Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-1968 State: PUBLISHED Published: 2008-04-27T18:00:00 Last Updated: 2024-08-07T08:41:00.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Cezanne 7 allow remote authenticated users to execute arbitrary SQL commands via the FUNID parameter to (1) CFLookup.asp and (2) CznCommon/CznCustomContainer.asp. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3830 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41816 - http://www.s21sec.com/avisos/s21sec-43-en.txt - http://www.securityfocus.com/archive/1/490843/100/0/threaded - http://www.securityfocus.com/bid/28773
CVE ID: CVE-2008-1969 State: PUBLISHED Published: 2008-04-27T18:00:00 Last Updated: 2024-08-07T08:41:00.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Cezanne 6.5.1 and 7 allow remote attackers to inject arbitrary web script or HTML via the (1) LookUPId and (2) CbFun parameters to (a) CFLookUP.asp; (3) TitleParms, (4) WidgetsHeights, (5) WidgetsLinks, and (6) WidgetsTitles parameters to (b) CznCommon/CznCustomContainer.asp, (7) CFTARGET parameter to (c) home.asp, (8) PersonOid parameter to (d) PeopleWeb/Cards/CVCard.asp, (9) DESTLINKOID and PersonOID parameters to (e) PeopleWeb/Cards/PayrollCard.asp, and the (10) FolderT
/Cards/CVCard.asp, (9) DESTLINKOID and PersonOID parameters to (e) PeopleWeb/Cards/PayrollCard.asp, and the (10) FolderTemplateId and (11) FolderTemplateName parameters to (f) PeopleWeb/CznDocFolder/CznDFStartProcess.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28772 - http://www.securityfocus.com/archive/1/490846/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/41821 - http://securityreason.com/securityalert/3829 - http://www.s21sec.com/es/avisos/s21sec-042-en.txt
CVE ID: CVE-2008-1970 State: PUBLISHED Published: 2008-04-27T18:00:00 Last Updated: 2024-08-07T08:41:00.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: muCommander before 0.8.2 stores credentials.xml with insecure permissions, which allows local users to obtain credentials. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29893 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41908 - http://www.mucommander.com/changes.php - http://www.securityfocus.com/bid/28875
CVE ID: CVE-2008-1971 State: PUBLISHED Published: 2008-04-27T18:00:00 Last Updated: 2024-08-07T08:41:00.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: phShoutBox Final 1.5 and earlier only checks passwords when specified in $_POST, which allows remote attackers to gain privileges by setting the (1) phadmin cookie to admin.php, or (2) in 1.4 and earlier, the ssbadmin cookie to shoutadmin.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41901 - https://www.exploit-db.com/exploits/5467 - http://www.securityfocus.com/bid/28856 - http://secunia.com/advisories/29892
CVE ID: CVE-2008-1972 State: PUBLISHED Published: 2008-04-27T18:00:00 Last Updated: 2024-08-07T08:41:00.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the user account creation feature in Exponent CMS 0.96.6-GA20071003 and earlier, when the Allow Registration? configuration option is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) firstname, (3) lastname, and (4) e-mail address fields. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29875 - http://www.expon
Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29875 - http://www.exponentcms.org/index.php?action=view&id=64&module=newsmodule&src=%40random44fe03276195 - http://sourceforge.net/project/shownotes.php?release_id=592961&group_id=118524 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41878 - http://www.securityfocus.com/bid/28834
CVE ID: CVE-2008-1973 State: PUBLISHED Published: 2008-04-27T18:00:00 Last Updated: 2024-08-07T08:41:00.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in SubEdit Player build 4056 and 4066 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long subtitle file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29904 - http://www.vupen.com/english/advisories/2008/1306 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41913 - https://www.exploit-db.com/exploits/5472 - http://www.securityfocus.com/bid/28858
CVE ID: CVE-2008-1974 State: PUBLISHED Published: 2008-04-27T19:00:00 Last Updated: 2024-08-07T08:41:00.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in addevent.php in Horde Kronolith 2.1.7, Groupware Webmail Edition 1.0.6, and Groupware 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/51238 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00444.html - http://secunia.com/advisories/29920 - http://www.securityfocus.com/bid/28898 - http://secunia.com/advisories/30649 - http://www.securitytr
/advisories/29920 - http://www.securityfocus.com/bid/28898 - http://secunia.com/advisories/30649 - http://www.securitytracker.com/id?1019934 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00427.html - http://www.securityfocus.com/archive/1/491230/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/41974 - http://www.vupen.com/english/advisories/2008/1373/references - https://www.debian.org/security/2008/dsa-1560 - http://securityreason.com/securityalert/3831 - http://forum.aria-security.com/showthread.php?t=49 - http://lists.horde.org/archives/kronolith/Week-of-Mon-20080421/006807.html
CVE ID: CVE-2008-1975 State: PUBLISHED Published: 2008-04-27T19:00:00 Last Updated: 2024-08-07T08:41:00.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in E-RESERV 2.1 allows remote attackers to execute arbitrary SQL commands via the ID_loc parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1345/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/41970 - http://www.securityfocus.com/bid/28899 - http://secunia.com/advisories/29914 - https://www.exploit-db.com/exploits/5487
CVE ID: CVE-2008-1976 State: PUBLISHED Published: 2008-04-27T20:00:00 Last Updated: 2024-08-07T08:41:00.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Drupal modules (1) Internationalization (i18n) 5.x before 5.x-2.3 and 5.x-1.1 and 6.x before 6.x-1.0 beta 1; and (2) Localizer 5.x before 5.x-3.4, 5.x-2.1, and 5.x-1.11; allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1352/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/41977 - http://drupal.org/node/2503
visories/2008/1352/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/41977 - http://drupal.org/node/250344 - http://www.securityfocus.com/bid/28916 - http://secunia.com/advisories/29961
CVE ID: CVE-2008-1977 State: PUBLISHED Published: 2008-04-27T20:00:00 Last Updated: 2024-08-07T08:41:00.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Internationalization (i18n) Drupal module 5.x before 5.x-2.3 and 5.x-1.1, and 6.x before 6.x-1.0 beta 1, allows remote attackers to change node translation relationships via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1352/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/41982 - http://drupal.org/node/250344 - http://www.securityfocus.com/bid/28916 - http://secunia.com/a
om/vulnerabilities/41982 - http://drupal.org/node/250344 - http://www.securityfocus.com/bid/28916 - http://secunia.com/advisories/29961
CVE ID: CVE-2008-1978 State: PUBLISHED Published: 2008-04-27T20:00:00 Last Updated: 2024-08-07T08:41:00.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Ubercart 5.x before 5.x-1.0 rc3 module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via node titles related to unspecified product features, a different vector than CVE-2008-1428. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41975 - http://secunia.com/advisories/29950 - http://www.securityfocus.com/bid/28914 - http://www.vupen.com/english/advisories/2008/1351/references
advisories/29950 - http://www.securityfocus.com/bid/28914 - http://www.vupen.com/english/advisories/2008/1351/references - http://drupal.org/node/250343
CVE ID: CVE-2008-1979 State: PUBLISHED Published: 2008-04-27T20:00:00 Last Updated: 2024-08-07T08:41:00.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Discovery Service (casdscvc) in CA ARCserve Backup 12.0.5454.0 and earlier allows remote attackers to cause a denial of service (crash) via a packet with a large integer value used in an increment to TCP port 41523, which triggers a buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/carcbackazz-adv.txt - http://www.securityfocus.com/archive/1/493430/100/0/threaded - http://secunia.com/advisories/29855 - http://www.securityfocus.com/bid/28927 - http://www.secu
1/493430/100/0/threaded - http://secunia.com/advisories/29855 - http://www.securityfocus.com/bid/28927 - http://www.securitytracker.com/id?1020324 - http://www.vupen.com/english/advisories/2008/1354 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41869
CVE ID: CVE-2008-1980 State: PUBLISHED Published: 2008-04-27T20:00:00 Last Updated: 2024-08-07T08:41:00.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in E-Publish 5.x before 5.x-1.1 and 6.x before 6.x-1.0 beta1, a Drupal module, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29960 - http://www.vupen.com/english/advisories/2008/1353/references - http://drupal.org/node/250408 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41979
CVE ID: CVE-2008-1981 State: PUBLISHED Published: 2008-04-27T20:00:00 Last Updated: 2024-08-07T08:41:00.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in E-Publish 5.x before 5.x-1.1 and 6.x before 6.x-1.0 beta1, a Drupal module, allows remote attackers to perform unauthorized actions as other users via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29960 - http://www.vupen.com/english/advisories/2008/1353/references - http://drupal.org/node/250408 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41978
CVE ID: CVE-2008-1982 State: PUBLISHED Published: 2008-04-27T20:00:00 Last Updated: 2024-08-07T08:41:00.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ss_load.php in the Spreadsheet (wpSS) 0.6 and earlier plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the ss_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5486 - http://secunia.com/advisories/29938 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41968 - http://timrohrer.com/blog/?p=120 - http://www.securityfocus.com/bid/28894 - http://www.vupen.com/english/advisories/2008/1344/references
CVE ID: CVE-2008-1983 State: PUBLISHED Published: 2008-04-27T20:00:00 Last Updated: 2024-08-07T08:41:00.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Advanced Electron Forum (AEF) 1.0.6 allows remote attackers to inject arbitrary web script or HTML via the beg parameter in a members action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29923 - http://www.securityfocus.com/bid/28865 - http://www.z0rlu.ownspace.org/index.php?/archives/60-Advanced-Electron-Forum-AEF-1.0.6-XSS.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41951
CVE ID: CVE-2008-1984 State: PUBLISHED Published: 2008-04-27T20:00:00 Last Updated: 2024-08-07T08:41:00.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: The eTrust Common Services (Transport) Daemon (eCSqdmn) in CA Secure Content Manager 8.0.28000.511 and earlier allows remote attackers to cause a denial of service (crash or CPU consumption) via a malformed packet to TCP port 1882. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1355/references - http://aluigi.altervista.org/adv/ecsqdamn-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/41890 - http://secunia.com/advisories/29895 - http://www.securitytr
https://exchange.xforce.ibmcloud.com/vulnerabilities/41890 - http://secunia.com/advisories/29895 - http://www.securitytracker.com/id?1019913 - http://www.securityfocus.com/bid/28888
CVE ID: CVE-2008-1985 State: PUBLISHED Published: 2008-04-27T21:00:00 Last Updated: 2024-08-07T08:41:00.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in base.php in DigitalHive 2.0 RC2 allows remote attackers to inject arbitrary web script or HTML via the mt parameter, possibly related to membres.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.z0rlu.ownspace.org/index.php?/archives/65-hive-v2.RC2-XSS.html - http://www.securityfocus.com/bid/28918 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42006
CVE ID: CVE-2008-1986 State: PUBLISHED Published: 2008-04-27T21:00:00 Last Updated: 2024-08-07T08:41:00.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in liste_article.php in Blog Pixel Motion (aka PixelMotion) allows remote attackers to inject arbitrary web script or HTML via the jours parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42011 - http://www.z0rlu.ownspace.org/index.php?/archives/63-Blog-PixelMotion-XSS.html - http://www.securityfocus.com/bid/28920
CVE ID: CVE-2008-1987 State: PUBLISHED Published: 2008-04-27T21:00:00 Last Updated: 2024-08-07T08:41:00.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in EncapsGallery 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41948 - http://www.encaps.net/software/encapsgallery/download-image-album.php - http://secunia.com/advisories/29824 - http://www.securityfocus.com/bid/28887
CVE ID: CVE-2008-1988 State: PUBLISHED Published: 2008-04-27T21:00:00 Last Updated: 2024-08-07T08:41:00.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the file_upload function in core/misc.class.php in EncapsGallery 2.0.2 allows remote authenticated administrators to upload and execute arbitrary PHP files by uploading a file with an executable extension, then accessing it via a direct request to the file in the rwx_gallery directory. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce
y from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41949 - http://secunia.com/advisories/29824 - http://www.securityfocus.com/bid/28887
CVE ID: CVE-2008-1989 State: PUBLISHED Published: 2008-04-27T21:00:00 Last Updated: 2024-08-07T08:41:00.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in 123flashchat.php in the 123 Flash Chat 6.8.0 module for e107, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the e107path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28828 - https://www.exploit-db.com/exploits/5459 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41867 - http://secunia.com/advisories/29870
CVE ID: CVE-2008-1990 State: PUBLISHED Published: 2008-04-27T21:00:00 Last Updated: 2024-08-07T08:41:00.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Acidcat CMS 3.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) cID parameter to default.asp and the (2) username parameter to main_login2.asp. Additional Analyst Notes: - CVE Program Container: References: - http://bugreport.ir/index.php?/36 - http://securityreason.com/securityalert/3842 - http://secunia.com/advisories/29916 - http://www.securityfocus.com/archive/1/491129/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/41918 - http://www.se
tyfocus.com/archive/1/491129/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/41918 - http://www.securityfocus.com/bid/28868 - https://www.exploit-db.com/exploits/5478
CVE ID: CVE-2008-1991 State: PUBLISHED Published: 2008-04-27T21:00:00 Last Updated: 2024-08-07T08:41:00.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin_colors_swatch.asp in Acidcat CMS 3.4.1 allows remote attackers to inject arbitrary web script or HTML via the field parameter. Additional Analyst Notes: - CVE Program Container: References: - http://bugreport.ir/index.php?/36 - http://securityreason.com/securityalert/3842 - http://secunia.com/advisories/29916 - http://www.securityfocus.com/archive/1/491129/100/0/threaded - http://www.securityfocus.com/bid/28868 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41919 - http
/0/threaded - http://www.securityfocus.com/bid/28868 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41919 - https://www.exploit-db.com/exploits/5478
CVE ID: CVE-2008-1992 State: PUBLISHED Published: 2008-04-27T21:00:00 Last Updated: 2024-08-07T08:41:00.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Acidcat CMS 3.4.1 does not properly restrict access to (1) default_mail_aspemail.asp, (2) default_mail_cdosys.asp or (3) default_mail_jmail.asp, which allows remote attackers to bypass restrictions and relay email messages with modified From, FromName, and To fields. Additional Analyst Notes: - CVE Program Container: References: - http://bugreport.ir/index.php?/36 - http://securityreason.com/securityalert/3842 - http://secunia.com/advisories/29916 - http://www.securityfocus.com/archive/1/491129/100/0/threaded - https://exchang
2 - http://secunia.com/advisories/29916 - http://www.securityfocus.com/archive/1/491129/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/41921 - http://www.securityfocus.com/bid/28868 - https://www.exploit-db.com/exploits/5478
CVE ID: CVE-2008-1993 State: PUBLISHED Published: 2008-04-27T21:00:00 Last Updated: 2024-08-07T08:41:00.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Acidcat CMS 3.4.1 does not restrict access to the FCKEditor component, which allows remote attackers to upload arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://bugreport.ir/index.php?/36 - http://securityreason.com/securityalert/3842 - http://www.securityfocus.com/archive/1/491129/100/0/threaded - http://www.securityfocus.com/bid/28868 - https://www.exploit-db.com/exploits/5478 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41922
CVE ID: CVE-2008-1994 State: PUBLISHED Published: 2008-04-27T21:00:00 Last Updated: 2024-08-07T08:41:00.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in (a) acon.c, (b) menu.c, and (c) child.c in Acon 1.0.5-5 through 1.0.5-7 allow local users to execute arbitrary code via (1) a long HOME environment variable or (2) a large number of terminal columns. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41915 - http://secunia.com/advisories/29909 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476603 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475733 - http://www.
bugs.debian.org/cgi-bin/bugreport.cgi?bug=476603 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475733 - http://www.securityfocus.com/bid/28862
CVE ID: CVE-2008-1995 State: PUBLISHED Published: 2008-04-28T17:00:00 Last Updated: 2024-08-07T08:41:00.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java System Directory Proxy Server 6.0, 6.1, and 6.2 classifies a connection using the "bind-dn" criteria, which can cause an incorrect application of policy and allows remote attackers to bypass intended access restrictions for the server. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-235381-1 - http://www.vupen.com/english/advisories/2008/1374/references - http://www.securityfocus.com/bid/28941 - http://www.securitytracker.com/id?1019925 - http:/
ories/2008/1374/references - http://www.securityfocus.com/bid/28941 - http://www.securitytracker.com/id?1019925 - http://secunia.com/advisories/29978
CVE ID: CVE-2008-1996 State: PUBLISHED Published: 2008-04-28T18:21:00 Last Updated: 2024-08-07T08:41:00.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: licq before 1.3.6 allows remote attackers to cause a denial of service (file-descriptor exhaustion and application crash) via a large number of connections. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41732 - http://www.securityfocus.com/archive/1/490717 - http://securityreason.com/securityalert/3851 - http://www.securityfocus.com/archive/1/490563 - http://www.vupen.com/english/
://securityreason.com/securityalert/3851 - http://www.securityfocus.com/archive/1/490563 - http://www.vupen.com/english/advisories/2008/1446/references - http://www.securityfocus.com/bid/28679 - http://secunia.com/advisories/30055 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00186.html - http://www.licq.org/ticket/1623 - http://www.licq.org/changeset/6146 - http://www.openwall.com/lists/oss-security/2008/04/25/1 - http://secunia.com/advisories/30236 - http://seclists.org/bugtraq/2008/Apr/0100.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:159
CVE ID: CVE-2008-1997 State: PUBLISHED Published: 2008-04-28T18:21:00 Last Updated: 2024-08-07T08:41:00.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the ADMIN_SP_C2 procedure in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 allows remote authenticated users to execute arbitrary code via unknown vectors. NOTE: the ADMIN_SP_C issue is already covered by CVE-2008-0699. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/491075/100/0/threaded - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ06972 - http://secunia.com/advisories/29022 - http://www.appsecinc.com/resources/alerts/db2