Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-0731 State: PUBLISHED Published: 2009-02-24T23:00:00 Last Updated: 2024-08-07T04:48:51.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in pages/play.php in Free Arcade Script 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the template parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33869 - https://www.exploit-db.com/exploits/8094 - http://secunia.com/advisories/34023
CVE ID: CVE-2009-0732 State: PUBLISHED Published: 2009-02-24T23:00:00 Last Updated: 2024-08-07T04:48:51.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Downloadcenter 2.1 stores common.h under the web root with insufficient access control, which allows remote attackers to obtain user credentials and other sensitive information via a direct request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48862 - http://secunia.com/advisories/33992 - http://osvdb.org/52180
CVE ID: CVE-2009-0733 State: PUBLISHED Published: 2009-03-23T14:00:00 Last Updated: 2024-08-07T04:48:51.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file associated with a large integer value for the (1) input or (2) output channel, related to the ReadLUT_A2B and ReadLUT_B2A functions. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00851.htm
: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00851.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/49330 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:137 - http://secunia.com/advisories/34632 - http://secunia.com/advisories/34450 - http://www.securitytracker.com/id?1021869 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00811.html - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html - http://www.ubuntu.com/usn/USN-744-1 - http://www.debian.org/security/2009/dsa-1745 - http://secunia.com/advisories/34675 - http://secunia.com/advisories/34454 - http://s
debian.org/security/2009/dsa-1745 - http://secunia.com/advisories/34675 - http://secunia.com/advisories/34454 - http://secunia.com/advisories/34442 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00856.html - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00921.html - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00794.html - http://scary.beasts.org/security/CESA-2009-003.html - http://secunia.com/advisories/34382 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.487438 - http://secunia.com/advisories/34418 - http://www.securityfocus.com/archive/1/502031/100/0/threaded - https://r
.487438 - http://secunia.com/advisories/34418 - http://www.securityfocus.com/archive/1/502031/100/0/threaded - https://rhn.redhat.com/errata/RHSA-2009-0377.html - http://www.ocert.org/advisories/ocert-2009-003.html - http://scarybeastsecurity.blogspot.com/2009/03/littlecms-vulnerabilities.html - http://secunia.com/advisories/34782 - http://secunia.com/advisories/34367 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:162 - http://www.redhat.com/support/errata/RHSA-2009-0339.html - https://bugzilla.redhat.com/show_bug.cgi?id=487512 - http://www.vupen.com/english/advisories/2009/0775 - http://secunia.com/advisories/34463 - http://secunia.com/advisories/34408 - http://www.debian.org
advisories/2009/0775 - http://secunia.com/advisories/34463 - http://secunia.com/advisories/34408 - http://www.debian.org/security/2009/dsa-1769 - http://secunia.com/advisories/34400 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:121 - http://www.securityfocus.com/archive/1/502018/100/0/threaded - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00799.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9742 - http://www.securityfocus.com/bid/34185 - http://security.gentoo.org/glsa/glsa-200904-19.xml - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00857.html
CVE ID: CVE-2009-0734 State: PUBLISHED Published: 2009-02-25T20:00:00 Last Updated: 2024-08-07T04:48:51.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in MultimediaPlayer.exe 6.86.240.7 in Nokia PC Suite 6.86.9.3 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33796 - http://www.securityfocus.com/archive/1/500627/100/0/threaded - http://osvdb.org/51739 - http://www.vupen.com/english/advisories/2009/0318
CVE ID: CVE-2009-0735 State: PUBLISHED Published: 2009-02-25T20:00:00 Last Updated: 2024-08-07T04:48:51.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in lib/classes/message_class.php in Papoo CMS 3.6, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to read and possibly execute arbitrary files via a .. (dot dot) in the pfadhier parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8030 - http://www.securityfocus.com/bid/33718 - http://secunia.com/advisories/33911
CVE ID: CVE-2009-0736 State: PUBLISHED Published: 2009-02-25T20:00:00Z Last Updated: 2024-09-16T16:49:00.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Pebble before 2.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=660130 - http://secunia.com/advisories/33888 - http://www.securityfocus.com/bid/33733 - http://sourceforge.net/forum/forum.php?forum_id=917656
CVE ID: CVE-2009-0737 State: PUBLISHED Published: 2009-02-25T20:00:00 Last Updated: 2024-08-07T04:48:51.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the web-based installer (config/index.php) in MediaWiki 1.6 before 1.6.12, 1.12 before 1.12.4, and 1.13 before 1.13.4, when the installer is in active use, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_6_12/phase3/RELEASE-NOTES - http://www.debian.org/security/2009/dsa-1901 - http://secunia.com/advisories/33881 - htt
EL1_6_12/phase3/RELEASE-NOTES - http://www.debian.org/security/2009/dsa-1901 - http://secunia.com/advisories/33881 - http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_12_4/phase3/RELEASE-NOTES - http://lists.wikimedia.org/pipermail/mediawiki-announce/2009-February/000083.html - http://www.securityfocus.com/bid/33681 - http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_13_4/phase3/RELEASE-NOTES - http://www.vupen.com/english/advisories/2009/0368
CVE ID: CVE-2009-0738 State: PUBLISHED Published: 2009-02-25T20:00:00 Last Updated: 2024-08-07T04:48:51.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in Auth Php 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) passwd parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8033 - http://secunia.com/advisories/33908 - http://www.securityfocus.com/bid/33723
CVE ID: CVE-2009-0739 State: PUBLISHED Published: 2009-02-25T20:00:00 Last Updated: 2024-08-07T04:48:51.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in MyNews 0.10 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) passwd parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8034 - http://www.securityfocus.com/bid/33728
CVE ID: CVE-2009-0740 State: PUBLISHED Published: 2009-02-25T20:00:00 Last Updated: 2024-08-07T04:48:51.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in BlueBird Prelease allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) passwd parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8035 - http://www.securityfocus.com/bid/33725
CVE ID: CVE-2009-0741 State: PUBLISHED Published: 2009-02-25T20:00:00 Last Updated: 2024-08-07T04:48:51.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Login.asp in Craft Silicon Banking@Home 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the LoginName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/500824/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2009-February/067879.html - http://www.securityfocus.com/bid/33721 - http://secunia.com/advisories/33907
CVE ID: CVE-2009-0742 State: PUBLISHED Published: 2009-02-26T16:00:00Z Last Updated: 2024-09-16T21:57:38.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: The username command in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers and Cisco ACE 4710 Application Control Engine Appliance stores a cleartext password by default, which allows context-dependent attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml
CVE ID: CVE-2009-0743 State: PUBLISHED Published: 2009-02-27T17:00:00 Last Updated: 2024-08-07T04:48:51.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6.0 MR4) and 7.0 before 7.0(2) (aka 7.0 MR1) allows remote authenticated users to inject arbitrary web script or HTML via the E-mail Address field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33915 - http://www.securitytracker.com/id?1021778 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48965 - http://www.cisc
http://www.securitytracker.com/id?1021778 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48965 - http://www.cisco.com/en/US/products/products_security_response09186a0080a7bc61.html - http://www.securityfocus.com/archive/1/501251/30/0/threaded
CVE ID: CVE-2009-0744 State: PUBLISHED Published: 2009-02-27T17:00:00 Last Updated: 2024-08-07T04:48:51.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari 4 Beta build 528.16 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a feeds: URI beginning with a (1) % (percent), (2) { (open curly bracket), (3) } (close curly bracket), (4) ^ (caret), (5) ` (backquote), or (6) | (pipe) character, followed by an & (ampersand) character. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48943 - https://oval.cisecurity.org/repository/search/definition/oval%
ps://exchange.xforce.ibmcloud.com/vulnerabilities/48943 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6066 - http://www.securityfocus.com/bid/33909 - http://www.securityfocus.com/archive/1/501229/100/0/threaded
CVE ID: CVE-2009-0745 State: PUBLISHED Published: 2009-02-27T17:00:00 Last Updated: 2024-08-07T04:48:51.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ext4_group_add function in fs/ext4/resize.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not properly initialize the group descriptor during a resize (aka resize2fs) operation, which might allow local users to cause a denial of service (OOPS) by arranging for crafted values to be present in available memory. Additional Analyst Notes: - CVE Program Container: References: - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6
tp://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fdff73f094e7220602cc3f8959c7230517976412 - http://www.vupen.com/english/advisories/2009/0509 - http://secunia.com/advisories/37471 - http://rhn.redhat.com/errata/RHSA-2009-1243.html - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://www.debian.org/security/2009/dsa-1749 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7765 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10942 - http://www.ubuntu.com/usn/usn-751-1 - http://bugzilla.kernel.org/show_bug.cg
ition/oval%3Aorg.mitre.oval%3Adef%3A10942 - http://www.ubuntu.com/usn/usn-751-1 - http://bugzilla.kernel.org/show_bug.cgi?id=12433 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://secunia.com/advisories/36562 - http://secunia.com/advisories/34981 - http://secunia.com/advisories/34394 - http://www.debian.org/security/2009/dsa-1787 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7 - http://www.vupen.com/english/advisories/2009/3316
CVE ID: CVE-2009-0746 State: PUBLISHED Published: 2009-02-27T17:00:00 Last Updated: 2024-08-07T04:48:52.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: The make_indexed_dir function in fs/ext4/namei.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not validate a certain rec_len field, which allows local users to cause a denial of service (OOPS) by attempting to mount a crafted ext4 filesystem. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8039 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19 - http://www.vupen.com/english/advisori
.oval%3Adef%3A8039 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19 - http://www.vupen.com/english/advisories/2009/0509 - http://secunia.com/advisories/37471 - http://rhn.redhat.com/errata/RHSA-2009-1243.html - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/48872 - http://www.debian.org/security/2009/dsa-1749 - http://osvdb.org/52202 - http://www.ubuntu.com/usn/usn-751-1 - http://bugzilla.kernel.org/show_bug.cgi?id=12430 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://secunia.com/advisories/36562 - http://secunia.com/advisories/34394 - http://git.kernel.org/?p=linux/kernel/git/torvalds/
secunia.com/advisories/36562 - http://secunia.com/advisories/34394 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e6b8bc09ba2075cd91fbffefcd2778b1a00bd76f - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10342 - http://www.vupen.com/english/advisories/2009/3316
CVE ID: CVE-2009-0747 State: PUBLISHED Published: 2009-02-27T17:00:00 Last Updated: 2024-08-07T04:48:51.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ext4_isize function in fs/ext4/ext4.h in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 uses the i_size_high structure member during operations on arbitrary types of files, which allows local users to cause a denial of service (CPU consumption and error-message flood) by attempting to mount a crafted ext4 filesystem. Additional Analyst Notes: - CVE Program Container: References: - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19 - http://www.vupen.com/english/advisories/2009/0509 - http://se
p://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19 - http://www.vupen.com/english/advisories/2009/0509 - http://secunia.com/advisories/37471 - http://rhn.redhat.com/errata/RHSA-2009-1243.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=06a279d636734da32bb62dd2f7b0ade666f65d7c - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://www.debian.org/security/2009/dsa-1749 - http://www.ubuntu.com/usn/usn-751-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8585 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://secunia.com/advisories/36562 - https://oval.cisecurity.org/repos
urityfocus.com/archive/1/507985/100/0/threaded - http://secunia.com/advisories/36562 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9200 - http://bugzilla.kernel.org/show_bug.cgi?id=12375 - http://secunia.com/advisories/34394 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7 - http://www.vupen.com/english/advisories/2009/3316
CVE ID: CVE-2009-0748 State: PUBLISHED Published: 2009-02-27T17:00:00 Last Updated: 2024-08-07T04:48:51.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ext4_fill_super function in fs/ext4/super.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not validate the superblock configuration, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) by attempting to mount a crafted ext4 filesystem. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8526 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19 - http
earch/definition/oval%3Aorg.mitre.oval%3Adef%3A8526 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19 - http://bugzilla.kernel.org/show_bug.cgi?id=12371 - http://www.vupen.com/english/advisories/2009/0509 - http://secunia.com/advisories/37471 - http://rhn.redhat.com/errata/RHSA-2009-1243.html - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://www.debian.org/security/2009/dsa-1749 - http://www.ubuntu.com/usn/usn-751-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4ec110281379826c5cf6ed14735e47027c3c5765 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://osvdb.org/52203 - http://secunia.com/advisories/36
http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://osvdb.org/52203 - http://secunia.com/advisories/36562 - http://secunia.com/advisories/34394 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7 - http://www.vupen.com/english/advisories/2009/3316 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10683
CVE ID: CVE-2009-0749 State: PUBLISHED Published: 2009-03-02T20:00:00 Last Updated: 2024-08-07T04:48:51.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the GIFReadNextExtension function in lib/pngxtern/gif/gifread.c in OptiPNG 0.6.2 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted GIF image that causes the realloc function to return a new pointer, which triggers memory corruption when the old pointer is accessed. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34201 - http://secunia.com/advisories/34259 - http://secunia.com/advisories/340
erences: - http://secunia.com/advisories/34201 - http://secunia.com/advisories/34259 - http://secunia.com/advisories/34035 - http://www.securityfocus.com/bid/33873 - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html - http://www.vupen.com/english/advisories/2009/0510 - http://optipng.sourceforge.net - http://sourceforge.net/tracker/index.php?func=detail&aid=2582013&group_id=151404&atid=780913 - http://secunia.com/advisories/35685 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - http://www.openwall.com/lists/oss-security/2009/02/24/2 - http://www.openwall.com/lists/oss-security/2009/02/25/4 - http://www.gentoo.org/security/en/glsa/glsa-20
/2009/02/24/2 - http://www.openwall.com/lists/oss-security/2009/02/25/4 - http://www.gentoo.org/security/en/glsa/glsa-200903-12.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/48879
CVE ID: CVE-2009-0750 State: PUBLISHED Published: 2009-03-02T22:00:00 Last Updated: 2024-08-07T04:48:51.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in the smNews example script for txtSQL 2.2 Final allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48813 - https://www.exploit-db.com/exploits/8076
CVE ID: CVE-2009-0751 State: PUBLISHED Published: 2009-03-02T22:00:00 Last Updated: 2024-08-07T04:48:51.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and crash) via a request with a large number of headers. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33979 - http://www.vupen.com/english/advisories/2009/0590 - http://www.openwall.com/lists/oss-security/2009/02/19/1 - http://secunia.com/advisories/34239 - http://www.debian.org/security/2009/dsa-1740 - https://www.exploit-db.com/exploits/8148 - http://yaws.hyber.org/ - http://www.security
ian.org/security/2009/dsa-1740 - https://www.exploit-db.com/exploits/8148 - http://yaws.hyber.org/ - http://www.securityfocus.com/bid/33834
CVE ID: CVE-2009-0752 State: PUBLISHED Published: 2009-03-03T00:00:00Z Last Updated: 2024-09-16T23:15:24.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Movable Type Pro and Community Solution 4.x before 4.24 has unknown impact and attack vectors, possibly related to the password recovery mechanism. Additional Analyst Notes: - CVE Program Container: References: - http://www.movabletype.com/blog/2009/02/movable-type-424-get-updated-with-better-password-recovery.html
CVE ID: CVE-2009-0753 State: PUBLISHED Published: 2009-03-03T16:00:00 Last Updated: 2024-08-07T04:48:51.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in MLDonkey 2.8.4 through 2.9.7 allows remote attackers to read arbitrary files via a leading "//" (double slash) in the filename. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8097 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00542.html - http://secunia.com/advisories/34008 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00617.html - http://secunia.com/advisories/34436 - http://www.op
dhat.com/archives/fedora-package-announce/2009-March/msg00617.html - http://secunia.com/advisories/34436 - http://www.openwall.com/lists/oss-security/2009/02/23/1 - http://savannah.nongnu.org/bugs/?25667 - http://www.gentoo.org/security/en/glsa/glsa-200903-36.xml - http://www.securityfocus.com/bid/33865 - http://secunia.com/advisories/34345 - http://www.debian.org/security/2009/dsa-1739 - http://secunia.com/advisories/34306