Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ences: - http://www.securityfocus.com/archive/1/504995/100/0/threaded - http://blog.zoller.lu/2009/04/ibm-proventia-evasion-limited-details.html - http://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=5417 - http://www.securityfocus.com/bid/34345 - http://www.securityfocus.com/archive/1/504987/100/0/threaded - http://www.securityfocus.com/archive/1/502369/100/0/threaded - http://www.securityfocus.com/archive/1/504992/100/0/threaded
CVE ID: CVE-2009-1241 State: PUBLISHED Published: 2009-04-03T18:00:00 Last Updated: 2024-08-07T05:04:49.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ClamAV before 0.95 allows remote attackers to bypass detection of malware via a modified RAR archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:097 - http://www.vupen.com/english/advisories/2009/0934 - http://www.securityfocus.com/bid/34344 - http://www.securityfocus.com/archive/1/502366/100/0/threaded - http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html - http://blog.zoller.lu/2009/04/clamav-09
ded - http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html - http://blog.zoller.lu/2009/04/clamav-094-and-below-evasion-and-bypass.html - http://www.openwall.com/lists/oss-security/2009/04/07/6 - http://support.apple.com/kb/HT3865 - http://secunia.com/advisories/36701 - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html
CVE ID: CVE-2009-1242 State: PUBLISHED Published: 2009-04-06T14:00:00 Last Updated: 2024-08-07T05:04:49.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vmx_set_msr function in arch/x86/kvm/vmx.c in the VMX implementation in the KVM subsystem in the Linux kernel before 2.6.29.1 on the i386 platform allows guest OS users to cause a denial of service (OOPS) by setting the EFER_LME (aka "Long mode enable") bit in the Extended Feature Enable Register (EFER) model-specific register, which is specific to the x86_64 platform. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.29-git1.log - http://www.gl
ram Container: References: - http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.29-git1.log - http://www.globalsecuritymag.com/Vigil-nce-Linux-kernel-denial-of%2C20090402%2C8311 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49594 - http://secunia.com/advisories/35226 - http://patchwork.kernel.org/patch/15549/ - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29.1 - http://secunia.com/advisories/34478 - http://www.securityfocus.com/bid/34331 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=16175a796d061833aacfbd9672235f2d2725df65 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01126.html - http://lists.open
d9672235f2d2725df65 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01126.html - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html - http://secunia.com/advisories/35656 - http://www.securityfocus.com/archive/1/503610/100/0/threaded - http://vigilance.fr/vulnerability/Linux-kernel-denial-of-service-via-EFER-8585 - http://secunia.com/advisories/35120 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html - http://www.ubuntu.com/usn/usn-793-1 - http://secunia.com/advisories/34981 - http://www.debian.org/security/2009/dsa-1800 - http://secunia.com/advisories/35387 - http://www.debian.org/security/2009/dsa-1787 - http://wiki.rpa
ity/2009/dsa-1800 - http://secunia.com/advisories/35387 - http://www.debian.org/security/2009/dsa-1787 - http://wiki.rpath.com/Advisories:rPSA-2009-0084 - http://openwall.com/lists/oss-security/2009/04/01/3 - http://secunia.com/advisories/35121 - http://www.vupen.com/english/advisories/2009/0924 - https://bugzilla.redhat.com/show_bug.cgi?id=502109 - http://secunia.com/advisories/35394
CVE ID: CVE-2009-1243 State: PUBLISHED Published: 2009-04-06T14:00:00 Last Updated: 2024-08-07T05:04:49.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/ipv4/udp.c in the Linux kernel before 2.6.29.1 performs an unlocking step in certain incorrect circumstances, which allows local users to cause a denial of service (panic) by reading zero bytes from the /proc/net/udp file and unspecified other files, related to the "udp seq_file infrastructure." Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29.1 - http://secunia.com/advisories/34478 - http://openwall.com/lists/oss-security/2009/04/01/4 - http://ww
angeLog-2.6.29.1 - http://secunia.com/advisories/34478 - http://openwall.com/lists/oss-security/2009/04/01/4 - http://www.securityfocus.com/bid/34329 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49595 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=30842f2989aacfaba3ccb39829b3417be9313dbe - http://vigilance.fr/vulnerability/Linux-kernel-denial-of-service-via-proc-net-udp-8586 - http://www.vupen.com/english/advisories/2009/0924
CVE ID: CVE-2009-1244 State: PUBLISHED Published: 2009-04-13T16:00:00 Last Updated: 2024-08-07T05:04:49.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the virtual machine display function in VMware Workstation 6.5.1 and earlier; VMware Player 2.5.1 and earlier; VMware ACE 2.5.1 and earlier; VMware Server 1.x before 1.0.9 build 156507 and 2.x before 2.0.1 build 156745; VMware Fusion before 2.0.4 build 159196; VMware ESXi 3.5; and VMware ESX 3.0.2, 3.0.3, and 3.5 allows guest OS users to execute arbitrary code on the host OS via unknown vectors, a different vulnerability than CVE-2008-4916. Additional Analyst Notes: - CVE Program Container: Referen
nknown vectors, a different vulnerability than CVE-2008-4916. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201209-25.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/49834 - http://www.securityfocus.com/bid/34471 - http://www.securitytracker.com/id?1022031 - http://osvdb.org/53634 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6065 - http://www.vmware.com/security/advisories/VMSA-2009-0006.html - http://www.vupen.com/english/advisories/2009/0944 - http://lists.vmware.com/pipermail/security-announce/2009/000055.html - http://www.securityfocus.com/archive/1/502615/100/0/threaded
CVE ID: CVE-2009-1245 State: PUBLISHED Published: 2009-04-06T16:00:00 Last Updated: 2024-08-07T05:04:49.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the insert_to_pastebin function in php/cccp-admin/inc/functions.php in CCCP Community Clan Portal Pastebin before 2.80 allow remote attackers to execute arbitrary SQL commands via the (1) subject, (2) language, and (3) nickname parameters to php/cccp-pages/submit.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34264 - http://sourceforge.net/project/shownotes.php
E Program Container: References: - http://www.securityfocus.com/bid/34264 - http://sourceforge.net/project/shownotes.php?release_id=670960 - http://jcsfog.cvs.sourceforge.net/viewvc/jcsfog/CCCP-Pastebin/php/cccp-admin/inc/functions.php?r1=1.10&r2=1.11 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49426 - http://secunia.com/advisories/34474
CVE ID: CVE-2009-1246 State: PUBLISHED Published: 2009-04-06T16:00:00 Last Updated: 2024-08-07T05:04:49.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Blogplus 1.0 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) row_mysql_blocks_center_down[file] parameter to includes/block_center_down.php; (2) row_mysql_blocks_center_top[file] includes/parameter to block_center_top.php; (3) row_mysql_blocks_left[file] parameter to includes/block_left.php; (4) row_mysql_blocks_right[file] parameter to includes/block_right.php; and row_mysql_bloginfo[theme] parameter to (5) includes/window_down.p
right[file] parameter to includes/block_right.php; and row_mysql_bloginfo[theme] parameter to (5) includes/window_down.php and (6) includes/window_top.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34261 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49446 - https://www.exploit-db.com/exploits/8290
CVE ID: CVE-2009-1247 State: PUBLISHED Published: 2009-04-06T16:00:00 Last Updated: 2024-08-07T05:04:49.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in Acute Control Panel 1.0.0 allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8291 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49444 - http://www.securityfocus.com/bid/34265 - http://secunia.com/advisories/34485
CVE ID: CVE-2009-1248 State: PUBLISHED Published: 2009-04-06T16:00:00 Last Updated: 2024-08-07T05:04:49.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Acute Control Panel 1.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the theme_directory parameter to (1) container.php and (2) header.php in themes/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8291 - http://www.securityfocus.com/bid/34265 - http://secunia.com/advisories/34485 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49443
CVE ID: CVE-2009-1249 State: PUBLISHED Published: 2009-04-06T16:00:00Z Last Updated: 2024-09-17T03:23:24.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Feed element mapper 5.x before 5.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the content title in admin/content/node-type/nodetype/map. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34266 - http://drupal.org/node/414702 - http://secunia.com/advisories/34497 - http://drupal.org/node/414644
CVE ID: CVE-2009-1250 State: PUBLISHED Published: 2009-04-09T00:00:00 Last Updated: 2024-08-07T05:04:49.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service (system crash) via an RX response with a large error-code value that is interpreted as a pointer and dereferenced, related to use of the ERR_PTR macro. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0117 - http://www.openafs.org/security/openafs-sa-2009-002.patch - http://www.openafs.or
pen.com/english/advisories/2011/0117 - http://www.openafs.org/security/openafs-sa-2009-002.patch - http://www.openafs.org/security/OPENAFS-SA-2009-002.txt - http://www.vupen.com/english/advisories/2009/0984 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:099 - http://www.securityfocus.com/bid/34404 - http://secunia.com/advisories/36310 - http://secunia.com/advisories/34655 - http://www.debian.org/security/2009/dsa-1768 - http://www-1.ibm.com/support/docview.wss?uid=swg1ID71123 - http://www-01.ibm.com/support/docview.wss?uid=swg21396389 - http://security.gentoo.org/glsa/glsa-201101-05.xml - http://secunia.com/advisories/34684 - http://secunia.com/advisories/42896
CVE ID: CVE-2009-1251 State: PUBLISHED Published: 2009-04-09T00:00:00 Last Updated: 2024-08-07T05:04:49.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via an RX response containing more data than specified in a request, related to use of XDR arrays. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0117 - http://www.openafs.org/security/OPENAFS-SA-2009-001.txt - http://www.openafs.or
vupen.com/english/advisories/2011/0117 - http://www.openafs.org/security/OPENAFS-SA-2009-001.txt - http://www.openafs.org/security/openafs-sa-2009-001.patch - http://www.vupen.com/english/advisories/2009/0984 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:099 - http://www.securityfocus.com/bid/34407 - http://secunia.com/advisories/34655 - http://www.debian.org/security/2009/dsa-1768 - http://security.gentoo.org/glsa/glsa-201101-05.xml - http://secunia.com/advisories/34684 - http://secunia.com/advisories/42896
CVE ID: CVE-2009-1252 State: PUBLISHED Published: 2009-05-19T19:00:00 Last Updated: 2024-08-07T05:04:49.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/777-1/ - http://secunia.com/advisories/35137 - http://secunia.com/advisories/35166 - http://secunia.com/advisories/37470 - http://secunia.com/advisories/35388 - http://secunia
ecunia.com/advisories/35166 - http://secunia.com/advisories/37470 - http://secunia.com/advisories/35388 - http://secunia.com/advisories/35243 - http://secunia.com/advisories/37471 - http://www.debian.org/security/2009/dsa-1801 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01449.html - http://secunia.com/advisories/35308 - http://secunia.com/advisories/35253 - https://support.ntp.org/bugs/show_bug.cgi?id=1151 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:117 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0092 - http://www.securitytracker.com/id?1022243 - http://secunia.com/advisories/351
rpath.com/wiki/Advisories:rPSA-2009-0092 - http://www.securitytracker.com/id?1022243 - http://secunia.com/advisories/35138 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.566238 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01414.html - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00293.html - http://secunia.com/advisories/35630 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - https://launchpad.net/bugs/cve/2009-1252 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11231
ad.net/bugs/cve/2009-1252 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11231 - https://bugzilla.redhat.com/show_bug.cgi?id=499694 - http://www.securityfocus.com/bid/35017 - http://rhn.redhat.com/errata/RHSA-2009-1040.html - http://security.freebsd.org/advisories/FreeBSD-SA-09:11.ntpd.asc - http://secunia.com/advisories/35416 - http://www.kb.cert.org/vuls/id/853097 - http://secunia.com/advisories/35336 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-006.txt.asc - http://rhn.redhat.com/errata/RHSA-2009-1039.html - http://www.vupen.com/english/advisories/2009/1361 - https://oval.cisecurity.org/repository/search/definition/oval%3Aor
- http://www.vupen.com/english/advisories/2009/1361 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6307 - http://secunia.com/advisories/35169 - http://www.gentoo.org/security/en/glsa/glsa-200905-08.xml - http://www.vupen.com/english/advisories/2009/3316
CVE ID: CVE-2009-1253 State: PUBLISHED Published: 2009-04-09T00:00:00 Last Updated: 2024-08-07T05:04:49.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: James Stone Tunapie 2.1 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/bugs/314591 - https://launchpad.net/bugs/cve/2009-1253 - http://www.vupen.com/english/advisories/2009/0972 - http://secunia.com/advisories/34643 - http://www.debian.org/security/2009/dsa-1764 - http://osvdb.org/53426 - http://www.securityfocus.com/bid/34417
CVE ID: CVE-2009-1254 State: PUBLISHED Published: 2009-04-09T00:00:00 Last Updated: 2024-08-07T05:04:49.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: James Stone Tunapie 2.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a stream URL. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/bugs/314591 - https://launchpad.net/bugs/cve/2009-1254 - http://www.securityfocus.com/bid/34418 - http://www.vupen.com/english/advisories/2009/0972 - http://osvdb.org/53427 - http://secunia.com/advisories/34643 - http://www.debian.org/security/2009/dsa-1764
CVE ID: CVE-2009-1255 State: PUBLISHED Published: 2009-04-30T20:00:00 Last Updated: 2024-08-07T05:04:49.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: The process_stat function in (1) Memcached before 1.2.8 and (2) MemcacheDB 1.2.0 discloses (a) the contents of /proc/self/maps in response to a stats maps command and (b) memory-allocation statistics in response to a stats malloc command, which allows remote attackers to obtain sensitive information such as the locations of memory regions, and defeat ASLR protection, by sending a command to the daemon's TCP port. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-ann
ort. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01256.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/50221 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:105 - http://www.positronsecurity.com/advisories/2009-001.html - http://www.securitytracker.com/id?1022140 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00851.html - http://code.google.com/p/memcachedb/source/diff?spec=svn98&r=98&format=side&path=/trunk/memcachedb.c - http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0282.html - http://www.securityfocus.com/archive/1/503064/100/0/threaded
.neohapsis.com/archives/fulldisclosure/2009-04/0282.html - http://www.securityfocus.com/archive/1/503064/100/0/threaded - http://groups.google.com/group/memcached/browse_thread/thread/ff96a9b88fb5d40e - http://secunia.com/advisories/35175 - http://osvdb.org/54127 - http://code.google.com/p/memcachedb/source/browse/trunk/ChangeLog?spec=svn98&r=98 - http://code.google.com/p/memcachedb/source/detail?r=98 - http://www.securityfocus.com/bid/34756 - http://www.vupen.com/english/advisories/2009/1196 - http://secunia.com/advisories/34932 - http://secunia.com/advisories/34915 - http://www.vupen.com/english/advisories/2009/1197
CVE ID: CVE-2009-1256 State: PUBLISHED Published: 2009-04-07T23:00:00 Last Updated: 2024-08-07T05:04:49.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in FlexCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the ItemId parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8355 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49680 - http://www.securityfocus.com/bid/34394
CVE ID: CVE-2009-1257 State: PUBLISHED Published: 2009-04-07T23:00:00 Last Updated: 2024-08-07T05:04:49.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Magic ISO Maker 5.5 build 0274 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted CCD file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34595 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49673 - http://osvdb.org/53262 - http://www.vupen.com/english/advisories/2009/0940 - https://www.exploit-db.com/exploits/8343 - http://www.securityfocus.com/bid/34574
CVE ID: CVE-2009-1258 State: PUBLISHED Published: 2009-04-07T23:00:00 Last Updated: 2024-08-07T05:04:49.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the RD-Autos (com_rdautos) component 1.5.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the makeid parameter in index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34578 - http://www.securityfocus.com/bid/34364 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49671 - http://osvdb.org/53138
CVE ID: CVE-2009-1259 State: PUBLISHED Published: 2009-04-07T23:00:00 Last Updated: 2024-08-07T05:04:49.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in inc/bb/topic.php in Insane Visions AdaptBB 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the topic_id parameter in a topic action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49681 - http://www.securityfocus.com/bid/34371 - https://www.exploit-db.com/exploits/8351
CVE ID: CVE-2009-1260 State: PUBLISHED Published: 2009-04-07T23:00:00 Last Updated: 2024-08-07T05:04:49.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in UltraISO 9.3.3.2685 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted (1) CCD or (2) IMG file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49672 - http://www.securityfocus.com/bid/34363 - http://osvdb.org/53275 - http://www.vupen.com/english/advisories/2009/0935 - https://www.exploit-db.com/exploits/8343 - http://secunia.com/advisories/34581
CVE ID: CVE-2009-1261 State: PUBLISHED Published: 2009-04-07T23:00:00 Last Updated: 2024-08-07T05:04:49.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Web Help Desk 9.1.22 (evaluation version) allow remote attackers to inject arbitrary web script or HTML via the (1) Report Name, (2) Asset No., and (3) Full Name fields in a Models action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/53423 - http://www.securityfocus.com/bid/34391 - http://osvdb.org/53424 - http://secunia.co
ferences: - http://osvdb.org/53423 - http://www.securityfocus.com/bid/34391 - http://osvdb.org/53424 - http://secunia.com/advisories/34596 - http://osvdb.org/53422 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49683
CVE ID: CVE-2009-1262 State: PUBLISHED Published: 2009-04-07T23:00:00 Last Updated: 2024-08-07T05:04:49.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Fortinet FortiClient 3.0.614, and possibly earlier, allows local users to execute arbitrary code via format string specifiers in the VPN connection name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/502602/100/0/threaded - http://www.layereddefense.com/FortiClient02Apr.html - http://secunia.com/advisories/34524 - http://www.securityfocus.com/bid/34343 - http://osvdb.org/53266 - http://www.vupen.com/english/advisories/2009/0941 - http://ww