Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-0666 State: PUBLISHED Published: 2008-02-11T20:00:00 Last Updated: 2024-08-07T07:54:22.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: Website META Language (WML) 2.0.11 allows local users to overwrite arbitrary files via a symlink attack on (1) the /tmp/pe.tmp.$$ temporary file used by wml_contrib/wmg.cgi and (2) temporary files used by wml_backend/p3_eperl/eperl_sys.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27685 - http://secunia.com/advisories/29353 - http://www.debian.org/security/2008/dsa-1492 - http://secunia.com/advisories/28829 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463907 - http:/
y/2008/dsa-1492 - http://secunia.com/advisories/28829 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463907 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:076 - http://secunia.com/advisories/28856 - http://security.gentoo.org/glsa/glsa-200803-23.xml
CVE ID: CVE-2008-0667 State: PUBLISHED Published: 2008-02-11T20:00:00 Last Updated: 2024-08-07T07:54:23.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DOC.print function in the Adobe JavaScript API, as used by Adobe Acrobat and Reader before 8.1.2, allows remote attackers to configure silent non-interactive printing, and trigger the printing of an arbitrary number of copies of a document. NOTE: this issue might be subsumed by CVE-2008-0655. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00007.html - http://securityreason.com/securityalert/3625 - http://kb.adobe.com/selfservice/viewContent.d
nce/2008-02/msg00007.html - http://securityreason.com/securityalert/3625 - http://kb.adobe.com/selfservice/viewContent.do?externalId=kb403079&sliceId=1 - http://www.us-cert.gov/cas/techalerts/TA08-043A.html - http://www.adobe.com/support/security/bulletins/apsb08-13.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9731 - http://www.vupen.com/english/advisories/2008/1966/references - http://secunia.com/advisories/28851 - http://www.adobe.com/support/security/advisories/apsa08-01.html - http://secunia.com/advisories/28983 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1 - http://security.gentoo.org/glsa/glsa-200803-01.xml - http:/
sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1 - http://security.gentoo.org/glsa/glsa-200803-01.xml - http://www.vupen.com/english/advisories/2008/0425/references - http://secunia.com/advisories/29065 - http://secunia.com/advisories/30840 - http://secunia.com/advisories/29205 - http://www.securityfocus.com/bid/27641 - http://www.fortiguardcenter.com/advisory/FGA-2008-04.html - http://secunia.com/advisories/28802 - http://www.redhat.com/support/errata/RHSA-2008-0144.html - http://www.securityfocus.com/archive/1/487760/100/0/threaded
CVE ID: CVE-2008-0668 State: PUBLISHED Published: 2008-02-11T20:00:00 Last Updated: 2024-08-07T07:54:22.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: The excel_read_HLINK function in plugins/excel/ms-excel-read.c in Gnome Office Gnumeric before 1.8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file containing XLS HLINK opcodes, possibly because of an integer signedness error that leads to an integer overflow. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0462 - http://www.gnome.org/projects/gnumeric/anno
Container: References: - http://www.vupen.com/english/advisories/2008/0462 - http://www.gnome.org/projects/gnumeric/announcements/1.8/gnumeric-1.8.1.shtml - http://secunia.com/advisories/28948 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00114.html - http://www.ubuntu.com/usn/usn-604-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:056 - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00001.html - http://www.debian.org/security/2008/dsa-1546 - http://www.securityfocus.com/bid/27536 - http://secunia.com/advisories/29896 - http://secunia.com/advisories/29702 - http://bugzilla.gnome.org/show_bug.cgi?id=505330 - http://secunia.com/advi
29896 - http://secunia.com/advisories/29702 - http://bugzilla.gnome.org/show_bug.cgi?id=505330 - http://secunia.com/advisories/28799 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00227.html - http://security.gentoo.org/glsa/glsa-200802-05.xml - http://secunia.com/advisories/28725/ - http://bugs.gentoo.org/show_bug.cgi?id=208356 - http://secunia.com/advisories/31339
CVE ID: CVE-2008-0669 State: PUBLISHED Published: 2008-02-12T00:00:00Z Last Updated: 2024-09-16T23:45:49.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.cgi in Sift Unity allows remote attackers to inject arbitrary web script or HTML via the qt parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28841 - http://www.securityfocus.com/bid/27684
CVE ID: CVE-2008-0670 State: PUBLISHED Published: 2008-02-12T00:00:00 Last Updated: 2024-08-07T07:54:23.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the Noticias (com_noticias) 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detalhe action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5081 - http://www.securityfocus.com/bid/27691
CVE ID: CVE-2008-0671 State: PUBLISHED Published: 2008-02-12T00:00:00 Last Updated: 2024-08-07T07:54:22.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the add_line_buffer function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to execute arbitrary code via a long chat message, related to conversion from LF to CRLF. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201111-07.xml - http://securityreason.com/securityalert/3632 - http://secunia.com/advisories/28833 - http://www.securityfocus.com/bid/27660 - http://www.securityfocus.com/archive/1/487687/100/0/threaded - http://aluig
3 - http://www.securityfocus.com/bid/27660 - http://www.securityfocus.com/archive/1/487687/100/0/threaded - http://aluigi.altervista.org/adv/rintintin-adv.txt - http://www.vupen.com/english/advisories/2008/0449
CVE ID: CVE-2008-0672 State: PUBLISHED Published: 2008-02-12T00:00:00 Last Updated: 2024-08-07T07:54:22.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: The process_chat_input function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to cause a denial of service (application crash) via a YES message without a newline character, which triggers a NULL dereference. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201111-07.xml - http://securityreason.com/securityalert/3632 - http://secunia.com/advisories/28833 - http://www.securityfocus.com/bid/27660 - http://www.securityfocus.com/archive/1/487687/100/0/threaded -
visories/28833 - http://www.securityfocus.com/bid/27660 - http://www.securityfocus.com/archive/1/487687/100/0/threaded - http://aluigi.altervista.org/adv/rintintin-adv.txt - http://www.vupen.com/english/advisories/2008/0449
CVE ID: CVE-2008-0673 State: PUBLISHED Published: 2008-02-12T00:00:00 Last Updated: 2024-08-07T07:54:22.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: TinTin++ 1.97.9 and WinTin++ 1.97.9 open files on the basis of an inbound file-transfer request, before the user has an opportunity to decline the request, which allows remote attackers to truncate arbitrary files in the top level of a home directory. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201111-07.xml - http://securityreason.com/securityalert/3632 - http://secunia.com/advisories/28833 - http://www.securityfocus.com/bid/27660 - http://www.securityfocus.com/archive
32 - http://secunia.com/advisories/28833 - http://www.securityfocus.com/bid/27660 - http://www.securityfocus.com/archive/1/487687/100/0/threaded - http://aluigi.altervista.org/adv/rintintin-adv.txt - http://www.vupen.com/english/advisories/2008/0449
CVE ID: CVE-2008-0674 State: PUBLISHED Published: 2008-02-18T22:00:00 Last Updated: 2024-08-07T07:54:22.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in PCRE before 7.6 allows remote attackers to execute arbitrary code via a regular expression containing a character class with a large number of characters with Unicode code points greater than 255. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29267 - http://www.vupen.com/english/advisories/2008/1412 - http://support.apple.com/kb/HT3757 - http://www.securityfocus.com/archive/1/492535/100/0/threaded - https://www.redhat.com/archives/fedora-package-announce/2008-
://www.securityfocus.com/archive/1/492535/100/0/threaded - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00371.html - http://secunia.com/advisories/28923 - http://secunia.com/advisories/32746 - http://secunia.com/advisories/29048 - http://security.gentoo.org/glsa/glsa-200803-24.xml - http://www.debian.org/security/2008/dsa-1499 - http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html - http://security.gentoo.org/glsa/glsa-200811-05.xml - https://bugzilla.redhat.com/show_bug.cgi?id=431660 - http://ftp.gnome.org/pub/gnome/sources/glib/2.14/glib-2.14.6.news - http://secunia.com/advisories/28957 - http://www.securityfocus.com/bid/31681 - http://secun
glib/2.14/glib-2.14.6.news - http://secunia.com/advisories/28957 - http://www.securityfocus.com/bid/31681 - http://secunia.com/advisories/36096 - http://www.securityfocus.com/bid/29009 - http://secunia.com/advisories/29027 - http://secunia.com/advisories/29282 - http://www.vupen.com/english/advisories/2008/2268 - http://secunia.com/advisories/28960 - http://secunia.com/advisories/30345 - http://www.securityfocus.com/archive/1/488927/100/0/threaded - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0176 - http://www.openwall.com/lists/oss-security/2008/05/02/2 - http://secunia.com/advisories/28996 - http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html - http://www.php.net/C
a.com/advisories/28996 - http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html - http://www.php.net/ChangeLog-5.php - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0086 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:053 - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html - http://secunia.com/advisories/32222 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00181.html - http://www.vupen.com/english/advisories/2008/0592 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40505 - http://secunia.com/advisories/29175 - http://www.securitytracker.com/id?1022674 - http://secunia.com/advisories/28985 - http://secu
nia.com/advisories/29175 - http://www.securitytracker.com/id?1022674 - http://secunia.com/advisories/28985 - http://secunia.com/advisories/31326 - http://www.securityfocus.com/bid/27786 - https://issues.rpath.com/browse/RPL-2503 - http://pcre.org/changelog.txt - http://www.vupen.com/english/advisories/2008/2780 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00632.html - https://usn.ubuntu.com/581-1/ - https://issues.rpath.com/browse/RPL-2223 - http://www.vupen.com/english/advisories/2008/0570 - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216 - http://www.vupen.com/english/advisories/2009/2172 - http://w
08/Oct/msg00001.html - http://support.apple.com/kb/HT3216 - http://www.vupen.com/english/advisories/2009/2172 - http://www.us-cert.gov/cas/techalerts/TA09-218A.html - http://wiki.rpath.com/Advisories:rPSA-2008-0086 - http://secunia.com/advisories/30048
CVE ID: CVE-2008-0675 State: PUBLISHED Published: 2008-02-12T00:00:00 Last Updated: 2024-08-07T07:54:23.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in cms/index.pl in The Everything Development Engine in The Everything Development System Pre-1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the node_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/487436/100/0/threaded - http://www.securityfocus.com/bid/27569 - http://securityreason.com/securityalert/3631 - https://www.exploit-db.com/exploits/5037
CVE ID: CVE-2008-0676 State: PUBLISHED Published: 2008-02-12T00:00:00 Last Updated: 2024-08-07T07:54:22.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in A-Blog 2 allows remote attackers to inject arbitrary web script or HTML via the words parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5050 - http://www.securityfocus.com/bid/27594
CVE ID: CVE-2008-0677 State: PUBLISHED Published: 2008-02-12T00:00:00 Last Updated: 2024-08-07T07:54:23.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in blog.php in A-Blog 2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a news action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5050 - http://www.securityfocus.com/bid/27594
CVE ID: CVE-2008-0678 State: PUBLISHED Published: 2008-02-12T00:00:00 Last Updated: 2024-08-07T07:54:22.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a page action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28756 - https://www.exploit-db.com/exploits/5042 - http://www.securityfocus.com/bid/27591
CVE ID: CVE-2008-0679 State: PUBLISHED Published: 2008-02-12T00:00:00 Last Updated: 2024-08-07T07:54:23.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28756 - https://www.exploit-db.com/exploits/5042 - http://www.securityfocus.com/bid/27591
CVE ID: CVE-2008-0680 State: PUBLISHED Published: 2008-02-12T00:00:00 Last Updated: 2024-08-07T07:54:23.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: SNMPd in MikroTik RouterOS 3.2 and earlier allows remote attackers to cause a denial of service (daemon crash) via a crafted SNMP SET request. Additional Analyst Notes: - CVE Program Container: References: - http://hellknights.void.ru/shados/snmp_sploit.c - https://www.exploit-db.com/exploits/5054 - http://www.securityfocus.com/bid/27599 - http://www.vupen.com/english/advisories/2008/0399 - http://secunia.com/advisories/28762
CVE ID: CVE-2008-0681 State: PUBLISHED Published: 2008-02-12T00:00:00 Last Updated: 2024-08-07T07:54:22.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in PHPShop 0.8.1 allows remote attackers to execute arbitrary SQL commands via the product_id parameter, as demonstrated by a shop/flypage action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5041 - http://www.securityfocus.com/bid/27570 - http://www.securityfocus.com/archive/1/487435/100/0/threaded - http://securityreason.com/securityalert/3628
CVE ID: CVE-2008-0682 State: PUBLISHED Published: 2008-02-12T00:00:00 Last Updated: 2024-08-07T07:54:22.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in wordspew-rss.php in the Wordspew plugin before 3.72 for Wordpress allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5039 - http://pierre.sudarovich.free.fr/index.php/2006/02/28/ajax-shoutbox/ - http://www.securityfocus.com/bid/27583 - http://secunia.com/advisories/28767
CVE ID: CVE-2008-0683 State: PUBLISHED Published: 2008-02-12T00:00:00 Last Updated: 2024-08-07T07:54:22.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in shiftthis-preview.php in the ShiftThis Newsletter (st_newsletter) plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the newsletter parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5053 - http://www.securityfocus.com/bid/27586
CVE ID: CVE-2008-0684 State: PUBLISHED Published: 2008-02-12T00:00:00Z Last Updated: 2024-09-17T03:23:37.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to inject arbitrary web script or HTML via the CatID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28773 - http://www.securityfocus.com/bid/27574 - http://marc.info/?l=bugtraq&m=120197273611835&w=2
CVE ID: CVE-2008-0685 State: PUBLISHED Published: 2008-02-12T00:00:00Z Last Updated: 2024-09-17T00:00:56.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to execute arbitrary SQL commands via the CatID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28773 - http://www.securityfocus.com/bid/27574 - http://marc.info/?l=bugtraq&m=120197273611835&w=2
CVE ID: CVE-2008-0686 State: PUBLISHED Published: 2008-02-12T00:00:00 Last Updated: 2024-08-07T07:54:23.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the NeoReferences (com_neoreferences) 1.3.1 and 1.3.3 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/40167 - https://www.exploit-db.com/exploits/5034 - http://secunia.com/advisories/28736 - http://www.securityfocus.com/bid/27564
CVE ID: CVE-2008-0687 State: PUBLISHED Published: 2008-02-12T00:00:00 Last Updated: 2024-08-07T07:54:22.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in siteadmin/editor_files/includes/load_message.php in the Youtube Clone Script allows remote attackers to inject arbitrary web script or HTML via the lang[please_wait] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3635 - http://secunia.com/advisories/28775 - http://www.securityfocus.com/archive/1/487432/100/0/threaded - http://www.securityfocus.com/bid/27598
CVE ID: CVE-2008-0688 State: PUBLISHED Published: 2008-02-12T00:00:00 Last Updated: 2024-08-07T07:54:22.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in catalog.php in Smartscript Domain Trader 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a viewcategory action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/487433/100/0/threaded - http://secunia.com/advisories/28774 - http://www.securityfocus.com/bid/27571 - http://securityreason.com/securityalert/3633
CVE ID: CVE-2008-0689 State: PUBLISHED Published: 2008-02-12T00:00:00 Last Updated: 2024-08-07T07:54:23.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the Marketplace (com_marketplace) 1.1.1 and 1.1.1-pl1 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a show_category action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27600 - https://www.exploit-db.com/exploits/5055
CVE ID: CVE-2008-0690 State: PUBLISHED Published: 2008-02-12T00:00:00 Last Updated: 2024-08-07T07:54:22.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the mosDirectory (com_directory) 2.3.2 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a viewcat action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5047 - http://www.securityfocus.com/bid/27585
CVE ID: CVE-2008-0691 State: PUBLISHED Published: 2008-02-12T00:00:00 Last Updated: 2024-08-07T07:54:23.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in admin_panel.php in the Simon Elvery WP-Footnotes 2.2 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) wp_footnotes_current_settings[priority], (2) wp_footnotes_current_settings[style_rules], (3) wp_footnotes_current_settings[pre_footnotes], and (4) wp_footnotes_current_settings[post_footnotes] parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3634 - http://secun
tional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3634 - http://secunia.com/advisories/28772 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40218 - http://www.securityfocus.com/archive/1/487430/100/0/threaded - http://www.securityfocus.com/bid/27572
CVE ID: CVE-2008-0692 State: PUBLISHED Published: 2008-02-12T00:00:00 Last Updated: 2024-08-07T07:54:22.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in bidhistory.php in iTechBids 3 Gold and 5.0 allows remote attackers to execute arbitrary SQL commands via the item_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5056 - http://www.securityfocus.com/bid/27601 - http://secunia.com/advisories/28780
CVE ID: CVE-2008-0693 State: PUBLISHED Published: 2008-02-12T00:00:00 Last Updated: 2024-08-07T07:54:22.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in PQCore.exe in Print Manager Plus 2008 Client Billing and Authentication 7.0.127.16 allows remote attackers to cause a denial of service (service outage) via a series of long packets to TCP port 48101. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/pqcorez-adv.txt - http://www.securityfocus.com/bid/27604 - http://www.vupen.com/english/advisories/2008/0407 - http://secunia.com/advisories/28741
CVE ID: CVE-2008-0694 State: PUBLISHED Published: 2008-02-12T00:00:00 Last Updated: 2024-08-07T07:54:22.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the HTTP Server in IBM OS/400 V5R3M0 and V5R4M0 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28744 - http://www.vupen.com/english/advisories/2008/0397 - http://www.securityfocus.com/bid/27595 - http://www-1.ibm.com/support/docview.wss?uid=nas22f5a0f082f6821c4862573e10041f7bd