CVE-2007-5954

Cross-site scripting XSS vulnerability in buscador.php in JLMForo System allows remote attackers to inject arbitrary web script or HTML via the clave parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-0158

thttpd 2007 has buffer underflow...

CVE-2007-1406

Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors...

CVE-2007-20001

A flaw was found in StarWind iSCSI target. An attacker could script standard iSCSI Initiator operations to exhaust the StarWind service socket, which could lead to denial of service. This affects iSCSI SAN Windows Native Version 3.2.2 build 2007-02-20...

Alibaba Cloud Linux 3 : 0040: python3 (ALINUX3-SA-2024:0040)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0040 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2007-4559: Directory traversal...

Alibaba Cloud Linux 3 : 0272: python3.11-pip (ALINUX3-SA-2024:0272)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0272 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2007-4559: Directory traversal vulnerability in...

Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to multiple CVEs

Summary Cloud Pak for Security CP4S v1.8.1.0 and earlier uses packages that are vulnerable to several CVEs. These have been remediated in the latest product release. Please see below for CVE details and the Remediation section for upgrade instructions. Vulnerability Details CVEID:CVE-2015-8985...

Security Bulletin:IBM TRIRIGA Application Platform may be be afftected by known vulnerabilities in db2jcc4.jar (CVE-2007-2582)

Summary IBM TRIRIGA Application may be vulnerable to mutiple buffer overflows in DB2 Vulnerability Details CVEID:CVE-2007-2582 DESCRIPTION: Multiple buffer overflows in the DB2 JDBC Applet Server DB2JDS service in IBM DB2 9.x and earlier allow remote attackers to 1 execute arbitrary code via a...

Advisory ROSA-SA-2025-2825

Software: python-pip 9.0.3 OS: ROSA Virtualization 3.0 packageevrstring: python-pip-9.0.3-24.rv30 CVE-ID: CVE-2007-4559 BDU-ID: 2022-05975 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the extract and extractall functions of the tarfile module of the Python programming language interpreter is...

Unable to update machine catalog after upgrading Office 2013 to 2016 version

Error message : FailedToCreateImagePreparationVM TaskErrorInformation: Terminated Internal Error: Failed to upload disk. Unable to write data to the transport connection. An existing connection was forcibly closed by the remote host. Event ID 2007...

CVE-2007-2438

creationtimestamp| type| source ---|---|--- 2025-04-10 19:09:41+00:00| seen| https://gist.github.com/eduardoarakaki/a203f83ced3b0992af6de67c2eeeb7a3...

CVE-2007-5928

creationtimestamp| type| source ---|---|--- 2025-04-03 14:35:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10229...

CVE-2007-5927

creationtimestamp| type| source ---|---|--- 2025-04-03 14:35:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10227...

CVE-2007-5926

creationtimestamp| type| source ---|---|--- 2025-04-03 14:35:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10227...

CVE-2007-5817

creationtimestamp| type| source ---|---|--- 2025-04-03 14:35:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10226...

CVE-2007-5775

creationtimestamp| type| source ---|---|--- 2025-04-03 14:35:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10221...

CVE-2007-4043

creationtimestamp| type| source ---|---|--- 2025-04-03 14:35:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10218...

CVE-2025-2007

CVE-2025-2007 affects the Import Export Suite for CSV and XML Datafeed WordPress plugin (all versions up to 7.19). The vulnerability arises from insufficient file path validation in the deleteImage() function, enabling authenticated users with Subscriber+ access to delete arbitrary files on the s...

CVE-2025-2007 Import Export Suite for CSV and XML Datafeed <= 7.19 - Authenticated (Subscriber+) Arbitrary File Deletion

The Import Export Suite for CSV and XML Datafeed plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteImage function in all versions up to, and including, 7.19. This makes it possible for authenticated attackers, with Subscriber-level...

Medium: python

Issue Overview: Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR archive, a related issue to CVE-2001-1267. CVE-2007-4559...