rainbutterfly/cve_corpus huggingface dataset:
CVE-2007-2426 
PHP remote file inclusion vulnerability in myfunctions/mygallerybrowser.php in the myGallery 1.4b4 and earlier plugin for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the myPath parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T00:00:00.000Z
CVE-2007-2427 
SQL injection vulnerability in index.php in the pnFlashGames 1.5 module for PostNuke allows remote attackers to execute arbitrary SQL commands via the cid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T00:00:00.000Z
CVE-2007-2428 
Multiple PHP remote file inclusion vulnerabilities in page.php in Ahhp-Portal allow remote attackers to execute arbitrary PHP code via a URL in the (1) fp or (2) sc parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T00:00:00.000Z
CVE-2007-2429 
ManageEngine PasswordManager Pro (PMP) allows remote attackers to obtain administrative access to a database by injecting a certain command line for the mysql program, as demonstrated by the "-port 2345" and "-u root" arguments.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T00:00:00.000Z
CVE-2007-2430 
shared/code/tce_tmx.php in TCExam 4.0.011 and earlier allows remote attackers to create arbitrary PHP files in cache/ by placing file contents and directory traversal manipulations into a SessionUserLang cookie to public/code/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T00:00:00.000Z
CVE-2007-2431 
Dynamic variable evaluation vulnerability in shared/config/tce_config.php in TCExam 4.0.011 and earlier allows remote attackers to conduct cross-site scripting (XSS) and possibly other attacks by modifying critical variables such as $_SERVER, as demonstrated by injecting web script via the _SERVER[SCRIPT_NAME] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T00:00:00.000Z
CVE-2007-2432 
Cross-site scripting (XSS) vulnerability in utilities/search.asp in nukedit 4.9.7b allows remote attackers to inject arbitrary web script or HTML via the terms parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T10:00:00.000Z
CVE-2007-2433 
Cross-site scripting (XSS) vulnerability in index.php in Ariadne 2.4.1 allows remote attackers to inject arbitrary web script or HTML via the ARLogin parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T10:00:00.000Z
CVE-2007-2434 
Buffer overflow in asnsp.dll in Aventail Connect 4.1.2.13 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a malformed DNS query.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T10:00:00.000Z
CVE-2007-2435 
Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, allows remote attackers to perform unauthorized actions via an application that grants privileges to itself, related to "Incorrect Use of System Classes" and probably related to support for JNLP files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T10:00:00.000Z
CVE-2007-2437 
The X render (Xrender) extension in X.org X Window System 7.0, 7.1, and 7.2, with Xserver 1.3.0 and earlier, allows remote authenticated users to cause a denial of service (daemon crash) via crafted values to the (1) XRenderCompositeTrapezoids and (2) XRenderAddTraps functions, which trigger a divide-by-zero error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T10:00:00.000Z
CVE-2007-2438 
The sandbox for vim allows dangerous functions such as (1) writefile, (2) feedkeys, and (3) system, which might allow user-assisted attackers to execute shell commands and write files via modelines.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T21:00:00.000Z
CVE-2007-2439 
Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to cause a denial of service (device hang) and read data from a COM or LPT device via a DOS device name with an arbitrary extension.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-16T19:00:00.000Z
CVE-2007-2440 
Directory traversal vulnerability in Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to read certain files via a .. (dot dot) in a URI containing a "\web-inf" sequence.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-16T19:00:00.000Z
CVE-2007-2441 
Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to obtain the system path via certain URLs associated with (1) deploying web applications or (2) displaying .xtp files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-16T19:00:00.000Z
CVE-2007-2442 
The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a zero-length RPC credential, which causes kadmind to free an uninitialized pointer during cleanup.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-26T22:00:00.000Z
CVE-2007-2443 
Integer signedness error in the gssrpc__svcauth_unix function in svc_auth_unix.c in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a negative length value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-26T22:00:00.000Z
CVE-2007-2444 
Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary privileges and execute SMB/CIFS protocol operations via unspecified vectors that cause the daemon to transition to the root user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T21:00:00.000Z
CVE-2007-2445 
The png_handle_tRNS function in pngrutil.c in libpng before 1.0.25 and 1.2.x before 1.2.17 allows remote attackers to cause a denial of service (application crash) via a grayscale PNG image with a bad tRNS chunk CRC value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-16T22:00:00.000Z
CVE-2007-2446 
Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving (1) DFSEnum (netdfs_io_dfs_EnumInfo_d), (2) RFNPCNEX (smb_io_notify_option_type_data), (3) LsarAddPrivilegesToAccount (lsa_io_privilege_set), (4) NetSetFileSecurity (sec_io_acl), or (5) LsarLookupSids/LsarLookupSids2 (lsa_io_trans_names).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T21:00:00.000Z
CVE-2007-2447 
The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T21:00:00.000Z
CVE-2007-2448 
Subversion 1.4.3 and earlier does not properly implement the "partial access" privilege for users who have access to changed paths but not copied paths, which allows remote authenticated users to obtain sensitive information (revision properties) via svn (1) propget, (2) proplist, or (3) propedit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-14T23:00:00.000Z
CVE-2007-2449 
Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI after the ';' character, as demonstrated by a URI containing a "snp/snoop.jsp;" sequence.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-14T23:00:00.000Z
CVE-2007-2450 
Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web applications in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote authenticated users to inject arbitrary web script or HTML via a parameter name to manager/html/upload, and other unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-14T23:00:00.000Z
CVE-2007-2451 
Unspecified vulnerability in drivers/crypto/geode-aes.c in GEODE-AES in the Linux kernel before 2.6.21.3 allows attackers to obtain sensitive information via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-29T20:00:00.000Z
CVE-2007-2452 
Heap-based buffer overflow in the visit_old_format function in locate/locate.c in locate in GNU findutils before 4.2.31 might allow context-dependent attackers to execute arbitrary code via a long pathname in a locate database that has the old format, a different vulnerability than CVE-2001-1036.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-04T16:00:00.000Z
CVE-2007-2453 
The random number feature in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, (1) does not properly seed pools when there is no entropy, or (2) uses an incorrect cast when extracting entropy, which might cause the random number generator to provide the same values after reboots on systems without an entropy source.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-11T23:00:00.000Z
CVE-2007-2454 
Heap-based buffer overflow in the VGA device in Parallels allows local users, with root access to the guest operating system, to terminate the virtual machine and possibly execute arbitrary code in the host operating system via unspecified vectors related to bitblt operations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T17:00:00.000Z
CVE-2007-2455 
Parallels allows local users to cause a denial of service (virtual machine abort) via (1) certain INT instructions, as demonstrated by INT 0xAA; (2) an IRET instruction when an invalid address is at the top of the stack; (3) a malformed MOVNTI instruction, as demonstrated by using a register as a destination; or a write operation to (4) SEGR6 or (5) SEGR7.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T17:00:00.000Z
CVE-2007-2456 
Multiple PHP remote file inclusion vulnerabilities in FireFly 1.1.01 allow remote attackers to execute arbitrary PHP code via a URL in the doc_root parameter to (1) localize.php or (2) config.php in modules/admin/include/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T17:00:00.000Z
CVE-2007-2457 
PHP remote file inclusion vulnerability in resources/includes/class.Smarty.php in Pixaria Gallery before 1.4.3 allows remote attackers to execute arbitrary PHP code via a URL in the cfg[sys][base_path] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T18:00:00.000Z
CVE-2007-2458 
Multiple PHP remote file inclusion vulnerabilities in Pixaria Gallery before 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the cfg[sys][base_path] parameter to psg.smarty.lib.php and certain include and library scripts, a different vector than CVE-2007-2457.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T18:00:00.000Z
CVE-2007-2459 
Heap-based buffer overflow in the BMP reader (bmp.c) in Imager perl module (libimager-perl) 0.45 through 0.56 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted 8-bit/pixel compressed BMP files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T18:00:00.000Z
CVE-2007-2460 
PHP remote file inclusion vulnerability in modules/admin/include/config.php in FireFly 1.1.01 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T18:00:00.000Z
CVE-2007-2461 
The DHCP relay agent in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 allows remote attackers to cause a denial of service (dropped packets) via a DHCPREQUEST or DHCPINFORM message that causes multiple DHCPACK messages to be sent from DHCP servers to the agent, which consumes the memory allocated for a local buffer.  NOTE: this issue only occurs when multiple DHCP servers are used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T22:00:00.000Z
CVE-2007-2462 
Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 before 7.2(2)8, when using Layer 2 Tunneling Protocol (L2TP) or Remote Management Access, allows remote attackers to bypass LDAP authentication and gain privileges via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T22:00:00.000Z
CVE-2007-2463 
Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.1 before 7.1(2)49 and 7.2 before 7.2(2)17 allows remote attackers to cause a denial of service (device reload) via unknown vectors related to VPN connection termination and password expiry.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T22:00:00.000Z
CVE-2007-2464 
Race condition in Cisco Adaptive Security Appliance (ASA) and PIX 7.1 before 7.1(2)49 and 7.2 before 7.2(2)19, when using "clientless SSL VPNs," allows remote attackers to cause a denial of service (device reload) via "non-standard SSL sessions."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T22:00:00.000Z
CVE-2007-2465 
Unspecified vulnerability in Sun Solaris 9, when Solaris Auditing (BSM) is enabled for file read, write, attribute modify, create, or delete audit classes, allows local users to cause a denial of service (panic) via unknown vectors, possibly related to the audit_savepath function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T22:00:00.000Z
CVE-2007-2466 
Unspecified vulnerability in the LDAP Software Development Kit (SDK) for C, as used in Sun Java System Directory Server 5.2 up to Patch 4 and Sun ONE Directory Server 5.1, allows remote attackers to cause a denial of service (crash) via certain BER encodings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T22:00:00.000Z
CVE-2007-2467 
ZoneAlarm Pro 6.5.737.000, 6.1.744.001, and possibly earlier versions and other products, allows local users to cause a denial of service (system crash) by sending malformed data to the vsdatant device driver, which causes an invalid memory access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T22:00:00.000Z
CVE-2007-2468 
Unspecified vulnerability in HP OpenVMS for Integrity Servers 8.2-1 and 8.3 allows local users to cause a denial of service (crash) via "Program actions relating to exceptions."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T22:00:00.000Z
CVE-2007-2469 
SQL injection vulnerability in index.php in FileRun 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the fid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T23:00:00.000Z
CVE-2007-2470 
Multiple cross-site scripting (XSS) vulnerabilities in index.php in FileRun 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) page, (2) module, or (3) section parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T23:00:00.000Z
CVE-2007-2471 
Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to read arbitrary files via a full pathname in the form parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T23:00:00.000Z
CVE-2007-2472 
Cross-site scripting (XSS) vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the form parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T23:00:00.000Z
CVE-2007-2473 
SQL injection vulnerability in stylesheet.php in CMS Made Simple 1.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the templateid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T23:00:00.000Z
CVE-2007-2474 
Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart 4.0 allow remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter to (1) include/payment/payflow_pro.php, (2) global.php, or (3) libsecure.php, different vectors than CVE-2007-2070.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T23:00:00.000Z
CVE-2007-2475 
Unspecified vulnerability in the ADSCHEMA utility in Novell SecureLogin (NSL) 6 SP1 before 6.0.106 has unknown impact and remote attack vectors, related to granting "users excess permissions to their own attributes."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T23:00:00.000Z
CVE-2007-2476 
Unspecified vulnerability in Novell SecureLogin (NSL) 6 SP1 before 6.0.106 has unknown impact and remote attack vectors, related to Active Directory (AD) password changes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-02T23:00:00.000Z
CVE-2007-2477 
PHP remote file inclusion vulnerability in phpMyChat.php3 in phpMyChat 0.14.5 allows remote attackers to execute arbitrary PHP code via a URL in the {ChatPath} parameter.  NOTE: this has been disputed by multiple third parties and CVE because $ChatPath is set to a constant value
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-03T00:00:00.000Z
CVE-2007-2478 
Multiple heap-based buffer overflows in the IRC component in Cerulean Studios Trillian Pro before 3.1.5.1 allow remote attackers to corrupt memory and possibly execute arbitrary code via (1) a URL with a long UTF-8 string, which triggers the overflow when the user highlights it, or (2) a font HTML tag with a face attribute containing a long UTF-8 string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-03T00:00:00.000Z
CVE-2007-2479 
Cerulean Studios Trillian Pro before 3.1.5.1 allows remote attackers to obtain potentially sensitive information via long CTCP PING messages that contain UTF-8 characters, which generates a malformed response that is not truncated by a newline, which can cause portions of a server message to be sent to the attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-03T00:00:00.000Z
CVE-2007-2480 
The _udp_lib_get_port function in net/ipv4/udp.c in Linux kernel 2.6.21 and earlier does not prevent a bind to a port with a local address when there is already a bind to that port with a wildcard local address, which might allow local users to intercept local traffic for daemons or other applications.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-03T17:00:00.000Z
CVE-2007-2481 
PHP remote file inclusion vulnerability in wordtube-button.php in the wordTube 1.43 and earlier plugin for WordPress, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the wpPATH parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-03T17:00:00.000Z
CVE-2007-2482 
Directory traversal vulnerability in wordtube-button.php in the wordTube 1.43 and earlier plugin for WordPress, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the wpPATH parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-03T17:00:00.000Z
CVE-2007-2483 
Directory traversal vulnerability in js/wptable-button.php in the wp-Table 1.43 and earlier plugin for WordPress, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via the wpPATH parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-03T17:00:00.000Z
CVE-2007-2484 
PHP remote file inclusion vulnerability in js/wptable-button.php in the wp-Table 1.43 and earlier plugin for WordPress, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the wpPATH parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-03T17:00:00.000Z
CVE-2007-2485 
PHP remote file inclusion vulnerability in myflash-button.php in the myflash 1.00 and earlier plugin for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the wpPATH parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-03T17:00:00.000Z
CVE-2007-2486 
Directory traversal vulnerability in download.asp in Motobit 1.3 and 1.5 (aka PStruh-CZ) allows remote attackers to read arbitrary files via a .. (dot dot) in the File parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-03T17:00:00.000Z
CVE-2007-2487 
Stack-based buffer overflow in AtomixMP3 allows remote attackers to execute arbitrary code via a long filename in an MP3 file, a different vector than CVE-2006-6287.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-03T17:00:00.000Z
CVE-2007-2488 
The IAX2 channel driver (chan_iax2) in Asterisk before 20070504 does not properly null terminate data, which allows remote attackers to trigger loss of transmitted data, and possibly obtain sensitive information (memory contents) or cause a denial of service (application crash), by sending a frame that lacks a 0 byte.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-07T19:00:00.000Z