NOTE: this issue might overlap CVE-2006-3992.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-03T01:00:00.000Z
CVE-2007-0687 
SQL injection vulnerability in i-search.php in Michelle's L2J Dropcalc 4 and earlier allows remote authenticated users to execute arbitrary SQL commands via the itemid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-03T01:00:00.000Z
CVE-2007-0688 
SQL injection vulnerability in oku.asp in Hunkaray Duyuru Scripti allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-03T01:00:00.000Z
CVE-2007-0689 
MyBB 1.2.4 allows remote attackers to obtain sensitive information via the (1) action[] parameter to member.php, (2) imagehash[] parameter to captcha.php, and (3) a direct request to inc/datahandlers/event.php, which reveal the installation path in the resulting error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T21:00:00.000Z
CVE-2007-0690 
myEvent 1.6 allows remote attackers to obtain sensitive information via (1) a Log In action without a password to login.php, or an invalid (2) view[] or (3) monthno[] parameter to myevent.php, which reveals the path in various error messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T20:00:00.000Z
CVE-2007-0692 
DGNews 2.1 allows remote attackers to obtain sensitive information via a fullnews request to news.php with an invalid newsid parameter, and other unspecified vectors, which reveal the path in various error messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T20:00:00.000Z
CVE-2007-0693 
SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a newslist action.  NOTE: this issue can produce resultant cross-site scripting (XSS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T20:00:00.000Z
CVE-2007-0694 
Cross-site scripting (XSS) vulnerability in footer.php in DGNews 2.1 allows remote attackers to inject arbitrary web script or HTML via the copyright parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T20:00:00.000Z
CVE-2007-0695 
Multiple SQL injection vulnerabilities in Free LAN In(tra|ter)net Portal (FLIP) before 1.0-RC3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.  NOTE: some sources mention the escape_sqlData, implode_sql, and implode_sqlIn functions, but these are protection schemes, not the vulnerable functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-03T22:00:00.000Z
CVE-2007-0696 
Cross-site scripting (XSS) vulnerability in error messages in Free LAN In(tra|ter)net Portal (FLIP) before 1.0-RC3 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, different vectors than CVE-2007-0611.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-03T22:00:00.000Z
CVE-2007-0697 
index2.php in ACGVannu 1.3 and earlier allows remote attackers to change the password or profile of a user via a modified id parameter, related to templates/modif.html.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-03T22:00:00.000Z
CVE-2007-0698 
Multiple SQL injection vulnerabilities in ACGVannu 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via the id_mod parameter to templates/modif.html, and other unspecified vectors.  NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-03T22:00:00.000Z
CVE-2007-0699 
PHP remote file inclusion vulnerability in includes/includes.php in Guernion Sylvain Portail Web Php (aka Gsylvain35 Portail Web, PwP) before 2.5.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the site_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-04T00:00:00.000Z
CVE-2007-0700 
Directory traversal vulnerability in index.php in Guernion Sylvain Portail Web Php (aka Gsylvain35 Portail Web, PwP) allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter.  NOTE: this issue was later reported for 2.5.1.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-04T00:00:00.000Z
CVE-2007-0701 
PHP remote file inclusion vulnerability in inc/common.inc.php in Epistemon 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-04T00:00:00.000Z
CVE-2007-0702 
Multiple PHP remote file inclusion vulnerabilities in phpEventMan 1.0.2 allow remote attackers to execute arbitrary PHP code via a URL in the level parameter to (1) Shared/controller/text.ctrl.php or (2) UserMan/controller/common.function.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-04T00:00:00.000Z
CVE-2007-0703 
PHP remote file inclusion vulnerability in library/StageLoader.php in WebBuilder 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[core][module_path] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-04T00:00:00.000Z
CVE-2007-0704 
PHP remote file inclusion vulnerability in install.php in Somery 0.4.6 allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter, a different vector than CVE-2006-4669.  NOTE: the documentation says to remove install.php after installation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-04T00:00:00.000Z
CVE-2007-0705 
Cross-zone scripting vulnerability in Sleipnir 2.49 and earlier, and Portable Sleipnir 2.45 and earlier, allows remote attackers to bypass Web content zone restrictions via certain script contained in RSS data.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-04T00:00:00.000Z
CVE-2007-0706 
Cross-zone scripting vulnerability in Darksky RSS bar for Internet Explorer before 1.29, RSS bar for Sleipnir before 1.29, and RSS bar for unDonut before 1.29 allows remote attackers to bypass Web content zone restrictions via certain script contained in RSS data.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-04T00:00:00.000Z
CVE-2007-0707 
Stack-based buffer overflow in GOM Player 2.0.12.3375 allows user-assisted remote attackers to execute arbitrary code via a .ASX file with a long URI in the "ref href" tag.  NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-04T00:00:00.000Z
CVE-2007-0708 
cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) before 2.4.16.174 does not validate arguments that originate in user mode for the (1) NtConnectPort and (2) NtCreatePort hooked SSDT functions, which allows local users to cause a denial of service (system crash) and possibly gain privileges via invalid arguments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-04T00:00:00.000Z
CVE-2007-0709 
cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.16.174 and earlier does not validate arguments that originate in user mode for the (1) NtCreateSection, (2) NtOpenProcess, (3) NtOpenSection, (4) NtOpenThread, and (5) NtSetValueKey hooked SSDT functions, which allows local users to cause a denial of service (system crash) and possibly gain privileges via invalid arguments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-04T00:00:00.000Z
CVE-2007-0710 
The Bonjour functionality in iChat in Apple Mac OS X 10.3.9 allows remote attackers to cause a denial of service (persistent application crash) via unspecified vectors, possibly related to CVE-2007-0614.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-16T19:00:00.000Z
CVE-2007-0711 
Integer overflow in Apple QuickTime before 7.1.5, when installed on Windows operating systems, allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted 3GP video file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-05T22:00:00.000Z
CVE-2007-0712 
Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MIDI file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-05T22:00:00.000Z
CVE-2007-0713 
Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted QuickTime movie file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-05T22:00:00.000Z
CVE-2007-0714 
Integer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted QuickTime movie with a User Data Atom (UDTA) with an Atom size field with a large value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-05T22:00:00.000Z
CVE-2007-0715 
Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PICT file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-05T22:00:00.000Z
CVE-2007-0716 
Stack-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted QTIF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-05T22:00:00.000Z
CVE-2007-0717 
Integer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted QTIF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-05T22:00:00.000Z
CVE-2007-0718 
Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a QTIF file with a Video Sample Description containing a Color table ID of 0, which triggers memory corruption when QuickTime assumes that a color table exists.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-05T22:00:00.000Z
CVE-2007-0719 
Stack-based buffer overflow in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote user-assisted attackers to execute arbitrary code via an image with a crafted ColorSync profile.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-13T21:00:00.000Z
CVE-2007-0720 
The CUPS service on multiple platforms allows remote attackers to cause a denial of service (service hang) via a "partially-negotiated" SSL connection, which prevents other requests from being accepted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-13T21:00:00.000Z
CVE-2007-0721 
Unspecified vulnerability in diskimages-helper in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote user-assisted attackers to execute arbitrary code via a crafted compressed disk image that triggers memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-13T22:00:00.000Z
CVE-2007-0722 
Integer overflow in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote user-assisted attackers to execute arbitrary code via a crafted AppleSingleEncoding disk image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-13T22:00:00.000Z
CVE-2007-0723 
Unspecified vulnerability in the authentication feature for DirectoryService (DS Plug-Ins) for Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote authenticated LDAP users to modify the root password and gain privileges via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-13T22:00:00.000Z
CVE-2007-0724 
The IOKit HID interface in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 does not sufficiently limit access to certain controls, which allows local users to gain privileges by using HID device events to read keystrokes from the console.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-13T22:00:00.000Z
CVE-2007-0725 
Buffer overflow in the AirPortDriver module for AirPort in Apple Mac OS X 10.3.9 through 10.4.9, when running on hardware with the original AirPort wireless card, allows local users to execute arbitrary code by "sending malformed control commands."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-24T16:00:00.000Z
CVE-2007-0726 
The SSH key generation process in OpenSSH in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote attackers to cause a denial of service by connecting to the server before SSH has finished creating keys, which causes the keys to be regenerated and can break trust relationships that were based on the original keys.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-13T22:00:00.000Z
CVE-2007-0728 
Unspecified vulnerability in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 creates files insecurely while initializing a USB printer, which allows local users to create or overwrite arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-13T22:00:00.000Z
CVE-2007-0729 
Apple File Protocol (AFP) Client in Apple Mac OS X 10.3.9 through 10.4.9 does not properly clean the environment before executing commands, which allows local users to gain privileges by setting unspecified environment variables.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-24T16:00:00.000Z
CVE-2007-0730 
Server Manager (servermgrd) in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 does not sufficiently validate authentication credentials, which allows remote attackers to bypass authentication and modify system configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-13T22:00:00.000Z
CVE-2007-0731 
Stack-based buffer overflow in the Apple-specific Samba module (SMB File Server) in Apple Mac OS X 10.4 through 10.4.8 allows context-dependent attackers to execute arbitrary code via a long ACL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-13T22:00:00.000Z
CVE-2007-0732 
Unspecified vulnerability in the CoreServices daemon in CarbonCore in Apple Mac OS X 10.4 through 10.4.9 allows local users to gain privileges via unspecified vectors involving "obtaining a send right to [the] Mach task port."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-24T16:00:00.000Z
CVE-2007-0733 
Unspecified vulnerability in ImageIO in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote user-assisted attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted RAW image that triggers memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-13T22:00:00.000Z
CVE-2007-0734 
fsck, as used by the AirPort Disk feature of the AirPort Extreme Base Station with 802.11n before Firmware Update 7.1, and by Apple Mac OS X 10.3.9 through 10.4.9, does not properly enforce password protection of a USB hard drive, which allows context-dependent attackers to list arbitrary directories or execute arbitrary code, resulting from memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-10T22:00:00.000Z
CVE-2007-0735 
Use-after-free vulnerability in Libinfo in Apple Mac OS X 10.3.9 through 10.4.9 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors involving crafted web pages that trigger certain error conditions that are not properly reported in certain circumstances, resulting in accessing deallocated memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-24T17:00:00.000Z
CVE-2007-0736 
Integer overflow in the RPC library in Libinfo in Apple Mac OS X 10.3.9 through 10.4.9 allows remote attackers to execute arbitrary code via crafted requests to portmap.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-24T17:00:00.000Z
CVE-2007-0737 
The Login Window in Apple Mac OS X 10.3.9 through 10.4.9 does not properly check certain environment variables, which allows local users to gain privileges via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-24T17:00:00.000Z
CVE-2007-0738 
The Login Window in Apple Mac OS X 10.4 through 10.4.9 does not display the screen saver authentication dialog in certain circumstances when waking from sleep, even though the "require a password to wake the computer from sleep" option is enabled, which allows local users to bypass authentication controls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-24T17:00:00.000Z
CVE-2007-0739 
The Login Window in Apple Mac OS X 10.4 through 10.4.9 displays the software update window beneath the loginwindow authentication dialog in certain circumstances related to running scheduled tasks, which allows local users to bypass authentication controls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-24T17:00:00.000Z
CVE-2007-0740 
Alias Manager in Apple Mac OS X 10.3.9 and 10.4.9 does not display files with the same name in mounted disk images that have the same name, which might allow user-assisted attackers to trick a user into executing malicious files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-24T22:00:00.000Z
CVE-2007-0741 
Buffer overflow in natd in network_cmds in Apple Mac OS X 10.3.9 through 10.4.9, when Internet Sharing is enabled, allows remote attackers to execute arbitrary code via malformed RTSP packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-24T17:00:00.000Z
CVE-2007-0742 
The WebFoundation framework in Apple Mac OS X 10.3.9 and earlier allows subdomain cookies to be accessed by the parent domain, which allows remote attackers to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-24T17:00:00.000Z
CVE-2007-0743 
URLMount in Apple Mac OS X 10.3.9 through 10.4.9 passes the username and password credentials for mounting filesystems on SMB servers as command line arguments to the mount_sub command, which may allow local users to obtain sensitive information by listing the process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-24T17:00:00.000Z
CVE-2007-0744 
SMB in Apple Mac OS X 10.3.9 through 10.4.9 does not properly clean the environment when executing commands, which allows local users to gain privileges by setting unspecified environment variables.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-24T17:00:00.000Z