Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
hcrash/ - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751 - http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html - http://www.adobe.com/support/security/bulletins/apsb10-14.html - http://secunia.com/advisories/32759 - http://www.redhat.com/support/errata/RHSA-2010-0470.html - http://www.vupen.com/english/advisories/2010/1482 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16302 - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751 - http://www.vupen.com/english/advisories/2010/1522 - http://www.securityfocus.com/bid/31537 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.h
/1522 - http://www.securityfocus.com/bid/31537 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html - http://www.vupen.com/english/advisories/2010/1453
CVE ID: CVE-2008-4547 State: PUBLISHED Published: 2008-10-14T17:00:00 Last Updated: 2024-08-07T10:17:09.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the PdvrAtl.PdvrOcx.1 ActiveX control (pdvratl.dll) in DVRHOST Web CMS OCX 1.0.1.25 allows remote attackers to execute arbitrary code via a long second argument to the TimeSpanFormat method. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4407 - http://www.securityfocus.com/bid/27267 - http://secunia.com/advisories/28443 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39640 - https://www.exploit-db.com/exploits/4903 - http://www.vupen
https://exchange.xforce.ibmcloud.com/vulnerabilities/39640 - https://www.exploit-db.com/exploits/4903 - http://www.vupen.com/english/advisories/2008/0132
CVE ID: CVE-2008-4548 State: PUBLISHED Published: 2008-10-14T17:00:00 Last Updated: 2024-08-07T10:17:10.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the PTZCamPanelCtrl ActiveX control (CamPanel.dll) in RTS Sentry 2.1.0.2 allows remote attackers to execute arbitrary code via a long second argument to the ConnectServer method. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28435 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39725 - https://www.exploit-db.com/exploits/4918 - http://securityreason.com/securityalert/4411 - http://www.securityfocus.com/bid/27304
CVE ID: CVE-2008-4549 State: PUBLISHED Published: 2008-10-14T17:00:00 Last Updated: 2024-08-07T10:17:09.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ImageShack Toolbar ActiveX control (ImageShackToolbar.dll) in ImageShack Toolbar 4.5.7, possibly including 4.5.7.69, allows remote attackers to force the upload of arbitrary image files to the ImageShack site via a file: URI argument to the BuildSlideShow method. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40628 - https://www.exploit-db.com/exploits/4981 - http://secunia.com/advisories/28644 - http://securityreason.com/securityalert/4410 - http://www.securityfocus.com/archive/1/486941/
nia.com/advisories/28644 - http://securityreason.com/securityalert/4410 - http://www.securityfocus.com/archive/1/486941/100/200/threaded - http://www.securityfocus.com/bid/27439 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39921
CVE ID: CVE-2008-4551 State: PUBLISHED Published: 2008-10-14T19:00:00 Last Updated: 2024-08-07T10:17:09.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: strongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service (daemon crash) via an IKE_SA_INIT message with a large number of NULL values in a Key Exchange payload, which triggers a NULL pointer dereference for the return value of the mpz_export function in the GNU Multiprecision Library (GMP). Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2660 - http://www.securitytracker.com/id?1020903 - http://www.securityfocus.com/bid/31291 - http://labs.m
dvisories/2008/2660 - http://www.securitytracker.com/id?1020903 - http://www.securityfocus.com/bid/31291 - http://labs.mudynamics.com/advisories/MU-200809-01.txt - http://secunia.com/advisories/31963 - http://download.strongswan.org/CHANGES4.txt
CVE ID: CVE-2008-4552 State: PUBLISHED Published: 2008-10-14T19:00:00 Last Updated: 2024-08-07T10:17:09.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32481 - http://secunia.com/advisories/32346 - http://wiki.rpath.com/Advisories:rPSA-2008-0307 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.
://wiki.rpath.com/Advisories:rPSA-2008-0307 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8325 - http://secunia.com/advisories/38794 - http://lists.vmware.com/pipermail/security-announce/2010/000082.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45895 - http://www.redhat.com/support/errata/RHSA-2009-1321.html - http://www.openwall.com/lists/oss-security/2012/07/19/2 - http://secunia.com/advisories/33006 - https://bugzilla.redhat.com/show_bug.cgi?id=458676 - http://secunia.com/advisories/36538 - http://www.openwall.com/lists/oss-security/2012/07/19/5 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:060 - https://oval.cisecur
lists/oss-security/2012/07/19/5 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:060 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11544 - http://www.securityfocus.com/archive/1/497935/100/0/threaded - http://www.ubuntu.com/usn/USN-687-1 - http://secunia.com/advisories/38833 - http://www.securityfocus.com/bid/31823 - http://www.vupen.com/english/advisories/2010/0528
CVE ID: CVE-2008-4553 State: PUBLISHED Published: 2008-10-15T19:00:00 Last Updated: 2024-08-07T10:17:09.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and directories. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2008/dsa-1657 - http://www.openwall.com/lists/oss-security/2008/10/30/2 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496394 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44831 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - https://bugs.gentoo.org/show_bu
ce.ibmcloud.com/vulnerabilities/44831 - https://bugs.gentoo.org/show_bug.cgi?id=235770 - https://bugs.gentoo.org/show_bug.cgi?id=235826 - http://uvw.ru/report.lenny.txt - http://secunia.com/advisories/32335 - http://www.openwall.com/lists/oss-security/2008/10/13/2 - http://www.openwall.com/lists/oss-security/2008/10/14/4 - http://dev.gentoo.org/~rbu/security/debiantemp/qemu - http://www.securityfocus.com/bid/30931
CVE ID: CVE-2008-4554 State: PUBLISHED Published: 2008-10-15T19:00:00 Last Updated: 2024-08-07T10:17:09.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_splice_from function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the O_APPEND flag set, which allows local users to bypass append mode and make arbitrary changes to other locations in the file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35390 - http://secunia.com/advisories/32998 - http://www.openwall.com/lists/oss-security/2008/10/13/1 - https://bugzilla.redhat.com/show_bug.cgi?id=466707 - http://www.mandriva.com/securit
m/lists/oss-security/2008/10/13/1 - https://bugzilla.redhat.com/show_bug.cgi?id=466707 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:224 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11142 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45954 - http://www.securityfocus.com/bid/31903 - http://www.redhat.com/support/errata/RHSA-2009-0009.html - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00693.html - http://www.openwall.com/lists/oss-security/2008/10/14/5 - http://secunia.com/advisories/33586 - http://www.debian.org/security/
www.openwall.com/lists/oss-security/2008/10/14/5 - http://secunia.com/advisories/33586 - http://www.debian.org/security/2008/dsa-1687 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=efc968d450e013049a662d22727cf132618dcb2f - http://secunia.com/advisories/32918 - http://www.ubuntu.com/usn/usn-679-1 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27 - http://secunia.com/advisories/33180 - http://www.redhat.com/support/errata/RHSA-2008-1017.html - http://secunia.com/advisories/32386 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00689.html - http://www.debian.org/security/2008/dsa-1681 - http://secunia.com/advisories/33
ge-announce/2008-October/msg00689.html - http://www.debian.org/security/2008/dsa-1681 - http://secunia.com/advisories/33182
CVE ID: CVE-2008-4555 State: PUBLISHED Published: 2008-10-14T20:00:00 Last Updated: 2024-08-07T10:17:10.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the push_subg function in parser.y (lib/graph/parser.c) in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a DOT file with a large number of Agraph_t elements. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200811-04.xml - http://secunia.com/advisories/32186 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45765 - http://
0811-04.xml - http://secunia.com/advisories/32186 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45765 - http://roeehay.blogspot.com/2008/10/graphviz-buffer-overflow-code-execution.html - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00012.html - http://www.securityfocus.com/bid/31648 - http://www.securityfocus.com/archive/1/497150/100/0/threaded - http://bugs.gentoo.org/show_bug.cgi?id=240636 - http://securityreason.com/securityalert/4409 - http://secunia.com/advisories/32656
CVE ID: CVE-2008-4556 State: PUBLISHED Published: 2008-10-14T22:00:00 Last Updated: 2024-08-07T10:17:09.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the adm_build_path function in sadmind in Sun Solstice AdminSuite on Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2824 - http://secunia.com/advisories/32283 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45858 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-245806-1 - https://www.exploit-db.com/exploits/6786 - https://oval.cis
sunsolve.sun.com/search/document.do?assetkey=1-26-245806-1 - https://www.exploit-db.com/exploits/6786 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5543 - http://support.avaya.com/elmodocs2/security/ASA-2008-448.htm - http://www.securitytracker.com/id?1021059 - http://www.securityfocus.com/bid/31751 - http://risesecurity.org/advisories/RISE-2008001.txt - http://osvdb.org/50019 - http://securityreason.com/securityalert/4408 - http://www.securityfocus.com/archive/1/497311/100/0/threaded - http://secunia.com/advisories/32812 - http://www.vupen.com/english/advisories/2008/3230
CVE ID: CVE-2008-4557 State: PUBLISHED Published: 2008-10-14T22:00:00 Last Updated: 2024-08-07T10:17:09.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: plugins/wacko/highlight/html.php in Strawberry in CuteNews.ru 1.1.1 (aka Strawberry) allows remote attackers to execute arbitrary PHP code via the text parameter, which is inserted into an executable regular expression. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/40236 - https://www.exploit-db.com/exploits/4851 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39450 - http://securityreason.com/securityalert/4403 - http://secunia.com/advisories/28330
CVE ID: CVE-2008-4558 State: PUBLISHED Published: 2008-10-14T23:00:00 Last Updated: 2024-08-07T10:17:09.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in VLC media player 0.9.2 allows remote attackers to overwrite arbitrary memory and execute arbitrary code via an XSPF playlist file with a negative identifier tag, which passes a signed comparison. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31758 - http://www.exploit-db.com/exploits/6756 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14726 - http://www.coresecurity.com/content/vlc-xspf-memory-corruption - http://
efinition/oval%3Aorg.mitre.oval%3Adef%3A14726 - http://www.coresecurity.com/content/vlc-xspf-memory-corruption - http://secunia.com/advisories/32267 - http://www.vupen.com/english/advisories/2008/2826 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45869 - http://www.securityfocus.com/archive/1/497354/100/0/threaded
CVE ID: CVE-2008-4559 State: PUBLISHED Published: 2009-02-08T21:00:00Z Last Updated: 2024-09-17T02:20:56.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via shell metacharacters in argument fields to the (1) webappmon.exe or (2) OpenView5.exe CGI program. NOTE: this issue may be partially covered by CVE-2009-0205. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01661610 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=770 - http://h20000.www2.hp.com/bizsup
=c01661610 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=770 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01661610
CVE ID: CVE-2008-4560 State: PUBLISHED Published: 2009-02-08T21:00:00Z Last Updated: 2024-09-16T23:26:54.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to obtain sensitive information via (1) a crafted request to the nnmRptConfig.exe CGI program, which reveals the pathname of log directories; or (2) a crafted parameter in a request to the ovlaunch.exe CGI program, which reveals configuration details. NOTE: this issue may be partially covered by CVE-2009-0205. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objec
nalyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01661610 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01661610 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=771
CVE ID: CVE-2008-4562 State: PUBLISHED Published: 2009-02-08T21:00:00Z Last Updated: 2024-09-17T03:03:22.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ovlaunch CGI program in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 on Windows allows remote attackers to execute arbitrary code via a crafted Host parameter. NOTE: this issue may be partially covered by CVE-2009-0205. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01661610 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=772 - http://h20000.www2.hp.com/bizsupport/TechSuppor
tp://labs.idefense.com/intelligence/vulnerabilities/display.php?id=772 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01661610
CVE ID: CVE-2008-4563 State: PUBLISHED Published: 2009-03-11T14:00:00 Last Updated: 2024-08-07T10:24:19.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager (TSM) Express 5.3.7.3 and earlier and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0, allows remote attackers to execute arbitrary code via a crafted length value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34077 - http://securitytracker.com/id?1021837 - http://www-01.ibm.com/support/docview.wss?uid=swg21377388 - http://www.v
34077 - http://securitytracker.com/id?1021837 - http://www-01.ibm.com/support/docview.wss?uid=swg21377388 - http://www.vupen.com/english/advisories/2009/0669 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=775 - http://secunia.com/advisories/34245 - http://osvdb.org/52617 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49188 - http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0192.html
CVE ID: CVE-2008-4564 State: PUBLISHED Published: 2009-03-18T15:00:00 Last Updated: 2024-08-07T10:24:18.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/avcenter/security/Content/2009.03.17a.html - http://www.vupen.com/english/advisories/2009/0744 - http
//www.symantec.com/avcenter/security/Content/2009.03.17a.html - http://www.vupen.com/english/advisories/2009/0744 - http://secunia.com/advisories/34303 - http://www.securitytracker.com/id?1021859 - http://secunia.com/advisories/34307 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49284 - http://www-01.ibm.com/support/docview.wss?rs=463&uid=swg21377573 - http://secunia.com/advisories/34318 - http://securitytracker.com/id?1021856 - http://securitytracker.com/id?1021857 - http://www.kb.cert.org/vuls/id/276563 - http://www.vupen.com/english/advisories/2009/0756 - https://customers.autonomy.com/support/secure/docs/Updates/Keyview/Filter%20SDK/10.4/kv_update_nti40_10.4.zip.readme.html - ht
//customers.autonomy.com/support/secure/docs/Updates/Keyview/Filter%20SDK/10.4/kv_update_nti40_10.4.zip.readme.html - http://secunia.com/advisories/34355 - http://osvdb.org/52713 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=774 - http://www.securityfocus.com/bid/34086 - http://www.vupen.com/english/advisories/2009/0757
CVE ID: CVE-2008-4569 State: PUBLISHED Published: 2008-10-15T18:12:00 Last Updated: 2024-08-07T10:24:19.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in xlacomments.asp in XIGLA Software Absolute Poll Manager XE 4.1 allows remote attackers to execute arbitrary SQL commands via the p parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6731 - http://www.securityfocus.com/bid/31724 - http://securityreason.com/securityalert/4417 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45823
CVE ID: CVE-2008-4570 State: PUBLISHED Published: 2008-10-15T18:12:00 Last Updated: 2024-08-07T10:24:20.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32223 - http://www.securityfocus.com/bid/31723 - http://securityreason.com/securityalert/4418 - https://www.exploit-db.com/exploits/6736 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45819
CVE ID: CVE-2008-4571 State: PUBLISHED Published: 2008-10-15T18:12:00 Last Updated: 2024-08-07T10:24:19.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the LiveSearch module in Plone before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the Description field for search results, as demonstrated using the onerror Javascript even in an IMG tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27098 - http://secunia.com/advisories/28293 - http://plone.org/products/plone/releases/3.0.4 - http://dev.plone.org/plone/ticket/7439 - http://osvdb.org/40660
CVE ID: CVE-2008-4572 State: PUBLISHED Published: 2008-10-15T18:12:00 Last Updated: 2024-08-07T10:24:21.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: GuildFTPd 0.999.14, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long arguments to the CWD and LIST commands, which triggers heap corruption related to an improper free call, and possibly triggering a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31729 - http://secunia.com/advisories/32218 - http://www.vupen.com/english/advisories/2008/2794 - https://www.exploit-db
31729 - http://secunia.com/advisories/32218 - http://www.vupen.com/english/advisories/2008/2794 - https://www.exploit-db.com/exploits/6738 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45818 - http://securityreason.com/securityalert/4422
CVE ID: CVE-2008-4573 State: PUBLISHED Published: 2008-10-15T18:12:00 Last Updated: 2024-08-07T10:24:20.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in kategori.asp in MunzurSoft Wep Portal W3 allows remote attackers to execute arbitrary SQL commands via the kat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32238 - https://www.exploit-db.com/exploits/6725 - http://www.securityfocus.com/bid/31713 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45817 - http://securityreason.com/securityalert/4420
CVE ID: CVE-2008-4574 State: PUBLISHED Published: 2008-10-15T18:12:00 Last Updated: 2024-08-07T10:24:19.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in Ayco Okul Portali allows remote attackers to execute arbitrary SQL commands via the linkid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31704 - http://securityreason.com/securityalert/4426 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45801 - http://secunia.com/advisories/32244 - https://www.exploit-db.com/exploits/6720
CVE ID: CVE-2008-4575 State: PUBLISHED Published: 2008-10-15T19:00:00 Last Updated: 2024-08-07T10:24:20.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the DoCommand function in jhead before 2.84 might allow context-dependent attackers to cause a denial of service (crash) via (1) a long -cmd argument and (2) unspecified vectors related to "a bunch of potential string overflows." Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00511.html - http://www.securityfocus.com/bid/31770 - http://www.sentex.net/~mwandel/jhead/changes.txt - http://secunia.com/advisories/32363 - htt
curityfocus.com/bid/31770 - http://www.sentex.net/~mwandel/jhead/changes.txt - http://secunia.com/advisories/32363 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00531.html - https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/271020 - http://www.openwall.com/lists/oss-security/2008/10/15/6