Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
- CVE Program Container: References: - http://secunia.com/advisories/30395 - http://secunia.com/advisories/30419 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42680 - http://www.kb.cert.org/vuls/id/669265 - http://secunia.com/advisories/30451 - http://www.vupen.com/english/advisories/2008/1669 - http://secunia.com/advisories/30418 - http://secunia.com/advisories/30454 - http://secunia.com/advisories/30445 - http://secunia.com/advisories/30421 - http://secunia.com/advisories/30457 - http://secunia.com/advisories/30453 - http://secunia.com/advisories/30415 - http://secunia.com/advisories/30458 - http://secunia.com/advisories/30452 - http://secunia.com/advisories/30456
CVE ID: CVE-2008-0960 State: PUBLISHED Published: 2008-06-10T18:00:00 Last Updated: 2024-08-07T08:01:40.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 through 2.0.0; (5) NetApp (aka Network Appliance) Data ONTAP 7.3RC1 and 7.3RC2; (6) SNMP Research before 16.2; (7) multiple Cisco IOS, CatOS, ACE, and Nexus products; (8) Ingate Firewall 3.1.0 and later and SIParator 3.1.0 and later; (9) HP OpenView SNMP Emanate Master Agent 15.x; and possibly other products relies on the client to s
r 3.1.0 and later; (9) HP OpenView SNMP Emanate Master Agent 15.x; and possibly other products relies on the client to specify the HMAC length, which makes it easier for remote attackers to bypass SNMP authentication via a length value of 1, which only checks the first byte. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/tracker/index.php?func=detail&aid=1989089&group_id=12694&atid=456380 - http://secunia.com/advisories/35463 - http://secunia.com/advisories/30615 - http://support.apple.com/kb/HT2163 - http://www.vupen.com/english/advisories/2008/1787/references - http://secunia.com/advisories/30648 - http://www.kb.cert.org/vuls/id/CTAR-7FBS8Q - http:/
isories/2008/1787/references - http://secunia.com/advisories/30648 - http://www.kb.cert.org/vuls/id/CTAR-7FBS8Q - http://secunia.com/advisories/32664 - http://www.vupen.com/english/advisories/2008/1981/references - http://www.vupen.com/english/advisories/2008/1801/references - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00000.html - http://lists.ingate.com/pipermail/productinfo/2008/000021.html - http://secunia.com/advisories/31351 - http://www.vupen.com/english/advisories/2008/1788/references - http://support.avaya.com/elmodocs2/security/ASA-2008-282.htm - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00363.html - http://www.securityfocus.com/bid/2
m - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00363.html - http://www.securityfocus.com/bid/29623 - http://secunia.com/advisories/31334 - http://www.vupen.com/english/advisories/2008/2971 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10820 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6414 - http://secunia.com/advisories/30626 - http://marc.info/?l=bugtraq&m=127730470825399&w=2 - http://www.vmware.com/security/advisories/VMSA-2008-0017.html - http://www.openwall.com/lists/oss-security/2008/06/09/1 - http://marc.info/?l=bugtraq&m=127730470825399&w=2 - http://www.kb.cert.org/vuls/id
com/lists/oss-security/2008/06/09/1 - http://marc.info/?l=bugtraq&m=127730470825399&w=2 - http://www.kb.cert.org/vuls/id/878044 - http://secunia.com/advisories/30647 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238865-1 - http://www.securityfocus.com/archive/1/497962/100/0/threaded - http://www.vupen.com/english/advisories/2008/1836/references - http://secunia.com/advisories/33003 - http://www.cisco.com/warp/public/707/cisco-sa-20080610-snmpv3.shtml - http://www.vupen.com/english/advisories/2008/2361 - http://secunia.com/advisories/31568 - http://secunia.com/advisories/31467 - http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html - http://www.debian.org/secu
dvisories/31467 - http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html - http://www.debian.org/security/2008/dsa-1663 - http://www.us-cert.gov/cas/techalerts/TA08-162A.html - http://www.kb.cert.org/vuls/id/MIMG-7ETS87 - http://www.ocert.org/advisories/ocert-2008-006.html - http://rhn.redhat.com/errata/RHSA-2008-0528.html - http://securityreason.com/securityalert/3933 - http://www.redhat.com/support/errata/RHSA-2008-0529.html - http://secunia.com/advisories/30612 - http://secunia.com/advisories/30802 - https://bugzilla.redhat.com/show_bug.cgi?id=447974 - http://www.vmware.com/security/advisories/VMSA-2008-0013.html - http://www.kb.cert.org/vuls/id/MIMG-7ETS5Z - https://ww
http://www.vmware.com/security/advisories/VMSA-2008-0013.html - http://www.kb.cert.org/vuls/id/MIMG-7ETS5Z - https://www.exploit-db.com/exploits/5790 - http://www.vupen.com/english/advisories/2008/1797/references - http://security.gentoo.org/glsa/glsa-200808-02.xml - http://www.securityfocus.com/archive/1/493218/100/0/threaded - http://secunia.com/advisories/30665 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00459.html - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00380.html - http://www.vupen.com/english/advisories/2008/1800/references - http://www.mandriva.com/security/advisories?name=MDVSA-2008:118 - http://www.ubuntu.com/usn/usn-685-1 -
800/references - http://www.mandriva.com/security/advisories?name=MDVSA-2008:118 - http://www.ubuntu.com/usn/usn-685-1 - http://sourceforge.net/forum/forum.php?forum_id=833770 - http://www.securitytracker.com/id?1020218 - http://secunia.com/advisories/30596 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5785 - http://www.vupen.com/english/advisories/2009/1612 - http://secunia.com/advisories/30574
CVE ID: CVE-2008-0961 State: PUBLISHED Published: 2008-04-14T16:00:00 Last Updated: 2024-08-07T08:01:40.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMV DiskXtender 6.20.060 has a hard-coded login and password, which allows remote attackers to bypass authentication via the RPC interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019827 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=683 - http://www.vupen.com/english/advisories/2008/1198/references - http://www.osvdb.org/44419 - http://secunia.com/advisories/29778 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41772 - http://www.securi
9 - http://secunia.com/advisories/29778 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41772 - http://www.securityfocus.com/bid/28727
CVE ID: CVE-2008-0962 State: PUBLISHED Published: 2008-04-14T16:00:00 Last Updated: 2024-08-07T08:01:40.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the File System Manager for EMC DiskXtender 6.20.060 allows remote authenticated users to execute arbitrary code via a crafted request to the RPC interface. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41774 - http://www.vupen.com/english/advisories/2008/1198/references - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=684 - http://secunia.com/advisories/29778 - http://www.securitytracker.com/id?1019828
ce/vulnerabilities/display.php?id=684 - http://secunia.com/advisories/29778 - http://www.securitytracker.com/id?1019828 - http://www.securityfocus.com/bid/28728 - http://www.osvdb.org/44418
CVE ID: CVE-2008-0963 State: PUBLISHED Published: 2008-04-14T16:00:00 Last Updated: 2024-08-07T08:01:40.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in EMC DiskXtender MediaStor 6.20.060 allows remote authenticated users to execute arbitrary code via a crafted message to the RPC interface. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=685 - http://www.vupen.com/english/advisories/2008/1198/references - http://www.securityfocus.com/bid/28729 - http://secunia.com/advisories/29778 - http://www.osvdb.org/44417 - http://www.securityfocus.com/bid/28727 - https://ex
- http://secunia.com/advisories/29778 - http://www.osvdb.org/44417 - http://www.securityfocus.com/bid/28727 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41773 - http://www.securitytracker.com/id?1019829
CVE ID: CVE-2008-0964 State: PUBLISHED Published: 2008-08-08T18:12:00 Last Updated: 2024-08-07T08:01:40.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary code via a crafted SMB packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6328 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=734 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-240101-1 - http://www.securitytracker.com/id?1020633 - https://oval.cisecurity.o
un.com/search/document.do?assetkey=1-26-240101-1 - http://www.securitytracker.com/id?1020633 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5318 - http://support.avaya.com/elmodocs2/security/ASA-2008-355.htm - http://www.vupen.com/english/advisories/2008/2311 - http://secunia.com/advisories/31535 - http://secunia.com/advisories/31386 - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=766935 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44222 - http://www.securityfocus.com/bid/30556
CVE ID: CVE-2008-0965 State: PUBLISHED Published: 2008-08-08T18:12:00 Last Updated: 2024-08-07T08:01:40.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44222 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-240101-1 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=735 - http://www.securitytracker.co
1-26-240101-1 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=735 - http://www.securitytracker.com/id?1020633 - http://support.avaya.com/elmodocs2/security/ASA-2008-355.htm - http://www.vupen.com/english/advisories/2008/2311 - http://secunia.com/advisories/31535 - http://secunia.com/advisories/31386 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44415 - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=766935 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5742 - http://www.securityfocus.com/bid/30556
CVE ID: CVE-2008-0967 State: PUBLISHED Published: 2008-06-05T20:21:00 Last Updated: 2024-08-07T08:01:40.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in vmware-authd in VMware Workstation 5.x before 5.5.7 build 91707 and 6.x before 6.0.4 build 93057, VMware Player 1.x before 1.0.7 build 91707 and 2.x before 2.0.4 build 93057, and VMware Server before 1.0.6 build 91891 on Linux, and VMware ESXi 3.5 and VMware ESX 2.5.4 through 3.5, allows local users to gain privileges via a library path option in a configuration file. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201209-25.xml - http
ditional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201209-25.xml - http://www.vupen.com/english/advisories/2008/1744 - http://www.vmware.com/security/advisories/VMSA-2008-0009.html - http://www.securityfocus.com/bid/29557 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4768 - http://secunia.com/advisories/30556 - http://www.securityfocus.com/archive/1/493080/100/0/threaded - http://securitytracker.com/id?1020198 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42878 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5583 - http://securityreason.com/securityale
l.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5583 - http://securityreason.com/securityalert/3922 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=713
CVE ID: CVE-2008-0971 State: PUBLISHED Published: 2008-12-19T17:00:00 Last Updated: 2024-08-07T08:01:40.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.cgi in Barracuda Spam Firewall (BSF) before 3.5.12.007, Message Archiver before 1.2.1.002, Web Filter before 3.3.0.052, IM Firewall before 3.1.01.017, and Load Balancer before 2.3.024 allow remote attackers to inject arbitrary web script or HTML via (1) the Policy Name field in Search Based Retention Policy in Message Archiver; unspecified parameters in the (2) IP Configuration, (3) Administration, (4) Journal Accounts, (5) Retention Policy, and (6) GroupWise Sync co
s in the (2) IP Configuration, (3) Administration, (4) Journal Accounts, (5) Retention Policy, and (6) GroupWise Sync components in Message Archiver; (7) input to search operations in Web Filter; and (8) input used in error messages and (9) hidden INPUT elements in (a) Spam Firewall, (b) IM Firewall, and (c) Web Filter. Additional Analyst Notes: - CVE Program Container: References: - http://dcsl.ul.ie/advisories/03.htm - http://secunia.com/advisories/33164 - http://www.osvdb.org/50709 - http://www.barracudanetworks.com/ns/support/tech_alert.php - http://www.securityfocus.com/archive/1/499294/100/0/threaded - http://securityreason.com/securityalert/4792 - http://securitytracker.com/id?1021454
CVE ID: CVE-2008-0973 State: PUBLISHED Published: 2008-02-25T23:00:00 Last Updated: 2024-08-07T08:01:40.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Double-Take (aka HP StorageWorks Storage Mirroring) 4.5.0.1629, and other 4.5.0.x versions, allows remote attackers to have an unknown impact via a packet with a long string in the username field. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0666 - http://aluigi.altervista.org/adv/doubletakedown-adv.txt - http://securityreason.com/securityalert/3698 - http://www.securityfocus.com/bid/27951 - http://aluigi.org/poc/doubletakedown.zip - http://sec
.com/securityalert/3698 - http://www.securityfocus.com/bid/27951 - http://aluigi.org/poc/doubletakedown.zip - http://secunia.com/advisories/29075 - http://www.securityfocus.com/archive/1/488632/100/0/threaded
CVE ID: CVE-2008-0974 State: PUBLISHED Published: 2008-02-25T23:00:00 Last Updated: 2024-08-07T08:01:40.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (daemon termination) via (1) a large vector<T> value, which raises a "vector<T> too long" exception; or (2) a certain packet that raises an ospace/time/src\date.cpp exception. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0666 - http://aluigi.altervista.org/adv/doubletakedown-adv.txt - http://securit
://www.vupen.com/english/advisories/2008/0666 - http://aluigi.altervista.org/adv/doubletakedown-adv.txt - http://securityreason.com/securityalert/3698 - http://www.securityfocus.com/bid/27951 - http://aluigi.org/poc/doubletakedown.zip - http://secunia.com/advisories/29075 - http://www.securityfocus.com/archive/1/488632/100/0/threaded
CVE ID: CVE-2008-0975 State: PUBLISHED Published: 2008-02-25T23:00:00 Last Updated: 2024-08-07T08:01:40.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (CPU consumption) via a -1 value in the field that specifies the size of the vector<T> value. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0666 - http://aluigi.altervista.org/adv/doubletakedown-adv.txt - http://securityreason.com/securityalert/3698 - http://www.securityfocus.com/bid/27951 - http://a
oubletakedown-adv.txt - http://securityreason.com/securityalert/3698 - http://www.securityfocus.com/bid/27951 - http://aluigi.org/poc/doubletakedown.zip - http://secunia.com/advisories/29075 - http://www.securityfocus.com/archive/1/488632/100/0/threaded
CVE ID: CVE-2008-0976 State: PUBLISHED Published: 2008-02-25T23:00:00 Last Updated: 2024-08-07T08:01:40.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a malformed packet, as demonstrated by a packet of type (1) 0x2722 or (2) 0x272a. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0666 - http://aluigi.altervista.org/adv/doubletakedown-adv.txt - http://securityreason.com/securityalert/3698 - http://www.se
- http://aluigi.altervista.org/adv/doubletakedown-adv.txt - http://securityreason.com/securityalert/3698 - http://www.securityfocus.com/bid/27951 - http://aluigi.org/poc/doubletakedown.zip - http://secunia.com/advisories/29075 - http://www.securityfocus.com/archive/1/488632/100/0/threaded
CVE ID: CVE-2008-0977 State: PUBLISHED Published: 2008-02-25T23:00:00 Last Updated: 2024-08-07T08:01:40.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (daemon crash) via a certain long packet that triggers an attempt to allocate a large amount of memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0666 - http://aluigi.altervista.org/adv/doubletakedown-adv.txt - http://securityreason.com/securityalert/3698 - http://www.securityfocus.com/bid/27951
.org/adv/doubletakedown-adv.txt - http://securityreason.com/securityalert/3698 - http://www.securityfocus.com/bid/27951 - http://aluigi.org/poc/doubletakedown.zip - http://secunia.com/advisories/29075 - http://www.securityfocus.com/archive/1/488632/100/0/threaded
CVE ID: CVE-2008-0978 State: PUBLISHED Published: 2008-02-25T23:00:00 Last Updated: 2024-08-07T08:01:40.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to obtain sensitive information via a packet of type (1) 0x2728, which provides operating system and path information; (2) 0x274e, which lists Ethernet adapters; (3) 0x2726, which provides filesystem information; (4) 0x274f, which specifies the printer driver; or (5) 0x2757, which provides recent log entries. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.c
, which provides recent log entries. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0666 - http://aluigi.altervista.org/adv/doubletakedown-adv.txt - http://securityreason.com/securityalert/3698 - http://www.securityfocus.com/bid/27951 - http://aluigi.org/poc/doubletakedown.zip - http://secunia.com/advisories/29075 - http://www.securityfocus.com/archive/1/488632/100/0/threaded
CVE ID: CVE-2008-0979 State: PUBLISHED Published: 2008-02-25T23:00:00 Last Updated: 2024-08-07T08:01:40.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack consumption vulnerability in Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (daemon crash) via a certain packet that triggers the recursive calling of a function. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0666 - http://aluigi.altervista.org/adv/doubletakedown-adv.txt - http://securityreason.com/securityalert/3698 - http://www.securityfo
/aluigi.altervista.org/adv/doubletakedown-adv.txt - http://securityreason.com/securityalert/3698 - http://www.securityfocus.com/bid/27951 - http://aluigi.org/poc/doubletakedown.zip - http://secunia.com/advisories/29075 - http://www.securityfocus.com/archive/1/488632/100/0/threaded
CVE ID: CVE-2008-0980 State: PUBLISHED Published: 2008-02-25T23:00:00 Last Updated: 2024-08-07T08:01:40.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Spyce - Python Server Pages (PSP) 2.1.3 allow remote attackers to inject arbitrary web script or HTML via (1) the url or type parameter to docs/examples/redirect.spy; (2) the x parameter to docs/examples/handlervalidate.spy; (3) the name parameter to spyce/examples/request.spy; (4) the Name parameter to spyce/examples/getpost.spy; (5) the mytextarea parameter, the mypass parameter, or an empty parameter to spyce/examples/formtag.spy; (6) the newline parameter to the defaul
eter, the mypass parameter, or an empty parameter to spyce/examples/formtag.spy; (6) the newline parameter to the default URI under demos/chat/; (7) the text1 parameter to docs/examples/formintro.spy; or (8) the mytext or mydate parameter to docs/examples/formtag.spy. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3699 - http://www.procheckup.com/Vulnerability_PR08-01.php - http://www.securityfocus.com/archive/1/488336/100/0/threaded - http://www.securityfocus.com/bid/27898
CVE ID: CVE-2008-0981 State: PUBLISHED Published: 2008-02-25T23:00:00 Last Updated: 2024-08-07T08:01:40.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in spyce/examples/redirect.spy in Spyce - Python Server Pages (PSP) 2.1.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3699 - http://www.procheckup.com/Vulnerability_PR08-01.php - http://www.securityfocus.com/archive/1/488336/100/0/threaded - http://www.securityfocus.com/bid/27898
CVE ID: CVE-2008-0982 State: PUBLISHED Published: 2008-02-25T23:00:00 Last Updated: 2024-08-07T08:01:40.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Spyce - Python Server Pages (PSP) 2.1.3 allows remote attackers to obtain sensitive information via a direct request for spyce/examples/automaton.spy, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3699 - http://www.procheckup.com/Vulnerability_PR08-01.php - http://www.securityfocus.com/archive/1/488336/100/0/threaded - http://www.securityfocus.com/bid/27898
CVE ID: CVE-2008-0983 State: PUBLISHED Published: 2008-02-26T18:00:00 Last Updated: 2024-08-07T08:01:40.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: lighttpd 1.4.18, and possibly other versions before 1.5.0, does not properly calculate the size of a file descriptor array, which allows remote attackers to cause a denial of service (crash) via a large number of connections, which triggers an out-of-bounds access. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0659/references - http://secunia.com/advisories/29268 - http://secunia.com/advisories/29066 - http://secunia.com/advisories/29622 - http://lists.opensuse.or