Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-1490 State: PUBLISHED Published: 2009-05-05T19:00:00 Last Updated: 2024-08-07T05:13:25.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a long X- header, as demonstrated by an X-Testing header. Additional Analyst Notes: - CVE Program Container: References: - http://www.sendmail.org/releases/8.13.2 - http://www.nmrc.org/~thegnome/blog/apr09/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/50355
CVE ID: CVE-2009-1491 State: PUBLISHED Published: 2009-05-05T19:00:00 Last Updated: 2024-08-07T05:13:25.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee GroupShield for Microsoft Exchange on Exchange Server 2000, and possibly other anti-virus or anti-spam products from McAfee or other vendors, does not scan X- headers for malicious content, which allows remote attackers to bypass virus detection via a crafted message, as demonstrated by a message with an X-Testing header and no message body. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50354 - http://www.nmrc.org/~thegnome/blog/apr09/
CVE ID: CVE-2009-1492 State: PUBLISHED Published: 2009-04-30T20:00:00 Last Updated: 2024-08-07T05:13:25.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a PDF file that contains an annotation, and has an OpenAction entry with JavaScript code that calls this method with crafted integer arguments. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8569 - http://blogs.adobe.com/psirt/2009/05/adobe_reader_issue_update.html - h
es: - https://www.exploit-db.com/exploits/8569 - http://blogs.adobe.com/psirt/2009/05/adobe_reader_issue_update.html - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=926953 - http://blogs.adobe.com/psirt/2009/04/potential_adobe_reader_issue.html - http://blogs.adobe.com/psirt/2009/04/update_on_adobe_reader_issue.html - http://secunia.com/advisories/35734 - http://www.us-cert.gov/cas/techalerts/TA09-133B.html - http://www.vupen.com/english/advisories/2009/1189 - http://www.adobe.com/support/security/bulletins/apsb09-06.html - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html - http://packetstorm.linuxsecurity.com/0904-exploits/getannots.txt - http://securit
urity-announce/2009-06/msg00003.html - http://packetstorm.linuxsecurity.com/0904-exploits/getannots.txt - http://security.gentoo.org/glsa/glsa-200907-06.xml - http://sunsolve.sun.com/search/document.do?assetkey=1-66-259028-1 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00001.html - http://secunia.com/advisories/34924 - http://www.vupen.com/english/advisories/2009/1317 - http://www.securitytracker.com/id?1022139 - http://secunia.com/advisories/35358 - http://secunia.com/advisories/35055 - http://www.kb.cert.org/vuls/id/970180 - http://osvdb.org/54130 - http://secunia.com/advisories/35416 - http://www.redhat.com/support/errata/RHSA-2009-0478.html - http://secunia.com/advis
ttp://secunia.com/advisories/35416 - http://www.redhat.com/support/errata/RHSA-2009-0478.html - http://secunia.com/advisories/35096 - http://secunia.com/advisories/35152 - http://www.securityfocus.com/bid/34736 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50145
CVE ID: CVE-2009-1493 State: PUBLISHED Published: 2009-04-30T20:00:00 Last Updated: 2024-08-07T05:13:25.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: The customDictionaryOpen spell method in the JavaScript API in Adobe Reader 9.1, 8.1.4, 7.1.1, and earlier on Linux and UNIX allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a PDF file that triggers a call to this method with a long string in the second argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34740 - http://blogs.adobe.com/psirt/2009/05/adobe_reader_issue_update.html - http://support.nortel.com/go/main.jsp?
bid/34740 - http://blogs.adobe.com/psirt/2009/05/adobe_reader_issue_update.html - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=926953 - http://secunia.com/advisories/35734 - http://www.us-cert.gov/cas/techalerts/TA09-133B.html - https://www.exploit-db.com/exploits/8570 - http://www.vupen.com/english/advisories/2009/1189 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50146 - http://www.adobe.com/support/security/bulletins/apsb09-06.html - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html - http://blogs.adobe.com/psirt/2009/04/update_on_adobe_reader_issue.html - http://packetstorm.linuxsecurity.com/0904-exploits/spell.txt - http://osvdb.org/54129 -
ate_on_adobe_reader_issue.html - http://packetstorm.linuxsecurity.com/0904-exploits/spell.txt - http://osvdb.org/54129 - http://security.gentoo.org/glsa/glsa-200907-06.xml - http://sunsolve.sun.com/search/document.do?assetkey=1-66-259028-1 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00001.html - http://secunia.com/advisories/34924 - http://www.vupen.com/english/advisories/2009/1317 - http://www.securitytracker.com/id?1022139 - http://secunia.com/advisories/35358 - http://secunia.com/advisories/35055 - http://www.kb.cert.org/vuls/id/970180 - http://secunia.com/advisories/35416 - http://www.redhat.com/support/errata/RHSA-2009-0478.html - http://secunia.com/advisories/3509
nia.com/advisories/35416 - http://www.redhat.com/support/errata/RHSA-2009-0478.html - http://secunia.com/advisories/35096 - http://secunia.com/advisories/35152
CVE ID: CVE-2009-1494 State: PUBLISHED Published: 2009-04-30T20:00:00 Last Updated: 2024-08-07T05:13:25.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: The process_stat function in Memcached 1.2.8 discloses memory-allocation statistics in response to a stats malloc command, which allows remote attackers to obtain potentially sensitive information by sending this command to the daemon's TCP port. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/memcachedb/source/browse/trunk/ChangeLog?spec=svn98&r=98 - http://memcached.googlecode.com/files/memcached-1.2.8.tar.gz - https://exchange.xforce.ibmcloud.com/vulnerabilities/50444 - http://code.
.googlecode.com/files/memcached-1.2.8.tar.gz - https://exchange.xforce.ibmcloud.com/vulnerabilities/50444 - http://code.google.com/p/memcachedb/source/detail?r=98 - http://code.google.com/p/memcachedb/source/diff?spec=svn98&r=98&format=side&path=/trunk/memcachedb.c - http://groups.google.com/group/memcached/browse_thread/thread/ff96a9b88fb5d40e
CVE ID: CVE-2009-1495 State: PUBLISHED Published: 2009-05-01T16:00:00 Last Updated: 2024-08-07T05:13:25.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web File Explorer 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for data/db.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34648 - https://www.exploit-db.com/exploits/8374
CVE ID: CVE-2009-1496 State: PUBLISHED Published: 2009-05-01T16:00:00 Last Updated: 2024-08-07T05:13:25.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Cmi Marketplace (com_cmimarketplace) component 0.1 for Joomla! allows remote attackers to list arbitrary directories via a .. (dot dot) in the viewit parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8367 - http://www.securityfocus.com/bid/34431
CVE ID: CVE-2009-1497 State: PUBLISHED Published: 2009-05-01T16:00:00 Last Updated: 2024-08-07T05:13:25.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in srt2smi.exe in Gretech Online Movie Player (GOM Player) 2.1.16.4635 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long string in an SRT file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/53361 - https://www.exploit-db.com/exploits/8370 - http://www.securityfocus.com/archive/1/502552/100/0/threaded - http://www.securityfocus.com/bid/34427 - http://secunia.com/advisories/34639 - http://security.bkis.vn/?p=501
CVE ID: CVE-2009-1498 State: PUBLISHED Published: 2009-05-01T16:00:00 Last Updated: 2024-08-07T05:13:25.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in inc/profilemain.php in Game Maker 2k Internet Discussion Boards (iDB) 0.2.5 Pre-Alpha SVN 243 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the skin parameter in a settings action to profile.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49697 - http://www.securityfocus.com/bid/34397 - https://www.exploit-db.com/exploits/8357
CVE ID: CVE-2009-1499 State: PUBLISHED Published: 2009-05-01T16:00:00 Last Updated: 2024-08-07T05:13:25.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the MailTo (aka com_mailto) component in Joomla! allows remote attackers to execute arbitrary SQL commands via the article parameter in index.php. NOTE: SecurityFocus states that this issue has been disputed by the vendor. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8366 - http://www.securityfocus.com/bid/34433
CVE ID: CVE-2009-1500 State: PUBLISHED Published: 2009-05-01T17:00:00 Last Updated: 2024-08-07T05:13:25.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in ProjectCMS 1.0 Beta allows remote attackers to execute arbitrary SQL commands via the sn parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/503079/100/0/threaded - https://www.exploit-db.com/exploits/8565 - http://www.securityfocus.com/bid/34767
CVE ID: CVE-2009-1501 State: PUBLISHED Published: 2009-05-01T17:00:00 Last Updated: 2024-08-07T05:13:25.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Exif module 5.x-1.x before 5.x-1.2 and 6.x-1.x-dev before April 13, 2009, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via EXIF tags in an image. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34953 - http://drupal.org/node/448958 - http://www.securityfocus.com/bid/34774 - http://www.vupen.com/english/advisories/2009/1213
CVE ID: CVE-2009-1502 State: PUBLISHED Published: 2009-05-01T17:00:00 Last Updated: 2024-08-07T05:13:25.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in plugin.php in S-Cms 1.1 Stable and 1.5.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34771 - https://www.exploit-db.com/exploits/8566 - http://secunia.com/advisories/34940
CVE ID: CVE-2009-1503 State: PUBLISHED Published: 2009-05-01T17:00:00 Last Updated: 2024-08-07T05:13:25.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in login.php in Tiger Document Management System (DMS) allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8571 - http://secunia.com/advisories/34784 - http://www.securityfocus.com/bid/34775
CVE ID: CVE-2009-1504 State: PUBLISHED Published: 2009-05-01T17:00:00 Last Updated: 2024-08-07T05:13:25.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute Form Processor XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting the xlaAFPadmin cookie to "lvl=1&userid=1." Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8529
CVE ID: CVE-2009-1505 State: PUBLISHED Published: 2009-05-01T17:00:00 Last Updated: 2024-08-07T05:13:25.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the News Page module 5.x before 5.x-1.2 for Drupal allows remote authenticated users, with News Page nodes create and edit privileges, to execute arbitrary SQL commands via the Include Words (aka keywords) field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34777 - http://secunia.com/advisories/34954 - http://www.vupen.com/english/advisories/2009/1214 - http://osvdb.org/54151 - http://drupal.org/node/449014 - https://exchange.xforce.ibmcloud.co
lish/advisories/2009/1214 - http://osvdb.org/54151 - http://drupal.org/node/449014 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50248
CVE ID: CVE-2009-1506 State: PUBLISHED Published: 2009-05-01T17:00:00 Last Updated: 2024-08-07T05:13:25.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in classes/Xp.php in eLitius 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to banner-details.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8563 - http://www.securityfocus.com/bid/34769
CVE ID: CVE-2009-1507 State: PUBLISHED Published: 2009-05-01T17:00:00 Last Updated: 2024-08-07T05:13:25.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Node Access User Reference module 5.x before 5.x-2.0-beta4 and 6.x before 6.x-2.0-beta6, a module for Drupal, interprets an empty CCK user reference as a reference to the anonymous user, which might allow remote attackers to bypass intended access restrictions to read or modify a node. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/449030 - http://www.securityfocus.com/bid/34778 - http://www.vupen.com/english/advisories/2009/1212 - http://secunia.com/advisories/34955
CVE ID: CVE-2009-1508 State: PUBLISHED Published: 2009-05-01T18:00:00 Last Updated: 2024-08-07T05:13:25.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the xforum_validateUser function in Common.php in X-Forum 0.6.2 allows remote attackers to execute arbitrary SQL commands, as demonstrated via the cookie_username parameter to Configure.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34302 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49537 - https://www.exploit-db.com/exploits/8317
CVE ID: CVE-2009-1509 State: PUBLISHED Published: 2009-05-01T18:00:00 Last Updated: 2024-08-07T05:13:25.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ajaxp_backend.php in MyioSoft AjaxPortal 3.0 allows remote attackers to execute arbitrary SQL commands via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34529 - https://www.exploit-db.com/exploits/8341 - http://www.securityfocus.com/bid/34338
CVE ID: CVE-2009-1510 State: PUBLISHED Published: 2009-05-01T18:00:00 Last Updated: 2024-08-07T05:13:25.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in KoschtIT Image Gallery 1.82 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the file parameter to (1) ki_makepic.php and (2) ki_nojsdisplayimage.php in ki_base/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8334 - http://www.securityfocus.com/bid/34335
CVE ID: CVE-2009-1511 State: PUBLISHED Published: 2009-05-01T18:00:00 Last Updated: 2024-08-07T05:13:25.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: GDI+ in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service (infinite loop) via a PNG file that contains a certain large btChunkLen value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34586 - https://www.exploit-db.com/exploits/8466
CVE ID: CVE-2009-1512 State: PUBLISHED Published: 2009-05-01T22:00:00 Last Updated: 2024-08-07T05:13:25.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in X-Forum 0.6.2 allows remote authenticated administrators to inject arbitrary PHP code into Config.php via the adminEMail parameter to SaveConfig.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50390 - https://www.exploit-db.com/exploits/8317
CVE ID: CVE-2009-1513 State: PUBLISHED Published: 2009-05-04T16:12:00 Last Updated: 2024-08-07T05:13:25.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the PATinst function in src/load_pat.cpp in libmodplug before 0.8.7 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long instrument name. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-771-1 - http://secunia.com/advisories/35736 - http://secunia.com/advisories/34927 - http://www.debian.org/security/2009/dsa-1850 - http://www.securityfocus.com/bid/34747 - http://modplug-xmms.cvs.sourceforge.net/viewvc/
an.org/security/2009/dsa-1850 - http://www.securityfocus.com/bid/34747 - http://modplug-xmms.cvs.sourceforge.net/viewvc/modplug-xmms/libmodplug/src/load_pat.cpp?r1=1.3&r2=1.4 - http://secunia.com/advisories/36158 - http://sourceforge.net/tracker/?func=detail&aid=2777467&group_id=1275&atid=301275 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:128 - http://osvdb.org/54109 - http://secunia.com/advisories/35026 - http://www.openwall.com/lists/oss-security/2009/04/29/5 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526084 - http://security.gentoo.org/glsa/glsa-200907-07.xml - http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms%3Ba=commitdiff%3Bh=c4ebb701be6ee9
-200907-07.xml - http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms%3Ba=commitdiff%3Bh=c4ebb701be6ee9a296a44fdac5a20b7739ff0595 - http://sourceforge.net/project/shownotes.php?release_id=678622&group_id=1275 - http://www.vupen.com/english/advisories/2009/1200
CVE ID: CVE-2009-1514 State: PUBLISHED Published: 2009-05-04T16:12:00 Last Updated: 2024-08-07T05:13:25.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome 1.0.154.53 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a throw statement with a long exception value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34786 - https://www.exploit-db.com/exploits/8573
CVE ID: CVE-2009-1515 State: PUBLISHED Published: 2009-05-04T16:12:00 Last Updated: 2024-08-07T05:13:25.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the cdf_read_sat function in src/cdf.c in Christos Zoulas file 5.00 allows user-assisted remote attackers to execute arbitrary code via a crafted compound document file, as demonstrated by a .msi, .doc, or .mpp file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:129 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=515603 - http://www.securityfocus.
ity/advisories?name=MDVSA-2009:129 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=515603 - http://www.securityfocus.com/bid/34745 - http://mx.gw.com/pipermail/file/2009/000379.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=525820 - ftp://ftp.astron.com/pub/file/file-5.01.tar.gz - http://secunia.com/advisories/34881 - http://www.osvdb.org/54100
CVE ID: CVE-2009-1516 State: PUBLISHED Published: 2009-05-04T18:00:00 Last Updated: 2024-08-07T05:13:25.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1 might allow context-dependent attackers to execute arbitrary code via a large value in the second argument to the Base64FileEncode method, as possibly demonstrated by a web application that accepts untrusted input for this method. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8542 - http://www.securityfocus.com/bid/34739
CVE ID: CVE-2009-1517 State: PUBLISHED Published: 2009-05-04T18:00:00 Last Updated: 2024-08-07T05:13:25.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple insecure method vulnerabilities in the Symantec.EasySetup.1 ActiveX control in EasySetupInt.dll 14.0.4.30167 in the EasySetup wizard in Symantec Norton Ghost 14.0 allow remote attackers to cause a denial of service (browser crash) and possibly execute arbitrary code via unspecified input to the (1) GetBackupLocationPath, (2) CallUninstall, (3) SetupDeleteVolume, (4) CanUseEasySetup, (5) CallAddInitialProtection, and (6) CallTour methods. Additional Analyst Notes: - CVE Program Container: References: - http://www.secur
lProtection, and (6) CallTour methods. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022120 - http://www.shinnai.net/xplits/TXT_Gl6RHStS23c9DANArcJE.html - https://www.exploit-db.com/exploits/8523 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50098 - http://www.securityfocus.com/bid/34696
CVE ID: CVE-2009-1518 State: PUBLISHED Published: 2009-05-04T18:22:00Z Last Updated: 2024-09-17T02:46:47.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Beltane before 2.3.11 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34973 - http://osvdb.org/54167
CVE ID: CVE-2009-1519 State: PUBLISHED Published: 2009-05-04T18:22:00 Last Updated: 2024-08-07T05:13:25.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Pecio CMS 1.1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the language parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8593 - http://www.securityfocus.com/bid/34802
CVE ID: CVE-2009-1520 State: PUBLISHED Published: 2009-05-05T17:00:00 Last Updated: 2024-08-07T05:13:25.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Web GUI in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, 5.4.0.0 through 5.4.2.6, and 5.5.0.0 through 5.5.1.17 allows attackers to cause a denial of service (application crash) or execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50328 - http://www-01.ibm.com/support/docview.wss?uid=swg21384389 - http://www-1.ibm.com/s
.ibmcloud.com/vulnerabilities/50328 - http://www-01.ibm.com/support/docview.wss?uid=swg21384389 - http://www-1.ibm.com/support/docview.wss?uid=swg1IC59994 - http://www.vupen.com/english/advisories/2009/1235 - http://secunia.com/advisories/32604