Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-1615 State: PUBLISHED Published: 2008-05-08T00:00:00 Last Updated: 2024-08-07T08:24:42.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel 2.6.18, and possibly other versions, when running on AMD64 architectures, allows local users to cause a denial of service (crash) via certain ptrace calls. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2008-0275.html - http://secunia.com/advisories/30962 - http://secunia.com/advisories/30294 - http://secunia.com/advisories/30368 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42278 - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg
://exchange.xforce.ibmcloud.com/vulnerabilities/42278 - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9563 - http://www.redhat.com/support/errata/RHSA-2008-0237.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:167 - http://secunia.com/advisories/30982 - http://www.debian.org/security/2008/dsa-1588 - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00000.html - http://www.securitytracker.com/id?1020047 - http://www.redhat.com/support/errata/RHSA-2008-0585.html - http:/
000.html - http://www.securitytracker.com/id?1020047 - http://www.redhat.com/support/errata/RHSA-2008-0585.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:174 - http://secunia.com/advisories/31107 - http://secunia.com/advisories/30252 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00357.html - http://secunia.com/advisories/30890 - http://secunia.com/advisories/31628 - http://www.ubuntu.com/usn/usn-625-1 - http://www.securityfocus.com/bid/29086 - https://bugzilla.redhat.com/show_bug.cgi?id=431430 - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html - http://secunia.com/advisories/30818 - http://secunia.com/advisories/30112 - ht
security-announce/2008-06/msg00006.html - http://secunia.com/advisories/30818 - http://secunia.com/advisories/30112 - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html
CVE ID: CVE-2008-1617 State: PUBLISHED Published: 2008-04-08T18:00:00 Last Updated: 2024-08-07T08:24:42.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to execute arbitrary code via JavaScript that sets the Server property to a string, then sets the string to null. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28628 - http://www.vupen.com/english/advisories/2008/1134/references - http://www.mwrinfosecurity.com/publications/mwri_interwoven-worksite-activex-control-remote-code-execution
/references - http://www.mwrinfosecurity.com/publications/mwri_interwoven-worksite-activex-control-remote-code-execution_2008-03-10.pdf - http://secunia.com/advisories/29733 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41699
CVE ID: CVE-2008-1618 State: PUBLISHED Published: 2008-04-07T18:00:00 Last Updated: 2024-08-07T08:24:42.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PPTP VPN service in Watchguard Firebox before 10, when performing the MS-CHAPv2 authentication handshake, generates different error codes depending on whether the username is valid or invalid, which allows remote attackers to enumerate valid usernames. Additional Analyst Notes: - CVE Program Container: References: - http://www.mwrinfosecurity.com/publications/mwri_watchguard-firebox-pptp-vpn-user-enumeration-advisory_2008-04-04.pdf - http://www.osvdb.org/44218 - http://www.vupen.com/english/advisories/2008/1152/references
ion-advisory_2008-04-04.pdf - http://www.osvdb.org/44218 - http://www.vupen.com/english/advisories/2008/1152/references - http://www.securityfocus.com/bid/28619 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41683 - http://secunia.com/advisories/29708 - http://www.securitytracker.com/id?1019796
CVE ID: CVE-2008-1619 State: PUBLISHED Published: 2008-04-02T16:00:00 Last Updated: 2024-08-07T08:31:59.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ssm_i emulation in Xen 5.1 on IA64 architectures allows attackers to cause a denial of service (dom0 panic) via certain traffic, as demonstrated using an FTP stress test tool. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=437770 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41633 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10226 - http://secunia.com/advisories/30116 - http://www.redhat.com/support/errata/RHS
ion/oval%3Aorg.mitre.oval%3Adef%3A10226 - http://secunia.com/advisories/30116 - http://www.redhat.com/support/errata/RHSA-2008-0233.html - http://www.securityfocus.com/bid/29085
CVE ID: CVE-2008-1620 State: PUBLISHED Published: 2008-04-02T17:00:00 Last Updated: 2024-08-07T08:32:00.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in 2X TFTP service (TFTPd.exe) 3.2.0.0 and earlier in 2X ThinClientServer 5.0_sp1-r3497 and earlier allows remote attackers to read or overwrite arbitrary files via a ... (dot dot dot) in the filename. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41528 - http://www.securityfocus.com/archive/1/490324/100/0/threaded - http://aluigi.org/testz/tftpx.zip - http://aluigi.altervista.org/adv/thindirtrav-adv.txt - http://www.vupen
0/threaded - http://aluigi.org/testz/tftpx.zip - http://aluigi.altervista.org/adv/thindirtrav-adv.txt - http://www.vupen.com/english/advisories/2008/1040/references - http://secunia.com/advisories/29590 - http://www.securityfocus.com/bid/28504
CVE ID: CVE-2008-1621 State: PUBLISHED Published: 2008-04-02T17:00:00 Last Updated: 2024-08-07T08:31:59.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in GeeCarts allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) show.php, (2) search.php, and (3) view.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28470 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41506 - http://www.securityfocus.com/bid/28470/exploit
CVE ID: CVE-2008-1622 State: PUBLISHED Published: 2008-04-02T17:00:00 Last Updated: 2024-08-07T08:31:59.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in GeeCarts allow remote attackers to execute arbitrary PHP code via a URL in the id parameter to (1) show.php, (2) search.php, and (3) view.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28470 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41507
CVE ID: CVE-2008-1623 State: PUBLISHED Published: 2008-04-02T17:00:00 Last Updated: 2024-08-07T08:31:59.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin_view_image.php in Smoothflash allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5322 - http://secunia.com/advisories/29571 - http://www.securityfocus.com/bid/28503 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41526
CVE ID: CVE-2008-1624 State: PUBLISHED Published: 2008-04-02T17:00:00 Last Updated: 2024-08-07T08:31:59.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in v2demo/page.php in Jshop Server 1.x through 2.x allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the xPage parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5325 - http://www.securityfocus.com/bid/28501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41524
CVE ID: CVE-2008-1625 State: PUBLISHED Published: 2008-04-02T17:00:00 Last Updated: 2024-08-07T08:32:00.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, which allows local users to gain privileges via certain IOCTL requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1034/references - http://www.trapkit.de/advisories/TKADV2008-002.txt - http://www.securityfocus.com/bid/28502 - http://secunia.com/advisories/29605 - http://www.securityfocus.com/archive/1/490321/100/0/threaded - https://exchange.xforc
p://secunia.com/advisories/29605 - http://www.securityfocus.com/archive/1/490321/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/41527 - http://www.securitytracker.com/id?1019732 - http://www.avast.com/eng/avast-4-home_pro-revision-history.html
CVE ID: CVE-2008-1626 State: PUBLISHED Published: 2008-04-02T17:00:00 Last Updated: 2024-08-07T08:32:01.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in eggBlog before 4.0.1 allows remote attackers to execute arbitrary SQL commands via an unspecified cookie. NOTE: this might overlap CVE-2008-0159. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29583 - http://eggblog.net/news.php?id=39 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41512 - http://www.securityfocus.com/bid/28497 - http://sourceforge.net/project/showfiles.php?group_id=155425&package_id=173141&release_id=587701
CVE ID: CVE-2008-1627 State: PUBLISHED Published: 2008-04-02T17:00:00 Last Updated: 2024-08-07T08:32:00.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: CDS Invenio 0.92.1 and earlier allows remote authenticated users to delete email notification alerts of arbitrary users via a modified internal UID. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41546 - http://www.securityfocus.com/bid/28514 - http://cdsware.cern.ch/lists/project-cdsware-announce/archive/msg00021.shtml - http://secunia.com/advisories/29521 - http://cdsware.cern.ch/invenio/news.html
CVE ID: CVE-2008-1628 State: PUBLISHED Published: 2008-04-02T17:00:00 Last Updated: 2024-08-07T08:31:59.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the audit_log_user_command function in lib/audit_logging.c in Linux Audit before 1.7 might allow remote attackers to execute arbitrary code via a long command argument. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html - http://secunia.com/advisories/29617 - http://www.vupen.com/english/advisories/2008/1052/references - http://people.redh
http://secunia.com/advisories/29617 - http://www.vupen.com/english/advisories/2008/1052/references - http://people.redhat.com/sgrubb/audit/ChangeLog - http://security.gentoo.org/glsa/glsa-200807-14.xml - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00200.html - http://www.securityfocus.com/bid/28524 - http://www.securitytracker.com/id?1019824 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41576 - https://www.redhat.com/archives/linux-audit/2008-March/msg00138.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:083 - http://secunia.com/advisories/31316 - http://secunia.com/advisories/29754 - http://secunia.com/advisories/29957
CVE ID: CVE-2008-1629 State: PUBLISHED Published: 2008-04-02T17:00:00 Last Updated: 2024-08-07T08:31:59.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PHPkrm before 1.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41548 - http://secunia.com/advisories/29579 - http://www.securityfocus.com/bid/28510 - http://freshmeat.net/projects/phpkrm/?branch_id=58803&release_id=274667
CVE ID: CVE-2008-1630 State: PUBLISHED Published: 2008-04-02T17:00:00 Last Updated: 2024-08-07T08:32:00.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in CuteFlow 1.5.0 and 2.10.0 allow remote attackers to inject arbitrary web script or HTML via the language parameter to (1) page/showcirculation.php; and (2) edittemplate_step2.php, (3) showfields.php, (4) showuser.php, (5) editmailinglist_step1.php, and (6) showtemplates.php in pages/. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3792 - http://www.securityfocus.com/bid/28500 - http://secunia.com/advisories/29612 -
/securityreason.com/securityalert/3792 - http://www.securityfocus.com/bid/28500 - http://secunia.com/advisories/29612 - http://www.securityfocus.com/archive/1/490305/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/41537
CVE ID: CVE-2008-1631 State: PUBLISHED Published: 2008-04-02T17:00:00 Last Updated: 2024-08-07T08:32:00.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in CuteFlow 1.5.0 and 2.10.0 allows remote attackers to execute arbitrary SQL commands via the UserId parameter, related to the login form field in index.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3792 - http://secunia.com/advisories/29612 - http://www.securityfocus.com/archive/1/490305/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/41544
CVE ID: CVE-2008-1632 State: PUBLISHED Published: 2008-04-02T17:00:00 Last Updated: 2024-08-07T08:31:59.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in CuteFlow 2.10.0 allow remote authenticated users to execute arbitrary SQL commands via the (1) listid parameter to pages/editmailinglist_step1.php, the (2) userid parameter to pages/edituser.php, the (3) fieldid parameter to pages/editfield.php, and the (4) templateid to pages/edittemplate_step1.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://s
obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29612 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41536
CVE ID: CVE-2008-1633 State: PUBLISHED Published: 2008-04-02T17:00:00 Last Updated: 2024-08-07T08:31:59.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Mondo Rescue before 2.2.5 has unknown impact and attack vectors, related to the use of (1) /tmp and (2) MINDI_CACHE. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29545 - http://www.securityfocus.com/bid/28522 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41530 - http://www.mondorescue.org/news.shtml
CVE ID: CVE-2008-1634 State: PUBLISHED Published: 2008-04-02T17:00:00 Last Updated: 2024-08-07T08:32:00.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in JV2 Folder Gallery 3.1 allows remote attackers to inject arbitrary web script or HTML via the image parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41569 - http://www.securityfocus.com/bid/28508 - http://secunia.com/advisories/29599
CVE ID: CVE-2008-1635 State: PUBLISHED Published: 2008-04-02T17:00:00 Last Updated: 2024-08-07T08:32:01.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in view_private.php in Keep It Simple Guest Book (KISGB) 5.0.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the tmp_theme parameter. NOTE: 5.1.1 is also reportedly affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28513 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41525 - https://www.exploit-db.com/exploits/5324
CVE ID: CVE-2008-1636 State: PUBLISHED Published: 2008-04-02T17:00:00 Last Updated: 2024-08-07T08:32:00.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in JV2 Quick Gallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the f parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29598 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41568 - http://www.securityfocus.com/bid/28511
CVE ID: CVE-2008-1637 State: PUBLISHED Published: 2008-04-02T17:00:00 Last Updated: 2024-08-07T08:32:01.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: PowerDNS Recursor before 3.1.5 uses insufficient randomness to calculate (1) TRXID values and (2) UDP source port numbers, which makes it easier for remote attackers to poison a DNS cache, related to (a) algorithmic deficiencies in rand and random functions in external libraries, (b) use of a 32-bit seed value, and (c) choice of the time of day as the sole seeding information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29764 - http://secunia.com/advisories/29737 - http://www.
Program Container: References: - http://secunia.com/advisories/29764 - http://secunia.com/advisories/29737 - http://www.debian.org/security/2008/dsa-1544 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00198.html - http://www.securityfocus.com/bid/28517 - http://doc.powerdns.com/changelog.html - http://www.trusteer.com/docs/powerdnsrecursor.html - http://secunia.com/advisories/29584 - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html - http://www.vupen.com/english/advisories/2008/1046/references - http://www.trusteer.com/docs/PowerDNS_recursor_DNS_Cache_Poisoning.pdf - http://secunia.com/advisories/29830 - http://doc.powerdns.com/powerdns-advi
/PowerDNS_recursor_DNS_Cache_Poisoning.pdf - http://secunia.com/advisories/29830 - http://doc.powerdns.com/powerdns-advisory-2008-01.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41534 - http://security.gentoo.org/glsa/glsa-200804-22.xml - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00224.html - http://www.securityfocus.com/archive/1/490330/100/0/threaded - http://secunia.com/advisories/30581
CVE ID: CVE-2008-1638 State: PUBLISHED Published: 2008-04-02T17:00:00 Last Updated: 2024-08-07T08:32:00.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nik Sharpener Pro, possibly 2.0, uses world-writable permissions for plug-in files, which allows local users to gain privileges by replacing a plug-in with a Trojan horse. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41535 - http://www.kb.cert.org/vuls/id/124289 - http://www.securityfocus.com/bid/27707
CVE ID: CVE-2008-1639 State: PUBLISHED Published: 2008-04-02T17:00:00 Last Updated: 2024-08-07T08:32:00.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Neat weblog 0.2 allows remote attackers to execute arbitrary SQL commands via the articleId parameter in a show action, probably related to the showArticle function in lib/lib_article.include.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41555 - http://www.vupen.com/english/advisories/2008/1053/references - http://www.securityfocus.com/bid/28534 - https://www.exploit-db.com/exploits/5331
CVE ID: CVE-2008-1640 State: PUBLISHED Published: 2008-04-02T17:00:00 Last Updated: 2024-08-07T08:32:00.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in jgs_treffen.php in the JGS-XA JGS-Treffen 2.0.2 and earlier addon for Woltlab Burning Board (wBB) allows remote attackers to execute arbitrary SQL commands via the view_id parameter in an ansicht action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28530 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41556 - http://www.vupen.com/english/advisories/2008/1054/references - https://www.exploit-db.com/exploits/5329
CVE ID: CVE-2008-1641 State: PUBLISHED Published: 2008-04-02T17:00:00 Last Updated: 2024-08-07T08:32:00.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in EfesTECH Video 5.0 allows remote attackers to execute arbitrary SQL commands via the catID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28532 - http://www.securityfocus.com/archive/1/490309/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/41550 - http://securityreason.com/securityalert/3791 - http://secunia.com/advisories/29611
CVE ID: CVE-2008-1642 State: PUBLISHED Published: 2008-04-02T17:00:00 Last Updated: 2024-08-07T08:32:00.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Sava's GuestBook 2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the action parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28536 - http://secunia.com/advisories/29592 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41596
CVE ID: CVE-2008-1643 State: PUBLISHED Published: 2008-04-02T17:00:00 Last Updated: 2024-08-07T08:32:01.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management Suite (LDMS) 8.7 SP5 and earlier and 8.8 allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1051/references - http://secunia.com/advisories/29324 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41562 - http://www.securityfocus.com/bid/28535 - http://community.landesk.com/support/docs/DOC-2659 - ht
vulnerabilities/41562 - http://www.securityfocus.com/bid/28535 - http://community.landesk.com/support/docs/DOC-2659 - http://www.securitytracker.com/id?1019748
CVE ID: CVE-2008-1644 State: PUBLISHED Published: 2008-04-02T17:00:00 Last Updated: 2024-08-07T08:32:01.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewlinks.php in Sava's Link Manager 2.0 allows remote attackers to execute arbitrary SQL commands via the category parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41594 - http://secunia.com/advisories/29589 - http://www.securityfocus.com/bid/28538