rainbutterfly/cve_corpus huggingface dataset:
CVE-2007-3089 
Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystroke values from window.event, aka the "promiscuous IFRAME access bug," a related issue to CVE-2006-4568.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T21:00:00.000Z
CVE-2007-3091 
Race condition in Microsoft Internet Explorer 6 SP1; 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 allows remote attackers to execute arbitrary code or perform other actions upon a page transition, with the permissions of the old page and the content of the new page, as demonstrated by setInterval functions that set location.href within a try/catch expression, aka the "bait & switch vulnerability" or "Race Condition Cross-Domain Information Disclosure Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T21:00:00.000Z
CVE-2007-3092 
Microsoft Internet Explorer 6 allows remote attackers to spoof the URL bar, and page properties including SSL certificates, by interrupting page loading through certain use of location DOM objects and setTimeout calls.  NOTE: this issue can be leveraged for phishing and other attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T21:00:00.000Z
CVE-2007-3093 
Unspecified vulnerability in the logging mechanism in Solaris Management Console (SMC) on Sun Solaris 8 through 10 before 20070605 allows remote attackers to execute arbitrary code via unspecified vectors, related to the WBEM server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T21:00:00.000Z
CVE-2007-3094 
Unspecified vulnerability in the authentication mechanism in Solaris Management Console (SMC) on Sun Solaris 8 through 10 before 20070605 allows remote authenticated users to execute arbitrary code via unspecified vectors, related to the WBEM server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T21:00:00.000Z
CVE-2007-3095 
Unspecified vulnerability in Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, allows attackers to "disable the authentication system" and bypass authentication via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T22:00:00.000Z
CVE-2007-3096 
Directory traversal vulnerability in login.php in PBLang (PBL) 4.67.16.a and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T22:00:00.000Z
CVE-2007-3097 
my.activation.php3 in F5 FirePass 4100 SSL VPN allows remote attackers to execute arbitrary shell commands via shell metacharacters in the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T22:00:00.000Z
CVE-2007-3098 
The SNMPc Server (crserv.exe) process in Castle Rock Computing SNMPc before 7.0.19 allows remote attackers to cause a denial of service (crash) via a crafted packet to port 165/TCP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T22:00:00.000Z
CVE-2007-3099 
usr/mgmt_ipc.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 checks the client's UID on the listening AF_LOCAL socket instead of the new connection, which allows remote attackers to access the management interface and cause a denial of service (iscsid exit or iSCSI connection loss).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-14T19:00:00.000Z
CVE-2007-3100 
usr/log.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 uses a semaphore with insecure permissions (world-writable/world-readable) for managing log messages using shared memory, which allows local users to cause a denial of service (hang) by grabbing the semaphore.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-14T19:00:00.000Z
CVE-2007-3101 
Multiple cross-site scripting (XSS) vulnerabilities in certain JSF applications in Apache MyFaces Tomahawk before 1.1.6 allow remote attackers to inject arbitrary web script via the autoscroll parameter, which is injected into Javascript that is sent to the client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-18T10:00:00.000Z
CVE-2007-3102 
Unspecified vulnerability in the linux_audit_record_event function in OpenSSH 4.3p2, as used on Fedora Core 6 and possibly other systems, allows remote attackers to write arbitrary characters to an audit log via a crafted username.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T20:00:00.000Z
CVE-2007-3103 
The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-15T22:00:00.000Z
CVE-2007-3104 
The sysfs_readdir function in the Linux kernel 2.6, as used in Red Hat Enterprise Linux (RHEL) 4.5 and other distributions, allows users to cause a denial of service (kernel OOPS) by dereferencing a null pointer to an inode in a dentry.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-26T18:00:00.000Z
CVE-2007-3105 
Stack-based buffer overflow in the random number generator (RNG) implementation in the Linux kernel before 2.6.22 might allow local root users to cause a denial of service or gain privileges by setting the default wakeup threshold to a value greater than the output pool size, which triggers writing random numbers to the stack by the pool transfer function involving "bound check ordering".  NOTE: this issue might only cross privilege boundaries in environments that have granular assignment of privileges for root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-27T21:00:00.000Z
CVE-2007-3106 
lib/info.c in libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via invalid (1) blocksize_0 and (2) blocksize_1 values, which trigger a "heap overwrite" in the _01inverse function in res0.c.  NOTE: this issue has been RECAST so that CVE-2007-4029 handles additional vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-26T21:00:00.000Z
CVE-2007-3107 
The signal handling in the Linux kernel before 2.6.22, including 2.6.2, when running on PowerPC systems using HTX, allows local users to cause a denial of service via unspecified vectors involving floating point corruption and concurrency, related to clearing of MSR bits.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-10T22:00:00.000Z
CVE-2007-3108 
The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA private keys.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-08T01:11:00.000Z
CVE-2007-3109 
The CERN Image Map Dispatcher (htimage.exe) in Microsoft FrontPage allows remote attackers to determine the existence, and possibly partial contents, of arbitrary files under the web root via a relative pathname in the PATH_INFO.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-07T21:00:00.000Z
CVE-2007-3110 
Cross-site scripting (XSS) vulnerability in the Andy Frank Beatnik 1.0 extension for Firefox allows remote attackers to inject arbitrary web script or HTML via an RSS feed.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-07T21:00:00.000Z
CVE-2007-3111 
Buffer overflow in the Provideo Camimage ActiveX control in ISSCamControl.dll 1.0.1.5, when Internet Explorer 6 is used on Windows 2000 SP4, allows remote attackers to execute arbitrary code via a long URL property value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-07T21:00:00.000Z
CVE-2007-3112 
graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1) graph_start or (2) graph_end parameter, different vectors than CVE-2007-3113.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-07T21:00:00.000Z
CVE-2007-3113 
Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1) graph_height or (2) graph_width parameter, different vectors than CVE-2007-3112.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-07T21:00:00.000Z
CVE-2007-3114 
Memory leak in server/MaraDNS.c in MaraDNS before 1.2.12.05, and 1.3.x before 1.3.03, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, a different set of affected versions than CVE-2007-3115 and CVE-2007-3116.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-07T21:00:00.000Z
CVE-2007-3115 
Multiple memory leaks in server/MaraDNS.c in MaraDNS before 1.2.12.06, and 1.3.x before 1.3.05, allow remote attackers to cause a denial of service (memory consumption) via (1) reverse lookups or (2) requests for records in a class other than Internet (IN), a different set of affected versions than CVE-2007-3114 and CVE-2007-3116.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-07T21:00:00.000Z
CVE-2007-3116 
Memory leak in server/MaraDNS.c in MaraDNS 1.2.12.06 and 1.3.05 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, a different set of affected versions than CVE-2007-3114 and CVE-2007-3115.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-07T21:00:00.000Z
CVE-2007-3117 
Cross-site scripting (XSS) vulnerability in the SEO module in ADPLAN 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to HTTP headers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-07T21:00:00.000Z
CVE-2007-3118 
Multiple PHP remote file inclusion vulnerabilities in Kravchuk letter (K-letter) 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the scdir parameter to (1) action.php, (2) subs.php, or (3) unsubs.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-07T21:00:00.000Z
CVE-2007-3119 
SQL injection vulnerability in news.asp in Kartli Alisveris Sistemi (aka Free-PayPal-Shopping-Cart) 1.0 allows remote attackers to execute arbitrary SQL commands via the news_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-07T21:00:00.000Z
CVE-2007-3120 
Cross-site scripting (XSS) vulnerability in public/code/cp_dpage.php in All In One Control Panel (AIOCP) before 1.3.017 allows remote attackers to inject arbitrary web script or HTML via the aiocp_dp parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-07T21:00:00.000Z
CVE-2007-3121 
Buffer overflow in the CCdecode function in contrib/ntsc-cc.c in the zvbi-ntsc-cc tool in Zapping VBI Library (ZVBI) before 0.2.25 allows attackers to cause a denial of service (application crash) and possibly execute arbitrary code via long data during a reception error.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-07T21:00:00.000Z
CVE-2007-3122 
The parsing engine in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to bypass scanning via a RAR file with a header flag value of 10, which can be processed by WinRAR.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-07T21:00:00.000Z
CVE-2007-3123 
unrar.c in libclamav in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to cause a denial of service (core dump) via a crafted RAR file with a modified vm_codesize value, which triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-07T21:00:00.000Z
CVE-2007-3124 
Buffer overflow in backup/src/vmsbackup.c (aka the backup utility) in FreeVMS before 0.3.6 might allow local users to gain privileges via a long string in response to an "extract [ny]" prompt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-07T22:00:00.000Z
CVE-2007-3126 
Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, a similar issue to CVE-2007-2237.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-08T00:00:00.000Z
CVE-2007-3127 
content.php in WSPortal 1.0, when magic_quotes_gpc is disabled, allows remote attackers to obtain sensitive information via a "';" (quote semicolon) sequence in the page parameter, which reveals the installation path in the resulting forced SQL error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-19T17:00:00.000Z
CVE-2007-3128 
SQL injection vulnerability in content.php in WSPortal 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-19T17:00:00.000Z
CVE-2007-3129 
Cross-site scripting (XSS) vulnerability in login.php in Utopia News Pro 1.4.0 allows remote attackers to inject arbitrary web script or HTML via the password parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-19T21:00:00.000Z
CVE-2007-3130 
Multiple PHP remote file inclusion vulnerabilities in the OpenWiki (formerly JD-Wiki) component (com_jd-wiki) 1.0.2, and possibly earlier, for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) dwpage.php or (2) wantedpages.php, different vectors than CVE-2006-4074.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-08T16:00:00.000Z
CVE-2007-3131 
Cross-site scripting (XSS) vulnerability in add_comment.php in Light Blog 4.1 before 20070606 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-08T16:00:00.000Z
CVE-2007-3132 
Multiple vulnerabilities in Symantec Ghost Solution Suite 2.0.0 and earlier, with Ghost 8.0.992 and possibly other versions, allow remote attackers to cause a denial of service (client or server crash) via malformed requests to the daemon port, 1346/udp or 1347/udp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-08T16:00:00.000Z
CVE-2007-3133 
SQL injection vulnerability in urunbak.asp in W1L3D4 WEBmarket 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-08T16:00:00.000Z
CVE-2007-3134 
Multiple cross-site scripting (XSS) vulnerabilities in atomPhotoBlog.php in Atom PhotoBlog 1.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Your Name, (2) Your Homepage, and (3) Your Comment fields, when using "Approve Comments."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-08T16:00:00.000Z
CVE-2007-3135 
Cross-site scripting (XSS) vulnerability in atomPhotoBlog.php in Atom Photoblog 1.0.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the tag parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-08T16:00:00.000Z
CVE-2007-3136 
PHP remote file inclusion vulnerability in inc/nuke_include.php in newsSync 1.5.0rc6 allows remote attackers to execute arbitrary PHP code via a URL in the newsSync_NUKE_PATH parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-08T16:00:00.000Z
CVE-2007-3137 
Multiple cross-site scripting (XSS) vulnerabilities in 4print.asp in WmsCMS 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) sbl, (2) sbr, or (3) search parameter. NOTE: the original disclosure claims the pageid parameter in index.php is affected, but this is incorrect.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-08T16:00:00.000Z
CVE-2007-3138 
Directory traversal vulnerability in index.php in Open Solution Quick.Cart 2.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in an sLanguage cookie, which is used to define a value in config/general.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-08T16:00:00.000Z
CVE-2007-3139 
config/general.php in Quick.Cart 2.2 and earlier uses a default username and password, which allows remote attackers to access the application via a login action to admin.php.  NOTE: this can be leveraged to upload and execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-08T16:00:00.000Z
CVE-2007-3140 
SQL injection vulnerability in xmlrpc.php in WordPress 2.2 allows remote authenticated users to execute arbitrary SQL commands via a parameter value in an XML RPC wp.suggestCategories methodCall, a different vector than CVE-2007-1897.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-08T16:00:00.000Z
CVE-2007-3141 
PHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 allows remote attackers to execute arbitrary PHP code via a URL in the editor_insert_top parameter.  NOTE: the editor_insert_bottom vector is already covered by CVE-2006-6042.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-11T18:00:00.000Z
CVE-2007-3142 
Visual truncation vulnerability in Opera 9.21 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after 34 characters, as demonstrated by a phishing attack using HTTP Basic Authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-11T18:00:00.000Z
CVE-2007-3143 
Visual truncation vulnerability in Konqueror 3.5.5 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-11T18:00:00.000Z
CVE-2007-3144 
Visual truncation vulnerability in Mozilla 1.7.12 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-11T18:00:00.000Z
CVE-2007-3145 
Visual truncation vulnerability in Galeon 2.0.1 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-11T18:00:00.000Z
CVE-2007-3146 
Zen Help Desk 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for ZenHelpDesk.mdb.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-11T18:00:00.000Z
CVE-2007-3147 
Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the send method.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-11T18:00:00.000Z
CVE-2007-3148 
Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the receive method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-11T18:00:00.000Z
CVE-2007-3149 
sudo, when linked with MIT Kerberos 5 (krb5), does not properly check whether a user can currently authenticate to Kerberos, which allows local users to gain privileges, in a manner unintended by the sudo security model, via certain KRB5_ environment variable settings.  NOTE: another researcher disputes this vulnerability, stating that the attacker must be "a user, who can already log into your system, and can already use sudo."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-11T18:00:00.000Z
CVE-2007-3150 
Google Desktop allows user-assisted remote attackers to execute arbitrary programs via a man-in-the-middle attack that injects JavaScript, a www.google.com search IFRAME, and a META HTTP-EQUIV="refresh" that targets a www.google.com search for a local .exe file, which is displayed in the "results stored on your computer" portion of the search results, and when clicked invokes Google Desktop to execute this file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-11T19:00:00.000Z
CVE-2007-3151 
rpttop.htm in the web management interface in Packeteer PacketShaper 7.3.0g2 and 7.5.0g1 allows remote attackers to cause a denial of service (device reboot) via a request with empty values of the OP.MEAS.DATAQUERY and MEAS.TYPE parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-11T22:00:00.000Z
CVE-2007-3152 
c-ares before 1.4.0 uses a predictable seed for the random number generator for the DNS Transaction ID field, which might allow remote attackers to spoof DNS responses by guessing the field value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-11T22:00:00.000Z