rainbutterfly/cve_corpus huggingface dataset:
CVE-2007-0276 
Multiple unspecified vulnerabilities in Oracle Database 8.1.7.4 and 9.0.1.5 have unknown impact and attack vectors related to (1) Advanced Security Option and oklist or okdstry (DB10), (2) Oracle Net Services (DB13), and (3) Recovery Manager and oklist (DB16).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-17T02:00:00.000Z
CVE-2007-0277 
Unspecified vulnerability in Oracle Database client-only 10.1.0.4 has unknown impact and attack vectors related to the Export component and expdp or impdp, aka DB11.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-17T02:00:00.000Z
CVE-2007-0278 
Multiple unspecified vulnerabilities in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unknown impact and attack vectors related to (1) NLS Runtime and lmsgen (DB12), and (2) Oracle Text and ctxkbtc (DB14).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-17T02:00:00.000Z
CVE-2007-0279 
Multiple unspecified vulnerabilities in Oracle HTTP Server 9.2.0.8 and Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors, aka (1) OHS01, (2) OHS02, (3) OHS05, (4) OHS06, and (5) OHS07.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-17T02:00:00.000Z
CVE-2007-0280 
Unspecified vulnerability in Oracle HTTP Server 9.0.1.5, Application Server 9.0.4.3, 10.1.2.0.0, 10.1.2.0.2, and 10.1.2.2; and Collaboration Suite 9.0.4.2 and 10.1.2; has unknown impact and attack vectors related to the Oracle Process Mgmt & Notification component, aka OPMN01.   NOTE: as of 20070123, Oracle has not disputed claims by a reliable researcher that OPMN01 is for a buffer overflow in Oracle Notification Service (ONS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-17T02:00:00.000Z
CVE-2007-0281 
Multiple unspecified vulnerabilities in Oracle HTTP Server 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.3; Application Server 9.0.4.3, 10.1.2.0.0, 10.1.2.0.1, 10.1.2.0.2, 10.1.2.1, and 10.1.3.0; and Collaboration Suite 9.0.4.2 and 10.1.2; have unknown impact and attack vectors related to the Oracle HTTP Server, aka (1) OHS03 and (2) OHS04.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-17T02:00:00.000Z
CVE-2007-0282 
Unspecified vulnerability in Oracle HTTP Server 9.0.1.5, Application Server 9.0.4.2 and 10.1.2.0.0, and Collaboration Suite 9.0.4.2 has unknown impact and attack vectors related to the Oracle Process Mgmt & Notification component, aka OPMN02.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-17T02:00:00.000Z
CVE-2007-0283 
Unspecified vulnerability in Oracle Application Server 9.0.4.3 and Collaboration Suite 9.0.4.2 has unknown impact and attack vectors related to Oracle Containers for J2EE, aka OC4J02.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-17T02:00:00.000Z
CVE-2007-0284 
Multiple unspecified vulnerabilities in Oracle Application Server 9.0.4.3 and 10.1.2.0.0, and Collaboration Suite 9.0.4.2, have unknown impact and attack vectors related to Oracle Containers for J2EE, aka (1) OC4J03 and (2) OC4J04.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-17T02:00:00.000Z
CVE-2007-0285 
Unspecified vulnerability in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2; Collaboration Suite 9.0.4.2 and 10.1.2; and E-Business Suite and Applications 11.5.10CU2 has unknown impact and attack vectors related to Oracle Reports Developer, aka REP01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-17T02:00:00.000Z
CVE-2007-0286 
Unspecified vulnerability in Oracle Application Server 10.1.2.0.2 and 10.1.3.0, and Collaboration Suite 10.1.2, has unknown impact and attack vectors related to Containers for J2EE, aka OC4J07.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-17T02:00:00.000Z
CVE-2007-0287 
Unspecified vulnerability in Oracle Application Server 9.0.4.3, 10.1.2.0.0, and 10.1.2.0.2; and Collaboration Suite 9.0.4.2 and 10.1.2; has unknown impact and attack vectors related to Containers for J2EE, aka OC4J08.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-17T02:00:00.000Z
CVE-2007-0288 
Unspecified vulnerability in Oracle Application Server 10.1.4.0 has unknown impact and attack vectors related to Oracle Internet Directory, aka OID01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-17T02:00:00.000Z
CVE-2007-0289 
Multiple unspecified vulnerabilities in Oracle Collaboration Suite 9.0.4.2 have unknown impact and attack vectors related to Oracle Containers for J2EE, aka (1) OC4J01, (2) OC4J05, and (3) OC4J06.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-17T02:00:00.000Z
CVE-2007-0290 
Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors related to (1) Application Object Library (APPS01), (2) Human Resources (APPS03), (3) Payables (APPS04), (4) Trading Community Architecture (APPS05), and (5) Web Applications Desktop Integrator (APPS06).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-17T02:00:00.000Z
CVE-2007-0291 
Unspecified vulnerability in Oracle E-Business Suite and Applications 6.2.3 has unknown impact and attack vectors related to Oracle Exchange, aka APPS02.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-17T02:00:00.000Z
CVE-2007-0292 
Multiple unspecified vulnerabilities in Oracle Enterprise Manager 10.1.0.5 have unknown impact and attack vectors related to Oracle Agent, aka (1) EM01 and (2) EM02.  NOTE: EM05 might be related to CVE-2007-0222.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-17T02:00:00.000Z
CVE-2007-0293 
Multiple unspecified vulnerabilities in Oracle Enterprise Manager 10.1.0.5 and 10.2.0.1 have unknown impact and attack vectors related to (1) Oracle Agent (EM03) and (2) EM04 and (3) EM05 in Enterprise Manager Console.  NOTE: EM05 might be related to CVE-2007-0222.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-17T02:00:00.000Z
CVE-2007-0294 
Unspecified vulnerability in Oracle Enterprise Manager 10.2.0.1 has unknown impact and attack vectors related to Database Cloning & Data Guard Management, aka EM06.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-17T02:00:00.000Z
CVE-2007-0295 
Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.13 and 8.47.11 has unknown impact and attack vectors in PeopleTools, aka PSE01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-17T02:00:00.000Z
CVE-2007-0296 
Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.13, 8.47.11, and 8.48.06 has unknown impact and attack vectors in PeopleTools, aka PSE02.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-17T02:00:00.000Z
CVE-2007-0297 
Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.47.11 and 8.48.06 has unknown impact and attack vectors in PeopleTools, aka PSE03.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-17T02:00:00.000Z
CVE-2007-0298 
PHP remote file inclusion vulnerability in show.php in LunarPoll, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the PollDir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-17T11:00:00.000Z
CVE-2007-0299 
Integer overflow in the byte_swap_sbin function in bsd/ufs/ufs/ufs_byte_order.c in Mac OS X 10.4.8 allows user-assisted remote attackers to cause a denial of service (kernel panic) by mounting a crafted Unix File System (UFS) DMG image, which triggers an invalid pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-17T11:00:00.000Z
CVE-2007-0300 
PHP remote file inclusion vulnerability in i-accueil.php in TLM CMS 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T00:00:00.000Z
CVE-2007-0301 
PHP remote file inclusion vulnerability in _admin/admin_menu.php in FdWeB Espace Membre 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T00:00:00.000Z
CVE-2007-0302 
Multiple cross-site scripting (XSS) vulnerabilities in InstantASP 4.1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) SessionID parameter to (a) Logon.aspx, and the (2) Username and (3) Update parameters to (b) Members1.aspx.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T00:00:00.000Z
CVE-2007-0303 
Multiple unspecified vulnerabilities in Zina 1.0rc1 and earlier have unknown impact and attack vectors related to "Potential security bugs."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T00:00:00.000Z
CVE-2007-0304 
SQL injection vulnerability in duyuru.asp in MiNT Haber Sistemi 2.7 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T00:00:00.000Z
CVE-2007-0305 
SQL injection vulnerability in etkinlikbak.asp in Okul Web Otomasyon Sistemi 4.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T00:00:00.000Z
CVE-2007-0306 
SQL injection vulnerability in visu_user.asp in Digiappz DigiAffiliate 1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T00:00:00.000Z
CVE-2007-0307 
PHP remote file inclusion vulnerability in include/common.php in Poplar Gedcom Viewer 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the env[rootPath] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T00:00:00.000Z
CVE-2007-0308 
Cross-site scripting (XSS) vulnerability in Plain Black WebGUI before 7.3.4 (beta) allows remote attackers to inject arbitrary web script or HTML via Wiki Page titles.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T00:00:00.000Z
CVE-2007-0309 
SQL injection vulnerability in blocks/block-Old_Articles.php in Francisco Burzi PHP-Nuke 7.9 and earlier, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cat parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T00:00:00.000Z
CVE-2007-0310 
BMC Remedy Action Request System 5.01.02 Patch 1267 generates different error messages for failed login attempts with a valid username than for those with an invalid username, which allows remote attackers to determine valid account names.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T00:00:00.000Z
CVE-2007-0311 
Texas Imperial Software WFTPD and WFTPD Pro Server 3.25 and earlier allow remote attackers to cause a denial of service (application crash) via a long SITE ADMIN command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T00:00:00.000Z
CVE-2007-0312 
wcSimple Poll stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain password hashes via a direct request for password.txt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T00:00:00.000Z
CVE-2007-0313 
Unspecified vulnerability in GONICUS System Administration (GOsa) before 2.5.8 allows remote authenticated users to modify certain settings, including the admin password, via crafted POST requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T00:00:00.000Z
CVE-2007-0314 
Multiple PHP remote file inclusion vulnerabilities in Article System 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the INCLUDE_DIR parameter to (1) forms.php, (2) issue_edit.php, (3) client.php, and (4) classes.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T00:00:00.000Z
CVE-2007-0315 
Multiple buffer overflows in FileZilla before 2.2.30a allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors related to (1) Options.cpp when storing settings in the registry, and (2) the transfer queue (QueueCtrl.cpp).  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T00:00:00.000Z
CVE-2007-0316 
Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.010 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) xuser_name parameter to shared/code/cp_authorization.php, and the (2) did parameter to public/code/cp_downloads.php, different vectors than CVE-2007-0223.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T00:00:00.000Z
CVE-2007-0317 
Format string vulnerability in the LogMessage function in FileZilla before 3.0.0-beta5 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted arguments.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T00:00:00.000Z
CVE-2007-0318 
The do_hfs_truncate function in Mac OS X 10.4.8 allows context-dependent attackers to cause a denial of service (kernel panic) via a crafted HFS+ filesystem in a DMG image, which causes an access of an invalid vnode structure during file removal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T00:00:00.000Z
CVE-2007-0319 
Multiple stack-based buffer overflows in the Motive ActiveEmailTest.EmailData (ActiveUtils EmailData) ActiveX control in ActiveUtils.dll in Motive Service Activation Manager 5.1 and Self Service Manager 5.1 and earlier allow remote attackers to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-15T19:00:00.000Z
CVE-2007-0320 
Multiple buffer overflows in (a) an ActiveX control (iftw.dll) and (b) Netscape plug-in (npiftw32.dll) for Macrovision (formerly InstallShield) InstallFromTheWeb allow remote attackers to execute arbitrary code via crafted HTML documents.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-23T01:00:00.000Z
CVE-2007-0321 
Buffer overflow in the Update Service Agent ActiveX Control in isusweb.dll for Macrovision FLEXnet Connect (formerly InstallShield Update Service) allows remote attackers to execute arbitrary code via the Download method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-23T01:00:00.000Z
CVE-2007-0322 
Multiple stack-based buffer overflows in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-05T19:00:00.000Z
CVE-2007-0323 
Buffer overflow in the SetLanguage function in Research In Motion (RIM) TeamOn Import Object ActiveX control (TOImport.dll) allows remote attackers to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-08T23:00:00.000Z
CVE-2007-0324 
Multiple buffer overflows in the LizardTech DjVu Browser Plug-in before 6.1.1 allow remote attackers to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-15T23:00:00.000Z
CVE-2007-0325 
Multiple buffer overflows in the Trend Micro OfficeScan Web-Deployment SetupINICtrl ActiveX control in OfficeScanSetupINI.dll, as used in OfficeScan 7.0 before Build 1344, OfficeScan 7.3 before Build 1241, and Client / Server / Messaging Security 3.0 before Build 1197, allow remote attackers to execute arbitrary code via a crafted HTML document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-20T17:00:00.000Z
CVE-2007-0326 
Multiple stack-based buffer overflows in the PhotoChannel Networks PNI Digital Media Photo Upload Plugin ActiveX control before 2.0.0.10, as used by multiple retailers, allow remote attackers to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-18T20:00:00.000Z
CVE-2007-0328 
The DWUpdateService ActiveX control in the agent (agent.exe) in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allows remote attackers to execute arbitrary commands via (1) the Execute method, and obtain the exit status using (2) the GetExitCode method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-01T00:00:00.000Z
CVE-2007-0329 
download.php in Joonas Viljanen JV2 Folder Gallery allows remote attackers to read sensitive files via a relative pathname in the file parameter, as demonstrated by config/gallerysetup.php.  NOTE: this issue might be resultant from a directory traversal vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T02:00:00.000Z
CVE-2007-0330 
Buffer overflow in wsbho2k0.dll, as used by wsftpurl.exe, in Ipswitch WS_FTP 2007 Professional allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long ftp:// URL in an HTML document, and possibly other vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T02:00:00.000Z
CVE-2007-0331 
Cross-site scripting (XSS) vulnerability in liens.php3 in liens_dynamiques 2.1 allows remote attackers to inject arbitrary web script or HTML by using the ajouter=1 query string and the add menu.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T02:00:00.000Z
CVE-2007-0332 
(1) admin/adminlien.php3 and (2) admin/modif.php3 in liens_dynamiques 2.1 do not require authentication, which allows remote attackers to perform unauthorized administrative actions using a direct request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T02:00:00.000Z
CVE-2007-0333 
Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse drivers into the product's installation directory by creating links using FileLinkInformation requests with the ZwSetInformationFile function, as demonstrated by modifying SandBox.sys.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T02:00:00.000Z
CVE-2007-0334 
Unspecified vulnerability in the SIP module in InGate Firewall and SIParator before 4.5.1 allows remote attackers to conduct replay attacks on the authentication mechanism via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T02:00:00.000Z
CVE-2007-0335 
Multiple directory traversal vulnerabilities in Jax Petition Book 1.0.3.06 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the languagepack parameter to (1) jax_petitionbook.php or (2) smileys.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T02:00:00.000Z
CVE-2007-0336 
Undercover.app/Contents/Resources/uc in Rixstep Undercover allows local users to overwrite arbitrary files, probably related to a race condition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T02:00:00.000Z
CVE-2007-0337 
Directory traversal vulnerability in sesskglogadmin.php in KGB 1.9 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the skinnn parameter, as demonstrated by invoking kg.php with a postek parameter containing PHP code, which is injected into a file in the kg directory, and then included by sesskglogadmin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T02:00:00.000Z
CVE-2007-0338 
Heap-based buffer overflow in Dream FTP Server allows remote attackers to execute arbitrary code via a USER command with a large number of format string specifiers, which triggers the overflow during processing of the Server Log.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T02:00:00.000Z
CVE-2007-0339 
SQL injection vulnerability in index.php (aka the login form) in Scriptme SMe FileMailer 1.21 allows remote attackers to execute arbitrary SQL commands via the Password field (ps parameter).  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T02:00:00.000Z
CVE-2007-0340 
SQL injection vulnerability in inc/header.inc.php in ThWboard 3.0b2.84-php5 and earlier allows remote attackers to execute arbitrary SQL commands via the board[styleid] parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T02:00:00.000Z
CVE-2007-0341 
Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.1 and earlier, when Microsoft Internet Explorer 6 is used, allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in a CSS style in the convcharset parameter to the top-level URI, a different vulnerability than CVE-2005-0992.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T02:00:00.000Z
CVE-2007-0342 
WebCore in Apple WebKit build 18794 allows remote attackers to cause a denial of service (null dereference and application crash) via a TD element with a large number in the ROWSPAN attribute, as demonstrated by a crash of OmniWeb 5.5.3 on Mac OS X 10.4.8, a different vulnerability than CVE-2006-2019.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T02:00:00.000Z
CVE-2007-0343 
OpenBSD before 20070116 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via certain IPv6 ICMP (aka ICMP6) echo request packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T02:00:00.000Z
CVE-2007-0344 
Multiple format string vulnerabilities in (1) _invitedToRoom: and (2) _invitedToDirectChat: in Colloquy 2.1 and earlier allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in the channel name of an INVITE request, related to the implementation of AlertSheet and AlertPanel in Apple AppKit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-18T02:00:00.000Z