Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
09:329 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6636 - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html - http://secunia.com/advisories/37909 - http://www.redhat.com/support/errata/RHSA-2010-0474.html - http://www.redhat.com/support/errata/RHSA-2009-1670.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 - http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html - http://secunia.com/advisories/38834 - http://secunia.com/advisories/40218 - http://www.spinics.net/linux/lists/linux-nfs/msg03357.html - http://
ories/38834 - http://secunia.com/advisories/40218 - http://www.spinics.net/linux/lists/linux-nfs/msg03357.html - http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.31/ChangeLog-2.6.31-rc4 - http://www.openwall.com/lists/oss-security/2009/11/05/1 - http://www.openwall.com/lists/oss-security/2009/11/05/4 - http://www.debian.org/security/2010/dsa-2005 - http://www.vupen.com/english/advisories/2010/0528
CVE ID: CVE-2009-3727 State: PUBLISHED Published: 2009-11-10T18:00:00 Last Updated: 2024-08-07T06:38:30.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.3, 1.6.0.x before 1.6.0.17, and 1.6.1.x before 1.6.1.9; Business Edition A.x.x, B.x.x before B.2.5.12, C.2.x.x before C.2.4.5, and C.3.x.x before C.3.2.2; AsteriskNOW 1.5; and s800i 1.3.x before 1.3.0.5 generate different error messages depending on whether a SIP username is valid, which allows remote attackers to enumerate valid usernames via multiple crafted REGISTER messages with inconsistent usernames in the URI in the To header and the Digest in the Authorizati
iple crafted REGISTER messages with inconsistent usernames in the URI in the To header and the Digest in the Authorization header. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37265 - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00838.html - http://secunia.com/advisories/37479 - http://secunia.com/advisories/37677 - http://www.debian.org/security/2009/dsa-1952 - https://bugzilla.redhat.com/show_bug.cgi?id=523277 - https://bugzilla.redhat.com/show_bug.cgi?id=533137 - http://www.securityfocus.com/bid/36924 - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00789.html - http://osvdb.org/59697 -
d/36924 - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00789.html - http://osvdb.org/59697 - http://downloads.asterisk.org/pub/security/AST-2009-008.html - http://www.securitytracker.com/id?1023133
CVE ID: CVE-2009-3728 State: PUBLISHED Published: 2009-11-09T19:00:00 Last Updated: 2024-08-07T06:38:30.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the ICC_Profile.getInstance method in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local International Color Consortium (ICC) profile files via a .. (dot dot) in a pathname, aka Bug Id 6631533. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6657 - http://support.apple.com/kb/H
ps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6657 - http://support.apple.com/kb/HT3970 - http://support.apple.com/kb/HT3969 - http://security.gentoo.org/glsa/glsa-200911-02.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10520 - http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html - http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html - http://secunia.com/advisories/37581 - http://java.sun.com/javase/6/webnotes/6u17.html - http://java.sun.com/j2se/1.5.0/ReleaseNotes.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:084 - http://secunia.com/advisories/37
0/ReleaseNotes.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:084 - http://secunia.com/advisories/37386 - https://bugzilla.redhat.com/show_bug.cgi?id=530098
CVE ID: CVE-2009-3729 State: PUBLISHED Published: 2009-11-09T19:00:00 Last Updated: 2024-08-07T06:38:30.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the TrueType font parsing functionality in Sun Java SE 5.0 before Update 22 and 6 before Update 17 allows remote attackers to cause a denial of service (application crash) via a certain test suite, aka Bug Id 6815780. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://java.sun.com/javase/6/webnotes/6u17.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7537 - https://bugzilla.redhat
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7537 - https://bugzilla.redhat.com/show_bug.cgi?id=532904 - http://java.sun.com/j2se/1.5.0/ReleaseNotes.html - http://secunia.com/advisories/37386
CVE ID: CVE-2009-3730 State: PUBLISHED Published: 2009-10-20T17:00:00 Last Updated: 2024-08-07T06:38:30.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the ReqWeb Help feature (aka the Web Client Help system) in IBM Rational RequisitePro 7.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the operation parameter to ReqWebHelp/advanced/workingSet.jsp, or the (2) searchWord, (3) maxHits, (4) scopedSearch, or (5) scope parameter to ReqWebHelp/basic/searchView.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/59088 - http://secunia.com/advisories/37052 - http://www.
Notes: - CVE Program Container: References: - http://osvdb.org/59088 - http://secunia.com/advisories/37052 - http://www.vupen.com/english/advisories/2009/2958 - http://www.securityfocus.com/bid/36721 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK83895 - http://osvdb.org/59089
CVE ID: CVE-2009-3731 State: PUBLISHED Published: 2009-12-16T18:00:00 Last Updated: 2024-08-07T06:38:30.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WebWorks Help 2.0 through 5.0 in VMware vCenter 4.0 before Update 1 Build 208156; VMware Server 2.0.2; VMware ESX 4.0; VMware Lab Manager 2.x; VMware vCenter Lab Manager 3.x and 4.x before 4.0.1; VMware Stage Manager 1.x before 4.0.1; WebWorks Publisher 6.x through 8.x; WebWorks Publisher 2003; and WebWorks ePublisher 9.0.x through 9.3, 2008.1 through 2008.4, and 2009.x before 2009.3 allow remote attackers to inject arbitrary web script or HTML via (1) wwhelp_entry.html, r
8.4, and 2009.x before 2009.3 allow remote attackers to inject arbitrary web script or HTML via (1) wwhelp_entry.html, reachable through index.html and wwhsec.htm, (2) wwhelp/wwhimpl/api.htm, (3) wwhelp/wwhimpl/common/html/frameset.htm, (4) wwhelp/wwhimpl/common/scripts/switch.js, or (5) the window.opener component in wwhelp/wwhimpl/common/html/bookmark.htm, related to (a) unspecified parameters and (b) messages used in topic links for the bookmarking functionality. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2009-12/0229.html - http://www.webworks.com/Security/2009-0001/ - http://securitytracker.com/id?1023683 - http://www.
aq/2009-12/0229.html - http://www.webworks.com/Security/2009-0001/ - http://securitytracker.com/id?1023683 - http://www.osvdb.org/62738 - http://www.securityfocus.com/bid/37346 - http://secunia.com/advisories/38749 - http://www.osvdb.org/62742 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5944 - http://www.securityfocus.com/archive/1/509883/100/0/threaded - http://www.osvdb.org/62741 - http://secunia.com/advisories/38842 - http://www.osvdb.org/62739 - http://lists.vmware.com/pipermail/security-announce/2009/000073.html - http://www.osvdb.org/62740
CVE ID: CVE-2009-3732 State: PUBLISHED Published: 2010-04-12T18:00:00 Last Updated: 2024-08-07T06:38:30.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201209-25.xml - http://lists.vmware.com/pipermail/security-announce/2010/000090.html - http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html - http://secunia.com/advisories/39110 - http://www.vmware.com/security/advisories/VMSA-2010-0007.html - htt
04/0077.html - http://secunia.com/advisories/39110 - http://www.vmware.com/security/advisories/VMSA-2010-0007.html - http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html
CVE ID: CVE-2009-3733 State: PUBLISHED Published: 2009-11-02T15:00:00 Last Updated: 2024-08-07T06:38:30.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201209-25.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7822 - http://www.vupen.com/english/advisories/2009/3062 - http://securitytracker.
inition/oval%3Aorg.mitre.oval%3Adef%3A7822 - http://www.vupen.com/english/advisories/2009/3062 - http://securitytracker.com/id?1023089 - http://lists.vmware.com/pipermail/security-announce/2009/000069.html - http://www.securityfocus.com/bid/36842 - http://secunia.com/advisories/37186 - http://www.securityfocus.com/archive/1/507523/100/0/threaded - http://securitytracker.com/id?1023088 - http://www.vmware.com/security/advisories/VMSA-2009-0015.html
CVE ID: CVE-2009-3734 State: PUBLISHED Published: 2010-01-05T18:00:00 Last Updated: 2024-08-07T06:38:30.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the management console in the S2 Security Linear eMerge Access Control System 2.5.x allows remote attackers to cause a denial of service (configuration reset) via a request to a crafted URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/WDON-7ZDNNE - http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon - http://www.kb.cert.org/vuls/id/WDON-7ZDNNZ - http://
lectronic-door-access-controllersquot-shawn-merdinger-carolinacon - http://www.kb.cert.org/vuls/id/WDON-7ZDNNZ - http://blip.tv/file/3414004 - http://www.kb.cert.org/vuls/id/571629
CVE ID: CVE-2009-3735 State: PUBLISHED Published: 2010-02-11T17:00:00 Last Updated: 2024-08-07T06:38:30.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ActiveScan Installer ActiveX control in as2stubie.dll before 1.3.3.0 in PandaActiveScan Installer 2.0 in Panda ActiveScan downloads software in an as2guiie.cab archive located at an arbitrary URL, and does not verify the archive's digital signature before installation, which allows remote attackers to execute arbitrary code via a URL argument to an unspecified method. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0354 - https://docs.microsoft.com/en-us/securit
am Container: References: - http://www.vupen.com/english/advisories/2010/0354 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-008 - http://www.kb.cert.org/vuls/id/MAPG-7QPKL3 - http://www.securityfocus.com/bid/38067 - http://www.kb.cert.org/vuls/id/869993 - http://secunia.com/advisories/38485
CVE ID: CVE-2009-3736 State: PUBLISHED Published: 2009-11-27T20:00:00 Last Updated: 2024-08-07T06:38:29.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201311-10.xml - http://www.mandriva.com/security/advisories?name=MDVSA-2010:105 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035133.h
curity/advisories?name=MDVSA-2010:105 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035133.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:091 - http://support.avaya.com/css/P8/documents/100074869 - ftp://ftp.gnu.org/gnu/libtool/libtool-2.2.6a-2.2.6b.diff.gz - http://secunia.com/advisories/39299 - http://secunia.com/advisories/38577 - http://secunia.com/advisories/38617 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:035 - http://secunia.com/advisories/37414 - https://bugzilla.redhat.com/show_bug.cgi?id=537941 - http://hamlib.svn.sourceforge.net/viewvc/hamlib/trunk/libltdl/Makefile.am?revision=2841&view=markup - http://secunia.com/
ttp://hamlib.svn.sourceforge.net/viewvc/hamlib/trunk/libltdl/Makefile.am?revision=2841&view=markup - http://secunia.com/advisories/55721 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035168.html - http://secunia.com/advisories/38190 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6951 - http://git.savannah.gnu.org/cgit/libtool.git/commit/?h=branch-1-5&id=29b48580df75f0c5baa2962548a4c101ec7ed7ec - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01512.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054921.html - http://www.redhat.com/support/errata/RHSA-2010-0039.html - htt
t.org/pipermail/package-announce/2011-March/054921.html - http://www.redhat.com/support/errata/RHSA-2010-0039.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:307 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054656.html - http://secunia.com/advisories/43617 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054915.html - http://lists.gnu.org/archive/html/libtool/2009-11/msg00059.html - http://www.vupen.com/english/advisories/2011/0574 - http://www.securityfocus.com/bid/37128 - http://lists.gnu.org/archive/html/libtool/2009-11/msg00065.html - http://secu
- http://www.securityfocus.com/bid/37128 - http://lists.gnu.org/archive/html/libtool/2009-11/msg00065.html - http://secunia.com/advisories/37489 - http://secunia.com/advisories/39347 - https://rhn.redhat.com/errata/RHSA-2010-0095.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11687 - http://secunia.com/advisories/38696 - http://secunia.com/advisories/37997 - http://secunia.com/advisories/38915
CVE ID: CVE-2009-3737 State: PUBLISHED Published: 2010-08-17T17:31:00Z Last Updated: 2024-09-16T20:06:48.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Oracle Siebel Option Pack for IE ActiveX control does not properly initialize memory that is used by the NewBusObj method, which allows remote attackers to execute arbitrary code via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2028 - http://www.osvdb.org/66926 - http://secunia.com/advisories/40804 - http://www.kb.cert.org/vuls/id/174089
CVE ID: CVE-2009-3739 State: PUBLISHED Published: 2010-01-19T16:00:00 Last Updated: 2024-08-07T06:38:30.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities on the Rockwell Automation AB Micrologix 1100 and 1400 controllers allow remote attackers to obtain privileged access or cause a denial of service (halt) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/508946/100/0/threaded
CVE ID: CVE-2009-3741 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3742 State: PUBLISHED Published: 2010-01-07T20:00:00Z Last Updated: 2024-09-16T20:36:41.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Liferay Portal before 5.3.0 allows remote attackers to inject arbitrary web script or HTML via the p_p_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://issues.liferay.com/browse/LPS-6034 - http://www.kb.cert.org/vuls/id/750796
CVE ID: CVE-2009-3743 State: PUBLISHED Published: 2010-08-26T20:00:00 Last Updated: 2024-08-07T06:38:30.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the Ins_MINDEX function in the TrueType bytecode interpreter in Ghostscript before 8.71 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a malformed TrueType font in a document that trigger an integer overflow and a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://rhn.redhat.com/errata/RHSA-2012-0095.html - http://security.gentoo.org/glsa/glsa-201412-17.xml - http://www.securitytracker.com/id?10247
rrata/RHSA-2012-0095.html - http://security.gentoo.org/glsa/glsa-201412-17.xml - http://www.securitytracker.com/id?1024785 - http://www.securityfocus.com/archive/1/514892/100/0/threaded - http://www.kb.cert.org/vuls/id/JALR-87YGN8 - http://www.kb.cert.org/vuls/id/644319
CVE ID: CVE-2009-3744 State: PUBLISHED Published: 2009-10-22T15:26:00 Last Updated: 2024-08-07T06:38:30.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: rep_serv.exe 6.3.1.3 in the server in EMC RepliStor allows remote attackers to cause a denial of service via a crafted packet to TCP port 7144. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/507322/100/0/threaded - http://www.securityfocus.com/bid/36738 - http://retrogod.altervista.org/9sg_emc_repli_crash.html
CVE ID: CVE-2009-3745 State: PUBLISHED Published: 2009-10-22T15:26:00 Last Updated: 2024-08-07T06:38:30.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the help pages in IBM Rational AppScan Enterprise Edition 5.5.0.2 allows remote attackers to inject arbitrary web script or HTML via the query string. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37093 - http://www.vupen.com/english/advisories/2009/2974 - http://www-01.ibm.com/support/docview.wss?uid=swg24024704 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53821 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK97516 - h
tps://exchange.xforce.ibmcloud.com/vulnerabilities/53821 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK97516 - http://www.securityfocus.com/bid/36734
CVE ID: CVE-2009-3746 State: PUBLISHED Published: 2009-10-22T16:00:00 Last Updated: 2024-08-07T06:38:30.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: XScreenSaver in Sun Solaris 10, when the accessibility feature is enabled, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different vulnerability than CVE-2009-1276 and CVE-2009-2711. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-29-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6644 - http://sunsolve
094-29-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6644 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-268288-1
CVE ID: CVE-2009-3747 State: PUBLISHED Published: 2009-10-22T17:00:00 Last Updated: 2024-08-07T06:38:30.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in TBmnetCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the content parameter. NOTE: this was originally reported for tbmnet.php, but that program does not exist in the TBmnetCMS 1.0 distribution. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0910-exploits/tbmnetcms-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/53828 - http://www.securityfocus.com/bid/36733 - http://secunia.com/ad
ps://exchange.xforce.ibmcloud.com/vulnerabilities/53828 - http://www.securityfocus.com/bid/36733 - http://secunia.com/advisories/32462
CVE ID: CVE-2009-3748 State: PUBLISHED Published: 2009-10-22T17:00:00 Last Updated: 2024-08-07T06:38:30.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Web Administrator in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allow remote attackers to inject arbitrary web script or HTML via the (1) FileName, (2) IsolatedMessageID, (3) ServerName, (4) Dictionary, (5) Scoring, and (6) MessagePart parameters to web/msgList/viewmsg/actions/msgAnalyse.asp; the (7) Queue, (8) FileName, (9) IsolatedMessageID, and (10) ServerName parameters to actions/msgForwardToRiskFilter.asp and viewHe
ue, (8) FileName, (9) IsolatedMessageID, and (10) ServerName parameters to actions/msgForwardToRiskFilter.asp and viewHeaders.asp in web/msgList/viewmsg/; and (11) the subject in an e-mail message that is held in a Queue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/507330/100/0/threaded - http://sotiriu.de/adv/NSOADV-2009-003.txt - http://www.securityfocus.com/bid/36741 - http://kb.websense.com/display/4/kb/article.aspx?aid=4786 - http://www.vupen.com/english/advisories/2009/2987 - http://secunia.com/advisories/37091
CVE ID: CVE-2009-3749 State: PUBLISHED Published: 2009-10-22T17:00:00 Last Updated: 2024-08-07T06:38:30.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Administrator service (STEMWADM.EXE) in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allows remote attackers to cause a denial of service (crash) by sending a HTTP GET request to TCP port 8181 and closing the socket before the service can send a response. Additional Analyst Notes: - CVE Program Container: References: - http://sotiriu.de/adv/NSOADV-2009-002.txt - http://kb.websense.com/display/4/kb/article.aspx?aid=4786 - http://www.securityfocus.com/bid/36740 - http://www.s
.txt - http://kb.websense.com/display/4/kb/article.aspx?aid=4786 - http://www.securityfocus.com/bid/36740 - http://www.securityfocus.com/archive/1/507329/100/0/threaded - http://kb.websense.com/article.aspx?article=4786&p=12 - http://www.vupen.com/english/advisories/2009/2987 - http://secunia.com/advisories/37091
CVE ID: CVE-2009-3750 State: PUBLISHED Published: 2009-10-22T17:00:00 Last Updated: 2024-08-07T06:38:30.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in read.php in ToyLog 0.1 allows remote attackers to execute arbitrary SQL commands via the idm parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/55804 - http://www.exploit-db.com/exploits/9109 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51633 - http://secunia.com/advisories/35791