Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-6676 State: PUBLISHED Published: 2009-04-08T10:00:00 Last Updated: 2024-08-07T11:41:59.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: QuickerSite 1.8.5 allows remote attackers to obtain sensitive information via a request to showThumb.aspx without any parameters, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.bugreport.ir/39/exploit.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/42861 - http://www.bugreport.ir/index_39.htm - http://secunia.com/advisories/30501 - http://www.securityfocus.com/bid/29524 - http://osvdb.org/46222
CVE ID: CVE-2008-6677 State: PUBLISHED Published: 2009-04-08T10:00:00 Last Updated: 2024-08-07T11:41:58.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in fckeditor251/editor/filemanager/connectors/asp/upload.asp in QuickerSite 1.8.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file. Additional Analyst Notes: - CVE Program Container: References: - http://www.bugreport.ir/39/exploit.htm - http://www.bugreport.ir/index_39.htm - http://secunia.com/advisories/30501 - http://www.securityfocus.com/bid/29524
CVE ID: CVE-2008-6678 State: PUBLISHED Published: 2009-04-08T10:00:00 Last Updated: 2024-08-07T11:41:59.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in asp/includes/contact.asp in QuickerSite 1.8.5 allows remote attackers to execute arbitrary SQL commands via the sNickName parameter in a profile action to default.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.bugreport.ir/39/exploit.htm - http://osvdb.org/46228 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42866 - http://www.bugreport.ir/index_39.htm - http://secunia.com/advisories/30501 - http://www.securityfocus.com/bid/29524
CVE ID: CVE-2008-6679 State: PUBLISHED Published: 2009-04-08T16:00:00 Last Updated: 2024-08-07T11:41:59.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2009-0421.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10019 - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00460.html -
oval%3Aorg.mitre.oval%3Adef%3A10019 - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00460.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-262288-1 - http://www.securityfocus.com/archive/1/502757/100/0/threaded - http://secunia.com/advisories/34729 - http://bugs.ghostscript.com/show_bug.cgi?id=690211 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:095 - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00461.html - http://secunia.com/advisories/34732 - http://secunia.com/advisories/35569 - http://www.vupen.com/english/advisories/2009/1708 - htt
nia.com/advisories/34732 - http://secunia.com/advisories/35569 - http://www.vupen.com/english/advisories/2009/1708 - http://secunia.com/advisories/35559 - https://bugzilla.redhat.com/show_bug.cgi?id=493445 - http://secunia.com/advisories/35416 - http://wiki.rpath.com/Advisories:rPSA-2009-0060 - https://usn.ubuntu.com/757-1/ - http://www.openwall.com/lists/oss-security/2009/04/01/10 - http://secunia.com/advisories/34667
CVE ID: CVE-2008-6680 State: PUBLISHED Published: 2009-04-08T16:00:00 Last Updated: 2024-08-07T11:41:59.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: libclamav/pe.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (crash) via a crafted EXE file that triggers a divide-by-zero error. Additional Analyst Notes: - CVE Program Container: References: - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1335 - http://www.securityfocus.com/bid/34357 - http://secunia.com/advisories/34716 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:097 - http://www.vupen.com/english/advisories/2009/0934 - http://lists.apple.com/archives/security-announce/2009/
A-2009:097 - http://www.vupen.com/english/advisories/2009/0934 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html - http://www.debian.org/security/2009/dsa-1771 - http://www.openwall.com/lists/oss-security/2009/04/07/6 - http://support.apple.com/kb/HT3865 - http://secunia.com/advisories/36701 - http://www.ubuntu.com/usn/usn-754-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49845
CVE ID: CVE-2008-6681 State: PUBLISHED Published: 2009-04-09T15:00:00 Last Updated: 2024-08-07T11:42:00.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in dijit.Editor in Dojo before 1.1 allows remote attackers to inject arbitrary web script or HTML via XML entities in a TEXTAREA element. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49883 - http://www.securityfocus.com/bid/34661 - http://www.dojotoolkit.org/book/dojo-1-1-release-notes - http://trac.dojotoolkit.org/ticket/2140
CVE ID: CVE-2008-6682 State: PUBLISHED Published: 2009-04-09T15:00:00 Last Updated: 2024-08-07T11:41:59.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.x before 2.0.11.1 and 2.1.x before 2.1.1 allow remote attackers to inject arbitrary web script or HTML via vectors associated with improper handling of (1) " (double quote) characters in the href attribute of an s:a tag and (2) parameters in the action attribute of an s:url tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34686 - http://www.nabble.com/Feedback%3A-WW-2414%2C-XSS-attack-is-possible-if-us
es: - http://www.securityfocus.com/bid/34686 - http://www.nabble.com/Feedback%3A-WW-2414%2C-XSS-attack-is-possible-if-using-%3Cs%3Aurl-...%3E-and-%3Cs%3Aa-...%3E-td14771449.html - https://issues.apache.org/struts/browse/WW-2427 - http://www.nabble.com/Feedback%3A-WW-2414%2C-XSS-attack-is-possible-if-using-%3Cs%3Aurl-...%3E-and-%3Cs%3Aa-...%3E-td14771449i20.html - https://issues.apache.org/struts/browse/WW-2414
CVE ID: CVE-2008-6683 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:41:59.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in listtest.php in Apartment Search Script allows remote attackers to inject arbitrary web script or HTML via the r parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46282 - https://www.exploit-db.com/exploits/6956 - http://www.securityfocus.com/bid/32065
CVE ID: CVE-2008-6684 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:41:59.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in editimage.php in Apartment Search Script allows remote attackers to execute arbitrary code by uploading a file with an executable extension and a GIF header, then accessing this file via a direct request to a renamed file in Member_Admin/logo/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46283 - https://www.exploit-db.com/exploits/6956 - http://www.securityfocus.com/bid/32065
CVE ID: CVE-2008-6685 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:41:59.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Frontend Filemanager (air_filemanager) 0.6.1 and earlier extension for TYPO3 allows remote attackers to execute arbitrary commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29837 - http://osvdb.org/46382 - http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/
CVE ID: CVE-2008-6686 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:41:59.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in CoolURI (cooluri) 1.0.11 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/46383 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43197 - http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/ - http://www.securityfocus.com/bid/29821
CVE ID: CVE-2008-6687 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:41:59.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in DCD GoogleMap (dcdgooglemap) 1.1.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29815 - http://typo3.org/extensions/repository/view/dcdgooglemap/1.1.1/ - http://osvdb.org/46378 - http://secunia.com/advisories/30773 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43199 - http://osvdb.org/46384 - http://typo3.org
dvisories/30773 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43199 - http://osvdb.org/46384 - http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/
CVE ID: CVE-2008-6688 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:41:58.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in JobControl (dmmjobcontrol) 1.15.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/46385 - http://www.securityfocus.com/bid/29828 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43202 - http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/
CVE ID: CVE-2008-6689 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:41:59.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in JobControl (dmmjobcontrol) 1.15.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/46386 - http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/43204
CVE ID: CVE-2008-6690 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:41:59.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in nepa-design.de Spam Protection (nd_antispam) extension 1.0.3 for TYPO3 allows remote attackers to modify configuration via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/46387 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43205 - http://www.securityfocus.com/bid/29833 - http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/
CVE ID: CVE-2008-6691 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:41:59.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Diocese of Portsmouth Calendar Today (pd_calendar_today) extension 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30737 - http://www.securityfocus.com/bid/29819 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43206 - http://osvdb.org/46388 - http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/
CVE ID: CVE-2008-6692 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:42:00.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Diocese of Portsmouth Training Courses (pd_trainingcourses) extension 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29822 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43207 - http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/ - http://osvdb.org/46389
CVE ID: CVE-2008-6693 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:41:59.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Download system (sb_downloader) extension 0.1.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/46390 - http://secunia.com/advisories/30737 - http://www.securityfocus.com/bid/29825 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43208 - http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/
CVE ID: CVE-2008-6694 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:41:59.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Random Prayer (ste_prayer) 0.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43209 - http://www.securityfocus.com/bid/29827 - http://osvdb.org/46391 - http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/
CVE ID: CVE-2008-6695 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:42:00.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in TIMTAB social bookmark icons (timtab_sociable) 2.0.4 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43210 - http://secunia.com/advisories/30737 - http://www.securityfocus.com/bid/29823 - http://typo3.org/extensions/repository/view/timtab_sociable/2.0.5/ - http://osvdb.org/46392 - http://typo3.org/teams/security/securi
.org/extensions/repository/view/timtab_sociable/2.0.5/ - http://osvdb.org/46392 - http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/
CVE ID: CVE-2008-6696 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:41:59.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Fussballtippspiel (toto) 0.1.1 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/toto/0.1.2/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/43212 - http://www.securityfocus.com/bid/29824 - http://osvdb.org/46394 - http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/
CVE ID: CVE-2008-6697 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:42:00.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in TARGET-E WorldCup Bets (worldcup) 2.0.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/46396 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43213 - http://www.securityfocus.com/bid/29826 - http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/
CVE ID: CVE-2008-6698 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:41:59.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in TARGET-E WorldCup Bets (worldcup) 2.0.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/46395 - http://www.securityfocus.com/bid/29826 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43214 - http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/
CVE ID: CVE-2008-6699 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:41:59.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Resource Library (tjs_reslib) 0.1.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/46393 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43211 - http://www.securityfocus.com/bid/29832 - http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/
CVE ID: CVE-2008-6700 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:41:59.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Butterfly Organizer 2.0.0 allow remote attackers to inject arbitrary web script or HTML via the (1) mytable parameter to view.php, (2) mytable parameter to viewdb2.php, (3) tablehere parameter to category-rename.php, and (4) letter parameter to module-contacts.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5797 - http://www.securityfocus.com/bid/29700 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43066
CVE ID: CVE-2008-6701 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:42:00.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetScout (formerly Network General) Visualizer V2100 and InfiniStream i1730 do not restrict access to ResourceManager/en_US/domains/add_domain.jsp, which allows remote attackers to gain administrator privileges via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/493171/100/0/threaded - http://secunia.com/advisories/30514 - http://osvdb.org/46195 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42938
CVE ID: CVE-2008-6702 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:41:59.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service (crash) via a long nickname, which triggers an exception. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/stalkerboom-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/43132 - http://www.securityfocus.com/bid/29723 - http://secunia.com/advisories/30707 - http://osvdb.org/46432 - http://www.securityfocus.com/archive/1/493366/100/0/threaded - http://www.securit
ories/30707 - http://osvdb.org/46432 - http://www.securityfocus.com/archive/1/493366/100/0/threaded - http://www.securityfocus.com/bid/29997
CVE ID: CVE-2008-6703 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:41:59.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the IPureServer::_Recieve function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to execute arbitrary code via a compressed 0x39 packet, which is decompressed by the NET_Compressor::Decompress function. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/stalker39x-adv.txt - http://www.securityfocus.com/archive/1/493765 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43454 - http://www.securityfocus.com/bid/2
s.com/archive/1/493765 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43454 - http://www.securityfocus.com/bid/29997 - http://osvdb.org/46626 - http://secunia.com/advisories/30891
CVE ID: CVE-2008-6704 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:42:00.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the NET_Compressor::Decompress function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service (server crash) via a crafted packet with a 0xc1 value that contains no compressed data, which triggers a copy of a large amount of memory. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/46627 - http://aluigi.altervista.org/adv/stalker39x-adv.txt - http://www.securityfocus.com/archive/1/493765 - https://exchange.xforce.ibmclo
i.altervista.org/adv/stalker39x-adv.txt - http://www.securityfocus.com/archive/1/493765 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43456 - http://www.securityfocus.com/bid/29997 - http://secunia.com/advisories/30891
CVE ID: CVE-2008-6705 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:42:00.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MultipacketReciever::RecievePacket function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service (server termination) via a crafted packet without an expected 0xe0 or 0xe1 value, which triggers the INT3 instruction. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/stalker39x-adv.txt - http://osvdb.org/46628 - http://www.securityfocus.com/archive/1/493765 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43458 - h
g/46628 - http://www.securityfocus.com/archive/1/493765 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43458 - http://www.securityfocus.com/bid/29997 - http://secunia.com/advisories/30891
CVE ID: CVE-2008-6706 State: PUBLISHED Published: 2009-04-10T15:00:00 Last Updated: 2024-08-07T11:41:59.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Web management interface in Avaya SIP Enablement Services (SES) 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allow remote attackers to obtain (1) application server configuration, (2) database server configuration including encrypted passwords, (3) a system utility that decrypts "subscriber table passwords," (4) a system utility that decrypts database passwords, and (5) a system utility that encrypts "subscriber table passwords." Additional Analyst Notes: - CVE Progra
e passwords, and (5) a system utility that encrypts "subscriber table passwords." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1943/references - http://secunia.com/advisories/30751 - http://support.avaya.com/elmodocs2/security/ASA-2008-268.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/43382 - http://www.voipshield.com/research-details.php?id=81 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43388 - http://www.voipshield.com/research-details.php?id=83 - http://www.voipshield.com/research-details.php?id=82 - http://osvdb.org/46602 - http://www.voipshield.com/research-details.php?id=85 - https://exchange.xforc
tails.php?id=82 - http://osvdb.org/46602 - http://www.voipshield.com/research-details.php?id=85 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43387 - http://www.voipshield.com/research-details.php?id=84 - http://www.securityfocus.com/bid/29939 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43383