Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
(process crash) via a \x25\xFF sequence in the USER and PASS commands, related to a "format string DoS" issue. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201209-25.xml - http://secunia.com/advisories/39206 - http://www.securityfocus.com/bid/36630 - http://securitytracker.com/id?1022997 - http://lists.vmware.com/pipermail/security-announce/2010/000090.html - http://www.shinnai.net/xplits/TXT_JtYUv6C6j5b6Bw6iIkF4.html - http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html - http://secunia.com/advisories/36988 - http://www.vmware.com/security/advisories/V
m/archives/bugtraq/2010-04/0077.html - http://secunia.com/advisories/36988 - http://www.vmware.com/security/advisories/VMSA-2010-0007.html - http://www.shinnai.net/index.php?mod=02_Forum&group=02_Bugs_and_Exploits&argument=01_Remote&topic=1254924405.ff.php - http://www.shinnai.net/exploits/abFwcLOuFqmD20yqhYpQ.txt - http://secunia.com/advisories/39215 - http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html
CVE ID: CVE-2009-3708 State: PUBLISHED Published: 2009-10-16T16:00:00Z Last Updated: 2024-09-17T02:17:01.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-assisted remote attackers to execute arbitrary code via a long value in a (1) description or (2) keyword META tag. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/58649 - http://secunia.com/advisories/36940
CVE ID: CVE-2009-3709 State: PUBLISHED Published: 2009-10-16T16:00:00 Last Updated: 2024-08-07T06:38:30.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-assisted remote attackers to execute arbitrary code via a long value in a TITLE tag. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0910-exploits/alleycode-overflow.txt - http://osvdb.org/58649 - http://secunia.com/advisories/36940 - http://www.securityfocus.com/archive/1/506987/100/0/threaded
CVE ID: CVE-2009-3710 State: PUBLISHED Published: 2009-10-16T16:00:00Z Last Updated: 2024-09-17T03:34:18.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: RioRey RIOS 4.6.6 and 4.7.0 uses an undocumented, hard-coded username (dbadmin) and password (sq!us3r) for an SSH tunnel, which allows remote attackers to gain privileges via port 8022. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0910-exploits/riorey-passwd.txt - http://osvdb.org/58858 - http://secunia.com/advisories/36971
CVE ID: CVE-2009-3711 State: PUBLISHED Published: 2009-10-16T16:00:00 Last Updated: 2024-08-07T06:38:30.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2874 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53700 - http://marc.info/?l=bugtraq&m=125544914512291&w=2 - http://osvdb.org/58714 - http://www.securityfocus.com/archive/1/507042/1
://marc.info/?l=bugtraq&m=125544914512291&w=2 - http://osvdb.org/58714 - http://www.securityfocus.com/archive/1/507042/100/0/threaded - http://secunia.com/advisories/36991 - http://www.pank4j.com/exploits/httpdxb0f.php - http://www.securityfocus.com/archive/1/507073/100/0/threaded
CVE ID: CVE-2009-3712 State: PUBLISHED Published: 2009-10-16T16:00:00 Last Updated: 2024-08-07T06:38:30.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via the (1) user_id parameter to feedback.php; and the item_id parameter to (2) view_full_size.php, (3) classifide_ad.php, and (4) crosspromoteitems.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9125 - http://secunia.com/advisories/35713 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51675
CVE ID: CVE-2009-3713 State: PUBLISHED Published: 2009-10-16T16:00:00 Last Updated: 2024-08-07T06:38:30.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in fichero.php in MorcegoCMS 1.7.6 and earlier allows remote attackers to execute arbitrary SQL commands via the query string. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51658 - http://osvdb.org/55796 - http://www.exploit-db.com/exploits/9121 - http://secunia.com/advisories/35778
CVE ID: CVE-2009-3714 State: PUBLISHED Published: 2009-10-16T16:00:00 Last Updated: 2024-08-07T06:38:30.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin_login.php in MCshoutbox 1.1 allows remote attackers to inject arbitrary web script or HTML via the loginerror parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51862 - http://www.exploit-db.com/exploits/9205 - http://osvdb.org/56062 - http://secunia.com/advisories/35885 - http://www.vupen.com/english/advisories/2009/1961
CVE ID: CVE-2009-3715 State: PUBLISHED Published: 2009-10-16T16:00:00 Last Updated: 2024-08-07T06:38:30.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in scr_login.php in MCshoutbox 1.1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9205 - http://secunia.com/advisories/35885 - http://osvdb.org/56063 - http://www.vupen.com/english/advisories/2009/1961 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51863
CVE ID: CVE-2009-3716 State: PUBLISHED Published: 2009-10-16T16:00:00 Last Updated: 2024-08-07T06:38:30.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in admin.php in MCshoutbox 1.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in smilies/. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9205 - http://osvdb.org/56064 - http://secunia.com/advisories/35885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51864
CVE ID: CVE-2009-3717 State: PUBLISHED Published: 2009-10-16T16:00:00 Last Updated: 2024-08-07T06:38:30.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in LucVil PatPlayer 3.9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URI in a playlist (.m3u) file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1860 - http://secunia.com/advisories/35756 - http://www.exploit-db.com/exploits/9102 - http://osvdb.org/55746 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51624
CVE ID: CVE-2009-3718 State: PUBLISHED Published: 2009-10-16T16:00:00 Last Updated: 2024-08-07T06:38:29.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/authenticate.asp in Battle Blog 1.25 and 1.30 build 2 allows remote attackers to execute arbitrary SQL commands via the UserName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9183 - http://full-discl0sure.blogspot.com/2009/07/battle-blog-sqlhtml-injection.html - http://www.securityfocus.com/bid/35726 - http://www.osvdb.org/55991 - http://secunia.com/advisories/35864
CVE ID: CVE-2009-3719 State: PUBLISHED Published: 2009-10-16T16:00:00 Last Updated: 2024-08-07T06:38:30.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in comment.asp in Battle Blog 1.25 and 1.30 build 2 allows remote attackers to inject arbitrary web script or HTML via a comment. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9183 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51807 - http://full-discl0sure.blogspot.com/2009/07/battle-blog-sqlhtml-injection.html - http://www.securityfocus.com/bid/35726 - http://secunia.com/advisories/35864
CVE ID: CVE-2009-3720 State: PUBLISHED Published: 2009-11-03T16:00:00 Last Updated: 2024-08-07T06:38:30.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625. Additional Analyst Notes: - CVE Program Container: References: - http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.486026 - http://svn.python.org
http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.486026 - http://svn.python.org/view?view=rev&revision=74429 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:215 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051442.html - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01274.html - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00370.html - http://secunia.com/advisories/38832 - http://www.redhat.com/support/errata/RHSA-2010-0002.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:216 - http://www.ubuntu.com/usn/USN-890-1 - http://expat.cvs.source
www.mandriva.com/security/advisories?name=MDVSA-2009:216 - http://www.ubuntu.com/usn/USN-890-1 - http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmltok_impl.c?r1=1.13&r2=1.15&view=patch - http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmltok_impl.c?view=log - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html - http://www.openwall.com/lists/oss-security/2009/10/22/9 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:220 - http://mail.python.org/pipermail/expat-bugs/2009-January/002781.html - http://secunia.com/advisories/38794 - http://lists.vmware.com/pipermail/security-announce/2010/000082.html - https://oval.cisecurity.org/repository/sea
8794 - http://lists.vmware.com/pipermail/security-announce/2010/000082.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11019 - http://www.vupen.com/english/advisories/2010/1107 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:211 - http://www.openwall.com/lists/oss-security/2009/08/26/4 - http://secunia.com/advisories/41701 - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html - http://www.openwall.com/lists/oss-security/2009/08/21/2 - http://secunia.com/advisories/37925 - http://secunia.com/advisories/38050 - http://www.securitytracker.com/id?1023160 - http://lists.opensuse.org/opensuse-security-announce/2010-
dvisories/38050 - http://www.securitytracker.com/id?1023160 - http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7112 - https://bugzilla.redhat.com/show_bug.cgi?id=531697 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051367.html - http://www.openwall.com/lists/oss-security/2009/10/23/2 - http://www.ubuntu.com/usn/USN-890-6 - http://www.openwall.com/lists/oss-security/2009/10/26/3 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051247.html - http://www.openwall.com/lists/oss-security/2009/08/26/3 - http://secunia.com/advisories/
nce/2010-November/051247.html - http://www.openwall.com/lists/oss-security/2009/08/26/3 - http://secunia.com/advisories/42338 - https://bugs.gentoo.org/show_bug.cgi?id=280615 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00413.html - http://secunia.com/advisories/38231 - http://www.vupen.com/english/advisories/2010/3053 - http://www.openwall.com/lists/oss-security/2009/10/28/3 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051228.html - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:212 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:
/www.mandriva.com/security/advisories?name=MDVSA-2009:212 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:218 - http://secunia.com/advisories/38834 - http://www.vupen.com/english/advisories/2010/3061 - http://sourceforge.net/tracker/index.php?func=detail&aid=1990430&group_id=10127&atid=110127 - http://secunia.com/advisories/39478 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://secunia.com/advisories/37537 - http://www.openwall.com/lists/oss-security/2009/10/22/5 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12719 - http://secunia.com/advisories/43300 - http://www.redhat.com/support/errata/RHSA-2011
al%3Aorg.mitre.oval%3Adef%3A12719 - http://secunia.com/advisories/43300 - http://www.redhat.com/support/errata/RHSA-2011-0896.html - http://www.vupen.com/english/advisories/2010/0896 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-273630-1 - http://marc.info/?l=bugtraq&m=130168502603566&w=2 - http://www.openwall.com/lists/oss-security/2009/08/27/6 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051405.html - http://www.openwall.com/lists/oss-security/2009/09/06/1 - http://www.openwall.com/lists/oss-security/2009/10/23/6 - http://www.vupen.com/english/advisories/2011/0359 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:219 - http://www.vupen.
n.com/english/advisories/2011/0359 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:219 - http://www.vupen.com/english/advisories/2010/3035 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:217 - http://secunia.com/advisories/37324 - http://secunia.com/advisories/42326 - http://www.vupen.com/english/advisories/2010/0528 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccv
pd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb8
919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E - htt
ists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f
e17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thre
l/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2009-3721 State: PUBLISHED Published: 2021-05-26T21:06:53 Last Updated: 2024-08-07T06:38:30.319Z Vendors: n/a Products: ytnef Problem Types: CWE-22 Description: Multiple directory traversal and buffer overflow vulnerabilities were discovered in yTNEF, and in Evolution's TNEF parser that is derived from yTNEF. A crafted email could cause these applications to write data in arbitrary locations on the filesystem, crash, or potentially execute arbitrary code when decoding attachments. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=521662 - http://www.ocert.org/advisories/ocert-2009-013.html
CVE ID: CVE-2009-3722 State: PUBLISHED Published: 2009-10-30T20:05:00 Last Updated: 2024-08-07T06:38:30.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: The handle_dr function in arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 2.6.31.1 does not properly verify the Current Privilege Level (CPL) before accessing a debug register, which allows guest OS users to cause a denial of service (trap) on the host OS via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9892 - http://marc.info/?l=oss-security&m=125678631403558&w=2 - http://www.ubu
/definition/oval%3Aorg.mitre.oval%3Adef%3A9892 - http://marc.info/?l=oss-security&m=125678631403558&w=2 - http://www.ubuntu.com/usn/usn-864-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 - https://bugzilla.redhat.com/show_bug.cgi?id=531660 - http://www.redhat.com/support/errata/RHSA-2010-0126.html - http://marc.info/?l=oss-security&m=125680666827148&w=2 - http://www.securityfocus.com/bid/37221 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.9 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc1 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit
g/pub/linux/kernel/v2.6/ChangeLog-2.6.31.1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0a79b009525b160081d75cef5dbf45817956acf2
CVE ID: CVE-2009-3723 State: PUBLISHED Published: 2019-10-29T12:42:08 Last Updated: 2024-08-07T06:38:30.400Z Vendors: asterisk Products: asterisk Problem Types: calls allowed on prohibited networks in asterisk Description: asterisk allows calls on prohibited networks Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2009-3723 - https://access.redhat.com/security/cve/cve-2009-3723 - http://downloads.asterisk.org/pub/security/AST-2009-007.html
CVE ID: CVE-2009-3724 State: PUBLISHED Published: 2020-01-15T20:02:54 Last Updated: 2024-08-07T06:38:30.237Z Vendors: python-markdown2 Products: python-markdown2 Problem Types: Cross-Site Scripting Description: python-markdown2 before 1.0.1.14 has multiple cross-site scripting (XSS) issues. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2009/10/29/5 - https://snyk.io/vuln/SNYK-PYTHON-PYRAD-40000
CVE ID: CVE-2009-3725 State: PUBLISHED Published: 2009-11-06T15:00:00 Last Updated: 2024-08-07T06:38:30.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: The connector layer in the Linux kernel before 2.6.31.5 does not require the CAP_SYS_ADMIN capability for certain interaction with the (1) uvesafb, (2) pohmelfs, (3) dst, or (4) dm subsystem, which allows local users to bypass intended access restrictions and gain privileges via calls to functions in these subsystems. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.5 - http://secunia.com/advisories/38905 - http://marc.info/?l=linux-kernel&m=125449888
inux/kernel/v2.6/ChangeLog-2.6.31.5 - http://secunia.com/advisories/38905 - http://marc.info/?l=linux-kernel&m=125449888416314&w=2 - http://www.ubuntu.com/usn/usn-864-1 - http://xorl.wordpress.com/2009/10/31/linux-kernel-multiple-capabilities-missing-checks/ - http://patchwork.kernel.org/patch/51383/ - http://secunia.com/advisories/37113 - http://patchwork.kernel.org/patch/51387/ - http://patchwork.kernel.org/patch/51382/ - http://marc.info/?l=oss-security&m=125716192622235&w=2 - http://marc.info/?l=oss-security&m=125715484511380&w=2 - http://patchwork.kernel.org/patch/51384/ - http://www.securityfocus.com/bid/36834
CVE ID: CVE-2009-3726 State: PUBLISHED Published: 2009-11-09T19:00:00 Last Updated: 2024-08-07T06:38:30.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nfs4_proc_lock function in fs/nfs/nfs4proc.c in the NFSv4 client in the Linux kernel before 2.6.31-rc4 allows remote NFS servers to cause a denial of service (NULL pointer dereference and panic) by sending a certain response containing incorrect file attributes, which trigger attempted use of an open file that lacks NFSv4 state. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=529227 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh
illa.redhat.com/show_bug.cgi?id=529227 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d953126a28f97ec965d23c69fd5795854c048f30 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9734 - http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html - http://www.ubuntu.com/usn/usn-864-1 - http://secunia.com/advisories/38794 - http://lists.vmware.com/pipermail/security-announce/2010/000082.html - http://www.securityfocus.com/bid/36936 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:329 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6636 - http://lists.open