Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-0464 State: PUBLISHED Published: 2008-01-25T15:00:00 Last Updated: 2024-08-07T07:46:54.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in archiv.cgi in absofort aconon Mail 2007 Enterprise SQL 11.7.0 and Mail 2004 Enterprise SQL 11.5.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the template parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4977 - http://secunia.com/advisories/28617 - http://burnachurch.com/67/directory-traversal-luecke-in-aconon-mail/ - http://www.vupen.com/english/advisories/2008/0310 - http://www.securityfocus.com/bid/2
raversal-luecke-in-aconon-mail/ - http://www.vupen.com/english/advisories/2008/0310 - http://www.securityfocus.com/bid/27427 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059856.html
CVE ID: CVE-2008-0465 State: PUBLISHED Published: 2008-01-25T15:00:00 Last Updated: 2024-08-07T07:46:54.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in optimizer.php in Seagull 0.6.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the files parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2008-January/001891.html - https://www.exploit-db.com/exploits/4980 - http://secunia.com/advisories/28646 - http://www.vupen.com/english/advisories/2008/0311 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39902 - http://seagullproject.org/publisher/articleview/
008/0311 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39902 - http://seagullproject.org/publisher/articleview/action/view/frmArticleID/98/ - http://www.securityfocus.com/bid/27437
CVE ID: CVE-2008-0466 State: PUBLISHED Published: 2008-01-28T23:00:00 Last Updated: 2024-08-07T07:46:54.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web Wiz RTE_file_browser.asp in, as used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums 9.07, and Web Wiz Newspad 1.02, does not require authentication, which allows remote attackers to list directories and read files. NOTE: this can be leveraged for listings outside the configured directory tree by exploiting a separate directory traversal vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/486868/100/0/threaded - https://www.exploit-db.com/exploits/4970 - ht
ferences: - http://www.securityfocus.com/archive/1/486868/100/0/threaded - https://www.exploit-db.com/exploits/4970 - https://www.exploit-db.com/exploits/4971 - http://www.securityfocus.com/bid/27419 - http://www.bugreport.ir/?/29 - http://securityreason.com/securityalert/3584 - http://www.bugreport.ir/?/31 - http://securitytracker.com/id?1019267 - http://www.webwizguide.com/webwizrichtexteditor/kb/release_notes.asp - http://www.securityfocus.com/archive/1/486866/100/0/threaded
CVE ID: CVE-2008-0467 State: PUBLISHED Published: 2008-01-29T01:00:00 Last Updated: 2024-08-07T07:46:55.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Firebird before 2.0.4, and 2.1.x before 2.1.0 RC1, might allow remote attackers to execute arbitrary code via a long username. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200803-02.xml - http://sourceforge.net/project/shownotes.php?release_id=570816&group_id=9028 - http://secunia.com/advisories/29203 - http://secunia.com/advisories/28596 - http://tracker.firebirdsql.org/browse/CORE-1603 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
advisories/28596 - http://tracker.firebirdsql.org/browse/CORE-1603 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39981 - http://www.securitytracker.com/id?1019277 - http://sourceforge.net/project/shownotes.php?group_id=9028&release_id=570800 - http://www.vupen.com/english/advisories/2008/0300 - http://www.securityfocus.com/bid/27467 - http://secunia.com/advisories/29501 - http://www.debian.org/security/2008/dsa-1529
CVE ID: CVE-2008-0468 State: PUBLISHED Published: 2008-01-29T19:00:00 Last Updated: 2024-08-07T07:46:54.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in category.php in Flinx 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27448 - http://www.vupen.com/english/advisories/2008/0313 - https://www.exploit-db.com/exploits/4985 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39930
CVE ID: CVE-2008-0469 State: PUBLISHED Published: 2008-01-29T19:00:00 Last Updated: 2024-08-07T07:46:55.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Tiger Php News System (TPNS) 1.0b and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter in a newscat action. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0312 - https://www.exploit-db.com/exploits/4984 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39908 - http://www.securityfocus.com/bid/27445 - http://www.securityfocus.com/archive/1/486961/100/0/threaded - http://secunia
- http://www.securityfocus.com/bid/27445 - http://www.securityfocus.com/archive/1/486961/100/0/threaded - http://secunia.com/advisories/28641 - http://securityreason.com/securityalert/3587
CVE ID: CVE-2008-0470 State: PUBLISHED Published: 2008-01-29T19:00:00 Last Updated: 2024-08-07T07:46:54.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain ActiveX control in Comodo AntiVirus 2.0 allows remote attackers to execute arbitrary commands via the ExecuteStr method. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39904 - http://www.securityfocus.com/bid/27424 - https://www.exploit-db.com/exploits/4974
CVE ID: CVE-2008-0471 State: PUBLISHED Published: 2008-01-29T19:00:00 Last Updated: 2024-08-07T07:46:55.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in privmsg.php in phpBB 2.0.22 allows remote attackers to delete private messages (PM) as arbitrary users via a deleteall action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28871 - http://securityreason.com/securityalert/3585 - http://www.debian.org/security/2008/dsa-1488 - http://secunia.com/advisories/28630 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463589 - http://www.securityfocus.com/archive/1/487004/100/0/threaded
CVE ID: CVE-2008-0472 State: PUBLISHED Published: 2008-01-29T19:00:00 Last Updated: 2024-08-07T07:46:54.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in modcp.php in Woltlab Burning Board (wBB) 2.3.6 PL2 allows remote attackers to delete threads as moderators or administrators via a thread_del action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39878 - http://www.securityfocus.com/archive/1/486884/100/0/threaded - http://secunia.com/advisories/28634 - http://securityreason.com/securityalert/3586
CVE ID: CVE-2008-0473 State: PUBLISHED Published: 2008-01-29T19:00:00 Last Updated: 2024-08-07T07:46:54.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: RTE_popup_save_file.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to upload (1) .html and (2) .htm files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/486868/100/0/threaded - https://www.exploit-db.com/exploits/4971 - http://www.securityfocus.com/bid/27419 - http://securityreason.com/securityalert/3584 - http://www.bugreport.ir/?/31 - http://www.securityfocus.com/bid/27420 - http://www.securitytracker.com/id?1019267
CVE ID: CVE-2008-0474 State: PUBLISHED Published: 2008-01-29T19:00:00 Last Updated: 2024-08-07T07:46:54.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager 8.1 build 8100 allow remote attackers to inject arbitrary web script or HTML via the (1) showlink parameter to jsp/DiscoveryProfiles.jsp; the (2) attributeIDs, (3) attributeToSelect, (4) redirectto, and (5) resourceid parameters to (a) jsp/ThresholdActionConfiguration.jsp; the (6) page and (7) redirect parameters to (b) jsp/UpdateGlobalSettings.jsp; and the (8) haid and (9) returnpath parameters to (c) showTile.do. NOTE: the provenance of
sp/UpdateGlobalSettings.jsp; and the (8) haid and (9) returnpath parameters to (c) showTile.do. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27443 - http://secunia.com/advisories/28332 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39914
CVE ID: CVE-2008-0475 State: PUBLISHED Published: 2008-01-29T19:00:00 Last Updated: 2024-08-07T07:46:54.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: ManageEngine Applications Manager 8.1 build 8100 allows remote attackers to obtain sensitive information ( Home->Summary) via an invalid URI, as demonstrated by the "/-" URI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27443 - http://secunia.com/advisories/28332 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39917
CVE ID: CVE-2008-0476 State: PUBLISHED Published: 2008-01-29T19:00:00 Last Updated: 2024-08-07T07:46:54.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: ManageEngine Applications Manager 8.1 build 8100 does not check authentication for monitorType.do and unspecified other pages, which allows remote attackers to obtain sensitive information and change settings via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39915 - http://www.securityfocus.com/bid/27443 - http://secunia.c
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39915 - http://www.securityfocus.com/bid/27443 - http://secunia.com/advisories/28332
CVE ID: CVE-2008-0477 State: PUBLISHED Published: 2008-01-29T19:00:00 Last Updated: 2024-08-07T07:46:55.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the QMPUpgrade.Upgrade.1 ActiveX control in QMPUpgrade.dll 1.0.0.1 in Move Networks Upgrade Manager allows remote attackers to execute arbitrary code via a long first argument to the Upgrade method. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28647 - http://www.vupen.com/english/advisories/2008/0274 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39913 - https://www.exp
ww.vupen.com/english/advisories/2008/0274 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39913 - https://www.exploit-db.com/exploits/4979 - http://www.securityfocus.com/bid/27438 - http://www.securitytracker.com/id?1019270
CVE ID: CVE-2008-0478 State: PUBLISHED Published: 2008-01-29T19:00:00 Last Updated: 2024-08-07T07:46:54.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in SetCMS 3.6.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the set parameter, as demonstrated by sending a certain CLIENT_IP HTTP header in an enter action to index.php, and injecting PHP sequences into files/enter.set, which is then included by index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4962 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39864 - http://www.
s: - https://www.exploit-db.com/exploits/4962 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39864 - http://www.securityfocus.com/bid/27407
CVE ID: CVE-2008-0479 State: PUBLISHED Published: 2008-01-29T19:00:00 Last Updated: 2024-08-07T07:46:55.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in RTE_file_browser.asp in Web Wiz NewsPad 1.02 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\\ in the sub parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019268 - http://secunia.com/advisories/28416 - http://www.securityfocus.com/archive/1/486869/100/0/threaded - http://www.webwizguide.com/webwiznewspad/kb/release_notes.asp - https://exchange.xforce.ibmcloud.com/vulnerabilities/39863
p://www.webwizguide.com/webwiznewspad/kb/release_notes.asp - https://exchange.xforce.ibmcloud.com/vulnerabilities/39863 - http://www.bugreport.ir/?/30 - http://www.securityfocus.com/bid/27419 - http://securityreason.com/securityalert/3588 - https://www.exploit-db.com/exploits/4972
CVE ID: CVE-2008-0480 State: PUBLISHED Published: 2008-01-29T19:00:00 Last Updated: 2024-08-07T07:46:54.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Web Wiz Forums 9.07 and earlier allow remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\\ in the sub parameter to (1) RTE_file_browser.asp or (2) file_browser.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019266 - https://www.exploit-db.com/exploits/4970 - http://secunia.com/advisories/28601 - http://www.securityfocus.com/bid/27419 - http://www.bugreport.ir/?/29 - http://www.webwizguide
ia.com/advisories/28601 - http://www.securityfocus.com/bid/27419 - http://www.bugreport.ir/?/29 - http://www.webwizguide.com/webwizforums/kb/release_notes.asp - http://www.securityfocus.com/archive/1/486866/100/0/threaded - http://securityreason.com/securityalert/3589 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39856
CVE ID: CVE-2008-0481 State: PUBLISHED Published: 2008-01-29T19:00:00 Last Updated: 2024-08-07T07:46:54.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in RTE_file_browser.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\\ in the sub parameter in a save action. Additional Analyst Notes: - CVE Program Container: References: - http://www.webwizguide.com/webwizrichtexteditor/kb/release_notes.asp - http://www.securityfocus.com/archive/1/486868/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/39868 - http://secunia.com/advisories/28639 - https://ww
threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/39868 - http://secunia.com/advisories/28639 - https://www.exploit-db.com/exploits/4971 - http://www.securityfocus.com/bid/27419 - http://securityreason.com/securityalert/3584 - http://www.bugreport.ir/?/31 - http://securitytracker.com/id?1019267
CVE ID: CVE-2008-0485 State: PUBLISHED Published: 2008-02-05T11:00:00 Last Updated: 2024-08-07T07:46:54.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in libmpdemux/demux_mov.c in MPlayer 1.0 rc2 and earlier might allow remote attackers to execute arbitrary code via a QuickTime MOV file with a crafted stsc atom tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0406/references - http://www.mplayerhq.hu/design7/news.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:045 - http://secunia.com/advisories/28955 - http://www.securitytracker.com/id?1019299 - http://secunia.com/advisori
2008:045 - http://secunia.com/advisories/28955 - http://www.securitytracker.com/id?1019299 - http://secunia.com/advisories/28779 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060032.html - http://www.securityfocus.com/bid/27499 - http://secunia.com/advisories/29307 - http://www.debian.org/security/2008/dsa-1496 - http://www.securityfocus.com/archive/1/487500/100/0/threaded - http://securityreason.com/securityalert/3607 - http://security.gentoo.org/glsa/glsa-200803-16.xml - http://www.coresecurity.com/?action=item&id=2102 - http://secunia.com/advisories/28956
CVE ID: CVE-2008-0486 State: PUBLISHED Published: 2008-02-05T11:00:00 Last Updated: 2024-08-07T07:46:55.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index vulnerability in libmpdemux/demux_audio.c in MPlayer 1.0rc2 and SVN before r25917, and possibly earlier versions, as used in Xine-lib 1.1.10, might allow remote attackers to execute arbitrary code via a crafted FLAC tag, which triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3608 - http://secunia.com/advisories/28989 - http://www.vupen.com/english/advisories/2008/0406/references - http://lists.grok.org.uk/pipermail/full-disclosure/2
89 - http://www.vupen.com/english/advisories/2008/0406/references - http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060033.html - http://secunia.com/advisories/28918 - http://www.vupen.com/english/advisories/2008/0421 - http://www.securityfocus.com/archive/1/487501/100/0/threaded - http://www.mplayerhq.hu/design7/news.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:046 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:045 - http://secunia.com/advisories/28955 - http://secunia.com/advisories/28779 - http://www.coresecurity.com/?action=item&id=2103 - http://secunia.com/advisories/29307 - http://secunia.com/advisories/31393 - https://bugzilla.redh
?action=item&id=2103 - http://secunia.com/advisories/29307 - http://secunia.com/advisories/31393 - https://bugzilla.redhat.com/show_bug.cgi?id=431541 - http://security.gentoo.org/glsa/glsa-200802-12.xml - http://secunia.com/advisories/29601 - http://www.debian.org/security/2008/dsa-1496 - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html - http://secunia.com/advisories/29141 - http://security.gentoo.org/glsa/glsa-200803-16.xml - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00442.html - http://secunia.com/advisories/29323 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00395.html - http://secunia.com/advisories/28
- https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00395.html - http://secunia.com/advisories/28956 - http://www.debian.org/security/2008/dsa-1536 - http://www.securityfocus.com/bid/27441 - http://sourceforge.net/project/shownotes.php?group_id=9655&release_id=574735 - http://bugs.gentoo.org/show_bug.cgi?id=209106 - http://bugs.xine-project.org/show_bug.cgi?id=38 - http://secunia.com/advisories/28801 - http://www.ubuntu.com/usn/usn-635-1
CVE ID: CVE-2008-0487 State: PUBLISHED Published: 2008-01-30T21:00:00 Last Updated: 2024-08-07T07:46:54.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in login.asp in ASPired2Protect allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3598 - http://www.securityfocus.com/bid/27474 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39989 - http://secunia.com/advisories/28653 - http://www.securityfocus.com/ar
change.xforce.ibmcloud.com/vulnerabilities/39989 - http://secunia.com/advisories/28653 - http://www.securityfocus.com/archive/1/487137/100/0/threaded
CVE ID: CVE-2008-0488 State: PUBLISHED Published: 2008-01-30T21:00:00 Last Updated: 2024-08-07T07:46:55.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in tseekdir.cgi in VB Marketing allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the location parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3596 - http://www.securityfocus.com/bid/27475 - http://www.securityfocus.com/archive/1/487174/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/39970
CVE ID: CVE-2008-0489 State: PUBLISHED Published: 2008-01-30T21:00:00 Last Updated: 2024-08-07T07:46:54.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in install.php in Clansphere 2007.4.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3597 - http://www.securityfocus.com/bid/27471 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39977 - http://www.securityfocus.com/archive/1/487132/100/0/threaded
CVE ID: CVE-2008-0490 State: PUBLISHED Published: 2008-01-30T21:00:00 Last Updated: 2024-08-07T07:46:54.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in functions/editevent.php in the WP-Cal 0.3 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0348 - http://www.securityfocus.com/bid/27465 - https://www.exploit-db.com/exploits/4992 - http://secunia.com/advisories/28683 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39966
CVE ID: CVE-2008-0491 State: PUBLISHED Published: 2008-01-30T21:00:00 Last Updated: 2024-08-07T07:46:54.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in fim_rss.php in the fGallery 2.4.1 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the album parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39964 - http://www.securityfocus.com/bid/27464 - https://www.exploit-db.com/exploits/4993 - http://www.vupen.com/english/advisories/2008/0349
CVE ID: CVE-2008-0492 State: PUBLISHED Published: 2008-01-30T21:00:00 Last Updated: 2024-08-07T07:46:54.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Persits.XUpload.2 ActiveX control in XUpload.ocx 3.0.0.4 and earlier in Persits XUpload 3.0 allows remote attackers to execute arbitrary code via a long argument to the AddFile method. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39967 - http://secunia.com/advisories/28660 - http://www.vupen.com/english/advisories/2008/0315 - https://www.exploit-db.co
67 - http://secunia.com/advisories/28660 - http://www.vupen.com/english/advisories/2008/0315 - https://www.exploit-db.com/exploits/4987 - http://www.securityfocus.com/bid/27456
CVE ID: CVE-2008-0493 State: PUBLISHED Published: 2008-01-30T21:00:00 Last Updated: 2024-08-07T07:46:55.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: fpx.dll 3.9.8.0 in the FlashPix plugin for IrfanView 4.10 allows remote attackers to execute arbitrary code via a crafted FlashPix (.FPX) file, which triggers heap corruption. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4998 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40012 - http://www.vupen.com/english/advisories/2008/0318 - http://www.securityfocus.com/bid/27479 - http://secunia.com/advi
2 - http://www.vupen.com/english/advisories/2008/0318 - http://www.securityfocus.com/bid/27479 - http://secunia.com/advisories/28688