Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-5071 State: PUBLISHED Published: 2011-04-19T19:00:00Z Last Updated: 2024-09-16T18:49:13.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Palm Pre WebOS before 1.2.1 has unknown impact and attack vectors related to an "included contact template file." Additional Analyst Notes: - CVE Program Container: References: - http://kb.palm.com/wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html#121
CVE ID: CVE-2009-5072 State: PUBLISHED Published: 2011-04-21T10:00:00Z Last Updated: 2024-09-16T16:17:55.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the ldap_explode_dn function in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.61 (aka 6.0.0.8-TIV-ITDS-IF0003) allows remote authenticated users to cause a denial of service (memory consumption) via an empty string argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg1IO11407 - http://www.ibm.com/support/docview.wss?uid=swg24029672
CVE ID: CVE-2009-5073 State: PUBLISHED Published: 2011-04-21T10:00:00Z Last Updated: 2024-09-16T22:40:49.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.59 (aka 6.0.0.8-TIV-ITDS-IF0001) allows remote authenticated users to cause a denial of service (infinite loop and daemon hang) by adding a nested group that contains the Distinguished Name (DN) of its parent entry. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg1IO10802 - http://www.ibm.com/support/docview.wss?uid=swg24029672
CVE ID: CVE-2009-5074 State: PUBLISHED Published: 2011-05-03T00:03:00Z Last Updated: 2024-09-16T22:25:37.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the MojoX::Dispatcher::Static implementation in Mojolicious before 0.991250 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://cpansearch.perl.org/src/KRAIH/Mojolicious-1.20/Changes
CVE ID: CVE-2009-5075 State: PUBLISHED Published: 2011-05-20T22:00:00Z Last Updated: 2024-09-16T18:24:54.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Monkey's Audio before 4.02 allows remote attackers to cause a denial of service (application crash) via a malformed APE file. Additional Analyst Notes: - CVE Program Container: References: - http://www.monkeysaudio.com/versionhistory.html
CVE ID: CVE-2009-5076 State: PUBLISHED Published: 2011-06-08T10:00:00Z Last Updated: 2024-09-16T16:17:52.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRE Loaded before 6.2.14, and possibly other versions before 6.3.x, allows remote attackers to bypass authentication and gain administrator privileges via a request with (1) login.php or (2) password_forgotten.php appended as the PATH_INFO, which bypasses a check that uses PHP_SELF, which is not properly handled by (a) includes/application_top.php and (b) admin/includes/application_top.php, as exploited in the wild in 2009. Additional Analyst Notes: - CVE Program Container: References: - http://hosting-4-creloaded.com/node/11
he wild in 2009. Additional Analyst Notes: - CVE Program Container: References: - http://hosting-4-creloaded.com/node/116 - https://www.creloaded.com/fdm_file_detail.php?file_id=191
CVE ID: CVE-2009-5077 State: PUBLISHED Published: 2011-06-08T15:00:00Z Last Updated: 2024-09-16T19:56:54.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRE Loaded before 6.2.14 allows remote attackers to bypass authentication and gain administrator privileges via vectors related to a modified PHP_SELF variable, which is not properly handled by (1) includes/application_top.php and (2) admin/includes/application_top.php. Additional Analyst Notes: - CVE Program Container: References: - http://hosting-4-creloaded.com/node/116
CVE ID: CVE-2009-5078 State: PUBLISHED Published: 2011-06-30T15:26:00 Last Updated: 2024-08-07T07:24:54.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 launches the Ghostscript program without the -dSAFER option, which allows remote attackers to create, overwrite, rename, or delete arbitrary files via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2009/08/09/1 - http://openwall.com/lists/oss-security/2009/08/10/2 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=538338 - http://www.securityfocus.com/bid/36381 - ftp://ftp.gnu.org/gnu/gro
://bugs.debian.org/cgi-bin/bugreport.cgi?bug=538338 - http://www.securityfocus.com/bid/36381 - ftp://ftp.gnu.org/gnu/groff/groff-1.20.1-1.21.diff.gz - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - https://support.apple.com/kb/HT205031
CVE ID: CVE-2009-5079 State: PUBLISHED Published: 2011-06-30T15:26:00 Last Updated: 2024-08-07T07:24:54.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) gendef.sh, (2) doc/fixinfo.sh, and (3) contrib/gdiffmk/tests/runtests.in scripts in GNU troff (aka groff) 1.21 and earlier allow local users to overwrite arbitrary files via a symlink attack on a gro#####.tmp or /tmp/##### temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2009/08/14/4 - http://openwall.com/lists/oss-security/2009/08/14/5 - http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/groff/groff-1.20.1-owl-tmp.diff.diff?r1=1.1%3Br2=1.2%3Bf=
/14/5 - http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/groff/groff-1.20.1-owl-tmp.diff.diff?r1=1.1%3Br2=1.2%3Bf=h - http://www.mandriva.com/security/advisories?name=MDVSA-2013:085 - http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/groff/groff-1.20.1-owl-tmp.diff - http://www.mandriva.com/security/advisories?name=MDVSA-2013:086
CVE ID: CVE-2009-5080 State: PUBLISHED Published: 2011-06-30T15:26:00 Last Updated: 2024-08-07T07:24:54.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh scripts in GNU troff (aka groff) 1.21 and earlier do not properly handle certain failed attempts to create temporary directories, which might allow local users to overwrite arbitrary files via a symlink attack on a file in a temporary directory, a different vulnerability than CVE-2004-1296. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2009/08/14/4 - http
itional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2009/08/14/4 - http://openwall.com/lists/oss-security/2009/08/14/5 - http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/groff/groff-1.20.1-owl-tmp.diff.diff?r1=1.1%3Br2=1.2%3Bf=h - http://www.mandriva.com/security/advisories?name=MDVSA-2013:085 - http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/groff/groff-1.20.1-owl-tmp.diff - http://www.mandriva.com/security/advisories?name=MDVSA-2013:086
CVE ID: CVE-2009-5081 State: PUBLISHED Published: 2011-06-30T15:26:00 Last Updated: 2024-08-07T07:24:54.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) config.guess, (2) contrib/groffer/perl/groffer.pl, and (3) contrib/groffer/perl/roff2.pl scripts in GNU troff (aka groff) 1.21 and earlier use an insufficient number of X characters in the template argument to the tempfile function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file, a different vulnerability than CVE-2004-0969. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2009/08/14/4 - http://openwall.c
st Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2009/08/14/4 - http://openwall.com/lists/oss-security/2009/08/14/5 - http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/groff/groff-1.20.1-owl-tmp.diff.diff?r1=1.1%3Br2=1.2%3Bf=h - http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/groff/groff-1.20.1-owl-tmp.diff - http://www.mandriva.com/security/advisories?name=MDVSA-2013:086
CVE ID: CVE-2009-5082 State: PUBLISHED Published: 2011-06-30T15:26:00Z Last Updated: 2024-09-16T20:22:44.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) configure and (2) config.guess scripts in GNU troff (aka groff) 1.20.1 on Openwall GNU/*/Linux (aka Owl) improperly create temporary files upon a failure of the mktemp function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2009/08/14/4 - http://openwall.com/lists/oss-security/2009/08/14/5 - http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/groff/gr
- http://openwall.com/lists/oss-security/2009/08/14/5 - http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/groff/groff-1.20.1-owl-tmp.diff.diff?r1=1.1%3Br2=1.2%3Bf=h - http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/groff/groff-1.20.1-owl-tmp.diff
CVE ID: CVE-2009-5083 State: PUBLISHED Published: 2011-08-12T17:00:00Z Last Updated: 2024-09-17T04:03:56.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2, when configured as an OpenID relying party, does not perform the expected login rejection upon receiving an OP-Identifier from an OpenID provider, which allows remote attackers to bypass authentication via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ44571 - http://www.ibm.com/support/docview.wss?uid=swg24029497
CVE ID: CVE-2009-5084 State: PUBLISHED Published: 2011-08-12T17:00:00Z Last Updated: 2024-09-17T01:25:31.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2, when com.tivoli.am.fim.infocard.delegates.InfoCardSTSDelegate tracing is enabled, creates a cleartext log entry containing a password, which might allow local users to obtain sensitive information by reading the log data. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ44560 - http://www.ibm.com/support/docview.wss?uid=swg24029497
CVE ID: CVE-2009-5085 State: PUBLISHED Published: 2011-08-12T17:00:00Z Last Updated: 2024-09-16T20:48:10.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2, when configured as an OpenID provider, does not delete the site information cookie in response to a user's deletion of a relying-party trust entry, which allows user-assisted remote attackers to bypass intended trust restrictions via vectors that trigger absence of the consent-to-authenticate page. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ44555 - http://www.ibm.com/support/docview.wss?
ainer: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ44555 - http://www.ibm.com/support/docview.wss?uid=swg24029497
CVE ID: CVE-2009-5086 State: PUBLISHED Published: 2011-09-02T17:00:00 Last Updated: 2024-08-07T07:24:54.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Appliance Configuration Manager (ACM) in Juniper IDP 4.1 before 4.1r3 and 4.2 before 4.2r1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000071.html - http://s-tools1.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2009-01-191&viewMode=view - http://jvn.jp/en/jp/JVN44642341/index.html
CVE ID: CVE-2009-5087 State: PUBLISHED Published: 2011-09-09T23:00:00 Last Updated: 2024-08-07T07:24:54.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in geohttpserver in Geovision Digital Video Surveillance System 8.2 allows remote attackers to read arbitrary files via a .. (dot dot) in a GET request. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8372 - http://www.exploit-db.com/exploits/8041 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48674 - http://www.securityfocus.com/bid/33735 - http://www.securityfocus.com/archive/1/500858/100/0/threaded - http://osvdb.org/51886 - h
.securityfocus.com/bid/33735 - http://www.securityfocus.com/archive/1/500858/100/0/threaded - http://osvdb.org/51886 - http://secunia.com/advisories/33924
CVE ID: CVE-2009-5088 State: PUBLISHED Published: 2011-09-09T23:00:00 Last Updated: 2024-08-07T07:24:54.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in secure/index.php in IdeaCart 0.02 allows remote attackers to execute arbitrary SQL commands via the cID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33765 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48730 - http://www.exploit-db.com/exploits/8049
CVE ID: CVE-2009-5089 State: PUBLISHED Published: 2011-09-09T23:00:00 Last Updated: 2024-08-07T07:24:54.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in IdeaCart 0.02 and 0.02a allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33765 - http://www.exploit-db.com/exploits/8049 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48731 - http://secunia.com/advisories/33941
CVE ID: CVE-2009-5090 State: PUBLISHED Published: 2011-09-09T23:00:00 Last Updated: 2024-08-07T07:24:54.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in editcomments.php in Bloggeruniverse Beta 2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter and possibly other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8043 - http://www.securityfocus.com/bid/33744 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48697
CVE ID: CVE-2009-5091 State: PUBLISHED Published: 2011-09-09T23:00:00 Last Updated: 2024-08-07T07:24:54.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in page.php in Vlinks 1.0.3 and 1.1.6 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48729 - http://www.exploit-db.com/exploits/8050 - http://www.securityfocus.com/bid/33766 - http://secunia.com/advisories/33931
CVE ID: CVE-2009-5092 State: PUBLISHED Published: 2011-09-09T23:00:00 Last Updated: 2024-08-07T07:24:54.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the management interface in Microsoft FAST ESP 5.1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48680 - http://secunia.com/advisories/33803 - http://www.securityfocus.com/bid/33750 - http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000009.html - http://technet.microsoft.com/en-us/security/cc308575 - http://jvn.jp
db.jvn.jp/ja/contents/2009/JVNDB-2009-000009.html - http://technet.microsoft.com/en-us/security/cc308575 - http://jvn.jp/en/jp/JVN45184501/index.html
CVE ID: CVE-2009-5093 State: PUBLISHED Published: 2011-09-09T23:00:00 Last Updated: 2024-08-07T07:24:54.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in gastbuch.php in Gästebuch (Gastebuch) 1.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the start parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33707 - http://www.exploit-db.com/exploits/8027 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48644
CVE ID: CVE-2009-5094 State: PUBLISHED Published: 2011-09-09T23:00:00 Last Updated: 2024-08-07T07:24:54.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in info.php in CMS Faethon 2.2.0 Ultimate allows remote attackers to execute arbitrary SQL commands via the item parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30098 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48758 - http://www.securityfocus.com/bid/33775 - http://www.exploit-db.com/exploits/8054
CVE ID: CVE-2009-5095 State: PUBLISHED Published: 2011-09-09T23:00:00 Last Updated: 2024-08-07T07:24:54.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index_inc.php in ea gBook 0.1 and 0.1.4 allows remote attackers to execute arbitrary PHP code via a URL in the inc_ordner parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33774 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48759 - http://www.exploit-db.com/exploits/8052 - http://secunia.com/advisories/33927
CVE ID: CVE-2009-5096 State: PUBLISHED Published: 2011-09-13T19:00:00 Last Updated: 2024-08-07T07:24:54.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Flag Content module 5.x-2.x before 5.x-2.10 for Drupal allows remote attackers to inject arbitrary web script or HTML via the Reason parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37124 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53900 - http://osvdb.org/59119 - http://drupal.org/node/610870 - http://www.vupen.com/english/advisories/2009/2999 - http://drupal.org/node/610868 - http://www.securityfocus.com/bid/36
http://www.vupen.com/english/advisories/2009/2999 - http://drupal.org/node/610868 - http://www.securityfocus.com/bid/36785
CVE ID: CVE-2009-5097 State: PUBLISHED Published: 2011-09-13T19:00:00Z Last Updated: 2024-09-17T01:21:25.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote attackers to execute arbitrary JavaScript, as demonstrated by reading PalmDatabase.db3. Additional Analyst Notes: - CVE Program Container: References: - http://kb.palm.com/wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html#12 - http://www.securitytracker.com/id?1022987 - http://tlhsecurity.blogspot.com/2009/10/palm-pre-webos-11-remote-file-access.html - http://www.precentral.net/webos-1-2-fixed-serious-file-security-iss
/2009/10/palm-pre-webos-11-remote-file-access.html - http://www.precentral.net/webos-1-2-fixed-serious-file-security-issue - http://secunia.com/advisories/36936
CVE ID: CVE-2009-5098 State: PUBLISHED Published: 2011-09-13T19:00:00 Last Updated: 2024-08-07T07:24:54.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LunaSysMgr process in Palm Pre WebOS 1.1 and earlier, when not viewing web pages in landscape mode, allows remote attackers to cause a denial of service (crash) via a web page containing a long string following a refresh tag, which triggers a floating point exception. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/507126/100/0/threaded - http://kb.palm.com/wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html#12 - http://tlhsecurity.blogspot.com/2009/10
alm.com/wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html#12 - http://tlhsecurity.blogspot.com/2009/10/palm-pre-webos-version-11-floating.html - http://securityreason.com/securityalert/8373 - http://secunia.com/advisories/36936
CVE ID: CVE-2009-5099 State: PUBLISHED Published: 2011-09-13T19:00:00 Last Updated: 2024-08-07T07:24:54.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ViewAction in Pentaho BI Server 1.7.0.1062 and earlier allows remote attackers to inject arbitrary web script or HTML via the outputType parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37024 - http://jira.pentaho.com/browse/BISERVER-2698?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel - http://antisnatchor.com/2009/06/20/pentaho-1701062-multiple-vulnerabilities/ - http://www.securityfocus.com/archive/1/507168
://antisnatchor.com/2009/06/20/pentaho-1701062-multiple-vulnerabilities/ - http://www.securityfocus.com/archive/1/507168/100/0/threaded - http://www.vupen.com/english/advisories/2009/2972
CVE ID: CVE-2009-5100 State: PUBLISHED Published: 2011-09-13T19:00:00 Last Updated: 2024-08-07T07:24:54.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pentaho BI Server 1.7.0.1062 and earlier does not set the autocomplete tag to off on web pages using a password field, which might allow physically proximate attackers to obtain the password. Additional Analyst Notes: - CVE Program Container: References: - http://jira.pentaho.com/browse/BISERVER-2698?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel - http://antisnatchor.com/2009/06/20/pentaho-1701062-multiple-vulnerabilities/ - http://www.securityfocus.com/archive/1/507168/100/0/threaded
CVE ID: CVE-2009-5101 State: PUBLISHED Published: 2011-09-13T19:00:00 Last Updated: 2024-08-07T07:24:54.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pentaho BI Server 1.7.0.1062 and earlier includes the session ID (JSESSIONID) in the URL, which allows attackers to obtain it from session history, referer headers, or sniffing of web traffic. Additional Analyst Notes: - CVE Program Container: References: - http://antisnatchor.com/2009/06/20/pentaho-1701062-multiple-vulnerabilities/ - http://www.securityfocus.com/archive/1/507168/100/0/threaded - http://jira.pentaho.com/browse/BISERVER-3245
CVE ID: CVE-2009-5102 State: PUBLISHED Published: 2011-10-21T10:00:00Z Last Updated: 2024-09-16T20:07:17.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in ATCOM Netvolution 1.0 ASP allows remote attackers to execute arbitrary SQL commands via the bpe_nid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/7761/
CVE ID: CVE-2009-5103 State: PUBLISHED Published: 2011-10-21T10:00:00Z Last Updated: 2024-09-17T02:53:15.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ATCOM Netvolution 1.0 ASP allows remote attackers to inject arbitrary web script or HTML via the email variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/7761/
CVE ID: CVE-2009-5104 State: REJECTED Published: 2020-11-05T20:00:33 Last Updated: 2020-11-05T20:00:33 Description: No description available.
CVE ID: CVE-2009-5105 State: REJECTED Published: 2020-11-05T20:01:01 Last Updated: 2020-11-05T20:01:01 Description: No description available.
CVE ID: CVE-2009-5106 State: REJECTED Published: 2020-11-05T20:01:33 Last Updated: 2020-11-05T20:01:33 Description: No description available.
CVE ID: CVE-2009-5107 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-5108 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.