Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-2707 State: PUBLISHED Published: 2008-06-16T18:26:00 Last Updated: 2024-08-07T09:14:14.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the e1000g driver in Sun Solaris 10 and OpenSolaris before snv_93 allows remote attackers to cause a denial of service (network connectivity loss) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238250-1 - http://securitytracker.com/id?1020290 - http://www.vupen.com/english/advisories/2008/1835 - http://secunia.com/advisories/30700 - http://www.securityfocus.com/bid/29730 - https://exchange.xforce.ibmclou
08/1835 - http://secunia.com/advisories/30700 - http://www.securityfocus.com/bid/29730 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43096
CVE ID: CVE-2008-2708 State: PUBLISHED Published: 2008-06-16T20:00:00 Last Updated: 2024-08-07T09:14:14.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Sun (1) UltraSPARC T2 and (2) UltraSPARC T2+ kernel modules in Sun Solaris 10, and OpenSolaris before snv_93, allows local users to cause a denial of service (panic) via unspecified vectors, probably related to core files. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1805 - http://www.securitytracker.com/id?1020275 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238688-1 - https://exchange.xforce.ibmcloud.com/vulnerabil
75 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-238688-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43003 - http://www.securityfocus.com/bid/29678 - http://secunia.com/advisories/30654
CVE ID: CVE-2008-2709 State: PUBLISHED Published: 2008-06-16T20:00:00 Last Updated: 2024-08-07T09:14:14.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the BrSmRcvAndCheck function in the RCHMGR module on IBM OS/400 V5R4M0, V5R4M5, and V6R1M0 allows local users to cause a denial of service (task halt and main storage dump) via unspecified vectors involving the running of diagnostics on a modem port. NOTE: there might be limited attack scenarios. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30554 - http://www-1.ibm.com/support/docview.wss?uid=nas21f21bcbaa63f55268625745e003c6f64 - http://www.vupen.com/english
30554 - http://www-1.ibm.com/support/docview.wss?uid=nas21f21bcbaa63f55268625745e003c6f64 - http://www.vupen.com/english/advisories/2008/1799 - http://www.securityfocus.com/bid/29660 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42984
CVE ID: CVE-2008-2710 State: PUBLISHED Published: 2008-06-16T20:00:00 Last Updated: 2024-08-07T09:14:14.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the ip_set_srcfilter function in the IP Multicast Filter in uts/common/inet/ip/ip_multi.c in the kernel in Sun Solaris 10 and OpenSolaris before snv_92 allows local users to execute arbitrary code in other Solaris Zones via an SIOCSIPMSFILTER IOCTL request with a large value of the imsf->imsf_numsrc field, which triggers an out-of-bounds write of kernel memory. NOTE: this was reported as an integer overflow, but the root cause involves the bypass of a signed comparison. Additional Analyst Notes: - C
ted as an integer overflow, but the root cause involves the bypass of a signed comparison. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5731 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-237965-1 - http://www.vupen.com/english/advisories/2008/1832/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/43068 - http://www.securityfocus.com/bid/29699 - http://secunia.com/advisories/30693 - http://www.securitytracker.com/id?1020283 - http://www.trapkit.de/advisories/TKADV2008-003.txt
CVE ID: CVE-2008-2711 State: PUBLISHED Published: 2008-06-16T21:00:00 Last Updated: 2024-08-07T09:14:14.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: fetchmail 6.3.8 and earlier, when running in -v -v (aka verbose) mode, allows remote attackers to cause a denial of service (crash and persistent mail failure) via a malformed mail message with long headers, which triggers an erroneous dereference when using vsnprintf to format log messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/1860/references - http://secunia.com/advisories/31287 - http://www.securityfocus.com/archive/1/494865/100/0/threaded - http://www
rences - http://secunia.com/advisories/31287 - http://www.securityfocus.com/archive/1/494865/100/0/threaded - http://www.securitytracker.com/id?1020298 - http://secunia.com/advisories/33937 - http://www.securityfocus.com/archive/1/493391/100/0/threaded - http://secunia.com/advisories/31262 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0235 - http://support.apple.com/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://secunia.com/advisories/30895 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg01095.html - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg01091.html - http://slackware.com/security/viewer.p
https://www.redhat.com/archives/fedora-package-announce/2008-June/msg01091.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.495740 - http://www.fetchmail.info/fetchmail-SA-2008-01.txt - http://www.vupen.com/english/advisories/2009/0422 - http://www.securityfocus.com/bid/29705 - https://issues.rpath.com/browse/RPL-2623 - https://bugzilla.novell.com/show_bug.cgi?id=354291 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:117 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43121 - http://www.openwall.com/lists/oss-security/2008/06/13/1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10950
oss-security/2008/06/13/1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10950 - http://secunia.com/advisories/30742 - http://www.openwall.com/lists/oss-security/2021/08/09/1
CVE ID: CVE-2008-2712 State: PUBLISHED Published: 2008-06-16T21:00:00 Last Updated: 2024-08-07T09:14:14.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly sanitize inputs before invoking the execute or system functions, as demonstrated using (1) filetype.vim, (3) xpm.vim, (4) gzip_vim, and (5) netrw. NOTE: the originally reported version was 7.1.314, but the researcher actually found this set of issues in 7.1.298. NOTE: the zipplugin issue (originally vector 2 in this identifier) has been subsumed by CVE-2008-3075. Additional Analyst Notes
he zipplugin issue (originally vector 2 in this identifier) has been subsumed by CVE-2008-3075. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2009-0004.html - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html - http://www.redhat.com/support/errata/RHSA-2008-0618.html - http://www.rdancer.org/vulnerablevim.html - http://www.ubuntu.com/usn/USN-712-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6238 - http://www.securityfocus.com/bid/31681 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43083 - http://secunia.com/advisories/32858 - http://secunia.com/advi
tps://exchange.xforce.ibmcloud.com/vulnerabilities/43083 - http://secunia.com/advisories/32858 - http://secunia.com/advisories/33410 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://www.redhat.com/support/errata/RHSA-2008-0580.html - http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm - http://secunia.com/advisories/34418 - http://www.vupen.com/english/advisories/2009/0904 - http://www.vupen.com/english/advisories/2009/0033 - http://www.securityfocus.com/archive/1/495319/100/0/threaded - http://www.securityfocus.com/archive/1/493353/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11109 - http
353/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11109 - http://www.securityfocus.com/archive/1/502322/100/0/threaded - http://www.openwall.com/lists/oss-security/2008/06/16/2 - http://marc.info/?l=bugtraq&m=121494431426308&w=2 - http://www.vupen.com/english/advisories/2008/1851/references - http://support.avaya.com/elmodocs2/security/ASA-2008-457.htm - http://secunia.com/advisories/30731 - http://secunia.com/advisories/32222 - http://support.apple.com/kb/HT4077 - https://issues.rpath.com/browse/RPL-2622 - http://securityreason.com/securityalert/3951 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:236 - http://www.vupen
curityreason.com/securityalert/3951 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:236 - http://www.vupen.com/english/advisories/2008/2780 - http://www.openwall.com/lists/oss-security/2008/10/15/1 - http://secunia.com/advisories/32864 - http://www.securitytracker.com/id?1020293 - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216 - http://www.securityfocus.com/bid/29715 - http://wiki.rpath.com/Advisories:rPSA-2008-0247 - http://www.redhat.com/support/errata/RHSA-2008-0617.html - http://www.securityfocus.com/archive/1/493352/100/0/threaded
CVE ID: CVE-2008-2713 State: PUBLISHED Published: 2008-06-16T21:00:00 Last Updated: 2024-08-07T09:14:14.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31437 - http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html - http://up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:122 - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - ht
p://www.mandriva.com/security/advisories?name=MDVSA-2008:122 - http://www.us-cert.gov/cas/techalerts/TA08-260A.html - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html - http://secunia.com/advisories/30785 - http://www.vupen.com/english/advisories/2008/2584 - http://www.openwall.com/lists/oss-security/2008/06/15/2 - http://www.vupen.com/english/advisories/2008/1855/references - http://secunia.com/advisories/30967 - http://secunia.com/advisories/31882 - http://secunia.com/advisories/31091 - http://secunia.com/advisories/30657 - http://kolab.org/security/kolab-vendor-notice-21.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/43133 - http://lists.opensuse.org/
ity/kolab-vendor-notice-21.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/43133 - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html - http://www.debian.org/security/2008/dsa-1616 - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00763.html - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1000 - http://www.openwall.com/lists/oss-security/2008/06/17/8 - http://security.gentoo.org/glsa/glsa-200808-07.xml - http://www.securityfocus.com/bid/29750 - http://secunia.com/advisories/30829 - http://www.securitytracker.com/id?1020305 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00617.html - http://secunia.com/advisorie
1020305 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00617.html - http://secunia.com/advisories/31167 - http://secunia.com/advisories/31576 - http://svn.clamav.net/websvn/diff.php?repname=clamav-devel&path=/branches/0.93/libclamav/petite.c&rev=3886 - http://sourceforge.net/project/shownotes.php?release_id=605577&group_id=86638 - http://secunia.com/advisories/31206
CVE ID: CVE-2008-2714 State: PUBLISHED Published: 2008-06-16T22:00:00 Last Updated: 2024-08-07T09:14:14.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 9.26 allows remote attackers to misrepresent web page addresses using "certain characters" that "cause the page address text to be misplaced." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29684 - http://www.vupen.com/english/advisories/2008/1812 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43035 - http://www.opera.com/docs/changelogs/windows/950/#security - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00005.html - http://www.opera.co
windows/950/#security - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00005.html - http://www.opera.com/docs/changelogs/linux/950/#security - http://www.opera.com/support/search/view/878/ - http://secunia.com/advisories/30682 - http://secunia.com/advisories/30636
CVE ID: CVE-2008-2715 State: PUBLISHED Published: 2008-06-16T22:00:00 Last Updated: 2024-08-07T09:14:14.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Opera before 9.5 allows remote attackers to read cross-domain images via HTML CANVAS elements that use the images as patterns. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29684 - http://www.vupen.com/english/advisories/2008/1812 - http://www.opera.com/docs/changelogs/windows/950/#security - http://www.opera.com/support/search/view/883/ - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00005.html - https://exchange.xforce.ibmcloud
iew/883/ - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00005.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43032 - http://www.opera.com/docs/changelogs/linux/950/#security - http://www.securitytracker.com/id?1020291 - http://secunia.com/advisories/30682 - http://secunia.com/advisories/30636
CVE ID: CVE-2008-2716 State: PUBLISHED Published: 2008-06-16T22:00:00 Last Updated: 2024-08-07T09:14:15.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Opera before 9.5 allows remote attackers to spoof the contents of trusted frames on the same parent page by modifying the location, which can facilitate phishing attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29684 - http://www.vupen.com/english/advisories/2008/1812 - http://www.opera.com/docs/changelogs/windows/950/#security - https://exchange.xforce.ibmcloud.com/vulnerabilities/43033 - http://www.opera.com/support/search/view/885/ - http
rity - https://exchange.xforce.ibmcloud.com/vulnerabilities/43033 - http://www.opera.com/support/search/view/885/ - http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00005.html - http://www.securitytracker.com/id?1020292 - http://www.opera.com/docs/changelogs/linux/950/#security - http://secunia.com/advisories/30682 - http://secunia.com/advisories/30636
CVE ID: CVE-2008-2717 State: PUBLISHED Published: 2008-06-16T22:00:00 Last Updated: 2024-08-07T09:14:14.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: TYPO3 4.0.x before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.2.1, uses an insufficiently restrictive default fileDenyPattern for Apache, which allows remote attackers to bypass security restrictions and upload configuration files such as .htaccess, or conduct file upload attacks using multiple extensions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29657 - http://buzz.typo3.org/teams/security/article/advice-on-core-security-issue-regarding-filedenypattern/ - http://secu
57 - http://buzz.typo3.org/teams/security/article/advice-on-core-security-issue-regarding-filedenypattern/ - http://secunia.com/advisories/30619 - http://www.securityfocus.com/archive/1/493270/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/42988 - http://www.debian.org/security/2008/dsa-1596 - http://www.vupen.com/english/advisories/2008/1802 - http://secunia.com/advisories/30660 - http://typo3.org/teams/security/security-bulletins/typo3-20080611-1/ - http://securityreason.com/securityalert/3945
CVE ID: CVE-2008-2718 State: PUBLISHED Published: 2008-06-16T22:00:00 Last Updated: 2024-08-07T09:14:15.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in fe_adminlib.inc in TYPO3 4.0.x before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.2.1, as used in extensions such as (1) direct_mail_subscription, (2) feuser_admin, and (3) kb_md5fepw, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42986 - http://www.securityfocus.com/bid/29657 - http://secunia.com/advisories/30619 - http://w
loud.com/vulnerabilities/42986 - http://www.securityfocus.com/bid/29657 - http://secunia.com/advisories/30619 - http://www.securityfocus.com/archive/1/493270/100/0/threaded - http://www.debian.org/security/2008/dsa-1596 - http://www.vupen.com/english/advisories/2008/1802 - http://secunia.com/advisories/30660 - http://typo3.org/teams/security/security-bulletins/typo3-20080611-1/ - http://securityreason.com/securityalert/3945
CVE ID: CVE-2008-2719 State: PUBLISHED Published: 2008-06-16T23:00:00 Last Updated: 2024-08-07T09:14:14.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the ppscan function (preproc.c) in Netwide Assembler (NASM) 2.02 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted file that triggers a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/29656 - https://sourceforge.net/tracker/?func=detail&atid=106208&aid=1942146&group_id=6208 - https://sourceforge.net/project/shownotes.php?group_id=6208&release_id=606115 - http
=106208&aid=1942146&group_id=6208 - https://sourceforge.net/project/shownotes.php?group_id=6208&release_id=606115 - http://repo.or.cz/w/nasm.git?a=commit%3Bh=76ec8e73db16f4cf1453a142d03bcc74d528f72f - http://www.mandriva.com/security/advisories?name=MDVSA-2008:120 - http://secunia.com/advisories/30594 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42995 - http://secunia.com/advisories/32059 - http://www.openwall.com/lists/oss-security/2008/06/11/5 - http://www.vupen.com/english/advisories/2008/1811 - http://www.ubuntu.com/usn/usn-648-1 - http://www.securitytracker.com/id?1020259 - http://www.openwall.com/lists/oss-security/2008/06/11/4
CVE ID: CVE-2008-2720 State: PUBLISHED Published: 2008-06-16T23:00:00 Last Updated: 2024-08-07T09:14:14.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Menalto Gallery before 2.2.5 allows remote attackers to inject arbitrary web script or HTML via the (1) host and (2) path components of a URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43024 - http://secunia.com/advisories/30650 - http://secunia.com/advisories/30826 - http://gallery.menalto.com/gallery_2.2.5_released - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00766.html - https://w
com/gallery_2.2.5_released - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00766.html - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00836.html - http://www.securityfocus.com/bid/29681
CVE ID: CVE-2008-2721 State: PUBLISHED Published: 2008-06-16T23:00:00 Last Updated: 2024-08-07T09:14:14.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the album-select module in Menalto Gallery before 2.2.5 allows remote attackers to obtain titles of hidden albums by attempting to add a new album to a hidden album. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30650 - http://secunia.com/advisories/30826 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43025 - http://gallery.menalto.com/gallery_2.2.5_released - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00766.html - h
menalto.com/gallery_2.2.5_released - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00766.html - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00836.html - http://www.securityfocus.com/bid/29681
CVE ID: CVE-2008-2722 State: PUBLISHED Published: 2008-06-16T23:00:00 Last Updated: 2024-08-07T09:14:14.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Menalto Gallery before 2.2.5 allows remote attackers to bypass permissions for sub-albums via a ZIP archive. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30650 - http://secunia.com/advisories/30826 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43027 - http://gallery.menalto.com/gallery_2.2.5_released - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00766.html - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00836.html - http:
nounce/2008-June/msg00766.html - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00836.html - http://www.securityfocus.com/bid/29681
CVE ID: CVE-2008-2723 State: PUBLISHED Published: 2008-06-16T23:00:00 Last Updated: 2024-08-07T09:14:14.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: embed.php in Menalto Gallery before 2.2.5 allows remote attackers to obtain the full path via unknown vectors related to "spoofing the remote address." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30650 - http://secunia.com/advisories/30826 - http://gallery.menalto.com/gallery_2.2.5_released - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00766.html - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00836.html - https://exchange.xforce
sg00766.html - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00836.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43028 - http://www.securityfocus.com/bid/29681
CVE ID: CVE-2008-2724 State: PUBLISHED Published: 2008-06-16T23:00:00 Last Updated: 2024-08-07T09:14:14.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Menalto Gallery before 2.2.5 does not enforce permissions for non-album items that have been protected by a password, which might allow remote attackers to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30650 - http://secunia.com/advisories/30826 - http://gallery.menalto.com/gallery_2.2.5_released - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00766.html - https://www.redhat.com/archives/fedora-package-announce/2008-Jun
hives/fedora-package-announce/2008-June/msg00766.html - https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00836.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43031 - http://www.securityfocus.com/bid/29681
CVE ID: CVE-2008-2725 State: PUBLISHED Published: 2008-06-24T19:00:00 Last Updated: 2024-08-07T09:14:14.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, and 1.8.7 before 1.8.7-p22; and (2) the rb_ary_replace function in 1.6.x allows context-dependent attackers to trigger memory corruption via unspecified vectors, aka the "REALLOC_N" variant, a different issue than CVE-2008-2662, CVE-2008-2663, and CVE-2008-2664. NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. The CVE description should be regarded a