CVE

Id
37337  
CVE No.
CVE-2008-7220  
Status
Candidate  
Description
Unspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2 allows attackers to make "cross-site ajax requests" via unknown vectors.  
Phase
Assigned (20090913)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
404935 37337 CVE-2008-7220 MLIST:[oss-security] 20091107 Re: CVE Request - Asterisk (AST-2009-008.html)  View
404936 37337 CVE-2008-7220 URL:http://www.openwall.com/lists/oss-security/2009/11/07/2  View
404937 37337 CVE-2008-7220 CONFIRM:http://github.com/sstephenson/prototype/blob/master/CHANGELOG  View
404938 37337 CVE-2008-7220 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=523277  View
404939 37337 CVE-2008-7220 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=533137  View
404940 37337 CVE-2008-7220 DEBIAN:DSA-1952  View
404941 37337 CVE-2008-7220 URL:http://www.debian.org/security/2009/dsa-1952  View
404942 37337 CVE-2008-7220 FEDORA:FEDORA-2009-11070  View
404943 37337 CVE-2008-7220 URL:https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00789.html  View
404944 37337 CVE-2008-7220 FEDORA:FEDORA-2009-11126  View
404945 37337 CVE-2008-7220 URL:https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00838.html  View
404946 37337 CVE-2008-7220 OSVDB:46312  View
404947 37337 CVE-2008-7220 URL:http://osvdb.org/46312  View
404948 37337 CVE-2008-7220 SECUNIA:37479  View
404949 37337 CVE-2008-7220 URL:http://secunia.com/advisories/37479  View
404950 37337 CVE-2008-7220 SECUNIA:37677  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41194 JVNDB-2009-002201 Elinks の entity_cache におけるバッファオーバーフローの脆弱性 Elinks の entity_cache には、リンクの処理に不備があるため、バッファオーバーフローの脆弱性が存在します。 CVE-2008-7224 37337 7.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002201.html  View