Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-4040 State: PUBLISHED Published: 2009-11-20T19:00:00Z Last Updated: 2024-09-16T16:23:01.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.0.17 and 2.5.x before 2.5.2, when used with Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the search page. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/3241 - http://secunia.com/advisories/37354 - http://www.phpmyfaq.de/advisory_2009-09-01.php
CVE ID: CVE-2009-4041 State: PUBLISHED Published: 2009-11-20T19:00:00Z Last Updated: 2024-09-17T00:56:17.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: UseBB 1.0.9 before 1.0.10 allows remote attackers to cause a denial of service (infinite loop) via crafted BBCode tags. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37328 - http://www.securityfocus.com/bid/37010 - http://www.usebb.net/community/topic-2388.html - http://www.usebb.net/community/topic-post9775.html - http://www.vupen.com/english/advisories/2009/3222
CVE ID: CVE-2009-4042 State: PUBLISHED Published: 2009-11-20T19:00:00 Last Updated: 2024-08-07T06:45:50.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the RootCandy theme 6.x before 6.x-1.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via the URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/3210 - http://secunia.com/advisories/37334 - http://drupal.org/node/630168 - http://www.securityfocus.com/bid/36998 - http://drupal.org/node/629894 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54245 - http://osvdb.org/59914
CVE ID: CVE-2009-4043 State: PUBLISHED Published: 2009-11-20T19:00:00 Last Updated: 2024-08-07T06:45:51.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the AddToAny module 5.x before 5.x-2.4 and 6.x before 6.x-2.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via a node title. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36999 - http://drupal.org/node/601110 - http://www.vupen.com/english/advisories/2009/3211 - http://drupal.org/node/630208 - http://drupal.org/node/630198 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54247 - http://osvdb.org/59
30208 - http://drupal.org/node/630198 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54247 - http://osvdb.org/59913 - http://secunia.com/advisories/37353
CVE ID: CVE-2009-4044 State: PUBLISHED Published: 2009-11-20T19:00:00 Last Updated: 2024-08-07T06:45:50.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Services module 6.x for Drupal does not perform the expected access control, which allows remote attackers to make unspecified use of an API via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/630244 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54249 - http://www.vupen.com/english/advisories/2009/3218 - http://www.securityfocus.com/bid/37000
CVE ID: CVE-2009-4045 State: PUBLISHED Published: 2009-11-20T19:00:00Z Last Updated: 2024-09-16T19:34:58.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.1.7 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to various .inc and .php files in (1) reporting/, (2) sales/, (3) sales/includes/, (4) sales/includes/db/, (5) sales/inquiry/, (6) sales/manage/, (7) sales/view/, (8) taxes/, and (9) taxes/db/. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37327 - http://sourceforge.net/projects/frontaccounting/files/FrontAccounting-2/2.
nces: - http://secunia.com/advisories/37327 - http://sourceforge.net/projects/frontaccounting/files/FrontAccounting-2/2.1.7/frontaccount-2.1.7.tar.gz/download - http://frontaccounting.net/wb3/pages/posts/2.1.7-security-release103.php - http://www.vupen.com/english/advisories/2009/3223
CVE ID: CVE-2009-4046 State: PUBLISHED Published: 2009-11-20T19:00:00Z Last Updated: 2024-09-16T17:28:23.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in FrontAccounting (FA) 2.2.x before 2.2 RC allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) bank_accounts.php, (2) currencies.php, (3) exchange_rates.php, (4) gl_account_types.php, and (5) gl_accounts.php in gl/manage/; and (6) audit_trail_db.inc, (7) comments_db.inc, (8) inventory_db.inc, (9) manufacturing_db.inc, and (10) references_db.inc in includes/db/. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/
erences_db.inc in includes/db/. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/projects/frontaccounting/files/FrontAccounting-2/2.2%20RC/frontaccount-2.2RC.tar.gz/download - http://frontaccounting.net/wb3/pages/posts/release-2.2-rc104.php - http://www.vupen.com/english/advisories/2009/3223
CVE ID: CVE-2009-4047 State: PUBLISHED Published: 2009-11-23T17:00:00Z Last Updated: 2024-09-16T22:15:53.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHD Help Desk 1.43 allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO to area.php; the (2) pagina, (3) sentido, (4) q_registros, and (5) orden parameters to area.php; (6) the q_registros parameter to solic_display.php; (7) the PATH_INFO to area_list.php; (8) the q_registros parameter to area_list.php; (9) the PATH_INFO to atributo.php; the (10) pagina, (11) q_registros, and (12) orden parameters to atributo_list.php; (13) an arbitrary para
atributo.php; the (10) pagina, (11) q_registros, and (12) orden parameters to atributo_list.php; (13) an arbitrary parameter name beginning with "sentido" to atributo_list.php; and (14) the PATH_INFO to caso_insert.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/60088 - http://osvdb.org/60090 - http://secunia.com/advisories/37375 - http://osvdb.org/60086 - http://www.securityfocus.com/bid/37029 - http://osvdb.org/60087 - http://osvdb.org/60089 - http://osvdb.org/60085
CVE ID: CVE-2009-4048 State: PUBLISHED Published: 2009-11-23T17:00:00 Last Updated: 2024-08-07T06:45:50.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dxmsoft XM Easy Personal FTP Server 5.8.0 allows remote authenticated users to cause a denial of service (daemon outage) via an APPE command to one socket in conjunction with a DELE command to a second socket. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37016 - http://www.securityfocus.com/archive/1/507853/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/54277
CVE ID: CVE-2009-4049 State: PUBLISHED Published: 2009-11-23T17:00:00 Last Updated: 2024-08-07T06:45:51.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via crafted arguments to IOCTL 0x80002024. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37031 - http://www.vupen.com/english/advisories/2009/3266 - http://secunia.com/advisories/37368 - http://www.efblog.net/2009/11/avast-aswrdrsys-kernel-pool-corruption.html - http://www.s
/secunia.com/advisories/37368 - http://www.efblog.net/2009/11/avast-aswrdrsys-kernel-pool-corruption.html - http://www.securityfocus.com/archive/1/507891/100/0/threaded - https://www.evilfingers.com/advisory/Advisory/Avast_aswRdr_sys_Kernel_Pool_Corruption_and_Local_Privilege_Escalation.php
CVE ID: CVE-2009-4050 State: PUBLISHED Published: 2009-11-23T17:00:00Z Last Updated: 2024-09-16T16:13:07.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 allows remote attackers to read arbitrary files via directory traversal sequences in the view parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37370 - http://osvdb.org/60073
CVE ID: CVE-2009-4051 State: PUBLISHED Published: 2009-11-23T17:00:00 Last Updated: 2024-08-07T06:45:50.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Home FTP Server 1.10.1.139 allows remote attackers to cause a denial of service (daemon outage) via multiple invalid SITE INDEX commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37033 - http://www.securityfocus.com/archive/1/507893/100/0/threaded - http://secunia.com/advisories/37381 - http://www.vupen.com/english/advisories/2009/3269
CVE ID: CVE-2009-4052 State: PUBLISHED Published: 2009-11-23T17:00:00 Last Updated: 2024-08-07T06:45:50.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the JSF Widget Library Runtime in IBM Rational Application Developer for WebSphere Software before 7.0.0.10 and Rational Software Architect before 7.0.0.10 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) the JSF Tree Control and (2) the JavaScript Resource Servlet. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/60319 - http://secunia.com/advisories/37442 - http://www-01.ibm.com/support/docview.w
References: - http://www.osvdb.org/60319 - http://secunia.com/advisories/37442 - http://www-01.ibm.com/support/docview.wss?uid=swg27012558 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK90616 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54360 - http://www-01.ibm.com/support/docview.wss?uid=swg27012378 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK94324 - http://www.securityfocus.com/bid/37083
CVE ID: CVE-2009-4053 State: PUBLISHED Published: 2009-11-23T17:00:00Z Last Updated: 2024-09-16T19:46:21.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Home FTP Server 1.10.1.139 allow remote authenticated users to (1) create arbitrary directories via directory traversal sequences in an MKD command or (2) create files with any contents in arbitrary directories via directory traversal sequences in a file upload request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37
ird party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37381
CVE ID: CVE-2009-4054 State: REJECTED Published: 2009-11-23T17:00:00 Last Updated: 2009-12-04T10:00:00 Description: No description available.
CVE ID: CVE-2009-4055 State: PUBLISHED Published: 2009-12-02T11:00:00 Last Updated: 2024-08-07T06:45:51.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: rtp.c in Asterisk Open Source 1.2.x before 1.2.37, 1.4.x before 1.4.27.1, 1.6.0.x before 1.6.0.19, and 1.6.1.x before 1.6.1.11; Business Edition B.x.x before B.2.5.13, C.2.x.x before C.2.4.6, and C.3.x.x before C.3.2.3; and s800i 1.3.x before 1.3.0.6 allows remote attackers to cause a denial of service (daemon crash) via an RTP comfort noise payload with a long data length. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37153 - http://www.securityfocus.com/archive/1/508147/100
gram Container: References: - http://www.securityfocus.com/bid/37153 - http://www.securityfocus.com/archive/1/508147/100/0/threaded - http://secunia.com/advisories/37677 - http://securitytracker.com/id?1023249 - http://www.debian.org/security/2009/dsa-1952 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54471 - http://downloads.asterisk.org/pub/security/AST-2009-010-1.4.diff.txt - http://downloads.asterisk.org/pub/security/AST-2009-010-1.6.0.diff.txt - http://secunia.com/advisories/37530 - http://www.redhat.com/archives/fedora-package-announce/2009-December/msg00759.html - https://issues.asterisk.org/view.php?id=16242 - http://downloads.asterisk.org/pub/security/AST-2009-010-1.6.1.dif
html - https://issues.asterisk.org/view.php?id=16242 - http://downloads.asterisk.org/pub/security/AST-2009-010-1.6.1.diff.txt - http://secunia.com/advisories/37708 - http://www.osvdb.org/60569 - http://downloads.digium.com/pub/security/AST-2009-010.html - http://www.vupen.com/english/advisories/2009/3368 - http://downloads.asterisk.org/pub/security/AST-2009-010-1.2.diff.txt
CVE ID: CVE-2009-4056 State: PUBLISHED Published: 2009-11-24T02:00:00Z Last Updated: 2024-09-16T20:36:36.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin/popup.php in Betsy CMS 3.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the popup parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37422 - http://www.vupen.com/english/advisories/2009/3314 - http://www.packetstormsecurity.org/0911-exploits/betsycms-lfi.txt
CVE ID: CVE-2009-4057 State: PUBLISHED Published: 2009-11-24T02:00:00 Last Updated: 2024-08-07T06:45:51.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the inertialFATE iF Portfolio Nexus (com_if_nexus) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an item action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37050 - http://secunia.com/advisories/37408 - http://osvdb.org/60308 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54325 - http://www.packetstormsecurity.org/0911-exploits/joomlanexus-sql.txt
CVE ID: CVE-2009-4058 State: PUBLISHED Published: 2009-11-24T02:00:00 Last Updated: 2024-08-07T06:45:51.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in allauctions.php in Telebid Auction Script allows remote attackers to execute arbitrary SQL commands via the aid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploit.php?id=10165 - http://osvdb.org/60307 - http://secunia.com/advisories/37417 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54349
CVE ID: CVE-2009-4059 State: PUBLISHED Published: 2009-11-24T02:00:00 Last Updated: 2024-08-07T06:45:50.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JoomClip (com_joomclip) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a thumbs action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37049 - http://osvdb.org/60195 - http://secunia.com/advisories/37400 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54323 - http://packetstormsecurity.org/0911-exploits/joomlajoomclip-sql.txt
CVE ID: CVE-2009-4060 State: PUBLISHED Published: 2009-11-24T02:00:00 Last Updated: 2024-08-07T06:45:51.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in includes/content/viewProd.inc.php in CubeCart before 4.3.7 remote attackers to execute arbitrary SQL commands via the productId parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37065 - http://osvdb.org/60306 - http://forums.cubecart.com/index.php?showtopic=39900 - http://www.vupen.com/english/advisories/2009/3290 - http://secunia.com/advisories/37402 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54331
CVE ID: CVE-2009-4061 State: PUBLISHED Published: 2009-11-24T02:00:00 Last Updated: 2024-08-07T06:45:51.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Agreement module 6.x before 6.x-1.2 for Drupal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37437 - http://drupal.org/node/636568 - http://drupal.org/node/631538 - http://www.securityfocus.com/bid/37057 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54342 - http://osvdb.org/60274
CVE ID: CVE-2009-4062 State: PUBLISHED Published: 2009-11-24T02:00:00 Last Updated: 2024-08-07T06:45:50.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Printfriendly module 6.x before 6.x-1.6 for Drupal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37059 - http://osvdb.org/60281 - http://drupal.org/node/636678 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54348 - http://drupal.org/node/636670 - http://secunia.com/advisories/37441
CVE ID: CVE-2009-4063 State: PUBLISHED Published: 2009-11-24T02:00:00 Last Updated: 2024-08-07T06:45:51.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Subgroups for Organic Groups (OG) module 5.x before 5.x-4.0 and 5.x before 5.x-3.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified node titles. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/630004 - http://osvdb.org/60287 - http://drupal.org/node/636562 - http://secunia.com/advisories/37438 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54341 - http://www.securityfocus.com/bid/37056
CVE ID: CVE-2009-4064 State: PUBLISHED Published: 2009-11-24T02:00:00 Last Updated: 2024-08-07T06:45:50.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Gallery Assist module 6.x before 6.x-1.7 for Drupal allows remote attackers to inject arbitrary web script or HTML via node titles. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37061 - http://osvdb.org/60270 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54347 - http://secunia.com/advisories/37425 - http://drupal.org/node/636488 - http://drupal.org/node/636660
CVE ID: CVE-2009-4065 State: PUBLISHED Published: 2009-11-24T02:00:00 Last Updated: 2024-08-07T06:45:51.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the settings page in the Strongarm module 6.x before 6.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via the value field when viewing overridden variables. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37436 - http://www.securityfocus.com/bid/37055 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54337 - http://drupal.org/node/636462 - http://drupal.org/node/636474 - http://osvdb.org/60284
CVE ID: CVE-2009-4066 State: PUBLISHED Published: 2009-11-24T02:00:00 Last Updated: 2024-08-07T06:45:51.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the "My Account" feature in PHPList Integration module 5 before 5.x-1.2 and 6 before 6.x-1.1 for Drupal allow remote attackers to hijack the authentication of arbitrary users via vectors related to (1) subscribing or (2) unsubscribing to mailing lists. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/636400 - http://drupal.org/node/636412 - http://osvdb.org/60283 - http://secunia.com/advisories/37434 - http://www.securityfocus.
http://drupal.org/node/636412 - http://osvdb.org/60283 - http://secunia.com/advisories/37434 - http://www.securityfocus.com/bid/37054 - http://drupal.org/node/636398 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54336
CVE ID: CVE-2009-4067 State: PUBLISHED Published: 2020-02-11T18:01:32 Last Updated: 2024-08-07T06:45:51.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the auerswald_probe function in the Auerswald Linux USB driver for the Linux kernel before 2.6.27 allows physically proximate attackers to execute arbitrary code, cause a denial of service via a crafted USB device, or take full control of the system. Additional Analyst Notes: - CVE Program Container: References: - http://labs.mwrinfosecurity.com/files/Advisories/mwri_linux-usb-buffer-overflow_2009-10-29.pdf - https://bugzilla.redhat.com/show_bug.cgi?id=722393
CVE ID: CVE-2009-4069 State: PUBLISHED Published: 2009-11-24T17:00:00Z Last Updated: 2024-09-16T22:55:24.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5.14, 4.7.3, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2009/dsa-1818 - http://secunia.com/advisories/35458 - http://www.securityfocus.com/bid/35424
CVE ID: CVE-2009-4070 State: PUBLISHED Published: 2009-11-24T17:00:00Z Last Updated: 2024-09-16T20:59:07.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in GForge 4.5.14, 4.7.3, and possibly other versions allows remote attackers to execute arbitrary SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2009/dsa-1818 - http://secunia.com/advisories/35458 - http://www.securityfocus.com/bid/35424
CVE ID: CVE-2009-4071 State: PUBLISHED Published: 2009-11-24T17:00:00 Last Updated: 2024-08-07T06:54:08.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 10.10, when exception stacktraces are enabled, places scripting error messages from a web site into variables that can be read by a different web site, which allows remote attackers to obtain sensitive information or conduct cross-site scripting (XSS) attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/unix/1010/ - http://www.securityfocus.com/bid/37089 - http://secunia.com/advisories/37469 - http://www.opera.com/docs/changelogs/mac
http://www.securityfocus.com/bid/37089 - http://secunia.com/advisories/37469 - http://www.opera.com/docs/changelogs/mac/1010/ - http://www.opera.com/docs/changelogs/windows/1010/ - http://www.opera.com/support/kb/view/941/ - http://osvdb.org/60527 - http://www.vupen.com/english/advisories/2009/3297 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6385
CVE ID: CVE-2009-4072 State: PUBLISHED Published: 2009-11-24T17:00:00 Last Updated: 2024-08-07T06:54:08.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Opera before 10.10 has unknown impact and attack vectors, related to a "moderately severe issue." Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/unix/1010/ - http://www.securityfocus.com/bid/37089 - http://secunia.com/advisories/37469 - http://osvdb.org/60528 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6543 - http://www.opera.com/docs/changelogs/mac/1010/ - http://www.opera.com/docs/changelogs/window
g.mitre.oval%3Adef%3A6543 - http://www.opera.com/docs/changelogs/mac/1010/ - http://www.opera.com/docs/changelogs/windows/1010/ - http://www.vupen.com/english/advisories/2009/3297