Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-4778 State: PUBLISHED Published: 2008-10-29T14:00:00 Last Updated: 2024-08-07T10:31:27.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the gallery module in Koobi CMS 4.3.0 allows remote attackers to execute arbitrary SQL commands via the galid parameter in a showimages action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46254 - https://www.exploit-db.com/exploits/5414 - http://www.securityfocus.com/archive/1/490886/100/0/threaded - https://www.exploit-db.com/exploits/5447 - http://securityreason.com/securityalert/4525
CVE ID: CVE-2008-4779 State: PUBLISHED Published: 2008-10-29T14:00:00 Last Updated: 2024-08-07T10:31:27.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service (crash) or execute arbitrary code via a long filename in a .zip file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31913 - http://secunia.com/advisories/32411 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46120 - http://securityreason.com/securityalert/4528 - https://www.exploit-db.com/exploits/6831 - http://www.vupen.com/english/advisories/2008/2918
CVE ID: CVE-2008-4780 State: PUBLISHED Published: 2008-10-29T14:00:00 Last Updated: 2024-08-07T10:31:27.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin/centre.php in MyForum 1.3, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the padmin parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46155 - http://securityreason.com/securityalert/4522 - https://www.exploit-db.com/exploits/6846 - http://www.securityfocus.com/bid/31934 - http://www.vupen.com/english/advisories/200
/www.exploit-db.com/exploits/6846 - http://www.securityfocus.com/bid/31934 - http://www.vupen.com/english/advisories/2008/2938
CVE ID: CVE-2008-4781 State: PUBLISHED Published: 2008-10-29T14:00:00 Last Updated: 2024-08-07T10:31:27.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in update.php in MyKtools 2.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the langage parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6850 - http://secunia.com/advisories/32432 - http://securityreason.com/securityalert/4526 - http://www.securityfocus.com/bid/31942 - http://www.vupen.com/english/advisories/2008/2941
CVE ID: CVE-2008-4782 State: PUBLISHED Published: 2008-10-29T14:00:00 Last Updated: 2024-08-07T10:31:27.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in public/code/cp_polls_results.php in All In One Control Panel (AIOCP) 1.4 allows remote attackers to execute arbitrary SQL commands via the poll_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6854 - http://secunia.com/advisories/32431 - http://securityreason.com/securityalert/4518
CVE ID: CVE-2008-4783 State: PUBLISHED Published: 2008-10-29T14:00:00 Last Updated: 2024-08-07T10:31:27.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: tlAds 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the tlAds_login cookie to "admin." Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6848 - http://securityreason.com/securityalert/4529 - http://www.securityfocus.com/bid/31939 - http://secunia.com/advisories/32427
CVE ID: CVE-2008-4784 State: PUBLISHED Published: 2008-10-29T14:00:00 Last Updated: 2024-08-07T10:31:27.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: aflog 1.01 allows remote attackers to bypass authentication and gain administrative access by setting the aflog_auth_a cookie to "A" or "O" in (1) edit_delete.php, (2) edit_cat.php, (3) edit_lock.php, and (4) edit_form.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4524 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46083 - http://www.securityfocus.com/bid/31894 - https://www.exploit-db.com/exploits/6818
CVE ID: CVE-2008-4785 State: PUBLISHED Published: 2008-10-29T14:00:00 Last Updated: 2024-08-07T10:31:27.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in newuser.php in the alternate_profiles plugin, possibly 0.2, for e107 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31940 - http://www.vupen.com/english/advisories/2008/2940 - http://securityreason.com/securityalert/4530 - https://www.exploit-db.com/exploits/6849
CVE ID: CVE-2008-4786 State: PUBLISHED Published: 2008-10-29T14:00:00 Last Updated: 2024-08-07T10:31:27.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in easyshop.php in the EasyShop plugin for e107 allows remote attackers to execute arbitrary SQL commands via the category_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46147 - http://www.securityfocus.com/bid/31948 - http://securityreason.com/securityalert/4531 - https://www.exploit-db.com/exploits/6852
CVE ID: CVE-2008-4787 State: PUBLISHED Published: 2008-10-29T15:00:00 Last Updated: 2024-08-07T10:31:27.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Visual truncation vulnerability in Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar via a URL with a hostname containing many &nbsp; (Non-Blocking Space character) sequences, which are rendered as whitespace, aka MSRC ticket MSRC7899, a related issue to CVE-2003-1025. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31960 - http://www.securityfocus.com/archive/1/497825/100/0/threaded - http://www.securityfocus.com/archive/1/497827/100/0/threaded - h
www.securityfocus.com/archive/1/497825/100/0/threaded - http://www.securityfocus.com/archive/1/497827/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/46234
CVE ID: CVE-2008-4788 State: PUBLISHED Published: 2008-10-29T15:00:00 Last Updated: 2024-08-07T10:31:27.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 omits high-bit URL-encoded characters when displaying the address bar, which allows remote attackers to spoof the address bar via a URL with a domain name that differs from an important domain name only in these characters, as demonstrated by using exam%A9ple.com to spoof example.com, aka MSRC ticket MSRC7900. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/497825/100/0/threaded - http://www.securityfocus.com/archive/1/497827/100/0/threaded -
//www.securityfocus.com/archive/1/497825/100/0/threaded - http://www.securityfocus.com/archive/1/497827/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/46235
CVE ID: CVE-2008-4789 State: PUBLISHED Published: 2008-10-29T15:00:00 Last Updated: 2024-08-07T10:31:27.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: The validation functionality in the core upload module in Drupal 6.x before 6.5 allows remote authenticated users to bypass intended access restrictions and "attach files to content," related to a "logic error." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32198 - http://drupal.org/node/318706 - http://www.openwall.com/lists/oss-security/2008/10/21/7 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45755
CVE ID: CVE-2008-4790 State: PUBLISHED Published: 2008-10-29T15:00:00 Last Updated: 2024-08-07T10:31:27.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: The core upload module in Drupal 5.x before 5.11 allows remote authenticated users to bypass intended access restrictions and read "files attached to content" via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32198 - http://drupal.org/node/318706 - http://secunia.com/advisories/32200 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45758 - http://www.openwall.com/lists/oss-security/2008/10/21/7
CVE ID: CVE-2008-4791 State: PUBLISHED Published: 2008-10-29T15:00:00 Last Updated: 2024-08-07T10:31:27.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: The user module in Drupal 5.x before 5.11 and 6.x before 6.5 might allow remote authenticated users to bypass intended login access rules and successfully login via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/318706 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45766 - http://secunia.com/advisories/32201 - http://www.openwall.com/lists/oss-security/2008/10/21/7
CVE ID: CVE-2008-4792 State: PUBLISHED Published: 2008-10-29T15:00:00 Last Updated: 2024-08-07T10:31:27.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: The core BlogAPI module in Drupal 5.x before 5.11 and 6.x before 6.5 does not properly validate unspecified content fields of an internal Drupal form, which allows remote authenticated users to bypass intended access restrictions via modified field values. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/318706 - http://secunia.com/advisories/32201 - http://www.openwall.com/lists/oss-security/2008/10/21/7 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45761
CVE ID: CVE-2008-4793 State: PUBLISHED Published: 2008-10-29T15:00:00 Last Updated: 2024-08-07T10:31:27.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: The node module API in Drupal 5.x before 5.11 allows remote attackers to bypass node validation and have unspecified other impact via unknown vectors related to contributed modules. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/318706 - http://secunia.com/advisories/32200 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45763 - http://www.openwall.com/lists/oss-security/2008/10/21/7
CVE ID: CVE-2008-4794 State: PUBLISHED Published: 2008-10-30T20:49:00 Last Updated: 2024-08-07T10:31:27.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 9.62 allows remote attackers to execute arbitrary commands via the History Search results page, a different vulnerability than CVE-2008-4696. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32538 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46219 - http://www.securitytracker.com/id?1021128 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00012.html - http://www.opera.com/support/search/view/906/ - http://www.securityfocus.com/bid/31991 - htt
nce/2008-10/msg00012.html - http://www.opera.com/support/search/view/906/ - http://www.securityfocus.com/bid/31991 - http://security.gentoo.org/glsa/glsa-200811-01.xml
CVE ID: CVE-2008-4795 State: PUBLISHED Published: 2008-10-30T20:49:00 Last Updated: 2024-08-07T10:31:27.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: The links panel in Opera before 9.62 processes Javascript within the context of the "outermost page" of a frame, which allows remote attackers to inject arbitrary web script or HTML via cross-site scripting (XSS) attacks. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32538 - http://www.securitytracker.com/id?1021127 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00012.html - http://www.opera.com/support/search/view/907/ - https://exchange.xforce.ibmcloud.com/v
-announce/2008-10/msg00012.html - http://www.opera.com/support/search/view/907/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/46220 - http://www.securityfocus.com/bid/31991 - http://security.gentoo.org/glsa/glsa-200811-01.xml
CVE ID: CVE-2008-4796 State: PUBLISHED Published: 2008-10-30T20:49:00 Last Updated: 2024-08-07T10:31:27.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1) ampache, (2) libphp-snoopy, (3) mahara, (4) mediamate, (5) opendb, (6) pixelpost, and possibly other products, allows remote attackers to execute arbitrary commands via shell metacharacters in https URLs. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46068 - http://www.openwall.com/lists/oss-security/2008/11/01/1 - http://www.vupen.com/english/advisories/2008/2
ilities/46068 - http://www.openwall.com/lists/oss-security/2008/11/01/1 - http://www.vupen.com/english/advisories/2008/2901 - http://www.securityfocus.com/archive/1/496068/100/0/threaded - http://www.securityfocus.com/bid/31887 - http://www.debian.org/security/2009/dsa-1871 - http://jvn.jp/en/jp/JVN20502807/index.html - http://sourceforge.net/forum/forum.php?forum_id=879959 - https://www.nagios.org/projects/nagios-core/history/4x/ - https://security.gentoo.org/glsa/201702-26 - http://www.debian.org/security/2008/dsa-1691 - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000074.html - http://secunia.com/advisories/32361
CVE ID: CVE-2008-4797 State: PUBLISHED Published: 2008-10-30T20:49:00 Last Updated: 2024-08-07T10:31:27.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Arihiro Kurata Kantan WEB Server 1.8 and earlier allows remote attackers to read arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31245 - http://www.osvdb.org/48223 - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000059.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45243 - http://secunia.com/advisories/31917 - http://jvn.jp/en/jp/JVN79026329/index.html
CVE ID: CVE-2008-4798 State: PUBLISHED Published: 2008-10-30T20:49:00 Last Updated: 2024-08-07T10:31:27.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: The loadModule function in lib/WebGUI/Asset.pm in WebGUI before 7.5.30 (stable) allows remote attackers to execute arbitrary code by uploading a Perl module and accessing it via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.webgui.org/bugs/tracker/8980 - http://www.webgui.org/uploads/70/o2/70o29CTLCGWjntJrLYdmJA/asset-security-7.4.diff - http://www.webgui.org/getwebgui/advisories/webgui-7.5.30-stable-released - http://www.securityfocus.com/bid/31947 - http://secunia.com/advisories/3
bgui/advisories/webgui-7.5.30-stable-released - http://www.securityfocus.com/bid/31947 - http://secunia.com/advisories/32438 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46137 - http://www.vupen.com/english/advisories/2008/2944
CVE ID: CVE-2008-4799 State: PUBLISHED Published: 2008-10-30T22:00:00 Last Updated: 2024-08-07T10:31:27.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: pamperspective in Netpbm before 10.35.48 does not properly calculate a window height, which allows context-dependent attackers to cause a denial of service (crash) via a crafted image file that triggers an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31871 - http://www.openwall.com/lists/oss-security/2008/10/23/2 - http://netpbm.svn.sourceforge.net/viewvc/netpbm/stable/doc/HISTORY - https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00
ceforge.net/viewvc/netpbm/stable/doc/HISTORY - https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00069.html - http://www.openwall.com/lists/oss-security/2008/10/22/7 - https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00058.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/46054
CVE ID: CVE-2008-4800 State: PUBLISHED Published: 2008-10-30T22:00:00 Last Updated: 2024-08-07T10:31:27.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DebugDiag ActiveX control in CrashHangExt.dll, possibly 1.0, in Microsoft Debug Diagnostic Tool allows remote attackers to cause a denial of service (NULL pointer dereference and Internet Explorer 6.0 crash) via a large negative integer argument to the GetEntryPointForThread method. NOTE: this issue might only be exploitable in limited environments or non-default browser settings. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31996 - http://www.securityfocus.com/archive/1
: - CVE Program Container: References: - http://www.securityfocus.com/bid/31996 - http://www.securityfocus.com/archive/1/497943/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/46309 - http://securityreason.com/securityalert/4532
CVE ID: CVE-2008-4801 State: PUBLISHED Published: 2008-10-30T22:00:00 Last Updated: 2024-08-07T10:31:27.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Data Protection for SQL CAD service (aka dsmcat.exe) in the Client Acceptor Daemon (CAD) and the scheduler in the Backup-Archive client 5.1.0.0 through 5.1.8.1, 5.2.0.0 through 5.2.5.2, 5.3.0.0 through 5.3.6.1, 5.4.0.0 through 5.4.2.2, and 5.5.0.0 through 5.5.0.91 in IBM Tivoli Storage Manager (TSM); and the Backup-Archive client in TSM Express; allows remote attackers to execute arbitrary code by sending a large amount of crafted data to a TCP port. Additional Analyst Notes: - CVE Program Con
cute arbitrary code by sending a large amount of crafted data to a TCP port. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21322623 - http://secunia.com/advisories/32465 - http://www-1.ibm.com/support/docview.wss?uid=swg1IC56773 - http://www.securityfocus.com/archive/1/497950/100/0/threaded - http://www.securitytracker.com/id?1021122 - http://www.vupen.com/english/advisories/2008/2969 - http://www.securityfocus.com/bid/31988 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46208 - http://www.zerodayinitiative.com/advisories/ZDI-08-071/
CVE ID: CVE-2008-4802 State: PUBLISHED Published: 2008-10-31T16:42:00 Last Updated: 2024-08-07T10:31:27.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in complete.php in Simple PHP Scripts blog 0.3 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/40986 - http://www.securityfocus.com/bid/28054
CVE ID: CVE-2008-4803 State: PUBLISHED Published: 2008-10-31T16:42:00 Last Updated: 2024-08-07T10:31:27.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Simple PHP Scripts gallery 0.1, 0.3, and 0.4 allows remote attackers to inject arbitrary web script or HTML via the gallery parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28056 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40985
CVE ID: CVE-2008-4804 State: PUBLISHED Published: 2008-10-31T16:42:00 Last Updated: 2024-08-07T10:31:27.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Gallery module 1.3 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the aid parameter in a showalbum action to index.php. NOTE: some of these details are obtained from third party information. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27957 - http://archives.neohapsis.com/archives/bugtraq/2008-02/0395.html - https://exchange.xf
www.securityfocus.com/bid/27957 - http://archives.neohapsis.com/archives/bugtraq/2008-02/0395.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41006
CVE ID: CVE-2008-4805 State: PUBLISHED Published: 2008-10-31T17:18:00 Last Updated: 2024-08-07T10:31:27.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Connections 2.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via (1) the community title, (2) API input, and vectors related to the (3) Homepage, (4) Blogs, (5) Profiles, (6) Dogear, (7) Activities, and (8) Global Search components. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.
from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46215 - http://secunia.com/advisories/32466 - http://www.securityfocus.com/bid/31989 - http://www-01.ibm.com/support/docview.wss?uid=swg27014008 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46211 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46210
CVE ID: CVE-2008-4806 State: PUBLISHED Published: 2008-10-31T17:18:00 Last Updated: 2024-08-07T10:31:27.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in IBM Lotus Connections 2.x before 2.0.1 allow remote attackers to execute arbitrary SQL commands via the sortField parameter to unspecified components. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32466 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46212 - http://www.securityfocus.com/bid/31989 - http://www-01.ibm.c
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/46212 - http://www.securityfocus.com/bid/31989 - http://www-01.ibm.com/support/docview.wss?uid=swg27014008
CVE ID: CVE-2008-4807 State: PUBLISHED Published: 2008-10-31T17:18:00 Last Updated: 2024-08-07T10:31:27.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Lotus Connections 2.x before 2.0.1 stores the password for the administrative user in the trace.log file, which allows local users to obtain sensitive information by reading this file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/46213 - http://secunia.com/advisories/32466 - http://www.securityfocus.com/bid/31989 - http://www-01.ibm.com/s
abilities/46213 - http://secunia.com/advisories/32466 - http://www.securityfocus.com/bid/31989 - http://www-01.ibm.com/support/docview.wss?uid=swg27014008
CVE ID: CVE-2008-4808 State: PUBLISHED Published: 2008-10-31T17:18:00 Last Updated: 2024-08-07T10:31:28.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Lotus Connections 2.x before 2.0.1 allows attackers to discover passwords via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32466 - http://www.securityfocus.com/bid/31989 - http://www-01.ibm.com/support/docview.wss?uid=swg27014008 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46216