Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-1082 State: PUBLISHED Published: 2008-02-29T02:00:00 Last Updated: 2024-08-07T08:08:57.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 9.26 allows remote attackers to "bypass sanitization filters" and conduct cross-site scripting (XSS) attacks via crafted attribute values in an XML document, which are not properly handled during DOM presentation. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29029 - http://www.securityfocus.com/bid/27901 - http://secunia.com/advisories/29152 - http://security.gentoo.org/glsa/glsa-200803-09.xml - http://secunia.com/advisories/29178 - http://www.opera.com/docs/change
p://security.gentoo.org/glsa/glsa-200803-09.xml - http://secunia.com/advisories/29178 - http://www.opera.com/docs/changelogs/linux/926/ - http://www.vupen.com/english/advisories/2008/0622 - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00010.html - http://www.opera.com/support/search/view/880/
CVE ID: CVE-2008-1083 State: PUBLISHED Published: 2008-04-08T23:00:00 Last Updated: 2024-10-15T14:22:20.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF or WMF image file with a malformed header that triggers an integer overflow, aka "GDI Heap Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/30933 - http://www.us-cert.gov/cas/techalerts/TA08-099A.html - http://w
: References: - http://www.securityfocus.com/bid/30933 - http://www.us-cert.gov/cas/techalerts/TA08-099A.html - http://www.osvdb.org/44213 - http://marc.info/?l=bugtraq&m=120845064910729&w=2 - http://www.vupen.com/english/advisories/2008/1145/references - http://support.microsoft.com/kb/948590 - http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0168.html - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=681 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-021 - http://marc.info/?l=bugtraq&m=120845064910729&w=2 - http://www.osvdb.org/44214 - http://www.zerodayinitiative.com/advisories/ZDI-08-020/ - http://www.kb.cert.org/vuls/id/
- http://www.osvdb.org/44214 - http://www.zerodayinitiative.com/advisories/ZDI-08-020/ - http://www.kb.cert.org/vuls/id/632963 - http://www.securityfocus.com/archive/1/490584/100/0/threaded - https://www.exploit-db.com/exploits/5442 - https://www.exploit-db.com/exploits/6330 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41471 - http://www.securitytracker.com/id?1019798 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5441 - http://www.securityfocus.com/bid/28571 - http://secunia.com/advisories/29704
CVE ID: CVE-2008-1084 State: PUBLISHED Published: 2008-04-08T23:00:00 Last Updated: 2024-08-07T08:08:57.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, through Vista SP1, and Server 2008 allows local users to execute arbitrary code via unknown vectors related to improper input validation. NOTE: it was later reported that one affected function is NtUserFnOUTSTRING in win32k.sys. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5437 - http://www.us-cert.gov/cas/techalerts/TA
isecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5437 - http://www.us-cert.gov/cas/techalerts/TA08-099A.html - http://marc.info/?l=bugtraq&m=120845064910729&w=2 - http://milw0rm.com/sploits/2008-ms08-25-exploit.zip - http://www.securityfocus.com/bid/28554 - http://marc.info/?l=bugtraq&m=120845064910729&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-025 - https://www.exploit-db.com/exploits/5518 - http://www.vupen.com/english/advisories/2008/1149/references - http://secunia.com/advisories/29720 - http://www.securitytracker.com/id?1019803
CVE ID: CVE-2008-1085 State: PUBLISHED Published: 2008-04-08T23:00:00 Last Updated: 2024-08-07T08:08:57.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 through SP1, and 7 allows remote attackers to execute arbitrary code via a crafted data stream that triggers memory corruption, as demonstrated using an invalid MIME-type that does not have a registered handler. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA08-099A.html - http://marc.info/?l=bugtraq&m=120845064910729&w=2 - http://www.vupen.com/english/advisories/2008/1148/references - http://marc.i
arc.info/?l=bugtraq&m=120845064910729&w=2 - http://www.vupen.com/english/advisories/2008/1148/references - http://marc.info/?l=bugtraq&m=120845064910729&w=2 - http://secunia.com/secunia_research/2007-100/advisory/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-024 - http://www.securitytracker.com/id?1019801 - http://www.securityfocus.com/bid/28552 - http://www.securityfocus.com/archive/1/490840/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5563 - http://secunia.com/advisories/27707
CVE ID: CVE-2008-1086 State: PUBLISHED Published: 2008-04-08T23:00:00 Last Updated: 2024-08-07T08:08:57.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HxTocCtrl ActiveX control (hxvz.dll), as used in Microsoft Internet Explorer 5.01 SP4 and 6 SP1, in Windows XP SP2, Server 2003 SP1 and SP2, Vista SP1, and Server 2008, allows remote attackers to execute arbitrary code via malformed arguments, which triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA08-099A.html - http://marc.info/?l=bugtraq&m=120845064910729&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval
c.info/?l=bugtraq&m=120845064910729&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5475 - http://marc.info/?l=bugtraq&m=120845064910729&w=2 - http://secunia.com/advisories/29714 - http://www.securitytracker.com/id?1019800 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41464 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=680 - http://www.vupen.com/english/advisories/2008/1147/references - http://www.securityfocus.com/bid/28606 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-023
CVE ID: CVE-2008-1087 State: PUBLISHED Published: 2008-04-08T23:00:00 Last Updated: 2024-08-07T08:08:57.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF image file with crafted filename parameters, aka "GDI Stack Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/44215 - http://www.us-cert.gov/cas/techalerts/TA08-099A.html - http://marc.info/?l=bugtraq&m=120845064910729&w=2 - http://www.vupen.com/english/advisories/2008/1145/references -
ml - http://marc.info/?l=bugtraq&m=120845064910729&w=2 - http://www.vupen.com/english/advisories/2008/1145/references - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-021 - http://www.securityfocus.com/bid/28570 - http://marc.info/?l=bugtraq&m=120845064910729&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5580 - https://www.exploit-db.com/exploits/6656 - https://www.exploit-db.com/exploits/5442 - http://www.securitytracker.com/id?1019798 - http://secunia.com/advisories/29704
CVE ID: CVE-2008-1088 State: PUBLISHED Published: 2008-04-08T23:00:00 Last Updated: 2024-08-07T08:08:57.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Project 2000 Service Release 1, 2002 SP1, and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a crafted Project file, related to improper validation of "memory resource allocations." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA08-099A.html - http://marc.info/?l=bugtraq&m=120845064910729&w=2 - http://www.securityfocus.com/bid/28607 - http://www.vupen.com/english/advisories/2008/1142/references - http://marc.info/?l=bugtraq&m=1208
yfocus.com/bid/28607 - http://www.vupen.com/english/advisories/2008/1142/references - http://marc.info/?l=bugtraq&m=120845064910729&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41447 - http://secunia.com/advisories/29690 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5384 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-018 - http://www.kb.cert.org/vuls/id/155563 - http://www.securitytracker.com/id?1019797
CVE ID: CVE-2008-1089 State: PUBLISHED Published: 2008-04-08T23:00:00 Last Updated: 2024-08-07T08:08:57.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a Visio file containing crafted object header data, aka "Visio Object Header Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019804 - http://www.us-cert.gov/cas/techalerts/TA08-099A.html - http://marc.info/?l=bugtraq&m=120845064910729&w=2 - http://www.vupen.com/english/advisories/2008/1143/references -
ml - http://marc.info/?l=bugtraq&m=120845064910729&w=2 - http://www.vupen.com/english/advisories/2008/1143/references - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5496 - http://marc.info/?l=bugtraq&m=120845064910729&w=2 - http://www.securityfocus.com/bid/28555 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41451 - http://secunia.com/advisories/29691 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-019
CVE ID: CVE-2008-1090 State: PUBLISHED Published: 2008-04-08T23:00:00 Last Updated: 2024-08-07T08:08:57.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a crafted .DXF file, aka "Visio Memory Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019804 - http://www.us-cert.gov/cas/techalerts/TA08-099A.html - http://marc.info/?l=bugtraq&m=120845064910729&w=2 - http://www.vupen.com/english/advisories/2008/1143/references - https://oval.cisecurity.org
gtraq&m=120845064910729&w=2 - http://www.vupen.com/english/advisories/2008/1143/references - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5344 - http://marc.info/?l=bugtraq&m=120845064910729&w=2 - http://secunia.com/advisories/29691 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41452 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-019 - http://www.securityfocus.com/bid/28556
CVE ID: CVE-2008-1091 State: PUBLISHED Published: 2008-05-13T22:00:00 Last Updated: 2024-08-07T08:08:57.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via a Rich Text Format (.rtf) file with a malformed string that triggers a "memory calculation error" and a heap-based buffer overflow, aka "Object Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/492020/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/secu
- http://www.securityfocus.com/archive/1/492020/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-026 - http://www.securityfocus.com/bid/29104 - http://www.kb.cert.org/vuls/id/543907 - http://www.vupen.com/english/advisories/2008/1504/references - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5494 - http://www.securitytracker.com/id?1020013 - http://marc.info/?l=bugtraq&m=121129490723574&w=2 - http://secunia.com/advisories/30143 - http://www.us-cert.gov/cas/techalerts/TA08-134A.html - http://www.zerodayinitiative.com/advisories/ZDI-08-023 - http://marc.info/?l=bugtraq&m=121129490723574&w=2
CVE ID: CVE-2008-1092 State: PUBLISHED Published: 2008-03-25T16:00:00 Last Updated: 2024-08-07T08:08:57.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in msjet40.dll before 4.0.9505.0 in Microsoft Jet Database Engine allows remote attackers to execute arbitrary code via a crafted Word file, as exploited in the wild in March 2008. NOTE: as of 20080513, Microsoft has stated that this is the same issue as CVE-2007-6026. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019686 - http://www.kb.cert.org/vuls/id/936529 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-028 - https://excha
t.org/vuls/id/936529 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-028 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41380 - http://marc.info/?l=bugtraq&m=121129490723574&w=2 - http://marc.info/?l=bugtraq&m=121129490723574&w=2 - http://www.microsoft.com/technet/security/advisory/950627.mspx
CVE ID: CVE-2008-1093 State: PUBLISHED Published: 2008-09-17T18:06:00 Last Updated: 2024-08-07T08:08:57.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Acresso InstallShield Update Agent does not properly verify the authenticity of Rule Scripts obtained from GetRules.asp web pages on FLEXnet Connect servers, which allows remote man-in-the-middle attackers to execute arbitrary VBScript code via Trojan horse Rules. Additional Analyst Notes: - CVE Program Container: References: - http://www.simplicity.net/vuln/CVE-2008-1093.txt - http://www.vupen.com/english/advisories/2008/2613 - http://secunia.com/advisories/31896 - http://www.securityfocus.com/bid/31204 - http://www.securityf
visories/2008/2613 - http://secunia.com/advisories/31896 - http://www.securityfocus.com/bid/31204 - http://www.securityfocus.com/archive/1/496389/100/0/threaded - http://securityreason.com/securityalert/4268 - http://www.kb.cert.org/vuls/id/837092 - http://www.securitytracker.com/id?1020893
CVE ID: CVE-2008-1094 State: PUBLISHED Published: 2008-12-19T17:00:00 Last Updated: 2024-08-07T08:08:57.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall (BSF) before 3.5.12.007 allows remote authenticated administrators to execute arbitrary SQL commands via a pattern_x parameter in a search_count_equals action, as demonstrated by the pattern_0 parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7496 - http://secunia.com/advisories/33164 - http://www.securityfocus.com/archive/1/499293/100/0/threaded - http://www.barracudanetwor
secunia.com/advisories/33164 - http://www.securityfocus.com/archive/1/499293/100/0/threaded - http://www.barracudanetworks.com/ns/support/tech_alert.php - http://securityreason.com/securityalert/4793 - http://dcsl.ul.ie/advisories/02.htm - http://securitytracker.com/id?1021455
CVE ID: CVE-2008-1095 State: PUBLISHED Published: 2008-02-29T11:00:00 Last Updated: 2024-08-07T08:08:57.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Internet Protocol (IP) implementation in Sun Solaris 8, 9, and 10 allows remote attackers to bypass intended firewall policies or cause a denial of service (panic) via unknown vectors, possibly related to ICMP packets and IP fragment reassembly. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29100 - http://secunia.com/advisories/29379 - http://support.avaya.com/elmodocs2/security/ASA-2008-119.htm - https://exchange.xforce.ibmcloud.com/vulnerabilit
29379 - http://support.avaya.com/elmodocs2/security/ASA-2008-119.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/40473 - http://www.vupen.com/english/advisories/2008/0645 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5511 - http://www.securityfocus.com/bid/27967 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200183-1
CVE ID: CVE-2008-1096 State: PUBLISHED Published: 2008-03-05T20:00:00 Last Updated: 2024-08-07T08:08:57.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: The load_tile function in the XCF coder in coders/xcf.c in (1) ImageMagick 6.2.8-0 and (2) GraphicsMagick (aka gm) 1.1.7 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted .xcf file that triggers an out-of-bounds heap write, possibly related to the ScaleCharToQuantum function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41194 - http://secunia.com/advisories/32945 - http://www.redhat
: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41194 - http://secunia.com/advisories/32945 - http://www.redhat.com/support/errata/RHSA-2008-0145.html - http://www.securityfocus.com/bid/28821 - http://osvdb.org/43212 - http://secunia.com/advisories/29786 - http://secunia.com/advisories/30967 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=414370 - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:099 - http://www.securitytracker.com/id?1019880 - http://www.debian.org/security/2009/dsa-1858 - https://bugzilla.redhat.com/show_bug.cgi?id=286411 - https://oval.cisecurity.org/repository/search/defin
2009/dsa-1858 - https://bugzilla.redhat.com/show_bug.cgi?id=286411 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10843 - http://www.ubuntu.com/usn/USN-681-1 - http://secunia.com/advisories/36260
CVE ID: CVE-2008-1097 State: PUBLISHED Published: 2008-03-05T20:00:00 Last Updated: 2024-08-07T08:08:57.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the ReadPCXImage function in the PCX coder in coders/pcx.c in (1) ImageMagick 6.2.4-5 and 6.2.8-0 and (2) GraphicsMagick (aka gm) 1.1.7 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted .pcx file that triggers incorrect memory allocation for the scanline array, leading to memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201311-10.xml - http://www.securit
st Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201311-10.xml - http://www.securityfocus.com/bid/28822 - https://bugzilla.redhat.com/show_bug.cgi?id=285861 - http://secunia.com/advisories/29857 - http://www.redhat.com/support/errata/RHSA-2008-0145.html - http://osvdb.org/43213 - http://www.securitytracker.com/id?1019881 - http://secunia.com/advisories/55721 - http://secunia.com/advisories/29786 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413034 - http://secunia.com/advisories/30967 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11237 - http://www.redhat.com/support/errata/RHSA-2008-0165.html - http://lists
definition/oval%3Aorg.mitre.oval%3Adef%3A11237 - http://www.redhat.com/support/errata/RHSA-2008-0165.html - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:099 - http://www.debian.org/security/2009/dsa-1858 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41193 - http://secunia.com/advisories/36260
CVE ID: CVE-2008-1098 State: PUBLISHED Published: 2008-03-05T20:00:00 Last Updated: 2024-08-07T08:08:57.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) certain input processed by formatter/text_gedit.py (aka the gui editor formatter); (2) a page name, which triggers an injection in PageEditor.py when the page is successfully deleted by a victim in a DeletePage action; or (3) the destination page name for a RenamePage action, which triggers an injection in PageEditor.py when a victim's rename attempt fails because of a duplicat
namePage action, which triggers an injection in PageEditor.py when a victim's rename attempt fails because of a duplicate name. NOTE: the AttachFile XSS issue is already covered by CVE-2008-0781, and the login XSS issue is already covered by CVE-2008-0780. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30031 - http://secunia.com/advisories/33755 - http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml - http://secunia.com/advisories/29262 - http://moinmo.in/SecurityFixes - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00538.html - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00510.html - http:
unce/2008-April/msg00538.html - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00510.html - http://secunia.com/advisories/29444 - http://hg.moinmo.in/moin/1.5/rev/d0152eeb4499 - https://usn.ubuntu.com/716-1/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/41037 - http://www.securityfocus.com/bid/28173 - http://www.debian.org/security/2008/dsa-1514 - http://hg.moinmo.in/moin/1.5/rev/4ede07e792dd
CVE ID: CVE-2008-1099 State: PUBLISHED Published: 2008-03-05T20:00:00 Last Updated: 2024-08-07T08:08:57.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: _macro_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30031 - http://secunia.com/advisories/33755 - http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml - http://www.securityfocus.com/bid/28177 - http://secunia.com/advisories/29262 - http://moinmo.in/SecurityFixes - https://exchange.xforce.ibmcloud.com/vulnerabilities/41038 - https://www
sories/29262 - http://moinmo.in/SecurityFixes - https://exchange.xforce.ibmcloud.com/vulnerabilities/41038 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00538.html - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00510.html - http://secunia.com/advisories/29444 - https://usn.ubuntu.com/716-1/ - http://hg.moinmo.in/moin/1.5/rev/4a7de0173734 - http://www.debian.org/security/2008/dsa-1514
CVE ID: CVE-2008-1100 State: PUBLISHED Published: 2008-04-14T16:00:00 Last Updated: 2024-08-07T08:08:57.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the cli_scanpe function in libclamav (libclamav/pe.c) for ClamAV 0.92 and 0.92.1 allows remote attackers to execute arbitrary code via a crafted Upack PE file. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2008:088 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00249.html - http://secunia.com/advisories/29000 - http://security.gentoo.org/glsa/glsa-200805-19.xml - http://lists.apple.com/archives/security-announce/