Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-3761 State: PUBLISHED Published: 2008-08-21T17:00:00 Last Updated: 2024-08-07T09:53:00.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: hcmon.sys in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 1.0.x before 1.0.9 build 156507 and 2.0.x before 2.0.1 build 156745 uses the METHOD_NEITHER communication method for IOCTLs, which allows local users to cause a denial of service via a crafted IOCTL request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44539 - http://securityreason.com/securityalert/4177 - http://seclists.org
/exchange.xforce.ibmcloud.com/vulnerabilities/44539 - http://securityreason.com/securityalert/4177 - http://seclists.org/fulldisclosure/2009/Apr/0036.html - http://www.securityfocus.com/bid/30737 - http://www.securityfocus.com/bid/34373 - http://www.securitytracker.com/id?1020715 - http://www.orange-bat.com/adv/2008/adv.08.17.txt - http://www.vupen.com/english/advisories/2009/0944 - http://lists.vmware.com/pipermail/security-announce/2009/000054.html - http://www.vmware.com/security/advisories/VMSA-2009-0005.html - https://www.exploit-db.com/exploits/6262
CVE ID: CVE-2008-3762 State: PUBLISHED Published: 2008-08-21T17:00:00 Last Updated: 2024-08-07T09:52:59.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in onlinestatus_html.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the dep parameter, related to lack of input sanitization in the get function in global.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44568 - https://www.exploit-db.com/exploits/6261 - http://securityreason.com/securityalert/4178 - http://www.securityfocus.com/archive/1/495542/100/0/threaded - h
s/6261 - http://securityreason.com/securityalert/4178 - http://www.securityfocus.com/archive/1/495542/100/0/threaded - http://www.securityfocus.com/bid/30729 - http://secunia.com/advisories/31521 - http://www.gulftech.org/?node=research&article_id=00124-08162008
CVE ID: CVE-2008-3763 State: PUBLISHED Published: 2008-08-21T17:00:00 Last Updated: 2024-08-07T09:53:00.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Variable overwrite vulnerability in libsecure.php in Turnkey PHP Live Helper 2.0.1 and earlier, when register_globals is enabled, allows remote attackers to overwrite arbitrary variables related to the db config file. NOTE: this can be leveraged for code injection by overwriting the language file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6261 - http://securityreason.com/securityalert/4178 - http://www.securityfocus.com/archive/1/495542/100/0/threaded - http://www.secu
//securityreason.com/securityalert/4178 - http://www.securityfocus.com/archive/1/495542/100/0/threaded - http://www.securityfocus.com/bid/30729 - http://demos.turnkeywebtools.com/phplivehelper/docs/change_log.txt - http://secunia.com/advisories/31521 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44570 - http://www.gulftech.org/?node=research&article_id=00124-08162008
CVE ID: CVE-2008-3764 State: PUBLISHED Published: 2008-08-21T17:00:00 Last Updated: 2024-08-07T09:52:59.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in globalsoff.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary PHP code via the test parameter, and probably arbitrary parameters, to chat.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6261 - http://securityreason.com/securityalert/4178 - http://www.securityfocus.com/archive/1/495542/100/0/threaded - http://www.securityfocus.com/bid/30729 - http://demos.turnkeywebtools.com/phplivehelper/docs/cha
495542/100/0/threaded - http://www.securityfocus.com/bid/30729 - http://demos.turnkeywebtools.com/phplivehelper/docs/change_log.txt - http://secunia.com/advisories/31521 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44571 - http://www.gulftech.org/?node=research&article_id=00124-08162008
CVE ID: CVE-2008-3765 State: PUBLISHED Published: 2008-08-21T17:00:00 Last Updated: 2024-08-07T09:52:59.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in code.php in Quick Poll Script allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30724 - http://www.vupen.com/english/advisories/2008/3141 - https://www.exploit-db.com/exploits/7105 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44541 - http://packetstormsecurity.org/0808-exploits/quickpoll-sql.txt
CVE ID: CVE-2008-3766 State: PUBLISHED Published: 2008-08-22T16:00:00 Last Updated: 2024-08-07T09:52:59.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Realtime Internet Band Rehearsal Low-Latency (Internet) Connection tool (llcon) before 2.1.2 allows remote attackers to cause a denial of service (application crash) via malformed protocol messages. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44567 - http://secunia.com/advisories/31496 - http://sourceforge.net/project/shownotes.php?group_id=158367&release_id=619929 - http://www.securityfocus.com/bid/30770
CVE ID: CVE-2008-3767 State: PUBLISHED Published: 2008-08-22T16:00:00 Last Updated: 2024-08-07T09:53:00.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in classified.php in phpBazar 2.0.2 allows remote attackers to execute arbitrary SQL commands via the adid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31555 - https://www.exploit-db.com/exploits/6280 - http://www.securityfocus.com/bid/30773 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44578 - http://securityreason.com/securityalert/4179
CVE ID: CVE-2008-3768 State: PUBLISHED Published: 2008-08-22T16:00:00 Last Updated: 2024-08-07T09:52:59.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in class.ajax.php in Turnkey Web Tools SunShop Shopping Cart before 4.1.5 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in an edit_registry action to index.php, (2) a vector involving the check_email function, and other vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4180 - http://www.securityfocus.com/archive/1/495578/100/0/threaded - http://secunia.com/advisories/31539 - https://www.exp
0 - http://www.securityfocus.com/archive/1/495578/100/0/threaded - http://secunia.com/advisories/31539 - https://www.exploit-db.com/exploits/6273 - http://www.gulftech.org/?node=research&article_id=00125-08182008 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44553 - http://demos.turnkeywebtools.com/ss4/docs/change_log.txt - http://www.securityfocus.com/bid/30751
CVE ID: CVE-2008-3769 State: PUBLISHED Published: 2008-08-22T16:00:00 Last Updated: 2024-08-07T09:52:59.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/create_order_new.php in Freeway 1.4.1.171, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the include_page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31475 - http://www.openfreeway.org/download/change-log.html - http://securityreason.com/securityalert/4181 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45036 - http://www.securityfocus.com/archive/1/495549/
alert/4181 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45036 - http://www.securityfocus.com/archive/1/495549/100/0/threaded
CVE ID: CVE-2008-3770 State: PUBLISHED Published: 2008-08-22T16:00:00 Last Updated: 2024-08-07T09:52:59.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Freeway 1.4.1.171, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter to (1) includes/events_application_top.php; (2) english/account.php, (3) french/account.php, and (4) french/account_newsletters.php in includes/languages/; (5) includes/modules/faqdesk/faqdesk_article_require.php; (6) includes/modules/newsdesk/newsdesk_article_require.php; (7) card1.php, (8) loginbox.php, and (9) who
le_require.php; (6) includes/modules/newsdesk/newsdesk_article_require.php; (7) card1.php, (8) loginbox.php, and (9) whos_online.php in templates/Freeway/boxes/; and (10) templates/Freeway/mainpage_modules/mainpage.php. NOTE: vector 1 may be the same as CVE-2008-3677. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45037 - http://www.securityfocus.com/bid/30731 - http://secunia.com/advisories/31475 - http://www.openfreeway.org/download/change-log.html - http://securityreason.com/securityalert/4181 - http://www.securityfocus.com/archive/1/495549/100/0/threaded
CVE ID: CVE-2008-3771 State: PUBLISHED Published: 2008-08-22T16:00:00 Last Updated: 2024-08-07T09:53:00.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in members.php in Pars4u Videosharing 1 allows remote attackers to inject arbitrary web script or HTML via the PageNo parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6279 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44581 - http://www.securityfocus.com/bid/30779
CVE ID: CVE-2008-3772 State: PUBLISHED Published: 2008-08-22T16:00:00 Last Updated: 2024-08-07T09:52:59.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in categories_portal.php in Pars4u Videosharing 1 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6279 - http://secunia.com/advisories/31571 - http://www.securityfocus.com/bid/30779 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44579
CVE ID: CVE-2008-3773 State: PUBLISHED Published: 2008-08-22T16:00:00 Last Updated: 2024-08-07T09:52:59.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in vBulletin 3.7.2 PL1 and 3.6.10 PL3, when "Show New Private Message Notification Pop-Up" is enabled, allows remote authenticated users to inject arbitrary web script or HTML via a private message subject (aka newpm[title]). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30777 - http://secunia.com/advisories/31552 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44576 - http://www.vbulletin.com/forum/showthread.php?t=282133 - htt
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/44576 - http://www.vbulletin.com/forum/showthread.php?t=282133 - http://www.securitytracker.com/id?1020727 - http://securityreason.com/securityalert/4182 - http://www.coresecurity.com/content/vbulletin-cross-site-scripting-vulnerability - http://marc.info/?l=bugtraq&m=121933258013788&w=2
CVE ID: CVE-2008-3774 State: PUBLISHED Published: 2008-08-22T16:00:00 Last Updated: 2024-08-07T09:52:59.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Simasy CMS allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30774 - http://packetstormsecurity.org/0808-exploits/simasycms-sql.txt - http://www.securityfocus.com/bid/30774/exploit - https://exchange.xforce.ibmcloud.com/vulnerabilities/44580
CVE ID: CVE-2008-3775 State: PUBLISHED Published: 2008-08-22T16:00:00 Last Updated: 2025-01-17T15:17:22.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Folder Lock 5.9.5 and earlier uses weak encryption (ROT-25) for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\_pack registry value. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44575 - http://www.securityfocus.com/bid/30771 - http://www.securityfocus.com/archive/1/495612/100/0/threaded - http://securityreason.com/securityalert/4183 - http://secunia.com/
w.securityfocus.com/archive/1/495612/100/0/threaded - http://securityreason.com/securityalert/4183 - http://secunia.com/advisories/31559
CVE ID: CVE-2008-3776 State: PUBLISHED Published: 2008-08-25T21:00:00 Last Updated: 2024-08-07T09:52:59.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Fujitsu Web-Based Admin View 2.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30780 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44602 - http://seclists.org/fulldisclosure/2008/Aug/0411.html - http://www.securitytracker.com/id?1020726
CVE ID: CVE-2008-3777 State: PUBLISHED Published: 2008-08-25T21:00:00 Last Updated: 2024-08-07T09:52:59.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Communication Manager (CM) 5.0 on the S8300C with SES enabled, writes account names and passwords to the (1) alarm and (2) system logs during failed login attempts, which allows local users to obtain login credentials by reading these logs. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2008-347.htm - http://www.securityfocus.com/bid/30758 - https://exchange.xforce.ibmcloud.com/vu
m/elmodocs2/security/ASA-2008-347.htm - http://www.securityfocus.com/bid/30758 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44586
CVE ID: CVE-2008-3778 State: PUBLISHED Published: 2008-08-25T21:00:00 Last Updated: 2024-08-07T09:52:59.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: The remote management interface in SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Communication Manager (CM) 5.0 on the S8300C with SES enabled, proceeds with Core router updates even when a login is invalid, which allows remote attackers to cause a denial of service (messaging outage) or gain privileges via an update request. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2008-347.htm - https://exchange.xforce.ibmcloud.com/vulner
References: - http://support.avaya.com/elmodocs2/security/ASA-2008-347.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/44585 - http://www.securityfocus.com/bid/30758
CVE ID: CVE-2008-3779 State: PUBLISHED Published: 2008-08-26T14:06:00 Last Updated: 2024-08-07T09:53:00.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search/index.php in Five Star Review Script allows remote attackers to inject arbitrary web script or HTML via the words parameter in a search action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31585 - http://www.securityfocus.com/bid/30808 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44637 - https://www.exploit-db.com/exploits/6294 - http://securityreason.com/securityalert/4184
CVE ID: CVE-2008-3780 State: PUBLISHED Published: 2008-08-26T14:06:00 Last Updated: 2024-08-07T09:52:59.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in recommend.php in Five Star Review Script allows remote attackers to execute arbitrary SQL commands via the item_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31585 - http://www.securityfocus.com/bid/30808 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44636 - https://www.exploit-db.com/exploits/6294 - http://securityreason.com/securityalert/4184
CVE ID: CVE-2008-3781 State: PUBLISHED Published: 2008-08-26T14:06:00 Last Updated: 2024-08-07T09:53:00.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in GMOD GBrowse before 1.69 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44632 - http://www.securityfocus.com/bid/30812 - http://gmod.org/wiki/GMOD_News#GBrowse_1.69_Released - http://sourceforge.net/project/shownotes.php?release_id=621342&group_id=27707 - http://secunia.com/advisories/31596
CVE ID: CVE-2008-3782 State: PUBLISHED Published: 2008-08-26T14:06:00 Last Updated: 2024-08-07T09:53:00.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in ACG-PTP 1.0.6 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) Category name field under Advertisement Packages, the (2) Reason field under Credit/Debit Users, and the (3) FAQ question and (4) FAQ answer fields under Add New FAQ Entry. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44603 - http://secunia.com/advisories/31591 - http://www.sec
ces: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44603 - http://secunia.com/advisories/31591 - http://www.securityfocus.com/bid/30793 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064038.html
CVE ID: CVE-2008-3783 State: PUBLISHED Published: 2008-08-26T14:06:00 Last Updated: 2024-08-07T09:52:59.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in Matterdaddy Market 1.1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) category and (2) type parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4185 - http://secunia.com/advisories/31564 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44630 - http://www.securityfocus.com/bid/30809 - https://www.exploit-db.com/exploits/6297
CVE ID: CVE-2008-3784 State: PUBLISHED Published: 2008-08-26T14:06:00 Last Updated: 2024-08-07T09:52:59.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in scrape.php in BtiTracker 1.4.7 and earlier and xBtiTracker 2.0.542 and earlier allows remote attackers to execute arbitrary SQL commands via the info_hash parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6296 - http://securityreason.com/securityalert/4186 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44627 - http://www.btiteam.org/ - http://secunia.com/advisories/31556 - http://www.securityfocus.com/bid/30811 - http://www.bti
http://www.btiteam.org/ - http://secunia.com/advisories/31556 - http://www.securityfocus.com/bid/30811 - http://www.btiteam.org/smf/index.php?topic=12068
CVE ID: CVE-2008-3785 State: PUBLISHED Published: 2008-08-26T14:06:00 Last Updated: 2024-08-07T09:52:59.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the com_content component in MiaCMS 4.6.5 allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) view, (2) category, or (3) blogsection action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44640 - http://www.securityfocus.com/bid/30805 - http://securityreason.com/securityalert/4189 - http://secunia.com/advisories/31584 - https://www.exploit-db.com/exploits/6295
CVE ID: CVE-2008-3786 State: PUBLISHED Published: 2008-08-26T14:06:00 Last Updated: 2024-08-07T09:52:59.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in PICTURESPRO Photo Cart 3.9 allows remote attackers to inject arbitrary web script or HTML via the qtitle parameter (aka "Gallery or event name" field) in a search action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30798 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44614 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064046.html - http://secunia.com/advisories/31589
CVE ID: CVE-2008-3787 State: PUBLISHED Published: 2008-08-26T14:06:00 Last Updated: 2024-08-07T09:52:59.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in listing_view.php in Web Directory Script 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30807 - http://securityreason.com/securityalert/4187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44638 - https://www.exploit-db.com/exploits/6298
CVE ID: CVE-2008-3788 State: PUBLISHED Published: 2008-08-26T14:06:00 Last Updated: 2024-08-07T09:52:59.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PICTURESPRO Photo Cart 3.9, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) qtitle, (2) qid, and (3) qyear parameters to (a) search.php, and the (4) email and (5) password parameters to (b) _login.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4188 - https://www.exploit-db.com/exploits/6285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44607 - http://www.secur
https://www.exploit-db.com/exploits/6285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44607 - http://www.securityfocus.com/bid/30786 - http://packetstormsecurity.org/0808-exploits/photocart-sql.txt
CVE ID: CVE-2008-3789 State: PUBLISHED Published: 2008-08-27T20:00:00 Last Updated: 2024-08-07T09:53:00.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb files, which allows local users to modify the membership of Unix groups. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496073 - http://www.securityfocus.com/bid/30837 - http://secunia.com/advisories/31601 - http://www.securitytracker.com/id?1020770 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44678 - http://www.vupen.com/english/advisories/2008/2440 - htt
0 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44678 - http://www.vupen.com/english/advisories/2008/2440 - http://samba.org/samba/security/CVE-2008-3789.html - http://www.openwall.com/lists/oss-security/2008/08/26/2
CVE ID: CVE-2008-3790 State: PUBLISHED Published: 2008-08-27T20:00:00 Last Updated: 2024-08-07T09:52:59.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: The REXML module in Ruby 1.8.6 through 1.8.6-p287, 1.8.7 through 1.8.7-p72, and 1.9 allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML document with recursively nested entities, aka an "XML entity explosion." Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/651-1/ - http://secunia.com/advisories/33185 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10393 - http://support.apple.com/kb/HT3549 - http://www.rub