Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-3004 State: PUBLISHED Published: 2008-08-12T23:00:00 Last Updated: 2024-08-07T09:21:34.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3; Office Excel Viewer 2003; and Office 2004 and 2008 for Mac do not properly validate index values for AxesSet records when loading Excel files, which allows remote attackers to execute arbitrary code via a crafted Excel file, aka the "Excel Indexing Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020670 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ad
/www.securitytracker.com/id?1020670 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5885 - http://www.us-cert.gov/cas/techalerts/TA08-225A.html - http://marc.info/?l=bugtraq&m=121915960406986&w=2 - http://marc.info/?l=bugtraq&m=121915960406986&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-043 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=740 - http://secunia.com/advisories/31454 - http://www.securityfocus.com/bid/30638 - http://www.vupen.com/english/advisories/2008/2347
CVE ID: CVE-2008-3005 State: PUBLISHED Published: 2008-08-12T23:00:00 Last Updated: 2024-08-07T09:21:35.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index vulnerability in Microsoft Office Excel 2000 SP3 and 2002 SP3, and Office 2004 and 2008 for Mac allows remote attackers to execute arbitrary code via an Excel file with a crafted array index for a FORMAT record, aka the "Excel Index Array Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA08-225A.html - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=741 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mi
intelligence/vulnerabilities/display.php?id=741 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5837 - http://marc.info/?l=bugtraq&m=121915960406986&w=2 - http://marc.info/?l=bugtraq&m=121915960406986&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-043 - http://www.securitytracker.com/id?1020671 - http://www.securityfocus.com/bid/30639 - http://secunia.com/advisories/31454 - http://www.vupen.com/english/advisories/2008/2347
CVE ID: CVE-2008-3006 State: PUBLISHED Published: 2008-08-12T23:00:00 Last Updated: 2024-08-07T09:21:34.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 Gold and SP3; Office Excel Viewer; Office Compatibility Pack 2007 Gold and SP1; Office SharePoint Server 2007 Gold and SP1; and Office 2004 and 2008 for Mac do not properly parse Country record values when loading Excel files, which allows remote attackers to execute arbitrary code via a crafted Excel file, aka the "Excel Record Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - htt
file, aka the "Excel Record Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA08-225A.html - http://www.securityfocus.com/bid/30640 - http://marc.info/?l=bugtraq&m=121915960406986&w=2 - http://www.securityfocus.com/archive/1/495428/100/0/threaded - http://www.securitytracker.com/id?1020672 - http://marc.info/?l=bugtraq&m=121915960406986&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-043 - http://secunia.com/advisories/31455 - http://secunia.com/advisories/31454 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5561 - http://www.vupen.com/e
4 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5561 - http://www.vupen.com/english/advisories/2008/2347 - http://www.zerodayinitiative.com/advisories/ZDI-08-048/
CVE ID: CVE-2008-3007 State: PUBLISHED Published: 2008-09-10T15:00:00 Last Updated: 2024-08-07T09:21:34.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in a URI handler in Microsoft Office XP SP3, 2003 SP2 and SP3, 2007 Office System Gold and SP1, and Office OneNote 2007 Gold and SP1 allow remote attackers to execute arbitrary code via a crafted onenote:// URL, aka "Uniform Resource Locator Validation Error Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31067 - http://marc.info/?l=bugtraq&m=122235754013992&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletin
- http://marc.info/?l=bugtraq&m=122235754013992&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-055 - http://www.insomniasec.com/advisories/ISVA-080910.1.htm - http://marc.info/?l=bugtraq&m=122235754013992&w=2 - http://www.securitytracker.com/id?1020833 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5970 - http://www.securityfocus.com/archive/1/496178/100/0/threaded - http://www.vupen.com/english/advisories/2008/2523 - http://www.us-cert.gov/cas/techalerts/TA08-253A.html
CVE ID: CVE-2008-3008 State: PUBLISHED Published: 2008-09-10T15:00:00 Last Updated: 2024-08-07T09:21:34.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9 Series allows remote attackers to execute arbitrary code via a long first argument to the GetDetailsString method, aka "Windows Media Encoder Buffer Overrun Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/996227 - http://marc.info/?l=bugtraq&m=122235754013992&w=2 - http://www.securitytracker.com/id?1020832 - https://oval.cisecurity.org/repository
fo/?l=bugtraq&m=122235754013992&w=2 - http://www.securitytracker.com/id?1020832 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6018 - http://www.securityfocus.com/bid/31065 - http://marc.info/?l=bugtraq&m=122235754013992&w=2 - https://www.exploit-db.com/exploits/6454 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-053 - http://www.us-cert.gov/cas/techalerts/TA08-253A.html - http://www.vupen.com/english/advisories/2008/2521
CVE ID: CVE-2008-3009 State: PUBLISHED Published: 2008-12-10T13:33:00 Last Updated: 2024-08-07T09:21:34.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service Principal Name (SPN) identifier when validating replies to authentication requests, which allows remote servers to execute arbitrary code via vectors that employ NTLM credential reflection, aka "SPN Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/32653 - http://www.securitytracker.com/id?1021372 - https://ov
Container: References: - http://www.securityfocus.com/bid/32653 - http://www.securitytracker.com/id?1021372 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5942 - http://www.us-cert.gov/cas/techalerts/TA08-344A.html - http://secunia.com/advisories/33058 - http://www.vupen.com/english/advisories/2008/3388 - http://www.securitytracker.com/id?1021373 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-076
CVE ID: CVE-2008-3010 State: PUBLISHED Published: 2008-12-10T13:33:00 Last Updated: 2024-08-07T09:21:34.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1 and 9 incorrectly associate ISATAP addresses with the Local Intranet zone, which allows remote servers to capture NTLM credentials, and execute arbitrary code through credential-reflection attacks, by sending an authentication request, aka "ISATAP Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021374 - https://oval.cisecurity.org/repository/search/d
ram Container: References: - http://www.securitytracker.com/id?1021374 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5689 - http://www.us-cert.gov/cas/techalerts/TA08-344A.html - http://www.securitytracker.com/id?1021375 - http://secunia.com/advisories/33058 - http://www.vupen.com/english/advisories/2008/3388 - http://www.securityfocus.com/bid/32654 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-076
CVE ID: CVE-2008-3011 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-3012 State: PUBLISHED Published: 2008-09-10T15:00:00 Last Updated: 2024-08-07T09:21:34.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 does not properly perform memory allocation, which allows remote attackers to execute arbitrary code via a
Security 1.0 does not properly perform memory allocation, which allows remote attackers to execute arbitrary code via a malformed EMF image file, aka "GDI+ EMF Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32154 - http://marc.info/?l=bugtraq&m=122235754013992&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-052 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6040 - http://www.vupen.com/english/advisories/2008/2696 - http://marc.info/?l=bugtraq&m=122235754013992&w=2 - http://www.securitytracker.com/id?1020835 - http://www.securityfocus
http://marc.info/?l=bugtraq&m=122235754013992&w=2 - http://www.securitytracker.com/id?1020835 - http://www.securityfocus.com/bid/31019 - http://www.us-cert.gov/cas/techalerts/TA08-253A.html - http://www.vupen.com/english/advisories/2008/2520
CVE ID: CVE-2008-3013 State: PUBLISHED Published: 2008-09-10T15:00:00 Last Updated: 2024-08-07T09:21:34.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a malformed GIF image file containing many extension
Security 1.0 allows remote attackers to execute arbitrary code via a malformed GIF image file containing many extension markers for graphic control extensions and subsequent unknown labels, aka "GDI+ GIF Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32154 - http://www.zerodayinitiative.com/advisories/ZDI-08-056 - http://ifsec.blogspot.com/2008/09/windows-gdi-gif-memory-corruption.html - http://marc.info/?l=bugtraq&m=122235754013992&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-052 - http://www.vupen.com/english/advisories/2008/2696 - http://www.zerodayinitiative.com/advisories/ZDI-
ins/2008/ms08-052 - http://www.vupen.com/english/advisories/2008/2696 - http://www.zerodayinitiative.com/advisories/ZDI-08-056/ - http://marc.info/?l=bugtraq&m=122235754013992&w=2 - http://www.securitytracker.com/id?1020836 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5986 - http://www.securityfocus.com/archive/1/496154/100/0/threaded - http://www.securityfocus.com/bid/31020 - http://www.us-cert.gov/cas/techalerts/TA08-253A.html - http://www.vupen.com/english/advisories/2008/2520
CVE ID: CVE-2008-3014 State: PUBLISHED Published: 2008-09-10T15:00:00 Last Updated: 2024-08-07T09:21:34.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a malformed WMF image file that t
nd Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a malformed WMF image file that triggers improper memory allocation, aka "GDI+ WMF Buffer Overrun Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32154 - http://marc.info/?l=bugtraq&m=122235754013992&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-052 - http://www.securityfocus.com/bid/31021 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6004 - http://www.vupen.com/english/advisories/2008/2696 - http://www.securitytracker.com/id?1020837 - http://marc.info/?l=bugtraq&m
//www.vupen.com/english/advisories/2008/2696 - http://www.securitytracker.com/id?1020837 - http://marc.info/?l=bugtraq&m=122235754013992&w=2 - http://www.us-cert.gov/cas/techalerts/TA08-253A.html - http://www.vupen.com/english/advisories/2008/2520
CVE ID: CVE-2008-3015 State: PUBLISHED Published: 2008-09-10T15:00:00 Last Updated: 2024-08-07T09:21:34.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in gdiplus.dll in GDI+ in Microsoft Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a BMP image file with a malformed BitMapInfoHeader that triggers a buffer overflow, aka "GDI+ BMP Integer Overflow Vulnerability." Addition
th a malformed BitMapInfoHeader that triggers a buffer overflow, aka "GDI+ BMP Integer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32154 - http://www.securitytracker.com/id?1020838 - http://marc.info/?l=bugtraq&m=122235754013992&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-052 - http://www.securityfocus.com/archive/1/496153/100/0/threaded - http://www.vupen.com/english/advisories/2008/2696 - http://www.evilfingers.com/patchTuesday/MS08_052_GDI+_Vulnerability.txt - https://www.exploit-db.com/exploits/6716 - http://www.zerodayinitiative.com/advisories/ZDI-08-055 - http://marc.info
t - https://www.exploit-db.com/exploits/6716 - http://www.zerodayinitiative.com/advisories/ZDI-08-055 - http://marc.info/?l=bugtraq&m=122235754013992&w=2 - http://www.securityfocus.com/bid/31022 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5881 - http://www.evilfingers.com/patchTuesday/MS08_052_GDI+_Vulnerability_ver2.txt - https://www.exploit-db.com/exploits/6619 - http://www.us-cert.gov/cas/techalerts/TA08-253A.html - http://www.vupen.com/english/advisories/2008/2520
CVE ID: CVE-2008-3016 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-3017 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-3018 State: PUBLISHED Published: 2008-08-12T23:00:00 Last Updated: 2024-08-07T09:21:34.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of a PICT file, which allows remote attackers to execute arbitrary code via a crafted PICT file, aka the "Malformed PICT Filter Vulnerability," a different vulnerability than CVE-2008-3021. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-044 - http://www.us-cert.gov/cas/techalerts/TA08-225A.html - http://www.securityfo
y-updates/securitybulletins/2008/ms08-044 - http://www.us-cert.gov/cas/techalerts/TA08-225A.html - http://www.securityfocus.com/bid/30597 - http://marc.info/?l=bugtraq&m=121915960406986&w=2 - http://www.securitytracker.com/id?1020673 - http://marc.info/?l=bugtraq&m=121915960406986&w=2 - http://www.vupen.com/english/advisories/2008/2348 - http://secunia.com/advisories/31336 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5879
CVE ID: CVE-2008-3019 State: PUBLISHED Published: 2008-08-12T23:00:00 Last Updated: 2024-08-07T09:21:35.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of an Encapsulated PostScript (EPS) file, which allows remote attackers to execute arbitrary code via a crafted EPS file, aka the "Malformed EPS Filter Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-044 - http://www.us-cert.gov/cas/techalerts/TA08-225A.html - http://marc.info/?l=bugtraq&m=1219159604069
etins/2008/ms08-044 - http://www.us-cert.gov/cas/techalerts/TA08-225A.html - http://marc.info/?l=bugtraq&m=121915960406986&w=2 - http://www.securitytracker.com/id?1020673 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6122 - http://marc.info/?l=bugtraq&m=121915960406986&w=2 - http://www.securityfocus.com/bid/30595 - http://www.vupen.com/english/advisories/2008/2348 - http://secunia.com/advisories/31336
CVE ID: CVE-2008-3020 State: PUBLISHED Published: 2008-08-12T23:00:00 Last Updated: 2024-08-07T09:21:35.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office 2000 SP3 and XP SP3; Office Converter Pack; and Works 8 do not properly parse the length of a BMP file, which allows remote attackers to execute arbitrary code via a crafted BMP file, aka the "Malformed BMP Filter Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-044 - http://www.us-cert.gov/cas/techalerts/TA08-225A.html - http://marc.info/?l=bugtraq&m=121915960406986&w=2 - http://www.securitytracker.co
rt.gov/cas/techalerts/TA08-225A.html - http://marc.info/?l=bugtraq&m=121915960406986&w=2 - http://www.securitytracker.com/id?1020673 - http://marc.info/?l=bugtraq&m=121915960406986&w=2 - http://www.vupen.com/english/advisories/2008/2348 - http://secunia.com/advisories/31336 - http://www.securityfocus.com/bid/30599 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5868
CVE ID: CVE-2008-3021 State: PUBLISHED Published: 2008-08-12T23:00:00 Last Updated: 2024-08-07T09:21:35.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of a PICT file, which allows remote attackers to execute arbitrary code via a crafted PICT file with an invalid bits_per_pixel field, aka the "PICT Filter Parsing Vulnerability," a different vulnerability than CVE-2008-3018. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-044 - http://www.us-cert.gov/cas/techalerts/TA0
://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-044 - http://www.us-cert.gov/cas/techalerts/TA08-225A.html - http://www.zerodayinitiative.com/advisories/ZDI-08-049/ - http://marc.info/?l=bugtraq&m=121915960406986&w=2 - http://www.securitytracker.com/id?1020673 - http://marc.info/?l=bugtraq&m=121915960406986&w=2 - http://www.securityfocus.com/bid/30598 - http://www.vupen.com/english/advisories/2008/2348 - http://secunia.com/advisories/31336 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5997 - http://www.securityfocus.com/archive/1/495429/100/0/threaded
CVE ID: CVE-2008-3022 State: PUBLISHED Published: 2008-07-07T17:00:00 Last Updated: 2024-08-07T09:21:34.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in sablonlar/gunaysoft/gunaysoft.php in PHPortal 1.2 Beta allow remote attackers to execute arbitrary PHP code via a URL in (1) icerikyolu, (2) sayfaid, and (3) uzanti parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43569 - http://www.securityfocus.com/bid/30064 - http://securityreason.com/securityalert/3972 - https://www.exploit-db.com/exploits/5996
CVE ID: CVE-2008-3023 State: PUBLISHED Published: 2008-07-07T17:00:00 Last Updated: 2024-08-07T09:21:34.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in FreeStyle Wiki 3.6.2 and earlier, and 3.6.3 dev3 and earlier development versions, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2005-1799. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN77432756/index.html - http://jvn.jp/jp/JVN77432756/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43574 - http://www.securityfocus.com/bid/3
JVN77432756/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/43574 - http://www.securityfocus.com/bid/30071 - http://secunia.com/advisories/30923 - http://fswiki.org/wiki.pl?page=%CD%FA%CE%F2%2F2008-7-3 - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000036.html
CVE ID: CVE-2008-3024 State: PUBLISHED Published: 2008-07-07T17:00:00 Last Updated: 2024-08-07T09:21:34.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in phgrafx in QNX Momentics (aka RTOS) 6.3.2 and earlier allows local users to gain privileges via a long .pal filename in palette/. Additional Analyst Notes: - CVE Program Container: References: - http://www.scanit.net/rd/advisories/adv01 - http://www.securitytracker.com/id?1020411 - http://www.securityfocus.com/archive/1/493816/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/43542 - http://www.vupen.com/english/advisories/2008/1996/references - http://secunia.com/advisories/3
m/vulnerabilities/43542 - http://www.vupen.com/english/advisories/2008/1996/references - http://secunia.com/advisories/30808 - http://www.securityfocus.com/bid/30024 - http://securityreason.com/securityalert/3974
CVE ID: CVE-2008-3025 State: PUBLISHED Published: 2008-07-07T18:20:00 Last Updated: 2024-08-07T09:21:34.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ad.php in plx Ad Trader 3.2 allows remote attackers to execute arbitrary SQL commands via the adid parameter in a redir action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30046 - http://secunia.com/advisories/30897 - https://www.exploit-db.com/exploits/5988 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43525