Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-2926 State: PUBLISHED Published: 2009-08-21T20:21:00 Last Updated: 2024-08-07T06:07:37.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PHP Competition System BETA 0.84 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) day parameter to show_matchs.php and (2) pageno parameter to persons.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52487 - http://www.exploit-db.com/exploits/9438
CVE ID: CVE-2009-2927 State: PUBLISHED Published: 2009-08-21T20:21:00 Last Updated: 2024-08-07T06:07:37.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in DetailFile.php in DigitalSpinners DS CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the nFileId parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52486 - http://www.exploit-db.com/exploits/9440
CVE ID: CVE-2009-2928 State: PUBLISHED Published: 2009-08-21T20:21:00 Last Updated: 2024-08-07T06:07:37.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login.php in TGS Content Management 0.x allows remote attackers to inject arbitrary web script or HTML via the previous_page parameter, a different vector than CVE-2008-6839. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9434 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52481
CVE ID: CVE-2009-2929 State: PUBLISHED Published: 2009-08-21T20:21:00 Last Updated: 2024-08-07T06:07:37.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in TGS Content Management 0.x allow remote attackers to execute arbitrary SQL commands via the (1) tgs_language_id, (2) tpl_dir, (3) referer, (4) user-agent, (5) site, (6) option, (7) db_optimization, (8) owner, (9) admin_email, (10) default_language, and (11) db_host parameters to cms/index.php; and the (12) cmd, (13) s_dir, (14) minutes, (15) s_mask, (16) test3_mp, (17) test15_file1, (18) submit, (19) brute_method, (20) ftp_server_port, (21) userfile14, (22) subj, (23) mysql_l, (24) act
) test15_file1, (18) submit, (19) brute_method, (20) ftp_server_port, (21) userfile14, (22) subj, (23) mysql_l, (24) action, and (25) userfile1 parameters to cms/frontpage_ception.php. NOTE: some of these parameters may be applicable only in nonstandard versions of the product, and cms/frontpage_ception.php may be cms/frontpage_caption.php in all released versions. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52468 - http://www.exploit-db.com/exploits/9434
CVE ID: CVE-2009-2930 State: PUBLISHED Published: 2009-08-21T20:21:00 Last Updated: 2024-08-07T06:07:37.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Search feature in elka CMS (aka Elkapax) allows remote attackers to inject arbitrary web script or HTML via the q parameter to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/505725/100/0/threaded
CVE ID: CVE-2009-2931 State: PUBLISHED Published: 2009-08-21T20:21:00 Last Updated: 2024-08-07T06:07:37.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in p.php in SlideShowPro Director 1.1 through 1.3.8 allows remote attackers to read arbitrary files via directory traversal sequences in the a parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/56825 - http://secunia.com/advisories/36197 - http://www.securityfocus.com/archive/1/505534/100/0/threaded - http://slideshowpro.net/news/archive/2009/07/director-139-fi.php - http://www.clearskies.net/documents/css-advisory-css09001-sspdirector.pdf
CVE ID: CVE-2009-2932 State: PUBLISHED Published: 2009-08-21T20:21:00 Last Updated: 2024-08-07T06:07:37.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in uddiclient/process in the UDDI client in SAP NetWeaver Application Server (Java) 7.0 allows remote attackers to inject arbitrary web script or HTML via the TModel Key field. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/57000 - http://www.dsecrg.com/pages/vul/show.php?id=133 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52429 - http://www.securityfocus.com/archive/1/505697/100/0/threaded - http://www.securitytracker.com/id?1022731 - https:
2429 - http://www.securityfocus.com/archive/1/505697/100/0/threaded - http://www.securitytracker.com/id?1022731 - https://service.sap.com/sap/support/notes/1322098 - http://www.securityfocus.com/bid/36034 - http://secunia.com/advisories/36228
CVE ID: CVE-2009-2933 State: PUBLISHED Published: 2009-08-21T20:21:00 Last Updated: 2024-08-07T06:07:37.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in comments.php in Piwigo before 2.0.3 allows remote attackers to execute arbitrary SQL commands via the items_number parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36333 - http://www.senseofsecurity.com.au/advisories/SOS-09-007.pdf - http://www.securityfocus.com/archive/1/505801/100/0/threaded
CVE ID: CVE-2009-2934 State: PUBLISHED Published: 2009-08-21T20:21:00 Last Updated: 2024-08-07T06:07:37.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in xaudio.dll in Programmed Integration PIPL 2.5.0 and 2.5.0D allow remote attackers to execute arbitrary code via a long string in a (1) .pls or (2) .pl playlist file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9428 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52440 - http://osvdb.org/56996 - http://secunia.com/advisories/36297
CVE ID: CVE-2009-2935 State: PUBLISHED Published: 2009-08-27T16:31:00 Last Updated: 2024-08-07T06:07:37.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google V8, as used in Google Chrome before 2.0.172.43, allows remote attackers to bypass intended restrictions on reading memory, and possibly obtain sensitive information or execute arbitrary code in the Chrome sandbox, via crafted JavaScript. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2420 - http://osvdb.org/57421 - http://secunia.com/advisories/36417 - http://www.securityfocus.com/bid/36149 - http://googlechromereleases.blogspot.com/2009/08/stable-update-sec
ries/36417 - http://www.securityfocus.com/bid/36149 - http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html - http://www.securitytracker.com/id?1022773 - http://code.google.com/p/chromium/issues/detail?id=18639 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52902
CVE ID: CVE-2009-2936 State: PUBLISHED Published: 2010-04-05T16:00:00 Last Updated: 2024-08-07T06:07:37.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Command Line Interface (aka Server CLI or administration interface) in the master process in the reverse proxy server in Varnish before 2.1.0 does not require authentication for commands received through a TCP port, which allows remote attackers to (1) execute arbitrary code via a vcl.inline directive that provides a VCL configuration file containing inline C code; (2) change the ownership of the master process via param.set, stop, and start directives; (3) read the initial line of an arbitrary file via a vcl.load directiv
rocess via param.set, stop, and start directives; (3) read the initial line of an arbitrary file via a vcl.load directive; or (4) conduct cross-site request forgery (CSRF) attacks that leverage a victim's location on a trusted network and improper input validation of directives. NOTE: the vendor disputes this report, saying that it is "fundamentally misguided and pointless. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/510360/100/0/threaded - http://www.varnish-cache.org/wiki/CLI - http://www.varnish-cache.org/changeset/3865 - http://www.securityfocus.com/archive/1/510368/100/0/threaded - http://lists.fedoraproject.org/pipermail/packa
set/3865 - http://www.securityfocus.com/archive/1/510368/100/0/threaded - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/040359.html
CVE ID: CVE-2009-2937 State: PUBLISHED Published: 2009-09-18T10:00:00Z Last Updated: 2024-09-17T04:08:47.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Planet 2.0 and Planet Venus allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of an IMG element in a feed. Additional Analyst Notes: - CVE Program Container: References: - http://lists.planetplanet.org/archives/devel/2009-September/001999.html - http://secunia.com/advisories/36636 - http://intertwingly.net/blog/2009/09/09/Venus-Updates - https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00525.html - https://www.redhat.com/ar
dates - https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00525.html - https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00504.html - http://secunia.com/advisories/36766 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546178 - https://bugzilla.redhat.com/show_bug.cgi?id=522802 - http://www.securityfocus.com/bid/36392 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546179
CVE ID: CVE-2009-2939 State: PUBLISHED Published: 2009-09-21T19:00:00 Last Updated: 2024-08-07T06:07:37.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: The postfix.postinst script in the Debian GNU/Linux and Ubuntu postfix 2.5.5 package grants the postfix user write access to /var/spool/postfix/pid, which might allow local users to conduct symlink attacks that overwrite arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/09/18/6 - http://www.debian.org/security/2011/dsa-2233
CVE ID: CVE-2009-2940 State: PUBLISHED Published: 2009-10-22T16:00:00 Last Updated: 2024-08-07T06:07:37.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pygresql module 3.8.1 and 4.0 for Python does not properly support the PQescapeStringConn function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37046 - http://www.debian.org/security/2009/dsa-1911 - http://www.osvdb.org/59028 - http://ubuntu.com/usn/usn-870-1 - http://secunia.com/advisories/37654
CVE ID: CVE-2009-2942 State: PUBLISHED Published: 2009-10-22T16:00:00 Last Updated: 2024-08-07T06:07:37.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mysql-ocaml bindings 1.0.4 for MySQL do not properly support the mysql_real_escape_string function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/59030 - http://secunia.com/advisories/37047 - http://www.debian.org/security/2009/dsa-1910 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:279
CVE ID: CVE-2009-2943 State: PUBLISHED Published: 2009-10-22T16:00:00Z Last Updated: 2024-09-17T01:36:22.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: The postgresql-ocaml bindings 1.5.4, 1.7.0, and 1.12.1 for PostgreSQL libpq do not properly support the PQescapeStringConn function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37048 - http://www.debian.org/security/2009/dsa-1909 - http://www.osvdb.org/59029
CVE ID: CVE-2009-2944 State: PUBLISHED Published: 2009-08-31T20:00:00 Last Updated: 2024-08-07T06:07:37.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers to read arbitrary files via crafted TeX commands. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/57575 - http://ikiwiki.info/security/#index35h2 - http://secunia.com/advisories/36516 - http://secunia.com/advisories/36539 - http://www.debian.org/security/2009/dsa-1875 - http://www.securityfocus.com/bid/36181 - http://www.vupen.com/english/advisories/2009/
bian.org/security/2009/dsa-1875 - http://www.securityfocus.com/bid/36181 - http://www.vupen.com/english/advisories/2009/2475 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52922
CVE ID: CVE-2009-2945 State: PUBLISHED Published: 2009-09-15T22:00:00Z Last Updated: 2024-09-16T18:49:30.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: weblogin/login.fcgi (aka the WebLogin login script) in Stanford University WebAuth 3.5.5, 3.6.0, and 3.6.1 places passwords in URLs in certain circumstances involving conversion of a POST request to a GET request, which allows context-dependent attackers to discover passwords by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history. Additional Analyst Notes: - CVE Program Container: References: - http://webauth.stanford.edu/security/2009-09-10.html - http://secunia.com/advisories/36640
CVE ID: CVE-2009-2946 State: PUBLISHED Published: 2009-09-04T20:00:00Z Last Updated: 2024-09-16T16:38:05.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary Perl code via crafted pathnames on distribution servers for upstream source code used in Debian GNU/Linux packages. Additional Analyst Notes: - CVE Program Container: References: - http://svn.debian.org/wsvn/devscripts/trunk/scripts/uscan.pl?op=diff&rev=1984&sc=1 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=515209 - http://svn.debian.org/wsvn/devscripts/trunk/scripts/uscan.pl?op=log&rev=0&sc=1&isdi
g/cgi-bin/bugreport.cgi?bug=515209 - http://svn.debian.org/wsvn/devscripts/trunk/scripts/uscan.pl?op=log&rev=0&sc=1&isdir=0 - http://www.debian.org/security/2009/dsa-1878
CVE ID: CVE-2009-2947 State: PUBLISHED Published: 2009-09-14T16:00:00Z Last Updated: 2024-09-16T16:43:31.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Xapian Omega before 1.0.16 allows remote attackers to inject arbitrary web script or HTML via unspecified CGI parameter values, which are sometimes included in exception messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36317 - http://secunia.com/advisories/36693 - http://svn.xapian.org/%2Acheckout%2A/tags/1.0.16/xapian-applications/omega/NEWS - http://lists.xapian.org/pipermail/xapian-discuss/2009-September/007115.html - htt
.0.16/xapian-applications/omega/NEWS - http://lists.xapian.org/pipermail/xapian-discuss/2009-September/007115.html - http://secunia.com/advisories/36674 - http://www.debian.org/security/2009/dsa-1882
CVE ID: CVE-2009-2948 State: PUBLISHED Published: 2009-10-07T18:00:00 Last Updated: 2024-08-07T06:07:37.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2, when mount.cifs is installed suid root, does not properly enforce permissions, which allows local users to read part of the credentials file and obtain the password by specifying the path to the credentials file and using the --verbose or -v option. Additional Analyst Notes: - CVE Program Container: References: - http://www.samba.org/samba/security/CVE-2009-2948.html - http://news.samba.org/releases/3.4.2/ - https://www.redhat.com/
http://www.samba.org/samba/security/CVE-2009-2948.html - http://news.samba.org/releases/3.4.2/ - https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00098.html - http://osvdb.org/58520 - http://www.securitytracker.com/id?1022975 - http://news.samba.org/releases/3.2.15/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7087 - http://www.securityfocus.com/bid/36572 - http://www.vupen.com/english/advisories/2009/2810 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561439 - http://secunia.com/advisories/36937 - http://www.ubuntu.com/usn/USN-839-1 - http://news.samba.org/releases/3.0.37/ - https
tp://secunia.com/advisories/36937 - http://www.ubuntu.com/usn/USN-839-1 - http://news.samba.org/releases/3.0.37/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10434 - http://secunia.com/advisories/36918 - http://secunia.com/advisories/36893 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53574 - http://news.samba.org/releases/3.3.8/ - http://secunia.com/advisories/36953 - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html - https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00095.html
CVE ID: CVE-2009-2949 State: PUBLISHED Published: 2010-02-16T19:00:00 Last Updated: 2024-08-07T06:07:37.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the XPMReader::ReadXPM function in filter.vcl/ixpm/svt_xpmread.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to execute arbitrary code via a crafted XPM file that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:221 - http://secunia.com/advisories/60799 - http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml - http://secunia.com/advisories/38695 - http://www.debian.org/secu
://www.gentoo.org/security/en/glsa/glsa-201408-19.xml - http://secunia.com/advisories/38695 - http://www.debian.org/security/2010/dsa-1995 - http://www.openoffice.org/security/cves/CVE-2009-2949.html - http://www.ubuntu.com/usn/USN-903-1 - http://www.vupen.com/english/advisories/2010/0366 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00005.html - http://secunia.com/advisories/38567 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10176 - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://www.securityfocus.com/bid/38218 - http://www.vupen.com/english/advisories/2010/0635 - http://secunia.com/advisories/
p://www.securityfocus.com/bid/38218 - http://www.vupen.com/english/advisories/2010/0635 - http://secunia.com/advisories/38568 - https://bugzilla.redhat.com/show_bug.cgi?id=527540 - http://securitytracker.com/id?1023591 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56236 - http://www.openoffice.org/security/bulletin.html - http://secunia.com/advisories/41818 - http://www.us-cert.gov/cas/techalerts/TA10-287A.html - http://www.redhat.com/support/errata/RHSA-2010-0101.html - http://secunia.com/advisories/38921 - http://www.vupen.com/english/advisories/2010/2905
CVE ID: CVE-2009-2950 State: PUBLISHED Published: 2010-02-16T19:00:00 Last Updated: 2024-08-07T06:07:37.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the GIFLZWDecompressor::GIFLZWDecompressor function in filter.vcl/lgif/decode.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted GIF file, related to LZW decompression. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:221 - http://secunia.com/advisories/60799 - http://www.gentoo.org/security/en/glsa/glsa-201408-19.
ories?name=MDVSA-2010:221 - http://secunia.com/advisories/60799 - http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml - http://www.openoffice.org/security/cves/CVE-2009-2950.html - https://bugzilla.redhat.com/show_bug.cgi?id=527512 - http://secunia.com/advisories/38695 - http://www.debian.org/security/2010/dsa-1995 - http://www.ubuntu.com/usn/USN-903-1 - http://www.vupen.com/english/advisories/2010/0366 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00005.html - http://secunia.com/advisories/38567 - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/56238 - http://www.securityfocus.com/bid/3
cpuoct2010-175626.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/56238 - http://www.securityfocus.com/bid/38218 - http://www.vupen.com/english/advisories/2010/0635 - http://secunia.com/advisories/38568 - http://securitytracker.com/id?1023591 - http://www.openoffice.org/security/bulletin.html - http://secunia.com/advisories/41818 - http://www.us-cert.gov/cas/techalerts/TA10-287A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11050 - http://www.redhat.com/support/errata/RHSA-2010-0101.html - http://secunia.com/advisories/38921 - http://www.vupen.com/english/advisories/2010/2905
CVE ID: CVE-2009-2951 State: PUBLISHED Published: 2009-08-24T15:00:00 Last Updated: 2024-08-07T06:07:37.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phenotype CMS before 2.9 does not use a random salt value for password encryption, which makes it easier for context-dependent attackers to determine cleartext passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.phenotype-cms.com/wiki/development-changelog - https://exchange.xforce.ibmcloud.com/vulnerabilities/52856
CVE ID: CVE-2009-2952 State: PUBLISHED Published: 2009-08-24T15:00:00 Last Updated: 2024-08-07T06:07:37.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the pollwakeup function in Sun Solaris 10, and OpenSolaris before snv_51, allows local users to cause a denial of service (panic) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6392 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-09-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-265248-1 - http://www.securityfocus.com/bid/36106
CVE ID: CVE-2009-2953 State: PUBLISHED Published: 2009-08-24T15:00:00 Last Updated: 2024-08-07T06:07:37.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 3.0.6 through 3.0.13, and 3.5.x, allows remote attackers to cause a denial of service (CPU consumption) via JavaScript code with a long string value for the hash property (aka location.hash), a related issue to CVE-2008-5715. Additional Analyst Notes: - CVE Program Container: References: - http://websecurity.com.ua/3424/ - http://www.securityfocus.com/archive/1/506006/100/0/threaded
CVE ID: CVE-2009-2954 State: PUBLISHED Published: 2009-08-24T15:00:00 Last Updated: 2024-08-07T06:07:37.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service (CPU consumption and application hang) via JavaScript code with a long string value for the hash property (aka location.hash), a related issue to CVE-2008-5715. Additional Analyst Notes: - CVE Program Container: References: - http://websecurity.com.ua/3424/ - http://www.securityfocus.com/archive/1/506006/100/0/threaded