Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
andriva.com/security/advisories?name=MDVSA-2009:329 - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html - http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=77238f2b942b38ab4e7f3aced44084493e4a8675 - http://secunia.com/advisories/37909 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9921 - http://patchwork.kernel.org/patch/54678/ - http://www.redhat.com/support/errata/RHSA-2009-1670.html - http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html - http://secunia.com/advisories/38834 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6895 - http://l
dvisories/38834 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6895 - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html - http://secunia.com/advisories/37086 - http://secunia.com/advisories/38017 - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html - http://www.vupen.com/english/advisories/2010/0528
CVE ID: CVE-2009-3622 State: PUBLISHED Published: 2009-10-23T18:00:00 Last Updated: 2024-08-07T06:31:10.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Algorithmic complexity vulnerability in wp-trackback.php in WordPress before 2.8.5 allows remote attackers to cause a denial of service (CPU consumption and server hang) via a long title parameter in conjunction with a charset parameter composed of many comma-separated "UTF-8" substrings, related to the mb_convert_encoding function in PHP. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2009/Oct/263 - http://security-sh3ll.blogspot.com/2009/10/wordpress-resource-exhaustion-de
//seclists.org/fulldisclosure/2009/Oct/263 - http://security-sh3ll.blogspot.com/2009/10/wordpress-resource-exhaustion-denial-of.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/53884 - http://marc.info/?l=oss-security&m=125614592004825&w=2 - http://codes.zerial.org/php/wp-trackbacks_dos.phps - http://secunia.com/advisories/37088 - http://www.osvdb.org/59077 - http://rooibo.wordpress.com/2009/10/17/agujero-de-seguridad-en-wordpress/ - http://www.vupen.com/english/advisories/2009/2986 - https://bugzilla.redhat.com/show_bug.cgi?id=530056 - http://marc.info/?l=oss-security&m=125612393329041&w=2 - http://securitytracker.com/id?1023072 - http://wordpress.org/development/2009/10/wordpres
curity&m=125612393329041&w=2 - http://securitytracker.com/id?1023072 - http://wordpress.org/development/2009/10/wordpress-2-8-5-hardening-release/
CVE ID: CVE-2009-3623 State: PUBLISHED Published: 2009-10-30T20:05:00 Last Updated: 2024-08-07T06:38:28.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: The lookup_cb_cred function in fs/nfsd/nfs4callback.c in the nfsd4 subsystem in the Linux kernel before 2.6.31.2 attempts to access a credentials cache even when a client specifies the AUTH_NULL authentication flavor, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via an NFSv4 mount request. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=886e3b7fe6054230c89ae078a09565ed183ecc
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=886e3b7fe6054230c89ae078a09565ed183ecc73 - http://www.ubuntu.com/usn/usn-864-1 - http://marc.info/?l=oss-security&m=125618753029631&w=2 - http://marc.info/?l=oss-security&m=125624036516377&w=2 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc1 - https://bugzilla.redhat.com/show_bug.cgi?id=530269 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=80fc015bdfe1f5b870c1e1ee02d78e709523fee7
CVE ID: CVE-2009-3624 State: PUBLISHED Published: 2009-11-02T15:00:00 Last Updated: 2024-08-07T06:38:28.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_instantiation_keyring function in security/keys/keyctl.c in the KEYS subsystem in the Linux kernel before 2.6.32-rc5 does not properly maintain the reference count of a keyring, which allows local users to gain privileges or cause a denial of service (OOPS) via vectors involving calls to this function without specifying a keyring by ID, as demonstrated by a series of keyctl request2 and keyctl list commands. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=oss-security&m=125619420905
mmands. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=oss-security&m=125619420905341&w=2 - http://www.ubuntu.com/usn/usn-864-1 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=21279cfa107af07ef985539ac0de2152b9cba5f5 - http://twitter.com/spendergrsec/statuses/4916661870 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc5 - http://marc.info/?l=oss-security&m=125624091417161&w=2 - http://secunia.com/advisories/37086 - http://secunia.com/advisories/38017
CVE ID: CVE-2009-3625 State: PUBLISHED Published: 2009-10-26T16:00:00 Last Updated: 2024-08-07T06:38:28.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in www/index.php in Sahana 0.6.2.2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the mod parameter. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=530255 - https://fedorahosted.org/rel-eng/ticket/2635 - http://www.openwall.com/lists/oss-security/2009/10/22/3 - http://www.securityfocus.com/bid/36826 - http://www.openwall.com/lists/oss-security/2009/10/22/6 - http://sahana.cvs.sourceforge.n
.securityfocus.com/bid/36826 - http://www.openwall.com/lists/oss-security/2009/10/22/6 - http://sahana.cvs.sourceforge.net/viewvc/sahana/sahana-phase2/www/index.php?r1=1.83&r2=1.84 - http://sourceforge.net/mailarchive/forum.php?thread_name=5d9043b70910191044l4bb0178fs563a5128a0f5db01%40mail.gmail.com&forum_name=sahana-maindev
CVE ID: CVE-2009-3626 State: PUBLISHED Published: 2009-10-29T14:00:00 Last Updated: 2024-08-07T06:38:28.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Perl 5.10.1 allows context-dependent attackers to cause a denial of service (application crash) via a UTF-8 character with a large, invalid codepoint, which is not properly handled during a regular-expression match. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/3023 - http://www.openwall.com/lists/oss-security/2009/10/23/8 - http://www.osvdb.org/59283 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53939 - http://rt.perl.org/rt3/Ticket/Attachment/617489/295
59283 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53939 - http://rt.perl.org/rt3/Ticket/Attachment/617489/295383/ - https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6225 - http://rt.perl.org/rt3/Public/Bug/Display.html?id=69973 - http://secunia.com/advisories/37144 - http://perl5.git.perl.org/perl.git/commit/0abd0d78a73da1c4d13b1c700526b7e5d03b32d4 - http://www.securityfocus.com/bid/36812 - http://securitytracker.com/id?1023077
CVE ID: CVE-2009-3627 State: PUBLISHED Published: 2009-10-29T14:00:00 Last Updated: 2024-08-07T06:38:28.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decode_entities function in util.c in HTML-Parser before 3.63 allows context-dependent attackers to cause a denial of service (infinite loop) via an incomplete SGML numeric character reference, which triggers generation of an invalid UTF-8 character. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/3022 - http://www.openwall.com/lists/oss-security/2009/10/23/9 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53941 - https://bugzilla.redhat.com/show_bug.cgi?
ty/2009/10/23/9 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53941 - https://bugzilla.redhat.com/show_bug.cgi?id=530604 - http://www.securityfocus.com/bid/36807 - http://secunia.com/advisories/37155 - https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6225 - http://github.com/gisle/html-parser/commit/b9aae1e43eb2c8e989510187cff0ba3e996f9a4c
CVE ID: CVE-2009-3628 State: PUBLISHED Published: 2009-11-02T15:00:00 Last Updated: 2024-08-07T06:38:28.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to determine an encryption key via crafted input to a tt_content form element. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37122 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53917 - http://marc.info/?l=oss-security&m=125632856206736&w=2 - http:
ps://exchange.xforce.ibmcloud.com/vulnerabilities/53917 - http://marc.info/?l=oss-security&m=125632856206736&w=2 - http://www.vupen.com/english/advisories/2009/3009 - http://www.securityfocus.com/bid/36801
CVE ID: CVE-2009-3629 State: PUBLISHED Published: 2009-11-02T15:00:00 Last Updated: 2024-08-07T06:38:28.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53918 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/ - http://secunia.com/advisories/37122 - http://marc.info/?l=os
.org/teams/security/security-bulletins/typo3-sa-2009-016/ - http://secunia.com/advisories/37122 - http://marc.info/?l=oss-security&m=125633199111438&w=2 - http://marc.info/?l=oss-security&m=125632856206736&w=2 - http://www.vupen.com/english/advisories/2009/3009 - http://www.securityfocus.com/bid/36801
CVE ID: CVE-2009-3630 State: PUBLISHED Published: 2009-11-02T15:00:00 Last Updated: 2024-08-07T06:38:28.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to place arbitrary web sites in TYPO3 backend framesets via crafted parameters, related to a "frame hijacking" issue. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/ - http://secunia.com/advisories/37122 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53920 - http://marc.info/?l=os
ttp://secunia.com/advisories/37122 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53920 - http://marc.info/?l=oss-security&m=125632856206736&w=2 - http://www.vupen.com/english/advisories/2009/3009 - http://www.securityfocus.com/bid/36801
CVE ID: CVE-2009-3631 State: PUBLISHED Published: 2009-11-02T15:00:00 Last Updated: 2024-08-07T06:38:29.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2, when the DAM extension or ftp upload is enabled, allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53923 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/ - http://secunia.com/advisories/37122 - http://marc.info/?l=
o3.org/teams/security/security-bulletins/typo3-sa-2009-016/ - http://secunia.com/advisories/37122 - http://marc.info/?l=oss-security&m=125632856206736&w=2 - http://www.vupen.com/english/advisories/2009/3009 - http://www.securityfocus.com/bid/36801
CVE ID: CVE-2009-3632 State: PUBLISHED Published: 2009-11-02T15:00:00 Last Updated: 2024-08-07T06:38:29.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the traditional frontend editing feature in the Frontend Editing subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to execute arbitrary SQL commands via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53924 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/ - http://secunia.com/advisories/37
ilities/53924 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/ - http://secunia.com/advisories/37122 - http://marc.info/?l=oss-security&m=125632856206736&w=2 - http://www.vupen.com/english/advisories/2009/3009 - http://www.securityfocus.com/bid/36801
CVE ID: CVE-2009-3633 State: PUBLISHED Published: 2009-11-02T15:00:00 Last Updated: 2024-08-07T06:38:29.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the t3lib_div::quoteJSvalue API function in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the sanitizing algorithm. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/ - http://secunia.com/advisories/37122 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
bulletins/typo3-sa-2009-016/ - http://secunia.com/advisories/37122 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53925 - http://marc.info/?l=oss-security&m=125633199111438&w=2 - http://marc.info/?l=oss-security&m=125632856206736&w=2 - http://www.vupen.com/english/advisories/2009/3009 - http://www.securityfocus.com/bid/36801
CVE ID: CVE-2009-3634 State: PUBLISHED Published: 2009-11-02T15:00:00 Last Updated: 2024-08-07T06:38:29.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Frontend Login Box (aka felogin) subcomponent in TYPO3 4.2.0 through 4.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/ - http://secunia.com/advisories/37122 - http://marc.info/?l=oss-security&m=125633199111438&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53926 - http://marc.info/?l=oss-s
-security&m=125633199111438&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53926 - http://marc.info/?l=oss-security&m=125632856206736&w=2 - http://www.vupen.com/english/advisories/2009/3009 - http://www.securityfocus.com/bid/36801
CVE ID: CVE-2009-3635 State: PUBLISHED Published: 2009-11-02T15:00:00 Last Updated: 2024-08-07T06:38:28.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to gain access by using only the password's md5 hash as a credential. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/ - http://secunia.com/advisories/37122 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53928 - http://marc.info/?l=oss-security&m=125632856206736&w=2 - http://www.vupen.c
.xforce.ibmcloud.com/vulnerabilities/53928 - http://marc.info/?l=oss-security&m=125632856206736&w=2 - http://www.vupen.com/english/advisories/2009/3009 - http://www.securityfocus.com/bid/36801
CVE ID: CVE-2009-3636 State: PUBLISHED Published: 2009-11-02T15:00:00 Last Updated: 2024-08-07T06:38:28.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/ - http://secunia.com/advisories/37122 - http://marc.info/?l=oss-security&m=125633199111438&w=2 - https://exchange.xforce.ibmcloud.com/v
a.com/advisories/37122 - http://marc.info/?l=oss-security&m=125633199111438&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53929 - http://marc.info/?l=oss-security&m=125632856206736&w=2 - http://www.vupen.com/english/advisories/2009/3009 - http://www.securityfocus.com/bid/36801
CVE ID: CVE-2009-3637 State: PUBLISHED Published: 2010-01-13T11:00:00 Last Updated: 2024-08-07T06:38:28.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the M_AddToServerList function in client/menu.c in Red Planet Arena Alien Arena 7.30 allows remote attackers to execute arbitrary code via a packet with a crafted server description to UDP port 27901 followed by a packet with a long print command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/507369/100/0/threaded - http://www.securityfocus.com/bid/36782 - http://icculus.org/alienarena/changelogs/7.31.txt - http://www.ngssoftware.com/advis
//www.securityfocus.com/bid/36782 - http://icculus.org/alienarena/changelogs/7.31.txt - http://www.ngssoftware.com/advisories/very-high-risk-vulnerability-in-alien-arena-730/ - http://secunia.com/advisories/37118 - http://secunia.com/advisories/37259 - http://www.vupen.com/english/advisories/2009/2997 - http://secunia.com/advisories/37256 - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00179.html - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00218.html
CVE ID: CVE-2009-3638 State: PUBLISHED Published: 2009-10-29T14:00:00 Last Updated: 2024-08-07T06:38:28.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the kvm_dev_ioctl_get_supported_cpuid function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.31.4 allows local users to have an unspecified impact via a KVM_GET_SUPPORTED_CPUID request to the kvm_arch_dev_ioctl function. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.4 - http://marc.info/?l=oss-security&m=125632898507373&w=2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%
nfo/?l=oss-security&m=125632898507373&w=2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6a54435560efdab1a08f429a954df4d6c740bddf - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc4 - http://www.ubuntu.com/usn/usn-864-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:329 - https://bugzilla.redhat.com/show_bug.cgi?id=530515 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53934 - http://www.securityfocus.com/bid/36803 - http://marc.info/?l=oss-security&m=125628917011048&w=2 - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html
CVE ID: CVE-2009-3639 State: PUBLISHED Published: 2009-10-28T14:00:00 Last Updated: 2024-08-07T06:38:28.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mod_tls module in ProFTPD before 1.3.2b, and 1.3.3 before 1.3.3rc2, when the dNSNameRequired TLS option is enabled, does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 client certificate, which allows remote attackers to bypass intended client-hostname restrictions via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=oss-security
ssue to CVE-2009-2408. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=oss-security&m=125630966510672&w=2 - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00649.html - http://secunia.com/advisories/37219 - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00642.html - http://www.debian.org/security/2009/dsa-1925 - http://bugs.proftpd.org/show_bug.cgi?id=3275 - http://marc.info/?l=oss-security&m=125632960508211&w=2 - http://www.securityfocus.com/bid/36804 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53936 - http://secunia.com/advisories/37131 - http://www.mandriva.com/security/advisories?name=MDVSA
com/vulnerabilities/53936 - http://secunia.com/advisories/37131 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:288 - https://bugzilla.redhat.com/show_bug.cgi?id=530719
CVE ID: CVE-2009-3640 State: PUBLISHED Published: 2009-10-29T14:00:00 Last Updated: 2024-08-07T06:38:29.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: The update_cr8_intercept function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.32-rc1 does not properly handle the absence of an Advanced Programmable Interrupt Controller (APIC), which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly gain privileges via a call to the kvm_vcpu_ioctl function. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=88c808fd4
ogram Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=88c808fd42b53a7e01a2ac3253ef31fef74cb5af - http://marc.info/?l=oss-security&m=125626965020571&w=2 - http://marc.info/?l=oss-security&m=125640417219385&w=2 - http://www.securityfocus.com/bid/36805 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53947
CVE ID: CVE-2009-3641 State: PUBLISHED Published: 2009-10-28T14:00:00 Last Updated: 2024-08-07T06:38:28.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted IPv6 packet that uses the (1) TCP or (2) ICMP protocol. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/59159 - http://www.securityfocus.com/bid/36795 - http://securitytracker.com/id?1023076 - http://dl.snort.org/snort-current/release_notes_2851.txt - http://secunia.com/advisories/37135 - http://marc.info/?l=oss-security&m=125649553414700&w=2 - http://
_notes_2851.txt - http://secunia.com/advisories/37135 - http://marc.info/?l=oss-security&m=125649553414700&w=2 - http://vrt-sourcefire.blogspot.com/2009/10/snort-2851-release.html - http://www.vupen.com/english/advisories/2009/3014 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53912 - http://www.openwall.com/lists/oss-security/2009/10/25/5 - http://seclists.org/fulldisclosure/2009/Oct/299 - https://bugzilla.redhat.com/show_bug.cgi?id=530863
CVE ID: CVE-2009-3642 State: PUBLISHED Published: 2009-10-09T14:18:00Z Last Updated: 2024-09-16T17:14:26.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Call Logging feature in FrontRange HEAT 8.01 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0909-exploits/heat-sql.txt - http://secunia.com/advisories/36900