Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-1948 State: PUBLISHED Published: 2008-05-21T10:00:00 Last Updated: 2024-08-07T08:41:00.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _gnutls_server_name_recv_params function in lib/ext_server_name.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 does not properly calculate the number of Server Names in a TLS 1.0 Client Hello message during extension handling, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a zero value for the length of Server Names, which leads to a buffer overflow in session resumption data in the pack_security_parameters function, aka GNUTLS-SA-2008-1-1. Additional Analyst
overflow in session resumption data in the pack_security_parameters function, aka GNUTLS-SA-2008-1-1. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30331 - http://secunia.com/advisories/31939 - http://www.ubuntu.com/usn/usn-613-1 - http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00003.html - http://www.redhat.com/support/errata/RHSA-2008-0492.html - http://www.openwall.com/lists/oss-security/2008/05/20/1 - http://security.gentoo.org/glsa/glsa-200805-20.xml - http://secunia.com/advisories/30355 - http://secunia.com/advisories/30317 - http://www.securityfocus.com/archive/1/492282/100/0/threaded - http://www.redhat.com/support/err
.com/advisories/30317 - http://www.securityfocus.com/archive/1/492282/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2008-0489.html - http://www.securityfocus.com/archive/1/492464/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42532 - http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00051.html - http://sourceforge.net/project/shownotes.php?release_id=600646&group_id=21558 - http://www.kb.cert.org/vuls/id/111034 - http://secunia.com/advisories/30324 - http://secunia.com/advisories/30302 - http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00055.html - http://www.vupen.com/english/advisories/2008/1583/references - http://www.securityfocus.com/
vel/2008-05/msg00055.html - http://www.vupen.com/english/advisories/2008/1583/references - http://www.securityfocus.com/bid/29292 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00615.html - http://secunia.com/advisories/30330 - http://www.vupen.com/english/advisories/2008/1582/references - http://www.openwall.com/lists/oss-security/2008/05/20/3 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0174 - http://secunia.com/advisories/30338 - http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00060.html - http://www.debian.org/security/2008/dsa-1581 - http://www.openwall.com/lists/oss-security/2008/05/20/2 - https://www.redhat.com/archives/fedora-package-announce/200
- http://www.openwall.com/lists/oss-security/2008/05/20/2 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00590.html - http://securityreason.com/securityalert/3902 - https://issues.rpath.com/browse/RPL-2552 - http://www.securitytracker.com/id?1020057 - http://secunia.com/advisories/30287 - http://git.savannah.gnu.org/gitweb/?p=gnutls.git%3Ba=commitdiff%3Bh=bc8102405fda11ea00ca3b42acc4f4bce9d6e97b - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10935 - http://www.cert.fi/haavoittuvuudet/advisory-gnutls.html - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00487.html - http://www.mandriva.com/security/advisori
tps://www.redhat.com/archives/fedora-package-announce/2008-May/msg00487.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:106
CVE ID: CVE-2008-1949 State: PUBLISHED Published: 2008-05-21T10:00:00 Last Updated: 2024-08-07T08:41:00.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _gnutls_recv_client_kx_message function in lib/gnutls_kx.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 continues to process Client Hello messages within a TLS message after one has already been processed, which allows remote attackers to cause a denial of service (NULL dereference and crash) via a TLS message containing multiple Client Hello messages, aka GNUTLS-SA-2008-1-2. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30331 - https://oval.cisecurity.org/repository/s
s: - CVE Program Container: References: - http://secunia.com/advisories/30331 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9519 - http://secunia.com/advisories/31939 - http://www.ubuntu.com/usn/usn-613-1 - http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00003.html - http://www.redhat.com/support/errata/RHSA-2008-0492.html - http://www.openwall.com/lists/oss-security/2008/05/20/1 - http://security.gentoo.org/glsa/glsa-200805-20.xml - http://secunia.com/advisories/30355 - http://secunia.com/advisories/30317 - http://www.securityfocus.com/archive/1/492282/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2008-0489.html - http:
www.securityfocus.com/archive/1/492282/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2008-0489.html - http://www.securityfocus.com/archive/1/492464/100/0/threaded - http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00051.html - http://sourceforge.net/project/shownotes.php?release_id=600646&group_id=21558 - http://secunia.com/advisories/30324 - http://secunia.com/advisories/30302 - http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00055.html - http://www.vupen.com/english/advisories/2008/1583/references - http://www.securityfocus.com/bid/29292 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00615.html - http://secunia.com/advisories/30330 - h
https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00615.html - http://secunia.com/advisories/30330 - http://www.vupen.com/english/advisories/2008/1582/references - http://www.openwall.com/lists/oss-security/2008/05/20/3 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0174 - http://secunia.com/advisories/30338 - http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00060.html - http://www.debian.org/security/2008/dsa-1581 - http://www.openwall.com/lists/oss-security/2008/05/20/2 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00590.html - http://securityreason.com/securityalert/3902 - https://issues.rpath.com/browse/RPL-2552 - http://secunia.com/a
90.html - http://securityreason.com/securityalert/3902 - https://issues.rpath.com/browse/RPL-2552 - http://secunia.com/advisories/30287 - http://git.savannah.gnu.org/gitweb/?p=gnutls.git%3Ba=commitdiff%3Bh=bc8102405fda11ea00ca3b42acc4f4bce9d6e97b - http://www.cert.fi/haavoittuvuudet/advisory-gnutls.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/42530 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00487.html - http://www.securitytracker.com/id?1020058 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:106 - http://www.kb.cert.org/vuls/id/252626
CVE ID: CVE-2008-1950 State: PUBLISHED Published: 2008-05-21T10:00:00 Last Updated: 2024-08-07T08:41:00.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in libgnutls in GnuTLS before 2.2.4 allows remote attackers to cause a denial of service (buffer over-read and crash) via a certain integer value in the Random field in an encrypted Client Hello message within a TLS record with an invalid Record Length, which leads to an invalid cipher padding length, aka GNUTLS-SA-2008-1-3. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30331 - http://s
008-1-3. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30331 - http://secunia.com/advisories/31939 - http://www.ubuntu.com/usn/usn-613-1 - http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00003.html - http://www.redhat.com/support/errata/RHSA-2008-0492.html - http://www.openwall.com/lists/oss-security/2008/05/20/1 - http://security.gentoo.org/glsa/glsa-200805-20.xml - http://secunia.com/advisories/30355 - http://secunia.com/advisories/30317 - http://www.securityfocus.com/archive/1/492282/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2008-0489.html - http://www.securityfocus.com/archive/1/492464/100/0/threaded - http
/www.redhat.com/support/errata/RHSA-2008-0489.html - http://www.securityfocus.com/archive/1/492464/100/0/threaded - http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00051.html - http://sourceforge.net/project/shownotes.php?release_id=600646&group_id=21558 - http://secunia.com/advisories/30324 - http://secunia.com/advisories/30302 - http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00055.html - http://www.vupen.com/english/advisories/2008/1583/references - http://www.securityfocus.com/bid/29292 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00615.html - http://secunia.com/advisories/30330 - http://www.securitytracker.com/id?1020059 - http://www.vupen.co
ay/msg00615.html - http://secunia.com/advisories/30330 - http://www.securitytracker.com/id?1020059 - http://www.vupen.com/english/advisories/2008/1582/references - http://www.openwall.com/lists/oss-security/2008/05/20/3 - http://www.kb.cert.org/vuls/id/659209 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0174 - http://secunia.com/advisories/30338 - http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00060.html - http://www.debian.org/security/2008/dsa-1581 - http://www.openwall.com/lists/oss-security/2008/05/20/2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42533 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00590.html - http://securityreason.com/s
ies/42533 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00590.html - http://securityreason.com/securityalert/3902 - https://issues.rpath.com/browse/RPL-2552 - http://secunia.com/advisories/30287 - http://git.savannah.gnu.org/gitweb/?p=gnutls.git%3Ba=commitdiff%3Bh=bc8102405fda11ea00ca3b42acc4f4bce9d6e97b - http://www.cert.fi/haavoittuvuudet/advisory-gnutls.html - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00487.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11393 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:106
CVE ID: CVE-2008-1951 State: PUBLISHED Published: 2008-06-25T10:00:00 Last Updated: 2024-08-07T08:41:00.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in a certain Red Hat build script for Standards Based Linux Instrumentation for Manageability (sblim) libraries before 1-13a.el4_6.1 in Red Hat Enterprise Linux (RHEL) 4, and before 1-31.el5_2.1 in RHEL 5, allows local users to gain privileges via a malicious library in a certain subdirectory of /var/tmp, related to an incorrect RPATH setting, as demonstrated by a malicious libc.so library for tog-pegasus. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/ad
libc.so library for tog-pegasus. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30803 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9635 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43315 - https://rhn.redhat.com/errata/RHSA-2008-0497.html - http://www.securitytracker.com/id?1020354 - http://www.securityfocus.com/bid/29913 - https://bugzilla.redhat.com/show_bug.cgi?id=447705
CVE ID: CVE-2008-1952 State: PUBLISHED Published: 2008-06-23T19:00:00 Last Updated: 2024-08-07T08:40:59.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: The backend for XenSource Xen Para Virtualized Frame Buffer (PVFB) in Xen ioemu does not properly restrict the frame buffer size, which allows attackers to cause a denial of service (crash) by mapping an arbitrary amount of guest memory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32088 - http://www.openwall.com/lists/oss-security/2008/05/21/9 - http://xenbits.xensource.com/xen-unstable.hg?rev/9044705960cb30cec385bdca7305bcf7db096721 - https://oval.cisecurity.org/repository/se
s.xensource.com/xen-unstable.hg?rev/9044705960cb30cec385bdca7305bcf7db096721 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11189 - http://www.securitytracker.com/id?1020957 - http://lists.xensource.com/archives/html/xen-devel/2008-05/msg00421.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43362 - https://rhn.redhat.com/errata/RHSA-2008-0892.html - http://www.securityfocus.com/bid/30646
CVE ID: CVE-2008-1953 State: PUBLISHED Published: 2008-04-25T14:00:00 Last Updated: 2024-08-07T08:41:00.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Sitedesigner before 1.1.5 search template in Magnolia Enterprise Edition allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41962 - http://www.securityfocus.com/bid/28897 - http://jira.magnolia.info/browse/MGNLSD-1
.ibmcloud.com/vulnerabilities/41962 - http://www.securityfocus.com/bid/28897 - http://jira.magnolia.info/browse/MGNLSD-175 - http://secunia.com/advisories/29918
CVE ID: CVE-2008-1954 State: PUBLISHED Published: 2008-04-25T14:00:00 Last Updated: 2024-08-07T08:41:00.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in one_day.php in Web Calendar Pro 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the user_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28921 - http://www.vupen.com/english/advisories/2008/1343/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/41963 - https://www.exploit-db.com/exploits/5485 - http://secunia.com/advisories/29933
CVE ID: CVE-2008-1955 State: PUBLISHED Published: 2008-04-25T14:00:00 Last Updated: 2024-08-07T08:41:00.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in rep.php in Martin BOUCHER MyBoard 1.0.12 allows remote attackers to inject arbitrary web script or HTML via the id parameter. information. Additional Analyst Notes: - CVE Program Container: References: - http://www.z0rlu.ownspace.org/index.php?/archives/52-MyBoard-1.0.12-XSS.html - http://www.securityfocus.com/bid/28823 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42024
CVE ID: CVE-2008-1956 State: PUBLISHED Published: 2008-04-25T14:00:00 Last Updated: 2024-08-07T08:41:00.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Wikepage Opus 13 2007.2 allows remote attackers to inject arbitrary web script or HTML via the wiki parameter. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/tracker/index.php?func=detail&aid=1938445&group_id=128991&atid=713448 - http://www.securityfocus.com/bid/28842 - http://secunia.com/advisories/29699 - http://www.securityfocus.com/archive/1/491065/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42058
CVE ID: CVE-2008-1957 State: PUBLISHED Published: 2008-04-25T14:00:00 Last Updated: 2024-08-07T08:41:00.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php in Tr Script News 2.1 allows remote attackers to execute arbitrary SQL commands via the nb parameter in voir mode. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41946 - http://www.vupen.com/english/advisories/2008/1319/references - http://www.securityfocus.com/bid/28876 - http://secunia.com/advisories/29814 - https://www.exploit-db.com/exploits/5483
CVE ID: CVE-2008-1958 State: PUBLISHED Published: 2008-04-25T14:00:00 Last Updated: 2024-08-07T08:41:00.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the ajout_cat mode in admin/main.php in Tr Script News 2.1 allows remote authenticated users to execute arbitrary code by uploading a file with a .php extension. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29814 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41953 - https://www.exploit-db.com/exploits/5483
CVE ID: CVE-2008-1959 State: PUBLISHED Published: 2008-04-25T14:00:00 Last Updated: 2024-08-07T08:41:00.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the get_remote_video_port_media function in call.cpp in SIPp 3.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted SIP message. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41945 - http://www.securityfocus.com/bid/28884 - h
/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41945 - http://www.securityfocus.com/bid/28884 - http://secunia.com/advisories/30193 - http://secunia.com/advisories/29890 - http://www.vupen.com/english/advisories/2008/1322/references - http://sourceforge.net/project/shownotes.php?release_id=593806&group_id=104305
CVE ID: CVE-2008-1960 State: PUBLISHED Published: 2008-04-25T14:00:00 Last Updated: 2024-08-07T08:41:00.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cgi-bin/contray/search.cgi in ContRay 3.x allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41937 - http://secunia.com/advisories/29888 - http://www.securityfocus.com/bid/28883
CVE ID: CVE-2008-1961 State: PUBLISHED Published: 2008-04-25T14:00:00 Last Updated: 2024-08-07T08:41:00.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Voice Of Web AllMyGuests 0.4.1 allows remote attackers to execute arbitrary SQL commands via the AMG_id parameter in a comments action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41910 - http://www.securityfocus.com/bid/28850 - https://www.exploit-db.com/exploits/5469
CVE ID: CVE-2008-1962 State: PUBLISHED Published: 2008-04-25T14:00:00 Last Updated: 2024-08-07T08:41:00.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Aterr 0.9.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) class parameter to include/functions.inc.php and the (2) file parameter to include/common.inc.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41903 - https://www.exploit-db.com/exploits/5474 - http://www.securityfocus.com/bid/28861
CVE ID: CVE-2008-1963 State: PUBLISHED Published: 2008-04-25T14:00:00 Last Updated: 2024-08-07T08:41:00.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/functions.php in Quate Grape Web Statistics 0.2a allows remote attackers to execute arbitrary PHP code via a URL in the location parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5463 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41883 - http://www.securityfocus.com/bid/28838
CVE ID: CVE-2008-1964 State: PUBLISHED Published: 2008-04-25T17:00:00 Last Updated: 2024-08-07T08:41:00.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the demux_nsf_send_headers function in src/demuxers/demux_nsf.c in xine-lib allows remote attackers to have an unknown impact via a long copyright field in an NSF header in an NES Sound file, a different issue than CVE-2008-1878. NOTE: a third party claims that the copyright field always has a safe length Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28908 - http://www.securityfocus.com/archive/1/491274/100/0/threaded - http://www.securityfocus.
w.securityfocus.com/bid/28908 - http://www.securityfocus.com/archive/1/491274/100/0/threaded - http://www.securityfocus.com/archive/1/491248/100/0/threaded
CVE ID: CVE-2008-1965 State: PUBLISHED Published: 2008-04-25T17:00:00 Last Updated: 2024-08-07T08:41:00.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in the cai: URI handler in rcplauncher in IBM Lotus Expeditor Client for Desktop 6.1.1 and 6.1.2, as used by Lotus Symphony and possibly other products, allows remote attackers to execute arbitrary code by injecting a -launcher option via a cai: URI, as demonstrated by a reference to a UNC share pathname. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28926 - http://www.securitytracker.com/id?1019952 - http://www.vupen.com/english/advisories/20
www.securityfocus.com/bid/28926 - http://www.securitytracker.com/id?1019952 - http://www.vupen.com/english/advisories/2008/1394/references - http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0640.html - http://www.securitytracker.com/id?1019951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41990 - http://secunia.com/advisories/29958 - http://thomas.pollet.googlepages.com/lotusexpeditorurihandlervulnerability - http://www.securityfocus.com/archive/1/491343/100/0/threaded - http://www-1.ibm.com/support/docview.wss?uid=swg21303813
CVE ID: CVE-2008-1966 State: PUBLISHED Published: 2008-04-27T18:00:00 Last Updated: 2024-08-07T08:41:00.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the JAR file administration routines in the BSU JAVA subcomponent in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 allow remote authenticated users to cause a denial of service (instance crash) via a call to the (1) RECOVERJAR or (2) REMOVE_JAR procedure with a crafted parameter, related to (a) sqlj.install_jar and (b) sqlj.replace_jar. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ15496 - http://www.securityfocus.co
Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ15496 - http://www.securityfocus.com/bid/28835 - http://www-1.ibm.com/support/docview.wss?uid=swg21255607 - http://www.appsecinc.com/resources/alerts/db2/2008-04.shtml - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ08512 - http://osvdb.org/46269 - http://www.securityfocus.com/bid/29601 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41955 - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ08945 - http://osvdb.org/46268 - http://secunia.com/advisories/29022 - http://www.securityfocus.com/archive/1/491071/100/0/threaded
CVE ID: CVE-2008-1967 State: PUBLISHED Published: 2008-04-27T18:00:00 Last Updated: 2024-08-07T08:41:00.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CFLogon/CFLogon.asp in Cezanne 6.5.1 and 7 allows remote attackers to inject arbitrary web script or HTML via the SleUserName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28774 - http://www.securityfocus.com/archive/1/490842/100/0/threaded - http://www.s21sec.com/avisos/s21sec-41-en.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/41813 - http://securityreason.com/securityalert/3828