Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-3902 State: PUBLISHED Published: 2008-09-03T19:00:00 Last Updated: 2024-08-07T09:53:00.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP firmware 68DTT F.0D stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer, aka SSRT080104. Additional Analyst Notes: - CVE Program Container: References: - http://www.ivizsecurity.com/preboot-patch.html - http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf - http://securityreason.com/securityalert/4214 - http://www.securityfocus
ty.com/research/preboot/preboot_whitepaper.pdf - http://securityreason.com/securityalert/4214 - http://www.securityfocus.com/archive/1/495800/100/0/threaded
CVE ID: CVE-2008-3903 State: PUBLISHED Published: 2008-09-04T19:00:00 Last Updated: 2024-08-07T09:53:00.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: Asterisk Open Source 1.2.x before 1.2.32, 1.4.x before 1.4.24.1, and 1.6.0.x before 1.6.0.8; Asterisk Business Edition A.x.x, B.x.x before B.2.5.8, C.1.x.x before C.1.10.5, and C.2.x.x before C.2.3.3; s800i 1.3.x before 1.3.0.2; and Trixbox PBX 2.6.1, when Digest authentication and authalwaysreject are enabled, generates different responses depending on whether a SIP username is valid, which allows remote attackers to enumerate valid usernames. Additional Analyst Notes: - CVE Program Container: References: - http://security.ge
ackers to enumerate valid usernames. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200905-01.xml - http://downloads.asterisk.org/pub/security/AST-2009-003.html - http://www.securityfocus.com/bid/34353 - http://secunia.com/advisories/37677 - http://www.debian.org/security/2009/dsa-1952 - http://misel.com/?p=52 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45059 - http://www.vupen.com/english/advisories/2009/0933 - http://secunia.com/advisories/34982
CVE ID: CVE-2008-3904 State: PUBLISHED Published: 2008-09-04T17:00:00 Last Updated: 2024-08-07T09:53:00.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment (LXDE) allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45137 - http://www.openwall.com/lists/oss-security/2008/09/03/1 - http://www.openwall.com/lists/oss-security/2008/08/30/1 - http://lxde.svn.sourceforge.net/viewvc/lxde?view=rev&sortby=date&revision=845
CVE ID: CVE-2008-3905 State: PUBLISHED Published: 2008-09-04T17:00:00 Last Updated: 2024-08-07T09:53:00.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: resolv.rb in Ruby 1.8.5 and earlier, 1.8.6 before 1.8.6-p287, 1.8.7 before 1.8.7-p72, and 1.9 r18423 and earlier uses sequential transaction IDs and constant source ports for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/09/04/9 - http://secunia.com/advisories/31430 - https://usn.ubuntu.com/651-1/ - http://www.securityfocus.com/bid/3169
08/09/04/9 - http://secunia.com/advisories/31430 - https://usn.ubuntu.com/651-1/ - http://www.securityfocus.com/bid/31699 - http://www.debian.org/security/2008/dsa-1652 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00299.html - http://support.avaya.com/elmodocs2/security/ASA-2008-424.htm - http://www.debian.org/security/2008/dsa-1651 - http://www.redhat.com/support/errata/RHSA-2008-0897.html - http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/ - http://secunia.com/advisories/32219 - http://secunia.com/advisories/32948 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10034 - http://secunia.com/advis
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10034 - http://secunia.com/advisories/32255 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45935 - http://secunia.com/advisories/32371 - http://secunia.com/advisories/32165 - http://security.gentoo.org/glsa/glsa-200812-17.xml - http://secunia.com/advisories/33178 - http://www.vupen.com/english/advisories/2008/2334 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.371754 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00259.html - http://secunia.com/advisories/32256 - http://www.openwall.com/lists/oss-security/2008/09/03/3
CVE ID: CVE-2008-3906 State: PUBLISHED Published: 2008-09-04T17:00:00 Last Updated: 2024-08-07T09:53:00.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the query string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30867 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44740 - http://secunia.com/advisories/36494 - http://www.openwall.com/lists/oss-security/2008/08/27/6 - http://www.vupen.com/english/advisories/2008/2443 - http://www.s
tp://www.openwall.com/lists/oss-security/2008/08/27/6 - http://www.vupen.com/english/advisories/2008/2443 - http://www.securityfocus.com/archive/1/496845/100/0/threaded - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0286 - https://bugzilla.novell.com/show_bug.cgi?id=418620 - https://usn.ubuntu.com/826-1/ - http://secunia.com/advisories/31643 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:210
CVE ID: CVE-2008-3907 State: PUBLISHED Published: 2008-09-04T17:00:00 Last Updated: 2024-08-07T09:53:00.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: The open-in-browser command in newsbeuter before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a feed URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/09/01/4 - http://newsbeuter.wordpress.com/2008/09/01/newsbeuter-11-released-contains-security-fix-please-upgrade/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/44791 - http://secunia.com/advisories/31676 - http://www.newsbeuter.org/downloads/CHANGES - http://secu
/vulnerabilities/44791 - http://secunia.com/advisories/31676 - http://www.newsbeuter.org/downloads/CHANGES - http://security.gentoo.org/glsa/glsa-200809-12.xml - http://secunia.com/advisories/31995 - http://www.securityfocus.com/bid/30964
CVE ID: CVE-2008-3908 State: PUBLISHED Published: 2008-09-04T17:00:00 Last Updated: 2024-08-07T09:53:00.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Princeton WordNet (wn) 3.0 allow context-dependent attackers to execute arbitrary code via (1) a long argument on the command line; a long (2) WNSEARCHDIR, (3) WNHOME, or (4) WNDBVERSION environment variable; or (5) a user-supplied dictionary (aka data file). NOTE: since WordNet itself does not run with special privileges, this issue only crosses privilege boundaries when WordNet is invoked as a third party component. Additional Analyst Notes: - CVE Program Container: References: - http://www.secur
is invoked as a third party component. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30958 - http://secunia.com/advisories/32184 - http://www.ocert.org/analysis/2008-014/wordnet.patch - https://exchange.xforce.ibmcloud.com/vulnerabilities/44851 - http://www.securityfocus.com/archive/1/495883/100/0/threaded - http://www.ocert.org/advisories/ocert-2008-014.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44850 - http://www.ocert.org/analysis/2008-014/analysis.txt - http://securityreason.com/securityalert/4217 - http://www.gentoo.org/security/en/glsa/glsa-200810-01.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/44849 - h
tp://www.gentoo.org/security/en/glsa/glsa-200810-01.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/44849 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44848
CVE ID: CVE-2008-3909 State: PUBLISHED Published: 2008-09-04T17:00:00 Last Updated: 2024-08-07T09:53:00.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and delete or modify data via unspecified requests. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31837 - http://www.djangoproject.com/weblog/2008/sep/02/security/ - http://www.debian.org/security/2008/dsa-1640 - https://www.redhat.com/a
djangoproject.com/weblog/2008/sep/02/security/ - http://www.debian.org/security/2008/dsa-1640 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00091.html - https://bugzilla.redhat.com/show_bug.cgi?id=460966 - http://www.vupen.com/english/advisories/2008/2533 - http://secunia.com/advisories/31961 - http://www.openwall.com/lists/oss-security/2008/09/03/4 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00131.html - http://osvdb.org/47906
CVE ID: CVE-2008-3910 State: PUBLISHED Published: 2008-09-04T17:00:00 Last Updated: 2024-08-07T09:53:00.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: dns2tcp before 0.4.1 does not properly handle negative values in a certain length field in the input argument to the (1) dns_simple_decode or (2) dns_decode function, which allows remote attackers to overwrite a buffer and have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44974 - http://www.openwall.com/lists/oss-security/2008/09/03/5 - http://www.hsc.fr/ressources/outils/dns2tcp/index.html.en - http://www.securityfocus.com/bid/3
s-security/2008/09/03/5 - http://www.hsc.fr/ressources/outils/dns2tcp/index.html.en - http://www.securityfocus.com/bid/31080
CVE ID: CVE-2008-3911 State: PUBLISHED Published: 2008-09-04T17:00:00 Last Updated: 2024-08-07T09:53:00.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: The proc_do_xprt function in net/sunrpc/sysctl.c in the Linux kernel 2.6.26.3 does not check the length of a certain buffer obtained from userspace, which allows local users to overflow a stack-based buffer and have unspecified other impact via a crafted read system call for the /proc/sys/sunrpc/transports file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/09/04/2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=27df6f25ff21807
-security/2008/09/04/2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=27df6f25ff218072e0e879a96beeb398a79cdbc8 - http://lkml.org/lkml/2008/8/30/184 - http://www.securityfocus.com/bid/31937 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45136 - http://lkml.org/lkml/2008/8/30/140
CVE ID: CVE-2008-3912 State: PUBLISHED Published: 2008-09-09T14:00:00 Last Updated: 2024-08-07T10:00:41.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: libclamav in ClamAV before 0.94 allows attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to an out-of-memory condition. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32030 - http://www.securityfocus.com/bid/31051 - http://secunia.com/advisories/31982 - http://www.securityfocus.com/bid/31681 - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1141 - http://www.openwall.com/lists/oss-security/2008/09/04/13 - http://lists.ope
s.clamav.net/bugzilla/show_bug.cgi?id=1141 - http://www.openwall.com/lists/oss-security/2008/09/04/13 - http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html - http://sourceforge.net/project/shownotes.php?group_id=86638&release_id=623661 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:189 - http://www.openwall.com/lists/oss-security/2008/09/03/2 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00348.html - http://secunia.com/advisories/32222 - http://security.gentoo.org/glsa/glsa-200809-18.xml - http://kolab.org/security/kolab-vendor-notice-22.txt - http://www.securitytracker.com/id?1020828 - http://www.debian.org/security/2008/dsa
ecurity/kolab-vendor-notice-22.txt - http://www.securitytracker.com/id?1020828 - http://www.debian.org/security/2008/dsa-1660 - http://secunia.com/advisories/32424 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45056 - http://www.vupen.com/english/advisories/2008/2780 - http://www.vupen.com/english/advisories/2008/2564 - http://secunia.com/advisories/32699 - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216 - http://secunia.com/advisories/31906 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00332.html - http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog
CVE ID: CVE-2008-3913 State: PUBLISHED Published: 2008-09-09T14:00:00 Last Updated: 2024-08-07T10:00:41.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple memory leaks in freshclam/manager.c in ClamAV before 0.94 might allow attackers to cause a denial of service (memory consumption) via unspecified vectors related to "error handling logic". Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32030 - http://www.securityfocus.com/bid/31051 - http://secunia.com/advisories/31982 - http://www.securityfocus.com/bid/31681 - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1141 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45
/31681 - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1141 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45057 - http://www.openwall.com/lists/oss-security/2008/09/04/13 - http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html - http://sourceforge.net/project/shownotes.php?group_id=86638&release_id=623661 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:189 - http://www.openwall.com/lists/oss-security/2008/09/03/2 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00348.html - http://secunia.com/advisories/32222 - http://security.gentoo.org/glsa/glsa-200809-18.xml - http://kolab.org/security/kolab-vendor-notice-22.txt - ht
s/32222 - http://security.gentoo.org/glsa/glsa-200809-18.xml - http://kolab.org/security/kolab-vendor-notice-22.txt - http://www.securitytracker.com/id?1020828 - http://www.debian.org/security/2008/dsa-1660 - http://secunia.com/advisories/32424 - http://www.vupen.com/english/advisories/2008/2780 - http://www.vupen.com/english/advisories/2008/2564 - http://secunia.com/advisories/32699 - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216 - http://secunia.com/advisories/31906 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00332.html - http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog
CVE ID: CVE-2008-3914 State: PUBLISHED Published: 2008-09-09T14:00:00 Last Updated: 2024-08-07T10:00:41.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "error path" in (1) libclamav/others.c and (2) libclamav/sis.c. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32030 - http://www.securityfocus.com/bid/31051 - http://secunia.com/advisories/31982 - http://www.securityfocus.com/bid/31681 - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1141 - http://www.openwall.com/lists/oss-security/2008/09/
/bid/31681 - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1141 - http://www.openwall.com/lists/oss-security/2008/09/04/13 - http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html - http://sourceforge.net/project/shownotes.php?group_id=86638&release_id=623661 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:189 - http://www.openwall.com/lists/oss-security/2008/09/03/2 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00348.html - http://secunia.com/advisories/32222 - http://security.gentoo.org/glsa/glsa-200809-18.xml - http://kolab.org/security/kolab-vendor-notice-22.txt - http://www.securitytracker.com/id?1020828 - http://www.debi
xml - http://kolab.org/security/kolab-vendor-notice-22.txt - http://www.securitytracker.com/id?1020828 - http://www.debian.org/security/2008/dsa-1660 - http://secunia.com/advisories/32424 - http://www.vupen.com/english/advisories/2008/2780 - http://www.vupen.com/english/advisories/2008/2564 - http://secunia.com/advisories/32699 - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216 - http://secunia.com/advisories/31906 - https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00332.html - http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog - https://exchange.xforce.ibmcloud.com/vulnerabilities/45058
CVE ID: CVE-2008-3915 State: PUBLISHED Published: 2008-09-09T14:00:00 Last Updated: 2024-08-07T10:00:41.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in nfsd in the Linux kernel before 2.6.26.4, when NFSv4 is enabled, allows remote attackers to have an unknown impact via vectors related to decoding an NFSv4 acl. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/09/04/4 - http://www.openwall.com/lists/oss-security/2008/09/04/18 - http://secunia.com/advisories/32190 - http://secunia.com/advisories/32393 - http://www.debian.org/security/2008/dsa-1636 - http://secunia.com/advisories/31881 - http://ww
ia.com/advisories/32393 - http://www.debian.org/security/2008/dsa-1636 - http://secunia.com/advisories/31881 - http://www.ubuntu.com/usn/usn-659-1 - http://lkml.org/lkml/2008/9/3/286 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=91b80969ba466ba4b915a4a1d03add8c297add3f - http://www.redhat.com/support/errata/RHSA-2008-0857.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.4 - http://www.securityfocus.com/bid/31133 - https://bugzilla.redhat.com/show_bug.cgi?id=461101 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45055
CVE ID: CVE-2008-3916 State: PUBLISHED Published: 2008-09-04T18:00:00 Last Updated: 2024-08-07T10:00:41.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the strip_escapes function in signal.c in GNU ed before 1.0 allows context-dependent or user-assisted attackers to execute arbitrary code via a long filename. NOTE: since ed itself does not typically run with special privileges, this issue only crosses privilege boundaries when ed is invoked as a third-party component. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2008/3347 - https://oval.cisecurity.or
: - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2008/3347 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10678 - http://www.redhat.com/support/errata/RHSA-2008-0946.html - http://www.vupen.com/english/advisories/2011/0212 - http://secunia.com/advisories/38794 - http://lists.vmware.com/pipermail/security-announce/2010/000082.html - http://www.securityfocus.com/bid/30815 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00873.html - http://support.avaya.com/elmodocs2/security/ASA-2008-461.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/44643 - http://www.vupen.com/english/advisories/2
SA-2008-461.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/44643 - http://www.vupen.com/english/advisories/2008/2642 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00847.html - http://lists.gnu.org/archive/html/bug-ed/2008-08/msg00000.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:200 - http://www.vmware.com/security/advisories/VMSA-2009-0003.html - http://secunia.com/advisories/33005 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://www.securitytracker.com/id?1020734 - http://www.securityfocus.com/archive/1/501298/100/0/threaded - http://secunia.com/advisories/32349 - http://security.gentoo.org/gl
.securityfocus.com/archive/1/501298/100/0/threaded - http://secunia.com/advisories/32349 - http://security.gentoo.org/glsa/glsa-200809-15.xml - http://secunia.com/advisories/32460 - http://www.vupen.com/english/advisories/2010/0528
CVE ID: CVE-2008-3917 State: PUBLISHED Published: 2008-09-04T18:00:00 Last Updated: 2024-08-07T10:00:41.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to inject arbitrary web script or HTML via the field parameter in a search action. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4219 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45064 - http://secunia.com/advisories/31425 - http://www.securityfocus.com/bid/30735 - http://www.securityfocus.com/archive/1/495562/100/0/threaded
CVE ID: CVE-2008-3918 State: PUBLISHED Published: 2008-09-04T18:00:00 Last Updated: 2024-08-07T10:00:41.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands via the field parameter in a search action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45940 - http://secunia.com/advisories/31425
CVE ID: CVE-2008-3919 State: PUBLISHED Published: 2008-09-04T18:00:00 Last Updated: 2024-08-07T10:00:41.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in multiple JustSystems Ichitaro products allows remote attackers to execute arbitrary code via a crafted JTD document, as exploited in the wild in August 2008. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2447 - http://www.securityfocus.com/bid/30828 - http://secunia.com/advisories/31603 - http://www.justsystems.com/jp/info/pd8002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44681 - http://www.securitytracker.com/id?10207
/info/pd8002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44681 - http://www.securitytracker.com/id?1020748
CVE ID: CVE-2008-3920 State: PUBLISHED Published: 2008-09-04T18:00:00 Last Updated: 2024-08-07T10:00:41.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in BitlBee before 1.2.2 allows remote attackers to "recreate" and "hijack" existing accounts via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://bitlbee.org/main.php/changelog.html - https://bugzilla.redhat.com/show_bug.cgi?id=460355 - http://www.securityfocus.com/bid/30858 - http://security.gentoo.org/glsa/glsa-200809-14.xml - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00335.html - http://secunia.com/advisories/31633 - https: