Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-5660 State: PUBLISHED Published: 2008-12-17T20:00:00 Last Updated: 2024-08-07T11:04:43.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the vinagre_utils_show_error function (src/vinagre-utils.c) in Vinagre 0.5.x before 0.5.2 and 2.x before 2.24.2 might allow remote attackers to execute arbitrary code via format string specifiers in a crafted URI or VNC server response. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7401 - https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00473.html - http://www.securityfocus.com/archive/1/499057/100/0/threaded - http://
ra-package-announce/2008-December/msg00473.html - http://www.securityfocus.com/archive/1/499057/100/0/threaded - http://secunia.com/advisories/33041 - http://www.coresecurity.com/content/vinagre-format-string - http://secunia.com/advisories/33082 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:240 - http://www.vupen.com/english/advisories/2008/3362 - http://secunia.com/advisories/33046 - https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00485.html - http://www.ubuntu.com/usn/usn-689-1 - https://bugzilla.redhat.com/show_bug.cgi?id=475070
CVE ID: CVE-2008-5661 State: PUBLISHED Published: 2008-12-17T20:00:00 Last Updated: 2024-08-07T11:04:43.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPv4 Forwarding feature in Sun Solaris 10 and OpenSolaris snv_47 through snv_82, with certain patches installed, allows remote attackers to cause a denial of service (panic) via unknown vectors that trigger a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-241126-1 - http://www.securityfocus.com/bid/32861 - http://www.securitytracker.com/id?1021413 - http://secunia.com/advisories/33148 - https://exchange.xforce.ibmcloud.com/
http://www.securitytracker.com/id?1021413 - http://secunia.com/advisories/33148 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47378
CVE ID: CVE-2008-5662 State: PUBLISHED Published: 2008-12-17T20:00:00 Last Updated: 2024-08-07T11:04:43.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Sun Java Wireless Toolkit (WTK) for CLDC 2.5.2 and earlier allow downloaded programs to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/3439 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019851.1-1 - http://www.securitytracker.com/id?1021414 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-247566-1 - http://secunia.com/advisories/33159 - https://exchange.xforce.ibmcloud.
.com/search/document.do?assetkey=1-26-247566-1 - http://secunia.com/advisories/33159 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47376 - http://www.securityfocus.com/bid/32862
CVE ID: CVE-2008-5663 State: PUBLISHED Published: 2008-12-18T21:00:00 Last Updated: 2024-08-07T11:04:44.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unrestricted file upload vulnerabilities in Kusaba 1.0.4 and earlier allow remote authenticated users to execute arbitrary code by uploading a file with an executable extension using (1) load_receiver.php or (2) a shipainter action to paint_save.php, then accessing the uploaded file via a direct request to this file in their user directory. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6706 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45793 - http://www.
s: - https://www.exploit-db.com/exploits/6706 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45793 - http://www.securityfocus.com/bid/31668 - http://www.securityfocus.com/bid/31685 - https://www.exploit-db.com/exploits/6711 - http://securityreason.com/securityalert/4782 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45794
CVE ID: CVE-2008-5664 State: PUBLISHED Published: 2008-12-18T21:00:00 Last Updated: 2024-08-07T11:04:43.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Realtek Media Player (aka Realtek Sound Manager, RtlRack, or rtlrack.exe) 1.15.0.0 allows remote attackers to execute arbitrary code via a crafted playlist (PLA) file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47380 - https://www.exploit-db.com/exploits/7492 - http://securityreason.com/securityalert/4783 - http://osvdb.org/50715 - http://secunia.com/advisories/33183 - http://www.shinnai.net/xplits/TXT_n7dMz2jBQsDJFtplslYw
- http://osvdb.org/50715 - http://secunia.com/advisories/33183 - http://www.shinnai.net/xplits/TXT_n7dMz2jBQsDJFtplslYw.html - http://www.vupen.com/english/advisories/2008/3446 - http://www.securityfocus.com/bid/32860
CVE ID: CVE-2008-5665 State: PUBLISHED Published: 2008-12-18T21:00:00 Last Updated: 2024-08-07T11:04:43.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the xhresim module in XOOPS allows remote attackers to execute arbitrary SQL commands via the no parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45863 - http://www.securityfocus.com/bid/31749 - https://www.exploit-db.com/exploits/6748 - http://securityreason.com/securityalert/4784
CVE ID: CVE-2008-5666 State: PUBLISHED Published: 2008-12-18T21:00:00 Last Updated: 2024-08-07T11:04:43.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: WinFTP FTP Server 2.3.0, when passive (aka PASV) mode is used, allows remote authenticated users to cause a denial of service via a sequence of FTP sessions that include an invalid "NLST -1" command. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2801 - http://securityreason.com/securityalert/4785 - http://secunia.com/advisories/32209 - http://www.securitytracker.com/id?1021040 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45806 - https://www.exploit-db.co
.securitytracker.com/id?1021040 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45806 - https://www.exploit-db.com/exploits/6717
CVE ID: CVE-2008-5667 State: PUBLISHED Published: 2008-12-18T21:00:00 Last Updated: 2024-08-07T11:04:44.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: The scanning engine in VirusBlokAda VBA32 Personal Antivirus 3.12.8.x allows remote attackers to cause a denial of service (memory corruption and application crash) via a malformed RAR archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31560 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47573 - https://www.exploit-db.com/exploits/6658
CVE ID: CVE-2008-5668 State: PUBLISHED Published: 2008-12-18T21:00:00 Last Updated: 2024-08-07T11:04:43.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Textpattern (aka Txp CMS) 4.0.5 allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO to setup/index.php or (2) the name parameter to index.php in the comments preview section. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28793 - http://www.securityfocus.com/bid/27606 - http://www.securityfocus.com/archive/1/487483/100/200/threaded - http://securityreason.com/securityalert/4786 - http://textpat
/www.securityfocus.com/archive/1/487483/100/200/threaded - http://securityreason.com/securityalert/4786 - http://textpattern.com/weblog/310/textpattern-406-released
CVE ID: CVE-2008-5669 State: PUBLISHED Published: 2008-12-18T21:00:00 Last Updated: 2024-08-07T11:04:43.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in the comments preview section in Textpattern (aka Txp CMS) 4.0.5 allows remote attackers to cause a denial of service via a long message parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28793 - http://www.securityfocus.com/bid/27606 - http://www.securityfocus.com/archive/1/487483/100/200/threaded - http://securityreason.com/securityalert/4786 - http://textpattern.com/weblog/310/textpattern-406-released
CVE ID: CVE-2008-5670 State: PUBLISHED Published: 2008-12-18T21:00:00 Last Updated: 2024-08-07T11:04:43.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: Textpattern (aka Txp CMS) 4.0.5 does not ask for the old password during a password reset, which makes it easier for remote attackers to change a password after hijacking a session. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28793 - http://www.securityfocus.com/bid/27606 - http://www.securityfocus.com/archive/1/487483/100/200/threaded - http://securityreason.com/securityalert/4786
CVE ID: CVE-2008-5671 State: PUBLISHED Published: 2008-12-18T21:00:00 Last Updated: 2024-08-07T11:04:44.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Joomla! 1.0.11 through 1.0.14, when RG_EMULATION is enabled in configuration.php, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/488126/100/200/threaded - http://www.joomla.org/announcements/release-news/4609-joomla-1015-released.html - http://secunia.com/advisories/29106 - http://www.securityfocus.com/bid/27795
lease-news/4609-joomla-1015-released.html - http://secunia.com/advisories/29106 - http://www.securityfocus.com/bid/27795 - http://www.securityfocus.com/archive/1/488199/100/200/threaded - http://securityreason.com/securityalert/4787
CVE ID: CVE-2008-5672 State: PUBLISHED Published: 2008-12-18T21:00:00 Last Updated: 2024-08-07T11:04:43.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in PHParanoid before 0.4 allow remote attackers to hijack the authentication of arbitrary users for requests that use (1) admin.php or (2) private messages. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=575358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40518 - http://secunia.com/advisories/28847
CVE ID: CVE-2008-5673 State: PUBLISHED Published: 2008-12-18T21:00:00 Last Updated: 2024-08-07T11:04:43.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHParanoid before 0.4 does not properly restrict access to the members area by unauthenticated users, which has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/40516 - http://sourceforge.net/project/shownotes.php?release_id=575358 - http://secunia.com/advisories/28847
CVE ID: CVE-2008-5674 State: PUBLISHED Published: 2008-12-18T21:00:00 Last Updated: 2024-08-07T11:04:43.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple array index errors in the HTTP server in Darkwet Network webcamXP 3.72.440.0 and earlier and beta 4.05.280 and earlier allow remote attackers to cause a denial of service (device crash) and read portions of memory via (1) an invalid camnum parameter to the pocketpc component and (2) an invalid id parameter to the show_gallery_pic component. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27875 - http://www.securityfocus.com/archive/1/488364/100/200/threaded - http://se
s: - http://www.securityfocus.com/bid/27875 - http://www.securityfocus.com/archive/1/488364/100/200/threaded - http://securityreason.com/securityalert/4788 - http://aluigi.altervista.org/adv/webcamxp-adv.txt - http://osvdb.org/42929 - http://secunia.com/advisories/29007 - http://www.osvdb.org/42927 - http://www.osvdb.org/42928
CVE ID: CVE-2008-5675 State: PUBLISHED Published: 2008-12-18T22:00:00 Last Updated: 2024-08-07T11:04:44.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM WebSphere Portal 6.0 before 6.0.1.5 has unknown impact and attack vectors related to "Access problems with BasicAuthTAI." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33132 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK75304 - http://www.osvdb.org/50720 - http://www.vupen.com/english/advisories/2008/3427 - http://www-01.ibm.com/support/docview.wss?uid=swg27007603
CVE ID: CVE-2008-5676 State: PUBLISHED Published: 2008-12-18T22:00:00 Last Updated: 2024-08-07T11:04:44.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the ModSecurity (aka mod_security) module 2.5.0 through 2.5.5 for the Apache HTTP Server, when SecCacheTransformations is enabled, allow remote attackers to cause a denial of service (daemon crash) or bypass the product's functionality via unknown vectors related to "transformation caching." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32146 - http://blog.modsecurity.org/2008/08/transformation.html - http://www.vupen.com/english/advisorie
.com/advisories/32146 - http://blog.modsecurity.org/2008/08/transformation.html - http://www.vupen.com/english/advisories/2008/2795 - http://freshmeat.net/projects/modsecurity/?branch_id=34901&release_id=282329 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45770
CVE ID: CVE-2008-5677 State: PUBLISHED Published: 2008-12-18T22:00:00 Last Updated: 2024-08-07T11:04:44.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in Kwalbum 2.0.4, 2.0.2, and earlier, when PICS_PATH is located in the web root, allows remote authenticated users with upload capability to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file under items/, related to the ReplaceBadFilenameChars function in include/ItemAdder.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http
details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4789 - http://www.securityfocus.com/bid/31568 - http://secunia.com/advisories/32145 - https://www.exploit-db.com/exploits/6664 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45655
CVE ID: CVE-2008-5678 State: PUBLISHED Published: 2008-12-18T22:00:00 Last Updated: 2024-08-07T11:04:44.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fretwell-Downing Informatics (FDI) OLIB7 WebView 2.5.1.1 allows remote authenticated users to obtain sensitive information from files via the infile parameter to the default URI under cgi/, as demonstrated by the (1) get_settings.ini, (2) setup.ini, and (3) text.ini files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31544 - http://securityreason.com/securityalert/4790 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45638 - https://www.exploit-db.com/exploits/6653
CVE ID: CVE-2008-5679 State: PUBLISHED Published: 2008-12-19T16:09:00 Last Updated: 2024-08-07T11:04:44.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTML parsing engine in Opera before 9.63 allows remote attackers to execute arbitrary code via crafted web pages that trigger an invalid pointer calculation and heap corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/499315/100/0/threaded - http://www.opera.com/docs/changelogs/linux/963/ - http://securityreason.com/securityalert/4791 - http://www.securitytracker.com/id?1021460 - http://www.opera.com/support/kb/view/921/ - http://secunia.com/advisories/34294 -
//www.securitytracker.com/id?1021460 - http://www.opera.com/support/kb/view/921/ - http://secunia.com/advisories/34294 - http://www.nruns.com/security_advisory_opera_html_parsing_code_execution.php - http://security.gentoo.org/glsa/glsa-200903-30.xml
CVE ID: CVE-2008-5680 State: PUBLISHED Published: 2008-12-19T16:09:00 Last Updated: 2024-08-07T11:04:44.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Opera before 9.63 might allow (1) remote attackers to execute arbitrary code via a crafted text area, or allow (2) user-assisted remote attackers to execute arbitrary code via a long host name in a file: URL. NOTE: this might overlap CVE-2008-5178. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/support/kb/view/920/ - http://www.securityfocus.com/archive/1/498517/100/0/threaded - http://www.securitytracker.com/id?1021456 - http://www.securityfocus.com/archive/1
com/archive/1/498517/100/0/threaded - http://www.securitytracker.com/id?1021456 - http://www.securityfocus.com/archive/1/498481/100/0/threaded - http://www.securityfocus.com/archive/1/498452/100/0/threaded - http://www.opera.com/docs/changelogs/linux/963/ - http://www.securityfocus.com/archive/1/498499/100/0/threaded - http://securitytracker.com/id?1021457 - http://secunia.com/advisories/34294 - http://www.securityfocus.com/archive/1/498543/100/0/threaded - http://security.gentoo.org/glsa/glsa-200903-30.xml - http://www.opera.com/support/kb/view/922/
CVE ID: CVE-2008-5681 State: PUBLISHED Published: 2008-12-19T16:09:00 Last Updated: 2024-08-07T11:04:44.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 9.63 does not block unspecified "scripted URLs" during the feed preview, which allows remote attackers to read existing subscriptions and force subscriptions to arbitrary feed URLs. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/linux/963/ - http://secunia.com/advisories/34294 - http://www.opera.com/support/kb/view/923/ - http://security.gentoo.org/glsa/glsa-200903-30.xml - http://www.securitytracker.com/id?1021461
CVE ID: CVE-2008-5682 State: PUBLISHED Published: 2008-12-19T16:09:00 Last Updated: 2024-08-07T11:04:44.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Opera before 9.63 allows remote attackers to inject arbitrary web script or HTML via built-in XSLT templates. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/linux/963/ - http://osvdb.org/50951 - http://www.securitytracker.com/id?1021462 - http://www.opera.com/support/kb/view/924/ - http://secunia.com/advisories/34294 - http://security.gentoo.org/glsa/glsa-200903-30.xml
CVE ID: CVE-2008-5683 State: PUBLISHED Published: 2008-12-19T16:09:00 Last Updated: 2024-08-07T11:04:44.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Opera before 9.63 allows remote attackers to "reveal random data" via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1021459 - http://www.opera.com/docs/changelogs/linux/963/ - http://www.opera.com/support/kb/view/924/ - http://secunia.com/advisories/34294 - http://security.gentoo.org/glsa/glsa-200903-30.xml
CVE ID: CVE-2008-5684 State: PUBLISHED Published: 2008-12-19T17:00:00 Last Updated: 2024-08-07T11:04:44.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the X Inter Client Exchange library (aka libICE) in Sun Solaris 8 through 10 and OpenSolaris before snv_85 allows context-dependent attackers to cause a denial of service (application crash), as demonstrated by a port scan that triggers a segmentation violation in the Gnome session manager (aka gnome-session). Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2008-513.htm - http://sunsolve.sun.com/search/document.do?assetkey=1-21-119067
/support.avaya.com/elmodocs2/security/ASA-2008-513.htm - http://sunsolve.sun.com/search/document.do?assetkey=1-21-119067-11-1 - http://securitytracker.com/id?1021391 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-243566-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47311 - http://secunia.com/advisories/33157 - http://www.vupen.com/english/advisories/2008/3431 - http://www.securityfocus.com/bid/32807 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6003 - http://secunia.com/advisories/33325
CVE ID: CVE-2008-5685 State: PUBLISHED Published: 2008-12-19T17:00:00 Last Updated: 2024-08-07T11:04:44.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun ScApp firmware 5.18.x, 5.19.x, and 5.20.0 through 5.20.10 on Sun Fire and Netra platforms allows remote attackers to access the System Controller (SC), the system console, and possibly the host OS, and cause a denial of service (shutdown or reboot), via spoofed IP packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32805 - http://securitytracker.com/id?1021392 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-114527-12-1 - http://sunsolve.sun.com/search/docume
d?1021392 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-114527-12-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-246746-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019814.1-1 - http://www.vupen.com/english/advisories/2008/3440 - http://secunia.com/advisories/33158
CVE ID: CVE-2008-5686 State: PUBLISHED Published: 2008-12-19T17:00:00 Last Updated: 2024-08-07T11:04:44.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Provisioning Manager (TPM) before 5.1.1.1 IF0006, when its LDAP service is shared with other applications, does not require that an LDAP user be listed in the TPM user records, which allows remote authenticated users to execute SOAP commands that access arbitrary TPM functionality, as demonstrated by running provisioning workflows. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32824 - http://www.vupen.com/english/advisories/2008/3432 - http://securitytracker.com/id
tp://www.securityfocus.com/bid/32824 - http://www.vupen.com/english/advisories/2008/3432 - http://securitytracker.com/id?1021394 - http://secunia.com/advisories/33143 - http://www-01.ibm.com/support/docview.wss?uid=swg21330228
CVE ID: CVE-2008-5687 State: PUBLISHED Published: 2008-12-19T17:00:00 Last Updated: 2024-08-07T11:04:44.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: MediaWiki 1.11, and other versions before 1.13.3, does not properly protect against the download of backups of deleted images, which might allow remote attackers to obtain sensitive information via requests for files in images/deleted/. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01309.html - http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-December/000080.html - https://www.redhat.com/archives/fedora-package-announce/2008
rg/pipermail/mediawiki-announce/2008-December/000080.html - https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01256.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/47678 - http://secunia.com/advisories/33349
CVE ID: CVE-2008-5688 State: PUBLISHED Published: 2008-12-19T17:00:00 Last Updated: 2024-08-07T11:04:44.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: MediaWiki 1.8.1, and other versions before 1.13.3, when the wgShowExceptionDetails variable is enabled, sometimes provides the full installation path in a debugging message, which might allow remote attackers to obtain sensitive information via unspecified requests that trigger an uncaught exception. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01309.html - http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-December/000080.ht