deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2008-3115
Published: 2008-07-09
Description: Secure Static Versioning in Sun Java JDK and JRE 6 Update 6 and earlier, and 5.0 Update 6 through 15, does not properly prevent execution of applets on older JRE releases, which might allow remote attackers to exploit vulnerabilities in these older releases.
CVSS Score: 7.5 (HIGH)
CWE: CWE-16
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html; http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3057&w=2
CVE: CVE-2008-1678
Published: 2008-07-10
Description: Memory leak in the zlib_stateful_init function in crypto/comp/c_zlib.c in libssl in OpenSSL 0.9.8f through 0.9.8h allows remote attackers to cause a denial of service (memory consumption) via multiple calls, as demonstrated by initial SSL client handshakes to the Apache HTTP Server mod_ssl that specify a compression algorithm.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://bugs.gentoo.org/show_bug.cgi?id=222643; http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html
CVE: CVE-2008-3116
Published: 2008-07-10
Description: Format string vulnerability in dx8render.dll in Snail Game (aka Suzhou Snail Electronic Company) 5th street (aka Hot Step or High Street 5) allows remote attackers to execute arbitrary code via format string specifiers in a chat message.
CVSS Score: 10.0 (HIGH)
CWE: CWE-134
References: http://securityreason.com/securityalert/3982; http://www.securityfocus.com/archive/1/493649/100/0/threaded; http://www.securityfocus.com/bid/29928
CVE: CVE-2008-3117
Published: 2008-07-10
Description: Unrestricted file upload vulnerability in update_profile.php in PHPmotion 2.0 and earlier allows remote authenticated users to execute arbitrary code by uploading a .php file with a content type of (1) image/gif, (2) image/jpeg, or (3) image/pjpeg, then accessing it via a direct request to the file under pictures/.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/29949; https://exchange.xforce.ibmcloud.com/vulnerabilities/43375; https://www.exploit-db.com/exploits/5938
CVE: CVE-2008-3118
Published: 2008-07-10
Description: SQL injection vulnerability in play.php in PHPmotion 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the vid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/29949; https://exchange.xforce.ibmcloud.com/vulnerabilities/43376; https://www.exploit-db.com/exploits/5938
CVE: CVE-2008-3119
Published: 2008-07-10
Description: SQL injection vulnerability in index.php in DreamPics Builder allows remote attackers to execute arbitrary SQL commands via the page parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/31009; http://securityreason.com/securityalert/3980; http://www.securityfocus.com/bid/30166
CVE: CVE-2008-3120
Published: 2008-07-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-3363.  Reason: This candidate is a duplicate of CVE-2008-3363.  Notes: All CVE users should reference CVE-2008-3363 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2008-3121
Published: 2008-07-10
Description: Multiple cross-site scripting (XSS) vulnerabilities in Xerox CentreWare Web (CWW) before 4.6.46 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/30978; http://www.securityfocus.com/bid/30151; http://www.xerox.com/downloads/usa/en/c/cert_XRX08_008.pdf
CVE: CVE-2008-3122
Published: 2008-07-10
Description: Multiple SQL injection vulnerabilities in Xerox CentreWare Web (CWW) before 4.6.46 allow remote authenticated users to execute arbitrary SQL commands via the unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/30978; http://www.securityfocus.com/bid/30151; http://www.xerox.com/downloads/usa/en/c/cert_XRX08_008.pdf
CVE: CVE-2008-3123
Published: 2008-07-10
Description: SQL injection vulnerability in index.php in Mole Group Real Estate Script 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the listing_id parameter in a listings action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/30984; http://www.securityfocus.com/bid/30129; https://exchange.xforce.ibmcloud.com/vulnerabilities/43639
CVE: CVE-2008-3124
Published: 2008-07-10
Description: SQL injection vulnerability in index.php in Mole Group Hotel Script 1.0 allows remote attackers to execute arbitrary SQL commands via the file parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/30985; http://www.securityfocus.com/bid/30128; https://exchange.xforce.ibmcloud.com/vulnerabilities/43640
CVE: CVE-2008-3125
Published: 2008-07-10
Description: SQL injection vulnerability in index.php in Mole Group Lastminute Script 4.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/31004; http://www.securityfocus.com/bid/30127; http://www.vupen.com/english/advisories/2008/2034/references
CVE: CVE-2008-3126
Published: 2008-07-10
Description: Multiple stack-based buffer overflows in the ServerView web interface (SnmpGetMibValues.exe) in Fujitsu Siemens Computers ServerView 04.60.07 and earlier allow remote authenticated users to execute arbitrary code via a crafted URL.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063043.html; http://secunia.com/advisories/30913; http://www.securityfocus.com/bid/30081
CVE: CVE-2008-3127
Published: 2008-07-10
Description: PHP remote file inclusion vulnerability in hioxBannerRotate.php in HIOX Banner Rotator (HBR) 1.3, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the hm parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/30900; http://www.securityfocus.com/bid/30021; https://exchange.xforce.ibmcloud.com/vulnerabilities/43501
CVE: CVE-2008-3128
Published: 2008-07-10
Description: Directory traversal vulnerability in search.php in Pivot 1.40.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the t parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://forum.pivotlog.net/viewtopic.php?t=12471; http://pivot-weblog.svn.sourceforge.net/viewvc/pivot-weblog/branches/1.40.x/pivot/modules/module_parser.php?r1=1333&r2=1332&pathrev=1333; http://secunia.com/advisories/30889
CVE: CVE-2008-3129
Published: 2008-07-10
Description: Multiple SQL injection vulnerabilities in index.php in Catviz 0.4 beta 1 allow remote attackers to execute arbitrary SQL commands via the (1) foreign_key_value parameter in the news page and (2) webpage parameter in the webpage_multi_edit form.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/30014; https://exchange.xforce.ibmcloud.com/vulnerabilities/43468; https://www.exploit-db.com/exploits/5974
CVE: CVE-2008-3130
Published: 2008-07-10
Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in OpenCart 0.7.7 allow remote attackers to inject arbitrary web script or HTML via the (1) firstname and (2) search parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/30177; https://exchange.xforce.ibmcloud.com/vulnerabilities/43504; https://exchange.xforce.ibmcloud.com/vulnerabilities/43505
CVE: CVE-2008-3131
Published: 2008-07-10
Description: SQL injection vulnerability in chatbox.php in pSys 0.7.0 Alpha, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the showid parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://securityreason.com/securityalert/3984; http://www.securityfocus.com/bid/30023; https://exchange.xforce.ibmcloud.com/vulnerabilities/43499
CVE: CVE-2008-3132
Published: 2008-07-10
Description: SQL injection vulnerability in the beamospetition (com_beamospetition) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the pet parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/30005; http://www.vupen.com/english/advisories/2008/1975/references; https://exchange.xforce.ibmcloud.com/vulnerabilities/43466
CVE: CVE-2008-3133
Published: 2008-07-10
Description: SQL injection vulnerability in admin/index.php in BareNuked CMS 1.1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the password parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/30887; http://www.securityfocus.com/bid/30011; https://exchange.xforce.ibmcloud.com/vulnerabilities/43471
CVE: CVE-2008-3134
Published: 2008-07-10
Description: Multiple unspecified vulnerabilities in GraphicsMagick before 1.2.4 allow remote attackers to cause a denial of service (crash, infinite loop, or memory consumption) via (a) unspecified vectors in the (1) AVI, (2) AVS, (3) DCM, (4) EPT, (5) FITS, (6) MTV, (7) PALM, (8) RLA, and (9) TGA decoder readers; and (b) the GetImageCharacteristics function in magick/image.c, as reachable from a crafted (10) PNG, (11) JPEG, (12) BMP, or (13) TIFF file.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html; http://secunia.com/advisories/30879; http://secunia.com/advisories/32151
CVE: CVE-2008-3135
Published: 2008-07-10
Description: Soldner Secret Wars 33724 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a packet with a large numeric value in a 0x80 data block.
CVSS Score: 7.8 (HIGH)
CWE: CWE-189
References: http://aluigi.altervista.org/adv/usurdat-adv.txt; http://secunia.com/advisories/30880; http://securityreason.com/securityalert/3983
CVE: CVE-2008-3136
Published: 2008-07-10
Description: SQL injection vulnerability in catalogue.php in AShop Deluxe 4.x allows remote attackers to execute arbitrary SQL commands via the cat parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/30902; http://www.securityfocus.com/bid/30022; https://exchange.xforce.ibmcloud.com/vulnerabilities/43537
CVE: CVE-2008-3137
Published: 2008-07-10
Description: The GSM SMS dissector in Wireshark (formerly Ethereal) 0.99.2 through 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html; http://secunia.com/advisories/30886; http://secunia.com/advisories/30942
CVE: CVE-2008-3138
Published: 2008-07-10
Description: The (1) PANA and (2) KISMET dissectors in Wireshark (formerly Ethereal) 0.99.3 through 1.0.0 allow remote attackers to cause a denial of service (application stop) via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html; http://secunia.com/advisories/30886; http://secunia.com/advisories/30942
CVE: CVE-2008-3139
Published: 2008-07-10
Description: The RTMPT dissector in Wireshark (formerly Ethereal) 0.99.8 through 1.0.0 allows remote attackers to cause a denial of service (crash) via unknown vectors.  NOTE: this might be due to a use-after-free error.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html; http://secunia.com/advisories/30886; http://secunia.com/advisories/30942
CVE: CVE-2008-3140
Published: 2008-07-10
Description: The syslog dissector in Wireshark (formerly Ethereal) 1.0.0 allows remote attackers to cause a denial of service (application crash) via unknown vectors, possibly related to an "incomplete SS7 MSU syslog encapsulated packet."
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html; http://secunia.com/advisories/30886; http://secunia.com/advisories/30942
CVE: CVE-2008-3141
Published: 2008-07-10
Description: Unspecified vulnerability in the RMI dissector in Wireshark (formerly Ethereal) 0.9.5 through 1.0.0 allows remote attackers to read system memory via unspecified vectors.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html; http://secunia.com/advisories/30886; http://secunia.com/advisories/30942
CVE: CVE-2008-3147
Published: 2008-07-11
Description: WeFi 3.2.1.4.1, when diagnostic mode is enabled, stores (1) WEP, (2) WPA, and (3) WPA2 access-point keys in (a) ClientWeFiLog.dat, (b) ClientWeFiLog.bak, and possibly (c) a certain .inf file under %PROGRAMFILES%\WeFi\Users\, and uses cleartext for the ClientWeFiLog files, which allows local users to obtain sensitive information by reading these files.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://osvdb.org/51543; http://secunia.com/advisories/30966; http://securityreason.com/securityalert/3987
CVE: CVE-2008-3148
Published: 2008-07-11
Description: Stack-based buffer overflow in (1) OllyDBG 1.10 and (2) ImpREC 1.7f allows user-assisted attackers to execute arbitrary code via a crafted DLL file that contains a long string.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/30139; https://exchange.xforce.ibmcloud.com/vulnerabilities/43673; https://exchange.xforce.ibmcloud.com/vulnerabilities/43675
CVE: CVE-2008-3149
Published: 2008-07-11
Description: The SNMP daemon in the F5 FirePass 1200 6.0.2 hotfix 3 allows remote attackers to cause a denial of service (daemon crash) by walking the hrSWInstalled OID branch in HOST-RESOURCES-MIB.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/30965; http://securityreason.com/securityalert/3985; http://www.securityfocus.com/archive/1/493950/100/0/threaded
CVE: CVE-2008-3150
Published: 2008-07-11
Description: Directory traversal vulnerability in index.php in Neutrino Atomic Edition 0.8.4 allows remote attackers to read and modify files, as demonstrated by manipulating data/sess.php in (1) usb and (2) del_pag actions.  NOTE: this can be leveraged for code execution by performing an upload that bypasses the intended access restrictions that were implemented in sess.php.
CVSS Score: 10.0 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/30950; http://www.securityfocus.com/bid/30123; https://exchange.xforce.ibmcloud.com/vulnerabilities/43616
CVE: CVE-2008-3151
Published: 2008-07-11
Description: SQL injection vulnerability in the 4ndvddb 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a show_dvd action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/30976; http://securityreason.com/securityalert/3986; http://www.securityfocus.com/archive/1/494013/100/0/threaded
CVE: CVE-2008-3152
Published: 2008-07-11
Description: SQL injection vulnerability in directory.php in SmartPPC and SmartPPC Pro allows remote attackers to execute arbitrary SQL commands via the idDirectory parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/30111; http://www.vupen.com/english/advisories/2008/2013/references; https://exchange.xforce.ibmcloud.com/vulnerabilities/43597
CVE: CVE-2008-3153
Published: 2008-07-11
Description: SQL injection vulnerability in Triton CMS Pro allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/30969; http://www.securityfocus.com/bid/30122; http://www.vupen.com/english/advisories/2008/2014/references
CVE: CVE-2008-3154
Published: 2008-07-11
Description: SQL injection vulnerability in index.php in WebBlizzard CMS allows remote attackers to execute arbitrary SQL commands via the page parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/30074; https://exchange.xforce.ibmcloud.com/vulnerabilities/43595; https://www.exploit-db.com/exploits/5997
CVE: CVE-2008-3155
Published: 2008-07-11
Description: Stack-based buffer overflow in the ActiveX control (as2guiie.dll) in Panda ActiveScan before 1.02.00 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long argument to the Update method.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://karol.wiesek.pl/files/panda.tgz; http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063061.html; http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063068.html
CVE: CVE-2008-3156
Published: 2008-07-11
Description: The ActiveScan ActiveX Control (as2guiie.dll) in Panda ActiveScan before 1.02.00 allows remote attackers to download and execute arbitrary cabinet (CAB) files via unspecified URLs passed to the Update method.
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://karol.wiesek.pl/files/panda.tgz; http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063061.html; http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063068.html
CVE: CVE-2008-3157
Published: 2008-07-11
Description: Nortel SIP Multimedia PC Client 4.x MCS5100 and MCS5200 does not limit the number of concurrent sessions, which allows attackers to cause a denial of service (resource consumption) via a large number of sessions.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/30854; http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=738961; http://www.securitytracker.com/id?1020371
CVE: CVE-2008-3158
Published: 2008-07-11
Description: Unspecified vulnerability in NWFS.SYS in Novell Client for Windows 4.91 SP4 has unknown impact and attack vectors, possibly related to IOCTL requests that overwrite arbitrary memory.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/30904; http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5028543.html; http://www.securityfocus.com/bid/30001
CVE: CVE-2008-1588
Published: 2008-07-14
Description: Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to spoof the address bar via Unicode ideographic spaces in the URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://secunia.com/advisories/31074
CVE: CVE-2008-1589
Published: 2008-07-14
Description: Safari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as user confirmation for visiting a web site with a (1) self-signed or (2) invalid certificate, which makes it easier for remote attackers to spoof web sites.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://jvn.jp/en/jp/JVN88676089/index.html; http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000039.html; http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html
CVE: CVE-2008-1590
Published: 2008-07-14
Description: JavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod touch before 2.0 does not properly perform runtime garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger memory corruption, a different vulnerability than CVE-2008-2317.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html; http://secunia.com/advisories/31074; http://www.securityfocus.com/bid/30186
CVE: CVE-2008-1809
Published: 2008-07-14
Description: Heap-based buffer overflow in Novell eDirectory 8.7.3 before 8.7.3.10b, and 8.8 before 8.8.2 FTF2, allows remote attackers to execute arbitrary code via an LDAP search request containing "NULL search parameters."
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=724; http://secunia.com/advisories/31036; http://www.novell.com/support/viewContent.do?externalId=3843876
CVE: CVE-2008-2303
Published: 2008-07-14
Description: Integer signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving JavaScript array indices that trigger an out-of-bounds access, a different vulnerability than CVE-2008-2307.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html; http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html; http://secunia.com/advisories/31074
CVE: CVE-2008-2304
Published: 2008-07-14
Description: Buffer overflow in Apple Core Image Fun House 2.0 and earlier in CoreImage Examples in Xcode tools before 3.1 allows user-assisted attackers to execute arbitrary code or cause a denial of service (application crash) via a .funhouse file with a string XML element that contains many characters.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce//2008/Jul/msg00002.html; http://secunia.com/advisories/31060; http://securityreason.com/securityalert/3988
CVE: CVE-2008-2317
Published: 2008-07-14
Description: WebCore in Apple Safari does not properly perform garbage collection of JavaScript document elements, which allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption and application crash) via a reference to the ownerNode property of a copied CSSStyleSheet object of a STYLE element, as originally demonstrated on Apple iPhone before 2.0 and iPod touch before 2.0, a different vulnerability than CVE-2008-1590.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html; http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html; http://secunia.com/advisories/31074
CVE: CVE-2008-2318
Published: 2008-07-14
Description: The WOHyperlink implementation in WebObjects in Apple Xcode tools before 3.1 appends local session IDs to generated non-local URLs, which allows remote attackers to obtain potentially sensitive information by reading the requests for these URLs.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce//2008/Jul/msg00002.html; http://secunia.com/advisories/31060; http://support.apple.com/kb/HT2352
CVE: CVE-2008-3159
Published: 2008-07-14
Description: Integer overflow in ds.dlm, as used by dhost.exe, in Novell eDirectory 8.7.3.10 before 8.7.3 SP10b and 8.8 before 8.8.2 ftf2 allows remote attackers to execute arbitrary code via unspecified vectors that trigger a stack-based buffer overflow, related to "flawed arithmetic."
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://secunia.com/advisories/30938; http://securitytracker.com/id?1020431; http://www.novell.com/support/search.do?cmd=displayKC&sliceId=SAL_Public&externalId=3694858
CVE: CVE-2008-3160
Published: 2008-07-14
Description: Multiple unspecified vulnerabilities in IBM Data ONTAP 7.1 before 7.1.3, as used by IBM System Storage N series Filer and IBM System Storage N series Gateway, have unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/30931; http://www-1.ibm.com/support/docview.wss?rs=1147&uid=ssg1S7002385; http://www-1.ibm.com/support/docview.wss?rs=1147&uid=ssg1S7002386