Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-7246 State: PUBLISHED Published: 2009-09-18T22:00:00 Last Updated: 2024-08-07T11:56:14.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome 0.2.149.29 and earlier allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in a loop, aka a "printing DoS attack," possibly a related issue to CVE-2009-0821. Additional Analyst Notes: - CVE Program Container: References: - http://websecurity.com.ua/2456/ - http://www.securityfocus.com/archive/1/506328/100/100/threaded
CVE ID: CVE-2008-7247 State: PUBLISHED Published: 2009-11-30T17:00:00 Last Updated: 2024-08-07T11:56:14.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: sql/sql_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha, when the data home directory contains a symlink to a different filesystem, allows remote authenticated users to bypass intended access restrictions by calling CREATE TABLE with a (1) DATA DIRECTORY or (2) INDEX DIRECTORY argument referring to a subdirectory that requires following this symlink. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1397-1 - http://secunia.com/advisories/3851
Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1397-1 - http://secunia.com/advisories/38517 - http://www.vupen.com/english/advisories/2010/1107 - http://ubuntu.com/usn/usn-897-1 - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html - http://bugs.mysql.com/bug.php?id=39277 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://support.apple.com/kb/HT4077 - http://marc.info/?l=oss-security&m=125908040022018&w=2 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html - https://bugzilla.redhat.com/show_bug.cgi?id=543619 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:044 - http:/
://bugzilla.redhat.com/show_bug.cgi?id=543619 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:044 - http://www.securityfocus.com/bid/38043 - http://lists.mysql.com/commits/59711
CVE ID: CVE-2008-7248 State: PUBLISHED Published: 2009-12-16T01:00:00 Last Updated: 2024-08-07T11:56:14.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ruby on Rails 2.1 before 2.1.3 and 2.2.x before 2.2.2 does not verify tokens for requests with certain content types, which allows remote attackers to bypass cross-site request forgery (CSRF) protection for requests to applications that rely on this protection, as demonstrated using text/plain. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/11/28/1 - http://www.rorsecurity.info/journal/2008/11/19/circumvent-rails-csrf-protection.html - http://secunia.com/advisor
28/1 - http://www.rorsecurity.info/journal/2008/11/19/circumvent-rails-csrf-protection.html - http://secunia.com/advisories/36600 - http://pseudo-flaw.net/content/web-browsers/form-data-encoding-roundup/ - http://weblog.rubyonrails.org/2008/11/18/potential-circumvention-of-csrf-protection-in-rails-2-1 - http://www.vupen.com/english/advisories/2009/2544 - http://groups.google.com/group/rubyonrails-security/browse_thread/thread/d741ee286e36e301?hl=en - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html - http://www.openwall.com/lists/oss-security/2009/12/02/2 - http://secunia.com/advisories/38915
CVE ID: CVE-2008-7249 State: PUBLISHED Published: 2009-12-30T22:00:00 Last Updated: 2024-08-07T11:56:14.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Squid Analysis Report Generator (Sarg) 2.2.3.1, and probably later, allows user-assisted remote attackers to execute arbitrary code via a long HTTP request method in a crafted access.log file, a different vulnerability than CVE-2008-1167. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=581212 - http://www.vupen.com/english/advisories/2008/0749 - http://www.securityfocus.com/archive/1/489018/100/0/threaded
CVE ID: CVE-2008-7250 State: PUBLISHED Published: 2009-12-30T22:00:00Z Last Updated: 2024-09-16T22:35:57.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Squid Analysis Report Generator (Sarg) 2.2.4 allows remote attackers to inject arbitrary web script or HTML via a JavaScript onload event in the User-Agent header, which is not properly handled when displaying the Squid proxy log. NOTE: this issue exists because of an incomplete fix for CVE-2008-1168. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=581509 - http://www.vupen.com/english/advisories/2008/0750 - ht
http://sourceforge.net/project/shownotes.php?release_id=581509 - http://www.vupen.com/english/advisories/2008/0750 - http://secunia.com/advisories/28668
CVE ID: CVE-2008-7251 State: PUBLISHED Published: 2010-01-19T16:00:00 Last Updated: 2024-08-07T11:56:14.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 creates a temporary directory with 0777 permissions, which has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38211 - http://secunia.com/advisories/39503 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html - http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin?view=rev&revision=11536 - http://www.vupen.com/english/advisories/2010/0910 - http://www.debian.org
et/viewvc/phpmyadmin?view=rev&revision=11536 - http://www.vupen.com/english/advisories/2010/0910 - http://www.debian.org/security/2010/dsa-2034 - http://www.phpmyadmin.net/home_page/security/PMASA-2010-1.php - http://www.securityfocus.com/bid/37826 - http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/QA_2_11/phpMyAdmin/libraries/File.class.php?r1=11536&r2=11535&pathrev=11536
CVE ID: CVE-2008-7252 State: PUBLISHED Published: 2010-01-19T16:00:00 Last Updated: 2024-08-07T11:56:14.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 uses predictable filenames for temporary files, which has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38211 - http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin?view=rev&revision=11528 - http://secunia.com/advisories/39503 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html - http://www.vupen.com/english/advisories/2010/0910 - http://phpmyadmin.svn.sour
security-announce/2010-01/msg00007.html - http://www.vupen.com/english/advisories/2010/0910 - http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/QA_2_11/phpMyAdmin/libraries/File.class.php?r1=11528&r2=11527&pathrev=11528 - http://www.debian.org/security/2010/dsa-2034 - http://www.phpmyadmin.net/home_page/security/PMASA-2010-2.php - http://www.securityfocus.com/bid/37826
CVE ID: CVE-2008-7253 State: PUBLISHED Published: 2010-01-25T19:00:00Z Last Updated: 2024-09-17T04:14:10.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the web server in IBM Lotus Domino Server, possibly 6.0 through 8.0, enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing (XST) attack, a related issue to CVE-2004-2763 and CVE-2005-3398. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?&uid=swg21201202 - http://www.kb.cert.org/vuls/id/867593 - http://www.kb.cert.org/vuls/id/AAMN-5K42VN - http://ww
ew.wss?&uid=swg21201202 - http://www.kb.cert.org/vuls/id/867593 - http://www.kb.cert.org/vuls/id/AAMN-5K42VN - http://www.kb.cert.org/vuls/id/AAMN-5K42VT
CVE ID: CVE-2008-7254 State: PUBLISHED Published: 2010-04-07T18:00:00 Last Updated: 2024-08-07T11:56:14.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in includes/template-loader.php in Irmin CMS (formerly Pepsi CMS) 0.5 and 0.6 BETA2, when register_globals is enabled, allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the _Root_Path parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11938 - http://osvdb.org/63348 - http://secunia.com/advisories/39214 - http://packetstormsecurity
xploit-db.com/exploits/11938 - http://osvdb.org/63348 - http://secunia.com/advisories/39214 - http://packetstormsecurity.org/0808-exploits/pepsicms-rfi.txt
CVE ID: CVE-2008-7255 State: PUBLISHED Published: 2010-04-20T16:00:00Z Last Updated: 2024-09-16T18:59:16.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: login_screen.tcl in aMSN (aka Alvaro's Messenger) before 0.97.1 saves a password after logout, which allows physically proximate attackers to hijack a session by visiting an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=610067 - http://www.amsn-project.net/forums/index.php?topic=5317.0 - http://amsn.svn.sourceforge.net/viewvc/amsn/trunk/amsn/login_screen.tcl?r1=9960&r2=10259&pathrev=10259
CVE ID: CVE-2008-7256 State: PUBLISHED Published: 2010-06-03T14:00:00 Last Updated: 2024-08-07T11:56:14.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: mm/shmem.c in the Linux kernel before 2.6.28-rc8, when strict overcommit is enabled and CONFIG_SECURITY is disabled, does not properly handle the export of shmemfs objects by knfsd, which allows attackers to cause a denial of service (NULL pointer dereference and knfsd crash) or possibly have unspecified other impact via unknown vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-1643. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?nam
0-1643. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 - https://bugzilla.redhat.com/show_bug.cgi?id=595970 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.28/ChangeLog-2.6.28-rc8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59224 - http://www.openwall.com/lists/oss-security/2010/05/27/1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1b79cd04fab80be61dcd2732e2423aafde9a4c1c
CVE ID: CVE-2008-7257 State: PUBLISHED Published: 2010-06-29T18:00:00 Last Updated: 2024-08-07T11:56:14.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in +webvpn+/index.html in WebVPN on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to inject arbitrary HTTP headers as demonstrated by a redirect attack involving a %0d%0aLocation%3a sequence in a URI, or conduct HTTP response splitting attacks via unspecified vectors, aka Bug ID CSCsr09163. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41159 - http://www.securityfocus.com/archive/1
: - CVE Program Container: References: - http://www.securityfocus.com/bid/41159 - http://www.securityfocus.com/archive/1/512023/100/0/threaded - http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html - http://securitytracker.com/id?1024155 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59850 - http://www.secureworks.com/ctu/advisories/SWRX-2010-001
CVE ID: CVE-2008-7258 State: PUBLISHED Published: 2010-08-20T17:00:00Z Last Updated: 2024-09-16T18:43:57.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: The standardise function in Anibal Monsalve Salazar sSMTP 2.61 and 2.62 allows local users to cause a denial of service (application exit) via an e-mail message containing a long line that begins with a . (dot) character. NOTE: CVE disputes this issue because it is solely a usability problem for senders of messages with certain long lines, and has no security impact Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41965 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-725
ntainer: References: - http://www.securityfocus.com/bid/41965 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-7258 - http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045422.html - http://patch-tracker.debian.org/patch/series/view/ssmtp/2.62-3/345780-standardise-bufsize - http://marc.info/?l=oss-security&m=128017258305041&w=2 - http://www.openwall.com/lists/oss-security/2010/08/19/6 - http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045407.html - http://secunia.com/advisories/41009 - https://bugs.launchpad.net/ubuntu/+source/ssmtp/+bug/282424 - https://bugzilla.redhat.com/show_bug.cgi?id=582236 - http://marc.info/?l=oss-security&m=1280133919072
smtp/+bug/282424 - https://bugzilla.redhat.com/show_bug.cgi?id=582236 - http://marc.info/?l=oss-security&m=128013391907262&w=2 - http://marc.info/?l=oss-security&m=128077707318085&w=2
CVE ID: CVE-2008-7259 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:39:56.524Z Description: No description available.
CVE ID: CVE-2008-7260 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:39:56.876Z Description: No description available.
CVE ID: CVE-2008-7261 State: PUBLISHED Published: 2010-09-20T21:00:00Z Last Updated: 2024-09-17T03:17:36.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-010 records DEBUG messages containing user credentials in the log4j.xml file, which might allow local users to obtain sensitive information by reading this file. Additional Analyst Notes: - CVE Program Container: References: - http://download2.boulder.ibm.com/sar/CMA/IMA/00yrk/0/readme-ae351-021.htm
CVE ID: CVE-2008-7262 State: PUBLISHED Published: 2010-10-19T19:00:00Z Last Updated: 2024-09-17T01:36:13.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.3.0 allow remote authenticated users to access arbitrary files and directories via vectors involving a symlink in a pathname to a (1) CWD, (2) DELE, (3) STOR, or (4) RETR command. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY - http://code.google.com/p/pyftpdlib/issues/detail?id=55
CVE ID: CVE-2008-7263 State: PUBLISHED Published: 2010-10-19T19:00:00Z Last Updated: 2024-09-17T01:31:38.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: ftpserver.py in pyftpdlib before 0.5.0 does not delay its response after receiving an invalid login attempt, which makes it easier for remote attackers to obtain access via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/pyftpdlib/source/diff?spec=svn348&r=348&format=side&path=/trunk/pyftpdlib/ftpserver.py - http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY - http://code.google.com/p/pyftpdlib/issues/detail?id=73 - http://code.google.com/p/pyftpdlib/
urce/browse/trunk/HISTORY - http://code.google.com/p/pyftpdlib/issues/detail?id=73 - http://code.google.com/p/pyftpdlib/source/detail?r=348
CVE ID: CVE-2008-7264 State: PUBLISHED Published: 2010-10-19T19:00:00Z Last Updated: 2024-09-17T00:20:55.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ftp_QUIT function in ftpserver.py in pyftpdlib before 0.5.0 allows remote authenticated users to cause a denial of service (file descriptor exhaustion and daemon outage) by sending a QUIT command during a disallowed data-transfer attempt. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/pyftpdlib/source/detail?r=344 - http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY - http://code.google.com/p/pyftpdlib/source/diff?spec=svn344&r=344&format=side&path=/trunk/pyftpdlib/ft
se/trunk/HISTORY - http://code.google.com/p/pyftpdlib/source/diff?spec=svn344&r=344&format=side&path=/trunk/pyftpdlib/ftpserver.py - http://code.google.com/p/pyftpdlib/issues/detail?id=71
CVE ID: CVE-2008-7265 State: PUBLISHED Published: 2010-11-09T20:00:00 Last Updated: 2024-08-07T12:03:35.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pr_data_xfer function in ProFTPD before 1.3.2rc3 allows remote authenticated users to cause a denial of service (CPU consumption) via an ABOR command during a data transfer. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2011/dsa-2191 - http://bugs.proftpd.org/show_bug.cgi?id=3131
CVE ID: CVE-2008-7266 State: PUBLISHED Published: 2010-11-26T19:00:00 Last Updated: 2024-08-07T12:03:36.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in an unspecified Shockwave Flash file in RSA Adaptive Authentication 2.x and 5.7.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://knowledge.rsasecurity.com/scolcms/set.aspx?id=8192 - http://secunia.com/advisories/42332 - http://www.securityfocus.com/archive/1/514869/100/0/threaded - http://www.securitytracker.com/id?1024775 - http://www.vupen.com/english/advisories/2010/3055
CVE ID: CVE-2008-7267 State: PUBLISHED Published: 2010-12-01T16:00:00 Last Updated: 2024-08-07T12:03:35.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in announcements.php in SiteEngine 5.x allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6823 - http://secunia.com/advisories/32404 - http://www.securityfocus.com/archive/1/497747/100/0/threaded - http://www.securityfocus.com/bid/31889
CVE ID: CVE-2008-7268 State: PUBLISHED Published: 2010-12-01T16:00:00 Last Updated: 2024-08-07T12:03:35.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: The phpinfo function in SiteEngine 5.x allows remote attackers to obtain system information by setting the action parameter to php_info in misc.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6823 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46180 - http://secunia.com/advisories/32404 - http://www.securityfocus.com/archive/1/497747/100/0/threaded
CVE ID: CVE-2008-7269 State: PUBLISHED Published: 2010-12-01T16:00:00 Last Updated: 2024-08-07T12:03:36.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in api.php in SiteEngine 5.x allows user-assisted remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the forward parameter in a logout action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6823 - http://www.securityfocus.com/archive/1/497747/100/0/threaded - http://www.securityfocus.com/bid/31888
CVE ID: CVE-2008-7270 State: PUBLISHED Published: 2010-12-06T22:00:00 Last Updated: 2024-08-07T12:03:36.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSL before 0.9.8j, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the use of a disabled cipher via vectors involving sniffing network traffic to discover a session identifier, a different vulnerability than CVE-2010-4180. Additional Analyst Notes: - CVE Program Container: References: - http://cvs.openssl.org/chngview?cn=17489 - http://secunia.com/advisories/42493 - http://www.securityfocus.com/archive/1/5
ttp://cvs.openssl.org/chngview?cn=17489 - http://secunia.com/advisories/42493 - http://www.securityfocus.com/archive/1/522176 - http://ubuntu.com/usn/usn-1029-1 - http://marc.info/?l=bugtraq&m=132077688910227&w=2 - https://bugzilla.redhat.com/show_bug.cgi?id=659462 - http://www.securityfocus.com/archive/1/522176 - http://www.securityfocus.com/bid/45254 - http://www.redhat.com/support/errata/RHSA-2010-0977.html - http://www.redhat.com/support/errata/RHSA-2010-0978.html - http://www.redhat.com/support/errata/RHSA-2011-0896.html - http://marc.info/?l=bugtraq&m=132077688910227&w=2
CVE ID: CVE-2008-7271 State: PUBLISHED Published: 2011-01-13T18:35:00Z Last Updated: 2024-09-16T20:17:41.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE, possibly 3.3.2, allow remote attackers to inject arbitrary web script or HTML via (1) the searchWord parameter to help/advanced/searchView.jsp or (2) the workingSet parameter in an add action to help/advanced/workingSetManager.jsp, a different issue than CVE-2010-4647. Additional Analyst Notes: - CVE Program Container: References: - http://r00tin.blogspot.com/2008/04/eclipse-local-web-server-exploitat
lyst Notes: - CVE Program Container: References: - http://r00tin.blogspot.com/2008/04/eclipse-local-web-server-exploitation.html - https://bugs.eclipse.org/bugs/show_bug.cgi?id=223539
CVE ID: CVE-2008-7272 State: PUBLISHED Published: 2019-11-07T23:40:32 Last Updated: 2024-08-07T12:03:35.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: FireGPG before 0.6 handle user’s passphrase and decrypted cleartext insecurely by writing pre-encrypted cleartext and the user's passphrase to disk which may result in the compromise of secure communication or a users’s private key. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2008-7272 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=514386 - https://vulners.com/securityvulns/SECURITYVULNS:DOC:20757?utm_source=securityvulns&utm_medium=redirect
CVE ID: CVE-2008-7273 State: PUBLISHED Published: 2019-11-18T21:18:15 Last Updated: 2024-08-07T12:03:35.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: A symlink issue exists in Iceweasel-firegpg before 0.6 due to insecure tempfile handling. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2008-7273 - https://www.openwall.com/lists/oss-security/2011/01/14/2 - https://vulners.com/securityvulns/SECURITYVULNS:DOC:20757?utm_source=securityvulns&utm_medium=redirect
CVE ID: CVE-2008-7274 State: PUBLISHED Published: 2011-02-14T23:00:00Z Last Updated: 2024-09-17T01:40:36.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 6.1.0.9, when the JAAS Login functionality is enabled, allows attackers to perform an internal application hashtable login by (1) not providing a password or (2) providing an empty password. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PK54565
CVE ID: CVE-2008-7275 State: PUBLISHED Published: 2011-03-18T16:00:00Z Last Updated: 2024-09-16T17:34:16.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) before 2.3.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) AgentTicketMailbox or (2) CustomerTicketOverView. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.otrs.org/show_bug.cgi?id=3287 - http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807