Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-1707 State: PUBLISHED Published: 2008-04-09T19:00:00 Last Updated: 2024-08-07T08:32:01.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM solidDB 06.00.1018 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a packet with an 0x11 value in a certain "type" field. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.org/poc/soliduro.zip - http://secunia.com/advisories/29512 - http://securitytracker.com/id?1019721 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41487 - http://www.securityfocus.com/bid/28468 - http://www.securityfocus.com/archive/1/490129/100/0/threade
erabilities/41487 - http://www.securityfocus.com/bid/28468 - http://www.securityfocus.com/archive/1/490129/100/0/threaded - http://aluigi.altervista.org/adv/soliduro-adv.txt - http://www.vupen.com/english/advisories/2008/1038
CVE ID: CVE-2008-1708 State: PUBLISHED Published: 2008-04-09T19:00:00 Last Updated: 2024-08-07T08:32:01.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM solidDB 06.00.1018 and earlier does not validate a certain field that specifies an amount of memory to allocate, which allows remote attackers to cause a denial of service (daemon exit) via a packet with a large value in this field. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.org/poc/soliduro.zip - http://secunia.com/advisories/29512 - http://securitytracker.com/id?1019721 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41488 - http://www.securityfocus.com/bid/28468 - http://www.se
21 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41488 - http://www.securityfocus.com/bid/28468 - http://www.securityfocus.com/archive/1/490129/100/0/threaded - http://aluigi.altervista.org/adv/soliduro-adv.txt - http://www.vupen.com/english/advisories/2008/1038
CVE ID: CVE-2008-1709 State: PUBLISHED Published: 2008-04-09T19:00:00 Last Updated: 2024-08-07T08:32:01.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a Studio Solution (.SLN) file with a long malformed Project line beginning with a 'Project("{}") =' sequence, probably a different vector than CVE-2008-0250. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5349 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41826
CVE ID: CVE-2008-1710 State: PUBLISHED Published: 2008-04-09T19:00:00 Last Updated: 2024-08-07T08:32:01.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in chnfsmnt in IBM AIX 6.1 allows local users to gain privileges via a modified PATH environment variable. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5911 - http://secunia.com/advisories/29518 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ23556 - http://securitytracker.com/id?1019693 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ20391 - http://www.vupen.com/english/adv
itytracker.com/id?1019693 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ20391 - http://www.vupen.com/english/advisories/2008/0983 - http://www-1.ibm.com/support/docview.wss?uid=isg1IZ18296 - http://www.securityfocus.com/bid/28429
CVE ID: CVE-2008-1711 State: PUBLISHED Published: 2008-04-09T19:00:00 Last Updated: 2024-08-07T08:32:01.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0 stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29667 - https://www.exploit-db.com/exploits/5364 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41820
CVE ID: CVE-2008-1712 State: PUBLISHED Published: 2008-04-09T21:00:00 Last Updated: 2024-08-07T08:32:01.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/functions_weblog.php in mxBB mx_blogs 2.0.0 beta allows remote attackers to execute arbitrary PHP code via a URL in the mx_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28515 - https://www.exploit-db.com/exploits/5323 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41819
CVE ID: CVE-2008-1713 State: PUBLISHED Published: 2008-04-09T21:00:00 Last Updated: 2024-08-07T08:32:01.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: MailServer.exe in NoticeWare Email Server 4.6.1.0 allows remote attackers to cause a denial of service (application crash) via a long string to IMAP port (143/tcp). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29629 - http://www.securityfocus.com/bid/28559 - https://www.exploit-db.com/exploits/5341 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41581
CVE ID: CVE-2008-1714 State: PUBLISHED Published: 2008-04-09T21:00:00 Last Updated: 2024-08-07T08:32:01.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in show.php in FaScript FaPhoto 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5334 - http://secunia.com/advisories/29628 - http://www.securityfocus.com/bid/28545 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41557
CVE ID: CVE-2008-1715 State: PUBLISHED Published: 2008-04-09T21:00:00 Last Updated: 2024-08-07T08:32:01.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in content/user.php in AuraCMS 2.2.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the country parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5319 - http://www.securityfocus.com/bid/28499 - http://secunia.com/advisories/29593 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41529
CVE ID: CVE-2008-1716 State: PUBLISHED Published: 2008-04-09T21:00:00 Last Updated: 2024-08-07T08:32:01.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WoltLab Community Framework (WCF) 1.0.6 in WoltLab Burning Board 3.0.5 allows remote attackers to inject arbitrary web script or HTML via the (1) page and (2) form parameters, which are not properly handled when they are reflected back in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29719 - http://www.securityfocus.com/archive/1/490782/100/0/threaded - http://www.securityfocus.com/bid/28678 - http://archives.neohapsi
ww.securityfocus.com/archive/1/490782/100/0/threaded - http://www.securityfocus.com/bid/28678 - http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0161.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41714 - http://www.securityfocus.com/archive/1/490560/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2008-April/061271.html
CVE ID: CVE-2008-1717 State: PUBLISHED Published: 2008-04-09T21:00:00 Last Updated: 2024-08-07T08:32:01.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: WoltLab Community Framework (WCF) 1.0.6 in WoltLab Burning Board 3.0.5 allows remote attackers to obtain the full path via invalid (1) page and (2) form parameters, which leaks the path from an exception handler when a valid class cannot be found. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29719 - http://www.securityfocus.com/archive/1/490782/100/0/threaded - http://www.securityfocus.com/bid/28678 - http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0161.html - htt
- http://www.securityfocus.com/bid/28678 - http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0161.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41713 - http://www.securityfocus.com/archive/1/490560/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2008-April/061271.html
CVE ID: CVE-2008-1718 State: PUBLISHED Published: 2008-04-10T18:00:00 Last Updated: 2024-08-07T08:32:01.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in mimesr.dll in Autonomy (formerly Verity) KeyView, as used in IBM Lotus Notes before 8.0, might allow user-assisted remote attackers to execute arbitrary code via an e-mail message with a crafted Text mail (MIME) attachment. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41856 - http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21298453
CVE ID: CVE-2008-1719 State: PUBLISHED Published: 2008-04-10T19:00:00 Last Updated: 2024-08-07T08:32:01.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Nuke ET 3.2 and 3.4 allow remote attackers to perform actions as administrators, as demonstrated by inserting an XSS sequence into a document. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29651 - http://www.mrzayas.es/2008/04/07/xsrf-en-nuke-et-3x/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/41851
CVE ID: CVE-2008-1720 State: PUBLISHED Published: 2008-04-10T19:00:00 Last Updated: 2024-08-07T08:32:01.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in rsync 2.6.9 to 3.0.1, with extended attribute (xattr) support enabled, might allow remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29856 - http://secunia.com/advisories/29788 - http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html - http://security.gentoo.org/glsa/glsa-200804-16.xml - http://www.mail-archive.com/rsync-announce%40lists.samba.org/msg00057.html - https://usn.ubuntu
lsa/glsa-200804-16.xml - http://www.mail-archive.com/rsync-announce%40lists.samba.org/msg00057.html - https://usn.ubuntu.com/600-1/ - http://secunia.com/advisories/29781 - http://sourceforge.net/project/shownotes.php?release_id=591462&group_id=69227 - http://www.vupen.com/english/advisories/2008/1215/references - http://secunia.com/advisories/29770 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00237.html - http://rsync.samba.org/ftp/rsync/security/rsync-3.0.1-xattr-alloc.diff - http://samba.anu.edu.au/rsync/security.html#s3_0_2 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:084 - http://www.vupen.com/english/advisories/2008/1191/references - http://ww
a.com/security/advisories?name=MDVSA-2008:084 - http://www.vupen.com/english/advisories/2008/1191/references - http://www.securityfocus.com/bid/28726 - http://www.securitytracker.com/id?1019835 - http://secunia.com/advisories/29861 - http://secunia.com/advisories/29668 - http://www.debian.org/security/2008/dsa-1545 - http://marc.info/?l=bugtraq&m=125017764422557&w=2 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00247.html - http://secunia.com/advisories/29777 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41766 - http://marc.info/?l=bugtraq&m=125017764422557&w=2 - http://www.osvdb.org/44369 - http://www.osvdb.org/44368
CVE ID: CVE-2008-1721 State: PUBLISHED Published: 2008-04-10T19:00:00 Last Updated: 2024-08-07T08:32:01.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200807-01.xml - http://www.vupen.com/english/advisories/2008/1229/references - http://secunia.com/advisories/30872 - http://www.securityfocus.com/bid/28715 - http://secunia.com/advisories/38675 - ht
http://secunia.com/advisories/30872 - http://www.securityfocus.com/bid/28715 - http://secunia.com/advisories/38675 - http://secunia.com/advisories/33937 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:085 - http://secunia.com/advisories/37471 - http://secunia.com/advisories/29955 - http://www.debian.org/security/2008/dsa-1551 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://support.apple.com/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://secunia.com/advisories/31358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41748 - http://www.ubuntu.com/usn/usn-632-1 - http://www.securitytracker.com/id?1019823
ce.ibmcloud.com/vulnerabilities/41748 - http://www.ubuntu.com/usn/usn-632-1 - http://www.securitytracker.com/id?1019823 - http://bugs.python.org/issue2586 - https://issues.rpath.com/browse/RPL-2444 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://securityreason.com/securityalert/3802 - http://secunia.com/advisories/31365 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8249 - http://support.avaya.com/css/P8/documents/100074697 - http://secunia.com/advisories/31255 - http://www.securityfocus.com/archive/1/490690/100/0/threaded - http://www.debian.org/security/2008/dsa-1620 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0149 - h
100/0/threaded - http://www.debian.org/security/2008/dsa-1620 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0149 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9407 - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289 - http://www.vupen.com/english/advisories/2009/3316 - http://secunia.com/advisories/29889 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8494
CVE ID: CVE-2008-1722 State: PUBLISHED Published: 2008-04-10T19:00:00 Last Updated: 2024-08-07T08:32:01.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in (1) filter/image-png.c and (2) filter/image-zoom.c in CUPS 1.3 allow attackers to cause a denial of service (crash) and trigger memory corruption, as demonstrated via a crafted PNG image. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31324 - http://secunia.com/advisories/30553 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41832 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8768 - http://secunia.com
41832 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8768 - http://secunia.com/advisories/32292 - http://secunia.com/advisories/30190 - http://secunia.com/advisories/29809 - http://www.ubuntu.com/usn/usn-606-1 - http://www.securityfocus.com/bid/28781 - http://www.osvdb.org/44398 - http://secunia.com/advisories/30078 - http://secunia.com/advisories/29902 - https://rhn.redhat.com/errata/RHSA-2008-0498.html - http://www.debian.org/security/2008/dsa-1625 - http://www.securitytracker.com/id?1019854 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00068.html - https://usn.ubuntu.com/656-1/ - http://www.mandriva.com/security/advisories?
a-package-announce/2008-May/msg00068.html - https://usn.ubuntu.com/656-1/ - http://www.mandriva.com/security/advisories?name=MDVSA-2008:170 - http://www.gentoo.org/security/en/glsa/glsa-200804-23.xml - http://www.kb.cert.org/vuls/id/218395 - https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00081.html - http://www.cups.org/str.php?L2790 - http://www.vupen.com/english/advisories/2008/1226/references - http://www.novell.com/linux/security/advisories/2008_13_sr.html - http://secunia.com/advisories/30717
CVE ID: CVE-2008-1724 State: PUBLISHED Published: 2008-04-11T19:00:00 Last Updated: 2024-08-07T08:32:01.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the IActiveXTransfer.FileTransfer method in the SecureTransport FileTransfer ActiveX control in vcst_en.dll 1.0.0.5 in Tumbleweed SecureTransport Server before 4.6.1 Hotfix 20 allows remote attackers to execute arbitrary code via a long remoteFile parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/490536/100/0/threaded - http://secunia.com/advisories/29717 - http://securityreason.com/securityalert/3806 - https://exchange.xforce.ibmcl
ded - http://secunia.com/advisories/29717 - http://securityreason.com/securityalert/3806 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41692 - http://www.vupen.com/english/advisories/2008/1165/references - https://www.exploit-db.com/exploits/5398 - http://www.aushack.com/200708-tumbleweed.txt - http://www.securityfocus.com/bid/28662
CVE ID: CVE-2008-1725 State: PUBLISHED Published: 2008-04-11T19:00:00 Last Updated: 2024-08-07T08:32:01.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx in IBiz E-Banking Integrator (formerly IBiz OFX Integrator) 2.0.2932 exposes the unsafe WriteOFXDataFile method, which allows remote attackers to overwrite arbitrary files via a full pathname in the argument. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29758 - http://www.securityfocus.com/bid/28700 - https://exchange.xforce.ibmcloud.com/vulnerabil
/secunia.com/advisories/29758 - http://www.securityfocus.com/bid/28700 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41752 - https://www.exploit-db.com/exploits/5416 - http://www.osvdb.org/44393
CVE ID: CVE-2008-1726 State: PUBLISHED Published: 2008-04-11T19:00:00 Last Updated: 2024-08-07T08:32:01.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in KnowledgeQuest 2.6, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) kqid parameter to (a) articletext.php and (b) articletextonly.php and the (2) username parameter to (c) logincheck.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28713 - http://www.osvdb.org/44256 - http://www.osvdb.org/44255 - https://www.exploit-db.com/exploits/5421 - http://www.securityfocus.com/bid/28716
/44256 - http://www.osvdb.org/44255 - https://www.exploit-db.com/exploits/5421 - http://www.securityfocus.com/bid/28716 - http://secunia.com/advisories/29716 - http://www.osvdb.org/44254 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41746
CVE ID: CVE-2008-1727 State: PUBLISHED Published: 2008-04-11T19:00:00 Last Updated: 2024-08-07T08:32:01.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: KnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php, which allows remote attackers to create arbitrary admin accounts. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/44257 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41747 - http://secunia.com/advisories/29716 - https://www.exploit-db.com/exploits/5418
CVE ID: CVE-2008-1728 State: PUBLISHED Published: 2008-04-11T19:00:00 Last Updated: 2024-08-07T08:32:01.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: ConnectionManagerImpl.java in Ignite Realtime Openfire 3.4.5 allows remote authenticated users to cause a denial of service (daemon outage) by triggering large outgoing queues without reading messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1188/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/41744 - http://www.igniterealtime.org/builds/openfire/docs/latest/changelog.html - http://security.gentoo.org/glsa/glsa-200804-26.xml - http://www.se
time.org/builds/openfire/docs/latest/changelog.html - http://security.gentoo.org/glsa/glsa-200804-26.xml - http://www.securityfocus.com/bid/28722 - http://secunia.com/advisories/29751 - http://www.igniterealtime.org/fisheye/changelog/svn-org?cs=10031 - http://www.openwall.com/lists/oss-security/2008/04/10/7 - http://www.igniterealtime.org/issues/browse/JM-1289 - http://secunia.com/advisories/29901
CVE ID: CVE-2008-1729 State: PUBLISHED Published: 2008-04-11T19:00:00 Last Updated: 2024-08-07T08:32:01.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: The menu system in Drupal 6 before 6.2 has incorrect menu settings, which allows remote attackers to (1) edit the profile pages of arbitrary users, and obtain sensitive information from (2) tracker and (3) blog pages, related to a missing check for the "access content" permission; and (4) allows remote authenticated users, with administration page view access, to edit content types. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29762 - http://www.osvdb.org/44270 - http://drupal.
- CVE Program Container: References: - http://secunia.com/advisories/29762 - http://www.osvdb.org/44270 - http://drupal.org/node/244637 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41755 - http://www.securityfocus.com/bid/28714 - http://www.vupen.com/english/advisories/2008/1185/references
CVE ID: CVE-2008-1730 State: PUBLISHED Published: 2008-04-11T19:00:00 Last Updated: 2024-08-07T08:32:01.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download.html in ARWScripts Gallery Script Lite (aka gallery-script-lite or Free Photo Gallery Site Script), as of 20080411, allows remote attackers to read arbitrary local files via directory traversal sequences in the path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5419 - http://www.osvdb.org/44253 - http://secunia.com/advisories/29746 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41742 - http://www.securityfocu
tp://secunia.com/advisories/29746 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41742 - http://www.securityfocus.com/bid/28718
CVE ID: CVE-2008-1731 State: PUBLISHED Published: 2008-04-11T19:00:00 Last Updated: 2024-08-07T08:32:01.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Simple Access module for Drupal 5.x through 5.x-1.2-2 does not properly handle the privacy information for nodes, which might allow remote attackers to bypass intended access restrictions, and read or modify nodes, in opportunistic circumstances related to interaction between Simple Access and (1) Node clone or (2) Project issue tracking. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1184 - http://www.osvdb.org/44271 - http://www.securityfocus.com/bid/28720 -
tp://www.vupen.com/english/advisories/2008/1184 - http://www.osvdb.org/44271 - http://www.securityfocus.com/bid/28720 - http://drupal.org/node/244560 - http://secunia.com/advisories/29772 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41756
CVE ID: CVE-2008-1732 State: PUBLISHED Published: 2008-04-11T19:00:00 Last Updated: 2024-08-07T08:32:01.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in showpredictionsformatch.php in Prediction Football 1.x allows remote attackers to execute arbitrary SQL commands via the matchid parameter in a dupa action. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1160/references - https://www.exploit-db.com/exploits/5410 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41728 - http://www.securityfocus.com/bid/28704