Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
://securitytracker.com/id?1023309 - http://www.osvdb.org/60884 - http://marc.info/?l=bugtraq&m=126046186917330&w=2 - http://seer.entsupport.symantec.com/docs/337859.htm - http://www.securitytracker.com/id?1023318 - http://secunia.com/advisories/37685 - http://seer.entsupport.symantec.com/docs/337392.htm - http://securitytracker.com/id?1023312 - http://secunia.com/advisories/37631 - http://www.vupen.com/english/advisories/2009/3483 - http://www.securitytracker.com/id?1023313 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54665 - http://www.securityfocus.com/archive/1/508358/100/0/threaded - http://www.securitytracker.com/id?1023311 - http://seer.entsupport.symantec.com/docs/337293.htm
/508358/100/0/threaded - http://www.securitytracker.com/id?1023311 - http://seer.entsupport.symantec.com/docs/337293.htm - http://seer.entsupport.symantec.com/docs/336988.htm - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091209_00
CVE ID: CVE-2009-3028 State: PUBLISHED Published: 2011-03-07T20:00:00 Last Updated: 2024-08-07T06:14:55.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution 6.9.x, Notification Server 6.0.x, and Symantec Management Platform 7.0.x exposes an unsafe method, which allows remote attackers to force the download of arbitrary files and possibly execute arbitrary code via the DownloadAndInstall method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36346 - http://www.osvdb.org/57893 - http://www.symantec.com/security_re
References: - http://www.securityfocus.com/bid/36346 - http://www.osvdb.org/57893 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090922_00 - http://www.symantec.com/business/support/index?page=content&id=TECH44885 - http://secunia.com/advisories/36679
CVE ID: CVE-2009-3029 State: PUBLISHED Published: 2009-10-15T10:00:00 Last Updated: 2024-08-07T06:14:55.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the console in Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and earlier allows remote authenticated users to inject arbitrary web script or HTML via "external client input" that triggers crafted error messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2849 - http://secunia.com/advisories/36972 - http://www.osvdb.org/58651 - http://www.symantec.com/security_response/securityupdates/detail.jsp?
om/advisories/36972 - http://www.osvdb.org/58651 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091006_00 - http://securitytracker.com/id?1022989 - http://www.securityfocus.com/bid/36570
CVE ID: CVE-2009-3030 State: PUBLISHED Published: 2009-10-15T10:00:00 Last Updated: 2024-08-07T06:14:55.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and earlier allows remote attackers to inject arbitrary web script or HTML via vectors that trigger an error message in a response, related to an "HTML Injection issue." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2849 - http://secunia.com/advisories/36972 - http://www.osvdb.org/58650 - http://www.securityfocus.com/bid/36571 - http://www.symantec.com/
ia.com/advisories/36972 - http://www.osvdb.org/58650 - http://www.securityfocus.com/bid/36571 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091006_00 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53669 - http://securitytracker.com/id?1022989
CVE ID: CVE-2009-3031 State: PUBLISHED Published: 2009-11-03T16:00:00 Last Updated: 2024-08-07T06:14:56.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in AeXNSConsoleUtilities.dll in Symantec Altiris Notification Server (NS) 6.0 before R12, Deployment Server 6.8 and 6.9 in Symantec Altiris Deployment Solution 6.9 SP3, and Symantec Management Platform (SMP) 7.0 before SP3 allows remote attackers to execute arbitrary code via a long string in the second argument. Additional Analyst Notes: - CVE Program Container: References: - http://sotiriu.de/adv/
g string in the second argument. Additional Analyst Notes: - CVE Program Container: References: - http://sotiriu.de/adv/NSOADV-2009-001.txt - http://www.securityfocus.com/bid/36698 - http://www.vupen.com/english/advisories/2009/3117 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091102_00 - http://www.securityfocus.com/archive/1/507625/100/0/threaded - https://kb.altiris.com/article.asp?article=49568&p=1 - https://kb.altiris.com/article.asp?article=49389&p=1
CVE ID: CVE-2009-3032 State: PUBLISHED Published: 2010-03-05T19:00:00 Last Updated: 2024-08-07T06:14:56.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes 8.5, Symantec Mail Security for Microsoft Exchange 5.0.10 through 5.0.13, and other products, allows context-dependent attackers to execute arbitrary code via a crafted OLE document that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=20
ttp://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100304_00 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=858 - http://www-01.ibm.com/support/docview.wss?uid=swg21440812 - http://www.securityfocus.com/bid/38468
CVE ID: CVE-2009-3033 State: PUBLISHED Published: 2009-11-25T16:00:00 Last Updated: 2024-08-07T06:14:55.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web console in Symantec Altiris Deployment Solution 6.9.x, Altiris Notification Server 6.0.x, and Management Platform 7.0.x allows remote attackers to execute arbitrary code via a long string in the second argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37092 - http://www.vupen.com/english/advisories/2009/3328 - https://exchange.xforce.i
- http://www.securityfocus.com/bid/37092 - http://www.vupen.com/english/advisories/2009/3328 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54415 - https://kb.altiris.com/article.asp?article=50072&p=1 - https://kb.altiris.com/article.asp?article=50279&p=1 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091124_00 - http://osvdb.org/60496
CVE ID: CVE-2009-3034 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3035 State: PUBLISHED Published: 2010-02-02T16:25:00 Last Updated: 2024-08-07T06:14:56.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web console in Symantec Altiris Notification Server 6.0.x before 6.0 SP3 R12 uses a hardcoded key that can decrypt SQL Server credentials and certain discovery credentials, and stores this key on the Notification Server machine, which allows local users to obtain sensitive information and possibly execute arbitrary code by decrypting and using these credentials. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38356 - http://www.securityfocus.com/bid/37953 - http://osvdb.org/62
tainer: References: - http://secunia.com/advisories/38356 - http://www.securityfocus.com/bid/37953 - http://osvdb.org/62010 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100128_00 - http://www.securitytracker.com/id?1023521 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55952 - http://www.vupen.com/english/advisories/2010/0256
CVE ID: CVE-2009-3036 State: PUBLISHED Published: 2010-02-23T20:00:00 Last Updated: 2024-08-07T06:14:55.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the console in Symantec IM Manager 8.3 and 8.4 before 8.4.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/62446 - http://www.vupen.com/english/advisories/2010/0438 - http://secunia.com/advisories/38672 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100218_00 - http://www.secur
se/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100218_00 - http://www.securityfocus.com/bid/38241
CVE ID: CVE-2009-3037 State: PUBLISHED Published: 2009-09-01T16:00:00 Last Updated: 2024-08-07T06:14:55.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in xlssr.dll in the Autonomy KeyView XLS viewer (aka File Viewer for Excel), as used in IBM Lotus Notes 5.x through 8.5.x, Symantec Mail Security, Symantec BrightMail Appliance, Symantec Data Loss Prevention (DLP), and other products, allows remote attackers to execute arbitrary code via a crafted .xls spreadsheet attachment. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2389 - http://www.securityfocus.com/bid/36042 - http://secunia.com/advisories/
p://www.vupen.com/english/advisories/2009/2389 - http://www.securityfocus.com/bid/36042 - http://secunia.com/advisories/36472 - http://secunia.com/advisories/36474 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090825_00 - http://www-01.ibm.com/support/docview.wss?uid=swg21396492 - http://www.securityfocus.com/bid/36124
CVE ID: CVE-2009-3038 State: PUBLISHED Published: 2009-09-01T16:00:00 Last Updated: 2024-08-07T06:14:55.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain ActiveX control in lnresobject.dll 7.1.1.119 in the Research In Motion (RIM) Lotus Notes connector for BlackBerry Desktop Manager 5.0.0.11 allows remote attackers to cause a denial of service (Internet Explorer crash) by referencing the control's CLSID in the classid attribute of an OBJECT element. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9517
CVE ID: CVE-2009-3040 State: PUBLISHED Published: 2009-09-01T18:04:00 Last Updated: 2024-08-07T06:14:55.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Open Computer and Software (OCS) Inventory NG 1.02 for Unix allow remote attackers to execute arbitrary SQL commands via the (1) N, (2) DL, (3) O and (4) V parameters to download.php and the (5) SYSTEMID parameter to group_show.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.leidecker.info/advisories/2009-05-30-ocs_inventory_ng_sql_injection.shtml - http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=140&cntnt01ret
ection.shtml - http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=140&cntnt01returnid=72 - http://www.securityfocus.com/archive/1/503936/100/0/threaded
CVE ID: CVE-2009-3041 State: PUBLISHED Published: 2009-09-01T18:04:00 Last Updated: 2024-08-07T06:14:56.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: SPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 does not use proper access control for (1) ecrire/exec/install.php and (2) ecrire/index.php, which allows remote attackers to conduct unauthorized activities related to installation and backups, as exploited in the wild in August 2009. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36008 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52381 - http://secunia.com/advisories/36365 - http://www.spip-contrib.net/SPIP-Security-Al
.ibmcloud.com/vulnerabilities/52381 - http://secunia.com/advisories/36365 - http://www.spip-contrib.net/SPIP-Security-Alert-new-version - http://fil.rezo.net/secu-14346-14350+14354.patch
CVE ID: CVE-2009-3042 State: PUBLISHED Published: 2009-09-01T18:04:00 Last Updated: 2024-08-07T06:14:56.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in machine.php in Open Computer and Software (OCS) Inventory NG 1.02.1 allows remote attackers to execute arbitrary SQL commands via the systemid parameter, a different vector than CVE-2009-3040. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9416 - http://seclists.org/fulldisclosure/2009/Aug/0143.html - http://www.securityfocus.com/archive/1/505675/100/0/threaded - http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01a
com/archive/1/505675/100/0/threaded - http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=147&cntnt01returnid=15 - http://secunia.com/advisories/35311
CVE ID: CVE-2009-3043 State: PUBLISHED Published: 2009-09-02T17:00:00 Last Updated: 2024-08-07T06:14:55.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tty_ldisc_hangup function in drivers/char/tty_ldisc.c in the Linux kernel 2.6.31-rc before 2.6.31-rc8 allows local users to cause a denial of service (system crash, sometimes preceded by a NULL pointer dereference) or possibly gain privileges via certain pseudo-terminal I/O activity, as demonstrated by KernelTtyTest.c. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5c58ceff103d8a654f24769bb1baaf84a841b0cc - http://lkml.org/lkm
?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5c58ceff103d8a654f24769bb1baaf84a841b0cc - http://lkml.org/lkml/2009/8/20/21 - http://www.openwall.com/lists/oss-security/2009/09/03/6 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc8 - http://www.openwall.com/lists/oss-security/2009/09/03/7 - http://lkml.org/lkml/2009/8/20/68 - http://www.securityfocus.com/bid/36191 - http://www.openwall.com/lists/oss-security/2009/08/31/1 - http://lkml.org/lkml/2009/8/20/27
CVE ID: CVE-2009-3044 State: PUBLISHED Published: 2009-09-02T17:00:00 Last Updated: 2024-08-07T06:14:55.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 10.00 does not properly handle a (1) '\0' character or (2) invalid wildcard character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/freebsd/1000/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A
/docs/changelogs/freebsd/1000/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6444 - http://www.opera.com/docs/changelogs/solaris/1000/ - http://www.opera.com/docs/changelogs/linux/1000/ - http://www.opera.com/docs/changelogs/windows/1000/ - http://www.opera.com/support/kb/view/934/ - http://www.opera.com/docs/changelogs/mac/1000/
CVE ID: CVE-2009-3045 State: PUBLISHED Published: 2009-09-02T17:00:00 Last Updated: 2024-08-07T06:14:56.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 10.00 trusts root X.509 certificates signed with the MD2 algorithm, which makes it easier for man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted server certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/freebsd/1000/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6442 - http://www.opera.com/docs/changelogs/solaris/1000/ - http://www.opera.com/docs/changelogs/linux/1000/ - http://www.opera
http://www.opera.com/docs/changelogs/solaris/1000/ - http://www.opera.com/docs/changelogs/linux/1000/ - http://www.opera.com/support/kb/view/933/ - http://www.opera.com/docs/changelogs/windows/1000/ - http://www.opera.com/docs/changelogs/mac/1000/
CVE ID: CVE-2009-3046 State: PUBLISHED Published: 2009-09-02T17:00:00 Last Updated: 2024-08-07T06:14:55.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 10.00 does not check all intermediate X.509 certificates for revocation, which makes it easier for remote SSL servers to bypass validation of the certificate chain via a revoked certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/freebsd/1000/ - http://www.opera.com/support/kb/view/929/ - http://www.opera.com/docs/changelogs/solaris/1000/ - http://www.opera.com/docs/changelogs/linux/1000/ - http://www.opera.com/docs/changelogs/windows/1000/ - https://o
000/ - http://www.opera.com/docs/changelogs/linux/1000/ - http://www.opera.com/docs/changelogs/windows/1000/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6357 - http://www.opera.com/docs/changelogs/mac/1000/
CVE ID: CVE-2009-3047 State: PUBLISHED Published: 2009-09-02T17:00:00 Last Updated: 2024-08-07T06:14:55.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 10.00, when a collapsed address bar is used, does not properly update the domain name from the previously visited site to the currently visited site, which might allow remote attackers to spoof URLs. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/freebsd/1000/ - http://www.opera.com/support/kb/view/930/ - http://www.opera.com/docs/changelogs/solaris/1000/ - http://www.opera.com/docs/changelogs/linux/1000/ - https://oval.cisecurity.org/repository/search/definit
solaris/1000/ - http://www.opera.com/docs/changelogs/linux/1000/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6460 - http://www.opera.com/docs/changelogs/windows/1000/ - http://www.opera.com/docs/changelogs/mac/1000/
CVE ID: CVE-2009-3048 State: PUBLISHED Published: 2009-09-02T17:00:00 Last Updated: 2024-08-07T06:14:55.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 10.00 on Linux, Solaris, and FreeBSD does not properly implement the "INPUT TYPE=file" functionality, which allows remote attackers to trick a user into uploading an unintended file via vectors involving a "dropped file." Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/freebsd/1000/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5679 - http://www.opera.com/docs/changelogs/solaris/1000/ - http://www.opera.com/docs/change
al%3Aorg.mitre.oval%3Adef%3A5679 - http://www.opera.com/docs/changelogs/solaris/1000/ - http://www.opera.com/docs/changelogs/linux/1000/ - http://www.opera.com/support/kb/view/931/
CVE ID: CVE-2009-3049 State: PUBLISHED Published: 2009-09-02T17:00:00 Last Updated: 2024-08-07T06:14:55.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 10.00 does not properly display all characters in Internationalized Domain Names (IDN) in the address bar, which allows remote attackers to spoof URLs and conduct phishing attacks, related to Unicode and Punycode. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/freebsd/1000/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6235 - http://www.opera.com/docs/changelogs/solaris/1000/ - http://www.opera.com/docs/changelogs/lin
.mitre.oval%3Adef%3A6235 - http://www.opera.com/docs/changelogs/solaris/1000/ - http://www.opera.com/docs/changelogs/linux/1000/ - http://www.opera.com/support/kb/view/932/ - http://www.opera.com/docs/changelogs/windows/1000/ - http://www.opera.com/docs/changelogs/mac/1000/
CVE ID: CVE-2009-3050 State: PUBLISHED Published: 2009-09-02T17:00:00Z Last Updated: 2024-09-17T01:17:03.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the set_page_size function in util.cxx in HTMLDOC 1.8.27 and earlier allows context-dependent attackers to execute arbitrary code via a long MEDIA SIZE comment. NOTE: it was later reported that there were additional vectors in htmllib.cxx and ps-pdf.cxx using an AFM font file with a long glyph name, but these vectors do not cross privilege boundaries. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0907-exploits/htmldoc-overflow.txt - http://www.openwall.com/l
m Container: References: - http://packetstormsecurity.org/0907-exploits/htmldoc-overflow.txt - http://www.openwall.com/lists/oss-security/2009/09/01/1 - http://secunia.com/advisories/35780 - http://www.htmldoc.org/str.php?L214 - http://bugs.gentoo.org/show_bug.cgi?id=278186 - http://www.openwall.com/lists/oss-security/2009/07/25/3 - http://www.openwall.com/lists/oss-security/2009/07/26/2
CVE ID: CVE-2009-3051 State: PUBLISHED Published: 2009-09-10T18:00:00 Last Updated: 2024-08-07T06:14:56.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in lib/silcclient/client_entry.c in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.10, and SILC Client before 1.1.8, allow remote attackers to execute arbitrary code via format string specifiers in a nickname field, related to the (1) silc_client_add_client, (2) silc_client_update_client, and (3) silc_client_nickname_format functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2150 - http://www.openwall.com/li
s: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2150 - http://www.openwall.com/lists/oss-security/2009/08/31/5 - http://secunia.com/advisories/36134 - http://silcnet.org/general/news/news_client.php - http://silcnet.org/docs/changelog/SILC%20Toolkit%201.1.10 - http://secunia.com/advisories/36614 - http://silcnet.org/docs/release/SILC%20Client%201.1.8 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:235 - http://www.openwall.com/lists/oss-security/2009/09/03/5 - http://www.debian.org/security/2009/dsa-1879 - http://silcnet.org/general/news/news_toolkit.php - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html - http://
org/general/news/news_toolkit.php - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html - http://www.securityfocus.com/bid/35940 - http://silcnet.org/docs/changelog/SILC%20Client%201.1.8 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:234
CVE ID: CVE-2009-3052 State: PUBLISHED Published: 2009-09-03T17:00:00 Last Updated: 2024-08-07T06:14:55.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in root/includes/prime_quick_style.php in the Prime Quick Style addon before 1.2.3 for phpBB 3 allows remote authenticated users to execute arbitrary SQL commands via the prime_quick_style parameter to ucp.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpbb.com/community/viewtopic.php?f=70&t=692625&start=150#p10649315 - http://secunia.com/advisories/36532 - http://www.securityfocus.com/bid/36214 - http://www.exploit-db.com/exploits/9569 - http://www.absoluteanime.c