Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-1384 State: PUBLISHED Published: 2009-05-28T20:14:00 Last Updated: 2024-08-07T05:13:25.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: pam_krb5 2.2.14 through 2.3.4, as used in Red Hat Enterprise Linux (RHEL) 5, generates different password prompts depending on whether the user account exists, which allows remote attackers to enumerate valid usernames. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35230 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9652 - https://bugzilla.redhat.com/show_bug.cgi?id=502602 - http://secunia.com/advisories/43314 - http://www.openwall.com/
52 - https://bugzilla.redhat.com/show_bug.cgi?id=502602 - http://secunia.com/advisories/43314 - http://www.openwall.com/lists/oss-security/2009/05/27/1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7081 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:054 - http://osvdb.org/54791 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://www.securityfocus.com/archive/1/516397/100/0/threaded - http://www.vupen.com/english/advisories/2009/1448 - http://www.securityfocus.com/bid/35112
CVE ID: CVE-2009-1385 State: PUBLISHED Published: 2009-06-04T16:00:00 Last Updated: 2024-08-07T05:13:25.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the e1000_clean_rx_irq function in drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel before 2.6.30-rc8, the e1000e driver in the Linux kernel, and Intel Wired Ethernet (aka e1000) before 7.5.5 allows remote attackers to cause a denial of service (panic) via a crafted frame size. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35265 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:135 - http://www.debian.org/security/2009/dsa-1
ries/35265 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:135 - http://www.debian.org/security/2009/dsa-1865 - http://www.securityfocus.com/archive/1/512019/100/0/threaded - http://wiki.rpath.com/Advisories:rPSA-2009-0111 - http://sourceforge.net/project/shownotes.php?release_id=504022&group_id=42302 - http://secunia.com/advisories/36131 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01048.html - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01094.html - http://secunia.com/advisories/37471 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:148 - http://secunia.com/advisories/35656 - http://www.debian.org/security/2009/d
om/security/advisories?name=MDVSA-2009:148 - http://secunia.com/advisories/35656 - http://www.debian.org/security/2009/dsa-1844 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://www.redhat.com/support/errata/RHSA-2009-1193.html - http://www.intel.com/support/network/sb/CS-030543.htm - http://secunia.com/advisories/35566 - http://osvdb.org/54892 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11598 - http://www.redhat.com/support/errata/RHSA-2009-1157.html - http://www.securityfocus.com/bid/35185 - http://www.securityfocus.com/archive/1/505254/100/0/threaded - http://secunia.com/advisories/35623 - http://www.securityfocus.com/arc
curityfocus.com/archive/1/505254/100/0/threaded - http://secunia.com/advisories/35623 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://secunia.com/advisories/36051 - http://secunia.com/advisories/36327 - http://www.ubuntu.com/usn/usn-793-1 - https://bugzilla.redhat.com/show_bug.cgi?id=502981 - http://www.openwall.com/lists/oss-security/2009/06/03/2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11681 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc8 - https://rhn.redhat.com/errata/RHSA-2009-1550.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8340 - https://
-2009-1550.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8340 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01193.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ea30e11970a96cfe5e32c03a29332554573b4a10 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html - http://www.vupen.com/english/advisories/2009/3316 - http://secunia.com/advisories/35847
CVE ID: CVE-2009-1386 State: PUBLISHED Published: 2009-06-04T16:00:00 Last Updated: 2024-08-07T05:13:25.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38794 - http://lists.vmware.com/pipermail/security-announce/2010/000082.html - http://secunia.com/advisories/35729 - http://cvs.openssl.org/chngview?cn=17369 - http://www.openwall.com/lists/oss-security/2009/06/02/1 - http://www.redhat
- http://cvs.openssl.org/chngview?cn=17369 - http://www.openwall.com/lists/oss-security/2009/06/02/1 - http://www.redhat.com/support/errata/RHSA-2009-1335.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444 - http://secunia.com/advisories/36533 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11179 - http://www.ubuntu.com/usn/USN-792-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7469 - http://rt.openssl.org/Ticket/Display.html?id=1679&user=guest&pass=guest - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc - http://secunia.com/advisories/38834
t - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc - http://secunia.com/advisories/38834 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50963 - http://secunia.com/advisories/35685 - https://www.exploit-db.com/exploits/8873 - http://secunia.com/advisories/35571 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - http://www.securityfocus.com/bid/35174 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444 - http://www.vupen.com/english/advisories/2010/0528
CVE ID: CVE-2009-1387 State: PUBLISHED Published: 2009-06-04T16:00:00 Last Updated: 2024-08-07T05:13:25.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence DTLS handshake message, related to a "fragment bug." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38794 - http://lists.vmware.com/pipermail/security-announce/2010/000082.html - http://cvs.openssl.org/chngview?cn=17958 - http://secunia.com/advisories/35729 - http://sec
-announce/2010/000082.html - http://cvs.openssl.org/chngview?cn=17958 - http://secunia.com/advisories/35729 - http://security.gentoo.org/glsa/glsa-200912-01.xml - http://www.openwall.com/lists/oss-security/2009/06/02/1 - http://www.redhat.com/support/errata/RHSA-2009-1335.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444 - http://secunia.com/advisories/37003 - http://secunia.com/advisories/36533 - http://www.ubuntu.com/usn/USN-792-1 - http://rt.openssl.org/Ticket/Display.html?id=1838&user=guest&pass=guest - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7592 - http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.
epository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7592 - http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc - http://secunia.com/advisories/38834 - http://secunia.com/advisories/35685 - http://secunia.com/advisories/35571 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10740 - http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444 - http://www.vupen.com/engl
forge.net - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444 - http://www.vupen.com/english/advisories/2010/0528
CVE ID: CVE-2009-1388 State: PUBLISHED Published: 2009-07-05T16:00:00 Last Updated: 2024-08-07T05:13:25.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ptrace_start function in kernel/ptrace.c in the Linux kernel 2.6.18 does not properly handle simultaneous execution of the do_coredump function, which allows local users to cause a denial of service (deadlock) via vectors involving the ptrace system call and a coredumping thread. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36131 - http://secunia.com/advisories/37471 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8680 - http://www.v
ories/37471 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8680 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://www.redhat.com/support/errata/RHSA-2009-1193.html - http://www.securityfocus.com/archive/1/507985/100/0/threaded - https://bugzilla.redhat.com/attachment.cgi?id=346615 - https://bugzilla.redhat.com/show_bug.cgi?id=504263 - https://bugzilla.redhat.com/attachment.cgi?id=346742 - http://osvdb.org/55679 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8625 - http://www.securityfocus.com/bid/35559 - http://marc.info/?l=oss-security&m=124654277229434&w=2 - http://www.vupen.com/engli
://www.securityfocus.com/bid/35559 - http://marc.info/?l=oss-security&m=124654277229434&w=2 - http://www.vupen.com/english/advisories/2009/3316
CVE ID: CVE-2009-1389 State: PUBLISHED Published: 2009-06-16T23:00:00 Last Updated: 2024-08-07T05:13:25.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial of service (kernel memory corruption and crash) via a long packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35265 - http://www.debian.org/security/2009/dsa-1865 - http://wiki.rpath.com/Advisories:rPSA-2009-0111 - http://secunia.com/advisories/37298 - http://secunia.com/advisories/36131 - http://www.openwall.com/lists/oss-security/2009/0
//secunia.com/advisories/37298 - http://secunia.com/advisories/36131 - http://www.openwall.com/lists/oss-security/2009/06/10/1 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01048.html - http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01094.html - http://secunia.com/advisories/37471 - http://support.citrix.com/article/CTX123453 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51051 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:148 - http://marc.info/?l=linux-netdev&m=123462461713724&w=2 - http://www.debian.org/security/2009/dsa-1844 - http://www.ubun
http://marc.info/?l=linux-netdev&m=123462461713724&w=2 - http://www.debian.org/security/2009/dsa-1844 - http://www.ubuntu.com/usn/usn-807-1 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://www.redhat.com/support/errata/RHSA-2009-1193.html - http://secunia.com/advisories/35566 - http://www.securitytracker.com/id?1023507 - http://www.redhat.com/support/errata/RHSA-2009-1157.html - http://www.securityfocus.com/archive/1/505254/100/0/threaded - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://secunia.com/advisories/36051 - http://secunia.com/advisories/36327 - http://secunia.com/advisories/40645 - http://support.avaya.com/css/P8/documents/100067254 -
cunia.com/advisories/36327 - http://secunia.com/advisories/40645 - http://support.avaya.com/css/P8/documents/100067254 - http://secunia.com/advisories/36045 - http://www.vupen.com/english/advisories/2010/0219 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10415 - http://www.securityfocus.com/bid/35281 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8108 - https://bugzilla.redhat.com/show_bug.cgi?id=504726 - http://lkml.org/lkml/2009/6/8/194 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg01193.html - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html - http://www.
ounce/2009-June/msg01193.html - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html - http://www.vupen.com/english/advisories/2009/3316 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=fdd7b4c3302c93f6833e338903ea77245eb510b4 - http://secunia.com/advisories/35847 - http://www.vupen.com/english/advisories/2010/1857
CVE ID: CVE-2009-1390 State: PUBLISHED Published: 2009-06-16T20:26:00 Last Updated: 2024-08-07T05:13:25.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mutt 1.5.19, when linked against (1) OpenSSL (mutt_ssl.c) or (2) GnuTLS (mutt_ssl_gnutls.c), allows connections when only one TLS certificate in the chain is accepted instead of verifying the entire chain, which allows remote attackers to spoof trusted servers via a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35288 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00715.html - http://dev.mutt.org/hg/mutt/rev/64bf199c8d8a - http
edhat.com/archives/fedora-package-announce/2009-June/msg00715.html - http://dev.mutt.org/hg/mutt/rev/64bf199c8d8a - https://exchange.xforce.ibmcloud.com/vulnerabilities/51068 - http://dev.mutt.org/hg/mutt/rev/8f11dd00c770 - http://www.openwall.com/lists/oss-security/2009/06/10/2
CVE ID: CVE-2009-1391 State: PUBLISHED Published: 2009-06-16T23:00:00 Last Updated: 2024-08-07T05:13:25.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows context-dependent attackers to cause a denial of service (hang or crash) via a crafted zlib compressed stream that triggers a heap-based buffer overflow, as exploited in the wild by Trojan.Downloader-71014 in June 2009. Additional Analyst Notes: - CVE Program Container: References: - http://article.gmane.org/gmane.mail.virus.amavis.user/33635 - http://thread.g
es: - CVE Program Container: References: - http://article.gmane.org/gmane.mail.virus.amavis.user/33635 - http://thread.gmane.org/gmane.mail.virus.amavis.user/33635 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51062 - https://usn.ubuntu.com/794-1/ - http://www.mandriva.com/security/advisories?name=MDVSA-2009:157 - https://bugs.gentoo.org/show_bug.cgi?id=273141 - http://www.securityfocus.com/bid/35307 - http://security.gentoo.org/glsa/glsa-200908-07.xml - http://secunia.com/advisories/35685 - https://bugzilla.redhat.com/show_bug.cgi?id=504386 - http://secunia.com/advisories/35689 - http://www.vupen.com/english/advisories/2009/1571 - http://lists.opensuse.org/opensuse-security-announc
visories/35689 - http://www.vupen.com/english/advisories/2009/1571 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - http://osvdb.org/55041 - http://article.gmane.org/gmane.mail.virus.amavis.user/33638 - http://secunia.com/advisories/35422 - http://secunia.com/advisories/35876 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00607.html
CVE ID: CVE-2009-1392 State: PUBLISHED Published: 2009-06-12T21:07:00 Last Updated: 2024-08-07T05:13:25.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: The browser engine in Mozilla Firefox 3 before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsEventStateManager::GetContentState and nsNativeTheme::CheckBooleanAttr; (2) UnhookTextRunFromFrames and ClearAllTextRunReferences; (3) nsTextFrame::ClearTextRun; (4) IsPercentageAware; (5) PL_DHashTableFinish; (6) nsListBoxBodyFrame::GetNextItemBox; (7) AtomTab
Frame::ClearTextRun; (4) IsPercentageAware; (5) PL_DHashTableFinish; (6) nsListBoxBodyFrame::GetNextItemBox; (7) AtomTableClearEntry, related to the atom table, DOM mutation events, and Unicode surrogates; (8) nsHTMLEditor::HideResizers; and (9) nsWindow::SetCursor, related to changing the cursor; and other vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1 - http://www.vupen.com/english/advisories/2009/1572 - http://rhn.redhat.com/errata/RHSA-2009-1096.html - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=
arch/document.do?assetkey=1-77-1020800.1-1 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275 - http://www.debian.org/security/2009/dsa-1830 - http://secunia.com/advisories/35536 - http://secunia.com/advisories/35602 - https://bugzilla.mozilla.org/show_bug.cgi?id=490410 - https://bugzilla.mozilla.org/show_bug.cgi?id=451341 - http://www.redhat.com/support/errata/RHSA-2009-1125.html - http://www.securityfocus.com/bid/35326 - https://bugzilla.mozilla.org/show_bug.cgi?id=429969 - https://bugzilla.mozilla.org/show_bug.cgi?id=489041 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9501 - http://www.security
9041 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9501 - http://www.securityfocus.com/bid/35370 - http://osvdb.org/55145 - http://secunia.com/advisories/35440 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html - http://www.ubuntu.com/usn/usn-782-1 - http://osvdb.org/55147 - http://secunia.com/advisories/35428 - http://secunia.com/advisories/35431 - http://secunia.com/advisories/35331 - http://secunia.com/advisories/35468 - http://www.vupen.com/english/advisories/2009/2152 - http://secunia.com/advisories/35439 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html - http://www.mandriva.com/se
ies/35439 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:141 - http://osvdb.org/55144 - http://osvdb.org/55146 - http://secunia.com/advisories/35415 - https://bugzilla.mozilla.org/show_bug.cgi?id=432068 - https://bugzilla.mozilla.org/show_bug.cgi?id=490425 - https://rhn.redhat.com/errata/RHSA-2009-1095.html - https://bugzilla.mozilla.org/show_bug.cgi?id=380359 - https://bugzilla.mozilla.org/show_bug.cgi?id=490513 - https://bugzilla.redhat.com/show_bug.cgi?id=503568 - http://securitytracker.com/id?1022376 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.3
ritytracker.com/id?1022376 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468 - https://bugzilla.mozilla.org/show_bug.cgi?id=486398 - http://secunia.com/advisories/35561 - http://www.mozilla.org/security/announce/2009/mfsa2009-24.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408 - https://bugzilla.mozilla.org/show_bug.cgi?id=431086 - https://bugzilla.mozilla.org/show_bug.cgi?id=472776 - http://www.debian.org/security/2009/dsa-1820 - http://www.redhat.com/support/errata/RHSA-2009-1126.html - http://www.securitytracker.com/id?1022397
CVE ID: CVE-2009-1394 State: PUBLISHED Published: 2009-06-26T18:00:00 Last Updated: 2024-08-07T05:13:25.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Motorola Timbuktu Pro 8.6.5 on Windows allows remote attackers to execute arbitrary code by sending a long malformed string over the PlughNTCommand named pipe. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=809 - http://www.securitytracker.com/id?1022455 - http://www.netopia.com/software/products/tb2/ - http://secunia.com/advisories/35533 - http://www.securityfocus.com/bid/35496 - http://www.securityfocus.com/a
cts/tb2/ - http://secunia.com/advisories/35533 - http://www.securityfocus.com/bid/35496 - http://www.securityfocus.com/archive/1/504554/100/0/threaded
CVE ID: CVE-2009-1403 State: PUBLISHED Published: 2009-04-24T14:00:00 Last Updated: 2024-08-07T05:13:25.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in product_info.php in CRE Loaded 6.2 allows remote attackers to execute arbitrary SQL commands via the products_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34640 - https://www.exploit-db.com/exploits/8501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49987
CVE ID: CVE-2009-1404 State: PUBLISHED Published: 2009-04-24T14:00:00 Last Updated: 2024-08-07T05:13:25.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin.php in PastelCMS 0.8.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user (Username) parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34635 - https://www.exploit-db.com/exploits/8502 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49985 - http://secunia.com/advisories/34853
CVE ID: CVE-2009-1405 State: PUBLISHED Published: 2009-04-24T14:00:00 Last Updated: 2024-08-07T05:13:25.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in PastelCMS 0.8.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the set_lng parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34635 - https://www.exploit-db.com/exploits/8502 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49986 - http://secunia.com/advisories/34853
CVE ID: CVE-2009-1406 State: PUBLISHED Published: 2009-04-24T14:00:00 Last Updated: 2024-08-07T05:13:25.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in cms_detect.php in TotalCalendar 2.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the include parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8503 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49980 - http://secunia.com/advisories/34824 - http://www.securityfocus.com/bid/34634
CVE ID: CVE-2009-1407 State: PUBLISHED Published: 2009-04-24T14:00:00 Last Updated: 2024-08-07T05:13:25.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in config.php in NotFTP 1.3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in a certain languages[][file] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8504 - http://www.securityfocus.com/bid/34636 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49988