Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
y, (8) ord, and (9) m parameters to sobre.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8615 - http://osvdb.org/54247 - http://www.securityfocus.com/bid/34830 - http://secunia.com/advisories/34990 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50343 - http://www.securityfocus.com/archive/1/503252/100/0/threaded - http://secunia.com/advisories/34983
CVE ID: CVE-2009-1584 State: PUBLISHED Published: 2009-05-07T23:00:00 Last Updated: 2024-08-07T05:20:34.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in TemaTres 1.0.3 and 1.031, when magic_quotes_gpc is disabled, allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the (1) mail, (2) password, and (3) letra parameters to index.php; (4) y and (5) m parameters to sobre.php; and the (6) dcTema, (7) madsTema, (8) zthesTema, (9) skosTema, and (10) xtmTema parameters to xml.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/503256 - https://www.ex
nal Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/503256 - https://www.exploit-db.com/exploits/8615 - http://osvdb.org/54246 - http://www.securityfocus.com/bid/34830 - http://osvdb.org/54245 - https://www.exploit-db.com/exploits/8616 - http://www.securityfocus.com/archive/1/503252/100/0/threaded - http://secunia.com/advisories/34983
CVE ID: CVE-2009-1585 State: PUBLISHED Published: 2009-05-07T23:00:00 Last Updated: 2024-08-07T05:20:34.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in TemaTres 1.031, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) id_correo_electronico and (2) id_password parameters to login.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54244 - http://secunia.com/advisories/34983
CVE ID: CVE-2009-1586 State: PUBLISHED Published: 2009-05-07T23:00:00 Last Updated: 2024-08-07T05:20:34.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the NZB importer feature in GrabIt 1.7.2 Beta 3 and earlier allows remote attackers to execute arbitrary code via a crafted DTD reference in a DOCTYPE element in an NZB file. Additional Analyst Notes: - CVE Program Container: References: - http://www.shemes.com/index.php?p=whatsnew - https://exchange.xforce.ibmcloud.com/vulnerabilities/50310 - http://blog.teusink.net/2009/05/grabit-172-beta-3-nzb-file-parsing.html - http://www.securityfocus.com/archive/1/503184/100/0/threaded - http://www.securit
bit-172-beta-3-nzb-file-parsing.html - http://www.securityfocus.com/archive/1/503184/100/0/threaded - http://www.securitytracker.com/id?1022161 - https://www.exploit-db.com/exploits/8612 - http://www.securityfocus.com/bid/34807 - http://secunia.com/advisories/34893 - http://osvdb.org/54205 - http://www.vupen.com/english/advisories/2009/1243
CVE ID: CVE-2009-1587 State: PUBLISHED Published: 2009-05-07T23:00:00 Last Updated: 2024-08-07T05:20:34.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in PHP Site Lock 2.0 allows remote attackers to bypass authentication and obtain administrative access by setting the login_id, group_id, login_name, user_id, and user_type cookies to certain values. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34995 - https://www.exploit-db.com/exploits/8604 - http://osvdb.org/54203 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50304 - http://www.vupen.com/english/advisories/2009/1249
CVE ID: CVE-2009-1588 State: PUBLISHED Published: 2009-05-08T18:00:00 Last Updated: 2024-08-07T05:20:34.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CGI RESCUE MiniBBS 8t before 8.95t, 8 before 8.95, 9 before 9.08, and 10 before 10.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN11396739/index.html - http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000022.html - http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20081213132937 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50219 - http://secun
p/whatsnew/blog.cgi/permalink/20081213132937 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50219 - http://secunia.com/advisories/34887 - http://www.securityfocus.com/bid/34718
CVE ID: CVE-2009-1589 State: PUBLISHED Published: 2009-05-08T18:00:00Z Last Updated: 2024-09-17T01:50:49.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in CGI RESCUE MiniBBS22 before 1.01 allows remote attackers to send email to arbitrary recipients via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20081213132937 - http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000021.html - http://jvn.jp/en/jp/JVN36982346/index.html
CVE ID: CVE-2009-1590 State: PUBLISHED Published: 2009-05-08T18:00:00Z Last Updated: 2024-09-16T19:04:09.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in CGI RESCUE FORM2MAIL before 1.42 allows remote attackers to send email to arbitrary recipients via a web form. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000023.html - http://osvdb.org/54097 - http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20081213132937 - http://jvn.jp/en/jp/JVN76370393/index.html - http://secunia.com/advisories/34869
CVE ID: CVE-2009-1591 State: PUBLISHED Published: 2009-05-08T18:00:00 Last Updated: 2024-08-07T05:20:34.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in CGI RESCUE Web Mailer before 1.04 allows remote attackers to inject arbitrary HTTP headers, and conduct cross-site scripting (XSS) or HTTP response splitting attacks, via CRLF sequences in an unspecified web form. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN28020230/index.html - http://secunia.com/advisories/34862 - http://www.securityfocus.com/bid/35047 - http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20090209180123 - http://jvndb.jvn.jp/en/conte
yfocus.com/bid/35047 - http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20090209180123 - http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000024.html
CVE ID: CVE-2009-1592 State: PUBLISHED Published: 2009-05-08T18:00:00 Last Updated: 2024-08-07T05:20:35.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long banner. NOTE: this might overlap CVE-2003-1368. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34822 - http://secunia.com/advisories/34993 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50337 - http://www.vupen.com/english/advisories/2009/1263 - https://www.exploit-db.com/exploits/8611 - https://www.exploit-db.com/exploits/8614 - http://osvdb.org
ories/2009/1263 - https://www.exploit-db.com/exploits/8611 - https://www.exploit-db.com/exploits/8614 - http://osvdb.org/54219
CVE ID: CVE-2009-1593 State: PUBLISHED Published: 2009-05-21T14:00:00 Last Updated: 2024-08-07T05:20:33.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the "negative model," which allows remote attackers to conduct cross-site scripting (XSS) attacks via a modified end tag of a SCRIPT element. Additional Analyst Notes: - CVE Program Container: References: - http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt - http://www.securityfocus.com/bid/35053 - http://www.securityfocus.com/archive/1/503649/100/0/threaded - http://www.webappsec.org/lists/webs
focus.com/bid/35053 - http://www.securityfocus.com/archive/1/503649/100/0/threaded - http://www.webappsec.org/lists/websecurity/archive/2009-05/msg00040.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/50663
CVE ID: CVE-2009-1594 State: PUBLISHED Published: 2009-05-21T14:00:00 Last Updated: 2024-08-07T05:20:34.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the "positive model," which allows remote attackers to bypass certain protection mechanisms via a %0A (encoded newline), as demonstrated by a %0A in a cross-site scripting (XSS) attack URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50662 - http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt - http://www.securityfocus.com/b
ilities/50662 - http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt - http://www.securityfocus.com/bid/35053 - http://www.securityfocus.com/archive/1/503649/100/0/threaded - http://www.webappsec.org/lists/websecurity/archive/2009-05/msg00040.html
CVE ID: CVE-2009-1595 State: PUBLISHED Published: 2009-05-11T14:02:00 Last Updated: 2024-08-07T05:20:34.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jabber:iq:auth implementation in IQAuthHandler.java in Ignite Realtime Openfire before 3.6.4 allows remote authenticated users to change the passwords of arbitrary accounts via a modified username element in a passwd_change action. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1237 - http://www.igniterealtime.org/builds/openfire/docs/latest/changelog.html - http://osvdb.org/54189 - http://www.igniterealtime.org/community/message/190280 - http://www.igniterealt
hangelog.html - http://osvdb.org/54189 - http://www.igniterealtime.org/community/message/190280 - http://www.igniterealtime.org/issues/browse/JM-1531 - http://www.securityfocus.com/bid/34804 - http://secunia.com/advisories/34976 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50292
CVE ID: CVE-2009-1596 State: PUBLISHED Published: 2009-05-11T14:02:00 Last Updated: 2024-08-07T05:20:34.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ignite Realtime Openfire before 3.6.5 does not properly implement the register.password (aka canChangePassword) console configuration setting, which allows remote authenticated users to bypass intended policy and change their own passwords via a passwd_change IQ packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.igniterealtime.org/community/message/190280 - http://www.igniterealtime.org/issues/browse/JM-1532 - http://secunia.com/advisories/34984 - https://exchange.xforce.ibmcloud.com/vulnerabil
altime.org/issues/browse/JM-1532 - http://secunia.com/advisories/34984 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50291 - http://www.securityfocus.com/bid/34804 - http://www.osvdb.org/54189
CVE ID: CVE-2009-1597 State: PUBLISHED Published: 2009-05-11T15:19:00 Last Updated: 2024-08-07T05:20:34.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as demonstrated by a web site that permits PDF uploads by untrusted users, and therefore has a shared document.domain between the web site and this javascript: URI. NOTE: the researcher reports that Adobe's position is "a PDF file is active conten
he web site and this javascript: URI. NOTE: the researcher reports that Adobe's position is "a PDF file is active content." Additional Analyst Notes: - CVE Program Container: References: - http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf - http://www.securityfocus.com/archive/1/503183/100/0/threaded
CVE ID: CVE-2009-1598 State: PUBLISHED Published: 2009-05-11T15:19:00 Last Updated: 2024-08-07T05:20:35.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as demonstrated by a web site that permits PDF uploads by untrusted users, and therefore has a shared document.domain between the web site and this javascript: URI. NOTE: the researcher reports that Adobe's position is "a PDF file is active content.
web site and this javascript: URI. NOTE: the researcher reports that Adobe's position is "a PDF file is active content." Additional Analyst Notes: - CVE Program Container: References: - http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf - http://www.securityfocus.com/archive/1/503183/100/0/threaded
CVE ID: CVE-2009-1599 State: PUBLISHED Published: 2009-05-11T15:19:00 Last Updated: 2024-08-07T05:20:34.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as demonstrated by a web site that permits PDF uploads by untrusted users, and therefore has a shared document.domain between the web site and this javascript: URI. NOTE: the researcher reports that Adobe's position is "a PDF file is active content." Additi
e and this javascript: URI. NOTE: the researcher reports that Adobe's position is "a PDF file is active content." Additional Analyst Notes: - CVE Program Container: References: - http://secniche.org/papers/SNS_09_03_PDF_Silent_Form_Re_Purp_Attack.pdf - http://www.securityfocus.com/archive/1/503183/100/0/threaded
CVE ID: CVE-2009-1600 State: PUBLISHED Published: 2009-05-11T15:19:00 Last Updated: 2024-08-07T05:20:34.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as demonstrated by a web site that permits PDF uploads by untrusted users, and therefore has a shared document.domain between the web site and this javascript: URI. NOTE: the researcher reports that Adobe's position is "a PDF file is active content."
CVE ID: CVE-2009-1601 State: PUBLISHED Published: 2009-05-11T15:19:00 Last Updated: 2024-08-07T05:20:35.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ubuntu clamav-milter.init script in clamav-milter before 0.95.1+dfsg-1ubuntu1.2 in Ubuntu 9.04 sets the ownership of the current working directory to the clamav account, which might allow local users to bypass intended access restrictions via read or write operations involving this directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-770-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50311 - https://launchpad.net/bugs/365823 - http://secunia.com/advisories/3500
hange.xforce.ibmcloud.com/vulnerabilities/50311 - https://launchpad.net/bugs/365823 - http://secunia.com/advisories/35000 - http://www.securityfocus.com/bid/34818
CVE ID: CVE-2009-1602 State: PUBLISHED Published: 2009-05-11T15:19:00 Last Updated: 2024-08-07T05:20:34.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pablo Software Solutions Quick 'n Easy Mail Server 3.3 allows remote attackers to cause a denial of service (daemon outage or CPU consumption) via multiple long SMTP commands, as demonstrated by HELO commands. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54215 - https://www.exploit-db.com/exploits/8606 - http://www.securityfocus.com/bid/34814 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50299 - http://secunia.com/advisories/34992
CVE ID: CVE-2009-1603 State: PUBLISHED Published: 2009-05-11T16:00:00 Last Updated: 2024-08-07T05:20:34.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS#11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1295 - http://secunia.com/advisories/35293 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01420.html - http://www.openwall.com/lists/oss
293 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01420.html - http://www.openwall.com/lists/oss-security/2009/05/08/1 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00097.html - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00095.html - http://secunia.com/advisories/36074 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:123 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01432.html - http://secunia.com/advisories/35035 - http://www.opensc-project.org/pipermail/opensc-announce/2009-May/000025.html - http://security.gentoo.org/glsa/glsa-200908-01.xml - http://secunia.com/advisories/35309
CVE ID: CVE-2009-1604 State: PUBLISHED Published: 2009-05-11T19:28:00 Last Updated: 2024-08-07T05:20:34.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in LimeSurvey before 1.82 allows remote attackers to execute commands and obtain sensitive data via unknown attack vectors related to /admin/remotecontrol/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34785 - http://www.vupen.com/english/advisories/2009/1219 - http://www.limesurvey.org/content/view/169/1/lang%2Cen/ - http://secunia.com/advisories/34946
CVE ID: CVE-2009-1605 State: PUBLISHED Published: 2009-05-11T19:28:00Z Last Updated: 2024-09-16T20:38:04.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the loadexponentialfunc function in mupdf/pdf_function.c in MuPDF in the mupdf-20090223-win32 package, as used in SumatraPDF 0.9.3 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://secunia.com/advisories/34916 - http://www.vupen.com/english/advisories/2009/1185 - http://www.vupen.com/english/adv
tp://secunia.com/advisories/34916 - http://www.vupen.com/english/advisories/2009/1185 - http://www.vupen.com/english/advisories/2009/1186 - http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0258.html - https://bugs.ghostscript.com/show_bug.cgi?id=690555 - https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=451373e028f82fa2f1cc2a6a669df31d85c877bd
CVE ID: CVE-2009-1606 State: PUBLISHED Published: 2009-05-11T19:28:00 Last Updated: 2024-08-07T05:20:34.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based and heap-based buffer overflows in Dafolo DafoloControl ActiveX control (DafoloFFControl.dll) 1.108.6.195 allow remote attackers to execute arbitrary code via long (1) baseurl, (2) kommune, (3) felter, (4) afdeling, (5) Flags, (6) HelpURL, (7) caburl, or (8) filename properties; or (9) a long argument to the Open method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://s
obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35017 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50422 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50421 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50420 - http://www.securityfocus.com/bid/34900 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50423
CVE ID: CVE-2009-1607 State: PUBLISHED Published: 2009-05-11T19:28:00 Last Updated: 2024-08-07T05:20:34.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the administrator panel in phpForm.net LinkBase 2.0 allows remote attackers to inject arbitrary web script or HTML via the username in a registration, which is not properly handled when the administrator accesses the Users menu. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50338 - http://www.securityfocus.com/bid/34844 - https://www.exploit-db.com/exploits/8618
CVE ID: CVE-2009-1608 State: PUBLISHED Published: 2009-05-11T19:28:00 Last Updated: 2024-08-07T05:20:34.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Microchip MPLAB IDE 8.30 and possibly earlier versions allow user-assisted remote attackers to execute arbitrary code via a .MCP project file with long (1) FILE_INFO, (2) CAT_FILTERS, and possibly other fields. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54370 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50419 - http://secunia.com/advisories/35054 - http://security.bkis.vn/?p=654 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50418 - http://ww
visories/35054 - http://security.bkis.vn/?p=654 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50418 - http://www.securityfocus.com/bid/34897 - http://www.securityfocus.com/archive/1/503400/100/0/threaded
CVE ID: CVE-2009-1609 State: PUBLISHED Published: 2009-05-11T19:28:00 Last Updated: 2024-08-07T05:20:34.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in admin/uploadform.asp in Battle Blog 1.25 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50400 - http://secunia.com/advisories/35023 - http://www.securityfocus.com/bid/34887 - http://www.vupen.com/english/advisories/2009/1280 - https://www.exploit-db.com/exploits/8647
CVE ID: CVE-2009-1610 State: PUBLISHED Published: 2009-05-11T19:28:00 Last Updated: 2024-08-07T05:20:34.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/changepassword.php in Job Script Job Board Software 2.0 allows remote attackers to change the administrator password and gain administrator privileges via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35029 - https://www.exploit-db.com/exploits/8639 - http://www.securityfocus.com/bid/34874 - http://osvdb.org/54281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50380
CVE ID: CVE-2009-1611 State: PUBLISHED Published: 2009-05-11T19:28:00 Last Updated: 2024-08-07T05:20:34.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 257 reply to a CWD command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34838 - http://www.securityfocus.com/bid/34822 - https://www.exploit-db.com/exploits/8621 - http://www.vupen.com/english/advisories/2009/1263 - https://www.exploit-db.com/exploits/8613