Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
.com/archives/fedora-package-announce/2008-February/msg00905.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093 - http://secunia.com/advisories/28766 - http://secunia.com/advisories/28622/ - http://secunia.com/advisories/28818 - http://secunia.com/advisories/30620 - http://secunia.com/advisories/28865 - http://secunia.com/advisories/29049 - http://www.vupen.com/english/advisories/2008/0453/references - http://www.redhat.com/support/errata/RHSA-2008-0103.html - http://secunia.com/advisories/28877 - http://secunia.com/advisories/28879 - http://www.ubuntu.com/usn/usn-582-1 - http://secunia.com/advisories/29167 - http://secunia.com/advisories/29567 - http://www.redhat.com/support/errata
582-1 - http://secunia.com/advisories/29167 - http://secunia.com/advisories/29567 - http://www.redhat.com/support/errata/RHSA-2008-0105.html - http://secunia.com/advisories/28958 - http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html - http://secunia.com/advisories/30327 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 - http://www.securityfocus.com/archive/1/488971/100/0/threaded - http://www.debian.org/security/2008/dsa-1489 - http://www.mozilla.org/security/announce/2008/mfsa2008-05.html - http://www.securityfocus.com/archive/1/488002/100/0/threaded - http://www.securityfocus.com/archive/1/487826/100/0/threaded - http://secunia.com/advisories/
/1/488002/100/0/threaded - http://www.securityfocus.com/archive/1/487826/100/0/threaded - http://secunia.com/advisories/29086 - http://secunia.com/advisories/28815 - http://www.vupen.com/english/advisories/2008/0454/references - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1 - http://secunia.com/advisories/28864 - http://www.debian.org/security/2008/dsa-1485 - http://secunia.com/advisories/28924 - http://www.vupen.com/english/advisories/2008/1793/references - http://wiki.rpath.com/Advisories:rPSA-2008-0093 - http://www.vupen.com/english/advisories/2008/2091/references - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html - https://www.redhat.com/arch
91/references - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html - http://secunia.com/advisories/29164 - http://secunia.com/advisories/29211 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html - http://wiki.rpath.com/Advisories:rPSA-2008-0051 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:062 - http://www.debian.org/security/2008/dsa-1484 - http://secunia.com/advisories/28808 - http://www.vupen.com/english/advisories/2008/0263 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10705 - http://www.
s/2008/0263 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10705 - http://www.vupen.com/english/advisories/2008/0627/references - http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml - http://secunia.com/advisories/28754 - http://www.hiredhacker.com/2008/01/19/firefox-chrome-url-handling-directory-traversal/ - http://www.securityfocus.com/bid/27406 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:048 - http://secunia.com/advisories/31043 - http://secunia.com/advisories/29098 - http://secunia.com/advisories/28839
CVE ID: CVE-2008-0419 State: PUBLISHED Published: 2008-02-08T21:00:00 Last Updated: 2024-08-07T07:46:54.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows remote attackers to steal navigation history and cause a denial of service (crash) via images in a page that uses designMode frames, which triggers memory corruption related to resize handles. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2008-0104.html - http://www.ubuntu.com/usn/usn-576-1 - http://browser.netscape.com/releasenotes/ - https://bugzilla.mozilla.org/show_bug.cgi?id=400556 - http://secuni
-576-1 - http://browser.netscape.com/releasenotes/ - https://bugzilla.mozilla.org/show_bug.cgi?id=400556 - http://secunia.com/advisories/28939 - http://www.debian.org/security/2008/dsa-1506 - https://issues.rpath.com/browse/RPL-1995 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0093 - http://secunia.com/advisories/28766 - http://secunia.com/advisories/28818 - http://secunia.com/advisories/30620 - http://secunia.com/advisories/28865 - http://secunia.com/advisories/29049 - http://www.vupen.com/english/advisories/2008/045
://secunia.com/advisories/28865 - http://secunia.com/advisories/29049 - http://www.vupen.com/english/advisories/2008/0453/references - http://www.redhat.com/support/errata/RHSA-2008-0103.html - http://secunia.com/advisories/28877 - http://secunia.com/advisories/28879 - http://secunia.com/advisories/29167 - http://secunia.com/advisories/29567 - http://www.redhat.com/support/errata/RHSA-2008-0105.html - http://secunia.com/advisories/28958 - http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html - http://secunia.com/advisories/30327 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 - http://www.securityfocus.com/archive/1/488971/100/0/threaded - http:/
un.com/search/document.do?assetkey=1-26-238492-1 - http://www.securityfocus.com/archive/1/488971/100/0/threaded - http://www.debian.org/security/2008/dsa-1489 - http://www.securityfocus.com/archive/1/488002/100/0/threaded - http://www.securityfocus.com/archive/1/487826/100/0/threaded - http://secunia.com/advisories/29086 - http://secunia.com/advisories/28815 - http://secunia.com/advisories/28864 - http://www.debian.org/security/2008/dsa-1485 - http://secunia.com/advisories/28924 - http://www.securityfocus.com/bid/27683 - http://www.vupen.com/english/advisories/2008/1793/references - http://www.mozilla.org/security/announce/2008/mfsa2008-06.html - http://wiki.rpath.com/Advisories:rPSA-2008-00
erences - http://www.mozilla.org/security/announce/2008/mfsa2008-06.html - http://wiki.rpath.com/Advisories:rPSA-2008-0093 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11652 - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html - http://www.kb.cert.org/vuls/id/879056 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html - http://secunia.com/advisories/29164 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html - http://wiki.rpath.com/Advisories:rPSA-2008-0051 - http://www.securitytracker.com/id?1019328 - http://www.debian.org/security/2008/dsa-1484 - http://secun
rPSA-2008-0051 - http://www.securitytracker.com/id?1019328 - http://www.debian.org/security/2008/dsa-1484 - http://secunia.com/advisories/28808 - http://www.vupen.com/english/advisories/2008/0627/references - http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml - http://secunia.com/advisories/28754 - http://secunia.com/advisories/28758 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:048 - http://secunia.com/advisories/28839
CVE ID: CVE-2008-0420 State: PUBLISHED Published: 2008-02-12T02:00:00 Last Updated: 2024-08-07T07:46:54.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory uninitialized via a crafted 8-bit bitmap (BMP) file that triggers an out-of-bounds read within the heap, as demonstrated using a CANVAS element; or cause a denial of service (application crash) via a crafted 8-bit bitmap file that triggers an out-of-bounds rea
ent; or cause a denial of service (application crash) via a crafted 8-bit bitmap file that triggers an out-of-bounds read. NOTE: the initial public reports stated that this affected Firefox in Ubuntu 6.06 through 7.10. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-582-2 - http://browser.netscape.com/releasenotes/ - http://www.securityfocus.com/archive/1/488264/100/0/threaded - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00946.html - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00905.html - http://secunia.com/advisories/30620 - http://secunia.com/advisories/29049 - https://exchange.xforce
uary/msg00905.html - http://secunia.com/advisories/30620 - http://secunia.com/advisories/29049 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40491 - http://www.ubuntu.com/usn/usn-582-1 - http://secunia.com/advisories/29167 - http://secunia.com/advisories/30327 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=408076 - http://www.mozilla.org/security/announce/2008/mfsa2008-07.html - http://www.vupen.com/english/advisories/2008/1793/references - http://www.securityfocus.com/bid/27826 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40606 - http://securitytracker.com/id?1019434 - https://oval.cisecurity.org/reposito
xforce.ibmcloud.com/vulnerabilities/40606 - http://securitytracker.com/id?1019434 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10119 - http://www.vupen.com/english/advisories/2008/0627/references - http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml - http://secunia.com/advisories/28758 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:048 - http://secunia.com/advisories/29098 - http://secunia.com/advisories/28839 - https://usn.ubuntu.com/576-1/
CVE ID: CVE-2008-0421 State: PUBLISHED Published: 2008-01-23T20:00:00 Last Updated: 2024-08-07T07:46:54.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Invision Gallery 2.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the album parameter in a rate command. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4966
CVE ID: CVE-2008-0422 State: PUBLISHED Published: 2008-01-23T21:00:00 Last Updated: 2024-08-07T07:46:54.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mail.php in boastMachine (aka bMachine) 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4952 - http://www.securityfocus.com/bid/32379 - http://www.securityfocus.com/archive/1/486737/100/0/threaded - http://www.securityfocus.com/bid/27369 - http://www.securityfocus.com/archive/1/498521/100/0/threaded - http://securityreason.com/securityalert/3563 - ht
27369 - http://www.securityfocus.com/archive/1/498521/100/0/threaded - http://securityreason.com/securityalert/3563 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39813 - http://www.vupen.com/english/advisories/2008/0227
CVE ID: CVE-2008-0423 State: PUBLISHED Published: 2008-01-23T21:00:00 Last Updated: 2024-08-07T07:46:54.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Lama Software allow remote attackers to execute arbitrary PHP code via a URL in the MY_CONF[classRoot] parameter to (1) inc.steps.access_error.php, (2) inc.steps.check_login.php, or (3) inc.steps.init_system.php in admin/functions/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4955 - http://secunia.com/advisories/28442 - http://www.securityfocus.com/bid/27380 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39821
m/advisories/28442 - http://www.securityfocus.com/bid/27380 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39821 - http://www.vupen.com/english/advisories/2008/0230
CVE ID: CVE-2008-0424 State: PUBLISHED Published: 2008-01-23T21:00:00 Last Updated: 2024-08-07T07:46:54.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in blog.php in Mooseguy Blog System (MGBS) 1.0 allows remote attackers to execute arbitrary SQL commands via the month parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4951 - http://www.securityfocus.com/bid/27377 - http://www.vupen.com/english/advisories/2008/0226 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39816
CVE ID: CVE-2008-0425 State: PUBLISHED Published: 2008-01-23T21:00:00 Last Updated: 2024-08-07T07:46:54.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in explorerdir.php in Frimousse 0.0.2 allows remote attackers to read arbitrary files and list arbitrary directories via a full pathname in the name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39797 - https://www.exploit-db.com/exploits/4943 - http://www.vupen.com/english/advisories/2008/0216 - http://www.securityfocus.com/bid/27385
CVE ID: CVE-2008-0426 State: PUBLISHED Published: 2008-01-23T21:00:00 Last Updated: 2024-08-07T07:46:54.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in submit.php in PacerCMS before 0.6.1 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) headline, or (3) text field in a message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39832 - http://www.securityfocus.com/archive/1/486796/100/0/threaded - http://www.securityfocus.com/bid/27386 - http://secunia.com/advisories/28605 - http://pacercms.sourceforge.net/index.php/2008/
/www.securityfocus.com/bid/27386 - http://secunia.com/advisories/28605 - http://pacercms.sourceforge.net/index.php/2008/01/21/pacercms-061-streamlines-code-base-addresses-security-issue/
CVE ID: CVE-2008-0427 State: PUBLISHED Published: 2008-01-23T21:00:00 Last Updated: 2024-08-07T07:46:54.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in file.php in bloofoxCMS 0.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0218 - http://secunia.com/advisories/28415 - http://www.securityfocus.com/archive/1/486714/100/0/threaded - https://www.exploit-db.com/exploits/4945 - http://marc.info/?l=bugtraq&m=120093005310107&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39795 - http
- http://marc.info/?l=bugtraq&m=120093005310107&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39795 - http://www.securityfocus.com/bid/27361 - http://bugreport.ir/?/27
CVE ID: CVE-2008-0428 State: PUBLISHED Published: 2008-01-23T21:00:00 Last Updated: 2024-08-07T07:46:54.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the login function in system/class_permissions.php in bloofoxCMS 0.3 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0218 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39794 - http://secunia.com/advisories/28415 - http://www.securityfocus.com/archive/1/486714/100/0/threaded - https://www.exploi
http://secunia.com/advisories/28415 - http://www.securityfocus.com/archive/1/486714/100/0/threaded - https://www.exploit-db.com/exploits/4945 - http://marc.info/?l=bugtraq&m=120093005310107&w=2 - http://www.securityfocus.com/bid/27361 - http://bugreport.ir/?/27
CVE ID: CVE-2008-0429 State: PUBLISHED Published: 2008-01-23T21:00:00 Last Updated: 2024-08-07T07:46:54.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a forum_catview action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4956 - https://www.exploit-db.com/exploits/6401 - http://www.vupen.com/english/advisories/2008/0231 - http://secunia.com/advisories/28581 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39820 - http://www.securityfocus.com/bid/2
a.com/advisories/28581 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39820 - http://www.securityfocus.com/bid/27381
CVE ID: CVE-2008-0430 State: PUBLISHED Published: 2008-01-23T21:00:00 Last Updated: 2024-08-07T07:46:54.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in form.php in 360 Web Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the IDFM parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27364 - http://www.vupen.com/english/advisories/2008/0217 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39796 - https://www.exploit-db.com/exploits/4944
CVE ID: CVE-2008-0431 State: PUBLISHED Published: 2008-01-23T21:00:00 Last Updated: 2024-08-07T07:46:54.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in administrator/download.php in IDMOS (aka Phoenix) 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the fileName parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39823 - https://www.exploit-db.com/exploits/4954 - http://www.securityfocus.com/bid/27379 - http://www.vupen.com/english/advisories/2008/0229 - http://secunia.com/advisories/28436
CVE ID: CVE-2008-0432 State: PUBLISHED Published: 2008-01-23T21:00:00 Last Updated: 2024-08-07T07:46:54.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in phpAutoVideo 2.21 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27346 - http://www.vupen.com/english/advisories/2008/0225 - http://securityreason.com/securityalert/3567 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39771 - http://secunia.com/advisories/28580 - http://www.securityfocus.com/archive/1/486591/100/0/thr
om/vulnerabilities/39771 - http://secunia.com/advisories/28580 - http://www.securityfocus.com/archive/1/486591/100/0/threaded
CVE ID: CVE-2008-0433 State: PUBLISHED Published: 2008-01-23T21:00:00 Last Updated: 2024-08-07T07:46:53.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in theme/phpAutoVideo/LightTwoOh/sidebar.php in Agares phpAutoVideo 2.21 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the loadpage parameter, a different vector than CVE-2007-6614. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27346 - http://www.vupen.com/english/advisories/2008/0225 - http://securityreason.com/securityalert/3567 - http://secunia.com/advisories/28580 - https://exchange.xforce.ibmcloud.c
http://securityreason.com/securityalert/3567 - http://secunia.com/advisories/28580 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39770 - http://www.securityfocus.com/archive/1/486591/100/0/threaded
CVE ID: CVE-2008-0434 State: PUBLISHED Published: 2008-01-23T21:00:00 Last Updated: 2024-08-07T07:46:54.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote attackers to execute arbitrary code via format string specifiers in the CNHO command. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3570 - http://www.securityfocus.com/bid/27363 - https://www.exploit-db.com/exploits/4947 - http://www.securityfocus.com/archive/1/486722/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/39803 - http://lists.grok.org.uk/piperma
/1/486722/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/39803 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059788.html - http://secunia.com/advisories/28562 - http://www.vupen.com/english/advisories/2008/0237
CVE ID: CVE-2008-0435 State: PUBLISHED Published: 2008-01-23T21:00:00 Last Updated: 2024-08-07T07:46:54.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in OZJournals 2.1.1 allows remote attackers to read portions of arbitrary files via a .. (dot dot) in the id parameter in a printpreview action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28582 - http://www.vupen.com/english/advisories/2008/0228 - https://www.exploit-db.com/exploits/4953 - http://www.securityfocus.com/bid/27375 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39815
CVE ID: CVE-2008-0436 State: PUBLISHED Published: 2008-01-23T21:00:00 Last Updated: 2024-08-07T07:46:54.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in profile-upload/upload.asp in PD9 Software MegaBBS 1.5.14b allows remote attackers to inject arbitrary web script or HTML via the target parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3565 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39812 - http://www.securityfocus.com/archive/1/486723/100/0/threaded - http://www.securityfocus.com/bid/27368
CVE ID: CVE-2008-0437 State: PUBLISHED Published: 2008-01-23T21:00:00 Last Updated: 2024-08-07T07:46:54.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the WebHPVCInstall.HPVirtualRooms14 ActiveX control in HPVirtualRooms14.dll 1.0.0.100, as used in the installation process for HP Virtual Rooms, allow remote attackers to execute arbitrary code via a long (1) AuthenticationURL, (2) PortalAPIURL, or (3) cabroot property value. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39836 - http://www.securityfocus.com/
gram Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39836 - http://www.securityfocus.com/bid/27384 - http://secunia.com/advisories/28595 - http://marc.info/?l=full-disclosure&m=120098751528333&w=2 - https://www.exploit-db.com/exploits/4959 - http://www.vupen.com/english/advisories/2008/0236
CVE ID: CVE-2008-0438 State: PUBLISHED Published: 2008-01-23T21:00:00 Last Updated: 2024-08-07T07:46:55.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the font rendering functionality in Novemberborn sIFR 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the txt parameter to a Flash (SWF) file, as demonstrated by fonts/FuturaLt.swf. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/41006 - http://www.securityfocus.com/archive/1/486829/100/0/threaded - http://novemberborn.net/sifr/2.0.3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39835 - http://securityreason.com/secu
ovemberborn.net/sifr/2.0.3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39835 - http://securityreason.com/securityalert/3571 - http://www.securityfocus.com/bid/27394 - http://www.securityfocus.com/archive/1/487585/100/200/threaded - http://www.securityfocus.com/archive/1/486787/100/0/threaded - http://www.procheckup.com/Vulnerability_PR07-38.php