Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-0330 State: PUBLISHED Published: 2008-01-17T21:07:00 Last Updated: 2024-08-07T07:39:34.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open System Consultants (OSC) Radiator before 4.0 allows remote attackers to cause a denial of service (daemon crash) via malformed RADIUS requests, as demonstrated by packets sent by nmap. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0598 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40664 - http://www.securityfocus.com/bid/27306 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39730 - http://secunia.com/advisories/28463 - http://www.open.com.au/r
ps://exchange.xforce.ibmcloud.com/vulnerabilities/39730 - http://secunia.com/advisories/28463 - http://www.open.com.au/radiator/history.html
CVE ID: CVE-2008-0331 State: PUBLISHED Published: 2008-01-17T21:07:00 Last Updated: 2024-08-07T07:39:35.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Funkwerk System Software before 7.4.1 PATCH 9 for certain Funkwerk Router / VPN devices allows remote attackers to cause a denial of service (panic and reboot) via unspecified DNS requests. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/42782 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39731 - http://www.securityfocus.com/bid/27314 - http://secunia.com/advisories/28085 - http://www.funkwerk-ec.com/portal/downloadcenter/dateien/x2300/r7401p09/readme_741p
ttp://secunia.com/advisories/28085 - http://www.funkwerk-ec.com/portal/downloadcenter/dateien/x2300/r7401p09/readme_741p9_en.pdf
CVE ID: CVE-2008-0332 State: PUBLISHED Published: 2008-01-17T21:07:00 Last Updated: 2024-08-07T07:39:35.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in arias/help/effect.php in aria 0.99-6 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39712 - https://www.exploit-db.com/exploits/4920 - http://www.securityfocus.com/bid/27311 - http://www.securityfocus.com/archive/1/486406/100/0/threaded
CVE ID: CVE-2008-0333 State: PUBLISHED Published: 2008-01-17T21:07:00 Last Updated: 2024-08-07T07:39:35.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download_view_attachment.aspx in AfterLogic MailBee WebMail Pro 4.1 for ASP.NET allows remote attackers to read arbitrary files via a .. (dot dot) in the temp_filename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27312 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39724 - https://www.exploit-db.com/exploits/4921 - http://secunia.com/advisories/28521
CVE ID: CVE-2008-0334 State: PUBLISHED Published: 2008-01-17T21:07:00Z Last Updated: 2024-09-17T03:43:35.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in pm/language/spanish/preferences.php in PMachine Pro 2.4.1 allows remote attackers to inject arbitrary web script or HTML via the L_PREF_NAME[855] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0801-exploits/pMachinePro-241-xss.txt - http://www.securityfocus.com/bid/27282
CVE ID: CVE-2008-0335 State: PUBLISHED Published: 2008-01-17T21:07:00 Last Updated: 2024-08-07T07:39:35.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in BugTracker.NET before 2.7.2 allows remote attackers to inject arbitrary web script or HTML via an arbitrary custom text field. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=568160 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39650 - http://secunia.com/advisories/28481 - http://sourceforge.net/tracker/index.php?func=detail&aid=1867089&group_id=66812&atid=515837 - http://www.securityfocus.com/bid/27275
CVE ID: CVE-2008-0336 State: PUBLISHED Published: 2008-01-17T21:07:00 Last Updated: 2024-08-07T07:39:35.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in BugTracker.NET before 2.7.2 allow remote attackers to delete arbitrary bugs and perform other administrative tasks via unspecified vectors, possibly related to delete_*.aspx pages, and massedit.aspx, subscribe.aspx, flag.aspx, and relationships.aspx. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?group_id=66812&release_id=568160 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39651 - http://secuni
wnotes.php?group_id=66812&release_id=568160 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39651 - http://secunia.com/advisories/28481 - http://sourceforge.net/tracker/index.php?func=detail&aid=1867089&group_id=66812&atid=515837
CVE ID: CVE-2008-0337 State: PUBLISHED Published: 2008-01-17T21:07:00 Last Updated: 2024-08-07T07:39:35.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the _mwProcessReadSocket function in http.c in MiniWeb HTTP Server 0.8.19 allows remote attackers to execute arbitrary code via a long URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.bugtraq.ir/adv/miniweb_english.pdf - https://www.exploit-db.com/exploits/4923 - http://www.vupen.com/english/advisories/2008/0176 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39718 - http://secunia.com/advisories/28512 - http://www.securityfocus.com/bid/27319
CVE ID: CVE-2008-0338 State: PUBLISHED Published: 2008-01-17T21:07:00 Last Updated: 2024-08-07T07:39:35.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the mwGetLocalFileName function in http.c in MiniWeb HTTP Server 0.8.19 allows remote attackers to read arbitrary files and list arbitrary directories via a (1) .%2e (partially encoded dot dot) or (2) %2e%2e (encoded dot dot) in the URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.bugtraq.ir/adv/miniweb_english.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/39713 - https://www.exploit-db.com/exploits/4923 - http://www.vupen.com/english/advisories/
ibmcloud.com/vulnerabilities/39713 - https://www.exploit-db.com/exploits/4923 - http://www.vupen.com/english/advisories/2008/0176 - http://secunia.com/advisories/28512 - http://www.securityfocus.com/bid/27319
CVE ID: CVE-2008-0339 State: PUBLISHED Published: 2008-01-17T22:00:00 Last Updated: 2024-08-07T07:39:34.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 has unknown impact and remote attack vectors, aka DB01. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019218 - http://www.securityfocus.com/bid/27229 - http://www.us-cert.gov/cas/techalerts/TA08-017A.html - http://www.vupen.com/english/advisories/2008/0150 - http://www.vupen.com/english/advisories/2008/0180 - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://
8/0150 - http://www.vupen.com/english/advisories/2008/0180 - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://secunia.com/advisories/28556 - http://secunia.com/advisories/28518
CVE ID: CVE-2008-0340 State: PUBLISHED Published: 2008-01-17T22:00:00 Last Updated: 2024-08-07T07:39:35.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and remote attack vectors, related to the (1) Advanced Queuing component (DB02) and (2) Oracle Spatial component (DB04). Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019218 - http://www.securityfocus.com/bid/27229 - http://www.us-cert.gov/cas/techalerts/TA08-017A.html - http://www.vupen.com/english/advisories/2008/0150 - http://www.vupen.com/eng
us-cert.gov/cas/techalerts/TA08-017A.html - http://www.vupen.com/english/advisories/2008/0150 - http://www.vupen.com/english/advisories/2008/0180 - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://secunia.com/advisories/28556 - http://secunia.com/advisories/28518
CVE ID: CVE-2008-0341 State: PUBLISHED Published: 2008-01-17T22:00:00 Last Updated: 2024-08-07T07:39:35.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.0.1.5 FIPS+ and 10.1.0.5 has unknown impact and remote attack vectors, aka DB03. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019218 - http://www.securityfocus.com/bid/27229 - http://www.us-cert.gov/cas/techalerts/TA08-017A.html - http://www.vupen.com/english/advisories/2008/0150 - http://www.vupen.com/english/advisories/2008/0180 - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://www.or
- http://www.vupen.com/english/advisories/2008/0180 - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://secunia.com/advisories/28556 - http://secunia.com/advisories/28518
CVE ID: CVE-2008-0342 State: PUBLISHED Published: 2008-01-17T22:00:00 Last Updated: 2024-08-07T07:39:34.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Upgrade/Downgrade component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.3 has unknown impact and remote attack vectors, aka DB05. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019218 - http://www.securityfocus.com/bid/27229 - http://www.us-cert.gov/cas/techalerts/TA08-017A.html - http://www.vupen.com/english/advisories/2008/0150 - http://www.vupen.com/english/advisories/2008/0180 - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://
CVE ID: CVE-2008-0343 State: PUBLISHED Published: 2008-01-17T22:00:00 Last Updated: 2024-08-07T07:39:35.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 has unknown impact and remote attack vectors, aka DB06. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019218 - http://www.securityfocus.com/bid/27229 - http://www.us-cert.gov/cas/techalerts/TA08-017A.html - http://www.vupen.com/english/advisories/2008/0150 - http://www.vupen.com/english/advisories/2008/0180 - http://marc.info/?l=bugtraq&m=120058413923005&
dvisories/2008/0150 - http://www.vupen.com/english/advisories/2008/0180 - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://secunia.com/advisories/28556 - http://secunia.com/advisories/28518
CVE ID: CVE-2008-0344 State: PUBLISHED Published: 2008-01-17T22:00:00 Last Updated: 2024-08-07T07:39:35.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and remote attack vectors, aka DB07. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019218 - http://www.securityfocus.com/bid/27229 - http://www.us-cert.gov/cas/techalerts/TA08-017A.html - http://www.vupen.com/english/advisories/2008/0150 - http://www.vupen.com/english/advisories/2008/0180 - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://www.oracle.co
://www.vupen.com/english/advisories/2008/0180 - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://secunia.com/advisories/28556 - http://secunia.com/advisories/28518
CVE ID: CVE-2008-0345 State: PUBLISHED Published: 2008-01-17T22:00:00 Last Updated: 2024-08-07T07:39:35.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Core RDBMS component in Oracle Database 11.1.0.6 has unknown impact and remote attack vectors, aka DB08. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019218 - http://www.securityfocus.com/bid/27229 - http://www.us-cert.gov/cas/techalerts/TA08-017A.html - http://www.vupen.com/english/advisories/2008/0150 - http://www.vupen.com/english/advisories/2008/0180 - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://www.oracle.com/technetwork/top
english/advisories/2008/0180 - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://secunia.com/advisories/28556 - http://secunia.com/advisories/28518
CVE ID: CVE-2008-0346 State: PUBLISHED Published: 2008-01-17T22:00:00 Last Updated: 2024-08-07T07:39:35.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Jinitiator component in Oracle Application Server 1.3.1.27 and E-Business Suite 11.5.10.2 has unknown impact and remote attack vectors, aka AS01. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019218 - http://www.securityfocus.com/bid/27229 - http://www.us-cert.gov/cas/techalerts/TA08-017A.html - http://www.vupen.com/english/advisories/2008/0150 - http://www.vupen.com/english/advisories/2008/0180 - http://marc.info/?l=bugtraq&m=12005841392
ish/advisories/2008/0150 - http://www.vupen.com/english/advisories/2008/0180 - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://osvdb.org/40294 - http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://secunia.com/advisories/28556 - http://secunia.com/advisories/28518
CVE ID: CVE-2008-0347 State: PUBLISHED Published: 2008-01-17T22:00:00 Last Updated: 2024-08-07T07:39:35.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Ultra Search component in Oracle Collaboration Suite 10.1.2; Database 9.2.0.8, 10.1.0.5, and 10.2.0.3; and Application Server 9.0.4.3 and 10.1.2.0.2; has unknown impact and local attack vectors, aka OCS01. NOTE: Oracle has not disputed a reliable claim that this issue is related to WKSYS schema privileges. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019218 - http://www.securityfocus.com/bid/27229 - http://www.us-cert.gov/cas/techalerts/
http://securitytracker.com/id?1019218 - http://www.securityfocus.com/bid/27229 - http://www.us-cert.gov/cas/techalerts/TA08-017A.html - http://www.vupen.com/english/advisories/2008/0150 - http://www.vupen.com/english/advisories/2008/0180 - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://www.petefinnigan.com/Advisory_CPU_Jan_2008.htm - http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://secunia.com/advisories/28556 - http://secunia.com/advisories/28518 - http://www.securityfocus.com/archive/1/487322/100/100/threaded
CVE ID: CVE-2008-0348 State: PUBLISHED Published: 2008-01-17T22:00:00 Last Updated: 2024-08-07T07:39:35.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.18, 8.48.15, and 8.49.07 have unknown impact and remote attack vectors, aka (1) PSE01, (2) PSE03, and (3) PSE04. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019218 - http://www.securityfocus.com/bid/27229 - http://www.us-cert.gov/cas/techalerts/TA08-017A.html - http://www.vupen.com/english/advisories/2008/0150 - http://www.vupen.com/english/advis
v/cas/techalerts/TA08-017A.html - http://www.vupen.com/english/advisories/2008/0150 - http://www.vupen.com/english/advisories/2008/0180 - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://secunia.com/advisories/28556 - http://secunia.com/advisories/28518
CVE ID: CVE-2008-0349 State: PUBLISHED Published: 2008-01-17T22:00:00 Last Updated: 2024-08-07T07:39:35.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.15 and 8.49.07 has unknown impact and remote attack vectors, aka PSE02. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019218 - http://www.securityfocus.com/bid/27229 - http://www.us-cert.gov/cas/techalerts/TA08-017A.html - http://www.vupen.com/english/advisories/2008/0150 - http://www.vupen.com/english/advisories/2008/0180 - http://marc.info/?l=bugtraq&m=1200
om/english/advisories/2008/0150 - http://www.vupen.com/english/advisories/2008/0180 - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://secunia.com/advisories/28556 - http://secunia.com/advisories/28518
CVE ID: CVE-2008-0350 State: PUBLISHED Published: 2008-01-17T23:00:00 Last Updated: 2024-08-07T07:39:35.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/index.php in Evilsentinel 1.0.9 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to gain administrative privileges and make arbitrary configuration changes. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4884 - http://evilsentinel.altervista.org/forum/index.php?topic=49.0 - http://secunia.com/advisories/28427 - http://www.securityfocus.com/bid/27227
CVE ID: CVE-2008-0351 State: PUBLISHED Published: 2008-01-17T23:00:00 Last Updated: 2024-08-07T07:39:35.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/config.php in Evilsentinel 1.0.9 and earlier allows remote attackers to bypass the CAPTCHA test by omitting the es_security_captcha parameter and not invoking captcha.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4884 - http://www.securityfocus.com/bid/27227
CVE ID: CVE-2008-0352 State: PUBLISHED Published: 2008-01-17T23:00:00 Last Updated: 2024-08-07T07:39:35.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel 2.6.20 through 2.6.21.1 allows remote attackers to cause a denial of service (panic) via a certain IPv6 packet, possibly involving the Jumbo Payload hop-by-hop option (jumbogram). Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.kernel.org/show_bug.cgi?id=8450 - https://www.exploit-db.com/exploits/4893 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21.2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39643
CVE ID: CVE-2008-0353 State: PUBLISHED Published: 2008-01-18T21:00:00 Last Updated: 2024-08-07T07:39:35.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in visualizza_tabelle.php in php-residence 0.7.2 and 1.0 allows remote attackers to execute arbitrary SQL commands via the cognome_cerca parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27320 - http://secunia.com/advisories/28516 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39739 - https://www.exploit-db.com/exploits/4925
CVE ID: CVE-2008-0354 State: PUBLISHED Published: 2008-01-18T21:00:00 Last Updated: 2024-08-07T07:39:34.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the chat client in IBM Lotus Sametime 7.5 and 7.5.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted message, which triggers code execution after a mouseover event initiated by the victim. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27316 - http://secunia.com/advisories/27942 - http://www.vupen.com/english/advisories/2008/0168 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39726 -
7942 - http://www.vupen.com/english/advisories/2008/0168 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39726 - http://www.securitytracker.com/id?1019224 - http://www-1.ibm.com/support/docview.wss?uid=swg21292938
CVE ID: CVE-2008-0355 State: PUBLISHED Published: 2008-01-18T21:00:00 Last Updated: 2024-08-07T07:39:35.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the forum module in PHPEcho CMS, probably 2.0-rc3 and earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter in a section action, a different vector than CVE-2007-2866. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39741 - https://www.exploit-db.com/exploits/4929 - http://www.securityfocus.com/bid/27326
CVE ID: CVE-2008-0356 State: PUBLISHED Published: 2008-01-18T21:00:00 Last Updated: 2024-08-07T07:39:35.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Independent Management Architecture (IMA) service in Citrix Presentation Server (MetaFrame Presentation Server) 4.5 and earlier, Access Essentials 2.0 and earlier, and Desktop Server 1.0 allows remote attackers to execute arbitrary code via an invalid size value in a packet to TCP port 2512 or 2513. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/486585/100/0/threaded - http://secunia.com/advisories/28508 - http://www.vupen.com/english/advisories/20
s.com/archive/1/486585/100/0/threaded - http://secunia.com/advisories/28508 - http://www.vupen.com/english/advisories/2008/0172 - http://www.kb.cert.org/vuls/id/412228 - http://www.securitytracker.com/id?1019231 - http://www.securityfocus.com/bid/27329 - http://zerodayinitiative.com/advisories/ZDI-08-002.html - http://support.citrix.com/article/CTX114487
CVE ID: CVE-2008-0357 State: PUBLISHED Published: 2008-01-18T21:00:00 Last Updated: 2024-08-07T07:39:35.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in pages/upload.php in Galaxyscripts Mini File Host 1.2.1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4930 - http://www.securityfocus.com/bid/27327 - http://secunia.com/advisories/28504 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39799
CVE ID: CVE-2008-0358 State: PUBLISHED Published: 2008-01-18T21:00:00 Last Updated: 2024-08-07T07:39:34.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Pixelpost 1.7 allows remote attackers to execute arbitrary SQL commands via the parent_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4924 - http://secunia.com/advisories/28499 - http://www.pixelpost.org/forum/showthread.php?t=7716 - http://www.securitytracker.com/id?1019238 - http://www.securityfocus.com/bid/27242 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39721