Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-1207 State: PUBLISHED Published: 2008-03-08T00:00:00 Last Updated: 2024-08-07T08:17:34.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Fujitsu Interstage Smart Repository, as used in multiple Fujitsu Interstage products, allow remote attackers to cause a denial of service (daemon crash) via (1) an invalid request or (2) a large amount of data sent to the registered attribute value. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41039 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41041 - http://secunia.com/advisories/29250 - http://www.fujits
9 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41041 - http://secunia.com/advisories/29250 - http://www.fujitsu.com/global/support/software/security/products-f/interstage-sr-200801e.html - http://www.fujitsu.com/global/support/software/security/products-f/interstage-sr-200802e.html - http://www.vupen.com/english/advisories/2008/0786 - http://www.securityfocus.com/bid/28114
CVE ID: CVE-2008-1208 State: PUBLISHED Published: 2008-03-08T00:00:00 Last Updated: 2024-08-07T08:17:34.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the login page in Check Point VPN-1 UTM Edge W Embedded NGX 7.0.48x allows remote attackers to inject arbitrary web script or HTML via the user parameter. Additional Analyst Notes: - CVE Program Container: References: - https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk34520 - http://www.louhi.fi/advisory/checkpoint_080306.txt - http://www.vupen.com/english/advisories/2008/0788 - http://www.securitytracker.com/id?1019554 - htt
ckpoint_080306.txt - http://www.vupen.com/english/advisories/2008/0788 - http://www.securitytracker.com/id?1019554 - http://secunia.com/advisories/29243 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41032 - http://www.securityfocus.com/bid/28116 - http://www.securityfocus.com/archive/1/489203/100/0/threaded
CVE ID: CVE-2008-1209 State: PUBLISHED Published: 2008-03-08T00:00:00 Last Updated: 2024-08-07T08:17:34.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in redirect.do in Xitex WebContent M1 allows remote attackers to inject arbitrary web script or HTML via the sid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29222 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41021 - http://www.securityfocus.com/bid/28115
CVE ID: CVE-2008-1210 State: PUBLISHED Published: 2008-03-08T00:00:00 Last Updated: 2024-08-07T08:17:33.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the ctags parsing code in Programmer's Notepad before 2.0.8.718 allows user-assisted remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted .c file, when the victim selects the Jump To dialog. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41022 - http://secunia.com/advisories/29233 - http://sourceforge.net
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/41022 - http://secunia.com/advisories/29233 - http://sourceforge.net/project/shownotes.php?release_id=581499&group_id=45545 - http://www.securityfocus.com/bid/28119
CVE ID: CVE-2008-1211 State: PUBLISHED Published: 2008-03-08T00:00:00 Last Updated: 2024-08-07T08:17:33.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in BosDates 3.x and 4.x allows remote attackers to inject arbitrary web script or HTML via (1) the type parameter in calendar.php and (2) the category parameter in calendar_search.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29255 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41020 - http://www.securityfocus.co
/secunia.com/advisories/29255 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41020 - http://www.securityfocus.com/bid/28117
CVE ID: CVE-2008-1212 State: PUBLISHED Published: 2008-03-08T00:00:00 Last Updated: 2024-08-07T08:17:33.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in set_permissions.php in Podcast Generator 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the scriptlang parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28106 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41130
CVE ID: CVE-2008-1213 State: PUBLISHED Published: 2008-03-08T00:00:00 Last Updated: 2024-08-07T08:17:34.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Numara FootPrints for Linux 8.1 allows remote attackers to inject arbitrary web script or HTML via the Title form field when setting an appointment. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41003 - http://secunia.com/advisories/28659 - http://www.securityfocus.com/bid/28103
CVE ID: CVE-2008-1214 State: PUBLISHED Published: 2008-03-08T00:00:00 Last Updated: 2024-08-07T08:17:33.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: MRcgi/MRProcessIncomingForms.pl in Numara FootPrints 8.1 on Linux allows remote attackers to execute arbitrary code via shell metacharacters in the PROJECTNUM parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28659 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41005
CVE ID: CVE-2008-1215 State: PUBLISHED Published: 2008-03-09T02:00:00 Last Updated: 2024-08-07T08:17:34.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the command_Expand_Interpret function in command.c in ppp (aka user-ppp), as distributed in FreeBSD 6.3 and 7.0, OpenBSD 4.1 and 4.2, and the net/userppp package for NetBSD, allows local users to gain privileges via long commands containing "~" characters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29238 - http://www.openbsd.org/errata42.html#009_ppp - http://www.securityfocus.com/archive/82/488980/30/0/threaded - http://www.openbsd.org/errata41
g/errata42.html#009_ppp - http://www.securityfocus.com/archive/82/488980/30/0/threaded - http://www.openbsd.org/errata41.html#014_ppp - http://www.securityfocus.com/archive/82/489031/30/0/threaded - http://www.securityfocus.com/bid/28090 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41034 - http://secunia.com/advisories/29234 - http://secunia.com/advisories/29240
CVE ID: CVE-2008-1216 State: PUBLISHED Published: 2008-03-09T02:00:00 Last Updated: 2024-08-07T08:17:34.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Lotus Quickr 8.0 server, and possibly QuickPlace 7.x, does not properly identify URIs containing cross-site scripting (XSS) attack strings, which allows remote attackers to inject arbitrary web script or HTML via a Calendar OpenDocument action to main.nsf with a Count parameter containing a JavaScript event in a malformed element, as demonstrated by an onload event in an IFRAME element. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3721 - http://www.securityfocus.c
Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3721 - http://www.securityfocus.com/bid/27925 - http://secunia.com/advisories/29072 - http://www.securityfocus.com/archive/1/488620/100/100/threaded - http://www.vupen.com/english/advisories/2008/0667
CVE ID: CVE-2008-1217 State: PUBLISHED Published: 2008-03-09T02:00:00 Last Updated: 2024-08-07T08:17:34.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2 CCH, and 8.0.x before 8.0.1 allows remote attackers to execute arbitrary code via a crafted attachment in an e-mail message sent over SMTP, a variant of CVE-2007-6706. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg21271957 - http://securitytracker.com/id?1019464
CVE ID: CVE-2008-1218 State: PUBLISHED Published: 2008-03-10T23:00:00 Last Updated: 2024-08-07T08:17:34.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs, allows remote attackers to bypass the password check via a password containing TAB characters, which are treated as argument delimiters that enable the skip_password_check field to be specified. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200803-25.xml - http://secunia.com/advisories/29295 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41085 -
glsa-200803-25.xml - http://secunia.com/advisories/29295 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41085 - https://www.exploit-db.com/exploits/5257 - http://secunia.com/advisories/29557 - http://www.debian.org/security/2008/dsa-1516 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0108 - https://usn.ubuntu.com/593-1/ - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00381.html - http://secunia.com/advisories/29364 - http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html - https://issues.rpath.com/browse/RPL-2341 - http://www.dovecot.org/list/dovecot-news/2008-March/000064.html - http://www.dovecot.org/list/dovecot-news/2008-March/000065
://www.dovecot.org/list/dovecot-news/2008-March/000064.html - http://www.dovecot.org/list/dovecot-news/2008-March/000065.html - http://secunia.com/advisories/29226 - http://www.securityfocus.com/archive/1/489481/100/0/threaded - http://secunia.com/advisories/32151 - http://secunia.com/advisories/29385 - https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00358.html - http://www.securityfocus.com/bid/28181 - http://secunia.com/advisories/29396
CVE ID: CVE-2008-1219 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:34.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Kutub-i Sitte (KutubiSitte) 1.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the kid parameter in a hadisgoster action to modules.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28126 - http://secunia.com/advisories/29279 - http://www.securityfocus.com/archive/1/489258/100/0/threaded - http://www.securityfocus.com/archive/1/489219/100/0/threaded - http://www.rbt-4.net/forum/viewthread.php?forum_id=51&t
- http://www.securityfocus.com/archive/1/489219/100/0/threaded - http://www.rbt-4.net/forum/viewthread.php?forum_id=51&thread_id=3058 - http://securityreason.com/securityalert/3722 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41036
CVE ID: CVE-2008-1220 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:33.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the 4nChat 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the roomid parameter in an index action to modules.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41051
CVE ID: CVE-2008-1221 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:34.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in the FTP server in MicroWorld eScan Corporate Edition 9.0.742.98 and eScan Management Console (aka eScan Server) 9.0.742.1 allows remote attackers to read arbitrary files via an absolute pathname in the RETR (get) command. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3723 - http://secunia.com/advisories/29246 - http://aluigi.altervista.org/adv/escaz-adv.txt - http://www.securityfocus.com/bid/28127 - http://www.securityfocus.com/
http://aluigi.altervista.org/adv/escaz-adv.txt - http://www.securityfocus.com/bid/28127 - http://www.securityfocus.com/archive/1/489228/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/41033
CVE ID: CVE-2008-1222 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:33.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Dokeos 1.8.4 before SP3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0798 - http://secunia.com/advisories/29254 - http://www.securityfocus.com/bid/28121 - http://projects.dokeos.com/index.php?do=details&task_id=2312 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41046 - http://www.dokeos.com/wiki/index.php/Security
CVE ID: CVE-2008-1223 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:34.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Dokeos 1.8.4 before SP3 allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41048 - http://www.vupen.com/english/advisories/2008/0798 - http://secunia.com/advisories/29254 - http://www.securityfocus.com/bid/28121 - http://projects.dokeos.com/index.php?do=details&task_id=2312 - http://www.dokeos.com/wiki/index.php/Security
CVE ID: CVE-2008-1224 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:34.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in account.php in BosClassifieds Classified Ads System 3.0 allows remote attackers to inject arbitrary web script or HTML via the returnTo parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/41045 - http://www.securityfocus.com/bid/28140 - http://secunia.com/advisories/29261
CVE ID: CVE-2008-1225 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:34.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WebCT Campus Edition 4.1.5.8, when "Don't wrap text" is enabled, allow remote authenticated users to inject arbitrary web script or HTML via a (1) mail message or (2) discussion board message. NOTE: this might overlap CVE-2005-1076. Additional Analyst Notes: - CVE Program Container: References: - http://www.balupton.com/blogs/dev?title=webct_session_stealer_exploit - http://www.securityfocus.com/bid/28107 - http://secunia.com/advisories/29227 - https://exchange.xforce.ibmc
er_exploit - http://www.securityfocus.com/bid/28107 - http://secunia.com/advisories/29227 - https://exchange.xforce.ibmcloud.com/vulnerabilities/41047 - http://marc.info/?l=full-disclosure&m=120471944119467&w=2 - http://www.balupton.com/documents/webct_exploits.txt
CVE ID: CVE-2008-1226 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:33.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration Suite (ZCS) 4.0.3, 4.5.6, and possibly other versions before 4.5.10 allow remote attackers to inject arbitrary web script or HTML via an e-mail attachment, possibly involving a (1) .jpg or (2) .gif image attachment. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/29263 - http://jvn.jp/jp/JVN%2395014590/index.html - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000004.html - https://exchange.xforce.ibmclo
JVN%2395014590/index.html - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000004.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/41044 - http://www.securityfocus.com/bid/28134 - http://www.zimbra.com/jp/products/vulnerability.html
CVE ID: CVE-2008-1227 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:33.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the silc_fingerprint function in lib/silcutil/silcutil.c in Secure Internet Live Conferencing (SILC) Toolkit 1.1.5, and unspecified earlier versions, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via long input data. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://silcnet.org/docs/changelog/SILC%20Toolkit%201.1.6 - http://security.gentoo.org/glsa/glsa-20
tainer: References: - http://silcnet.org/docs/changelog/SILC%20Toolkit%201.1.6 - http://security.gentoo.org/glsa/glsa-200804-27.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/41012 - https://bugzilla.redhat.com/show_bug.cgi?id=372021 - http://www.vupen.com/english/advisories/2008/0769 - http://secunia.com/advisories/29174 - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html - http://secunia.com/advisories/29946 - http://www.securityfocus.com/bid/28101 - http://secunia.com/advisories/29323 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:158
CVE ID: CVE-2008-1228 State: PUBLISHED Published: 2008-03-10T17:00:00Z Last Updated: 2024-09-16T16:53:03.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin.php in MG2 (formerly Minigal) allows remote attackers to inject arbitrary web script or HTML via the list parameter in an import action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/28098 - http://marc.info/?l=bugtraq&m=120467196623452&w=2
CVE ID: CVE-2008-1229 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:34.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to inject arbitrary web script or HTML via the editor parameter, a different vector than CVE-2007-5120.b. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=120300554011544&w=2 - http://www.bugsec.com/articles.php?Security=48&Web-Application-Firewall=0 - http://secunia.com/advisories/28969 - http://www.securityfocus.com/bid/27785 - https://exchange.xforce.ibmcloud.com/vulnerabi
//secunia.com/advisories/28969 - http://www.securityfocus.com/bid/27785 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40507 - https://www.exploit-db.com/exploits/5112
CVE ID: CVE-2008-1230 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:33.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to upload and execute arbitrary .jsp files via an unspecified manipulation that attaches a .jsp file to an "entry page." Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=120300554011544&w=2 - http://www.bugsec.com/articles.php?Security=48&Web-Application-Firewall=0 - http://secunia.com/advisories/28969 - http://www.securityfocus.com/bid/27785 - https://www.exploit-db.com/exploits/5112 - ht
://secunia.com/advisories/28969 - http://www.securityfocus.com/bid/27785 - https://www.exploit-db.com/exploits/5112 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40511
CVE ID: CVE-2008-1231 State: PUBLISHED Published: 2008-03-10T17:00:00 Last Updated: 2024-08-07T08:17:34.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to include and execute arbitrary local .jsp files, and obtain sensitive information, via a .. (dot dot) in the editor parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=120300554011544&w=2 - http://www.bugsec.com/articles.php?Security=48&Web-Application-Firewall=0 - http://secunia.com/advisories/28969 - http://www.securityfocus.com/bid/27785 - https://exchange.xforce.ibmclo
rewall=0 - http://secunia.com/advisories/28969 - http://www.securityfocus.com/bid/27785 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40508 - https://www.exploit-db.com/exploits/5112
CVE ID: CVE-2008-1232 State: PUBLISHED Published: 2008-08-04T01:00:00 Last Updated: 2024-08-07T08:17:34.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via a crafted string that is used in the message argument to the HttpServletResponse.sendError method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020622 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5985 - http://tomcat.apache.org/security-4.
al.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5985 - http://tomcat.apache.org/security-4.html - http://www.redhat.com/support/errata/RHSA-2008-0862.html - http://www.vupen.com/english/advisories/2009/1609 - http://www.vupen.com/english/advisories/2009/2194 - http://secunia.com/advisories/34013 - http://community.ca.com/blogs/casecurityresponseblog/archive/2009/06/15/ca20090615-02-ca-service-desk-tomcat-cross-site-scripting-vulnerability.aspx - http://www.vupen.com/english/advisories/2008/2823 - http://secunia.com/advisories/37460 - http://www.vmware.com/security/advisories/VMSA-2009-0002.html - http://secunia.com/advisories/31982 - http://www.securityfocus.com/
vmware.com/security/advisories/VMSA-2009-0002.html - http://secunia.com/advisories/31982 - http://www.securityfocus.com/bid/31681 - http://secunia.com/advisories/32120 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11181 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://secunia.com/advisories/33999 - http://www.securityfocus.com/bid/30496 - http://secunia.com/advisories/31865 - http://securityreason.com/securityalert/4098 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00889.html - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214095 - http://secunia.com/advisories/31639 - http: