Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-5462 State: PUBLISHED Published: 2009-01-14T02:00:00 Last Updated: 2024-08-07T10:56:46.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the WebLogic Portal component in BEA Product Suite 10.3, 10.2, 10.0 MP1, 9.2 MP3, and 8.1 SP6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0115 - http://www.securitytracker.com/id?1021571 - http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html - http://www.securityfocus.com/bid/33177
CVE ID: CVE-2008-5463 State: PUBLISHED Published: 2009-01-14T02:00:00 Last Updated: 2024-08-07T10:56:46.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PeopleSoft Enterprise Campus Solutions component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8 allows remote authenticated users to affect confidentiality and integrity via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33525 - http://www.vupen.com/english/advisories/2009/0115 - http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html - http://www.securityfocus.com/bid/33177 - http:/
tp://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html - http://www.securityfocus.com/bid/33177 - http://www.securitytracker.com/id?1021570
CVE ID: CVE-2008-5464 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-5465 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-5466 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-5467 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-5468 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-5469 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-5470 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-5471 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-5472 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-5473 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-5474 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-5475 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-5476 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-5477 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-5478 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-5479 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-5480 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-5481 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-5482 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-5483 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-5484 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-5485 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-5486 State: PUBLISHED Published: 2008-12-12T16:00:00 Last Updated: 2024-08-07T10:56:47.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32732 - http://www.securityfocus.com/bid/32308 - https://www.exploit-db.com/exploits/7124 - http://securityreason.com/securityalert/4719 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46631
CVE ID: CVE-2008-5487 State: PUBLISHED Published: 2008-12-12T16:00:00 Last Updated: 2024-08-07T10:56:47.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46632 - http://secunia.com/advisories/32732 - http://www.securityfocus.com/bid/32308 - https://www.exploit-db.com/exploits/7124 - http://securityreason.com/securityalert/4719
CVE ID: CVE-2008-5488 State: PUBLISHED Published: 2008-12-12T16:00:00 Last Updated: 2024-08-07T10:56:46.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin.php in E-topbiz Domain Shop 2 allows remote attackers to execute arbitrary SQL commands via the passfromform parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46435 - http://www.securityfocus.com/bid/32170 - http://www.vupen.com/english/advisories/2008/3048 - https://www.exploit-db.com/exploits/7037
CVE ID: CVE-2008-5489 State: PUBLISHED Published: 2008-12-12T16:00:00 Last Updated: 2024-08-07T10:56:47.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in channel_detail.php in ClipShare Pro 4, and 2006 through 2007, allows remote attackers to execute arbitrary SQL commands via the chid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32723 - http://www.vupen.com/english/advisories/2008/3170 - http://www.securityfocus.com/bid/32311 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46629 - https://www.exploit-db.com/exploits/7128 - http://securityreason.com/securityalert/4713
CVE ID: CVE-2008-5490 State: PUBLISHED Published: 2008-12-12T16:00:00 Last Updated: 2024-08-07T10:56:47.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in PHPStore Yahoo Answers allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4718 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46624 - http://www.vupen.com/english/advisories/2008/3169 - http://www.securityfocus.com/bid/32316 - http://secunia.com/advisories/32717 - https://www.exploit-db.com/exploits/7131
CVE ID: CVE-2008-5491 State: PUBLISHED Published: 2008-12-12T16:00:00 Last Updated: 2024-08-07T10:56:46.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in edit.php in SlimCMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the pageID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7121 - http://securityreason.com/securityalert/4717 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46633 - http://www.securityfocus.com/bid/32300
CVE ID: CVE-2008-5492 State: PUBLISHED Published: 2008-12-12T16:00:00 Last Updated: 2024-08-07T10:56:46.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the PDFVIEW.PdfviewCtrl.1 ActiveX control in pdfview.ocx 2.0.0.1 in VeryDOC PDF Viewer OCX Control allows remote attackers to execute arbitrary code via a long first argument to the OpenPDF method. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32725 - https://www.exploit-db.com/exploits/7126 - http://www.bmgsec.com.au/advisories/openpdf.txt - http://securityreason.com/securityale
w.exploit-db.com/exploits/7126 - http://www.bmgsec.com.au/advisories/openpdf.txt - http://securityreason.com/securityalert/4715 - http://www.securityfocus.com/bid/32313 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46622
CVE ID: CVE-2008-5493 State: PUBLISHED Published: 2008-12-12T16:00:00 Last Updated: 2024-08-07T10:56:47.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in track.php in PHPStore Wholesales (aka Wholesale) allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7134 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46626 - http://securityreason.com/securityalert/4720 - http://www.securityfocus.com/bid/32314 - http://secunia.com/advisories/32741 - http://www.vupen.com/english/advisories/2008/3167 - http://packetstorm.linuxs
14 - http://secunia.com/advisories/32741 - http://www.vupen.com/english/advisories/2008/3167 - http://packetstorm.linuxsecurity.com/0811-exploits/wholesale-sql.txt
CVE ID: CVE-2008-5494 State: PUBLISHED Published: 2008-12-12T16:00:00 Last Updated: 2024-08-07T10:56:46.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Contact Information Module (com_contactinfo) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3122 - http://securityreason.com/securityalert/4712 - https://www.exploit-db.com/exploits/7093 - http://www.securityfocus.com/bid/32260 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46563
CVE ID: CVE-2008-5495 State: PUBLISHED Published: 2008-12-12T16:00:00 Last Updated: 2024-08-07T10:56:47.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the GungHo LoadPrgAx ActiveX control 1.0.0.6 and earlier allows remote attackers to execute arbitrary Java applications via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://gungho.jp/ - http://secunia.com/advisories/32743 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46623 - http://jvn.jp/en/jp/JVN47875752/index.html - http://www.securityfocus.com/bid/32318 - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000077.html
CVE ID: CVE-2008-5496 State: PUBLISHED Published: 2008-12-12T16:00:00 Last Updated: 2024-08-07T10:56:46.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in showcategory.php in PozScripts Business Directory Script allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46558 - https://www.exploit-db.com/exploits/7098 - http://secunia.com/advisories/32647 - http://securityreason.com/securityalert/4714 - http://www.vupen.com/english/advisories/2008/3118 - http://www.securityfocus.com/bid/32264 - http://osvdb.org
ert/4714 - http://www.vupen.com/english/advisories/2008/3118 - http://www.securityfocus.com/bid/32264 - http://osvdb.org/49822
CVE ID: CVE-2008-5497 State: PUBLISHED Published: 2008-12-12T16:00:00 Last Updated: 2024-08-07T10:56:47.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: BandSite CMS 1.1.4 allows remote attackers to bypass authentication and gain administrative access by setting the login_auth cookie to true. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7113 - http://www.securityfocus.com/bid/32295 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46601 - http://securityreason.com/securityalert/4716
CVE ID: CVE-2008-5498 State: PUBLISHED Published: 2008-12-26T20:00:00 Last Updated: 2024-08-07T10:56:46.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.securityfocus.com/vulnerabilities/exploits/33002-2.php - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://securitytracker.com/id?1021494 - http://marc.info/?l=bugtraq&m=1246545461
info/?l=bugtraq&m=125631037611762&w=2 - http://securitytracker.com/id?1021494 - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - http://osvdb.org/51031 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/47635 - http://secunia.com/advisories/34642 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html - http://www.php.net/releases/5_2_9.php - http://downloads.securityfocus.com/vulnerabilities/exploits/33002.php - http://www.mandriva.com/security/advisories?name=MDVSA-2009:023 - http://www.mandriva.com/security/advisories?name=MDVSA-200
://www.mandriva.com/security/advisories?name=MDVSA-2009:023 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:022 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9667 - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html - http://www.redhat.com/support/errata/RHSA-2009-0350.html - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:021 - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - http://support.apple.com/kb/HT3865 - http://cvs.php.net/viewvc.cgi/php-src/NEWS?r1=1.2027.2.547.2.1360&r2=1.2027.2.547.2.1361&diff_format=u - h
m/kb/HT3865 - http://cvs.php.net/viewvc.cgi/php-src/NEWS?r1=1.2027.2.547.2.1360&r2=1.2027.2.547.2.1361&diff_format=u - http://secunia.com/advisories/36701 - http://secunia.com/advisories/35306 - http://secunia.com/advisories/35650 - http://www.securityfocus.com/bid/33002
CVE ID: CVE-2008-5499 State: PUBLISHED Published: 2008-12-18T00:00:00 Last Updated: 2024-08-07T10:56:46.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe Flash Player for Linux 10.0.12.36, and 9.0.151.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021458 - http://secunia.com/advisories/33221 - http://www.vupen.com/english/advisories/2008/3449 - http://www.redhat.com/support/errata/RHSA-2008-1047.html - http://secunia.com/advisories/34226 - http://secunia.com/advisories/33294 - http://www.securityfocus.co
2008-1047.html - http://secunia.com/advisories/34226 - http://secunia.com/advisories/33294 - http://www.securityfocus.com/bid/32896 - http://osvdb.org/50796 - http://security.gentoo.org/glsa/glsa-200903-23.xml - http://www.adobe.com/support/security/bulletins/apsb08-24.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/47445 - http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00006.html - http://secunia.com/advisories/33267
CVE ID: CVE-2008-5500 State: PUBLISHED Published: 2008-12-17T23:00:00 Last Updated: 2024-08-07T10:56:46.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: The layout engine in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to (1) a reachable assertion or (2) an integer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32882 - http://secunia.com/advisories/33408 - http://www.debian.org/security/2009/dsa-1697 - https://bugzilla.moz
om/bid/32882 - http://secunia.com/advisories/33408 - http://www.debian.org/security/2009/dsa-1697 - https://bugzilla.mozilla.org/show_bug.cgi?id=464998 - https://usn.ubuntu.com/690-3/ - http://secunia.com/advisories/33205 - http://secunia.com/advisories/33421 - http://secunia.com/advisories/33232 - http://www.redhat.com/support/errata/RHSA-2008-1036.html - http://www.vupen.com/english/advisories/2009/0977 - http://www.ubuntu.com/usn/usn-690-2 - http://www.ubuntu.com/usn/usn-701-1 - http://secunia.com/advisories/33231 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:245 - https://usn.ubuntu.com/690-1/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/47406 - http://www.mandr
2008:245 - https://usn.ubuntu.com/690-1/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/47406 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:012 - http://secunia.com/advisories/33203 - http://secunia.com/advisories/33433 - http://www.debian.org/security/2009/dsa-1707 - http://secunia.com/advisories/33216 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 - http://www.redhat.com/support/errata/RHSA-2008-1037.html - http://www.mozilla.org/security/announce/2008/mfsa2008-60.html - http://www.debian.org/security/2009/dsa-1704 - http://www.debian.org/security/2009/dsa-1696 - http://secunia.com/advisories/33204 - http://www.ubuntu.com/usn/usn-701-2 - http://
.debian.org/security/2009/dsa-1696 - http://secunia.com/advisories/33204 - http://www.ubuntu.com/usn/usn-701-2 - http://secunia.com/advisories/33184 - http://www.redhat.com/support/errata/RHSA-2009-0002.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:244 - https://bugzilla.mozilla.org/show_bug.cgi?id=460803 - http://secunia.com/advisories/33415 - http://secunia.com/advisories/33188 - http://secunia.com/advisories/33523 - http://secunia.com/advisories/35080 - http://secunia.com/advisories/33547 - http://secunia.com/advisories/33434 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.
33547 - http://secunia.com/advisories/33434 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11053 - http://www.securitytracker.com/id?1021417 - http://secunia.com/advisories/33189 - http://secunia.com/advisories/34501
CVE ID: CVE-2008-5501 State: PUBLISHED Published: 2008-12-17T23:00:00 Last Updated: 2024-08-07T10:56:46.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service via vectors that trigger an assertion failure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32882 - http://secunia.com/advisories/33421 - http://www.redhat.com/support/errata/RHSA-2008-1036.html - http://www.vupen.com/english/advisories/2009/0977 - https://bugzilla.mozilla.org/show_bug.cgi?id=395623 - htt
036.html - http://www.vupen.com/english/advisories/2009/0977 - https://bugzilla.mozilla.org/show_bug.cgi?id=395623 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:245 - https://usn.ubuntu.com/690-1/ - http://secunia.com/advisories/33203 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10257 - http://secunia.com/advisories/33216 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 - http://www.redhat.com/support/errata/RHSA-2008-1037.html - http://www.mozilla.org/security/announce/2008/mfsa2008-60.html - http://www.redhat.com/support/errata/RHSA-2009-0002.html - http://secunia.com/advisories/33188 - https://exchange.xforce.i
tp://www.redhat.com/support/errata/RHSA-2009-0002.html - http://secunia.com/advisories/33188 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47407 - http://www.securitytracker.com/id?1021417 - http://secunia.com/advisories/33189 - http://secunia.com/advisories/34501
CVE ID: CVE-2008-5502 State: PUBLISHED Published: 2008-12-17T23:00:00 Last Updated: 2024-08-07T10:56:46.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service (crash) via vectors that trigger memory corruption, related to the GetXMLEntity and FastAppendChar functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32882 - http://secunia.com/advisories/33421 - http://www.redhat.com/support/errata/RHSA-2008-1036.html - http://www.vupen.com/english/advisories/2009/0
sories/33421 - http://www.redhat.com/support/errata/RHSA-2008-1036.html - http://www.vupen.com/english/advisories/2009/0977 - https://bugzilla.mozilla.org/show_bug.cgi?id=458679 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:245 - https://usn.ubuntu.com/690-1/ - http://secunia.com/advisories/33203 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47408 - http://secunia.com/advisories/33216 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 - http://www.redhat.com/support/errata/RHSA-2008-1037.html - http://www.mozilla.org/security/announce/2008/mfsa2008-60.html - http://www.redhat.com/support/errata/RHSA-2009-0002.html - http://secunia.com/advisories/3318
ce/2008/mfsa2008-60.html - http://www.redhat.com/support/errata/RHSA-2009-0002.html - http://secunia.com/advisories/33188 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10001 - http://www.securitytracker.com/id?1021417 - http://secunia.com/advisories/33189 - http://secunia.com/advisories/34501
CVE ID: CVE-2008-5503 State: PUBLISHED Published: 2008-12-17T23:00:00 Last Updated: 2024-08-07T10:56:46.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not perform any security checks related to the same-domain policy, which allows remote attackers to read or access data from other domains via crafted XBL bindings. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32882 - http://secunia.com/advisories/33408 - http://www.debian.org/security/2009/dsa-1697 - https://oval.cisecurity.org/repos
- http://secunia.com/advisories/33408 - http://www.debian.org/security/2009/dsa-1697 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11423 - https://usn.ubuntu.com/690-3/ - https://bugzilla.mozilla.org/show_bug.cgi?id=379959 - http://secunia.com/advisories/33205 - http://secunia.com/advisories/33421 - http://secunia.com/advisories/33232 - http://www.vupen.com/english/advisories/2009/0977 - http://www.ubuntu.com/usn/usn-690-2 - http://www.ubuntu.com/usn/usn-701-1 - http://secunia.com/advisories/33231 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:012 - http://secunia.com/advisories/33433 - http://www.debian.org/security/2009/dsa-1707 - h