Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-1341 State: PUBLISHED Published: 2009-04-30T20:00:00 Last Updated: 2024-08-07T05:13:24.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service (memory consumption) by fetching data with BYTEA columns. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2009-1067.html - http://www.securityfocus.com/bid/34757 - http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49-2+etch1.diff.gz - https://launch
- http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49-2+etch1.diff.gz - https://launchpad.net/bugs/cve/2009-1341 - http://secunia.com/advisories/34909 - http://www.redhat.com/support/errata/RHSA-2009-0479.html - http://secunia.com/advisories/35685 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9680 - http://cpansearch.perl.org/src/TURNSTEP/DBD-Pg-2.13.1/Changes - http://www.debian.org/security/2009/dsa-1780 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - http://secunia.com/advisories/35058 - http://rt.cpan.org/Public/Bug/Display.html?id=21392 - https://exchange.xforce.ibmcloud.com/vulne
.com/advisories/35058 - http://rt.cpan.org/Public/Bug/Display.html?id=21392 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50387
CVE ID: CVE-2009-1342 State: PUBLISHED Published: 2009-04-20T14:06:00Z Last Updated: 2024-09-16T23:56:36.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the CCK comment reference module 6.x before 6.x-1.2, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via certain comment titles associated with a node edit form. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/53702 - http://www.vupen.com/english/advisories/2009/1060 - http://www.securityfocus.com/bid/34547 - http://secunia.com/advisories/34739 - http://drupal.org/node/434836
CVE ID: CVE-2009-1343 State: PUBLISHED Published: 2009-04-20T14:06:00Z Last Updated: 2024-09-16T22:56:09.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF versions) module 5.x before 5.x-4.5 and 6.x before 6.x-1.5, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via content titles. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/434748 - http://www.securityfocus.com/bid/34545 - http://www.vupen.com/english/advisories/2009/1060 - http://secunia.com/advisories/34738 - http://www.osvdb.org/53704
CVE ID: CVE-2009-1344 State: PUBLISHED Published: 2009-04-20T14:06:00Z Last Updated: 2024-09-17T03:08:29.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Localization client module 5.x before 5.x-1.2 and 6.x before 6.x-1.7, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via input to the translation functionality. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/53703 - http://www.securityfocus.com/bid/34546 - http://drupal.org/node/434682 - http://www.vupen.com/english/advisories/2009/1060 - http://secunia.com/advisories/34718
CVE ID: CVE-2009-1345 State: PUBLISHED Published: 2009-04-20T14:06:00 Last Updated: 2024-08-07T05:13:25.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in document.php in cpCommerce 1.2.8 allows remote attackers to execute arbitrary SQL commands via the id_document parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022082 - https://www.exploit-db.com/exploits/8455 - http://www.securityfocus.com/bid/34556 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49901
CVE ID: CVE-2009-1346 State: PUBLISHED Published: 2009-04-20T14:06:00 Last Updated: 2024-08-07T05:13:24.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in publico/ficha.php in NetHoteles 3.0 allows remote attackers to execute arbitrary SQL commands via the id_establecimiento parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49897 - http://osvdb.org/53814 - https://www.exploit-db.com/exploits/8457 - http://secunia.com/advisories/34743 - http://www.securityfocus.com/bid/34561
CVE ID: CVE-2009-1347 State: PUBLISHED Published: 2009-04-20T14:06:00 Last Updated: 2024-08-07T05:13:24.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in stats/index.php in chCounter 3.1.3 allow remote attackers to execute arbitrary SQL commands via (1) the login_name parameter (aka the username field) or (2) the login_pw parameter (aka the password field). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34572 - http://secunia.com/advisories/24879 - https://www.exploit-db.com/exploits/8461
CVE ID: CVE-2009-1348 State: PUBLISHED Published: 2009-04-30T20:00:00 Last Updated: 2024-08-07T05:13:24.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security, SecurityShield for Microsoft ISA Server, Security for Microsoft Sharepoint, Security for Email Servers, Email Gateway, and Active Virus Defense allows remote attackers to bypass virus detection via (1) an invalid Headflags field in a malformed RAR archive, (2) an invalid Packsize field in a malformed RAR archive, or (3) an invalid Filelength field in a malformed ZIP archive. Additional Analyst Notes: - CVE Program Container: References: - h
invalid Filelength field in a malformed ZIP archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/503173/100/0/threaded - https://kc.mcafee.com/corporate/index?page=content&id=SB10001&actp=LIST_RECENT - http://secunia.com/advisories/34949 - http://www.securityfocus.com/bid/34780 - http://blog.zoller.lu/2009/04/mcafee-multiple-bypassesevasions-ziprar.html
CVE ID: CVE-2009-1349 State: PUBLISHED Published: 2009-04-21T15:00:00 Last Updated: 2024-08-07T05:13:25.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in C2Net Stronghold 2.3 allows remote attackers to inject arbitrary web script or HTML via the URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34606 - http://www.securityfocus.com/archive/1/502799/100/0/threaded
CVE ID: CVE-2009-1350 State: PUBLISHED Published: 2009-04-21T16:00:00 Last Updated: 2024-08-07T05:13:24.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in xtagent.exe in Novell NetIdentity Client before 1.2.4 allows remote attackers to execute arbitrary code by establishing an IPC$ connection to the XTIERRPCPIPE named pipe, and sending RPC messages that trigger a dereference of an arbitrary pointer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/502514/100/0/threaded - http://download.novell.com/Download?buildid=6ERQGPjRZ8o~ - http://www.vupen.com/english/advisories/2009/0954 - http://www.secur
download.novell.com/Download?buildid=6ERQGPjRZ8o~ - http://www.vupen.com/english/advisories/2009/0954 - http://www.securityfocus.com/bid/34400 - https://bugzilla.novell.com/show_bug.cgi?id=437511 - http://www.securitytracker.com/id?1021990 - http://www.zerodayinitiative.com/advisories/ZDI-09-016/
CVE ID: CVE-2009-1351 State: PUBLISHED Published: 2009-04-21T16:00:00 Last Updated: 2024-08-07T05:13:24.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apollo 37zz allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long URI in a playlist (.m3u) file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8451 - http://osvdb.org/53770 - http://www.securityfocus.com/bid/34554 - http://secunia.com/advisories/34050
CVE ID: CVE-2009-1352 State: PUBLISHED Published: 2009-04-21T16:00:00 Last Updated: 2024-08-07T05:13:25.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Dawningsoft PowerCHM 5.7 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an HTML file with a link to a long URL, as demonstrated by a .rar URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34517 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49882 - https://www.exploit-db.com/exploits/8434
CVE ID: CVE-2009-1353 State: PUBLISHED Published: 2009-04-21T16:00:00 Last Updated: 2024-08-07T05:13:24.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the http_parse_hex function in libz/misc.c in Zervit Webserver 0.02 allows remote attackers to cause a denial of service (daemon crash) via a long URI, related to http.c. Additional Analyst Notes: - CVE Program Container: References: - http://zervit.svn.sourceforge.net/viewvc/zervit/trunk/src/libz/misc.c?r1=17&r2=19 - http://zervit.svn.sourceforge.net/viewvc/zervit/trunk/src/libz/misc.c?view=log - https://www.exploit-db.com/exploits/8447 - http://www.securityfocus.com/archive/1/502693/100/0/threaded - http:/
w=log - https://www.exploit-db.com/exploits/8447 - http://www.securityfocus.com/archive/1/502693/100/0/threaded - http://osvdb.org/53768 - http://www.securityfocus.com/bid/34530 - http://secunia.com/advisories/34735
CVE ID: CVE-2009-1354 State: PUBLISHED Published: 2009-04-21T16:00:00 Last Updated: 2024-08-07T05:13:25.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Mongoose 2.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8428 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49878 - http://www.securityfocus.com/archive/1/502648/100/0/threaded - http://www.securityfocus.com/bid/34510
CVE ID: CVE-2009-1355 State: PUBLISHED Published: 2009-04-21T16:00:00 Last Updated: 2024-08-07T05:13:25.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in muxatmd in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via a long filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1056 - http://www.ibm.com/support/docview.wss?uid=isg1IZ48495 - http://www.ibm.com/support/docview.wss?uid=isg1IZ48561 - http://www.ibm.com/support/docview.wss?uid=isg1IZ48501 - http://www.securitytracker.com/id?1022065 - http://www.ibm.com/support/docview.wss?uid=isg1IZ48502 - http://www.secur
- http://www.securitytracker.com/id?1022065 - http://www.ibm.com/support/docview.wss?uid=isg1IZ48502 - http://www.securityfocus.com/bid/34543 - http://secunia.com/advisories/34662 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=784 - http://aix.software.ibm.com/aix/efixes/security/muxatmd_advisory.asc - http://www.ibm.com/support/docview.wss?uid=isg1IZ48496 - http://www.ibm.com/support/docview.wss?uid=isg1IZ48500 - http://www.ibm.com/support/docview.wss?uid=isg1IZ48499 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6402 - http://www.ibm.com/support/docview.wss?uid=isg1IZ48562
CVE ID: CVE-2009-1356 State: PUBLISHED Published: 2009-04-21T16:00:00 Last Updated: 2024-08-07T05:13:24.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Elecard AVC HD Player allows remote attackers to execute arbitrary code via a long MP3 filename in a playlist (.xpl) file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34560 - https://www.exploit-db.com/exploits/8452
CVE ID: CVE-2009-1357 State: PUBLISHED Published: 2009-04-23T17:00:00 Last Updated: 2024-08-07T05:13:25.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in da/DA/Login in Sun Java System Delegated Administrator 6.2 through 6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the HELP_PAGE parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1022108 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-255928-1 - http://www.securityfocus.com/bid/34643 - http://www.securityfocus.com/archive/1/502863/100/0/threaded - http://secunia.com/adv
/www.securityfocus.com/bid/34643 - http://www.securityfocus.com/archive/1/502863/100/0/threaded - http://secunia.com/advisories/34760 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-121581-20-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020305.1-1 - http://www.vupen.com/english/advisories/2009/1122 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50004 - http://www.coresecurity.com/content/sun-delegated-administrator - http://osvdb.org/53920
CVE ID: CVE-2009-1358 State: PUBLISHED Published: 2009-04-21T23:00:00 Last Updated: 2024-08-07T05:13:25.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34874 - http://www.debian.org/security/2009/dsa-1779 - http://secunia.com/advisories/34829 - http://www.securityfocus.com/bid/34630 - http://secu
.org/security/2009/dsa-1779 - http://secunia.com/advisories/34829 - http://www.securityfocus.com/bid/34630 - http://secunia.com/advisories/34832 - https://bugs.launchpad.net/ubuntu/+source/apt/+bug/356012 - https://usn.ubuntu.com/762-1/ - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=433091 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50086
CVE ID: CVE-2009-1359 State: PUBLISHED Published: 2009-04-22T15:00:00 Last Updated: 2024-08-07T05:13:24.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the SCTP sockets implementation in Sun OpenSolaris snv_106 through snv_107 allows local users to cause a denial of service (panic) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34628 - http://www.vupen.com/english/advisories/2009/1120 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-257331-1
CVE ID: CVE-2009-1360 State: PUBLISHED Published: 2009-04-22T15:00:00 Last Updated: 2024-08-07T05:13:25.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: The __inet6_check_established function in net/ipv6/inet6_hashtables.c in the Linux kernel before 2.6.29, when Network Namespace Support (aka NET_NS) is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via vectors involving IPv6 packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:135 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html - http://secunia.com/advisories/
A-2009:135 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html - http://secunia.com/advisories/35656 - http://www.securityfocus.com/bid/34602 - http://www.ubuntu.com/usn/usn-793-1 - http://xorl.wordpress.com/2009/04/21/linux-kernel-net_ns-ipv6-null-pointer-dereference/ - http://secunia.com/advisories/35387 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3f53a38131a4e7a053c0aa060aba0411242fb6b9
CVE ID: CVE-2009-1361 State: PUBLISHED Published: 2009-04-22T18:00:00Z Last Updated: 2024-09-16T19:04:34.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the host parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34773
CVE ID: CVE-2009-1362 State: PUBLISHED Published: 2009-04-22T18:00:00 Last Updated: 2024-08-07T05:13:25.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in administration/index.php in chCounter 3.1.3 allows remote attackers to execute arbitrary SQL commands via the login_name parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24879 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50353
CVE ID: CVE-2009-1364 State: PUBLISHED Published: 2009-05-01T17:00:00 Last Updated: 2024-08-07T05:13:24.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WMF file. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2009-0457.html - http://secunia.com/advisories/34964 - http://secunia.com/advisories/35001 - http://secunia.com/advisories/35190 - https://launchpad.net/bugs/cve/2009-1364 - http://lists.opensuse.org/opensuse-updates
p://secunia.com/advisories/35190 - https://launchpad.net/bugs/cve/2009-1364 - http://lists.opensuse.org/opensuse-updates/2015-06/msg00051.html - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01266.html - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01263.html - https://bugzilla.redhat.com/show_bug.cgi?id=496864 - http://wvware.cvs.sourceforge.net/viewvc/wvware/libwmf2/src/extra/Makefile.am?hideattic=0&view=log - http://lists.opensuse.org/opensuse-updates/2015-06/msg00053.html - http://secunia.com/advisories/35686 - http://www.securitytracker.com/id?1022154 - http://secuni
/2015-06/msg00053.html - http://secunia.com/advisories/35686 - http://www.securitytracker.com/id?1022154 - http://secunia.com/advisories/34901 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10959 - http://security.gentoo.org/glsa/glsa-200907-01.xml - http://secunia.com/advisories/35416 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01269.html - http://www.debian.org/security/2009/dsa-1796 - http://www.securityfocus.com/bid/34792 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50290 - http://secunia.com/advisories/35025 - http://www.ubuntu.com/usn/USN-769-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:106
advisories/35025 - http://www.ubuntu.com/usn/USN-769-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:106 - http://www.vupen.com/english/advisories/2009/1228
CVE ID: CVE-2009-1365 State: PUBLISHED Published: 2009-05-01T17:00:00 Last Updated: 2024-08-07T05:13:25.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.4 and 3.5.x before 3.5.2, as used in Flash Media Interactive Server and Flash Media Streaming Server, allows remote attackers to execute arbitrary remote procedures within an ActionScript file on the server via RPC requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34790 - http://secunia.com/advisories/34878 - http://www.vupen.com/english/advisories/2009/1234 - http://www.securitytracker.com/id?102214
unia.com/advisories/34878 - http://www.vupen.com/english/advisories/2009/1234 - http://www.securitytracker.com/id?1022148 - http://www.adobe.com/support/security/bulletins/apsb09-05.html
CVE ID: CVE-2009-1366 State: PUBLISHED Published: 2009-04-22T21:00:00 Last Updated: 2024-08-07T05:13:25.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Website\admin\Sales\paypalipn.aspx in DotNetNuke (DNN) before 4.9.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "name/value pairs" and "paypal IPN functionality." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34484 - http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno25/tabid/1260/Default.aspx - http://secunia.com/advisories/34686
CVE ID: CVE-2009-1367 State: PUBLISHED Published: 2009-04-22T21:00:00 Last Updated: 2024-08-07T05:13:25.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in moziloCMS 1.11 allows remote attackers to inject arbitrary web script or HTML via the query parameter in search action, a different issue than CVE-2008-6127.2a. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49812 - http://cms.mozilo.de/index.php?cat=10_moziloCMS&page=60_Changelog - https://www.exploit-db.com/exploits/8394 - http://www.securityfocus.com/bid/34474
CVE ID: CVE-2009-1368 State: PUBLISHED Published: 2009-04-22T21:00:00 Last Updated: 2024-08-07T05:13:25.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in moziloCMS 1.11 allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter. NOTE: this might be the same issue as CVE-2008-6126.2, which may have been fixed in 1.10.3. Additional Analyst Notes: - CVE Program Container: References: - http://cms.mozilo.de/index.php?cat=10_moziloCMS&page=60_Changelog - https://www.exploit-db.com/exploits/8394 - http://www.securityfocus.com/bid/34474 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49813
CVE ID: CVE-2009-1369 State: PUBLISHED Published: 2009-04-22T21:00:00 Last Updated: 2024-08-07T05:13:25.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: moziloCMS 1.11 allows remote attackers to obtain sensitive information via the (1) gal[] parameter to gallery.php, (2) page[] and (3) cat[] parameter to index.php, or (4) file[] parameter to download.php, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49811 - https://www.exploit-db.com/exploits/8394
CVE ID: CVE-2009-1370 State: PUBLISHED Published: 2009-04-22T21:00:00 Last Updated: 2024-08-07T05:13:25.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in ape_plugin.plg in Xilisoft Video Converter 3.1.53.0704n and 5.1.23.0402 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a .cue file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8390 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49807 - http://www.securityfocus.com/bid/34472 - http://secunia.com/advisories/34660