Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
- http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00309.html - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html - http://wiki.rpath.com/Advisories:rPSA-2008-0051 - http://www.debian.org/security/2008/dsa-1484 - http://www.vupen.com/english/advisories/2008/0627/references - http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml - http://secunia.com/advisories/28754 - http://secunia.com/advisories/28758 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:048 - h
edora-package-announce/2008-February/msg00274.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:048 - http://www.mozilla.org/security/announce/2008/mfsa2008-10.html - http://secunia.com/advisories/28839
CVE ID: CVE-2008-0594 State: PUBLISHED Published: 2008-02-09T00:00:00 Last Updated: 2024-08-07T07:54:22.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 2.0.0.12 does not always display a web forgery warning dialog if the entire contents of a web page are in a DIV tag that uses absolute positioning, which makes it easier for remote attackers to conduct phishing attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-576-1 - http://browser.netscape.com/releasenotes/ - http://secunia.com/advisories/28939 - http://www.debian.org/security/2008/dsa-1506 - http://secunia.com/advisories/30620 - http://secunia.com/
isories/28939 - http://www.debian.org/security/2008/dsa-1506 - http://secunia.com/advisories/30620 - http://secunia.com/advisories/28865 - http://www.vupen.com/english/advisories/2008/0453/references - http://secunia.com/advisories/28877 - http://secunia.com/advisories/28879 - http://secunia.com/advisories/29567 - http://secunia.com/advisories/28958 - http://support.novell.com/techcenter/psdb/6251b18e050302ebe7fe74294b55c818.html - http://secunia.com/advisories/30327 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 - http://www.debian.org/security/2008/dsa-1489 - http://www.securityfocus.com/archive/1/488002/100/0/threaded - http://www.securityfocus.com/archive/1/487826/10
a-1489 - http://www.securityfocus.com/archive/1/488002/100/0/threaded - http://www.securityfocus.com/archive/1/487826/100/0/threaded - http://secunia.com/advisories/29086 - http://secunia.com/advisories/28864 - http://www.debian.org/security/2008/dsa-1485 - http://secunia.com/advisories/28924 - http://www.securityfocus.com/bid/27683 - http://www.vupen.com/english/advisories/2008/1793/references - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00006.html - http://www.securitytracker.com/id?1019342 - http://www.mozilla.org/security/announce/2008/mfsa2008-11.html - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html - http://wiki.rpath.com/Adviso
tml - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00381.html - http://wiki.rpath.com/Advisories:rPSA-2008-0051 - http://www.debian.org/security/2008/dsa-1484 - http://www.vupen.com/english/advisories/2008/0627/references - https://bugzilla.mozilla.org/show_bug.cgi?id=408164 - http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00274.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:048
CVE ID: CVE-2008-0595 State: PUBLISHED Published: 2008-02-29T19:00:00 Last Updated: 2024-08-07T07:54:22.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes in allow directives in the security policy only for fully qualified method calls, which allows local users to bypass intended access restrictions via a method call with a NULL interface. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29281 - http://www.vupen.com/english/advisories/2008/0694 - http://www.redhat.com/support/errata/RHSA-2008-0159.html - http://lists.opensuse.org/opensuse
ish/advisories/2008/0694 - http://www.redhat.com/support/errata/RHSA-2008-0159.html - http://lists.opensuse.org/opensuse-updates/2012-10/msg00094.html - http://lists.freedesktop.org/archives/dbus/2008-February/009401.html - http://secunia.com/advisories/29160 - http://secunia.com/advisories/29148 - http://www.j5live.com/2008/02/27/announce-d-bus-1120-conisten-water-released/ - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00893.html - http://secunia.com/advisories/29173 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:054 - http://secunia.com/advisories/29171 - http://www.securityfocus.com/archive/1/489280/100/0/threaded - http://wiki.rpath.com/wiki/Ad
unia.com/advisories/29171 - http://www.securityfocus.com/archive/1/489280/100/0/threaded - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0099 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9353 - http://securitytracker.com/id?1019512 - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html - http://secunia.com/advisories/32281 - http://wiki.rpath.com/Advisories:rPSA-2008-0099 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00911.html - http://www.debian.org/security/2008/dsa-1599 - http://secunia.com/advisories/29323 - https://issues.rpath.com/browse/RPL-2282 - http://secunia.com/advisories/30869 - htt
tp://secunia.com/advisories/29323 - https://issues.rpath.com/browse/RPL-2282 - http://secunia.com/advisories/30869 - http://www.securityfocus.com/bid/28023 - http://www.ubuntu.com/usn/usn-653-1
CVE ID: CVE-2008-0596 State: PUBLISHED Published: 2008-02-26T00:00:00 Last Updated: 2024-08-07T07:54:22.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service (memory consumption and daemon crash) via a large number of requests to add and remove shared printers. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29251 - http://secunia.com/advisories/29189 - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00000.html - http://www.redhat.com/support/errata/RHSA-2008-0153.html - http://www.vupen.com/english/advis
ce/2008-03/msg00000.html - http://www.redhat.com/support/errata/RHSA-2008-0153.html - http://www.vupen.com/english/advisories/2008/0924/references - http://wiki.rpath.com/Advisories:rPSA-2008-0091 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0091 - http://secunia.com/advisories/29420 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:050 - http://www.securityfocus.com/bid/27988 - http://www.securityfocus.com/archive/1/488966/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10857 - http://support.avaya.com/elmodocs2/security/ASA-2008-084.htm - http:
ch/definition/oval%3Aorg.mitre.oval%3Adef%3A10857 - http://support.avaya.com/elmodocs2/security/ASA-2008-084.htm - http://docs.info.apple.com/article.html?artnum=307562 - http://secunia.com/advisories/29087 - http://support.avaya.com/elmodocs2/security/ASA-2008-098.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/40842 - http://www.redhat.com/support/errata/RHSA-2008-0161.html - https://issues.rpath.com/browse/RPL-2283 - http://www.securitytracker.com/id?1019497
CVE ID: CVE-2008-0597 State: PUBLISHED Published: 2008-02-26T00:00:00 Last Updated: 2024-08-07T07:54:21.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service (crash) via crafted IPP packets. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29251 - http://secunia.com/advisories/29189 - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00000.html - http://www.redhat.com/support/errata/RHSA-2008-0153.html - http://wiki.rpath.com/Advisories:rPSA-2008-0091 - http://wiki.rpath.com/wiki/Advisories:
rt/errata/RHSA-2008-0153.html - http://wiki.rpath.com/Advisories:rPSA-2008-0091 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0091 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9492 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:050 - http://www.securityfocus.com/bid/27988 - http://www.securityfocus.com/archive/1/488966/100/0/threaded - http://support.avaya.com/elmodocs2/security/ASA-2008-084.htm - http://secunia.com/advisories/29087 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40845 - http://support.avaya.com/elmodocs2/security/ASA-2008-098.htm - http://www.redhat.com/support/errata/RHSA-2008-0161.html - https://issues.
aya.com/elmodocs2/security/ASA-2008-098.htm - http://www.redhat.com/support/errata/RHSA-2008-0161.html - https://issues.rpath.com/browse/RPL-2283 - http://www.securitytracker.com/id?1019497
CVE ID: CVE-2008-0598 State: PUBLISHED Published: 2008-06-30T22:00:00 Last Updated: 2024-08-07T07:54:22.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the 32-bit and 64-bit emulation in the Linux kernel 2.6.9, 2.6.18, and probably other versions allows local users to read uninitialized memory via unknown vectors involving a crafted binary. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html - http://www.debian.org/security/2008/dsa-1630 - http://www.securityfocus.com/bid/29942 - http://www.redhat.com/support/errata/RHSA-2008-0519.html - https://exchange.xforce
p://www.securityfocus.com/bid/29942 - http://www.redhat.com/support/errata/RHSA-2008-0519.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43554 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10721 - http://secunia.com/advisories/30849 - http://secunia.com/advisories/32104 - http://secunia.com/advisories/31551 - http://www.redhat.com/support/errata/RHSA-2009-0009.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6201 - http://secunia.com/advisories/30850 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html - http://secunia.com/advisories/32103 - http://secunia.com/advisori
org/opensuse-security-announce/2008-10/msg00001.html - http://secunia.com/advisories/32103 - http://secunia.com/advisories/33586 - http://www.securitytracker.com/id?1020367 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:220 - http://secunia.com/advisories/31107 - http://www.redhat.com/support/errata/RHSA-2008-0973.html - http://www.ubuntu.com/usn/usn-625-1 - http://rhn.redhat.com/errata/RHSA-2008-0508.html - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html - http://secunia.com/advisories/33201 - https://bugzilla.redhat.com/show_bug.cgi?id=433938
CVE ID: CVE-2008-0599 State: PUBLISHED Published: 2008-05-05T17:00:00 Last Updated: 2024-08-07T07:54:21.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: The init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly consider operator precedence when calculating the length of PATH_TRANSLATED, which might allow remote attackers to execute arbitrary code via a crafted URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1412 - http://www.securityfocus.com/archive/1/492535/100/0/threaded - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00779.html - http://cvs.php.net/vi
100/0/threaded - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00779.html - http://cvs.php.net/viewvc.cgi/php-src/sapi/cgi/cgi_main.c?r1=1.267.2.15.2.50.2.12&r2=1.267.2.15.2.50.2.13&diff_format=u - http://secunia.com/advisories/32746 - http://secunia.com/advisories/30616 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01476437 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://secunia.com/advisories/30083 - http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html - http://security.gentoo.org/glsa/glsa-200811-05.xml - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - https://www.redhat.com/archives/fedora-package-an
sa-200811-05.xml - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00773.html - http://www.securityfocus.com/bid/29009 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5510 - http://secunia.com/advisories/30828 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:128 - http://www.vupen.com/english/advisories/2008/2268 - http://secunia.com/advisories/30345 - http://www.ubuntu.com/usn/usn-628-1 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42137 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0176 - http://www.o
exchange.xforce.ibmcloud.com/vulnerabilities/42137 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0176 - http://www.openwall.com/lists/oss-security/2008/05/02/2 - http://www.php.net/ChangeLog-5.php - http://secunia.com/advisories/31200 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.488951 - http://secunia.com/advisories/30757 - http://secunia.com/advisories/31326 - http://www.securitytracker.com/id?1019958 - http://www.kb.cert.org/vuls/id/147027 - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - https://issues.rpath.com/browse/RPL-2503 - http://www.redhat.com/support/errata/RHSA-2008-0505.html - http://h20000.www2.hp.com/bizsupport/TechS
/browse/RPL-2503 - http://www.redhat.com/support/errata/RHSA-2008-0505.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01476437 - http://www.vupen.com/english/advisories/2008/1810/references - http://www.mandriva.com/security/advisories?name=MDVSA-2008:127 - http://secunia.com/advisories/35650 - http://secunia.com/advisories/30048
CVE ID: CVE-2008-0600 State: PUBLISHED Published: 2008-02-12T20:00:00 Last Updated: 2024-08-07T07:54:21.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vmsplice_to_pipe function in Linux kernel 2.6.17 through 2.6.24.1 does not validate a certain userspace pointer before dereference, which allows local users to gain root privileges via crafted arguments in a vmsplice system call, a different vulnerability than CVE-2008-0009 and CVE-2008-0010. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=linux-kernel&m=120263652322197&w=2 - http://www.securityfocus.com/bid/27801 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:043 - https
7&w=2 - http://www.securityfocus.com/bid/27801 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:043 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11358 - http://secunia.com/advisories/28858 - http://www.debian.org/security/2008/dsa-1494 - https://bugzilla.redhat.com/show_bug.cgi?id=432517 - http://www.ubuntu.com/usn/usn-577-1 - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00005.html - http://secunia.com/advisories/28875 - http://secunia.com/advisories/28933 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00485.html - http://www.vupen.com/english/advisories/2008/0487/references - http://marc.
ckage-announce/2008-February/msg00485.html - http://www.vupen.com/english/advisories/2008/0487/references - http://marc.info/?l=linux-kernel&m=120266353621139&w=2 - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00002.html - http://secunia.com/advisories/28889 - http://secunia.com/advisories/28937 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00270.html - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00254.html - https://www.exploit-db.com/exploits/5092 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0052 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:044 - http://secunia.com/advisories/29245 - http://m
-0052 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:044 - http://secunia.com/advisories/29245 - http://marc.info/?l=linux-kernel&m=120264520431307&w=2 - http://secunia.com/advisories/28896 - http://secunia.com/advisories/28925 - http://secunia.com/advisories/28835 - https://issues.rpath.com/browse/RPL-2237 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00255.html - http://www.securityfocus.com/archive/1/488009/100/0/threaded - http://wiki.rpath.com/Advisories:rPSA-2008-0052 - http://secunia.com/advisories/28912 - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html - http://www.redhat.com/support/errata/RHSA-2008-0129.html - h
suse.org/opensuse-security-announce/2008-06/msg00006.html - http://www.redhat.com/support/errata/RHSA-2008-0129.html - http://marc.info/?l=linux-kernel&m=120266328220808&w=2 - http://securitytracker.com/id?1019393 - http://secunia.com/advisories/30818 - https://bugzilla.redhat.com/show_bug.cgi?id=432229 - http://www.securityfocus.com/bid/27704 - http://marc.info/?l=linux-kernel&m=120264773202422&w=2
CVE ID: CVE-2008-0601 State: PUBLISHED Published: 2008-02-06T11:00:00 Last Updated: 2024-08-07T07:54:21.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in All Club CMS (ACCMS) 0.0.1f and earlier allows remote attackers to execute arbitrary SQL commands via the name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5064 - http://www.securityfocus.com/bid/27624
CVE ID: CVE-2008-0602 State: PUBLISHED Published: 2008-02-06T11:00:00 Last Updated: 2024-08-07T07:54:22.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in All Club CMS (ACCMS) 0.0.1f and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the class_name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5061
CVE ID: CVE-2008-0603 State: PUBLISHED Published: 2008-02-06T11:00:00 Last Updated: 2024-08-07T07:54:22.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the amazOOP Awesom! (com_awesom) 0.3.2component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter in a viewlist task. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5058 - http://www.securityfocus.com/bid/27607
CVE ID: CVE-2008-0604 State: PUBLISHED Published: 2008-02-06T11:00:00Z Last Updated: 2024-09-16T18:48:24.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LDAP authentication feature in XLight FTP Server before 2.83, when used with some unspecified LDAP servers, does not check for blank passwords, which allows remote attackers to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://www.xlightftpd.com/whatsnew.htm - http://www.securityfocus.com/bid/27602 - http://secunia.com/advisories/28755
CVE ID: CVE-2008-0605 State: PUBLISHED Published: 2008-02-06T11:00:00 Last Updated: 2024-08-07T07:54:21.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in AstroSoft HelpDesk before 1.95.228 allow remote attackers to inject arbitrary web script or HTML via the (1) txtSearch parameter to operator/article/article_search_results.asp and the (2) Attach_Id parameter to operator/article/article_attachment.asp. NOTE: for vector 2, the XSS occurs in a forced SQL error message. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3612 - http://www.securityfocus.com/bid/27610 - http:/
Container: References: - http://securityreason.com/securityalert/3612 - http://www.securityfocus.com/bid/27610 - http://www.securityfocus.com/archive/1/488107/100/0/threaded - http://www.securityfocus.com/archive/1/487487/100/0/threaded
CVE ID: CVE-2008-0606 State: PUBLISHED Published: 2008-02-06T11:00:00 Last Updated: 2024-08-07T07:54:22.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the Shambo2 (com_shambo2) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27609 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40238 - https://www.exploit-db.com/exploits/5059
CVE ID: CVE-2008-0607 State: PUBLISHED Published: 2008-02-06T11:00:00 Last Updated: 2024-08-07T07:54:22.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the Sigsiu Online Business Index 2 (SOBI2, com_sobi2) 2.5.3 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5038 - http://www.securityfocus.com/bid/27617
CVE ID: CVE-2008-0608 State: PUBLISHED Published: 2008-02-06T11:00:00 Last Updated: 2024-08-07T07:54:23.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Logging Server (ftplogsrv.exe) 7.9.14.0 and earlier in IPSwitch WS_FTP 6.1 allows remote attackers to cause a denial of service (loss of responsiveness) via a large number of large packets to port 5151/udp, which causes the listening socket to terminate and prevents log commands from being recorded, a different vulnerability than CVE-2007-3823. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0408 - http://aluigi.altervista.org/adv/ftplogsrvz-adv.txt - http://www
: - http://www.vupen.com/english/advisories/2008/0408 - http://aluigi.altervista.org/adv/ftplogsrvz-adv.txt - http://www.securityfocus.com/archive/1/487506/100/0/threaded - http://www.securityfocus.com/bid/27612 - http://secunia.com/advisories/28761
CVE ID: CVE-2008-0609 State: PUBLISHED Published: 2008-02-06T11:00:00 Last Updated: 2024-08-07T07:54:22.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in DivideConcept VHD Web Pack 2.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3613 - http://www.securityfocus.com/bid/27621 - http://secunia.com/advisories/28712 - https://www.exploit-db.com/exploits/5060 - http://www.securityfocus.com/archive/1/487485/100/0/threaded
CVE ID: CVE-2008-0610 State: PUBLISHED Published: 2008-02-06T11:00:00 Last Updated: 2024-08-07T07:54:22.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the ClientConnection::NegotiateProtocolVersion function in vncviewer/ClientConnection.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before 01252008, when in LISTENING mode or when using the DSM plugin, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a modified size value. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=571174&group_id=63887 - http://www.securityfocus.com/bid/27561 -