Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-3854 State: PUBLISHED Published: 2008-08-28T17:00:00 Last Updated: 2024-08-07T09:53:00.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in IBM DB2 9.1 before Fixpak 5 and 9.5 before Fixpak 1 allow remote attackers to cause a denial of service (system outage) via vectors related to (1) use of XQuery to issue statements; the (2) XMLQUERY, (3) XMLEXISTS, and (4) XMLTABLE statements; and the (5) sqlrlaka function. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg21255607 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42935 - http://www.securityfocus.com/ar
cview.wss?uid=swg21255607 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42935 - http://www.securityfocus.com/archive/1/496406/100/0/threaded - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ18431 - http://www.vupen.com/english/advisories/2008/1769 - http://www.securityfocus.com/bid/29601 - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ18434 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42930 - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ16346 - http://secunia.com/advisories/30558
CVE ID: CVE-2008-3855 State: PUBLISHED Published: 2008-08-28T17:00:00 Last Updated: 2024-08-07T09:53:00.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the DB2 Administration Server (DAS) in the Core DAS function component in IBM DB2 9.1 before Fixpak 5 allows local users to gain privileges, aka a "FILE CREATION VULNERABILITY." NOTE: this may be the same as CVE-2007-5664. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg21255607 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42932 - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ12735 - http://www.vupen.com/english/advisor
/vulnerabilities/42932 - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ12735 - http://www.vupen.com/english/advisories/2008/1769 - http://www.securityfocus.com/bid/29601 - http://secunia.com/advisories/30558
CVE ID: CVE-2008-3856 State: PUBLISHED Published: 2008-08-28T17:00:00 Last Updated: 2024-08-07T09:53:00.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: The routine infrastructure component in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP1 on Unix and Linux does not change the ownership of the db2fmp process, which has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT - http://www.securityfocus.com/bid/31058 - http://www-1.ibm.com/support/docview.wss?uid=swg21255607 - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ20352 - ht
http://www-1.ibm.com/support/docview.wss?uid=swg21255607 - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ20352 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45140 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ19155 - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - http://www.securityfocus.com/bid/29601 - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ20350 - http://secunia.com/advisories/31787 - http://secunia.com/advisories/29784
CVE ID: CVE-2008-3857 State: PUBLISHED Published: 2008-08-28T17:00:00 Last Updated: 2024-08-07T09:53:00.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Base Service Utilities component in IBM DB2 9.1 before Fixpak 5 retains a cleartext password in memory after the database connection that sent the password is fully established, which might allow local users to obtain sensitive information by reading a memory dump. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg21255607 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45139 - http://www-1.ibm.com/support/docview.wss?uid=swg1JR27422 - http://www.vupen.c
force.ibmcloud.com/vulnerabilities/45139 - http://www-1.ibm.com/support/docview.wss?uid=swg1JR27422 - http://www.vupen.com/english/advisories/2008/1769 - http://www.securityfocus.com/bid/29601
CVE ID: CVE-2008-3858 State: PUBLISHED Published: 2008-08-28T17:00:00 Last Updated: 2024-08-07T09:53:00.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Downlevel DB2RA Support component in IBM DB2 9.1 before Fixpak 4a allows remote attackers to cause a denial of service (instance crash) via a crafted CONNECT data stream that simulates a V7 client connect request. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg21255607 - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ07299 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45138 - http://osvdb.org/48428 - http://www.securityfocus.com/bid/29601
CVE ID: CVE-2008-3859 State: PUBLISHED Published: 2008-08-29T16:22:00 Last Updated: 2024-08-07T09:53:00.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Davlin Thickbox Gallery 2 allows remote attackers to obtain the administrative username and MD5 password hash via a direct request to conf/admins.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4196 - http://www.securityfocus.com/bid/30845 - https://www.exploit-db.com/exploits/6314 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44682
CVE ID: CVE-2008-3860 State: PUBLISHED Published: 2008-08-29T16:22:00 Last Updated: 2024-08-07T09:53:00.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities (1) in the WYSIWYG editors, (2) during local group creation, (3) during HTML redirects, (4) in the HTML import, (5) in the Rich text editor, and (6) in link-page in IBM Lotus Quickr 8.1 services for Lotus Domino before Hotfix 15 allow remote attackers to inject arbitrary web script or HTML via unknown vectors, including (7) the Imported Page. NOTE: the vulnerability in the WYSIWYG editors may exist because of an incomplete fix for CVE-2008-2163. Additional Analyst Notes: - CV
rability in the WYSIWYG editors may exist because of an incomplete fix for CVE-2008-2163. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/49776 - http://www.securitytracker.com/id?1020762 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44694 - http://osvdb.org/49772 - http://www.vupen.com/english/advisories/2008/2444 - http://www-01.ibm.com/support/docview.wss?uid=swg27013341 - http://secunia.com/advisories/31634
CVE ID: CVE-2008-3861 State: PUBLISHED Published: 2008-08-29T16:22:00 Last Updated: 2024-08-07T09:53:00.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in phpMyRealty (PMR) 1.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in pages.php and (2) the price_max parameter in search.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4198 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44720 - http://secunia.com/advisories/31613 - https://www.exploit-db.com/exploits/6320 - http://www.securityfocus.com/bid/30862
CVE ID: CVE-2008-3862 State: PUBLISHED Published: 2008-10-23T21:00:00 Last Updated: 2024-08-07T09:53:00.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in CGI programs in the server in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1374, and 8.0 SP1 Patch 1 before build 3110, allows remote attackers to execute arbitrary code via an HTTP POST request containing crafted form data, related to "parsing CGI requests." Additional Analyst Notes: - CVE Program Container: References: - http://www.trendmicro.com/ftp/documentation/readme/OSCE_8.0_sp1p1_CriticalPatch_B3110_readme.txt - http://secunia.com/advisories/32005 - http://securit
ocumentation/readme/OSCE_8.0_sp1p1_CriticalPatch_B3110_readme.txt - http://secunia.com/advisories/32005 - http://securityreason.com/securityalert/4489 - http://secunia.com/secunia_research/2008-40/ - http://www.vupen.com/english/advisories/2008/2892 - http://www.trendmicro.com/ftp/documentation/readme/OSCE_7.3_CriticalPatch_B1374_readme.txt - http://www.securitytracker.com/id?1021093 - http://www.securityfocus.com/bid/31859 - http://www.securityfocus.com/archive/1/497650/100/0/threaded
CVE ID: CVE-2008-3863 State: PUBLISHED Published: 2008-10-23T21:00:00 Last Updated: 2024-08-07T09:53:00.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the read_special_escape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e (aka special escapes processing) option is enabled, allows user-assisted remote attackers to execute arbitrary code via a crafted ASCII file, related to the setfilename command. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2891 - http://secunia.com/advisories/32137 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46026 - http://ww
2008/2891 - http://secunia.com/advisories/32137 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46026 - http://www.securityfocus.com/bid/31858 - http://secunia.com/advisories/32521 - http://support.apple.com/kb/HT3549 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00040.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9939 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00014.html - http://www.redhat.com/support/errata/RHSA-2008-1016.html - http://support.avaya.com/elmodocs2/security/ASA-2008-504.htm - http://w
.redhat.com/support/errata/RHSA-2008-1016.html - http://support.avaya.com/elmodocs2/security/ASA-2008-504.htm - http://www.ubuntu.com/usn/usn-660-1 - http://secunia.com/advisories/35074 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0321 - http://securityreason.com/securityalert/4488 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://security.gentoo.org/glsa/glsa-200812-02.xml - http://www.securityfocus.com/archive/1/497647/100/0/threaded - http://www.securityfocus.com/archive/1/498385/100/0/threaded - https://issues.rpath.com/browse/RPL-2887 - http://secunia.com/advisories/32854 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:243 - http://se
2887 - http://secunia.com/advisories/32854 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:243 - http://secunia.com/advisories/32970 - http://secunia.com/advisories/32530 - http://www.debian.org/security/2008/dsa-1670 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.vupen.com/english/advisories/2009/1297 - http://secunia.com/secunia_research/2008-41/ - http://secunia.com/advisories/32753 - http://secunia.com/advisories/33109 - http://rhn.redhat.com/errata/RHSA-2008-1021.html
CVE ID: CVE-2008-3864 State: PUBLISHED Published: 2009-01-21T20:00:00 Last Updated: 2024-08-07T09:53:00.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allows remote attackers to cause a denial of service (service crash) via a packet with a large value in an unspecified size field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021615 - http://secunia.com/secunia_research/2008-42/ - http://www.trendmicro.com/ft
http://www.securitytracker.com/id?1021615 - http://secunia.com/secunia_research/2008-42/ - http://www.trendmicro.com/ftp/documentation/readme/OSCE8.0_SP1_Patch1_CriticalPatch_3191_Readme.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/48106 - http://www.securityfocus.com/archive/1/500195/100/0/threaded - http://www.securityfocus.com/bid/33358 - http://www.vupen.com/english/advisories/2009/0191 - http://secunia.com/advisories/33609 - http://securityreason.com/securityalert/4937 - http://secunia.com/advisories/31160 - http://www.securitytracker.com/id?1021614
CVE ID: CVE-2008-3865 State: PUBLISHED Published: 2009-01-21T20:00:00 Last Updated: 2024-08-07T09:53:00.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in the ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allow remote attackers to execute arbitrary code via a packet with a small value in an unspecified size field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021615 - http://secunia.com/secunia_research/2008-42/ - http://w
ainer: References: - http://www.securitytracker.com/id?1021615 - http://secunia.com/secunia_research/2008-42/ - http://www.trendmicro.com/ftp/documentation/readme/OSCE8.0_SP1_Patch1_CriticalPatch_3191_Readme.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/48107 - http://www.securityfocus.com/archive/1/500195/100/0/threaded - http://www.securityfocus.com/bid/33358 - http://www.vupen.com/english/advisories/2009/0191 - http://secunia.com/advisories/33609 - http://securityreason.com/securityalert/4937 - http://secunia.com/advisories/31160 - http://www.securitytracker.com/id?1021614
CVE ID: CVE-2008-3866 State: PUBLISHED Published: 2009-01-21T20:00:00 Last Updated: 2024-08-07T09:53:00.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Trend Micro Personal Firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, relies on client-side password protection implemented in the configuration GUI, which allows local users to bypass intended access restrictions and change firewall settings by using a modified client to send crafted packets. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_res
to send crafted packets. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2008-43/ - http://www.trendmicro.com/ftp/documentation/readme/OSCE8.0_SP1_Patch1_CriticalPatch_3191_Readme.txt - http://www.securitytracker.com/id?1021616 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48108 - http://www.securitytracker.com/id?1021617 - http://www.securityfocus.com/bid/33358 - http://www.vupen.com/english/advisories/2009/0191 - http://secunia.com/advisories/33609 - http://secunia.com/advisories/31160
CVE ID: CVE-2008-3867 State: PUBLISHED Published: 2008-11-03T19:04:00 Last Updated: 2024-08-07T09:53:00.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in spaces/emailuser.php in Interact 2.4.1 allows remote attackers to execute arbitrary SQL commands via the email_user_key parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4537 - http://www.securityfocus.com/bid/32014 - http://sourceforge.net/tracker/index.php?func=detail&aid=2208205&group_id=69681&atid=525406 - http://secunia.com/advisories/32359 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46267 - http://www.securityfocus
p://secunia.com/advisories/32359 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46267 - http://www.securityfocus.com/archive/1/497967/100/0/threaded - http://secunia.com/secunia_research/2008-44/
CVE ID: CVE-2008-3868 State: PUBLISHED Published: 2008-11-03T19:04:00 Last Updated: 2024-08-07T09:53:00.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Interact 2.4.1 allows remote attackers to hijack the authentication of super administrators for requests that create super administrator accounts. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4537 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46269 - http://secunia.com/advisories/32434 - http://www.securityfocus.com/archive/1/497967/100/0/threaded - http://secunia.com/secunia_research/2008-44/
CVE ID: CVE-2008-3869 State: PUBLISHED Published: 2009-05-26T21:00:00 Last Updated: 2024-08-07T09:53:00.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request, related to improper decoding of request parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32473 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5347 - http://www.vupen.com/english/advisories/2009/1409 - http://www.securitytracker.com/id?1022275 - http://support.avaya.com/elmodocs2/security/ASA-2
ish/advisories/2009/1409 - http://www.securitytracker.com/id?1022275 - http://support.avaya.com/elmodocs2/security/ASA-2009-195.htm - http://www.osvdb.org/54663 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-116455-02-1 - http://www.securityfocus.com/archive/1/503771/100/0/threaded - http://secunia.com/advisories/35191 - http://secunia.com/secunia_research/2008-45/ - http://sunsolve.sun.com/search/document.do?assetkey=1-66-259468-1 - http://www.securityfocus.com/bid/35083
CVE ID: CVE-2008-3870 State: PUBLISHED Published: 2009-05-26T21:00:00 Last Updated: 2024-08-07T09:53:00.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request that triggers a heap-based buffer overflow, related to improper memory allocation. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32473 - http://secunia.com/secunia_research/2008-47/ - http://www.securityfocus.com/archive/1/503772/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6092 - http://www.vupe
threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6092 - http://www.vupen.com/english/advisories/2009/1409 - http://www.securitytracker.com/id?1022275 - http://support.avaya.com/elmodocs2/security/ASA-2009-195.htm - http://sunsolve.sun.com/search/document.do?assetkey=1-21-116455-02-1 - http://www.osvdb.org/54668 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50706 - http://secunia.com/advisories/35191 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-259468-1 - http://www.securityfocus.com/bid/35083
CVE ID: CVE-2008-3871 State: PUBLISHED Published: 2009-04-01T17:00:00 Last Updated: 2024-08-07T09:53:00.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in UltraISO 9.3.1.2633, and possibly other versions before 9.3.3.2685, allow user-assisted attackers to execute arbitrary code via format string specifiers in the filename of a (1) DAA or (2) ISZ file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/502324/100/0/threaded - http://www.securitytracker.com/id?1021965 - http://secunia.com/advisories/32415 - http://www.ezbsystems.com/ultraiso/history.htm - http://secunia.com/secunia_resea
http://secunia.com/advisories/32415 - http://www.ezbsystems.com/ultraiso/history.htm - http://secunia.com/secunia_research/2008-48/ - http://www.securityfocus.com/bid/34325 - http://www.vupen.com/english/advisories/2009/0903
CVE ID: CVE-2008-3872 State: PUBLISHED Published: 2008-10-06T17:00:00 Last Updated: 2024-08-07T09:53:00.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player 8.0.39.0 and earlier, and 9.x up to 9.0.115.0, allows remote attackers to bypass the allowScriptAccess parameter setting via a crafted SWF file with unspecified "Filter evasion" manipulations. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb08-11.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45713 - http://taviso.decsystem.org/research.html
CVE ID: CVE-2008-3873 State: PUBLISHED Published: 2008-08-29T17:00:00 Last Updated: 2024-08-07T09:53:00.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: The System.setClipboard method in ActionScript in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to populate the clipboard with a URL that is difficult to delete and does not require user interaction to populate the clipboard, as exploited in the wild in August 2008. Additional Analyst Notes: - CVE Program Container: References: - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid= - http://secunia.com/advisories/33390 - http://www.adobe.com/support/security/bulletins/apsb08-18.htm
ntOID=834256&poid= - http://secunia.com/advisories/33390 - http://www.adobe.com/support/security/bulletins/apsb08-18.html - http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm - http://secunia.com/advisories/32702 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44584 - http://www.adobe.com/devnet/flashplayer/articles/fplayer10_security_changes.html - http://blogs.adobe.com/psirt/2008/08/clipboard_attack.html - http://secunia.com/advisories/34226 - http://www.vupen.com/english/advisories/2008/2838 - http://blogs.zdnet.com/security/?p=1733 - http://security.gentoo.org/glsa/glsa-200903-23.xml - http://securitytracker.com/id?1020724 - http://secunia.com/advisories/32759 - http://
ntoo.org/glsa/glsa-200903-23.xml - http://securitytracker.com/id?1020724 - http://secunia.com/advisories/32759 - http://www.redhat.com/support/errata/RHSA-2008-0945.html - http://www.redhat.com/support/errata/RHSA-2008-0980.html - http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm - http://www.securityfocus.com/bid/31117 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1 - http://secunia.com/advisories/32448 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html - http://blogs.zdnet.com/security/?p=1759
CVE ID: CVE-2008-3874 State: PUBLISHED Published: 2008-08-29T17:00:00 Last Updated: 2024-08-07T09:53:00.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in account.php in Lussumo Vanilla 1.1.5-rc1, 1.1.4, and earlier allows remote authenticated users to inject arbitrary web script or HTML via the Value field (aka Label ==> Value pairs). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31527 - http://www.securityfocus.com/archive/1/495577/100/0/threaded - http://lussumo.com/community/discussion/8559/vanilla-115-release-can
securityfocus.com/archive/1/495577/100/0/threaded - http://lussumo.com/community/discussion/8559/vanilla-115-release-candidate-1/ - http://www.gulftech.org/?node=research&article_id=00126-08192008 - http://www.securityfocus.com/bid/30748 - http://lussumo.com/docs/doku.php?id=vanilla:releasenotes - http://securityreason.com/securityalert/4176
CVE ID: CVE-2008-3875 State: PUBLISHED Published: 2008-09-02T14:00:00 Last Updated: 2024-08-07T09:53:00.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Sun Solaris 8 through 10 and OpenSolaris before snv_90 allows local users to bypass chroot, zones, and the Solaris Trusted Extensions multi-level security policy, and establish a covert communication channel, via unspecified vectors involving system calls. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31667 - http://www.securitytracker.com/id?1020780 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-240706-1 - http://www.securityfocus.com/bid/30880 - http: