Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
unce/2008-March/msg00176.html - http://lists.horde.org/archives/announce/2008/000360.html - http://lists.horde.org/archives/announce/2008/000364.html - http://secunia.com/advisories/28382 - http://lists.horde.org/archives/announce/2008/000377.html - http://lists.horde.org/archives/announce/2008/000366.html - http://lists.horde.org/archives/announce/2008/000361.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/39599 - http://lists.horde.org/archives/announce/2008/000374.html - http://lists.horde.org/archives/announce/2008/000362.html - http://lists.horde.org/archives/announce/2008/000368.html - http://www.osvdb.org/42775
CVE ID: CVE-2008-7219 State: PUBLISHED Published: 2009-09-13T22:00:00Z Last Updated: 2024-09-17T01:06:15.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and H3 2.2 before 2.2-RC2; Groupware 1.0 before 1.0.3 and 1.1 before 1.1-RC2; and Groupware Webmail Edition 1.0 before 1.0.4 and 1.1 before 1.1-RC2 does not validate ownership when performing share changes, which has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.horde.org/archives/announce/2008/000371.html - http://lists.horde.o
- CVE Program Container: References: - http://lists.horde.org/archives/announce/2008/000371.html - http://lists.horde.org/archives/announce/2008/000369.html - http://lists.horde.org/archives/announce/2008/000363.html - http://www.securityfocus.com/bid/27217 - http://lists.horde.org/archives/announce/2008/000365.html - http://lists.horde.org/archives/announce/2008/000376.html - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00176.html - http://lists.horde.org/archives/announce/2008/000364.html - http://secunia.com/advisories/28382 - http://lists.horde.org/archives/announce/2008/000377.html - http://lists.horde.org/archives/announce/2008/000366.html - http://lists.horde
.org/archives/announce/2008/000377.html - http://lists.horde.org/archives/announce/2008/000366.html - http://lists.horde.org/archives/announce/2008/000362.html - http://lists.horde.org/archives/announce/2008/000368.html
CVE ID: CVE-2008-7220 State: PUBLISHED Published: 2009-09-13T22:00:00 Last Updated: 2024-08-07T11:56:14.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2 allows attackers to make "cross-site ajax requests" via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00838.html - http://secunia.com/advisories/37479 - http://osvdb.org/46312 - http://secunia.com/advisories/37677 - http://www.debian.org/security/2009/dsa-1952 - https://bugzilla.redhat.com/show_bug.cgi?id=523277 - http://github.com/
- http://www.debian.org/security/2009/dsa-1952 - https://bugzilla.redhat.com/show_bug.cgi?id=523277 - http://github.com/sstephenson/prototype/blob/master/CHANGELOG - https://bugzilla.redhat.com/show_bug.cgi?id=533137 - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00789.html - http://www.openwall.com/lists/oss-security/2009/11/07/2 - https://seclists.org/bugtraq/2019/May/18 - http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html - http://seclists.org/fulldisclosure/2019/May/11 - http://seclists.org/fulldisclosure/2019/May/10 - http://seclists.org/fulldisclosure/2019/May/13 - https://lists.apache.org/thread.html/eff7280055fc717ea8129c
19/May/10 - http://seclists.org/fulldisclosure/2019/May/13 - https://lists.apache.org/thread.html/eff7280055fc717ea8129cd28a9dd57b8446d00b36260c1caee10b87%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/7ba863c5a4a0f1230cba2d11cf4de3a2eda3a42e8023d4990f564327%40%3Cdev.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/6d1b9a75a004dab42c81e8aa149d90e6fd26ce8cd6d71295e565e366%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/2ad48cd9d47edd0e677082eb869115809473a117e1e30b52fb511590%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/769fcc5f331b61c4d7ce16b807678e9a1799628d0146322e14aa24ed%40%3Cdev.zook
che.org%3E - https://lists.apache.org/thread.html/769fcc5f331b61c4d7ce16b807678e9a1799628d0146322e14aa24ed%40%3Cdev.zookeeper.apache.org%3E
CVE ID: CVE-2008-7221 State: PUBLISHED Published: 2009-09-14T14:00:00 Last Updated: 2024-08-07T11:56:14.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in RunCMS 1.6.1 allows remote attackers to hijack the authentication of administrators for requests that (1) add new administrators or (2) modify user profiles via a crafted request to system/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/488287/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/40628
CVE ID: CVE-2008-7222 State: PUBLISHED Published: 2009-09-14T14:00:00 Last Updated: 2024-08-07T11:56:14.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in system/admin.php in RunCMS 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the rank_title parameter in a RankForumAdd action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/488287/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/40630 - http://www.securityfocus.com/bid/27852
CVE ID: CVE-2008-7223 State: PUBLISHED Published: 2009-09-14T14:00:00Z Last Updated: 2024-09-16T18:09:17.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via (1) ftp/index.php, (2) viewer.php, (3) functions/other.php, (4) include/left_menu.class.php, or (5) plugins/stats/stats_view.php. Additional Analyst Notes: - CVE Program Container: References: - http://freshmeat.net/projects/linpha/releases/271366 - http://osvdb.org/43191 - http://www.securityfocus.com/bid/27678 - http://linpha.cvs.sourceforge.net/linpha/linpha/ChangeLog?view=markup
CVE ID: CVE-2008-7224 State: PUBLISHED Published: 2009-09-14T14:00:00 Last Updated: 2024-08-07T11:56:14.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in entity_cache in ELinks before 0.11.4rc0 allows remote attackers to cause a denial of service (crash) via a crafted link. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10126 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=380347 - http://linuxfromscratch.org/pipermail/elinks-users/2008-February/001604.html - http://osvdb.org/41949
CVE ID: CVE-2008-7225 State: PUBLISHED Published: 2009-09-14T14:00:00 Last Updated: 2024-08-07T11:56:14.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SSH packets, a different vulnerability than CVE-2008-0151. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.org/adv/wachof-adv.txt - http://www.securityfocus.com/bid/27873 - http://www.securityfocus.com/archive/1/488366/100/200/threaded
CVE ID: CVE-2008-7226 State: PUBLISHED Published: 2009-09-14T14:00:00 Last Updated: 2024-08-07T11:56:14.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the Recipes module 1.3, 1.4, and possibly other versions for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the recipeid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/488649/100/100/threaded - http://www.securityfocus.com/bid/27955 - http://osvdb.org/52224 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40807
CVE ID: CVE-2008-7227 State: PUBLISHED Published: 2009-09-14T14:00:00Z Last Updated: 2024-09-17T01:30:39.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer," which prevents the reporting of a service exception, with unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/43266 - http://jira.codehaus.org/browse/GEOS-1747
CVE ID: CVE-2008-7228 State: PUBLISHED Published: 2009-09-14T14:00:00Z Last Updated: 2024-09-16T23:45:32.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in White_Dune before 0.29beta851 have unspecified impact and attack vectors, a different vulnerability than CVE-2008-0101. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/apps/freshmeat/2008-02/0005.html - http://osvdb.org/42677
CVE ID: CVE-2008-7229 State: PUBLISHED Published: 2009-09-14T14:00:00Z Last Updated: 2024-09-16T18:04:15.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: GreenSQL Firewall (greensql-fw) before 0.9.2 allows remote attackers to bypass SQL injection protection via a crafted string, possibly involving an encoded space character (%20). Additional Analyst Notes: - CVE Program Container: References: - http://www.greensql.net/node/41 - http://www.greensql.net/security - http://osvdb.org/48906
CVE ID: CVE-2008-7230 State: PUBLISHED Published: 2009-09-14T14:00:00Z Last Updated: 2024-09-17T03:02:21.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Small Footprint CIM Broker (SFCB) before 1.2.5 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/50224 - http://freshmeat.net/projects/sfcb/releases/269256
CVE ID: CVE-2008-7231 State: PUBLISHED Published: 2009-09-14T14:00:00 Last Updated: 2024-08-07T11:56:14.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Meridio Document and Records Management before 4.3 SR1 allows remote authenticated users to inject arbitrary web script or HTML via the Title field in a (1) document (subGeneralProps:dmpvDocTitle:PROP_W_title) or (2) container (subGeneralProps:dmpvContainerTitle:PROP_W_title). Additional Analyst Notes: - CVE Program Container: References: - http://labs.mwrinfosecurity.com/advisories/meridio_cross_site_scripting_vulnerability/ - http://labs.mwrinfosecurity.com/files/Advisories/mwri_me
ty.com/advisories/meridio_cross_site_scripting_vulnerability/ - http://labs.mwrinfosecurity.com/files/Advisories/mwri_meridio-advisory-embedded-xss_2008-01-15.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/40422 - http://www.securityfocus.com/bid/27721
CVE ID: CVE-2008-7232 State: PUBLISHED Published: 2009-09-14T14:00:00 Last Updated: 2024-08-07T11:56:14.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the report function in xtacacsd 4.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted CONNECT TACACS command. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.org/poc/xtacacsdz.zip - http://aluigi.altervista.org/adv/xtacacsdz-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/39551
CVE ID: CVE-2008-7233 State: PUBLISHED Published: 2009-09-14T14:00:00 Last Updated: 2024-08-07T11:56:14.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the E-Business Application client, as used in Oracle Application Server 1.1.8.26 and E-Business Suite 11.5.10.2, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to the Oracle Jinitiator component, aka AS02. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019218 - http://www.securityfocus.com/bid/27229 - http://www.us-cert.gov/cas/techalerts/TA08-017A.html - http://www.vupen.com/english/advisor
ecurityfocus.com/bid/27229 - http://www.us-cert.gov/cas/techalerts/TA08-017A.html - http://www.vupen.com/english/advisories/2008/0150 - http://www.vupen.com/english/advisories/2008/0180 - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://secunia.com/advisories/28556 - http://secunia.com/advisories/28518 - http://www.osvdb.org/40294
CVE ID: CVE-2008-7234 State: PUBLISHED Published: 2009-09-14T14:00:00 Last Updated: 2024-08-07T11:56:14.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle BPEL Worklist Application component in Oracle Application Server 10.1.2.2 and 10.1.3.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, aka AS03. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019218 - http://www.securityfocus.com/bid/27229 - http://www.us-cert.gov/cas/techalerts/TA08-017A.html - http://www.vupen.com/english/advisories/2008/0150 - http://www.vupen.com/english/advisories/20
chalerts/TA08-017A.html - http://www.vupen.com/english/advisories/2008/0150 - http://www.vupen.com/english/advisories/2008/0180 - http://www.osvdb.org/40295 - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://secunia.com/advisories/28556 - http://secunia.com/advisories/28518
CVE ID: CVE-2008-7235 State: PUBLISHED Published: 2009-09-14T14:00:00 Last Updated: 2024-08-07T11:56:14.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Forms component in Oracle Application Server 10.1.2.2 and E-Business Suite 12.0.3 allows remote attackers to affect integrity via unknown vectors, aka AS04. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019218 - http://www.securityfocus.com/bid/27229 - http://www.us-cert.gov/cas/techalerts/TA08-017A.html - http://www.vupen.com/english/advisories/2008/0150 - http://www.vupen.com/english/advisories/2008/0180 - http://www.osvdb.org/40296 - h
en.com/english/advisories/2008/0150 - http://www.vupen.com/english/advisories/2008/0180 - http://www.osvdb.org/40296 - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://secunia.com/advisories/28556 - http://secunia.com/advisories/28518
CVE ID: CVE-2008-7236 State: PUBLISHED Published: 2009-09-14T14:00:00 Last Updated: 2024-08-07T11:56:14.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle JDeveloper component in Oracle Application Server 10.1.2.2 and 10.1.3.1 allows remote attackers to affect integrity via unknown vectors, aka AS05. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019218 - http://www.securityfocus.com/bid/27229 - http://www.us-cert.gov/cas/techalerts/TA08-017A.html - http://www.vupen.com/english/advisories/2008/0150 - http://www.vupen.com/english/advisories/2008/0180 - http://marc.info/?l=bugtraq&m=1200584139
lish/advisories/2008/0150 - http://www.vupen.com/english/advisories/2008/0180 - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://secunia.com/advisories/28556 - http://www.osvdb.org/40297 - http://secunia.com/advisories/28518
CVE ID: CVE-2008-7237 State: PUBLISHED Published: 2009-09-14T14:00:00 Last Updated: 2024-08-07T11:56:14.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3 and 10.1.2.2 allows remote authenticated users to affect confidentiality via unknown vectors, aka AS06. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019218 - http://www.securityfocus.com/bid/27229 - http://www.us-cert.gov/cas/techalerts/TA08-017A.html - http://www.vupen.com/english/advisories/2008/0150 - http://www.vupen.com/english/advisories/2008/0180 - http://marc.info/
ttp://www.vupen.com/english/advisories/2008/0150 - http://www.vupen.com/english/advisories/2008/0180 - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://secunia.com/advisories/28556 - http://secunia.com/advisories/28518 - http://www.osvdb.org/40298
CVE ID: CVE-2008-7238 State: PUBLISHED Published: 2009-09-14T14:00:00 Last Updated: 2024-08-07T11:56:14.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.3 allow (1) local users to affect confidentiality and integrity via unknown vectors related to the Mobile Application Server component (APP01); (2) remote attackers to affect confidentiality via unknown vectors related to the Oracle Applications Framework (APP03); remote authenticated users to affect confidentiality and integrity via unknown vectors related to the (3) CRM Technical Foundation (APP05) and (4) Oracle Application Object Library (APP06); and remo
vectors related to the (3) CRM Technical Foundation (APP05) and (4) Oracle Application Object Library (APP06); and remote authenticated users to affect integrity and availability via unknown vectors related to (5) Oracle Applications Technology Stack (APP07). Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019218 - http://www.securityfocus.com/bid/27229 - http://www.us-cert.gov/cas/techalerts/TA08-017A.html - http://www.vupen.com/english/advisories/2008/0150 - http://www.osvdb.org/40286 - http://www.vupen.com/english/advisories/2008/0180 - http://www.osvdb.org/40290 - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://www.osvdb.org/402
es/2008/0180 - http://www.osvdb.org/40290 - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://www.osvdb.org/40284 - http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://secunia.com/advisories/28556 - http://www.osvdb.org/40288 - http://secunia.com/advisories/28518 - http://www.osvdb.org/40289
CVE ID: CVE-2008-7239 State: PUBLISHED Published: 2009-09-14T14:00:00 Last Updated: 2024-08-07T11:56:14.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 allow remote attackers to affect confidentiality via unknown vectors related to the (1) Oracle Application Object Library (APP02) and (2) Oracle Applications Manager (APP04). Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019218 - http://www.securityfocus.com/bid/27229 - http://www.us-cert.gov/cas/techalerts/TA08-017A.html - http://www.osvdb.org/40285 - http://www.vupen.com/english/advisories/2008/0150 - h
t.gov/cas/techalerts/TA08-017A.html - http://www.osvdb.org/40285 - http://www.vupen.com/english/advisories/2008/0150 - http://www.vupen.com/english/advisories/2008/0180 - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://www.osvdb.org/40287 - http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html - http://marc.info/?l=bugtraq&m=120058413923005&w=2 - http://secunia.com/advisories/28556 - http://secunia.com/advisories/28518
CVE ID: CVE-2008-7240 State: PUBLISHED Published: 2009-09-17T18:00:00 Last Updated: 2024-08-07T11:56:14.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop (LWS) php User Base 1.3beta allows remote attackers to include and execute arbitrary local files via the template parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/40793 - https://www.exploit-db.com/exploits/5179 - http://www.securityfocus.com/bid/27964
CVE ID: CVE-2008-7241 State: PUBLISHED Published: 2009-09-17T18:00:00Z Last Updated: 2024-09-17T03:42:58.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in PunBB before 1.2.17 allows remote attackers to hijack the authentication of unspecified users for requests related to a logout, probably a forced logout. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/48685 - http://punbb.informer.com/download/changelogs/1.2.16_to_1.2.17.txt
CVE ID: CVE-2008-7242 State: PUBLISHED Published: 2009-09-17T18:00:00 Last Updated: 2024-08-07T11:56:14.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in MODx CMS 0.9.6.1 and 0.9.6.1p1 allo remote attackers to inject arbitrary web script or HTML via the (1) search, (2) "a," (3) messagesubject, and (4) messagebody parameters to certain pages as reachable from manager/index.php; (5) highlight, (6) id, (7) email, (8) name, and (9) parent parameters to index.php; and the (10) docgrp and (11) moreResultsPage parameters to index-ajax.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.co
rameters to index-ajax.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/487696/100/200/threaded - http://secunia.com/advisories/28840 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40375 - http://www.securityfocus.com/bid/27672 - http://osvdb.org/41232
CVE ID: CVE-2008-7243 State: PUBLISHED Published: 2009-09-17T18:00:00 Last Updated: 2024-08-07T11:56:14.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in page 34 in MODx CMS 0.9.6.1 and 0.9.6.1p1 allows remote attackers to hijack the authentication of other users for requests that modify passwords via manager/index.php. NOTE: due to the lack of details, it is not clear whether this is related to CVE-2008-5941. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/487696/100/200/threaded - http://secunia.com/advisories/28840 - http://www.securityfocus.com/bid/27672 - https://exch
/1/487696/100/200/threaded - http://secunia.com/advisories/28840 - http://www.securityfocus.com/bid/27672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40378
CVE ID: CVE-2008-7244 State: PUBLISHED Published: 2009-09-18T22:00:00 Last Updated: 2024-08-07T11:56:14.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 3.0.1 and earlier allows remote attackers to cause a denial of service (browser hang) by calling the window.print function in a loop, aka a "printing DoS attack," possibly a related issue to CVE-2009-0821. Additional Analyst Notes: - CVE Program Container: References: - http://websecurity.com.ua/2456/ - http://www.securityfocus.com/archive/1/506328/100/100/threaded
CVE ID: CVE-2008-7245 State: PUBLISHED Published: 2009-09-18T22:00:00 Last Updated: 2024-08-07T11:56:14.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 9.52 and earlier allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in a loop, aka a "printing DoS attack," possibly a related issue to CVE-2009-0821. Additional Analyst Notes: - CVE Program Container: References: - http://websecurity.com.ua/2456/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6350 - http://www.securityfocus.com/archive/1/506328/100/100/threaded