Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
http://sourceforge.net/project/shownotes.php?release_id=571174&group_id=63887 - http://www.securityfocus.com/bid/27561 - http://www.kb.cert.org/vuls/id/721460 - http://secunia.com/advisories/28747 - http://forum.ultravnc.info/viewtopic.php?t=11850 - http://ultravnc.svn.sourceforge.net/viewvc/ultravnc/UltraVNC%20Project%20Root/UltraVNC/vncviewer/ClientConnection.cpp?sortby=date&r1=169&r2=168&pathrev=169 - http://www.exploit-db.com/exploits/18666 - http://www.securitytracker.com/id?1019293 - http://www.vupen.com/english/advisories/2008/0392
CVE ID: CVE-2008-0611 State: PUBLISHED Published: 2008-02-06T11:00:00 Last Updated: 2024-08-07T07:54:22.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in rmgs/images.php in the RMSOFT Gallery System 2.0 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27623 - https://www.exploit-db.com/exploits/5062
CVE ID: CVE-2008-0612 State: PUBLISHED Published: 2008-02-06T11:00:00 Last Updated: 2024-08-07T07:54:22.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in htdocs/install/index.php in XOOPS 2.0.18 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3614 - http://www.securityfocus.com/archive/1/487484/100/0/threaded - http://www.securityfocus.com/bid/27622 - https://www.exploit-db.com/exploits/5057 - http://xoops.svn.sourceforge.net/viewvc/xoops?view=rev&revision=1283 - http://xoops.
/www.exploit-db.com/exploits/5057 - http://xoops.svn.sourceforge.net/viewvc/xoops?view=rev&revision=1283 - http://xoops.svn.sourceforge.net/viewvc/xoops/XoopsCore/branches/2.0.x/2.0.18.1/docs/changelog.txt?r1=1283&r2=1282&pathrev=1283
CVE ID: CVE-2008-0613 State: PUBLISHED Published: 2008-02-06T11:00:00 Last Updated: 2024-08-07T07:54:22.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in htdocs/user.php in XOOPS 2.0.18 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the xoops_redirect parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3614 - http://www.securityfocus.com/archive/1/487484/100/0/threaded - http://xoops.svn.sourceforge.net/viewvc/xoops?view=rev&revision=1282 - http://sourceforge.net/tracker/index.php?func=detail&atid=430840&aid=1881236&group_id=
vc/xoops?view=rev&revision=1282 - http://sourceforge.net/tracker/index.php?func=detail&atid=430840&aid=1881236&group_id=41586 - https://www.exploit-db.com/exploits/5057
CVE ID: CVE-2008-0614 State: PUBLISHED Published: 2008-02-06T11:00:00 Last Updated: 2024-08-07T07:54:23.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Photokorn Gallery 1.543 allows remote attackers to execute arbitrary SQL commands via the pic parameter in a showpic action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27627 - https://www.exploit-db.com/exploits/5065
CVE ID: CVE-2008-0615 State: PUBLISHED Published: 2008-02-06T11:00:00 Last Updated: 2024-08-07T07:54:22.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in wp-admin/admin.php in the DMSGuestbook 1.8.0 and 1.7.0 plugin for WordPress allows remote authenticated users to read arbitrary files via a .. (dot dot) in the (1) folder and (2) file parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28759 - http://www.securityfocus.com/bid/27575 - http://securityreason.com/securityalert/3615 - http://www.securityfocus.com/archive/1/487437/100/0/threaded - https://www.exploit-db.com/exploits/5035
CVE ID: CVE-2008-0616 State: PUBLISHED Published: 2008-02-06T11:00:00 Last Updated: 2024-08-07T07:54:22.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the administration panel in the DMSGuestbook 1.7.0 plugin for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors. NOTE: it is not clear whether this issue crosses privilege boundaries. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3615 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40196 - http://www.securityfocus.com/archive/1/487437/100/0/threaded - https://www.exploit-
ibmcloud.com/vulnerabilities/40196 - http://www.securityfocus.com/archive/1/487437/100/0/threaded - https://www.exploit-db.com/exploits/5035
CVE ID: CVE-2008-0617 State: PUBLISHED Published: 2008-02-06T11:00:00 Last Updated: 2024-08-07T07:54:22.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the DMSGuestbook 1.7.0 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) file parameter to wp-admin/admin.php, or the (2) messagefield parameter in the guestbook page, and the (3) title parameter in the messagearea. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27575 - http://securityreason.com/securityalert/3615 - http://www.securityfocus.com/archive/1/487437/100/0/threaded -
d/27575 - http://securityreason.com/securityalert/3615 - http://www.securityfocus.com/archive/1/487437/100/0/threaded - https://www.exploit-db.com/exploits/5035
CVE ID: CVE-2008-0618 State: PUBLISHED Published: 2008-02-06T11:00:00Z Last Updated: 2024-09-17T01:46:50.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the DMSGuestbook 1.8.0 and 1.7.0 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) gbname, (2) gbemail, (3) gburl, and (4) gbmsg parameters to unspecified programs. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28759
CVE ID: CVE-2008-0619 State: PUBLISHED Published: 2008-02-06T11:00:00 Last Updated: 2024-08-07T07:54:22.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in NeroMediaPlayer.exe in Nero Media Player 1.4.0.35 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (persistent crash) via a long URI in a .M3U file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28765 - http://www.securityfocus.com/bid/27615 - http://securityreason.com/securityalert/3616 - https://www.exploit-db.com/exploits/5063 - http://www.securityfocus.com/archive/1/487578/100/0/threaded - http://www.vupen.com/engl
.exploit-db.com/exploits/5063 - http://www.securityfocus.com/archive/1/487578/100/0/threaded - http://www.vupen.com/english/advisories/2008/0405
CVE ID: CVE-2008-0620 State: PUBLISHED Published: 2008-02-06T11:00:00 Last Updated: 2024-08-07T07:54:22.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to cause a denial of service (crash) via a 0x53 LPD command, which causes the server to terminate. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28786 - http://www.securityfocus.com/archive/1/487575/100/0/threaded - http://www.vupen.com/english/advisories/2008/0409 - http://www.securitytracker.com/id?1019300 - http://securityreason.com/securityalert/3619 - http://www.securityfocus.
9 - http://www.securitytracker.com/id?1019300 - http://securityreason.com/securityalert/3619 - http://www.securityfocus.com/archive/1/487508/100/0/threaded - http://www.vupen.com/english/advisories/2008/0438 - http://secunia.com/advisories/28811 - http://www.securityfocus.com/bid/27613
CVE ID: CVE-2008-0621 State: PUBLISHED Published: 2008-02-06T11:00:00 Last Updated: 2024-08-07T07:54:23.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the (1) 0x01, (2) 0x02, (3) 0x03, (4) 0x04, and (5) 0x05 LPD commands. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28786 - http://www.securityfocus.com/archive/1/487575/100/0/threaded - http://www.vupen.com/english/advisories/2008/0409 - http://www.securitytracker.com/id?1019300 - http://securityreason.com/securit
w.vupen.com/english/advisories/2008/0409 - http://www.securitytracker.com/id?1019300 - http://securityreason.com/securityalert/3619 - http://www.securityfocus.com/archive/1/487508/100/0/threaded - http://www.vupen.com/english/advisories/2008/0438 - http://secunia.com/advisories/28811 - http://www.securityfocus.com/bid/27613 - https://www.exploit-db.com/exploits/5079
CVE ID: CVE-2008-0622 State: PUBLISHED Published: 2008-02-06T11:00:00 Last Updated: 2024-08-07T07:54:22.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in RaidenHTTPD 2.0.19 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the ulang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27628 - http://www.vupen.com/english/advisories/2008/0411 - http://www.raidenhttpd.com/jp/security.html - http://jvn.jp/jp/JVN%2391868305/index.html - http://secunia.com/advisories/28770
CVE ID: CVE-2008-0623 State: PUBLISHED Published: 2008-02-06T20:00:00 Last Updated: 2024-08-07T07:54:22.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! Music Jukebox 2.2.2.056 allows remote attackers to execute arbitrary code via a long argument to the AddImage method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019301 - http://secunia.com/advisories/28757 - http://www.kb.cert.org/vuls/id/101676 - https://www.exploit-db.com/exploits/5046 - https://www.exploit-db.com/exploits/5048 - https://www.exploit-db.com/exploits/5043 - http://ww
t-db.com/exploits/5046 - https://www.exploit-db.com/exploits/5048 - https://www.exploit-db.com/exploits/5043 - http://www.securityfocus.com/bid/27590 - http://www.vupen.com/english/advisories/2008/0396/references
CVE ID: CVE-2008-0624 State: PUBLISHED Published: 2008-02-06T20:00:00 Last Updated: 2024-08-07T07:54:22.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! JukeBox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddButton method, a different vulnerability than CVE-2008-0623. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27579 - http://secunia.com/advisories/28757 - http://www.kb.cert.org/vuls/id/101676 - http://www.vupen.com/english/advisories/2008/0396/references - https://www.exploit-db.com/exploits/5051
CVE ID: CVE-2008-0625 State: PUBLISHED Published: 2008-02-06T20:00:00 Last Updated: 2024-08-07T07:54:22.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the MediaGrid ActiveX control (mediagrid.dll) in Yahoo! Music Jukebox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddBitmap method. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/340860 - http://www.securityfocus.com/bid/27578 - https://www.exploit-db.com/exploits/5052 - http://secunia.com/advisories/28757 - http://www.securitytracker.com/id?1019298 - http://www.vupen.com/english/advisories/2008/0396/references
CVE ID: CVE-2008-0626 State: REJECTED Published: 2008-02-06T20:00:00 Last Updated: 2008-04-15T09:00:00 Description: No description available.
CVE ID: CVE-2008-0627 State: REJECTED Published: 2008-02-06T20:00:00 Last Updated: 2008-04-15T09:00:00 Description: No description available.
CVE ID: CVE-2008-0628 State: PUBLISHED Published: 2008-02-06T20:00:00 Last Updated: 2024-08-07T07:54:22.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML parsing code in Sun Java Runtime Environment JDK and JRE 6 Update 3 and earlier processes external entity references even when the "external general entities" property is false, which allows remote attackers to conduct XML external entity (XXE) attacks and cause a denial of service or access restricted resources. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29841 - http://www.redhat.com/support/errata/RHSA-2008-0245.html - http://www.securityfocus.com/bid/27553 - https:
ories/29841 - http://www.redhat.com/support/errata/RHSA-2008-0245.html - http://www.securityfocus.com/bid/27553 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9847 - http://dev2dev.bea.com/pub/advisory/277 - http://www.securityfocus.com/archive/1/487434/100/0/threaded - http://security.gentoo.org/glsa/glsa-200804-28.xml - http://secunia.com/advisories/28746 - http://securityreason.com/securityalert/3621 - http://secunia.com/advisories/29858 - http://scary.beasts.org/security/CESA-2007-002.html - http://www.vupen.com/english/advisories/2008/1252 - http://secunia.com/advisories/30780 - http://www.vupen.com/english/advisories/2008/0371 - http://sunsolve
es/2008/1252 - http://secunia.com/advisories/30780 - http://www.vupen.com/english/advisories/2008/0371 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-231246-1 - http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml - http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml - http://www.securitytracker.com/id?1019292
CVE ID: CVE-2008-0629 State: PUBLISHED Published: 2008-02-06T20:00:00 Last Updated: 2024-08-07T07:54:22.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in stream_cddb.c in MPlayer 1.0rc2 and SVN before r25824 allows remote user-assisted attackers to execute arbitrary code via a CDDB database entry containing a long album title. Additional Analyst Notes: - CVE Program Container: References: - http://www.mplayerhq.hu/design7/news.html - http://www.securityfocus.com/bid/27765 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:045 - http://secunia.com/advisories/28955 - http://secunia.com/advisories/29307 - http://www.debian.org/security/2008/dsa-1496 -
tp://secunia.com/advisories/28955 - http://secunia.com/advisories/29307 - http://www.debian.org/security/2008/dsa-1496 - http://security.gentoo.org/glsa/glsa-200803-16.xml - http://secunia.com/advisories/28956
CVE ID: CVE-2008-0630 State: PUBLISHED Published: 2008-02-06T20:00:00 Last Updated: 2024-08-07T07:54:22.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in url.c in MPlayer 1.0rc2 and SVN before r25823 allows remote attackers to execute arbitrary code via a crafted URL that prevents the IPv6 parsing code from setting a pointer to NULL, which causes the buffer to be reused by the unescape code. Additional Analyst Notes: - CVE Program Container: References: - http://www.mplayerhq.hu/design7/news.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:045 - http://secunia.com/advisories/28955 - http://www.securityfocus.com/bid/27766 - http://secunia.com
?name=MDVSA-2008:045 - http://secunia.com/advisories/28955 - http://www.securityfocus.com/bid/27766 - http://secunia.com/advisories/29307 - http://www.debian.org/security/2008/dsa-1496 - http://security.gentoo.org/glsa/glsa-200803-16.xml - http://secunia.com/advisories/28956
CVE ID: CVE-2008-0631 State: PUBLISHED Published: 2008-02-06T20:00:00 Last Updated: 2024-08-07T07:54:23.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple ActiveX controls in MailBee.dll in MailBee Objects 5.5 allow remote attackers to (1) overwrite arbitrary files via the SaveToDisk method, or (2) modify files via the AddStringToFile method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27481 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40011 - https://www.exploit-db.com/exploits/4999
CVE ID: CVE-2008-0632 State: PUBLISHED Published: 2008-02-06T20:00:00 Last Updated: 2024-08-07T07:54:22.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in cp_upload_image.php in LightBlog 9.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the blog's root directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/487398/100/0/threaded - http://www.securityfocus.com/bid/27562 - http://omni.netsons.org/blog/?p=11 - https://www.exploit-db.com/exploits/5033 - http://securityreason.c
.com/bid/27562 - http://omni.netsons.org/blog/?p=11 - https://www.exploit-db.com/exploits/5033 - http://securityreason.com/securityalert/3617 - http://secunia.com/advisories/28734
CVE ID: CVE-2008-0633 State: PUBLISHED Published: 2008-02-06T20:00:00 Last Updated: 2024-08-07T07:54:22.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Anon Proxy Server 0.102 and earlier, when user authentication is enabled, allows remote attackers to cause a denial of service (exception) via a user name with a large number of quotes, which triggers the overflow during escaping. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3618 - http://www.securityfocus.com/bid/27593 - https://sourceforge.net/project/shownotes.php?group_id=138780&release_id=571924 - http://www.securityfocus.com/archive/1/487446/1
ourceforge.net/project/shownotes.php?group_id=138780&release_id=571924 - http://www.securityfocus.com/archive/1/487446/100/0/threaded
CVE ID: CVE-2008-0634 State: PUBLISHED Published: 2008-02-06T20:00:00 Last Updated: 2024-08-07T07:54:22.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1, as used in Sejoong Namo ActiveSquare6, allows remote attackers to execute arbitrary code via a long argument to the Install method, a different vulnerability than CVE-2008-0551. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5045 - http://secunia.com/advisories/28649 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40199
CVE ID: CVE-2008-0635 State: PUBLISHED Published: 2008-02-06T20:00:00 Last Updated: 2024-08-07T07:54:22.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the delivery engine in Openads 2.4.0 through 2.4.2 allows remote attackers to execute arbitrary PHP code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27603 - http://www.securityfocus.com/archive/1/487486/100/0/threaded - http://secunia.com/advisories/28790 - http://securityreason.com/securityalert/3620
CVE ID: CVE-2008-0636 State: PUBLISHED Published: 2008-02-12T19:00:00 Last Updated: 2024-08-07T07:54:22.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Level Platforms, Inc. (LPI) Managed Workplace Service Center 4.x, 5.x and 6.x allows remote attackers to obtain sensitive information via a direct request to About/SC_About.htm, which provides version and patch information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/487811/100/0/threaded - http://www.securityfocus.com/archive/1/496074/100/0/threaded - http://www.securityfocus.com/bid/27702 - http://www.securityfocus.com/archive/1/488201/100/0/threaded - http://securi
- http://www.securityfocus.com/bid/27702 - http://www.securityfocus.com/archive/1/488201/100/0/threaded - http://securityreason.com/securityalert/3659
CVE ID: CVE-2008-0638 State: PUBLISHED Published: 2008-02-21T20:00:00 Last Updated: 2024-08-07T07:54:22.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Veritas Enterprise Administrator (VEA) service (aka vxsvc.exe) in Symantec Veritas Storage Foundation 5.0 allows remote attackers to execute arbitrary code via a packet with a crafted value of a certain size field, which is not checked for consistency with the actual buffer size. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/avcenter/security/Content/2008.02.20a.html - http://securitytracker.com/id?1019459 - http://secunia.com/advisories/29050 - http:
/security/Content/2008.02.20a.html - http://securitytracker.com/id?1019459 - http://secunia.com/advisories/29050 - http://www.securityfocus.com/bid/25778 - http://www.zerodayinitiative.com/advisories/ZDI-08-007.html - http://www.securityfocus.com/archive/1/488420/100/0/threaded
CVE ID: CVE-2008-0639 State: PUBLISHED Published: 2008-02-13T20:00:00 Last Updated: 2024-08-07T07:54:22.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the EnumPrinters function in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2, SP3, and SP4 for Windows allows remote attackers to execute arbitrary code via a crafted RPC request, aka Novell bug 353138, a different vulnerability than CVE-2006-5854. NOTE: this issue exists because of an incomplete fix for CVE-2007-6701. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/487980/100/0/threaded - http://secunia.com/advisories/28895 - ht
r: References: - http://www.securityfocus.com/archive/1/487980/100/0/threaded - http://secunia.com/advisories/28895 - http://www.vupen.com/english/advisories/2008/0496 - http://www.zerodayinitiative.com/advisories/ZDI-08-005.html - http://marc.info/?l=full-disclosure&m=120276962211348&w=2 - http://www.securitytracker.com/id?1019366 - http://www.securityfocus.com/bid/27741 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5008300.html - http://download.novell.com/Download?buildid=SszG22IIugM~
CVE ID: CVE-2008-0640 State: PUBLISHED Published: 2008-02-08T01:00:00 Last Updated: 2024-08-07T07:54:22.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Ghost Solution Suite 1.1 before 1.1 patch 2, 2.0.0, and 2.0.1 does not authenticate connections between the console and the Ghost Management Agent, which allows remote attackers to execute arbitrary commands via unspecified RPC requests in conjunction with ARP spoofing. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28853 - http://www.vupen.com/english/advisories/2008/0474 - http://www.securitytracker.com/id?1019356 - http://www.securityfocus.com/bid/27644 - http://www.s
advisories/2008/0474 - http://www.securitytracker.com/id?1019356 - http://www.securityfocus.com/bid/27644 - http://www.symantec.com/avcenter/security/Content/2008.02.07.html
CVE ID: CVE-2008-0642 State: PUBLISHED Published: 2008-02-15T00:00:00.000Z Last Updated: 2025-04-23T15:33:13.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in files created by Adobe RoboHelp 6 and 7, possibly involving use of a (1) WebHelp5 (WebHelp5Ext) or (2) WildFire (WildFireExt) extension, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2007-1280. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.adobe.com/support/security/bulletins/apsb08-05.html - http://secunia.com/advisories/28945 - http://securitytrac