Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
lation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.docebo.org/doceboCms/bugtracker/18_124/bugdetails/appid_24-bugid_198/bugtracker.html - http://www.securityfocus.com/bid/27211 - https://www.exploit-db.com/exploits/4879
CVE ID: CVE-2008-7155 State: PUBLISHED Published: 2009-09-02T17:00:00 Last Updated: 2024-08-07T11:56:14.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetRisk 1.9.7 does not properly restrict access to admin/change_submit.php, which allows remote attackers to change the password of arbitrary users via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27150 - http://downloads.securityfocus.com/vulnerabilities/exploits/27150.pl - https://exchange.xforce.ibmcloud.com/vulnerabilities/39465
CVE ID: CVE-2008-7156 State: PUBLISHED Published: 2009-09-02T17:00:00 Last Updated: 2024-08-07T11:56:14.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: EkinBoard 1.1.0 and earlier, when register_globals is enabled, allows remote attackers to bypass authorization and gain administrator privileges by setting the _groups[] parameter to 2, as demonstrated via backup.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27166 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39512 - https://www.exploit-db.com/exploits/4859
CVE ID: CVE-2008-7157 State: PUBLISHED Published: 2009-09-02T17:00:00 Last Updated: 2024-08-07T11:56:14.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in EkinBoard 1.1.0 and earlier allows remote attackers to execute arbitrary code by uploading an avatar file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in uploaded/avatars/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27166 - https://www.exploit-db.com/exploits/4859 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39507
CVE ID: CVE-2008-7158 State: PUBLISHED Published: 2009-09-02T17:00:00 Last Updated: 2024-08-07T11:56:14.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Numara FootPrints 7.5a through 7.5a1 and 8.0 through 8.0a allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) transcriptFile parameter to MRcgi/MRchat.pl or (2) LOADFILE parameter to MRcgi/MRABLoad2.pl. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/42816 - https://footprintssupport.numarasoftware.com/MRcgi/MRTicketPage.pl?USER=&MRP=0&PROJECTID=4&MR=89552&MAXMININC=&MAJOR_MODE=DETAILS
otprintssupport.numarasoftware.com/MRcgi/MRTicketPage.pl?USER=&MRP=0&PROJECTID=4&MR=89552&MAXMININC=&MAJOR_MODE=DETAILS - http://secunia.com/advisories/28390 - http://www.securityfocus.com/bid/27373 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39810 - http://osvdb.org/42813
CVE ID: CVE-2008-7159 State: PUBLISHED Published: 2009-09-10T21:00:00 Last Updated: 2024-08-07T11:56:14.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: The silc_asn1_encoder function in lib/silcasn1/silcasn1_encode.c in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.8 allows remote attackers to overwrite a stack location and possibly execute arbitrary code via a crafted OID value, related to incorrect use of a %lu format string. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36625 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53477 - http://www.openwall.com/lists/oss-security/2009/08/31/5 - http://secunia.c
e.xforce.ibmcloud.com/vulnerabilities/53477 - http://www.openwall.com/lists/oss-security/2009/08/31/5 - http://secunia.com/advisories/36614 - http://www.openwall.com/lists/oss-security/2009/09/03/5 - http://www.debian.org/security/2009/dsa-1879 - http://www.securityfocus.com/bid/36192 - http://silcnet.org/general/news/news_toolkit.php - http://silcnet.org/docs/changelog/SILC%20Toolkit%201.1.8 - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:234
CVE ID: CVE-2008-7160 State: PUBLISHED Published: 2009-09-10T21:00:00 Last Updated: 2024-08-07T11:56:14.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: The silc_http_server_parse function in lib/silchttp/silchttpserver.c in the internal HTTP server in silcd in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.9 allows remote attackers to overwrite a stack location and possibly execute arbitrary code via a crafted Content-Length header, related to incorrect use of a %lu format string. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36625 - http://www.openwall.com/lists/oss-security/2009/08/31/5 - http://www.securityfocus
http://secunia.com/advisories/36625 - http://www.openwall.com/lists/oss-security/2009/08/31/5 - http://www.securityfocus.com/bid/36194 - http://secunia.com/advisories/36614 - http://www.openwall.com/lists/oss-security/2009/09/03/5 - http://www.debian.org/security/2009/dsa-1879 - http://silcnet.org/general/news/news_toolkit.php - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html - http://silcnet.org/docs/changelog/SILC%20Toolkit%201.1.9 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:234
CVE ID: CVE-2008-7161 State: PUBLISHED Published: 2009-09-04T10:00:00 Last Updated: 2024-08-07T11:56:14.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fortinet FortiGuard Fortinet FortiGate-1000 3.00 build 040075,070111 allows remote attackers to bypass URL filtering via fragmented GET or POST requests that use HTTP/1.0 without the Host header. NOTE: this issue might be related to CVE-2005-3058. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27276 - http://www.securityfocus.com/archive/1/485813/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/39684 - http://www.securityfocus.com/archive/1/485794/100/20
aded - https://exchange.xforce.ibmcloud.com/vulnerabilities/39684 - http://www.securityfocus.com/archive/1/485794/100/200/threaded
CVE ID: CVE-2008-7162 State: PUBLISHED Published: 2009-09-04T10:00:00 Last Updated: 2024-08-07T11:56:14.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Hero Super Player 3000 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long filename in a .M3U file. NOTE: this might be related to CVE-2008-4504. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27478 - http://downloads.securityfocus.com/vulnerabilities/exploits/27478.cpp - https://exchange.xforce.ibmcloud.com/vulnerabilities/40025
CVE ID: CVE-2008-7163 State: PUBLISHED Published: 2009-09-04T10:00:00 Last Updated: 2024-08-07T11:56:14.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in mods/Integrated/index.php in SineCMS 2.3.5 and earlier, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via the sine[config][index_main] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27156 - https://www.exploit-db.com/exploits/4854 - http://osvdb.org/40084 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39446 - http://secunia.com/advisories/28305
CVE ID: CVE-2008-7164 State: PUBLISHED Published: 2009-09-04T10:00:00 Last Updated: 2024-08-07T11:56:14.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Shareaza before 2.3.1.0 have unknown impact and attack vectors related to "very important security fixes," possibly involving update notifications and a domain that is no longer controlled by the vendor. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27171 - http://sourceforge.net/project/shownotes.php?group_id=110672&release_id=565250 - http://secunia.com/advisories/28302 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39484 - ht
elease_id=565250 - http://secunia.com/advisories/28302 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39484 - http://osvdb.org/40217
CVE ID: CVE-2008-7165 State: PUBLISHED Published: 2009-09-04T10:00:00 Last Updated: 2024-08-07T11:56:14.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery in cp06_wifi_m_nocifr.cgi in the administrator panel in TELECOM ITALIA Alice Gate2 Plus Wi-Fi allows remote attackers to hijack the authentication of administrators for requests that disable Wi-Fi encryption via certain values for the wlChannel and wlRadioEnable parameters. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40739 - http://www.securityfocus.com/bid/27374 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39831 - http://www.securityfocus.com/archive/1
ocus.com/bid/27374 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39831 - http://www.securityfocus.com/archive/1/486733/100/200/threaded - http://secunia.com/advisories/28618
CVE ID: CVE-2008-7166 State: PUBLISHED Published: 2009-09-04T10:00:00Z Last Updated: 2024-09-17T02:36:31.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the web interface in BitTorrent 6.0.1 (build 7859) and earlier, and uTorrent 1.7.6 (build 7859) and earlier, allows remote attackers to cause a denial of service (memory consumption and crash) via a crafted Range header. NOTE: this is probably a different vulnerability than CVE-2008-0071 and CVE-2008-0364. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/ruttorrent2-adv.txt - http://secunia.com/advisories/28695 - http://osvdb.org/42826 - http://www.vupen.com/
vista.org/adv/ruttorrent2-adv.txt - http://secunia.com/advisories/28695 - http://osvdb.org/42826 - http://www.vupen.com/english/advisories/2008/0327 - http://osvdb.org/42825 - http://secunia.com/advisories/28686 - http://www.vupen.com/english/advisories/2008/0326
CVE ID: CVE-2008-7167 State: PUBLISHED Published: 2009-09-08T10:00:00 Last Updated: 2024-08-07T11:56:14.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in upload.php in Page Manager 2006-02-04 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5936 - http://www.securityfocus.com/bid/29929 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43356 - http://www.vupen.com/english/advisories/2008/1952/references
CVE ID: CVE-2008-7168 State: PUBLISHED Published: 2009-09-08T10:00:00 Last Updated: 2024-08-07T11:56:14.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure method vulnerability in the UUSee UUUpgrade ActiveX control (UUUpgrade.ocx 3.0.2.12) allows remote attackers to force the download and overwrite of arbitrary files via crafted arguments to the Update method, as exploited in the wild in June 2009. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29963 - http://downloads.securityfocus.com/vulnerabilities/exploits/29963.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43428
CVE ID: CVE-2008-7169 State: PUBLISHED Published: 2009-09-08T10:00:00 Last Updated: 2024-08-07T11:56:14.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Jabode horoscope extension (com_jabode) for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a sign task to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29994 - https://www.exploit-db.com/exploits/5963
CVE ID: CVE-2008-7170 State: PUBLISHED Published: 2009-09-08T10:00:00 Last Updated: 2024-08-07T11:56:14.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: GSC build 2067 and earlier relies on the client to enforce administrator privileges, which allows remote attackers to execute arbitrary administrator commands via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29718 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43120 - http://www.securityfocus.com/archive/1/493355/100/0/threaded
CVE ID: CVE-2008-7171 State: PUBLISHED Published: 2009-09-08T10:00:00 Last Updated: 2024-08-07T11:56:14.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Lightweight news portal (LNP) 1.0b allow remote attackers to inject arbitrary web script or HTML via the (1) photo parameter to show_photo.php, (2) potd parameter to show_potd.php, or (3) the Current question field in a vote action to admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43224 - http://www.securityfocus.com/bid/29848 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43226 - htt
lities/43224 - http://www.securityfocus.com/bid/29848 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43226 - https://www.exploit-db.com/exploits/5873
CVE ID: CVE-2008-7172 State: PUBLISHED Published: 2009-09-08T10:00:00 Last Updated: 2024-08-07T11:56:14.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lightweight news portal (LNP) 1.0b does not properly restrict access to administrator functionality, which allows remote attackers to gain administrator privileges via direct requests to admin.php with the (1) potd_delete, (2) potd, (3) vote_update, (4) vote, or (5) modifynews actions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29848 - https://www.exploit-db.com/exploits/5873 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43225
CVE ID: CVE-2008-7173 State: PUBLISHED Published: 2009-09-08T10:00:00 Last Updated: 2024-08-07T11:56:14.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Jura Internet Connection Kit for the Jura Impressa F90 coffee maker does not properly restrict access to privileged functions, which allows remote attackers to cause a denial of service (physical damage), modify coffee settings, and possibly execute code via a crafted request. NOTE: this issue is being included in CVE because the denial of service may include financial loss or water damage. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/493440/100/0/threaded - http:/
lyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/493440/100/0/threaded - http://osvdb.org/46407 - http://www.securityfocus.com/bid/29767 - http://www.securityfocus.com/archive/1/493433/100/0/threaded - http://news.cnet.com/8301-10784_3-9970757-7.html - http://www.securityfocus.com/archive/1/493387/100/0/threaded - http://attrition.org/pipermail/vim/2008-June/002002.html
CVE ID: CVE-2008-7174 State: PUBLISHED Published: 2009-09-08T10:00:00 Last Updated: 2024-08-07T11:56:14.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the Jura Internet Connection Kit for the Jura Impressa F90 coffee maker allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors related to improper use of the gets and sprintf functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29767 - http://www.securityfocus.com/archive/1/493433/100/0/threaded - http://news.cnet.com/8301-10784_3-9970757-7.html - http://www.securityfocus.com/arc
om/archive/1/493433/100/0/threaded - http://news.cnet.com/8301-10784_3-9970757-7.html - http://www.securityfocus.com/archive/1/493387/100/0/threaded
CVE ID: CVE-2008-7175 State: PUBLISHED Published: 2009-09-08T10:00:00 Last Updated: 2024-08-07T11:56:14.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for Wordpress allows remote attackers to inject arbitrary web script or HTML via the picture description field in a page edit action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/51428 - http://www.securityfocus.com/archive/1/493182/100/0/threaded
CVE ID: CVE-2008-7176 State: PUBLISHED Published: 2009-09-08T10:00:00 Last Updated: 2024-08-07T11:56:14.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Facil CMS 0.1RC allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) change_lang parameter to index.php or (2) modload parameter to modules.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5792 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43037 - http://www.securityfocus.com/bid/29692
CVE ID: CVE-2008-7177 State: PUBLISHED Published: 2009-09-08T10:00:00 Last Updated: 2024-08-07T11:56:14.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the listing module in Netwide Assembler (NASM) before 2.03.01 has unknown impact and attack vectors, a different vulnerability than CVE-2008-2719. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1939 - http://www.securityfocus.com/bid/29955 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg01000.html - http://secunia.com/advisories/30836 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43441 - http://www.securitytracker.
/secunia.com/advisories/30836 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43441 - http://www.securitytracker.com/id?1020378 - http://sourceforge.net/project/shownotes.php?release_id=607497 - https://bugzilla.redhat.com/show_bug.cgi?id=452800
CVE ID: CVE-2008-7178 State: PUBLISHED Published: 2009-09-08T10:00:00 Last Updated: 2024-08-07T11:56:14.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Uploader module 1.1 for XOOPS allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter in a downloadfile action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5756 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42925 - http://www.securityfocus.com/bid/29600
CVE ID: CVE-2008-7179 State: PUBLISHED Published: 2009-09-08T10:00:00 Last Updated: 2024-08-07T11:56:14.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: OTManager CMS 2.4 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADMIN_Hora, ADMIN_Logado, and ADMIN_Nome cookies to certain values, as reachable in Admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29999 - https://www.exploit-db.com/exploits/5959
CVE ID: CVE-2008-7180 State: PUBLISHED Published: 2009-09-08T10:00:00 Last Updated: 2024-08-07T11:56:14.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: del_query1.php in Telephone Directory 2008 allows remote attackers to delete arbitrary contacts via a direct request with a modified id variable. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5769 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42973
CVE ID: CVE-2008-7181 State: PUBLISHED Published: 2009-09-08T10:00:00 Last Updated: 2024-08-07T11:56:14.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Butterfly Organizer 2.0.0 allows remote attackers to (1) delete arbitrary categories via a modified tablehere parameter to category-delete.php with the is_js_confirmed parameter set to 1, or (2) delete arbitrary accounts via the mytable parameter to delete.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5800 - http://www.securityfocus.com/bid/29703 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43067
CVE ID: CVE-2008-7182 State: PUBLISHED Published: 2009-09-08T10:00:00 Last Updated: 2024-08-07T11:56:14.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before 3.9g2, allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long first argument to the APPEND command, a different vector than CVE-2008-1497 and CVE-2008-1498. NOTE: due to lack of details, it is not certain whether this is the same issue as CVE-2008-2859. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5968 - http://www
. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5968 - http://www.securityfocus.com/bid/30000 - http://www.securityfocus.com/archive/1/496482 - http://www.netwinsite.com/surgemail/help/updates.htm
CVE ID: CVE-2008-7183 State: PUBLISHED Published: 2009-09-08T23:00:00 Last Updated: 2024-08-07T11:56:14.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in eva/index.php in EVA CMS 2.3.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the eva[caminho] parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29954 - http://packetstorm.linuxsecurity.com/0806-exploits/evacms-rfi.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/43437
CVE ID: CVE-2008-7184 State: PUBLISHED Published: 2009-09-08T23:00:00 Last Updated: 2024-08-07T11:56:14.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Diigo Toolbar and Diigolet allows remote attackers to inject arbitrary web script or HTML via a public comment. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43301 - http://www.securityfocus.com/archive/1/493531/100/0/threaded - http://www.securityfocus.com/bid/29611
CVE ID: CVE-2008-7185 State: PUBLISHED Published: 2009-09-08T23:00:00 Last Updated: 2024-08-07T11:56:14.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNOME Rhythmbox 0.11.5 allows remote attackers to cause a denial of service (segmentation fault and crash) via a playlist (.pls) file with a long Title field, possibly related to the g_hash_table_lookup function in b-playlist-manager.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29958 - http://www.securityfocus.com/archive/1/493683/100/0/threaded - http://www.securityfocus.com/archive/1/493809/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/43436 - ht
/www.securityfocus.com/archive/1/493809/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/43436 - http://packetstormsecurity.org/0806-advisories/rhythmbox-dos.txt
CVE ID: CVE-2008-7186 State: PUBLISHED Published: 2009-09-09T17:00:00 Last Updated: 2024-08-07T11:56:14.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Coppermine Photo Gallery (CPG) 1.4.14 does not restrict access to update.php, which allows remote attackers to obtain sensitive information such as the database table prefix via a direct request. NOTE: this might be leveraged for attacks against CVE-2008-0504. Additional Analyst Notes: - CVE Program Container: References: - http://www.waraxe.us/advisory-66.html - http://www.securityfocus.com/archive/1/487351/100/200/threaded - http://www.securitytracker.com/id?1019285 - http://www.vupen.com/english/advisories/2008/0367