CVE Vulnerabilities Archive - CVE Vulnerability https://cvevulnerability.com/cve_vulnerabilities/ Sun, 26 Feb 2023 09:11:58 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CVE Vulnerabilities Archive - CVE Vulnerability https://cvevulnerability.com/cve_vulnerabilities/ 32 32 CVE-2008-7321 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7321/ Sun, 26 Feb 2023 09:11:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7321/ The tubepress plugin before 1.6.5 for WordPress has XSS.

The post CVE-2008-7321 appeared first on CVE Vulnerability.

]]> The tubepress plugin before 1.6.5 for WordPress has XSS.

The post CVE-2008-7321 appeared first on CVE Vulnerability.

]]> CVE-2008-7320 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7320/ Sun, 26 Feb 2023 09:11:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7320/ ** DISPUTED ** GNOME Seahorse through 3.30 allows physically proximate attackers to read plaintext passwords by using the quickAllow dialog at an unattended workstation, if the keyring is unlocked. NOTE: this is disputed by a software maintainer because the behavior represents a design decision.

The post CVE-2008-7320 appeared first on CVE Vulnerability.

]]> ** DISPUTED ** GNOME Seahorse through 3.30 allows physically proximate attackers to read plaintext passwords by using the quickAllow dialog at an unattended workstation, if the keyring is unlocked. NOTE: this is disputed by a software maintainer because the behavior represents a design decision.

The post CVE-2008-7320 appeared first on CVE Vulnerability.

]]> CVE-2008-7319 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7319/ Sun, 26 Feb 2023 09:11:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7319/ The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments (e.g., invalid hostnames) containing shell metacharacters before use of backticks in External.pm, allowing for shell command injection and arbitrary command execution if untrusted input is used.

The post CVE-2008-7319 appeared first on CVE Vulnerability.

]]> The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments (e.g., invalid hostnames) containing shell metacharacters before use of backticks in External.pm, allowing for shell command injection and arbitrary command execution if untrusted input is used.

The post CVE-2008-7319 appeared first on CVE Vulnerability.

]]> CVE-2008-7316 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7316/ Sun, 26 Feb 2023 09:11:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7316/ mm/filemap.c in the Linux kernel before 2.6.25 allows local users to cause a denial of service (infinite loop) via a writev system call that triggers an iovec of zero length, followed by a page fault for an iovec of nonzero length.

The post CVE-2008-7316 appeared first on CVE Vulnerability.

]]> mm/filemap.c in the Linux kernel before 2.6.25 allows local users to cause a denial of service (infinite loop) via a writev system call that triggers an iovec of zero length, followed by a page fault for an iovec of nonzero length.

The post CVE-2008-7316 appeared first on CVE Vulnerability.

]]> CVE-2008-7315 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7315/ Sun, 26 Feb 2023 09:11:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7315/ UI-Dialog 1.09 and earlier allows remote attackers to execute arbitrary commands.

The post CVE-2008-7315 appeared first on CVE Vulnerability.

]]> UI-Dialog 1.09 and earlier allows remote attackers to execute arbitrary commands.

The post CVE-2008-7315 appeared first on CVE Vulnerability.

]]> CVE-2008-7314 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7314/ Sun, 26 Feb 2023 09:11:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7314/ mIRC before 6.35 allows attackers to cause a denial of service (crash) via a long nickname.

The post CVE-2008-7314 appeared first on CVE Vulnerability.

]]> mIRC before 6.35 allows attackers to cause a denial of service (crash) via a long nickname.

The post CVE-2008-7314 appeared first on CVE Vulnerability.

]]> CVE-2008-7313 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7313/ Sun, 26 Feb 2023 09:11:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7313/ The _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796.

The post CVE-2008-7313 appeared first on CVE Vulnerability.

]]> The _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796.

The post CVE-2008-7313 appeared first on CVE Vulnerability.

]]> CVE-2008-7312 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7312/ Sun, 26 Feb 2023 09:11:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7312/ The Filtering Service in Websense Enterprise 5.2 through 6.3 does not consider the IP address during URL categorization, which makes it easier for remote attackers to bypass filtering via an HTTP request, as demonstrated by a request to a compromised server associated with a specific IP address.

The post CVE-2008-7312 appeared first on CVE Vulnerability.

]]> The Filtering Service in Websense Enterprise 5.2 through 6.3 does not consider the IP address during URL categorization, which makes it easier for remote attackers to bypass filtering via an HTTP request, as demonstrated by a request to a compromised server associated with a specific IP address.

The post CVE-2008-7312 appeared first on CVE Vulnerability.

]]> CVE-2008-7311 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7311/ Sun, 26 Feb 2023 09:11:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7311/ The session cookie store implementation in Spree 0.2.0 uses a hardcoded config.action_controller_session hash value (aka secret key), which makes it easier for remote attackers to bypass cryptographic protection mechanisms by leveraging an application that contains this value within the config/environment.rb file.

The post CVE-2008-7311 appeared first on CVE Vulnerability.

]]> The session cookie store implementation in Spree 0.2.0 uses a hardcoded config.action_controller_session hash value (aka secret key), which makes it easier for remote attackers to bypass cryptographic protection mechanisms by leveraging an application that contains this value within the config/environment.rb file.

The post CVE-2008-7311 appeared first on CVE Vulnerability.

]]> CVE-2008-7310 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7310/ Sun, 26 Feb 2023 09:11:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7310/ Spree 0.2.0 does not properly restrict the use of a hash to provide values for a model’s attributes, which allows remote attackers to set the Order state value and bypass the intended payment step via a modified URL, related to a “mass assignment” vulnerability.

The post CVE-2008-7310 appeared first on CVE Vulnerability.

]]> Spree 0.2.0 does not properly restrict the use of a hash to provide values for a model’s attributes, which allows remote attackers to set the Order state value and bypass the intended payment step via a modified URL, related to a “mass assignment” vulnerability.

The post CVE-2008-7310 appeared first on CVE Vulnerability.

]]>