Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-0846 State: PUBLISHED Published: 2009-04-09T00:00:00 Last Updated: 2024-08-07T04:48:52.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors involving an invalid DER encoding that triggers a free of an uninitialized pointer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/504683/100/0/threaded - http://support.novell.com/docs/Readmes/InfoDocument/patch
http://www.securityfocus.com/archive/1/504683/100/0/threaded - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047181.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6301 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:098 - http://www.kb.cert.org/vuls/id/662091 - http://www.securityfocus.com/archive/1/502527/100/0/threaded - http://www.vupen.com/english/advisories/2009/0960 - http://support.apple.com/kb/HT3549 - http://support.avaya.com/elmodocs2/security/ASA-2009-142.htm - http://secunia.com/advisories/35667 - http://www.redhat.com/support/errata/RHSA-2009-0408.html - http://www.vmware.com/security/advisor
com/advisories/35667 - http://www.redhat.com/support/errata/RHSA-2009-0408.html - http://www.vmware.com/security/advisories/VMSA-2009-0008.html - http://secunia.com/advisories/34637 - http://marc.info/?l=bugtraq&m=130497213107107&w=2 - http://www.vupen.com/english/advisories/2009/2084 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10694 - http://secunia.com/advisories/34640 - http://secunia.com/advisories/35074 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-256728-1 - http://security.gentoo.org/glsa/glsa-200904-09.xml - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047180.html - http://www.vupen.com/english/advi
http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047180.html - http://www.vupen.com/english/advisories/2009/0976 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.ubuntu.com/usn/usn-755-1 - http://secunia.com/advisories/34630 - http://www-01.ibm.com/support/docview.wss?uid=swg21396120 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5483 - http://www.vupen.com/english/advisories/2009/1057 - http://secunia.com/advisories/34617 - http://secunia.com/advisories/34628 - http://secunia.com/advisories/34734 - http://www.vupen.com/english/advisories/2009/2248 - http://www.us-cert.gov/cas/techalerts/
ecunia.com/advisories/34734 - http://www.vupen.com/english/advisories/2009/2248 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0058 - http://secunia.com/advisories/34598 - http://rhn.redhat.com/errata/RHSA-2009-0409.html - http://www.vupen.com/english/advisories/2009/1297 - http://secunia.com/advisories/34622 - http://www.securitytracker.com/id?1021994 - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00206.html - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00205.html - http://rhn.redhat.com/errata/RHSA-2009-0410.html - http://lists.vmware.com/pipermail/security-announce/2009/000059.html
http://rhn.redhat.com/errata/RHSA-2009-0410.html - http://lists.vmware.com/pipermail/security-announce/2009/000059.html - http://wiki.rpath.com/Advisories:rPSA-2009-0058 - http://www.securityfocus.com/archive/1/502546/100/0/threaded - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-002.txt - http://marc.info/?l=bugtraq&m=130497213107107&w=2 - http://secunia.com/advisories/34594 - http://www.vupen.com/english/advisories/2009/1106 - http://marc.info/?l=bugtraq&m=124896429301168&w=2 - http://www.securityfocus.com/bid/34409 - http://marc.info/?l=bugtraq&m=124896429301168&w=2
CVE ID: CVE-2009-0847 State: PUBLISHED Published: 2009-04-09T00:00:00 Last Updated: 2024-08-07T04:48:52.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: The asn1buf_imbed function in the ASN.1 decoder in MIT Kerberos 5 (aka krb5) 1.6.3, when PK-INIT is used, allows remote attackers to cause a denial of service (application crash) via a crafted length value that triggers an erroneous malloc call, related to incorrect calculations with pointer arithmetic. Additional Analyst Notes: - CVE Program Container: References: - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047181.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:098 - http://ww
oDocument/patchbuilder/readme_5047181.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:098 - http://www.securityfocus.com/archive/1/502526/100/0/threaded - http://www.kb.cert.org/vuls/id/662091 - http://www.vupen.com/english/advisories/2009/0960 - http://support.apple.com/kb/HT3549 - http://support.avaya.com/elmodocs2/security/ASA-2009-142.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6387 - http://secunia.com/advisories/34637 - http://www.vupen.com/english/advisories/2009/2084 - http://www.securityfocus.com/bid/34408 - http://secunia.com/advisories/34640 - http://secunia.com/advisories/35074 - http://www.securitytracker.com/id
id/34408 - http://secunia.com/advisories/34640 - http://secunia.com/advisories/35074 - http://www.securitytracker.com/id?1021993 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-256728-1 - http://security.gentoo.org/glsa/glsa-200904-09.xml - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047180.html - http://www.vupen.com/english/advisories/2009/0976 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.ubuntu.com/usn/usn-755-1 - http://www-01.ibm.com/support/docview.wss?uid=swg21396120 - http://www.vupen.com/english/advisories/2009/1057 - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-001.txt - http://secunia.com/
.com/english/advisories/2009/1057 - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-001.txt - http://secunia.com/advisories/34617 - http://secunia.com/advisories/34628 - http://secunia.com/advisories/34734 - http://www.vupen.com/english/advisories/2009/2248 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0058 - http://www.vupen.com/english/advisories/2009/1297 - http://secunia.com/advisories/34622 - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00206.html - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00205.html - http://wiki.rpath.com/Advisories:rPSA-2009-0058 - http://www.securi
s/fedora-package-announce/2009-April/msg00205.html - http://wiki.rpath.com/Advisories:rPSA-2009-0058 - http://www.securityfocus.com/archive/1/502546/100/0/threaded - http://secunia.com/advisories/34594 - http://www.vupen.com/english/advisories/2009/1106 - http://marc.info/?l=bugtraq&m=124896429301168&w=2 - http://marc.info/?l=bugtraq&m=124896429301168&w=2
CVE ID: CVE-2009-0848 State: PUBLISHED Published: 2009-03-11T14:00:00 Last Updated: 2024-08-07T04:48:52.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in GTK2 in OpenSUSE 11.0 and 11.1 allows local users to execute arbitrary code via a Trojan horse GTK module in an unspecified "relative search path." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34259 - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/49228
CVE ID: CVE-2009-0849 State: PUBLISHED Published: 2009-03-09T17:00:00 Last Updated: 2024-08-07T04:48:52.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the DtbClsLogin function in NovaStor NovaNET 12 allows remote attackers to (1) execute arbitrary code on Linux platforms via a long username field during backup domain authentication, related to libnnlindtb.so; or (2) cause a denial of service (daemon crash) on Windows platforms via a long username field during backup domain authentication, related to nnwindtb.dll. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References:
these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49074 - http://www.securityfocus.com/bid/33954 - http://secunia.com/advisories/34024 - http://osvdb.org/52301 - http://osvdb.org/52302 - http://www.insight-tech.org/index.php?p=NovaNET-12-Remote-Buffer-Oveflow
CVE ID: CVE-2009-0850 State: PUBLISHED Published: 2009-03-09T17:00:00 Last Updated: 2024-08-07T04:48:52.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in BitDefender Internet Security 2009 allows user-assisted remote attackers to inject arbitrary web script or HTML via the filename of a virus-infected file, as demonstrated by a filename inside a (1) rar or (2) zip archive file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33921 - http://www.securityfocus.com/archive/1/501299/100/0/threaded - http://secunia.com/advisories/34082 - http://www.securityfocus.com/archive/1/501277/100/0/th
e/1/501299/100/0/threaded - http://secunia.com/advisories/34082 - http://www.securityfocus.com/archive/1/501277/100/0/threaded - http://www.vupen.com/english/advisories/2009/0557
CVE ID: CVE-2009-0851 State: PUBLISHED Published: 2009-03-09T17:00:00 Last Updated: 2024-08-07T04:48:52.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) viewforum.php and (2) viewtopic.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34014 - https://www.exploit-db.com/exploits/8161 - http://www.securityfocus.com/archive/1/501481/100/0/threaded
CVE ID: CVE-2009-0852 State: PUBLISHED Published: 2009-03-09T17:00:00 Last Updated: 2024-08-07T04:48:52.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: showme.php in CelerBB 0.0.2 allows remote attackers to obtain "reserved information" via the user parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34014 - https://www.exploit-db.com/exploits/8161 - http://www.securityfocus.com/archive/1/501481/100/0/threaded
CVE ID: CVE-2009-0853 State: PUBLISHED Published: 2009-03-09T17:00:00 Last Updated: 2024-08-07T04:48:52.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: login.php in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allows remote attackers to bypass authentication and obtain administrative access via special characters in the Username parameter, as demonstrated by an admin'# parameter value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34014 - https://www.exploit-db.com/exploits/8161 - http://www.securityfocus.com/archive/1/501481/100/0/threaded
CVE ID: CVE-2009-0854 State: PUBLISHED Published: 2009-03-11T14:00:00 Last Updated: 2024-08-07T04:48:52.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in dash 0.5.4, when used as a login shell, allows local users to execute arbitrary code via a Trojan horse .profile file in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34092 - http://www.ubuntu.com/usn/USN-732-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49216 - http://secunia.com/advisories/34205
CVE ID: CVE-2009-0855 State: PUBLISHED Published: 2009-03-09T00:00:00 Last Updated: 2024-08-07T04:48:52.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.23 on z/OS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0854 - http://www.securityfocus.com/bid/34259 - http://www.vupen.com/english/advisories/2009/0607 - http://secunia.com/advisories/34131 - http://secunia.com/advisories/34461 - http://www-01.ibm
ish/advisories/2009/0607 - http://secunia.com/advisories/34131 - http://secunia.com/advisories/34461 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK81212 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK77505 - http://www.securityfocus.com/bid/34001 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK82988 - http://packetstormsecurity.com/files/170073/IBM-Websphere-Application-Server-7.0-Cross-Site-Scripting.html
CVE ID: CVE-2009-0856 State: PUBLISHED Published: 2009-03-09T21:00:00 Last Updated: 2024-08-07T04:48:52.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in sample applications in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, and 6.1 before 6.1.0.23 on z/OS, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0607 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK81212 - http://www-01.ibm.com/support/docview.wss?uid=swg27006876 - http://securitytracker.com/id?10218
ew.wss?uid=swg1PK81212 - http://www-01.ibm.com/support/docview.wss?uid=swg27006876 - http://securitytracker.com/id?1021811 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK76720 - http://www.securityfocus.com/bid/34001 - http://www.vupen.com/english/advisories/2009/1464
CVE ID: CVE-2009-0857 State: PUBLISHED Published: 2009-03-09T21:00:00 Last Updated: 2024-08-07T04:48:52.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in /prm/reports in the Performance Reporting Module (PRM) for Sun Management Center (SunMC) 3.6.1 and 4.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: this can be leveraged for access to the SunMC Web Console. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33999 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49076 - http://www.vupen.com/english/advisories/2009/0605 - http://secunia.
exchange.xforce.ibmcloud.com/vulnerabilities/49076 - http://www.vupen.com/english/advisories/2009/0605 - http://secunia.com/advisories/34146 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-125191-04-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-247046-1 - http://securitytracker.com/id?1021809
CVE ID: CVE-2009-0858 State: PUBLISHED Published: 2009-03-09T21:00:00 Last Updated: 2024-08-07T04:48:52.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: The response_addname function in response.c in Daniel J. Bernstein djbdns 1.05 and earlier does not constrain offsets in the required manner, which allows remote attackers, with control over a third-party subdomain served by tinydns and axfrdns, to trigger DNS responses containing arbitrary records via crafted zone data for this subdomain. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35820 - http://www.securityfocus.com/archive/1/501340/100/0/threaded - https://exchange.xforce.
//secunia.com/advisories/35820 - http://www.securityfocus.com/archive/1/501340/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/49003 - http://www.securityfocus.com/archive/1/501479/100/0/threaded - http://securityandthe.net/2009/03/05/security-issue-in-djbdns-confirmed/ - http://www.debian.org/security/2009/dsa-1831 - http://marc.info/?l=djbdns&m=123613000920446&w=2 - http://www.securityfocus.com/bid/33937 - http://www.securityfocus.com/archive/1/501294/100/0/threaded - http://marc.info/?l=djbdns&m=123554945710038 - http://it.slashdot.org/article.pl?sid=09/03/05/2014249
CVE ID: CVE-2009-0859 State: PUBLISHED Published: 2009-03-09T21:00:00 Last Updated: 2024-08-07T04:48:52.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: The shm_get_stat function in ipc/shm.c in the shm subsystem in the Linux kernel before 2.6.28.5, when CONFIG_SHMEM is disabled, misinterprets the data type of an inode, which allows local users to cause a denial of service (system hang) via an SHM_INFO shmctl call, as demonstrated by running the ipcs program. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35390 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html - https://exchange.xforce.ibmcloud.com/vuln
- http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/49229 - http://marc.info/?l=linux-kernel&m=123309645625549&w=2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a68e61e8ff2d46327a37b69056998b47745db6fa - http://www.debian.org/security/2009/dsa-1794 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.5 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html - http://www.ubuntu.com/usn/usn-751-1 - http://secunia.com/advisories/35185 - http://marc.info/?l=git-commits-head&m=123387479500599&w=2 - http://secunia.com/advisories/35011 - http://marc.info/?l=
http://marc.info/?l=git-commits-head&m=123387479500599&w=2 - http://secunia.com/advisories/35011 - http://marc.info/?l=linux-kernel&m=120428209704324&w=2 - http://patchwork.kernel.org/patch/6554/ - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html - http://www.securityfocus.com/bid/34020 - http://secunia.com/advisories/34981 - http://www.debian.org/security/2009/dsa-1800 - http://www.debian.org/security/2009/dsa-1787 - http://secunia.com/advisories/35121 - http://openwall.com/lists/oss-security/2009/03/06/1 - http://secunia.com/advisories/35394
CVE ID: CVE-2009-0860 State: PUBLISHED Published: 2009-03-10T14:00:00 Last Updated: 2024-08-07T04:48:52.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web user interface in the login application in NetMRI 3.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to error pages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33824 - http://secunia.com/advisories/33963 - http://www.securityfocus.com/archive/1/501033/100/0/threaded - http://connection.netcordia.com/forums/t/731.aspx
CVE ID: CVE-2009-0861 State: PUBLISHED Published: 2009-03-10T14:00:00 Last Updated: 2024-08-07T04:48:52.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpDenora before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via an IRC channel name. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/51981 - http://secunia.com/advisories/33960 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48799 - http://www.securityfocus.com/bid/33822 - http://sourceforge.net/project/shownotes.php?release_id=661189
CVE ID: CVE-2009-0862 State: PUBLISHED Published: 2009-03-10T14:00:00 Last Updated: 2024-08-07T04:48:52.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the hook_cntrlr_error_output function in modules/page/hooks/listeners.php in the admincp component in TangoCMS 2.2.x (aka Eagle) before 2.2.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://tangocms.org/article/view/2.2.4-released - http://tangocms.org/changelog - http://www.securityfocus.com/bid/33833 -
tp://tangocms.org/article/view/2.2.4-released - http://tangocms.org/changelog - http://www.securityfocus.com/bid/33833 - http://secunia.com/advisories/33967
CVE ID: CVE-2009-0863 State: PUBLISHED Published: 2009-03-10T14:00:00 Last Updated: 2024-08-07T04:48:52.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/delete_page.php in S-Cms 1.1 Stable allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33799 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48806 - https://www.exploit-db.com/exploits/8071
CVE ID: CVE-2009-0864 State: PUBLISHED Published: 2009-03-10T14:00:00 Last Updated: 2024-08-07T04:48:52.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: S-Cms 1.1 Stable allows remote attackers to bypass authentication and obtain administrative access via an OK value for the login cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33799 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48805 - https://www.exploit-db.com/exploits/8071
CVE ID: CVE-2009-0865 State: PUBLISHED Published: 2009-03-10T14:00:00 Last Updated: 2024-08-07T04:48:52.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the SnapShotToFile method in the GeoVision LiveX (aka LiveX_v8200) ActiveX control 8.1.2 and 8.2.0 in LIVEX_~1.OCX allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the argument, possibly involving the PlayX and SnapShotX methods. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48773 - https://www.exploit-db.com/exploits/8059 - http://secunia.com/advisories/33969 - http://www.securityfoc
bilities/48773 - https://www.exploit-db.com/exploits/8059 - http://secunia.com/advisories/33969 - http://www.securityfocus.com/bid/33782
CVE ID: CVE-2009-0866 State: PUBLISHED Published: 2009-03-10T14:00:00 Last Updated: 2024-08-07T04:48:52.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: pHNews Alpha 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for extra/genbackup.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48801 - https://www.exploit-db.com/exploits/8073
CVE ID: CVE-2009-0867 State: PUBLISHED Published: 2009-03-10T14:00:00 Last Updated: 2024-08-07T04:48:52.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HRM-S service in Fujitsu Enhanced Support Facility 3.0 and 3.0.1 allows remote attackers to obtain (1) hardware and (2) software information via unspecified requests in a client connection. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48817 - http://www.securityfocus.com/bid/33831 - http://secunia.com/advisories/33974 - http://www.fujitsu.com/global/support/software/security/products-f/esf-200901e.html
CVE ID: CVE-2009-0868 State: PUBLISHED Published: 2009-03-10T14:00:00 Last Updated: 2024-08-07T04:48:52.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the WebLink template in Fujitsu Jasmine2000 Enterprise Edition allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.fujitsu.com/global/support/software/security/products-f/jasmine-200901e.html - http://www.securityfocus.com/bid/33832 - http://secunia.com/advisories/33971 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48818