Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
p://www.securitytracker.com/id?1019312 - http://secunia.com/advisories/28813 - http://www.securityfocus.com/bid/27643 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01316132
CVE ID: CVE-2008-0216 State: PUBLISHED Published: 2008-01-16T01:00:00 Last Updated: 2024-08-07T07:39:34.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ptsname function in FreeBSD 6.0 through 7.0-PRERELEASE does not properly verify that a certain portion of a device name is associated with a pty of a user who is calling the pt_chown function, which might allow local users to read data from the pty from another user. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28498 - http://www.securitytracker.com/id?1019191 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39667 - http://www.securityfocus.com/bid/27284 - http://secu
9191 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39667 - http://www.securityfocus.com/bid/27284 - http://security.FreeBSD.org/advisories/FreeBSD-SA-08:01.pty.asc
CVE ID: CVE-2008-0217 State: PUBLISHED Published: 2008-01-16T01:00:00 Last Updated: 2024-08-07T07:39:34.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: The script program in FreeBSD 5.0 through 7.0-PRERELEASE invokes openpty, which creates a pseudo-terminal with world-readable and world-writable permissions when it is not run as root, which allows local users to read data from the terminal of the user running script. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28498 - http://www.securitytracker.com/id?1019191 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39665 - http://www.securityfocus.com/bid/27284 - http://securit
1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39665 - http://www.securityfocus.com/bid/27284 - http://security.FreeBSD.org/advisories/FreeBSD-SA-08:01.pty.asc
CVE ID: CVE-2008-0218 State: PUBLISHED Published: 2008-01-10T23:00:00 Last Updated: 2024-08-07T07:39:34.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/index.html in Merak IceWarp Mail Server allows remote attackers to inject arbitrary web script or HTML via the message parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0135 - http://www.securityfocus.com/bid/27189 - http://www.securityfocus.com/data/vulnerabilities/exploits/27189.html - http://
http://www.securityfocus.com/bid/27189 - http://www.securityfocus.com/data/vulnerabilities/exploits/27189.html - http://secunia.com/advisories/28460 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39564
CVE ID: CVE-2008-0219 State: PUBLISHED Published: 2008-01-10T23:00:00 Last Updated: 2024-08-07T07:39:35.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in soporte_horizontal_w.php in PHP Webquest 2.6 allows remote attackers to execute arbitrary SQL commands via the id_actividad parameter, a different vector than CVE-2007-4920. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4867 - http://secunia.com/advisories/26821 - http://www.securityfocus.com/bid/27192 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39560
CVE ID: CVE-2008-0220 State: PUBLISHED Published: 2008-01-10T23:00:00 Last Updated: 2024-08-07T07:39:33.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allow remote attackers to execute arbitrary code via a long string in the (1) second or (2) fourth argument to the DoWebLaunch method. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/735441 - https://www.exploit-db.com/exploits/4982 - http://www.securityfocus.c
erences: - http://www.kb.cert.org/vuls/id/735441 - https://www.exploit-db.com/exploits/4982 - http://www.securityfocus.com/bid/27193 - http://www.vupen.com/english/advisories/2008/0077 - https://www.exploit-db.com/exploits/4869 - http://marc.info/?l=full-disclosure&m=119984138526735&w=2 - http://secunia.com/advisories/28379
CVE ID: CVE-2008-0221 State: PUBLISHED Published: 2008-01-10T23:00:00 Last Updated: 2024-08-07T07:39:34.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allows remote attackers to execute arbitrary programs via a ..\ (dot dot backslash) in the second argument to the DoWebLaunch method. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0077 - https://www.exploit-db.com/exploits/4869 - http://marc.info/?l
es: - http://www.vupen.com/english/advisories/2008/0077 - https://www.exploit-db.com/exploits/4869 - http://marc.info/?l=full-disclosure&m=119984138526735&w=2 - http://secunia.com/advisories/28379
CVE ID: CVE-2008-0222 State: PUBLISHED Published: 2008-01-10T23:00:00 Last Updated: 2024-08-07T07:39:34.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in ajaxfilemanager.php in the Wp-FileManager 1.2 plugin for WordPress allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27151 - https://www.exploit-db.com/exploits/4844 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39462
CVE ID: CVE-2008-0223 State: PUBLISHED Published: 2008-01-10T23:00:00 Last Updated: 2024-08-07T07:39:34.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in JustSystems JSFC.DLL, as used in multiple JustSystems products such as Ichitaro, allows remote attackers to execute arbitrary code via a crafted .JTD file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019168 - http://www.securityfocus.com/bid/27153 - http://www.justsystems.com/jp/info/pd8001.html - http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20080107 - http://secunia.com/advisories/28275 - http://www.vupen.com/english/advisories/2008/0045 - h
dvisory.cgi?FFRRA-20080107 - http://secunia.com/advisories/28275 - http://www.vupen.com/english/advisories/2008/0045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39501 - http://jvn.jp/jp/JVN%2308237857/index.html
CVE ID: CVE-2008-0224 State: PUBLISHED Published: 2008-01-10T23:00:00 Last Updated: 2024-08-07T07:39:34.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the Newbb_plus 0.92 and earlier module in RunCMS 1.6.1 allows remote attackers to execute arbitrary SQL commands via the Client-Ip parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39478 - http://www.securityfocus.com/bid/27152 - https://www.exploit-db.com/exploits/4845 - http://secunia.com/advisories/28340
CVE ID: CVE-2008-0225 State: PUBLISHED Published: 2008-01-10T23:00:00 Last Updated: 2024-08-07T07:39:34.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to execute arbitrary code via the SDP Abstract attribute in an RTSP session, related to the rmff_dump_header function and related to disregarding the max field. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/xinermffhof-adv.txt - http://www.novell.com/linux/security/advisor
ainer: References: - http://aluigi.altervista.org/adv/xinermffhof-adv.txt - http://www.novell.com/linux/security/advisories/suse_security_summary_report.html - http://www.vupen.com/english/advisories/2008/0163 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:045 - http://secunia.com/advisories/28955 - http://security.gentoo.org/glsa/glsa-200801-12.xml - http://secunia.com/advisories/28489 - http://secunia.com/advisories/28507 - http://secunia.com/advisories/31393 - http://www.debian.org/security/2008/dsa-1472 - http://bugs.gentoo.org/show_bug.cgi?id=205197 - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00592.html - https://bugzilla.redhat.com/show_bug.
tps://www.redhat.com/archives/fedora-package-announce/2008-January/msg00592.html - https://bugzilla.redhat.com/show_bug.cgi?id=428620 - http://secunia.com/advisories/28384 - http://sourceforge.net/project/shownotes.php?release_id=567872 - http://secunia.com/advisories/28636 - http://www.securityfocus.com/bid/27198 - http://secunia.com/advisories/28674 - http://www.ubuntu.com/usn/usn-635-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:020
CVE ID: CVE-2008-0226 State: PUBLISHED Published: 2008-01-10T23:00:00 Last Updated: 2024-08-07T07:39:35.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2) "input_buffer& operator>>" in yassl_imp.cpp. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2008/dsa-1478 - http://secunia.com/advisories/29443 - http://www.securityfocus.com/archive/1/485810/100/0/threaded - http://secunia.com/advisories/28324 - http://securityreaso
ttp://www.securityfocus.com/archive/1/485810/100/0/threaded - http://secunia.com/advisories/28324 - http://securityreason.com/securityalert/3531 - http://www.securityfocus.com/bid/31681 - http://bugs.mysql.com/33814 - http://www.securityfocus.com/bid/27140 - http://secunia.com/advisories/28597 - http://www.vupen.com/english/advisories/2008/0560/references - http://secunia.com/advisories/32222 - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html - http://www.securityfocus.com/archive/1/485811/100/0/threaded - http://secunia.com/advisories/28419 - http://www.vupen.com/english/advisories/2008/2780 - http://www.ubuntu.com/usn/usn-588-1 - http://www.mandriva.com/security/advisories?name=MDVS
glish/advisories/2008/2780 - http://www.ubuntu.com/usn/usn-588-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:150 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39431 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39429 - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216
CVE ID: CVE-2008-0227 State: PUBLISHED Published: 2008-01-10T23:00:00 Last Updated: 2024-08-07T07:39:34.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allows remote attackers to cause a denial of service (crash) via a Hello packet containing a large size value, which triggers a buffer over-read in the HASHwithTransform::Update function in hash.cpp. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2008/dsa-1478 - http://secunia.com/advisories/29443 - http://www.securityfocus.com/archive/1/485810/100/0/threaded - http://secunia.com/advisories/28324 - http://sec
/29443 - http://www.securityfocus.com/archive/1/485810/100/0/threaded - http://secunia.com/advisories/28324 - http://securityreason.com/securityalert/3531 - http://www.securityfocus.com/bid/31681 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39433 - http://bugs.mysql.com/33814 - http://www.securityfocus.com/bid/27140 - http://secunia.com/advisories/28597 - http://www.vupen.com/english/advisories/2008/0560/references - http://secunia.com/advisories/32222 - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html - http://www.vupen.com/english/advisories/2008/2780 - http://www.ubuntu.com/usn/usn-588-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:150 - http://lists.appl
ttp://www.ubuntu.com/usn/usn-588-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:150 - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216
CVE ID: CVE-2008-0228 State: PUBLISHED Published: 2008-01-10T23:00:00 Last Updated: 2024-08-07T07:39:34.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in apply.cgi in the Linksys WRT54GL Wireless-G Broadband Router with firmware 4.30.9 allows remote attackers to perform actions as administrators. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39502 - http://securityreason.com/securityalert/3534 - http://secunia.com/advisories/28364 - http://www.securityfocus.com/archive/1/485853/100/0/threaded - http://www.securityfocus.com/archive/1/486362/100/0/threaded
CVE ID: CVE-2008-0229 State: PUBLISHED Published: 2008-01-10T23:00:00 Last Updated: 2024-08-07T07:39:34.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: The telnet service in LevelOne WBR-3460 4-Port ADSL 2/2+ Wireless Modem Router with firmware 1.00.11 and 1.00.12 does not require authentication, which allows remote attackers on the local or wireless network to obtain administrative access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/485935/100/0/threaded - http://www.securityfocus.com/bid/27183 - http://www.securitytracker.com/id?1019162 - http://secunia.com/advisories/28397 - http://securityreason.com/securityalert
ttp://www.securitytracker.com/id?1019162 - http://secunia.com/advisories/28397 - http://securityreason.com/securityalert/3533
CVE ID: CVE-2008-0230 State: PUBLISHED Published: 2008-01-11T00:00:00 Last Updated: 2024-08-07T07:39:34.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in php121db.php in osDate 2.0.8 and possibly earlier versions allows remote attackers to execute arbitrary PHP code via a URL in the php121dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0801-exploits/osdata-lfi.txt - http://secunia.com/advisories/28420 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39567 - https://www.exploit-db.com/exploits/4870 - http://www.securityfocus.com/bid/27208
CVE ID: CVE-2008-0231 State: PUBLISHED Published: 2008-01-11T00:00:00 Last Updated: 2024-08-07T07:39:34.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in index.php in Tuned Studios (1) Subwoofer, (2) Freeze Theme, (3) Orange Cutout, (4) Lonely Maple, (5) Endless, (6) Classic Theme, and (7) Music Theme webpage templates allow remote attackers to include and execute arbitrary files via ".." sequences in the page parameter. NOTE: this can be leveraged for remote file inclusion when running in some PHP 5 environments. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4876 - http://www
. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4876 - http://www.securityfocus.com/bid/27196 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39555 - http://www.securityfocus.com/archive/1/485991/100/0/threaded - http://securityreason.com/securityalert/3532
CVE ID: CVE-2008-0232 State: PUBLISHED Published: 2008-01-11T00:00:00 Last Updated: 2024-08-07T07:39:35.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Zero CMS 1.0 Alpha allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to index.php, or the (2) f or t parameters to forums/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27186 - http://packetstormsecurity.org/0801-exploits/zerocms-sql.txt - https://www.exploit-db.com/exploits/4864 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39530
CVE ID: CVE-2008-0233 State: PUBLISHED Published: 2008-01-11T02:00:00 Last Updated: 2024-08-07T07:39:34.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in Zero CMS 1.0 Alpha and earlier allows remote attackers to bypass intended access restrictions and upload and execute arbitrary files by uploading an avatar file with an accepted Content-Type such as image/jpeg. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0801-exploits/zerocms-sql.txt - https://www.exploit-db.com/exploits/4864
CVE ID: CVE-2008-0234 State: PUBLISHED Published: 2008-01-11T02:00:00 Last Updated: 2024-08-07T07:39:34.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP tunneling is enabled, allows remote attackers to execute arbitrary code via a long Reason-Phrase response to an rtsp:// request, as demonstrated using a 404 error message. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39601 - http://www.securityfocus.com/archive/1/486161/100/0/threaded - http://www.securityfocus.com/archi
ulnerabilities/39601 - http://www.securityfocus.com/archive/1/486161/100/0/threaded - http://www.securityfocus.com/archive/1/486091/100/0/threaded - http://www.vupen.com/english/advisories/2008/2064/references - http://lists.apple.com/archives/security-announce/2008/Feb/msg00001.html - https://www.exploit-db.com/exploits/4906 - http://secunia.com/advisories/31034 - http://www.securityfocus.com/archive/1/486268/100/0/threaded - http://www.securityfocus.com/archive/1/486174/100/0/threaded - http://lists.apple.com/archives/security-announce/2008//Jul/msg00000.html - http://www.securityfocus.com/archive/1/486114/100/0/threaded - http://www.securityfocus.com/bid/27225 - http://www.kb.cert.org/vul
.securityfocus.com/archive/1/486114/100/0/threaded - http://www.securityfocus.com/bid/27225 - http://www.kb.cert.org/vuls/id/112179 - http://www.securityfocus.com/archive/1/486241/100/0/threaded - http://www.securityfocus.com/archive/1/486238/100/0/threaded - http://www.vupen.com/english/advisories/2008/0107 - http://securityreason.com/securityalert/3537 - http://www.securitytracker.com/id?1019178 - http://secunia.com/advisories/28423
CVE ID: CVE-2008-0235 State: PUBLISHED Published: 2008-01-11T02:00:00 Last Updated: 2024-08-07T07:39:34.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microsoft VFP_OLE_Server ActiveX control allows remote attackers to execute arbitrary code by invoking the foxcommand method. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4875 - http://secunia.com/advisories/28417 - http://www.securityfocus.com/bid/27199 - http://shinnai.altervista.org/exploits/txt/TXT_rNowA1916DKFNUF48NyS.html - http://packetstormsecurity.org/0801-exploits/msvfpole-exec.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/39559
CVE ID: CVE-2008-0236 State: PUBLISHED Published: 2008-01-11T02:00:00 Last Updated: 2024-08-07T07:39:34.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: An ActiveX control for Microsoft Visual FoxPro (vfp6r.dll 6.0.8862.0) allows remote attackers to execute arbitrary commands by invoking the DoCmd method. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28417 - http://www.securityfocus.com/bid/27205 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39558 - https://www.exploit-db.com/exploits/4873 - http://shinnai.altervista.org/exploits/txt/TXT_DiWu9j82RCq4zpaQAoxn.html
CVE ID: CVE-2008-0237 State: PUBLISHED Published: 2008-01-11T02:00:00 Last Updated: 2024-08-07T07:39:35.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microsoft Rich Textbox ActiveX Control (RICHTX32.OCX) 6.1.97.82 allows remote attackers to execute arbitrary commands by invoking the insecure SaveFile method. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39557 - http://shinnai.altervista.org/exploits/txt/TXT_DZVN8CwCha0I2fI3NeEs.html - https://www.exploit-db.com/exploits/4874 - http://www.securityfocus.com/bid/27201
CVE ID: CVE-2008-0238 State: PUBLISHED Published: 2008-01-11T21:00:00 Last Updated: 2024-08-07T07:39:35.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 allow remote attackers to execute arbitrary code via the SDP (1) Title, (2) Author, or (3) Copyright attribute, related to the rmff_dump_header function, different vectors than CVE-2008-0225. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=M
ion. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2008:045 - http://secunia.com/advisories/28955 - http://security.gentoo.org/glsa/glsa-200801-12.xml - http://secunia.com/advisories/31393 - http://bugs.gentoo.org/show_bug.cgi?id=205197 - http://secunia.com/advisories/28384 - http://secunia.com/advisories/28674 - http://www.ubuntu.com/usn/usn-635-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:020
CVE ID: CVE-2008-0239 State: PUBLISHED Published: 2008-01-11T22:00:00 Last Updated: 2024-08-07T07:39:35.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allow remote attackers to inject arbitrary HTML or web script via the (1) cntry or lang parameters to /idm/login.jsp, (2) resultsForm parameter to /idm/account/findForSelect.jsp, or (3) activeControl parameter to /idm/user/main.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/486076/100/0/threaded - http://www.procheckup.com/Vulnerability_PR07-07.p
nces: - http://www.securityfocus.com/archive/1/486076/100/0/threaded - http://www.procheckup.com/Vulnerability_PR07-07.php - http://www.procheckup.com/Vulnerability_PR07-06.php - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103180-1 - http://www.vupen.com/english/advisories/2008/0089 - http://www.procheckup.com/Vulnerability_PR07-08.php - http://secunia.com/advisories/28356 - http://securityreason.com/securityalert/3535 - http://www.securitytracker.com/id?1019175 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39581 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200558-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39583 - http://www.procheckup.com/Vu
nt.do?assetkey=1-66-200558-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39583 - http://www.procheckup.com/Vulnerability_PR07-09.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/39580 - http://www.securityfocus.com/bid/27214 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39582