Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
www.securityfocus.com/bid/34343 - http://osvdb.org/53266 - http://www.vupen.com/english/advisories/2009/0941 - http://www.securitytracker.com/id?1021966 - http://lists.grok.org.uk/pipermail/full-disclosure/2009-April/068583.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/49633 - http://www.securityfocus.com/archive/1/502354/100/0/threaded
CVE ID: CVE-2009-1263 State: PUBLISHED Published: 2009-04-07T23:00:00 Last Updated: 2024-08-07T05:04:49.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in sub_commententry.php in the BookJoomlas (com_bookjoomlas) component 0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a comment action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8353 - http://www.vupen.com/english/advisories/2009/0952 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49682 - http://osvdb.org/53421 - http://www.securityfocus.com/bid/34392
CVE ID: CVE-2009-1264 State: PUBLISHED Published: 2009-04-07T23:00:00Z Last Updated: 2024-09-16T20:57:34.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/sr_feuser_register/2.5.21/ - http://osvdb.org/53278 - http://www.vupen.com/english/advisories/2009/0938 - http://secunia.com/advisories/34586 - http://www.securityfocus.com/bid/
p://www.vupen.com/english/advisories/2009/0938 - http://secunia.com/advisories/34586 - http://www.securityfocus.com/bid/34374 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-004/
CVE ID: CVE-2009-1265 State: PUBLISHED Published: 2009-04-08T01:00:00 Last Updated: 2024-08-07T05:04:49.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other versions before 2.6.30-rc1, might allow remote attackers to obtain sensitive information via a large length value, which causes "garbage" memory to be sent. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35390 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:135 - http://osvdb.org/53630 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html - http://list
:135 - http://osvdb.org/53630 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html - http://secunia.com/advisories/35656 - http://bugzilla.kernel.org/show_bug.cgi?id=10423 - http://www.debian.org/security/2009/dsa-1794 - http://osvdb.org/53571 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html - http://secunia.com/advisories/35185 - http://secunia.com/advisories/35011 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=83e0bbcbe2145f160fbaa109b0439dae7f4a38a9 - http://www.securityfocus.com/bid/34654 - http://www.openwall.com/lists/os
3Bh=83e0bbcbe2145f160fbaa109b0439dae7f4a38a9 - http://www.securityfocus.com/bid/34654 - http://www.openwall.com/lists/oss-security/2009/04/08/2 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html - http://www.ubuntu.com/usn/usn-793-1 - http://osvdb.org/53631 - http://secunia.com/advisories/34981 - http://www.debian.org/security/2009/dsa-1800 - http://secunia.com/advisories/35387 - http://www.debian.org/security/2009/dsa-1787 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:119 - http://secunia.com/advisories/35121 - http://secunia.com/advisories/35394
CVE ID: CVE-2009-1266 State: PUBLISHED Published: 2009-04-21T15:00:00 Last Updated: 2024-08-07T05:04:49.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Wireshark before 1.0.7 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34778 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html - http://www.securityfocus.com/archive/1/502745/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/50334 - http://secunia.com/advisories/35416 - http://wiki.rpath.com/Advisories:rPSA-2009-0062
CVE ID: CVE-2009-1267 State: PUBLISHED Published: 2009-04-13T16:00:00 Last Updated: 2024-08-07T05:04:49.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the LDAP dissector in Wireshark 0.99.2 through 1.0.6, when running on Windows, allows remote attackers to cause a denial of service (crash) via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2009-02.html - http://www.securitytracker.com/id?1022027 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49814 - http://secunia.com/advisories/34778 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003
ties/49814 - http://secunia.com/advisories/34778 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html - http://www.securityfocus.com/archive/1/502745/100/0/threaded - http://www.securityfocus.com/bid/34457 - http://secunia.com/advisories/35416 - http://wiki.rpath.com/Advisories:rPSA-2009-0062 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6099
CVE ID: CVE-2009-1268 State: PUBLISHED Published: 2009-04-13T16:00:00 Last Updated: 2024-08-07T05:04:49.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Check Point High-Availability Protocol (CPHAP) dissector in Wireshark 0.9.6 through 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FWHA_MY_STATE packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37477 - http://www.wireshark.org/security/wnpa-sec-2009-02.html - http://www.securitytracker.com/id?1022027 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01213.html - https://www.redhat.com/archives/fedora-package-announce
at.com/archives/fedora-package-announce/2009-May/msg01213.html - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01167.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10876 - http://secunia.com/advisories/35464 - http://www.redhat.com/support/errata/RHSA-2009-1100.html - http://secunia.com/advisories/34778 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html - http://www.securityfocus.com/archive/1/502745/100/0/threaded - http://secunia.com/advisories/34970 - http://www.debian.org/security/2009/dsa-1785 - http://secunia.com/advisories/35133 - http://www.securityfocus.com/bid/34457 - https://www.redhat.c
rity/2009/dsa-1785 - http://secunia.com/advisories/35133 - http://www.securityfocus.com/bid/34457 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00675.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5335 - http://secunia.com/advisories/35416 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:088 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3269 - http://wiki.rpath.com/Advisories:rPSA-2009-0062 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49815 - http://www.debian.org/security/2009/dsa-1942 - http://secunia.com/advisories/35224
CVE ID: CVE-2009-1269 State: PUBLISHED Published: 2009-04-13T16:00:00 Last Updated: 2024-08-07T05:04:49.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Wireshark 0.99.6 through 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted Tektronix .rf5 file. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2009-02.html - http://www.securitytracker.com/id?1022027 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01213.html - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01167.html - https://oval.cisecurity.org/repository/search/d
www.redhat.com/archives/fedora-package-announce/2009-May/msg01167.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5748 - http://secunia.com/advisories/35464 - http://www.redhat.com/support/errata/RHSA-2009-1100.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/49816 - http://secunia.com/advisories/34778 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html - http://www.securityfocus.com/archive/1/502745/100/0/threaded - http://secunia.com/advisories/34970 - http://www.debian.org/security/2009/dsa-1785 - http://secunia.com/advisories/35133 - http://www.securityfocus.com/bid/34457 - https://www.redhat.com/archives/f
-1785 - http://secunia.com/advisories/35133 - http://www.securityfocus.com/bid/34457 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00675.html - http://secunia.com/advisories/35416 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10642 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:088 - http://wiki.rpath.com/Advisories:rPSA-2009-0062 - http://secunia.com/advisories/35224
CVE ID: CVE-2009-1270 State: PUBLISHED Published: 2009-04-08T16:00:00 Last Updated: 2024-08-07T05:04:49.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: libclamav/untar.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (infinite loop) via a crafted TAR file that causes (1) clamd and (2) clamscan to hang. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49846 - http://www.securityfocus.com/bid/34357 - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1462 - http://secunia.com/advisories/34716 - http://osvdb.org/53461 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:097 -
cunia.com/advisories/34716 - http://osvdb.org/53461 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:097 - http://www.vupen.com/english/advisories/2009/0934 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html - http://www.debian.org/security/2009/dsa-1771 - http://www.openwall.com/lists/oss-security/2009/04/07/6 - http://support.apple.com/kb/HT3865 - http://secunia.com/advisories/36701 - http://www.ubuntu.com/usn/usn-754-1
CVE ID: CVE-2009-1271 State: PUBLISHED Published: 2009-04-08T18:00:00 Last Updated: 2024-08-07T05:04:49.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JSON_parser function (ext/json/JSON_parser.c) in PHP 5.2.x before 5.2.9 allows remote attackers to cause a denial of service (segmentation fault) via a malformed string to the json_decode API function. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/04/01/9 - http://www.debian.org/security/2009/dsa-1775 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html - http://cvs.php.net/viewvc.cgi/php-src/ext/json/JSON_parser.c?r1=1.1.2.14&r2
ra-package-announce/2009-May/msg01451.html - http://cvs.php.net/viewvc.cgi/php-src/ext/json/JSON_parser.c?r1=1.1.2.14&r2=1.1.2.15 - http://secunia.com/advisories/34770 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html - http://www.php.net/releases/5_2_9.php - http://secunia.com/advisories/35007 - http://secunia.com/advisories/34933 - http://secunia.com/advisories/34830 - http://www.ubuntu.com/usn/USN-761-2 - http://www.redhat.com/support/errata/RHSA-2009-0350.html - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html - http://secunia.com/advisories/35003 - http://secunia.com/advisories/35685 - http://lists.opensuse.org/opensuse-security-ann
p://secunia.com/advisories/35003 - http://secunia.com/advisories/35685 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - http://support.apple.com/kb/HT3865 - http://secunia.com/advisories/36701 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:090 - http://secunia.com/advisories/35306 - https://usn.ubuntu.com/761-1/ - http://www.debian.org/security/2009/dsa-1789
CVE ID: CVE-2009-1272 State: PUBLISHED Published: 2009-04-08T18:00:00 Last Updated: 2024-08-07T05:04:49.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: The php_zip_make_relative_path function in php_zip.c in PHP 5.2.x before 5.2.9 allows context-dependent attackers to cause a denial of service (crash) via a ZIP file that contains filenames with relative paths, which is not properly handled during extraction. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/04/09/1 - http://www.openwall.com/lists/oss-security/2009/04/01/9 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html - http://www.php.n
/oss-security/2009/04/01/9 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html - http://www.php.net/releases/5_2_9.php - http://cvs.php.net/viewvc.cgi/php-src/ext/zip/php_zip.c?r1=1.1.2.48&r2=1.1.2.49 - http://secunia.com/advisories/35685 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - http://support.apple.com/kb/HT3865 - http://secunia.com/advisories/36701 - http://marc.info/?l=bugtraq&m=125017764422557&w=2 - http://marc.info/?l=bugtraq&m=125017764422557&w=2
CVE ID: CVE-2009-1273 State: PUBLISHED Published: 2009-04-08T18:00:00 Last Updated: 2024-08-07T05:04:49.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: pam_ssh 1.92 and possibly other versions, as used when PAM is compiled with USE=ssh, generates different error messages depending on whether the username is valid or invalid, which makes it easier for remote attackers to enumerate usernames. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=263579 - http://secunia.com/advisories/34986 - http://secunia.com/advisories/34536 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00116.html - https://www.redhat.c
advisories/34536 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00116.html - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00145.html
CVE ID: CVE-2009-1274 State: PUBLISHED Published: 2009-04-08T18:00:00 Last Updated: 2024-08-07T05:04:49.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the qt_error parse_trak_atom function in demuxers/demux_qt.c in xine-lib 1.1.16.2 and earlier allows remote attackers to execute arbitrary code via a Quicktime movie file with a large count value in an STTS atom, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34593 - http://www.securityfocus.com/archive/1/502481/100/0/threaded - http://www.securitytracker.com/id?1021989 - http://osvdb.org/53288 - http://sourceforge.
chive/1/502481/100/0/threaded - http://www.securitytracker.com/id?1021989 - http://osvdb.org/53288 - http://sourceforge.net/project/shownotes.php?group_id=9655&release_id=673233 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:299 - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00210.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/49714 - http://www.securityfocus.com/bid/34384 - http://secunia.com/advisories/35416 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:298 - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00215.html - http:
dvisories?name=MDVSA-2009:298 - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00215.html - http://secunia.com/advisories/34712 - http://www.vupen.com/english/advisories/2009/0937 - http://bugs.xine-project.org/show_bug.cgi?id=224 - http://www.trapkit.de/advisories/TKADV2009-005.txt
CVE ID: CVE-2009-1275 State: PUBLISHED Published: 2009-04-09T15:00:00 Last Updated: 2024-08-07T05:04:49.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tiles 2.1 before 2.1.2, as used in Apache Struts and other products, evaluates Expression Language (EL) expressions twice in certain circumstances, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive information via unspecified vectors, related to the (1) tiles:putAttribute and (2) tiles:insertTemplate JSP tags. Additional Analyst Notes: - CVE Program Container: References: - https://issues.apache.org/struts/browse/TILES-351 - http://www.securityfocus.com/bid/34657 - http://sv
er: References: - https://issues.apache.org/struts/browse/TILES-351 - http://www.securityfocus.com/bid/34657 - http://svn.apache.org/viewvc/tiles/framework/trunk/src/site/apt/security/security-bulletin-1.apt?revision=741913
CVE ID: CVE-2009-1276 State: PUBLISHED Published: 2009-04-09T15:00:00 Last Updated: 2024-08-07T05:04:49.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: XScreenSaver in Sun Solaris 10 and OpenSolaris before snv_109, and Solaris 8 and 9 with GNOME 2.0 or 2.0.2, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, as demonstrated by Thunderbird new-mail notifications. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-22-1 - http://www.vupen.com/english/advisories/2009/0978 - http://securitytracker.com/id?102
ent.do?assetkey=1-21-120094-22-1 - http://www.vupen.com/english/advisories/2009/0978 - http://securitytracker.com/id?1022009 - http://www.securityfocus.com/bid/34421 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-255308-1
CVE ID: CVE-2009-1277 State: PUBLISHED Published: 2009-04-09T16:00:00 Last Updated: 2024-08-07T05:04:49.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Gravity Board X (GBX) 2.0 BETA allows remote attackers to execute arbitrary SQL commands via the member_id parameter in a viewprofile action. NOTE: the board_id issue is already covered by CVE-2008-2996.2. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34370 - https://www.exploit-db.com/exploits/8350 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49678
CVE ID: CVE-2009-1278 State: PUBLISHED Published: 2009-04-09T16:00:00 Last Updated: 2024-08-07T05:04:49.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in forms/ajax/configure.php in Gravity Board X (GBX) 2.0 BETA allows remote attackers to inject arbitrary PHP code into config.php via the configure action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34370 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49679 - https://www.exploit-db.com/exploits/8350
CVE ID: CVE-2009-1279 State: PUBLISHED Published: 2009-04-09T16:00:00 Last Updated: 2024-08-07T05:04:49.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.5 through 1.5.9 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the (1) com_admin component, (2) com_search component when "Gather Search Statistics" is enabled, and (3) the category view in the com_content component. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34360 - http://developer.joomla.org/security/news/294-20090302-core-comcontent-xss.html - http://secunia.com/a
s.com/bid/34360 - http://developer.joomla.org/security/news/294-20090302-core-comcontent-xss.html - http://secunia.com/advisories/34551 - http://developer.joomla.org/security/news/293-20090301-core-multiple-xsscsrf.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/49655 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49654
CVE ID: CVE-2009-1280 State: PUBLISHED Published: 2009-04-09T16:00:00 Last Updated: 2024-08-07T05:04:49.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the com_media component for Joomla! 1.5.x through 1.5.9 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49656 - http://secunia.com/advisories/34551 - http://developer.joomla.org/security/news/293-20090301-core-multiple-xsscsrf.html
CVE ID: CVE-2009-1281 State: PUBLISHED Published: 2009-04-09T16:00:00Z Last Updated: 2024-09-16T19:14:20.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in glFusion before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34575 - http://www.securityfocus.com/bid/34377 - http://osvdb.org/53287 - http://www.glfusion.org/article.php/glfusion113
CVE ID: CVE-2009-1282 State: PUBLISHED Published: 2009-04-09T16:00:00 Last Updated: 2024-08-07T05:04:49.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in private/system/lib-session.php in glFusion 1.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the glf_session cookie parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8347 - http://retrogod.altervista.org/9sg_glfuso_sql_cookies.html - http://secunia.com/advisories/34575 - http://www.securityfocus.com/bid/34361 - http://osvdb.org/53286 - http://marc.info/?l=bugtraq&m=123877379105028&w=2 - https://exchange.xf
tyfocus.com/bid/34361 - http://osvdb.org/53286 - http://marc.info/?l=bugtraq&m=123877379105028&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49652 - http://www.glfusion.org/wiki/doku.php?id=glfusion:whatsnew
CVE ID: CVE-2009-1283 State: PUBLISHED Published: 2009-04-09T16:00:00 Last Updated: 2024-08-07T05:04:49.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: glFusion before 1.1.3 performs authentication with a user-provided password hash instead of a password, which allows remote attackers to gain privileges by obtaining the hash and using it in the glf_password cookie, aka "User Masquerading." NOTE: this can be leveraged with a separate SQL injection vulnerability to steal hashes. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8347 - http://retrogod.altervista.org/9sg_glfuso_sql_cookies.html - http://secunia.com/advisories/345
it-db.com/exploits/8347 - http://retrogod.altervista.org/9sg_glfuso_sql_cookies.html - http://secunia.com/advisories/34575 - http://marc.info/?l=bugtraq&m=123877379105028&w=2 - http://www.glfusion.org/article.php/glfusion113 - http://www.glfusion.org/wiki/doku.php?id=glfusion:whatsnew
CVE ID: CVE-2009-1284 State: PUBLISHED Published: 2009-04-09T16:00:00 Last Updated: 2024-08-07T05:04:49.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in BibTeX 0.99 allows context-dependent attackers to cause a denial of service (memory corruption and crash) via a long .bib bibliography file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/04/01/8 - http://security.gentoo.org/glsa/glsa-201206-28.xml - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00505.html - http://secunia.com/advisories/34445 - https://www.redhat.com/archives/fedora-package-announce/2009-November/ms