Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ityreason.com/securityalert/3211 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37056 - http://www.securityfocus.com/archive/1/481979/100/0/threaded - http://www.securityfocus.com/bid/25999
CVE ID: CVE-2007-5411 State: PUBLISHED Published: 2007-10-12T18:00:00 Last Updated: 2024-08-07T15:31:58.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Linksys SPA941 VoIP Phone with firmware 5.1.8 allows remote attackers to inject arbitrary web script or HTML via the From header in a SIP message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27116 - http://www.securityfocus.com/bid/25987 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37022 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066430.html
CVE ID: CVE-2007-5412 State: PUBLISHED Published: 2007-10-12T18:00:00 Last Updated: 2024-08-07T15:31:58.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in the Quoc-Huy MP3 Allopass (com_mp3_allopass) 1.0 component for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter to (1) allopass.php and (2) allopass-error.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/43630 - http://osvdb.org/43631 - https://www.exploit-db.com/exploits/4507 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37054 - http://www.securityfocus.com/bid/26002
CVE ID: CVE-2007-5413 State: PUBLISHED Published: 2007-10-29T22:00:00 Last Updated: 2024-08-07T15:31:58.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: httpd.tkd in Radia Integration Server in Hewlett-Packard (HP) OpenView Configuration Management (CM) Infrastructure 4.0 through 4.2i and Client Configuration Manager (CCM) 2.0 allows remote attackers to read arbitrary files via URLs containing tilde (~) references to home directories, as demonstrated by ~root. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01205079 - http://www.securityfocus.com/archive/1/483106/100/100/threaded - http://
t/TechSupport/Document.jsp?objectID=c01205079 - http://www.securityfocus.com/archive/1/483106/100/100/threaded - http://osvdb.org/39528 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37400 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01205079 - http://www.zerodayinitiative.com/advisories/ZDI-07-060.html - http://www.securitytracker.com/id?1018858 - http://secunia.com/advisories/27341 - http://www.vupen.com/english/advisories/2007/3620
CVE ID: CVE-2007-5414 State: PUBLISHED Published: 2007-10-12T21:00:00 Last Updated: 2024-08-07T15:31:58.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0, when UTF-7 document content is rendered directly in UTF-7, allows remote attackers to inject arbitrary web script or HTML via a gopher URI that uses single quote characters to delimit a literal string within an XSS sequence, a related issue to CVE-2007-5415. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/482006/100/0/threaded - http://securityreason.com/securityalert/3216 - http://osvdb.org/43670
CVE ID: CVE-2007-5415 State: PUBLISHED Published: 2007-10-12T21:00:00 Last Updated: 2024-08-07T15:31:58.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Mozilla Firefox 2.0, when UTF-7 document content is rendered directly in UTF-7, allows remote attackers to inject arbitrary web script or HTML via a gopher URI that uses '/' (slash) characters to delimit a literal string within an XSS sequence, a related issue to CVE-2007-5414. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/482006/100/0/threaded - http://securityreason.com/securityalert/3216
CVE ID: CVE-2007-5416 State: PUBLISHED Published: 2007-10-12T21:00:00 Last Updated: 2024-08-07T15:31:57.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Drupal 5.2 and earlier does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to execute arbitrary PHP code by invoking the drupal_eval function through a callback parameter to the default URI, as demonstrated by the _menu[callbacks][1][callback] parameter. NOTE: it could be argued that this vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if so, then
vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in Drupal. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/482006/100/0/threaded - http://securityreason.com/securityalert/3216 - http://securityvulns.ru/Sdocument137.html - https://www.exploit-db.com/exploits/4510
CVE ID: CVE-2007-5417 State: PUBLISHED Published: 2007-10-12T21:00:00 Last Updated: 2024-08-07T15:31:58.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in boastMachine (aka bMachine) 2.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityvulns.com/Sdocument42.html - http://www.securityfocus.com/archive/1/482006/100/0/threaded - http://securityvulns.com/source26994.html - http://securityreason.com/securityalert/3216 - http://www.securityfocus.com/bid/26032 - http://osvdb.org/43632
CVE ID: CVE-2007-5418 State: PUBLISHED Published: 2007-10-12T21:00:00 Last Updated: 2024-08-07T15:31:58.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in CARE2X 2G 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) en_copyrite.php, (2) vi_copyrite.php, and (3) ar_copyrite.php in language/ directories; (4) class_access.php, (5) class_department.php, (6) class_config.php, (7) class_image.php, (8) class_ward.php, and (9) class_product.php in include/care_api_classes/; (10) gui/smarty_template/smarty_care.class.php; and possibly other components, different vectors than CVE-2007-1
asses/; (10) gui/smarty_template/smarty_care.class.php; and possibly other components, different vectors than CVE-2007-1458. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/43640 - http://osvdb.org/43641 - http://osvdb.org/43642 - http://osvdb.org/43647 - http://osvdb.org/43639 - http://osvdb.org/43648 - http://osvdb.org/43643 - http://www.securityfocus.com/archive/1/482006/100/0/threaded - http://securityreason.com/securityalert/3216 - http://osvdb.org/43645 - http://osvdb.org/43646 - http://osvdb.org/43644 - http://securityvulns.com/Rdocument960.html
CVE ID: CVE-2007-5419 State: PUBLISHED Published: 2007-10-12T21:00:00 Last Updated: 2024-08-07T15:31:58.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 3Com 3CRWER100-75 router with 1.2.10ww software, when enabling an optional virtual server, configures this server to accept all source IP addresses on the external (Internet) interface unless the user selects other options, which might expose the router to unintended incoming traffic from remote attackers, as demonstrated by setting up a virtual server on port 80, which allows remote attackers to access the web management interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.c
he web management interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/481977/100/0/threaded - http://osvdb.org/43657 - http://securityreason.com/securityalert/3217 - http://www.securityfocus.com/bid/26009
CVE ID: CVE-2007-5420 State: PUBLISHED Published: 2007-10-12T21:00:00 Last Updated: 2024-08-07T15:31:58.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 3Com 3CRWER100-75 router with 1.2.10ww software, when remote management is disabled but a web server has been configured, serves a web page to external clients, which might allow remote attackers to obtain information about the router's existence and product details. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/481977/100/0/threaded - http://osvdb.org/45490 - http://securityreason.com/securityalert/3217 - http://www.securityfocus.com/bid/26009
CVE ID: CVE-2007-5421 State: REJECTED Published: 2007-10-12T21:00:00 Last Updated: 2018-10-19T14:57:01 Description: No description available.
CVE ID: CVE-2007-5422 State: PUBLISHED Published: 2007-10-12T21:00:00 Last Updated: 2024-08-07T15:31:58.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in "Solaris Auditing" in the Basic Security Module (BSM) in Sun Solaris 10, when configured for auditing of networking (nt) events, allows local users to cause a denial of service (panic) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2096 - http://www.securityfocus.com/bid/26017 - http://securitytracker.com/id?1018803 - http://sunsolve.sun.com/search/document.do?assetkey=1
urityfocus.com/bid/26017 - http://securitytracker.com/id?1018803 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103096-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37078 - http://osvdb.org/37727 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201374-1 - http://secunia.com/advisories/27175 - http://www.vupen.com/english/advisories/2007/3466
CVE ID: CVE-2007-5423 State: PUBLISHED Published: 2007-10-12T23:00:00 Last Updated: 2024-08-07T15:31:58.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: tiki-graph_formula.php in TikiWiki 1.9.8 allows remote attackers to execute arbitrary code via PHP sequences in the f array parameter, which are processed by create_function. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200710-21.xml - http://www.vupen.com/english/advisories/2007/3492 - http://securityvulns.ru/Sdocument162.html - http://www.securityfocus.com/archive/1/482006/100/0/threaded - http://www.securityfocus.com/bid/26006 - http://secunia.com/advisories/27
ityfocus.com/archive/1/482006/100/0/threaded - http://www.securityfocus.com/bid/26006 - http://secunia.com/advisories/27344 - http://bugs.gentoo.org/show_bug.cgi?id=195503 - http://osvdb.org/40478 - http://securityreason.com/securityalert/3216 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37076 - http://www.securityfocus.com/archive/1/482128/100/0/threaded - http://sourceforge.net/project/shownotes.php?release_id=546283&group_id=64258 - http://sourceforge.net/forum/forum.php?forum_id=744898 - https://www.exploit-db.com/exploits/4509 - http://secunia.com/advisories/27190
CVE ID: CVE-2007-5424 State: PUBLISHED Published: 2007-10-12T23:00:00 Last Updated: 2024-08-07T15:31:58.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: The disable_functions feature in PHP 4 and 5 allows attackers to bypass intended restrictions by using an alias, as demonstrated by using ini_alter when ini_set is disabled. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/482006/100/0/threaded - http://securityreason.com/securityalert/3216 - http://securityvulns.com/news/PHP/alias-pb.html - http://securityvulns.ru/Sdocument67.html
CVE ID: CVE-2007-5425 State: PUBLISHED Published: 2007-10-12T23:00:00 Last Updated: 2024-08-07T15:31:58.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/index.php in Interspire ActiveKB 1.5 allows remote attackers to execute arbitrary SQL commands via the questId parameter in a hideQuestion ToDo action. NOTE: the catId vector is already covered by CVE-2007-5131. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/482006/100/0/threaded - http://securityreason.com/securityalert/3216 - http://osvdb.org/45486 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38202 - http://securityvulns.r
lert/3216 - http://osvdb.org/45486 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38202 - http://securityvulns.ru/Rdocument901.html
CVE ID: CVE-2007-5426 State: PUBLISHED Published: 2007-10-12T23:00:00 Last Updated: 2024-08-07T15:31:58.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ActiveKB NX 2.5.4 allow remote attackers to inject arbitrary web script or HTML via the page parameter to the default URI for some directories, as demonstrated by (1) ActiveKB/ and (2) default/categories/ActiveKB/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/37066 - http://secunia.com/advisories/27194 - http://www.securityfocus.com/archive/1/482006/100/0/threaded - http://securityreason.com/securitya
om/advisories/27194 - http://www.securityfocus.com/archive/1/482006/100/0/threaded - http://securityreason.com/securityalert/3216 - http://securityvulns.ru/Rdocument956.html - http://osvdb.org/37661 - http://www.securityfocus.com/bid/26027
CVE ID: CVE-2007-5427 State: PUBLISHED Published: 2007-10-12T23:00:00 Last Updated: 2024-08-07T15:31:58.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the com_search component in Joomla! 1.0.13 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchword parameter. NOTE: this might be related to CVE-2007-4189.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3495 - http://www.securityfocus.com/bid/26031 - http://osvdb.org/37709 - http://www.securityfocus.com/archive/1/482006/100/0/threaded - http://securityreason.com/securityalert/3216 -
rg/37709 - http://www.securityfocus.com/archive/1/482006/100/0/threaded - http://securityreason.com/securityalert/3216 - http://websecurity.com.ua/1203/ - http://secunia.com/advisories/27196 - http://securityvulns.ru/Rdocument919.html
CVE ID: CVE-2007-5428 State: PUBLISHED Published: 2007-10-12T23:00:00 Last Updated: 2024-08-07T15:31:58.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in UMI CMS allows remote attackers to inject arbitrary web script or HTML via the search_string parameter to the default URI in search_do/. Additional Analyst Notes: - CVE Program Container: References: - http://securityvulns.ru/Rdocument957.html - http://www.securityfocus.com/archive/1/482006/100/0/threaded - http://securityreason.com/securityalert/3216 - http://osvdb.org/43766 - http://www.securityfocus.com/bid/26033
CVE ID: CVE-2007-5429 State: PUBLISHED Published: 2007-10-12T23:00:00 Last Updated: 2024-08-07T15:31:58.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Nucleus 3.01 allows remote attackers to inject arbitrary web script or HTML via the archive parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40611 - http://www.securityfocus.com/bid/26035 - http://www.securityfocus.com/archive/1/482006/100/0/threaded - http://securityreason.com/securityalert/3216 - http://websecurity.com.ua/1347/ - http://securityvulns.ru/Sdocument3.html
CVE ID: CVE-2007-5430 State: PUBLISHED Published: 2007-10-12T23:00:00 Last Updated: 2024-08-07T15:31:58.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Stride 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the p parameter to main.php in the Content Management System, (2) the id parameter in a sto cmd action to shop.php in the Merchant subsystem, or the (3) course or (4) provider parameter to detail.php in the Courses subsystem. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26036 - http://www.securityfocus.com/archive/1/482006/100/0/threaded - http://www.security
p://www.securityfocus.com/bid/26036 - http://www.securityfocus.com/archive/1/482006/100/0/threaded - http://www.securityfocus.com/bid/26046 - http://securityreason.com/securityalert/3216 - http://www.securityfocus.com/bid/26041 - http://osvdb.org/43494 - http://securityvulns.ru/Sdocument4.html - http://osvdb.org/43491 - http://osvdb.org/43492
CVE ID: CVE-2007-5431 State: PUBLISHED Published: 2007-10-12T23:00:00 Last Updated: 2024-08-07T15:31:58.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: include/imageupload.js in the MyFTPUploader module in Stride 1.0 contains sensitive information including FTP login credentials, which might allow remote attackers to gain unauthorized access to the FTP server being used by the module by viewing the source code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/482006/100/0/threaded - http://securityreason.com/securityalert/3216 - http://osvdb.org/45487 - http://securityvulns.ru/Sdocument4.html
CVE ID: CVE-2007-5432 State: PUBLISHED Published: 2007-10-12T23:00:00 Last Updated: 2024-08-07T15:31:58.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stride 1.0 has a default administrator username of "scott" with the password "running", which allows remote attackers to obtain administrative access through login.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/482006/100/0/threaded - http://securityreason.com/securityalert/3216 - http://securityvulns.ru/Sdocument4.html - http://osvdb.org/43485
CVE ID: CVE-2007-5433 State: PUBLISHED Published: 2007-10-12T23:00:00 Last Updated: 2024-08-07T15:31:58.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.cgi in Site-Up 2.64 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) search or (2) search mask field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26040 - http://websecurity.com.ua/1210/ - http://securityvulns.ru/Sdocument12.html - http://www.securityfocus.com/archive/1/482006/100/0/threaded - http://osvdb.org/42477 - http://securityreason.com/securityalert/3216
CVE ID: CVE-2007-5434 State: PUBLISHED Published: 2007-10-12T23:00:00 Last Updated: 2024-08-07T15:31:58.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PRO-search 0.17.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/43484 - http://www.securityfocus.com/archive/1/482006/100/0/threaded - http://websecurity.com.ua/1224/ - http://securityreason.com/securityalert/3216 - http://securityvulns.ru/Sdocument68.html
CVE ID: CVE-2007-5435 State: PUBLISHED Published: 2007-10-13T01:00:00 Last Updated: 2024-08-07T15:31:58.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in CA ERwin Process Modeler (formerly AllFusion Process Modeler) 7.2 might allow user-assisted remote attackers to cause a denial of service via a crafted Data Standards File (Datatype Standards File). Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3219 - http://osvdb.org/43483 - http://www.securityfocus.com/archive/1/482021/100/0/threaded - http://www.securityfocus.com/bid/26007 - http://www.eleytt.com/advisories/eleytt_ERWINDSF.pdf
CVE ID: CVE-2007-5436 State: PUBLISHED Published: 2007-10-13T01:00:00 Last Updated: 2024-08-07T15:31:58.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in a certain ActiveX control in ScanObjectBrowser.DLL in G DATA Antivirus 2007 might allow remote attackers to execute arbitrary code via unspecified parameters to the SelectPath function. NOTE: this issue might not cross privilege boundaries in most environments, since it is not marked as safe for scripting. Additional Analyst Notes: - CVE Program Container: References: - http://www.eleytt.com/advisories/eleytt_GDATA2007_1.pdf - http://securityreason.com/securityalert/3219 - http://www.securityfocus.com/archiv
m/advisories/eleytt_GDATA2007_1.pdf - http://securityreason.com/securityalert/3219 - http://www.securityfocus.com/archive/1/482021/100/0/threaded - http://osvdb.org/42476 - http://www.securityfocus.com/bid/26008
CVE ID: CVE-2007-5437 State: PUBLISHED Published: 2007-10-13T01:00:00 Last Updated: 2024-08-07T15:31:58.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web console in CA (formerly Computer Associates) eTrust ITM (Threat Manager) 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on port 6689. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3219 - http://www.securityfocus.com/archive/1/482021/100/0/threaded - http://www.securityfocus.com/bid/26013 - http://www.eleytt.com/advisories/eleytt_ETRUSTITM2.pdf - http://osvdb.org/43482
CVE ID: CVE-2007-5438 State: PUBLISHED Published: 2007-10-13T01:00:00 Last Updated: 2024-08-07T15:31:58.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in a certain ActiveX control in Reconfig.DLL in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 might allow local users to cause a denial of service to the Virtual Disk Mount Service (vmount2.exe), related to the ConnectPopulatedDis
l users to cause a denial of service to the Virtual Disk Mount Service (vmount2.exe), related to the ConnectPopulatedDiskEx function. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/43488 - http://securityreason.com/securityalert/3219 - http://www.vmware.com/security/advisories/VMSA-2008-0014.html - http://secunia.com/advisories/31709 - http://www.eleytt.com/advisories/eleytt_VMWARE1.pdf - http://www.vmware.com/support/server/doc/releasenotes_server.html - http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html - http://www.securitytracker.com/id?1020791 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html - http://secunia.com/advisori
acker.com/id?1020791 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html - http://secunia.com/advisories/31710 - http://www.securityfocus.com/archive/1/482021/100/0/threaded - http://www.vmware.com/support/ace/doc/releasenotes_ace.html - http://www.vmware.com/support/player/doc/releasenotes_player.html - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html - http://www.securityfocus.com/bid/26025 - http://www.securityfocus.com/archive/1/495869/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html - http://secunia.com/advisories/31707 - http://secunia.com/advisories/3
ware.com/support/ws55/doc/releasenotes_ws55.html - http://secunia.com/advisories/31707 - http://secunia.com/advisories/31708 - http://www.vupen.com/english/advisories/2008/2466