deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2008-0639
Published: 2008-02-13
Description: Stack-based buffer overflow in the EnumPrinters function in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2, SP3, and SP4 for Windows allows remote attackers to execute arbitrary code via a crafted RPC request, aka Novell bug 353138, a different vulnerability than CVE-2006-5854.  NOTE: this issue exists because of an incomplete fix for CVE-2007-6701.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://download.novell.com/Download?buildid=SszG22IIugM~; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]1348&w=2; http://secunia.com/advisories/28895
CVE: CVE-2008-0658
Published: 2008-02-13
Description: slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service (daemon crash) via a modrdn operation with a NOOP (LDAP_X_NO_OPERATION) control, a related issue to CVE-2007-6698.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html; http://secunia.com/advisories/28914
CVE: CVE-2008-0757
Published: 2008-02-13
Description: Cross-site scripting (XSS) vulnerability in index.php in MercuryBoard 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the message parameter (aka the message text area), which leads to an injection in the messenger during private message (PM) preview. NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://forum.aria-security.net/showthread.php?t=522; http://secunia.com/advisories/28899; http://www.securityfocus.com/archive/1/487913/100/0/threaded
CVE: CVE-2008-0758
Published: 2008-02-13
Description: Multiple directory traversal vulnerabilities in the Zidget/HTTP embedded HTTP server in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allow remote attackers to read arbitrary (1) gif, (2) png, (3) jpg, (4) xml, (5) ico, (6) zip, and (7) html files via a "..\" (dot dot backslash) sequence in the filename.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://aluigi.altervista.org/adv/ezipirla-adv.txt; http://aluigi.org/poc/ezipirla.zip; http://secunia.com/advisories/28862
CVE: CVE-2008-0759
Published: 2008-02-13
Description: ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allows remote attackers to cause a denial of service (daemon crash) via an invalid UAM field in a request to the Apple Filing Protocol (AFP) service on TCP port 548.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://aluigi.altervista.org/adv/ezipirla-adv.txt; http://aluigi.org/poc/ezipirla.zip; http://secunia.com/advisories/28862
CVE: CVE-2008-0760
Published: 2008-02-13
Description: Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.4.1.0 and earlier, and Sentinel Keys Server 1.0.4.0 and earlier, allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the URI.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2007-6483.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://aluigi.altervista.org/adv/sentinella-adv.txt; http://secunia.com/advisories/28863; http://securityreason.com/securityalert/3646
CVE: CVE-2008-0761
Published: 2008-02-13
Description: SQL injection vulnerability in index.php in the Prince Clan Chess Club (com_pcchess) 0.8 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the user_id parameter in a players action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/27761; https://exchange.xforce.ibmcloud.com/vulnerabilities/40436; https://www.exploit-db.com/exploits/5104
CVE: CVE-2008-0762
Published: 2008-02-13
Description: SQL injection vulnerability in index.php in the com_iomezun component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/archive/1/487989/100/0/threaded; http://www.securityfocus.com/bid/27748; https://exchange.xforce.ibmcloud.com/vulnerabilities/40447
CVE: CVE-2008-0763
Published: 2008-02-13
Description: Stack-based buffer overflow in NPSpcSVR.exe in Larson Network Print Server (LstNPS) 9.4.2 build 105 and earlier allows remote attackers to execute arbitrary code via a long argument in a LICENSE command on TCP port 3114.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://aluigi.altervista.org/adv/lstnpsx-adv.txt; http://secunia.com/advisories/28890; http://www.securityfocus.com/archive/1/487956/100/0/threaded
CVE: CVE-2008-0764
Published: 2008-02-13
Description: Format string vulnerability in the logging function in Larson Network Print Server (LstNPS) 9.4.2 build 105 and earlier for Windows might allow remote attackers to execute arbitrary code via format string specifiers in a USEP command on TCP port 3114.
CVSS Score: 10.0 (HIGH)
CWE: CWE-134
References: http://aluigi.altervista.org/adv/lstnpsx-adv.txt; http://secunia.com/advisories/28890; http://www.securityfocus.com/archive/1/487956/100/0/threaded
CVE: CVE-2008-0765
Published: 2008-02-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in artmedic webdesign weblog allow remote attackers to inject arbitrary web script or HTML via the (1) date parameter to artmedic_print.php and the (2) jahrneu parameter to index.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2008-02/0152.html; http://secunia.com/advisories/28927; http://www.securityfocus.com/archive/1/488223/100/0/threaded
CVE: CVE-2008-0766
Published: 2008-02-13
Description: Stack-based buffer overflow in RpmSrvc.exe in Brooks Remote Print Manager (RPM) 4.5.1.11 and earlier (Elite and Select) for Windows allows remote attackers to execute arbitrary code via a long filename in a "Receive data file" LPD command.  NOTE: some of these details are obtained from third party information.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://aluigi.altervista.org/adv/rpmlpdbof-adv.txt; http://secunia.com/advisories/28905; http://www.securityfocus.com/archive/1/488010/100/0/threaded
CVE: CVE-2008-0767
Published: 2008-02-13
Description: ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier does not verify that a certain "number of URLs" field is consistent with the packet length, which allows remote attackers to cause a denial of service (daemon crash) via a large integer in this field in a packet to the Service Location Protocol (SLP) service on UDP port 427, triggering an out-of-bounds read.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://aluigi.altervista.org/adv/ezipirla-adv.txt; http://aluigi.org/poc/ezipirla.zip; http://secunia.com/advisories/28862
CVE: CVE-2008-0768
Published: 2008-02-13
Description: Multiple stack-based and heap-based buffer overflows in the Windows RPC components for IBM Informix Storage Manager (ISM), as used in Informix Dynamic Server (IDS) 10.00.xC8 and earlier and 11.10.xC2 and earlier, allow attackers to execute arbitrary code via crafted XDR requests.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/28689; http://www-01.ibm.com/support/docview.wss?uid=swg21294211; http://www-1.ibm.com/support/search.wss?rs=0&q=IC55040&apar=only
CVE: CVE-2007-5763
Published: 2008-02-14
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-0401.  Reason: This candidate is a reservation duplicate of CVE-2008-0401.  Notes: All CVE users should reference CVE-2008-0401 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2008-0769
Published: 2008-02-14
Description: Cross-site scripting (XSS) vulnerability in Livelink ECM 9.0.0 through 9.7.0 and possibly earlier does not set the charset, which allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded input.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059985.html; http://secunia.com/advisories/28723; http://withdk.com/archives/livelink-utf7-xss-advisory.pdf
CVE: CVE-2008-0770
Published: 2008-02-14
Description: SQL injection vulnerability in arcade.php in ibProArcade 3.3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the g_display_order cookie parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.vupen.com/english/advisories/2008/0366; https://www.exploit-db.com/exploits/5018; http://www.vupen.com/english/advisories/2008/0366
CVE: CVE-2008-0771
Published: 2008-02-14
Description: Multiple SQL injection vulnerabilities in default.asp in Site2Nite allow remote attackers to execute arbitrary SQL commands via the (1) txtUserName and (2) txtPassword parameters.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/28531; http://securityreason.com/securityalert/3650; http://www.securityfocus.com/archive/1/486414/100/200/threaded
CVE: CVE-2008-0772
Published: 2008-02-14
Description: SQL injection vulnerability in index.php in the com_doc component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the sid parameter in a view task.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/27679; https://www.exploit-db.com/exploits/5080; http://www.securityfocus.com/bid/27679
CVE: CVE-2008-0773
Published: 2008-02-14
Description: SQL injection vulnerability in Phil Taylor Comments (com_comments, aka Review Script) 0.5.8.5g and earlier component for Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/27731; https://www.exploit-db.com/exploits/5094; http://www.securityfocus.com/bid/27731
CVE: CVE-2008-0774
Published: 2008-02-14
Description: Cross-site scripting (XSS) vulnerability in search.cgi in Loris Hotel Reservation System 3.01 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the hotel_name parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/28881; http://www.securityfocus.com/bid/27729; http://secunia.com/advisories/28881
CVE: CVE-2008-0775
Published: 2008-02-14
Description: Cross-site scripting (XSS) vulnerability in sboxDB.php in Simple Machines Forum (SMF) Shoutbox 1.14 through 1.16b allows remote attackers to inject arbitrary web script or HTML via strings to the shoutbox form that start with "&#", contain the desired script, and end with ";".
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/28900; http://securityreason.com/securityalert/3651; http://www.securityfocus.com/archive/1/487912/100/0/threaded
CVE: CVE-2008-0776
Published: 2008-02-14
Description: SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the item_id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/28887; http://www.securityfocus.com/bid/27717; https://www.exploit-db.com/exploits/5096
CVE: CVE-2008-0026
Published: 2008-02-14
Description: SQL injection vulnerability in Cisco Unified CallManager/Communications Manager (CUCM) 5.0/5.1 before 5.1(3a) and 6.0/6.1 before 6.1(1a) allows remote authenticated users to execute arbitrary SQL commands via the key parameter to the (1) admin and (2) user interface pages.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/28932; http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7c.shtml; http://www.securityfocus.com/bid/27775
CVE: CVE-2008-0778
Published: 2008-02-14
Description: Multiple stack-based buffer overflows in an ActiveX control in QTPlugin.ocx for Apple QuickTime 7.4.1 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long arguments to the (1) SetBgColor, (2) SetHREF, (3) SetMovieName, (4) SetTarget, and (5) SetMatrix methods.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://securityreason.com/securityalert/3652; http://www.securityfocus.com/archive/1/488045/100/0/threaded; http://www.securityfocus.com/bid/27769
CVE: CVE-2008-0779
Published: 2008-02-14
Description: The fortimon.sys device driver in Fortinet FortiClient Host Security 3.0 MR5 Patch 3 and earlier does not properly initialize its DeviceExtension, which allows local users to access kernel memory and execute arbitrary code via a crafted request.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://kc.forticare.com/default.asp?id=3618; http://secunia.com/advisories/28975; http://securityreason.com/securityalert/3660
CVE: CVE-2008-0780
Published: 2008-02-14
Description: Cross-site scripting (XSS) vulnerability in MoinMoin 1.5.x through 1.5.8 and 1.6.x before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the login action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://hg.moinmo.in/moin/1.5/rev/2f952fa361c7; http://hg.moinmo.in/moin/1.6/rev/9f4bdc7ef80d; http://secunia.com/advisories/28987
CVE: CVE-2008-0781
Published: 2008-02-14
Description: Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) message, (2) pagename, and (3) target filenames.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://hg.moinmo.in/moin/1.5/rev/db212dfc58ef; http://secunia.com/advisories/28987; http://secunia.com/advisories/29010
CVE: CVE-2008-0782
Published: 2008-02-14
Description: Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the MOIN_ID user ID in a cookie for a userform action.  NOTE: this issue can be leveraged for PHP code execution via the quicklinks parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://hg.moinmo.in/moin/1.5/rev/e69a16b6e630; http://secunia.com/advisories/29010; http://secunia.com/advisories/29262
CVE: CVE-2008-0783
Published: 2008-02-14
Description: Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote attackers to inject arbitrary web script or HTML via (1) the view_type parameter to graph.php; (2) the filter parameter to graph_view.php; (3) the action parameter to the draw_navigation_text function in lib/functions.php, reachable through index.php (aka the login page) or data_input.php; or (4) the login_username parameter to index.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://bugs.cacti.net/view.php?id=1245; http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html; http://secunia.com/advisories/28872
CVE: CVE-2008-0784
Published: 2008-02-14
Description: graph.php in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allows remote attackers to obtain the full path via an invalid local_graph_id parameter and other unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html; http://secunia.com/advisories/28872; http://secunia.com/advisories/28976
CVE: CVE-2008-0785
Published: 2008-02-14
Description: Multiple SQL injection vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote authenticated users to execute arbitrary SQL commands via the (1) graph_list parameter to graph_view.php, (2) leaf_id and id parameters to tree.php, (3) local_graph_id parameter to graph_xport.php, and (4) login_username parameter to index.php/login.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html; http://secunia.com/advisories/28872; http://secunia.com/advisories/28976
CVE: CVE-2008-0786
Published: 2008-02-14
Description: CRLF injection vulnerability in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k, when running on older PHP interpreters, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-94
References: http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html; http://secunia.com/advisories/28872; http://secunia.com/advisories/28976
CVE: CVE-2008-0642
Published: 2008-02-15
Description: Cross-site scripting (XSS) vulnerability in files created by Adobe RoboHelp 6 and 7, possibly involving use of a (1) WebHelp5 (WebHelp5Ext) or (2) WildFire (WildFireExt) extension, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2007-1280.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://secunia.com/advisories/28945; http://securitytracker.com/id?1019397; http://www.adobe.com/support/security/bulletins/apsb08-05.html
CVE: CVE-2008-0787
Published: 2008-02-15
Description: SQL injection vulnerability in inc/datahandlers/pm.php in MyBB before 1.2.12 allows remote authenticated users to execute arbitrary SQL commands via the options[disablesmilies] parameter to private.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://community.mybboard.net/showthread.php?tid=27675; http://secunia.com/advisories/28572/; http://www.securityfocus.com/archive/1/486763/100/200/threaded
CVE: CVE-2008-0788
Published: 2008-02-15
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in MyBB 1.2.11 and earlier allow remote attackers to (1) hijack the authentication of moderators or administrators for requests that delete threads via a do_multideletethreads action to moderation.php and (2) hijack the authentication of arbitrary users for requests that delete private messages (PM) via a delete action to private.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://community.mybboard.net/showthread.php?tid=27675; http://secunia.com/advisories/28572/; http://securityreason.com/securityalert/3656
CVE: CVE-2008-0526
Published: 2008-02-15
Description: Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP firmware allows remote attackers to cause a denial of service (reboot) via a long ICMP echo request (ping) packet.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/28935; http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml; http://www.securityfocus.com/bid/27774
CVE: CVE-2008-0527
Published: 2008-02-15
Description: The HTTP server in Cisco Unified IP Phone 7935 and 7936 running SCCP firmware allows remote attackers to cause a denial of service (reboot) via a crafted HTTP request.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/28935; http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml; http://www.securityfocus.com/bid/27774
CVE: CVE-2008-0528
Published: 2008-02-15
Description: Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote attackers to execute arbitrary code via a SIP message with crafted MIME data.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/28935; http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml; http://www.securityfocus.com/bid/27774
CVE: CVE-2008-0529
Published: 2008-02-15
Description: Buffer overflow in the telnet server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G running SCCP firmware might allow remote authenticated users to execute arbitrary code via a crafted command.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/28935; http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml; http://www.securityfocus.com/bid/27774
CVE: CVE-2008-0530
Published: 2008-02-15
Description: Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP and SIP firmware might allow remote attackers to execute arbitrary code via a crafted DNS response.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/28935; http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml; http://www.securityfocus.com/bid/27774
CVE: CVE-2008-0531
Published: 2008-02-15
Description: Heap-based buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote SIP servers to execute arbitrary code via a crafted challenge/response message.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/28935; http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml; http://www.securityfocus.com/bid/27774
CVE: CVE-2008-0777
Published: 2008-02-15
Description: The sendfile system call in FreeBSD 5.5 through 7.0 does not check the access flags of the file descriptor used for sending a file, which allows local users to read the contents of write-only files.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/28928; http://security.freebsd.org/advisories/FreeBSD-SA-08:03.sendfile.asc; http://securitytracker.com/id?1019416
CVE: CVE-2008-0789
Published: 2008-02-15
Description: SQL injection vulnerability in countdown.php in LI-Scripts LI-Countdown allows remote attackers to execute arbitrary SQL commands via the years parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/3655; http://www.securityfocus.com/archive/1/488017/100/0/threaded; http://www.securityfocus.com/bid/27753
CVE: CVE-2008-0790
Published: 2008-02-15
Description: Directory traversal vulnerability in ipdsserver.exe in Intermate WinIPDS 3.3 G52-33-021 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://aluigi.altervista.org/adv/winipds-adv.txt; http://secunia.com/advisories/28934; http://securityreason.com/securityalert/3658
CVE: CVE-2008-0791
Published: 2008-02-15
Description: ipdsserver.exe in Intermate WinIPDS 3.3 G52-33-021 allows remote attackers to cause a denial of service (CPU consumption) via short packets on TCP port 5001 with the 3, 5, 7, 13, 14, or 15 packet types.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://aluigi.altervista.org/adv/winipds-adv.txt; http://secunia.com/advisories/28934; http://securityreason.com/securityalert/3658
CVE: CVE-2008-0792
Published: 2008-02-15
Description: Multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, F-Secure Protection Service, and others, allow remote attackers to bypass malware detection via a crafted CAB archive.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/28919; http://www.f-secure.com/security/fsc-2008-1.shtml; http://www.securitytracker.com/id?1019405
CVE: CVE-2008-0793
Published: 2008-02-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in search.asp in Tendenci CMS allow remote attackers to inject arbitrary web script or HTML via the (1) category, (2) searchtext, (3) jobcategoryid, (4) contactcompany, and unspecified other parameters.  NOTE: some of these details are obtained from third party information.  NOTE: it is not clear whether this affects Tendenci Enterprise Edition in addition to the product's deployment on Tendenci's own server farm. If only the latter was affected, then this issue should not be included in CVE.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://blog.tendenci.com/2008/02/cross-site-scri.html; http://holisticinfosec.blogspot.com/2008/02/fastest-fix-in-west-vendors-excellent.html; http://secunia.com/advisories/28882