Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-1591 State: PUBLISHED Published: 2008-03-31T23:00:00 Last Updated: 2024-08-07T08:24:42.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pnVarPrepForStore function in PostNuke 0.764 and earlier skips input sanitization when magic_quotes_runtime is enabled, which allows remote attackers to conduct SQL injection attacks and execute arbitrary SQL commands via input associated with server variables, as demonstrated by the CLIENT_IP HTTP header (HTTP_CLIENT_IP variable). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41375 - http://www.securityfocus.com/bid/28407 - https://www.exploit-db.com/
xchange.xforce.ibmcloud.com/vulnerabilities/41375 - http://www.securityfocus.com/bid/28407 - https://www.exploit-db.com/exploits/5292
CVE ID: CVE-2008-1592 State: PUBLISHED Published: 2008-03-31T23:00:00 Last Updated: 2024-08-07T08:24:42.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: MQSeries 5.1 in IBM WebSphere MQ 5.1 through 5.3.1 on the HP NonStop and Tandem NSK platforms does not require mqm group membership for execution of administrative tasks, which allows local users to bypass intended access restrictions via the runmqsc program, related to "Pathway panels." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29360 - http://www.vupen.com/english/advisories/2008/0869 - http://www-1.ibm.com/support/docview.wss?uid=swg21297035 - http://securitytracker.com/id
/english/advisories/2008/0869 - http://www-1.ibm.com/support/docview.wss?uid=swg21297035 - http://securitytracker.com/id?1019610 - http://www.securityfocus.com/bid/28235
CVE ID: CVE-2008-1593 State: PUBLISHED Published: 2008-03-31T23:00:00 Last Updated: 2024-08-07T08:24:42.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: The checkpoint and restart feature in the kernel in IBM AIX 5.2, 5.3, and 6.1 does not properly protect kernel memory, which allows local users to read and modify portions of memory and gain privileges via unspecified vectors involving a restart of a 64-bit process, probably related to the as_getadsp64 function. Additional Analyst Notes: - CVE Program Container: References: - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4153 - http://www.securityfocus.com/bid/28467 - http://securitytracker.com/id?
app/set2/subscriptions/pqvcmjd?mode=18&ID=4153 - http://www.securityfocus.com/bid/28467 - http://securitytracker.com/id?1019606 - http://www.ibm.com/support/docview.wss?uid=isg1IZ12794 - http://www.ibm.com/support/docview.wss?uid=isg1IZ16992 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4155 - http://www.ibm.com/support/docview.wss?uid=isg1IZ17111 - http://www.ibm.com/support/docview.wss?uid=isg1IZ11820 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4154 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4595 - http://www.vupen.com/english/advisories/2008/0865
CVE ID: CVE-2008-1594 State: PUBLISHED Published: 2008-03-31T23:00:00 Last Updated: 2024-08-07T08:24:42.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in IBM AIX 5.2 and 5.3 does not properly handle resizing JFS2 filesystems on concurrent volume groups spread across multiple nodes, which allows local users of one node to cause a denial of service (remote node crash) by using chfs or lreducelv to reduce a filesystem's size. Additional Analyst Notes: - CVE Program Container: References: - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4153 - http://www.securityfocus.com/bid/28467 - http://securitytracker.com/id?1019606 - http://www14.soft
mjd?mode=18&ID=4153 - http://www.securityfocus.com/bid/28467 - http://securitytracker.com/id?1019606 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4155 - http://www.ibm.com/support/docview.wss?uid=isg1IZ04953 - http://www.ibm.com/support/docview.wss?uid=isg1IZ04946 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5434 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4154 - http://www.ibm.com/support/docview.wss?uid=isg1IZ05246 - http://www.vupen.com/english/advisories/2008/0865
CVE ID: CVE-2008-1595 State: PUBLISHED Published: 2008-03-31T23:00:00 Last Updated: 2024-08-07T08:24:42.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: The proc filesystem in the kernel in IBM AIX 5.2 and 5.3 does not properly enforce directory permissions when a file executing from a directory has weaker permissions than the directory itself, which allows local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4153 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5321 - http://www.securityfocus.com/bid/28467
cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5321 - http://www.securityfocus.com/bid/28467 - http://securitytracker.com/id?1019606 - http://www.ibm.com/support/docview.wss?uid=isg1IZ06663 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4155 - http://www.ibm.com/support/docview.wss?uid=isg1IZ06022 - http://www.ibm.com/support/docview.wss?uid=isg1IZ06505 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4154 - http://www.vupen.com/english/advisories/2008/0865
CVE ID: CVE-2008-1596 State: PUBLISHED Published: 2008-03-31T23:00:00 Last Updated: 2024-08-07T08:24:42.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trusted Execution in IBM AIX 6.1 uses an incorrect pathname argument in a call to the trustchk_block_write function, which might allow local users to modify trusted files, related to missing checks in the TSD_FILES_LOCK policy for modifications performed via hard links, a different vulnerability than CVE-2007-6680. Additional Analyst Notes: - CVE Program Container: References: - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4153 - http://www.securityfocus.com/bid/28467 - http://securitytracker.com/
webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4153 - http://www.securityfocus.com/bid/28467 - http://securitytracker.com/id?1019606 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4155 - http://www.ibm.com/support/docview.wss?uid=isg1IZ13418 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4154 - http://www.vupen.com/english/advisories/2008/0865
CVE ID: CVE-2008-1597 State: PUBLISHED Published: 2008-03-31T23:00:00 Last Updated: 2024-08-07T08:24:42.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WPAR system call implementation in the kernel in IBM AIX 6.1 allows local users to cause a denial of service via unknown calls that trigger "undefined behavior." Additional Analyst Notes: - CVE Program Container: References: - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4153 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6198 - http://www.ibm.com/support/docview.wss?uid=isg1IZ13346 - http://www.securityfocus.com/bid/28467 - http://securitytracker.com/
//www.ibm.com/support/docview.wss?uid=isg1IZ13346 - http://www.securityfocus.com/bid/28467 - http://securitytracker.com/id?1019606 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4155 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4154 - http://www.ibm.com/support/docview.wss?uid=isg1IZ13392 - http://www.vupen.com/english/advisories/2008/0865
CVE ID: CVE-2008-1598 State: PUBLISHED Published: 2008-03-31T23:00:00 Last Updated: 2024-08-07T08:24:42.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in IBM AIX 6.1 allows local users with ProbeVue privileges to read arbitrary kernel memory and obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4153 - http://www.securityfocus.com/bid/28467 - http://securitytracker.com/id?1019606 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4155 - http://www.ibm.com/support/docview.wss?uid=isg1IZ09545 - http:
m.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4155 - http://www.ibm.com/support/docview.wss?uid=isg1IZ09545 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4154 - http://www.vupen.com/english/advisories/2008/0865
CVE ID: CVE-2008-1599 State: PUBLISHED Published: 2008-03-31T23:00:00 Last Updated: 2024-08-07T08:24:42.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nddstat programs on IBM AIX 5.2, 5.3, and 6.1 do not properly handle environment variables, which allows local users to gain privileges by invoking (1) atmstat, (2) entstat, (3) fddistat, (4) hdlcstat, or (5) tokstat. Additional Analyst Notes: - CVE Program Container: References: - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4157 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4156 - http://www.ibm.com/support/docview.wss?uid=isg1IZ16975 - http://securitytracker.c
ubscriptions/pqvcmjd?mode=18&ID=4156 - http://www.ibm.com/support/docview.wss?uid=isg1IZ16975 - http://securitytracker.com/id?1019604 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5468 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4158 - http://www.ibm.com/support/docview.wss?uid=isg1IZ17058 - http://www.ibm.com/support/docview.wss?uid=isg1IZ17059 - http://www.ibm.com/support/docview.wss?uid=isg1IZ16991 - http://www.vupen.com/english/advisories/2008/0865
CVE ID: CVE-2008-1600 State: PUBLISHED Published: 2008-03-31T23:00:00 Last Updated: 2024-08-07T08:24:42.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: The lsmcode program on IBM AIX 5.2, 5.3, and 6.1 does not properly handle environment variables, which allows local users to gain privileges, a different vulnerability than CVE-2004-1329. Additional Analyst Notes: - CVE Program Container: References: - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4159 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4160 - http://www.ibm.com/support/docview.wss?uid=isg1IZ15100 - http://www.ibm.com/support/docview.wss?uid=isg1IZ15277 - h
60 - http://www.ibm.com/support/docview.wss?uid=isg1IZ15100 - http://www.ibm.com/support/docview.wss?uid=isg1IZ15277 - http://www.ibm.com/support/docview.wss?uid=isg1IZ15276 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4161 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5566 - http://www.ibm.com/support/docview.wss?uid=isg1IZ15057 - http://securitytracker.com/id?1019603 - http://www.vupen.com/english/advisories/2008/0865
CVE ID: CVE-2008-1601 State: PUBLISHED Published: 2008-03-31T23:00:00 Last Updated: 2024-08-07T08:24:42.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the reboot program on IBM AIX 5.2 and 5.3 allows local users in the shutdown group to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=isg1IZ15480 - http://secunia.com/advisories/29347 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4163 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5497 - http://www.ibm.com/support/docview.wss?uid=isg1IZ15479 - http:
ry/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5497 - http://www.ibm.com/support/docview.wss?uid=isg1IZ15479 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4164 - http://securitytracker.com/id?1019602 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4162 - http://www.vupen.com/english/advisories/2008/0865
CVE ID: CVE-2008-1602 State: PUBLISHED Published: 2008-04-06T23:00:00 Last Updated: 2024-08-07T08:24:42.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Orbit downloader 2.6.3 and 2.6.4 allows remote attackers to execute arbitrary code via a long download URL, which is not properly handled during Unicode conversion for a balloon notification after a download has failed. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3798 - http://www.coresecurity.com/?action=item&id=2211 - http://www.vupen.com/english/advisories/2008/1101 - http://www.securityfocus.com/archive/1/490458/100/0/threaded - htt
- http://www.vupen.com/english/advisories/2008/1101 - http://www.securityfocus.com/archive/1/490458/100/0/threaded - http://www.securityfocus.com/bid/28541 - http://secunia.com/advisories/29669 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41649
CVE ID: CVE-2008-1603 State: PUBLISHED Published: 2008-04-01T16:00:00 Last Updated: 2024-08-07T08:24:42.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in GNB DesignForm before 3.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the email form. Additional Analyst Notes: - CVE Program Container: References: - http://www.gnbnet.com/cgi/readme/designform.html - http://www.securityfocus.com/bid/28471 - http://secunia.com/advisories/29528 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41495 - http://jvn.jp/jp/JVN%2358803701/index.html
CVE ID: CVE-2008-1604 State: PUBLISHED Published: 2008-04-01T16:00:00 Last Updated: 2024-08-07T08:24:42.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PerlMailer before 3.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41491 - http://secunia.com/advisories/29517 - http://www.securityfocus.com/bid/28472 - http://cgi.din.or.jp/~hideyuki/cgi-bin/diary-s/perldiary-s.cgi - http://jvn.jp/jp/JVN%2376669770/index.html - http://jvndb.jvn.jp/contents/ja/2008/JVNDB-2008-000019.html
CVE ID: CVE-2008-1605 State: PUBLISHED Published: 2008-04-01T16:00:00 Last Updated: 2024-08-07T08:24:42.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) ltmmCaptureCtrl Class, (2) ltmmConvertCtrl Class, and (3) ltmmPlayCtrl Class ActiveX controls (ltmm15.dll 15.1.0.17 and earlier) in LEADTOOLS Multimedia Toolkit 15 allow attackers to overwrite arbitrary files via the SaveSettingsToFile method. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29538 - http://www.shinnai.altervista.org/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1206434746.ff.php&page=last - http://www.shinnai.altervista.org/
group=Security&argument=Remote_performed_exploits&topic=1206434746.ff.php&page=last - http://www.shinnai.altervista.org/xplits/TXT_lyyELAFI8pOPu2p7N6cq.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41467 - http://www.securityfocus.com/bid/28442
CVE ID: CVE-2008-1606 State: PUBLISHED Published: 2008-04-01T16:00:00 Last Updated: 2024-08-07T08:24:42.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Elastic Path (EP) 4.1 and 4.1.1 allow remote attackers to (1) download arbitrary files via a .. (dot dot) in the file parameter to manager/getImportFileRedirect.jsp, (2) upload arbitrary files via a "..\" (dot dot backslash) in the file parameter to importData.jsp, and (3) list directory contents via a .. (dot dot) in the dir parameter to manager/fileManager.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28352 - http://devel
. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28352 - http://developer.elasticpath.com/entry%21default.jspa?categoryID=4&externalID=1334 - http://weblog.nomejortu.com/?p=37 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41356 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41364 - http://www.mwrinfosecurity.com/publications/mwri_elastic-path-arbitrary-file-system-access_2008-02-22.pdf - http://secunia.com/advisories/29496
CVE ID: CVE-2008-1607 State: PUBLISHED Published: 2008-04-01T16:00:00 Last Updated: 2024-08-07T08:24:42.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in haberoku.php in Serbay Arslanhan Bomba Haber 2.0 allows remote attackers to execute arbitrary SQL commands via the haber parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28435 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41422
CVE ID: CVE-2008-1608 State: PUBLISHED Published: 2008-04-01T16:00:00 Last Updated: 2024-08-07T08:24:42.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in postview.php in Clever Copy 3.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter, a different vector than CVE-2008-0363 and CVE-2006-0583. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28437 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41450 - https://www.exploit-db.com/exploits/5502 - http://www.securityfocus.com/bid/28437/exploit
CVE ID: CVE-2008-1609 State: PUBLISHED Published: 2008-04-01T16:00:00 Last Updated: 2024-08-07T08:24:42.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) website parameter to (a) forum.php, (b) headlines.php, and (c) main.php in forum/, and (2) main_dir parameter to forum/forum.php. NOTE: other main_dir vectors are already covered by CVE-2006-7127. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/490183/100/0/threaded - http://www.securityfocus.com/bid/28476
ner: References: - http://www.securityfocus.com/archive/1/490183/100/0/threaded - http://www.securityfocus.com/bid/28476 - https://www.exploit-db.com/exploits/5317 - https://www.exploit-db.com/exploits/2474/ - http://www.securityfocus.com/archive/1/490162/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/41753
CVE ID: CVE-2008-1610 State: PUBLISHED Published: 2008-04-01T16:00:00 Last Updated: 2024-08-07T08:24:42.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in TallSoft Quick TFTP Server Pro 2.1 allows remote attackers to cause a denial of service or execute arbitrary code via a long mode field in a read or write request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41499 - https://www.exploit-db.com/exploits/5315 - http://www.offensive-security.com/0day/quick-tftp-poc.py.txt - http://www.securityfocus.com/bid/28459 - http://secunia.com/advisories/29494
CVE ID: CVE-2008-1611 State: PUBLISHED Published: 2008-04-01T16:00:00 Last Updated: 2024-08-07T08:24:42.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in TFTP Server SP 1.4 for Windows allows remote attackers to cause a denial of service or execute arbitrary code via a long filename in a read or write request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29508 - http://www.offensive-security.com/0day/sourceforge-tftpd.py.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/41496 - http://www.securityfocus.com/bid/28462 - https://www.exploit-db.com/exploits/5314
CVE ID: CVE-2008-1612 State: PUBLISHED Published: 2008-04-01T17:00:00 Last Updated: 2024-08-07T08:24:43.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: The arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial of service (process exit) via unknown vectors that cause an array to shrink to 0 entries, which triggers an assert error. NOTE: this issue is due to an incorrect fix for CVE-2007-6239. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-601-1 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00560.html - http://www.securityfocus.com/bid/28693 - http://secunia.com/advis
ves/fedora-package-announce/2008-April/msg00560.html - http://www.securityfocus.com/bid/28693 - http://secunia.com/advisories/29813 - http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html - http://secunia.com/advisories/30032 - http://www.debian.org/security/2008/dsa-1646 - http://security.gentoo.org/glsa/glsa-200903-38.xml - http://secunia.com/advisories/27477 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41586 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:134 - http://secunia.com/advisories/32109 - http://www.squid-cache.org/Advisories/SQUID-2007_2.txt - http://www.redhat.com/support/errata/RHSA-2008-0214.html - http://www.squid-cache.org/Versi
dvisories/SQUID-2007_2.txt - http://www.redhat.com/support/errata/RHSA-2008-0214.html - http://www.squid-cache.org/Versions/v2/2.6/changesets/11882.patch - http://marc.info/?l=squid-announce&m=120614453813157&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11376 - http://secunia.com/advisories/34467 - http://www.openwall.com/lists/oss-security/2008/04/01/5
CVE ID: CVE-2008-1613 State: PUBLISHED Published: 2008-04-21T20:00:00 Last Updated: 2024-08-07T08:24:42.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ioRD.asp in RedDot CMS 7.5 Build 7.5.0.48, and possibly other versions including 6.5 and 7.0, allows remote attackers to execute arbitrary SQL commands via the LngId parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/5482 - http://www.irmplc.com/index.php/167-Advisory-026 - http://www.securityfocus.com/archive/1/491139/100/0/threaded - http://secunia.com/advisories/29843 - http://www.securityfocus.com/bid/28872 - https://exchange.xforce
/100/0/threaded - http://secunia.com/advisories/29843 - http://www.securityfocus.com/bid/28872 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41924
CVE ID: CVE-2008-1614 State: PUBLISHED Published: 2008-04-02T16:00:00 Last Updated: 2024-08-07T08:24:42.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: suPHP before 0.6.3 allows local users to gain privileges via (1) a race condition that involves multiple symlink changes to point a file owned by a different user, or (2) a symlink to the directory of a different user, which is used to determine privileges. Additional Analyst Notes: - CVE Program Container: References: - http://lists.marsching.biz/pipermail/suphp/2008-March/001750.html - http://www.vupen.com/english/advisories/2008/1073/references - https://bugzilla.redhat.com/show_bug.cgi?id=439687 - https://exchange.xforce.i
english/advisories/2008/1073/references - https://bugzilla.redhat.com/show_bug.cgi?id=439687 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41582 - http://secunia.com/advisories/29615 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00075.html - http://www.debian.org/security/2008/dsa-1550 - http://secunia.com/advisories/29872 - http://secunia.com/advisories/29648 - https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00014.html - http://www.securityfocus.com/bid/28568