Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
cus.com/bid/32733 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:004 - http://www.redhat.com/support/errata/RHSA-2011-1073.html - http://lists.debian.org/debian-devel/2008/08/msg00347.html - http://security.gentoo.org/glsa/glsa-201210-05.xml - http://uvw.ru/report.sid.txt - http://www.redhat.com/support/errata/RHSA-2011-0261.html
CVE ID: CVE-2008-5375 State: PUBLISHED Published: 2008-12-08T23:00:00 Last Updated: 2024-08-07T10:49:12.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: cmus-status-display in cmus 2.2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/cmus-status temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32741 - http://lists.debian.org/debian-devel/2008/08/msg00347.html - http://secunia.com/advisories/33113 - http://uvw.ru/report.sid.txt
CVE ID: CVE-2008-5376 State: PUBLISHED Published: 2008-12-08T23:00:00Z Last Updated: 2024-09-17T00:42:28.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: editcomment in crip 3.7 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/*.tag.tmp temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.debian.org/debian-devel/2008/08/msg00347.html - http://uvw.ru/report.sid.txt
CVE ID: CVE-2008-5377 State: PUBLISHED Published: 2008-12-08T23:00:00 Last Updated: 2024-08-07T10:49:12.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: pstopdf in CUPS 1.3.8 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pstopdf.log temporary file, a different vulnerability than CVE-2001-1333. Additional Analyst Notes: - CVE Program Container: References: - http://lists.debian.org/debian-devel/2008/08/msg00347.html - http://uvw.ru/report.sid.txt - https://www.exploit-db.com/exploits/7550
CVE ID: CVE-2008-5378 State: PUBLISHED Published: 2008-12-08T23:00:00 Last Updated: 2024-08-07T10:49:12.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: arb-kill in arb 0.0.20071207.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/arb_pids_*_* temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30895 - http://lists.debian.org/debian-devel/2008/08/msg00285.html
CVE ID: CVE-2008-5379 State: PUBLISHED Published: 2008-12-08T23:00:00Z Last Updated: 2024-09-16T22:10:24.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: netdisco-mibs-installer 1.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/netdisco-mibs-0.6.tar.gz temporary file, related to the (1) netdisco-mibs-install and (2) netdisco-mibs-download scripts. Additional Analyst Notes: - CVE Program Container: References: - http://lists.debian.org/debian-devel/2008/08/msg00285.html
CVE ID: CVE-2008-5380 State: PUBLISHED Published: 2008-12-08T23:00:00 Last Updated: 2024-08-07T10:49:12.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: gpsdrive (aka gpsdrive-scripts) 2.09 allows local users to overwrite arbitrary files via a symlink attack on an (a) /tmp/geo#####, a (b) /tmp/geocaching.loc, a (c) /tmp/geo#####.*, or a (d) /tmp/geo.* temporary file, related to the (1) geo-code and (2) geo-nearest scripts, different vectors than CVE-2008-4959. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00187.html - http://secunia.com/advisories/31694 - http://secunia.com/advisories/3
ora-package-announce/2009-February/msg00187.html - http://secunia.com/advisories/31694 - http://secunia.com/advisories/33825 - http://lists.debian.org/debian-devel/2008/08/msg00285.html
CVE ID: CVE-2008-5381 State: PUBLISHED Published: 2008-12-09T00:00:00 Last Updated: 2024-08-07T10:49:12.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the URL processing in ffdshow (aka ffdshow-tryout) before SVN revision 2347 allows remote attackers to execute arbitrary code via a long URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3249 - http://security.bkis.vn/?p=277 - http://secunia.com/advisories/32846 - http://securityreason.com/securityalert/4697 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46810 - http://secunia.com/advisories/32881 - http://www.securityfocus.com/bid/3243
.xforce.ibmcloud.com/vulnerabilities/46810 - http://secunia.com/advisories/32881 - http://www.securityfocus.com/bid/32438 - http://www.securityfocus.com/archive/1/498585/100/0/threaded
CVE ID: CVE-2008-5382 State: PUBLISHED Published: 2008-12-09T00:00:00 Last Updated: 2024-08-07T10:49:12.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in I-O DATA DEVICE HDL-F160, HDL-F250, HDL-F300, and HDL-F320 firmware before 1.02 allows remote attackers to (1) change a configuration or (2) delete files as an authenticated user via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN70599814/index.html - http://www.iodata.jp/news/2008/important/hdl-f.htm - htt
ner: References: - http://jvn.jp/en/jp/JVN70599814/index.html - http://www.iodata.jp/news/2008/important/hdl-f.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/46880 - http://secunia.com/advisories/32836 - http://osvdb.org/50183
CVE ID: CVE-2008-5383 State: PUBLISHED Published: 2008-12-09T00:00:00 Last Updated: 2024-08-07T10:49:12.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in National Instruments Electronics Workbench allows user-assisted attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted .ewb file. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4698 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46996 - http://www.securityfocus.com/bid/32542 - https://www.exploit-db.com/exploits/7307
CVE ID: CVE-2008-5384 State: PUBLISHED Published: 2008-12-09T00:00:00 Last Updated: 2024-08-07T10:49:12.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: crontab in bos.rte.cron in IBM AIX 6.1.0 through 6.1.2 allows local users with aix.system.config.cron authorization to gain privileges by launching an editor. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32916 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ30248 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ34783 - http://www.securitytracker.com/id?1021291 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ34478 - http://aix.software.ibm.com/aix/efixes/securit
/id?1021291 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ34478 - http://aix.software.ibm.com/aix/efixes/security/aix61_advisory.asc - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5612 - http://www.securityfocus.com/bid/32493 - http://osvdb.org/50218
CVE ID: CVE-2008-5385 State: PUBLISHED Published: 2008-12-09T00:00:00 Last Updated: 2024-08-07T10:49:12.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: enq in bos.rte.printers in IBM AIX 6.1.0 through 6.1.2, when a print queue is defined in /etc/qconfig, allows local users to delete arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/50217 - http://secunia.com/advisories/32916 - http://aix.software.ibm.com/aix/efixes/security/aix61_advisory.asc - http://www.securityfocus.com/bid/32493 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ34481 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ33088 - h
ttp://www-01.ibm.com/support/docview.wss?uid=isg1IZ34481 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ33088 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ34785 - http://www.securitytracker.com/id?1021290
CVE ID: CVE-2008-5386 State: PUBLISHED Published: 2008-12-09T00:00:00 Last Updated: 2024-08-07T10:49:12.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ndp in IBM AIX 6.1.0 through 6.1.2, when the netcd daemon is running, allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32916 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ35170 - http://osvdb.org/50215 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ35209 - http://aix.software.ibm.com/aix/efixes/security/aix61_advisory.asc - http://www.securityfocus.com/bid/32493 - http://www.securitytra
oftware.ibm.com/aix/efixes/security/aix61_advisory.asc - http://www.securityfocus.com/bid/32493 - http://www.securitytracker.com/id?1021288 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ35181
CVE ID: CVE-2008-5387 State: PUBLISHED Published: 2008-12-09T00:00:00 Last Updated: 2024-08-07T10:49:12.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in autoconf6 in IBM AIX 6.1.0 through 6.1.2, when Role-Based Access Control is enabled, allows local users with aix.network.config.tcpip authorization to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ34393 - http://secunia.com/advisories/32916 - http://aix.software.ibm.com/aix/efixes/security/aix61_advisory.asc - http://osvdb.org/50216 - http://www.securityfocus.com/bid/32493 - http://www-01.ibm.com/s
/security/aix61_advisory.asc - http://osvdb.org/50216 - http://www.securityfocus.com/bid/32493 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ30231 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ34753 - http://www.securitytracker.com/id?1021289 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6303
CVE ID: CVE-2008-5388 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-5389 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-5390 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-5391 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-5392 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-5393 State: PUBLISHED Published: 2008-12-09T00:00:00 Last Updated: 2024-08-07T10:49:12.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: UPR-Kernel in Ubuntu Privacy Remix (UPR) before 8.04_r1 includes kernel support for mounting RAID arrays, which might allow remote attackers to bypass intended isolation mechanisms by (1) reading from or (2) writing to these arrays. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32629 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47082 - https://bugs.launchpad.net/bugs/301285 - http://securityreason.com/securityalert/4696 - http://www.securityfocus.com/archive/1/49890
.launchpad.net/bugs/301285 - http://securityreason.com/securityalert/4696 - http://www.securityfocus.com/archive/1/498905/100/0/threaded
CVE ID: CVE-2008-5394 State: PUBLISHED Published: 2008-12-09T00:00:00 Last Updated: 2024-08-07T10:49:12.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: /bin/login in shadow 4.0.18.1 in Debian GNU/Linux, and probably other Linux distributions, allows local users in the utmp group to overwrite arbitrary files via a symlink attack on a temporary file referenced in a line (aka ut_line) field in a utmp entry. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/52200 - http://bugs.debian.org/505271 - http://www.securityfocus.com/bid/32552 - http://bugs.debian.org/332198 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47037 - http://security.gent
2552 - http://bugs.debian.org/332198 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47037 - http://security.gentoo.org/glsa/glsa-200903-24.xml - http://www.mandriva.com/security/advisories?name=MDVSA-2009:062 - http://www.securityfocus.com/archive/1/498769/100/0/threaded - https://www.exploit-db.com/exploits/7313 - http://securityreason.com/securityalert/4695 - http://bugs.debian.org/505071 - http://www.ubuntu.com/usn/usn-695-1
CVE ID: CVE-2008-5395 State: PUBLISHED Published: 2008-12-09T00:00:00 Last Updated: 2024-08-07T10:49:12.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parisc_show_stack function in arch/parisc/kernel/traps.c in the Linux kernel before 2.6.28-rc7 on PA-RISC allows local users to cause a denial of service (system crash) via vectors associated with an attempt to unwind a stack that contains userspace addresses. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33756 - http://www.debian.org/security/2009/dsa-1794 - http://secunia.com/advisories/35011 - http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.28-rc7 - http://m
- http://secunia.com/advisories/35011 - http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.28-rc7 - http://marc.info/?l=linux-parisc&m=121736357203624&w=2 - http://secunia.com/advisories/34981 - http://www.securityfocus.com/bid/32636 - http://www.debian.org/security/2009/dsa-1787 - http://www.ubuntu.com/usn/usn-715-1 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=7a3f5134a8f5bd7fa38b5645eef05e8a4eb62951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47075 - http://secunia.com/advisories/32933
CVE ID: CVE-2008-5396 State: PUBLISHED Published: 2008-12-09T00:00:00 Last Updated: 2024-08-07T10:49:12.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the (1) torisa.c and (2) dahdi/tor2.c drivers in Zaptel (aka DAHDI) 1.4.11 and earlier allows local users in the dialout group to overwrite an integer value in kernel memory by writing to /dev/zap/ctl, related to missing validation of the sync field associated with the ZT_SPANCONFIG ioctl. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/12/03/10 - http://bugs.digium.com/view.php?id=13954 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=5074
ecurity/2008/12/03/10 - http://bugs.digium.com/view.php?id=13954 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507459 - http://secunia.com/advisories/32947 - http://secunia.com/advisories/32960
CVE ID: CVE-2008-5397 State: PUBLISHED Published: 2008-12-09T00:00:00 Last Updated: 2024-08-07T10:49:12.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.2.0.32 does not properly process the (1) User and (2) Group configuration options, which might allow local users to gain privileges by leveraging unintended supplementary group memberships of the Tor process. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34583 - http://www.securityfocus.com/bid/32648 - http://secunia.com/advisories/33025 - http://www.vupen.com/english/advisories/2008/3366 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47101 - http://blog.tor
ww.vupen.com/english/advisories/2008/3366 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47101 - http://blog.torproject.org/blog/tor-0.2.0.32-released - http://security.gentoo.org/glsa/glsa-200904-11.xml
CVE ID: CVE-2008-5398 State: PUBLISHED Published: 2008-12-09T00:00:00 Last Updated: 2024-08-07T10:49:12.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.2.0.32 does not properly process the ClientDNSRejectInternalAddresses configuration option in situations where an exit relay issues a policy-based refusal of a stream, which allows remote exit relays to have an unknown impact by mapping an internal IP address to the destination hostname of a refused stream. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47102 - http://secunia.com/advisories/34583 - http://www.securityfocus.com/bid/32648 - http:
bmcloud.com/vulnerabilities/47102 - http://secunia.com/advisories/34583 - http://www.securityfocus.com/bid/32648 - http://secunia.com/advisories/33025 - http://www.vupen.com/english/advisories/2008/3366 - http://blog.torproject.org/blog/tor-0.2.0.32-released - http://security.gentoo.org/glsa/glsa-200904-11.xml
CVE ID: CVE-2008-5399 State: PUBLISHED Published: 2008-12-09T11:00:00 Last Updated: 2024-08-07T10:49:12.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the listonlineusers (aka "Who's online") component in mvnForum before 1.2.1 GA allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.mvnforum.com/mvnforum/viewthread_thread%2C4361 - http://securityreason.com/securityalert/4699 - http://secunia.com/advisories/32931 - http://www.securityfocus.com/bid/32605 - http://osvdb.org/50403 - http://security.bkis.vn/?p=286 - http://ww
ies/32931 - http://www.securityfocus.com/bid/32605 - http://osvdb.org/50403 - http://security.bkis.vn/?p=286 - http://www.securityfocus.com/archive/1/498872/100/0/threaded
CVE ID: CVE-2008-5400 State: PUBLISHED Published: 2008-12-09T11:00:00 Last Updated: 2024-08-07T10:49:12.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in mvnForum before 1.2.1 GA allow remote attackers to (1) create forums, (2) change account privileges, (3) enable accounts, or (4) disable accounts as a product administrator via unspecified vectors, possibly related to HTTP Referer headers. Additional Analyst Notes: - CVE Program Container: References: - http://www.mvnforum.com/mvnforum/viewthread_thread%2C4361 - http://securityreason.com/securityalert/4699 - http://secunia.com/advisories/32931 - https://exchange.xfo
hread%2C4361 - http://securityreason.com/securityalert/4699 - http://secunia.com/advisories/32931 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47027 - http://security.bkis.vn/?p=286 - http://osvdb.org/50404 - http://www.securityfocus.com/archive/1/498872/100/0/threaded - http://archives.neohapsis.com/archives/fulldisclosure/2008-12/0061.html
CVE ID: CVE-2008-5401 State: PUBLISHED Published: 2008-12-09T11:00:00 Last Updated: 2024-08-07T10:49:12.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the image tooltip implementation in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a long image filename, related to "AIM IMG Tag Parsing." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021335 - http://www.securityfocus.com/bid/32645 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47093 - http://osvdb.org/50472 - http://www.vupen.com/english/advisories/2008/3348 - http://www.securityfocus.com/archive/1/49
- http://osvdb.org/50472 - http://www.vupen.com/english/advisories/2008/3348 - http://www.securityfocus.com/archive/1/498932/100/0/threaded - http://securityreason.com/securityalert/4700 - http://secunia.com/advisories/33001 - http://www.zerodayinitiative.com/advisories/ZDI-08-077 - http://blog.ceruleanstudios.com/?p=404
CVE ID: CVE-2008-5402 State: PUBLISHED Published: 2008-12-09T11:00:00 Last Updated: 2024-08-07T10:49:12.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a crafted XML expression, related to the "IMG SRC ID." Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4701 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47098 - http://www.securitytracker.com/id?1021334 - http://osvdb.org/50473 - http://www.securityfocus.com/bid/32645 - http://www.vupen.com/english/advisories/2008/3348 - http://www.zerod
rg/50473 - http://www.securityfocus.com/bid/32645 - http://www.vupen.com/english/advisories/2008/3348 - http://www.zerodayinitiative.com/advisories/ZDI-08-078 - http://www.securityfocus.com/archive/1/498933/100/0/threaded - http://secunia.com/advisories/33001 - http://blog.ceruleanstudios.com/?p=404
CVE ID: CVE-2008-5403 State: PUBLISHED Published: 2008-12-09T11:00:00 Last Updated: 2024-08-07T10:49:12.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a malformed XML tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021336 - http://www.zerodayinitiative.com/advisories/ZDI-08-079 - http://www.securityfocus.com/bid/32645 - http://www.securityfocus.com/archive/1/498936/100/0/threaded - http://www.vupen.com/english/advisories/2008/3348 - http://osvdb.org/50474 - https://exchange.xf
498936/100/0/threaded - http://www.vupen.com/english/advisories/2008/3348 - http://osvdb.org/50474 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47100 - http://secunia.com/advisories/33001 - http://securityreason.com/securityalert/4702 - http://blog.ceruleanstudios.com/?p=404
CVE ID: CVE-2008-5404 State: PUBLISHED Published: 2008-12-09T11:00:00 Last Updated: 2024-08-07T10:49:12.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure method vulnerability in the FlexCell.Grid ActiveX control in FlexCell.ocx 5.7.0.1 in FlexCell Grid ActiveX Component allows remote attackers to create and overwrite arbitrary files via the HttpDownloadFile method. NOTE: this could be leveraged for code execution by creating executable files in Startup folders or by accessing files using hcp:// URLs. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: Refer
; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32829 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46809 - http://www.securityfocus.com/bid/32443
CVE ID: CVE-2008-5405 State: PUBLISHED Published: 2008-12-09T11:00:00 Last Updated: 2024-08-07T10:49:12.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the RDP protocol password decoder in Cain & Abel 4.9.23 and 4.9.24, and possibly earlier, allows remote attackers to execute arbitrary code via an RDP file containing a long string. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7309 - http://secunia.com/advisories/32794 - http://www.securityfocus.com/bid/32543 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46940 - http://osvdb.org/50342 - http://www.vupen.com/english/advisories/2008/3
ange.xforce.ibmcloud.com/vulnerabilities/46940 - http://osvdb.org/50342 - http://www.vupen.com/english/advisories/2008/3286 - http://oxid.netsons.org/phpBB2/viewtopic.php?t=2750 - http://securityreason.com/securityalert/4703 - https://www.exploit-db.com/exploits/7297
CVE ID: CVE-2008-5406 State: PUBLISHED Published: 2008-12-09T11:00:00 Last Updated: 2024-08-07T10:49:13.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Apple QuickTime Player 7.5.5 and iTunes 8.0.2.20 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a MOV file with "long arguments," related to an "off by one overflow." Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4704 - https://www.exploit-db.com/exploits/7296 - http://www.securityfocus.com/bid/32540 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46984