rainbutterfly/cve_corpus huggingface dataset:
CVE-2007-4500 
Unspecified vulnerability in TunnelRunner in SSHKeychain before 0.8.2 beta, and possibly later versions, allows local users to gain privileges via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-23T19:00:00.000Z
CVE-2007-4501 
Unspecified vulnerability in PassphraseRequester in SSHKeychain before 0.8.2 beta allows attackers to obtain sensitive information (passwords) via unknown vectors, related to "poor protection."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-23T19:00:00.000Z
CVE-2007-4502 
SQL injection vulnerability in index.php in the BibTeX component (com_jombib) 1.3 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the afilter parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-23T19:00:00.000Z
CVE-2007-4503 
SQL injection vulnerability in index.php in the Nice Talk component (com_nicetalk) 0.9.3 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the tagid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-23T19:00:00.000Z
CVE-2007-4504 
Directory traversal vulnerability in index.php in the RSfiles component (com_rsfiles) 1.0.2 and earlier for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the path parameter in a files.display action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-23T19:00:00.000Z
CVE-2007-4505 
SQL injection vulnerability in index.php in the RemoSitory component (com_remository) for Mambo allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-23T19:00:00.000Z
CVE-2007-4506 
SQL injection vulnerability in index.php in the NeoRecruit component (com_neorecruit) 1.4 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an offer_view action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-23T19:00:00.000Z
CVE-2007-4507 
Multiple buffer overflows in the php_ntuser component for PHP 5.2.3 allow context-dependent attackers to cause a denial of service or execute arbitrary code via long arguments to the (1) ntuser_getuserlist, (2) ntuser_getuserinfo, (3) ntuser_getusergroups, or (4) ntuser_getdomaincontroller functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-23T19:00:00.000Z
CVE-2007-4508 
Stack-based buffer overflow in Rebellion Asura engine, as used for the server in Rogue Trooper 1.0 and earlier and Prism 1.1.1.0 and earlier, allows remote attackers to execute arbitrary code via a long string in a 0xf007 packet for the challenge B query.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-23T19:00:00.000Z
CVE-2007-4509 
SQL injection vulnerability in index.php in the EventList component (com_eventlist) 0.8 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the did parameter in a details action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-23T19:00:00.000Z
CVE-2007-4510 
ClamAV before 0.91.2, as used in Kolab Server 2.0 through 2.2beta1 and other products, allows remote attackers to cause a denial of service (application crash) via (1) a crafted RTF file, which triggers a NULL dereference in the cli_scanrtf function in libclamav/rtf.c; or (2) a crafted HTML document with a data: URI, which triggers a NULL dereference in the cli_html_normalise function in libclamav/htmlnorm.c.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-23T19:00:00.000Z
CVE-2007-4511 
The Sun Admin Console in Sun Application Server 9.0_0.1 does not apply certain configuration changes persistently, which causes the (1) SSL and (2) SSL_MutualAuth ORB listener services to enable all protocols and ciphers after the services are restarted, possibly allowing remote attackers to bypass intended policy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-23T19:00:00.000Z
CVE-2007-4512 
Cross-site scripting (XSS) vulnerability in Sophos Anti-Virus for Windows 6.x before 6.5.8 and 7.x before 7.0.1 allows remote attackers to inject arbitrary web script or HTML via an archive with a file that matches a virus signature and has a crafted filename that is not properly handled by the print function in SavMain.exe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-10T17:00:00.000Z
CVE-2007-4513 
Multiple stack-based buffer overflows in IBM AIX 5.2 and 5.3 allow local users to gain privileges via a long argument to the (1) "-p" option to lqueryvg or (2) the "-V" option to lquerypv.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-05T16:00:00.000Z
CVE-2007-4514 
Unspecified vulnerability in HP ProCurve Manager and HP ProCurve Manager Plus 2.3 and earlier allows remote attackers to obtain sensitive information from the ProCurve Manager server via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-15T10:00:00.000Z
CVE-2007-4515 
Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1.0.419 allows remote attackers to execute arbitrary code via unspecified vectors involving arguments to the (1) fvCom and (2) info methods.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-31T22:00:00.000Z
CVE-2007-4516 
The Volume Manager Scheduler Service (aka VxSchedService.exe) in Symantec Veritas Storage Foundation 5.0 for Windows allows remote attackers to cause a denial of service (daemon crash or hang) via malformed packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-21T20:00:00.000Z
CVE-2007-4517 
Buffer overflow in the XDB.XDB_PITRIG_PKG.PITRIG_DROPMETADATA procedure in Oracle 10g R2 allows remote authenticated users to execute arbitrary code via a long (1) OWNER or (2) NAME argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-08T20:00:00.000Z
CVE-2007-4521 
Asterisk Open Source 1.4.5 through 1.4.11, when configured to use an IMAP voicemail storage backend, allows remote attackers to cause a denial of service via an e-mail with an "invalid/corrupted" MIME body, which triggers a crash when the recipient listens to voicemail.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-28T01:00:00.000Z
CVE-2007-4522 
Multiple SQL injection vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via one or more of the following vectors: the (1) id parameter to (a) pages/delete_page.php, (b) navigation/delete_menu.php, and (c) navigation/delete_item.php in admin/; the (2) menu_id, (3) name, (3) page_id, and (4) url parameters in (d) admin/navigation/do_new_item.php; the (5) new_menuname parameter in (e) admin/navigation/do_new_nav.php; and (6) area1, name, and url parameters to (f) admin/pages/do_new_page.php.  NOTE: some vectors might be reachable through the url and name parameters to (g) admin/navigation/new_nav_item.php.  NOTE: the original disclosure does not precisely state which vectors are associated with SQL injection versus XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-25T00:00:00.000Z
CVE-2007-4523 
Multiple cross-site scripting (XSS) vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote authenticated users to inject arbitrary web script or HTML via one or more of the following vectors: the (1) id parameter to (a) pages/delete_page.php, (b) navigation/delete_menu.php, and (c) navigation/delete_item.php in admin/; the (2) menu_id, (3) name, (3) page_id, and (4) url parameters in (d) admin/navigation/do_new_item.php; the (5) new_menuname parameter in (e) admin/navigation/do_new_nav.php; and (6) area1, name, and url parameters to (f) admin/pages/do_new_page.php, probably involving the Title or textarea field as reachable through admin/pages/new_page.php.  NOTE: the original disclosure does not precisely state which vectors are associated with SQL injection versus XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-25T00:00:00.000Z
CVE-2007-4524 
PHP remote file inclusion vulnerability in adisplay.php in PhPress 0.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the lang parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-25T00:00:00.000Z
CVE-2007-4525 
PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelette_cache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the squelette_cache variable is initialized before use, and is only used within the scope of a function
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-25T00:00:00.000Z
CVE-2007-4526 
The Client Login Extension (CLE) in Novell Identity Manager before 3.5.1 20070730 stores the username and password in a local file, which allows local users to obtain sensitive information by reading this file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-25T00:00:00.000Z
CVE-2007-4527 
Unrestricted file upload vulnerability in phUploader.php in phphq.Net phUploader 1.2 allows remote attackers to upload and execute arbitrary code via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-25T00:00:00.000Z
CVE-2007-4528 
The Foreign Function Interface (ffi) extension in PHP 5.0.5 does not follow safe_mode restrictions, which allows context-dependent attackers to execute arbitrary code by loading an arbitrary DLL and calling a function, as demonstrated by kernel32.dll and the WinExec function.  NOTE: this issue does not cross privilege boundaries in most contexts, so perhaps it should not be included in CVE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-25T00:00:00.000Z
CVE-2007-4529 
The WebAdmin interface in TeamSpeak Server 2.0.20.1 allows remote authenticated users with the ServerAdmin flag to assign Registered users certain privileges, resulting in a privilege set that extends beyond that ServerAdmin's own servers, as demonstrated by the (1) AdminAddServer, (2) AdminDeleteServer, (3) AdminStartServer, and (4) AdminStopServer privileges; and administration of arbitrary virtual servers via a request to a .tscmd URI with a modified serverid parameter, as demonstrated by (a) add_server.tscmd, (b) ask_delete_server.tscmd, (c) start_server.tscmd, and (d) stop_server.tscmd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-25T00:00:00.000Z
CVE-2007-4530 
Multiple cross-site scripting (XSS) vulnerabilities in TeamSpeak Server 2.0.20.1 allow remote attackers to inject arbitrary web script or HTML via (1) the error_text parameter to error_box.html or (2) the ok_title parameter to ok_box.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-25T00:00:00.000Z
CVE-2007-4531 
Soldat game server 1.4.2 and earlier, and dedicated server 2.6.2 and earlier, allows remote attackers to cause a client denial of service (crash) via (1) a long string to the file transfer port or (2) a long chat message, or (3) a server denial of service (continuous beep and slowdown) via a string containing many 0x07 or other control characters to the file transfer port.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-25T00:00:00.000Z
CVE-2007-4532 
Soldat game server 1.4.2 and earlier, and dedicated server 2.6.2 and earlier, allows remote attackers to cause a denial of service (client lockout) via a series of UDP join packets from a spoofed IP address, which triggers temporary blacklisting of this IP address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-25T00:00:00.000Z
CVE-2007-4533 
Format string vulnerability in the Say command in sv_main.cpp in Vavoom 1.24 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a chat message, related to a call to the BroadcastPrintf function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-25T00:00:00.000Z
CVE-2007-4534 
Buffer overflow in the VThinker::BroadcastPrintf function in p_thinker.cpp in Vavoom 1.24 and earlier allows remote attackers to execute arbitrary code via (1) a long string in a chat message and possibly (2) a long name field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-25T00:00:00.000Z
CVE-2007-4535 
The VStr::Resize function in str.cpp in Vavoom 1.24 and earlier allows remote attackers to cause a denial of service (daemon crash) via a string with a negative NewLen value within a certain UDP packet that triggers an assertion error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-25T00:00:00.000Z
CVE-2007-4536 
TorrentTrader 1.07 and earlier sets insecure permissions for files in the root directory, which allows attackers to execute arbitrary PHP code by modifying (1) disclaimer.txt, (2) sponsors.txt, and (3) banners.txt, which are used in an include call.  NOTE: there might be local attack vectors that extend to other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-25T00:00:00.000Z
CVE-2007-4537 
Heap-based buffer overflow in the Huffman decompression algorithm implemented in Skulltag 0.97d-beta4.1 and earlier allows remote attackers to execute arbitrary code via a crafted UDP packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-27T21:00:00.000Z
CVE-2007-4538 
email_in.pl in Bugzilla 2.23.4 through 3.0.0 allows remote attackers to execute arbitrary commands via the -f (From address) option to the Email::Send::Sendmail function, probably involving shell metacharacters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-27T21:00:00.000Z
CVE-2007-4539 
The WebService (XML-RPC) interface in Bugzilla 2.23.3 through 3.0.0 does not enforce permissions for the time-tracking fields of bugs, which allows remote attackers to obtain sensitive information via certain XML-RPC requests, as demonstrated by the (1) Deadline and (2) Estimated Time fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-27T21:00:00.000Z
CVE-2007-4540 
Multiple SQL injection vulnerabilities in download.php in Olate Download (od) 3.4.2 allow remote attackers to execute arbitrary SQL commands via the (1) HTTP_REFERER or (2) HTTP_USER_AGENT HTTP header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-27T21:00:00.000Z
CVE-2007-4541 
Multiple cross-site scripting (XSS) vulnerabilities in Olate Download (od) 3.4.2 allow remote attackers to inject arbitrary web script or HTML via (1) the PHP_SELF variable in modules/core/uim.php and (2) [url] tags in a comment in modules/core/fldm.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-27T21:00:00.000Z
CVE-2007-4542 
Multiple cross-site scripting (XSS) vulnerabilities in MapServer before 4.10.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the (1) processLine function in maptemplate.c and the (2) writeError function in mapserv.c in the mapserv CGI program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-27T21:00:00.000Z
CVE-2007-4543 
Cross-site scripting (XSS) vulnerability in enter_bug.cgi in Bugzilla 2.17.1 through 2.20.4, 2.22.x before 2.22.3, and 3.x before 3.0.1 allows remote attackers to inject arbitrary web script or HTML via the buildid field in the "guided form."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-27T21:00:00.000Z
CVE-2007-4544 
Cross-site scripting (XSS) vulnerability in wp-newblog.php in WordPress multi-user (MU) 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the weblog_id parameter (Username field).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-27T23:00:00.000Z
CVE-2007-4545 
Multiple directory traversal vulnerabilities in Unreal Commander 0.92 build 565 and 573 allow user-assisted remote attackers to create or overwrite arbitrary files via a .. (dot dot) in a filename within a (1) ZIP or (2) RAR archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-27T23:00:00.000Z
CVE-2007-4546 
Unreal Commander 0.92 build 565 and 573 lists the filenames from the Central Directory of a ZIP archive, but extracts to local filenames corresponding to names in Local File Header fields in this archive, which might allow remote attackers to trick a user into performing a dangerous file overwrite or creation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-27T23:00:00.000Z
CVE-2007-4547 
Unreal Commander 0.92 build 565 and 573 writes portions of heap memory into local files when extracting from an archive with malformed size information in a file header, which might allow user-assisted attackers to obtain sensitive information (memory contents) by reading the extracted files.  NOTE: this issue is only a vulnerability if Unreal is run with privileges, or if the extracted files are made accessible to other users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-27T23:00:00.000Z
CVE-2007-4548 
The login method in LoginModule implementations in Apache Geronimo 2.0 does not throw FailedLoginException for failed logins, which allows remote attackers to bypass authentication requirements, deploy arbitrary modules, and gain administrative access by sending a blank username and password with the command line deployer in the deployment module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-27T23:00:00.000Z
CVE-2007-4549 
Multiple buffer overflows in ALPass 2.7 English and 3.02 Korean allow user-assisted remote attackers to execute arbitrary code via an ALPass DB (APW) file containing (1) a long file-key or (2) a "Site Information and Folder entry" with a ciphertext_length value much larger than the plaintext_length value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-28T00:00:00.000Z
CVE-2007-4550 
Format string vulnerability in ALPass 2.7 English and 3.02 Korean might allow user-assisted remote attackers to execute arbitrary code via format string specifiers in an fnm field in a folder-name record in an ALPASS DB (APW) file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-28T00:00:00.000Z
CVE-2007-4551 
PHP remote file inclusion vulnerability in index.php in Agares Media Arcadem 2.01 allows remote attackers to execute arbitrary PHP code via a URL in the loadpage parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-28T00:00:00.000Z
CVE-2007-4552 
SQL injection vulnerability in index.php in Agares Media Arcadem 2.01 allows remote attackers to execute arbitrary SQL commands via the blockpage parameter.  NOTE: as of 20070827, the vendor has made conflicting statements regarding whether this issue exists or not.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-28T00:00:00.000Z
CVE-2007-4553 
The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service (device hang) via an INVITE message with a Via header that contains a '/' (slash) instead of the required space following the SIP version number.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-28T00:00:00.000Z
CVE-2007-4554 
Cross-site scripting (XSS) vulnerability in tiki-remind_password.php in Tikiwiki (aka Tiki CMS/Groupware) 1.9.7 allows remote attackers to inject arbitrary web script or HTML via the username parameter.  NOTE: this issue might be related to CVE-2006-2635.7.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-28T00:00:00.000Z
CVE-2007-4555 
Cross-site scripting (XSS) vulnerability in Ipswitch WS_FTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly handled when it is displayed by the view log option in the administration interface.  NOTE: this can be leveraged to create a new admin account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-28T00:00:00.000Z
CVE-2007-4556 
Struts support in OpenSymphony XWork before 1.2.3, and 2.x before 2.0.4, as used in WebWork and Apache Struts, recursively evaluates all input as an Object-Graph Navigation Language (OGNL) expression when altSyntax is enabled, which allows remote attackers to cause a denial of service (infinite loop) or execute arbitrary code via form input beginning with a "%{" sequence and ending with a "}" character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-28T01:00:00.000Z
CVE-2007-4557 
Cross-site scripting (XSS) vulnerability in the webacc servlet in Novell GroupWise 6.5 WebAccess allows remote attackers to inject arbitrary web script or HTML via the User.Id parameter, as demonstrated by a URL within a url field in a STYLE element, possibly due to an incomplete fix for CVE-2004-2103.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-28T01:00:00.000Z
CVE-2007-4559 
Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-28T00:00:00.000Z
CVE-2007-4560 
clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters that are used in a certain popen call, involving the "recipient field of sendmail."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-28T01:00:00.000Z
CVE-2007-4561 
Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote attackers to execute arbitrary code via an RSTP command containing multiple Require headers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-28T01:00:00.000Z
CVE-2007-4562 
Unspecified vulnerability in Hitachi DABroker before 03-02-/D and Cosminexus DABroker before 02-04-/C and 03-05-/E allows remote attackers to cause a denial of service (connection prevention) by sending "data unexpectedly through a port."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-28T01:00:00.000Z