Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-0523 State: PUBLISHED Published: 2009-02-26T16:00:00 Last Updated: 2024-08-07T04:40:05.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Adobe RoboHelp Server 6 and 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is not properly handled when displaying the Help Errors log. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0512 - http://securitytracker.com/id?1021755 - http://secunia.com/advisories/34048 - http://www.adobe.com/support/security/bulletins/apsb09-02.html - https://exchange.xforce.ibmcloud.com/vulnerabilit
048 - http://www.adobe.com/support/security/bulletins/apsb09-02.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/48890 - http://www.securityfocus.com/bid/33887
CVE ID: CVE-2009-0524 State: PUBLISHED Published: 2009-02-26T16:00:00 Last Updated: 2024-08-07T04:40:03.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 6 and 7, and RoboHelp Server 6 and 7, allows remote attackers to inject arbitrary web script or HTML via vectors involving files produced by RoboHelp. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0512 - http://securitytracker.com/id?1021755 - http://www.securityfocus.com/bid/33888 - http://secunia.com/advisories/34048 - http://www.adobe.com/support/security/bulletins/apsb09-02.html - https://exchange.xfor
://secunia.com/advisories/34048 - http://www.adobe.com/support/security/bulletins/apsb09-02.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/48889 - http://secunia.com/advisories/34032
CVE ID: CVE-2009-0525 State: PUBLISHED Published: 2009-02-11T20:00:00Z Last Updated: 2024-09-16T23:30:53.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the sajax_get_common_js function in php/Sajax.php in Sajax 0.12 allows remote attackers to inject arbitrary web script or HTML via the URL parameter, which is not properly handled when using browsers that do not URL-encode requests, such as Internet Explorer 6. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33894 - http://
ormation. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33894 - http://www.securityfocus.com/bid/33711
CVE ID: CVE-2009-0526 State: PUBLISHED Published: 2009-02-11T20:00:00 Last Updated: 2024-08-07T04:40:03.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in AdaptCMS Lite 1.4 allow remote attackers to inject arbitrary web script or HTML via the (1) url and (2) acuparam parameters, and (3) the URI. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33866 - https://www.exploit-db.com/exploits/8016 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48611 - http://www.securityfocus.com/bid/33698
CVE ID: CVE-2009-0527 State: PUBLISHED Published: 2009-02-11T20:00:00 Last Updated: 2024-08-07T04:40:04.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in plugins/rss_importer_functions.php in AdaptCMS Lite 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33866 - https://www.exploit-db.com/exploits/8016 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48610 - http://www.securityfocus.com/bid/33698
CVE ID: CVE-2009-0528 State: PUBLISHED Published: 2009-02-11T20:00:00 Last Updated: 2024-08-07T04:40:04.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in frame.php in Rhadrix If-CMS 2.07 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33883 - http://www.securityfocus.com/bid/33697 - https://www.exploit-db.com/exploits/8007
CVE ID: CVE-2009-0529 State: PUBLISHED Published: 2009-02-11T20:00:00 Last Updated: 2024-08-07T04:40:04.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in SnippetMaster Webpage Editor 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the language parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8017 - http://secunia.com/advisories/33865 - http://www.securityfocus.com/bid/33705
CVE ID: CVE-2009-0530 State: PUBLISHED Published: 2009-02-11T20:00:00 Last Updated: 2024-08-07T04:40:03.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in SnippetMaster 2.2.2, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) _SESSION[SCRIPT_PATH] parameter to includes/vars.inc.php and the (2) g_pcltar_lib_dir parameter to includes/tar_lib/pcltar.lib.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8017 - http://secunia.com/advisories/33865 - http://www.securityfocus.com/bid/33705
CVE ID: CVE-2009-0531 State: PUBLISHED Published: 2009-02-11T20:00:00 Last Updated: 2024-08-07T04:40:04.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in gallery/view.asp in A Better Member-Based ASP Photo Gallery before 1.2 allows remote attackers to execute arbitrary SQL commands via the entry parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33693 - https://www.exploit-db.com/exploits/8012 - http://www.ontarioabandonedplaces.com/ipguardian/gallery/readme.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/48612 - http://secunia.com/advisories/33874
CVE ID: CVE-2009-0532 State: PUBLISHED Published: 2009-02-11T20:00:00 Last Updated: 2024-08-07T04:40:04.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in password.php in Scripts For Sites (SFS) EZ Baby allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the u2 parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48547 - http://www.securityfocus.com/bid/33635 - http://secunia.com/advisories/339
e.xforce.ibmcloud.com/vulnerabilities/48547 - http://www.securityfocus.com/bid/33635 - http://secunia.com/advisories/33989
CVE ID: CVE-2009-0533 State: PUBLISHED Published: 2009-02-11T20:00:00 Last Updated: 2024-08-07T04:40:04.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in password.php in Scripts for Sites EZ Reminder allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the u2 parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48548 - http://www.securityfocus.com/bid/33641 - http://secunia.com/advisories/33989
CVE ID: CVE-2009-0534 State: PUBLISHED Published: 2009-02-11T20:00:00 Last Updated: 2024-08-07T04:40:03.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in FlexCMS allows remote attackers to execute arbitrary SQL commands via the catId parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8018 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48609 - http://www.securityfocus.com/bid/33696
CVE ID: CVE-2009-0535 State: PUBLISHED Published: 2009-02-11T20:00:00 Last Updated: 2024-08-07T04:40:04.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in export.php in Thyme 1.3 and earlier, when register_globals is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the export_to parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8029
CVE ID: CVE-2009-0536 State: PUBLISHED Published: 2009-02-11T20:00:00 Last Updated: 2024-08-07T04:40:03.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: at in bos.rte.cron on IBM AIX 5.2.0, 5.3.0 through 5.3.9, and 6.1.0 through 6.1.2 allows local users to read arbitrary files via unspecified vectors, related to failure to drop root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6155 - http://www.ibm.com/support/docview.wss?uid=isg1IZ43452 - http://www.ibm.com/support/docview.wss?uid=isg1IZ43459 - http://osvdb.org/51952 - http://aix.software.ibm.com/aix/efixes/s
tp://www.ibm.com/support/docview.wss?uid=isg1IZ43459 - http://osvdb.org/51952 - http://aix.software.ibm.com/aix/efixes/security/at_advisory.asc - http://www.ibm.com/support/docview.wss?uid=isg1IZ43456 - http://www.securitytracker.com/id?1021704 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4558 - http://www.securityfocus.com/bid/33730 - http://www.vupen.com/english/advisories/2009/0405 - http://www.ibm.com/support/docview.wss?uid=isg1IZ43453 - http://www.ibm.com/support/docview.wss?uid=isg1IZ43455 - http://www.ibm.com/support/docview.wss?uid=isg1IZ43454 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48660 - http://www.ibm.com/support/docview.wss?uid=isg
sg1IZ43454 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48660 - http://www.ibm.com/support/docview.wss?uid=isg1IZ43458 - http://secunia.com/advisories/33915 - http://www.ibm.com/support/docview.wss?uid=isg1IZ43457
CVE ID: CVE-2009-0537 State: PUBLISHED Published: 2009-03-09T21:00:00 Last Updated: 2024-08-07T04:40:03.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the fts_build function in fts.c in libc in (1) OpenBSD 4.4 and earlier and (2) Microsoft Interix 6.0 build 10.0.6030.0 allows context-dependent attackers to cause a denial of service (application crash) via a deep directory tree, related to the fts_level structure member, as demonstrated by (a) du, (b) rm, (c) chmod, and (d) chgrp on OpenBSD; and (e) SearchIndexer.exe on Vista Enterprise. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8163 - http://www.s
Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8163 - http://www.securitytracker.com/id?1021818 - http://securityreason.com/achievement_securityalert/60 - http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/fts.c.diff?r1=1.41%3Br2=1.42%3Bf=h - http://www.securityfocus.com/bid/34008 - http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/fts.c - http://www.securityfocus.com/archive/1/501505/100/0/threaded
CVE ID: CVE-2009-0538 State: PUBLISHED Published: 2009-03-18T15:00:00 Last Updated: 2024-08-07T04:40:05.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Symantec pcAnywhere before 12.5 SP1 allows local users to read and modify arbitrary memory locations, and cause a denial of service (application crash) or possibly have unspecified other impact, via format string specifiers in the pathname of a remote control file (aka .CHF file). Additional Analyst Notes: - CVE Program Container: References: - http://securityresponse.symantec.com/avcenter/security/Content/2009.03.17.html - http://www.securityfocus.com/bid/33845 - http://secunia.com/advisories/34
om/avcenter/security/Content/2009.03.17.html - http://www.securityfocus.com/bid/33845 - http://secunia.com/advisories/34305 - http://securitytracker.com/id?1021855 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49291 - http://osvdb.org/52797 - http://www.vupen.com/english/advisories/2009/0755 - http://www.securityfocus.com/archive/1/501930/100/0/threaded - http://www.layereddefense.com/pcanywhere17mar.html
CVE ID: CVE-2009-0540 State: PUBLISHED Published: 2009-02-25T16:00:00 Last Updated: 2024-08-07T04:40:04.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Libero 5.3 SP5, and possibly other versions before 5.5 SP1, allows remote attackers to inject arbitrary web script or HTML via the search term field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33856 - http://archives.neohapsis.com/archives/fulldisclosure/2009-02/0243.html - http://osvdb.org/52263 - http://www.vupen.com/english/advisories/2009/0493 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48870
CVE ID: CVE-2009-0541 State: PUBLISHED Published: 2009-02-25T16:00:00 Last Updated: 2024-08-07T04:40:05.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Magento 1.2.0 and 1.2.1.1 allow remote attackers to inject arbitrary web script or HTML via (1) the username field in an admin/ request to index.php, possibly related to the login[username] parameter and the app/code/core/Mage/Admin/Model/Session.php login function; (2) the email address field in an admin/index/forgotpassword/ request to index.php, possibly related to the email parameter and the app/code/core/Mage/Adminhtml/controllers/IndexController.php forgotpasswordAct
ly related to the email parameter and the app/code/core/Mage/Adminhtml/controllers/IndexController.php forgotpasswordAction function; or (3) the return parameter to the default URI under downloader/. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1021746 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48876 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48877 - http://www.securityfocus.com/bid/33872 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48878 - http://secunia.com/advisories/34000 - http://archives.neohapsis.com/archives/fulldisclosure/2009-02/0257.html
CVE ID: CVE-2009-0542 State: PUBLISHED Published: 2009-02-12T16:00:00 Last Updated: 2024-08-07T04:40:04.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a "%" (percent) character in the username, which introduces a "'" (single quote) character during variable substitution by mod_sql. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2009/dsa-1730 - http://www.securityfocus.com/archive/1/500833/100/0/threaded - http://www.openwall.com/lists/oss-security/2009/02/11/5 - http://bugs.proftpd.org/show_bug.cgi
1/500833/100/0/threaded - http://www.openwall.com/lists/oss-security/2009/02/11/5 - http://bugs.proftpd.org/show_bug.cgi?id=3180 - http://www.openwall.com/lists/oss-security/2009/02/11/3 - http://secunia.com/advisories/34268 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:061 - http://www.securityfocus.com/archive/1/500852/100/0/threaded - http://www.securityfocus.com/archive/1/500851/100/0/threaded - http://www.openwall.com/lists/oss-security/2009/02/11/1 - http://security.gentoo.org/glsa/glsa-200903-27.xml - https://www.exploit-db.com/exploits/8037 - http://www.securityfocus.com/archive/1/500823/100/0/threaded
CVE ID: CVE-2009-0543 State: PUBLISHED Published: 2009-02-12T16:00:00 Last Updated: 2024-08-07T04:40:05.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection protection mechanisms via invalid, encoded multibyte characters, which are not properly handled in (1) mod_sql_mysql and (2) mod_sql_postgres. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2009/dsa-1730 - http://www.openwall.com/lists/oss-security/2009/02/11/5 - http://secunia.com/advisories/34268 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:061 - http://security.gen
p://secunia.com/advisories/34268 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:061 - http://security.gentoo.org/glsa/glsa-200903-27.xml - http://www.openwall.com/lists/oss-security/2009/02/11/4 - http://bugs.proftpd.org/show_bug.cgi?id=3173
CVE ID: CVE-2009-0544 State: PUBLISHED Published: 2009-02-12T17:00:00 Last Updated: 2024-08-07T04:40:04.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the PyCrypto ARC2 module 2.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large ARC2 key length. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:050 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48617 - http://gitweb2.dlitz.net/?p=crypto/pycrypto-2.x.git%3Ba=commitdiff%3Bh=d1c4875e1f220652fe7ff8358f56dee3b2aba31b - http://www.mandriva.com/security/advisories?name=MDVSA-200
3Ba=commitdiff%3Bh=d1c4875e1f220652fe7ff8358f56dee3b2aba31b - http://www.mandriva.com/security/advisories?name=MDVSA-2009:049 - http://www.openwall.com/lists/oss-security/2009/02/07/1 - http://secunia.com/advisories/35065 - http://gitweb2.dlitz.net/?p=crypto/pycrypto-2.x.git%3Ba=commitdiff%3Bh=fd73731dfad451a81056fbb01e09aa78ab82eb5d - http://secunia.com/advisories/34199 - http://www.securityfocus.com/bid/33674 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html - http://www.openwall.com/lists/oss-security/2009/02/12/5 - http://www.gentoo.org/security/en/glsa/glsa-200903-11.xml
CVE ID: CVE-2009-0545 State: PUBLISHED Published: 2009-02-12T23:00:00 Last Updated: 2024-08-07T04:40:03.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type parameter in a NoAuthREQ x509List action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/500763/100/0/threaded - http://www.zeroshell.net/eng/announcements/ - https://www.exploit-db.com/exploits/8023 - http://www.ikkisoft.com/stuff/LC-2009-01.txt - http://www.vupen.com/english/advisories/2009/0385 - http://www.zeroshell.net/eng/pa
.ikkisoft.com/stuff/LC-2009-01.txt - http://www.vupen.com/english/advisories/2009/0385 - http://www.zeroshell.net/eng/patch-details/#C100
CVE ID: CVE-2009-0546 State: PUBLISHED Published: 2009-02-12T23:00:00 Last Updated: 2024-08-07T04:40:05.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in NewsGator FeedDemon 2.7 and earlier allows user-assisted remote attackers to execute arbitrary code via a long text attribute in an outline element in a .opml file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33718 - http://osvdb.org/51753 - http://www.securityfocus.com/archive/1/500686/100/0/threaded - http://www.securityfocus.com/bid/33630 - https://www.exploit-db.com/exploits/7995 - https://www.exploit-db.com/exploits/8010 - http://security.bk
com/bid/33630 - https://www.exploit-db.com/exploits/7995 - https://www.exploit-db.com/exploits/8010 - http://security.bkis.vn/?p=329
CVE ID: CVE-2009-0547 State: PUBLISHED Published: 2009-02-12T23:00:00 Last Updated: 2024-08-07T04:40:04.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Evolution 2.22.3.1 checks S/MIME signatures against a copy of the e-mail text within a signed-data blob, not the copy of the e-mail text displayed to the user, which allows remote attackers to spoof a signature by modifying the latter copy, a different vulnerability than CVE-2008-5077. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35357 - http://www.securityfocus.com/bid/33720 - http://www.vupen.com/english/advisories/2010/1107 - https://www.redhat.com/archives/fedora-package-an
us.com/bid/33720 - http://www.vupen.com/english/advisories/2010/1107 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00672.html - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html - https://bugzilla.redhat.com/show_bug.cgi?id=484925 - http://secunia.com/advisories/34339 - http://openwall.com/lists/oss-security/2009/02/10/7 - http://secunia.com/advisories/34363 - http://www.redhat.com/support/errata/RHSA-2009-0355.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508479 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html - http://bugzilla.gnome.org/show_bug.cgi?id=564465 - http://www.debian.org/security/2009/dsa-1
nce/2010-03/msg00004.html - http://bugzilla.gnome.org/show_bug.cgi?id=564465 - http://www.debian.org/security/2009/dsa-1813 - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html - http://www.redhat.com/support/errata/RHSA-2009-0354.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9619 - http://secunia.com/advisories/34338 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00666.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:078 - http://secunia.com/advisories/38915 - http://secunia.com/advisories/33848
CVE ID: CVE-2009-0548 State: PUBLISHED Published: 2009-02-12T23:00:00 Last Updated: 2024-08-07T04:40:04.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Additional Report Settings interface in ESET Remote Administrator before 3.0.105 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33805 - http://osvdb.org/51804 - http://www.eset.eu/support/changelog-eset-remote-administrator-3 - http://www.vupen.com/english/advisories/2009/0339
CVE ID: CVE-2009-0549 State: PUBLISHED Published: 2009-06-10T18:00:00 Last Updated: 2024-08-07T04:40:05.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; and Microsoft Office Excel Viewer 2003 SP3 allow remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "Record Pointer Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1540 - http://osvdb.org/54952 - http://www.securitytracker.com/id?1022351 - https://
w.vupen.com/english/advisories/2009/1540 - http://osvdb.org/54952 - http://www.securitytracker.com/id?1022351 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-021 - http://www.securityfocus.com/bid/35215 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5830 - http://www.us-cert.gov/cas/techalerts/TA09-160A.html
CVE ID: CVE-2009-0550 State: PUBLISHED Published: 2009-04-15T03:49:00 Last Updated: 2024-08-07T04:40:05.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008; and WinINet in Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008; allows remote web servers to capture and replay NTLM credentials, and execute arbitrary code, via vectors related to absence of a "credential-reflection protections" opt-in step, aka "W