Linux Distros Unpatched Vulnerability : CVE-2007-4559

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite...

Linux Distros Unpatched Vulnerability : CVE-2007-0455

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service...

CLSA-2025-1740471603 python3.11: Fix of CVE-2007-4559

CVE-2007-4559: add security filter in the tarfile module to prevent directory traversal attacks. Uses filter="data" by default to block unsafe filenames; set filter="tar" to keep legacy behavior...

K000149808: Python tarfile vulnerability CVE-2007-4559

Security Advisory Description Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR archive, a related issue to CVE-2001-1267...

Azure Linux 3.0 Security Update: kernel (CVE-2007-4998)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2007-4998 advisory. - cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers ...

CVE-2007-2699

creationtimestamp| type| source ---|---|--- 2025-02-06 03:13:38+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:08:23+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd...

CVE-2007-4559 affecting package python3 for versions less than 3.9.19-1

CVE-2007-4559 affecting package python3 for versions less than 3.9.19-1. A patched version of the package is available...

CVE-2007-3816

creationtimestamp| type| source ---|---|--- 2025-01-17 14:56:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2133...

CVE-2007-3205 affecting package php 7.4.14-3

CVE-2007-3205 affecting package php 7.4.14-3. This CVE either no longer is or was never applicable...

CVE-2007-6353 affecting package exiv2 0.28.0-1

CVE-2007-6353 affecting package exiv2 0.28.0-1. This CVE either no longer is or was never applicable...

CVE-2007-1397 affecting package fish 3.6.2-1

CVE-2007-1397 affecting package fish 3.6.2-1. This CVE either no longer is or was never applicable...

CVE-2007-1397 affecting package fish 3.1.2-4

CVE-2007-1397 affecting package fish 3.1.2-4. This CVE either no longer is or was never applicable...

CVE-2007-3205 affecting package php 8.1.34-1

CVE-2007-3205 affecting package php 8.1.34-1. This CVE either no longer is or was never applicable...

CVE-2007-4559 affecting package python3 3.7.16-1

CVE-2007-4559 affecting package python3 3.7.16-1. No patch is available currently...

Cisco IP Phone Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2007-5583)

Cisco IP Phone 7940 with firmware P0S3-08-7-00 allows remote attackers to cause a denial of service 486 Busy responses or device reboot via a sequence of SIP INVITE transactions in which the Request-URI lacks a user name, a different vulnerability than CVE-2007-4459. This plugin only works with...

Cisco Unified IP Phone Permissions, Privileges, and Access Controls (CVE-2007-1072)

The command line interface CLI in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.04SR1 and earlier allows local users to obtain privileges or cause a denial of service via unspecified vectors. NOTE: this issue can be leveraged remotely via CVE-2007-1063. This...

Sony Network Cameras Heap-based Buffer Overflow (CVE-2007-3488)

Heap-based buffer overflow in the viewer ActiveX control in Sony Network Camera SNC-RZ25N before 1.30; SNC-P1 and SNC-P5 before 1.29; SNC-CS10 and SNC-CS11 before 1.06; SNC-DF40N and SNC-DF70N before 1.18; SNC-RZ50N and SNC-CS50N before 2.22; SNC-DF85N, SNC-DF80N, and SNC-DF50N before 1.12; and...

Cisco Unified IP Phone Use of Hard-coded Credentials (CVE-2007-1063)

The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.04SR1 and earlier, uses a hard- coded username and password, which allows remote attackers to access the device. This plugin only works with Tenable.ot. Please visit...

Cisco IP Phone Session Initiation Protocol Denial of Service (CVE-2007-4459)

Cisco IP Phone 7940 and 7960 with P0S3-08-6-00 firmware, and other SIP firmware before 8.70, allows remote attackers to cause a denial of service device reboot via 1 a certain sequence of 10 invalid SIP INVITE and OPTIONS messages; or 2 a certain invalid SIP INVITE message that contains a remote...

Cisco Unified IP Phone Exposure of Sensitive Information to an Unauthorized Actor (CVE-2007-6190)

The HTTP daemon in the Cisco Unified IP Phone, when the Extension Mobility feature is enabled, allows remote authenticated users of other phones associated with the same CUCM server to eavesdrop on the physical environment via a CiscoIPPhoneExecute message containing a URL attribute of an...