Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-1486 State: PUBLISHED Published: 2008-03-24T23:00:00 Last Updated: 2024-08-07T08:24:42.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Phorum before 5.2.6, when mysql_use_ft is disabled, allows remote attackers to execute arbitrary SQL commands via the non-fulltext search. Additional Analyst Notes: - CVE Program Container: References: - http://www.phorum.org/phorum5/read.php?64%2C126815%2C126815 - http://secunia.com/advisories/29519 - http://www.securityfocus.com/bid/28540 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41418
CVE ID: CVE-2008-1487 State: PUBLISHED Published: 2008-03-24T23:00:00 Last Updated: 2024-08-07T08:24:41.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via (1) ftp/index.php, (2) viewer.php, (3) functions/other.php, (4) include/left_menu.class.php, and (5) plugins/stats/stats_view.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29525 - http://linpha.sourceforge.net/wiki/index.php/Release_Notes#Version_1.3.3 - http://linpha.cvs.sourceforge.net/linpha/linpha/ChangeLog?view=markup
CVE ID: CVE-2008-1488 State: PUBLISHED Published: 2008-03-24T23:00:00 Last Updated: 2024-08-07T08:24:42.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in apc.c in Alternative PHP Cache (APC) 3.0.11 through 3.0.16 allows remote attackers to execute arbitrary code via a long filename. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00582.html - http://secunia.com/advisories/29745 - http://papasian.org/~dannyp/apcsmash.php.txt - http://pecl.php.net/bugs/bug.php?id=13415 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41420 - http://secunia.com/advisories/2950
/bugs/bug.php?id=13415 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41420 - http://secunia.com/advisories/29509 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00548.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:082 - http://secunia.com/advisories/31082 - http://security.gentoo.org/glsa/glsa-200804-07.xml - http://www.securityfocus.com/bid/28457
CVE ID: CVE-2008-1489 State: PUBLISHED Published: 2008-03-25T00:00:00 Last Updated: 2024-08-07T08:24:42.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the MP4_ReadBox_rdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2008/dsa-1543 - http://www.securityfocus.com/bid/28433 - http://trac.videolan.org/vlc/changeset/09572892df7e72c0d4e598c0b5e076cf330d8b0a - http:/
w.securityfocus.com/bid/28433 - http://trac.videolan.org/vlc/changeset/09572892df7e72c0d4e598c0b5e076cf330d8b0a - http://www.videolan.org/security/sa0803.php - http://security.gentoo.org/glsa/glsa-200804-25.xml - http://wiki.videolan.org/Changelog/0.8.6f - http://secunia.com/advisories/29800 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14841 - http://secunia.com/advisories/29766 - http://secunia.com/advisories/29503 - http://www.vupen.com/english/advisories/2008/0985 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41412
CVE ID: CVE-2008-1490 State: PUBLISHED Published: 2008-03-25T19:00:00 Last Updated: 2024-08-07T08:24:42.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in a certain Aurigma ActiveX control in ImageUploader4.ocx 4.1.36.0, as used with Piczo (aka Pizco) and possibly other online services, allows remote attackers to execute arbitrary code via unspecified vectors, possibly involving a long Action property, a different CLSID than CVE-2008-0659. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28354 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40152 - http://marc.info/?l=bugtraq&m=120605071403813&w=2 - http:
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40152 - http://marc.info/?l=bugtraq&m=120605071403813&w=2 - http://secunia.com/advisories/29445
CVE ID: CVE-2008-1491 State: PUBLISHED Published: 2008-03-25T19:00:00 Last Updated: 2024-08-07T08:24:42.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the DPC Proxy server (DpcProxy.exe) in ASUS Remote Console (aka ARC or ASMB3) 2.0.0.19 and 2.0.0.24 allows remote attackers to execute arbitrary code via a long string to TCP port 623. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/asuxdpc-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/41358 - https://www.exploit-db.com/exploits/5694 - http://securityreason.com/securityalert/3771 - http://www.securityfocus.com/bid/28394 - http://s
-db.com/exploits/5694 - http://securityreason.com/securityalert/3771 - http://www.securityfocus.com/bid/28394 - http://secunia.com/advisories/29402 - http://www.vupen.com/english/advisories/2008/0982/references - http://www.securityfocus.com/archive/1/489966/100/0/threaded
CVE ID: CVE-2008-1492 State: PUBLISHED Published: 2008-03-25T19:00:00 Last Updated: 2024-08-07T08:24:41.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in CoronaMatrix phpAddressBook 2.11 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the skin parameter to (1) index.php and (2) install.php. NOTE: it was later reported that vector 1 is also present in 2.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489971/100/0/threaded - http://www.securityfocus.com/archive/1/491525/100/0/threaded - http://securityreason.com/securityalert/3772 -
hreaded - http://www.securityfocus.com/archive/1/491525/100/0/threaded - http://securityreason.com/securityalert/3772 - https://www.exploit-db.com/exploits/5288 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41394 - http://secunia.com/advisories/29514 - http://www.securityfocus.com/bid/28397 - http://0x90.com.ar/Advisory/20080321.txt
CVE ID: CVE-2008-1493 State: PUBLISHED Published: 2008-03-25T19:00:00 Last Updated: 2024-08-07T08:24:42.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in login.php in Cuteflow Bin 1.5.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5296 - http://www.securityfocus.com/archive/1/490055/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/41392 - http://www.securityfocus.com/bid/28419
CVE ID: CVE-2008-1494 State: PUBLISHED Published: 2008-03-25T19:00:00 Last Updated: 2024-08-07T08:24:42.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in inc/module/online.php in Easy-Clanpage 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a user details action, a different vector than CVE-2008-1425. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28329 - http://securityreason.com/securityalert/3773 - http://www.securityfocus.com/archive/1/489888/100/0/threaded
CVE ID: CVE-2008-1495 State: PUBLISHED Published: 2008-03-25T19:00:00 Last Updated: 2024-08-07T08:24:41.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in administrer/produits.php in PEEL, possibly 3.x and earlier, allows remote authenticated administrators to upload and execute arbitrary PHP files via a modified content type in an ajout action, as demonstrated by (1) image/gif and (2) application/pdf. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29466 - https://www.exploit-db.com/exploits/5281 - http://www.securityfocus.com/bid/28346 - http://realn.free.fr/releases/70207 - https://exchan
oit-db.com/exploits/5281 - http://www.securityfocus.com/bid/28346 - http://realn.free.fr/releases/70207 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41354
CVE ID: CVE-2008-1496 State: PUBLISHED Published: 2008-03-25T19:00:00 Last Updated: 2024-08-07T08:24:41.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PEEL, possibly 3.x and earlier, allow remote attackers to execute arbitrary SQL commands via the (1) email parameter to (a) membre.php, and the (2) timestamp parameter to (b) the details action in achat/historique_commandes.php and (c) the facture action in factures/facture_html.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41341 - http://secunia.com/advisories/29466 - https://www.exploit-db.com/exploits/5281
rce.ibmcloud.com/vulnerabilities/41341 - http://secunia.com/advisories/29466 - https://www.exploit-db.com/exploits/5281 - http://www.securityfocus.com/bid/28346 - http://realn.free.fr/releases/70207 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41353
CVE ID: CVE-2008-1497 State: PUBLISHED Published: 2008-03-25T19:00:00 Last Updated: 2024-08-07T08:24:42.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated users to execute arbitrary code via long arguments to the LSUB command. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3774 - http://www.infigo.hr/en/in_focus/advisories/INFIGO-2008-03-07 - http://secunia.com/advisories/29105 - http://www.securityfocus.com/archive/1/489959/100/0/threaded - http://www.securityfocus.com/bid/28377 - https://exchange.xforce.ibm
securityfocus.com/archive/1/489959/100/0/threaded - http://www.securityfocus.com/bid/28377 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41402 - http://www.netwinsite.com/surgemail/help/updates.htm
CVE ID: CVE-2008-1498 State: PUBLISHED Published: 2008-03-25T19:00:00 Last Updated: 2024-08-07T08:24:41.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows remote authenticated users to execute arbitrary code via a long first argument to the LIST command. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5259 - http://secunia.com/advisories/29105 - http://www.securityfocus.com/bid/28260 - http://www.vupen.com/english/advisories/2008/0901/references - http://www.netwinsite.com/surgemail/help/updates.htm
CVE ID: CVE-2008-1499 State: PUBLISHED Published: 2008-03-25T19:00:00 Last Updated: 2024-08-07T08:24:42.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in frontend/x/manpage.html in cPanel 11.18.3 and 11.21.0-BETA allows remote attackers to inject arbitrary web script or HTML via the query string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489963/100/0/threaded - http://securityreason.com/securityalert/3775 - http://www.securityfocus.com/bid/28403 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41374
CVE ID: CVE-2008-1500 State: PUBLISHED Published: 2008-03-25T19:00:00 Last Updated: 2024-08-07T08:24:42.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in TinyPortal 0.8.6 and 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28402 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41376
CVE ID: CVE-2008-1501 State: PUBLISHED Published: 2008-03-25T19:00:00 Last Updated: 2024-08-07T08:24:41.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: The send_user_mode function in s_user.c in (1) Undernet ircu 2.10.12.12 and earlier, (2) snircd 1.3.4 and earlier, and unspecified other ircu derivatives allows remote attackers to cause a denial of service (daemon crash) via a malformed MODE command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41401 - http://secunia.com/advisories/29486 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-March/060906.html - http://hg.quakenet.org/snircd/rev/2da2b8
6 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-March/060906.html - http://hg.quakenet.org/snircd/rev/2da2b881d9f5 - http://www.securityfocus.com/archive/1/489990/100/0/threaded - http://www.vupen.com/english/advisories/2008/0977 - http://www.securitytracker.com/id?1019687 - http://www.securityfocus.com/bid/28413 - http://osvdb.org/43613 - http://securityreason.com/securityalert/3779 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41397 - https://www.exploit-db.com/exploits/5306 - http://www.securitytracker.com/id?1019688 - http://www.vupen.com/english/advisories/2008/0978 - http://secunia.com/advisories/29481
CVE ID: CVE-2008-1502 State: PUBLISHED Published: 2008-03-25T19:00:00 Last Updated: 2024-08-07T08:24:41.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _bad_protocol_once function in phpgwapi/inc/class.kses.inc.php in KSES, as used in eGroupWare before 1.4.003, Moodle before 1.8.5, and other products, allows remote attackers to bypass HTML filtering and conduct cross-site scripting (XSS) attacks via a string containing crafted URL protocols. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29491 - http://secunia.com/advisories/31017 - http://secunia.com/advisories/32400 - http://lists.opensuse.org/opensuse-security-announce/20
nia.com/advisories/31017 - http://secunia.com/advisories/32400 - http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html - http://secunia.com/advisories/32446 - http://www.debian.org/security/2009/dsa-1871 - http://secunia.com/advisories/30986 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41435 - http://www.egroupware.org/viewvc/branches/1.4/phpgwapi/inc/class.kses.inc.php?r1=23625&r2=25110&pathrev=25110 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00331.html - http://secunia.com/advisories/31018 - https://usn.ubuntu.com/658-1/ - http://docs.moodle.org/en/Release_Notes#Moodle_1.8.5 - http://www.openwall.com/lists/oss-security/2008/07/08/1
/658-1/ - http://docs.moodle.org/en/Release_Notes#Moodle_1.8.5 - http://www.openwall.com/lists/oss-security/2008/07/08/14 - http://secunia.com/advisories/30073 - http://www.egroupware.org/changelog - http://www.securityfocus.com/bid/28424 - http://www.gentoo.org/security/en/glsa/glsa-200805-04.xml - http://www.vupen.com/english/advisories/2008/0989/references - http://www.debian.org/security/2008/dsa-1691 - http://secunia.com/advisories/31167
CVE ID: CVE-2008-1503 State: PUBLISHED Published: 2008-03-25T19:00:00 Last Updated: 2024-08-07T08:24:42.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web management interface in F5 BIG-IP 9.4.3 allows remote attackers to inject arbitrary web script or HTML via (1) the name of a node object, or the (2) sysContact or (3) sysLocation SNMP configuration field, aka "Audit Log XSS." NOTE: these issues might be resultant from cross-site request forgery (CSRF) vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3778 - https://exchange.xforce.ibmcloud.com/vulnerabili
Container: References: - http://securityreason.com/securityalert/3778 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41440 - http://www.securityfocus.com/archive/1/489991/100/0/threaded - http://www.securityfocus.com/bid/28416
CVE ID: CVE-2008-1504 State: PUBLISHED Published: 2008-03-25T19:00:00 Last Updated: 2024-08-07T08:24:42.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in setup.php3 in phpHeaven phpMyChat 0.14.5 allows remote attackers to inject arbitrary web script or HTML via the Lang parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41381 - http://www.securityfocus.com/bid/28399
CVE ID: CVE-2008-1505 State: PUBLISHED Published: 2008-03-25T19:00:00 Last Updated: 2024-08-07T08:24:42.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in the SSTREAMTV custompages (com_custompages) 1.1 and earlier component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the cpage parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5294 - http://secunia.com/advisories/29520 - http://www.securityfocus.com/bid/28409 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41396
CVE ID: CVE-2008-1506 State: PUBLISHED Published: 2008-03-25T22:00:00 Last Updated: 2024-08-07T08:24:42.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: PEEL, possibly 3.x and earlier, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41494 - http://realn.free.fr/releases/70207
CVE ID: CVE-2008-1507 State: PUBLISHED Published: 2008-03-25T22:00:00 Last Updated: 2024-08-07T08:24:42.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: PEEL, possibly 3.x and earlier, has (1) a default info@peel.fr account with password admin, and (2) a default contact@peel.fr account with password cinema, which allows remote attackers to gain administrative access. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5281 - http://realn.free.fr/releases/70207 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41493
CVE ID: CVE-2008-1508 State: PUBLISHED Published: 2008-03-25T23:00:00 Last Updated: 2024-08-07T08:24:42.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in EfesTech E-Kontör and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29499 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41419 - http://securityreason.com/securityalert/3776 - http://www.securityfocus.com/bid/28412 - http://www.securityfocus.com/archive/1/489989/100/0/threaded
CVE ID: CVE-2008-1509 State: PUBLISHED Published: 2008-03-25T23:00:00 Last Updated: 2024-08-07T08:24:42.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in XLPortal 2.2.4 and earlier allows remote attackers to execute arbitrary SQL commands via the query parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5293 - http://secunia.com/advisories/29479 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41379 - http://www.securityfocus.com/bid/28408
CVE ID: CVE-2008-1510 State: PUBLISHED Published: 2008-03-25T23:00:00 Last Updated: 2024-08-07T08:24:42.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in system/workplace/admin/accounts/users_list.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the (1) searchfilter or (2) listSearchFilter parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28411 - http://securityreason.com/securityalert/3777 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41390 - http://www.securityfocus.com/archive/1/489984/100/0/threaded
CVE ID: CVE-2008-1511 State: PUBLISHED Published: 2008-03-25T23:00:00.000Z Last Updated: 2025-04-03T13:53:19.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in ooComments 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the PathToComment parameter for (1) classes/class_admin.php and (2) classes/class_comments.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/28401/exploit - http://www.securityfocus.com/bid/28401
CVE ID: CVE-2008-1512 State: PUBLISHED Published: 2008-03-25T23:00:00 Last Updated: 2024-08-07T08:24:42.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin/admin_xs.php in eXtreme Styles module (XS-Mod) 2.3.1 and 2.4.0 for phpBB allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the phpEx parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5301 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41404 - http://www.securityfocus.com/bid/28432 - http://secunia.com/advisories
hange.xforce.ibmcloud.com/vulnerabilities/41404 - http://www.securityfocus.com/bid/28432 - http://secunia.com/advisories/29487
CVE ID: CVE-2008-1513 State: PUBLISHED Published: 2008-03-25T23:00:00 Last Updated: 2024-08-07T08:24:42.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Danneo CMS 0.5.1 and earlier, when the Referers statistics option is enabled, allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5239 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41153
CVE ID: CVE-2008-1514 State: PUBLISHED Published: 2008-03-26T00:00:00 Last Updated: 2024-08-07T08:24:42.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/s390/kernel/ptrace.c in Linux kernel 2.6.9, and other versions before 2.6.27-rc6, on s390 platforms allows local users to cause a denial of service (kernel panic) via the user-area-padding test from the ptrace testsuite in 31-bit mode, which triggers an invalid dereference. Additional Analyst Notes: - CVE Program Container: References: - http://sourceware.org/systemtap/wiki/utrace/tests - http://secunia.com/advisories/31826 - http://www.debian.org/security/2008/dsa-1655 - http://www.securityfocus.com/bid/31177 - http://se
com/advisories/31826 - http://www.debian.org/security/2008/dsa-1655 - http://www.securityfocus.com/bid/31177 - http://secunia.com/advisories/32237 - http://rhn.redhat.com/errata/RHSA-2008-0972.html - http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.27-rc6 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.6 - http://www.debian.org/security/2008/dsa-1653 - http://secunia.com/advisories/32356 - https://bugzilla.redhat.com/show_bug.cgi?id=438147 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3d6e48f43340343d97839eadb1ab7b6a3ea98797 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41501 - http://lists.opensuse.org/opensuse-security-an