Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-4073 State: PUBLISHED Published: 2009-11-24T17:00:00 Last Updated: 2024-08-07T06:54:08.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: The printing functionality in Microsoft Internet Explorer 8 allows remote attackers to discover a local pathname, and possibly a local username, by reading the dc:title element of a PDF document that was generated from a local web page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/508010/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12355 - http://osvdb.org/60504 - http://securethoughts.com/2009/11/millions-of-p
efinition/oval%3Aorg.mitre.oval%3Adef%3A12355 - http://osvdb.org/60504 - http://securethoughts.com/2009/11/millions-of-pdf-invisibly-embedded-with-your-internal-disk-paths/ - http://secunia.com/advisories/37362 - http://www.theregister.co.uk/2009/11/23/internet_explorer_file_disclosure_bug/
CVE ID: CVE-2009-4074 State: PUBLISHED Published: 2009-11-25T18:00:00 Last Updated: 2024-08-07T06:54:08.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XSS Filter in Microsoft Internet Explorer 8 allows remote attackers to leverage the "response-changing mechanism" to conduct cross-site scripting (XSS) attacks against web sites that have no inherent XSS vulnerabilities, related to the details of output encoding and improper modification of an HTML attribute, aka "XSS Filter Script Handling Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7715 - http://www
: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7715 - http://www.theregister.co.uk/2009/11/20/internet_explorer_security_flaw/ - http://hackademix.net/2009/11/21/ies-xss-filter-creates-xss-vulnerabilities/ - http://www.owasp.org/images/5/50/OWASP-Italy_Day_IV_Maone.pdf - http://www.securityfocus.com/bid/37135 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002
CVE ID: CVE-2009-4075 State: PUBLISHED Published: 2009-11-25T18:00:00 Last Updated: 2024-08-07T06:54:08.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the timeout mechanism in sshd in Sun Solaris 10, and OpenSolaris snv_99 through snv_123, allows remote attackers to cause a denial of service (daemon outage) via unknown vectors that trigger a "dangling sshd authentication thread." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/3333 - http://osvdb.org/60498 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-272629-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54401 -
nsolve.sun.com/search/document.do?assetkey=1-66-272629-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54401 - http://www.securityfocus.com/bid/37116 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-143140-01-1
CVE ID: CVE-2009-4076 State: PUBLISHED Published: 2009-11-25T21:22:00Z Last Updated: 2024-09-16T23:46:21.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that modify user information via unspecified vectors, a different vulnerability than CVE-2009-4077. Additional Analyst Notes: - CVE Program Container: References: - http://trac.roundcube.net/wiki/Changelog - http://jvn.jp/en/jp/JVN72974205/index.html - http://www.osvdb.org/59661 - http://secunia.com/advisories/37235 - http://jvndb.jvn.jp/ja/contents/2009/
05/index.html - http://www.osvdb.org/59661 - http://secunia.com/advisories/37235 - http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000071.html
CVE ID: CVE-2009-4077 State: PUBLISHED Published: 2009-11-25T21:22:00Z Last Updated: 2024-09-16T17:54:25.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that send arbitrary emails via unspecified vectors, a different vulnerability than CVE-2009-4076. Additional Analyst Notes: - CVE Program Container: References: - http://trac.roundcube.net/wiki/Changelog - http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000072.html - http://www.osvdb.org/59661 - http://secunia.com/advisories/37235 - http://jvn.jp/en/jp/JV
/2009/JVNDB-2009-000072.html - http://www.osvdb.org/59661 - http://secunia.com/advisories/37235 - http://jvn.jp/en/jp/JVN75694913/index.html
CVE ID: CVE-2009-4078 State: PUBLISHED Published: 2009-11-25T21:22:00 Last Updated: 2024-08-07T06:54:10.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Redmine 0.8.5 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/3291 - http://rubyforge.org/frs/shownotes.php?release_id=41108 - http://www.securityfocus.com/bid/37066 - http://www.redmine.org/wiki/redmine/Changelog#v086-2009-11-04 - http://jvn.jp/en/jp/JVN87341298/index.html - https://exchange.xforce.ibmcloud.com/vu
redmine/Changelog#v086-2009-11-04 - http://jvn.jp/en/jp/JVN87341298/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/54333 - http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000073.html - http://jvn.jp/en/jp/JVN01245481/index.html - http://secunia.com/advisories/37420
CVE ID: CVE-2009-4079 State: PUBLISHED Published: 2009-11-25T21:22:00 Last Updated: 2024-08-07T06:54:08.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Redmine 0.8.5 and earlier allows remote attackers to hijack the authentication of users for requests that delete a ticket via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/3291 - http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000074.html - http://www.securityfocus.com/bid/37066 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54334 - http://www.redmine.org/wiki/redmine/Changelog#v087-20
066 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54334 - http://www.redmine.org/wiki/redmine/Changelog#v087-2009-11-15 - http://jvn.jp/en/jp/JVN87341298/index.html - http://rubyforge.org/frs/shownotes.php?release_id=41440 - http://secunia.com/advisories/37420
CVE ID: CVE-2009-4080 State: PUBLISHED Published: 2009-11-27T20:00:00Z Last Updated: 2024-09-16T17:19:10.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in ldap_cachemgr (aka the LDAP client configuration cache daemon) in Sun Solaris 9 and 10, and OpenSolaris before snv_78, allow local users to cause a denial of service (daemon crash) via vectors involving multiple serviceSearchDescriptor attributes and a call to the getldap_lookup function, and unspecified other vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37129 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-112960-
References: - http://www.securityfocus.com/bid/37129 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-112960-69-1 - http://www.vupen.com/english/advisories/2009/3336 - http://www.securitytracker.com/id?1023239 - http://secunia.com/advisories/37506 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-231402-1 - http://secunia.com/advisories/37505 - http://osvdb.org/60514
CVE ID: CVE-2009-4081 State: PUBLISHED Published: 2009-11-27T20:00:00 Last Updated: 2024-08-07T06:54:08.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in dstat before r3199 allows local users to gain privileges via a Trojan horse Python module in the current working directory, a different vulnerability than CVE-2009-3894. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:341 - http://bugs.gentoo.org/show_bug.cgi?id=293497
CVE ID: CVE-2009-4082 State: PUBLISHED Published: 2009-11-27T20:45:00 Last Updated: 2024-08-07T06:54:08.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in forums/Forum_Include/index.php in Outreach Project Tool (OPT) 1.2.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CRM_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54379 - http://www.exploit-db.com/exploits/10218 - http://www.securityfocus.com/bid/37090 - http://osvdb.org/60464 - http://packetstormsecurity.org/0911-exploits/opt-rfi.txt - http://secunia.com/advis
bid/37090 - http://osvdb.org/60464 - http://packetstormsecurity.org/0911-exploits/opt-rfi.txt - http://secunia.com/advisories/37447
CVE ID: CVE-2009-4083 State: PUBLISHED Published: 2009-11-27T20:45:00 Last Updated: 2024-08-07T06:54:10.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.16 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in (1) submitnews.php, (2) usersettings.php; and (3) newpost.php, (4) banlist.php, (5) banner.php, (6) cpage.php, (7) download.php, (8) users_extended.php, (9) frontpage.php, (10) links.php, and (11) mailout.php in e107_admin/. NOTE: this may overlap CVE-2004-2040 and CVE-2006-4794, but there are insufficient details to be certain. Additional Analyst Notes: - CVE P
lap CVE-2004-2040 and CVE-2006-4794, but there are insufficient details to be certain. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/508007/100/0/threaded - http://blog.bkis.com/e107-multiple-vulnerabilities/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/54372 - http://www.securityfocus.com/bid/37087
CVE ID: CVE-2009-4084 State: PUBLISHED Published: 2009-11-27T20:45:00 Last Updated: 2024-08-07T06:54:08.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the search feature in e107 0.7.16 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/508007/100/0/threaded - http://blog.bkis.com/e107-multiple-vulnerabilities/ - http://www.securityfocus.com/bid/37087 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54373
CVE ID: CVE-2009-4085 State: PUBLISHED Published: 2009-11-27T20:45:00 Last Updated: 2024-08-07T06:54:10.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in assets/plugins/mp3_id/mp3_id.php in PHP Traverser 0.8.0 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[BASE] parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54378 - http://secunia.com/advisories/37455 - http://osvdb.org/60466
CVE ID: CVE-2009-4086 State: PUBLISHED Published: 2009-11-27T20:45:00 Last Updated: 2024-08-07T06:54:09.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in Xerver HTTP Server 4.31 and 4.32 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via certain byte sequences at the end of a URL. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36681 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54356 - http://www.securityfocus.com/bid/37064 - http://packetstormsecurity.org/0911-exploi
ibmcloud.com/vulnerabilities/54356 - http://www.securityfocus.com/bid/37064 - http://packetstormsecurity.org/0911-exploits/xerver-split.txt
CVE ID: CVE-2009-4087 State: PUBLISHED Published: 2009-11-27T20:45:00 Last Updated: 2024-08-07T06:54:08.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in telepark.wiki 2.4.23 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://blog.telepark.com/telepark-web-software/2009/11/09/telepark-wiki-security-fixes/ - http://secunia.com/advisories/37391 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54293 - http://www.osvdb.org/60213 - http://packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txt
CVE ID: CVE-2009-4088 State: PUBLISHED Published: 2009-11-27T20:45:00 Last Updated: 2024-08-07T06:54:09.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in telepark.wiki 2.4.23 and earlier allow remote attackers to read arbitrary files via directory traversal sequences in the css parameter to (1) getjs.php and (2) getcsslocal.php; and include and execute arbitrary local files via the (3) group parameter to upload.php. Additional Analyst Notes: - CVE Program Container: References: - http://blog.telepark.com/telepark-web-software/2009/11/09/telepark-wiki-security-fixes/ - http://www.exploit-db.com/exploits/9483 - http://secunia.com/ad
-web-software/2009/11/09/telepark-wiki-security-fixes/ - http://www.exploit-db.com/exploits/9483 - http://secunia.com/advisories/37391 - http://www.osvdb.org/60218 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54327 - http://www.osvdb.org/60216 - http://www.osvdb.org/60217 - http://packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txt
CVE ID: CVE-2009-4089 State: PUBLISHED Published: 2009-11-27T20:45:00 Last Updated: 2024-08-07T06:54:10.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: telepark.wiki 2.4.23 and earlier allows remote attackers to bypass authorization and (1) delete arbitrary pages via a modified pageID parameter to ajax/deletePage.php or (2) delete arbitrary comments via a modified pageID parameter to ajax/deleteComment.php. Additional Analyst Notes: - CVE Program Container: References: - http://blog.telepark.com/telepark-web-software/2009/11/09/telepark-wiki-security-fixes/ - http://www.exploit-db.com/exploits/9483 - http://www.osvdb.org/60215 - http://secunia.com/advisories/37391 - https://e
- http://www.exploit-db.com/exploits/9483 - http://www.osvdb.org/60215 - http://secunia.com/advisories/37391 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54329 - http://www.osvdb.org/60214 - http://packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txt
CVE ID: CVE-2009-4090 State: PUBLISHED Published: 2009-11-27T20:45:00 Last Updated: 2024-08-07T06:54:09.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in ajax/addComment.php in telepark.wiki 2.4.23 and earlier script allows remote attackers to execute arbitrary code by uploading a file with a name containing a NULL byte. Additional Analyst Notes: - CVE Program Container: References: - http://blog.telepark.com/telepark-web-software/2009/11/09/telepark-wiki-security-fixes/ - http://www.osvdb.org/60219 - http://secunia.com/advisories/37391 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54294 - http://packetstormsecurity.org/0911-ex
m/advisories/37391 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54294 - http://packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txt
CVE ID: CVE-2009-4091 State: PUBLISHED Published: 2009-11-27T20:45:00 Last Updated: 2024-08-07T06:54:08.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: comments.php in Simplog 0.9.3.2, and possibly earlier, does not properly restrict access, which allows remote attackers to edit or delete comments via the (1) edit or (2) del action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54355 - http://secunia.com/advisories/21390 - http://www.exploit-db.com/exploits/10180 - http://www.securityfocus.com/bid/37063
CVE ID: CVE-2009-4092 State: PUBLISHED Published: 2009-11-27T20:45:00 Last Updated: 2024-08-07T06:54:10.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in user.php in Simplog 0.9.3.2, and possibly earlier, allows remote attackers to hijack the authentication of administrators and users for requests that change passwords. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54354 - http://secunia.com/advisories/21390 - http://www.exploit-db.com/exploits/10180 - http://www.securityfocus.com/bid/37063
CVE ID: CVE-2009-4093 State: PUBLISHED Published: 2009-11-27T20:45:00 Last Updated: 2024-08-07T06:54:09.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in comments.php in Simplog 0.9.3.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) cname (Name) or (2) email parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21390 - http://www.exploit-db.com/exploits/10180 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54353 - http://www.securityfocus.com/bid/37063
CVE ID: CVE-2009-4094 State: PUBLISHED Published: 2009-11-27T20:45:00 Last Updated: 2024-08-07T06:54:10.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in class/php/d4m_ajax_pagenav.php in the D4J eZine (com_ezine) component 2.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37043 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54307 - http://www.kamtiez.org/2009/11/joomla-mambo-component-comezine-remote.html
CVE ID: CVE-2009-4095 State: PUBLISHED Published: 2009-11-27T20:45:00 Last Updated: 2024-08-07T06:54:09.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: myPhile 1.2.1 allows remote attackers to bypass authentication via an empty password. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54350 - http://secunia.com/advisories/37322 - http://companionway.net/files/myphile/ - http://www.vupen.com/english/advisories/2009/3289
CVE ID: CVE-2009-4096 State: PUBLISHED Published: 2009-11-28T11:00:00 Last Updated: 2024-08-07T06:54:09.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: RADIO istek scripti 2.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain user credentials via a direct request for estafresgaftesantusyan.inc. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0911-exploits/istek-disclose.txt - http://secunia.com/advisories/37478 - http://www.exploit-db.com/exploits/10231 - http://osvdb.org/60516
CVE ID: CVE-2009-4097 State: PUBLISHED Published: 2009-11-28T11:00:00 Last Updated: 2024-08-07T06:54:10.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the MplayInputFile function in Serenity Audio Player 3.2.3 and earlier allows remote attackers to execute arbitrary code via a long URL in an M3U file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0911-exploits/serenityaudio-overflow.txt - http://secunia.com/advisories/37472 - http://www.exploit-db.com/exploits/10226 - http://osvdb.org/60503 - https://exchange.xforce.ibmcloud.
advisories/37472 - http://www.exploit-db.com/exploits/10226 - http://osvdb.org/60503 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54430
CVE ID: CVE-2009-4098 State: PUBLISHED Published: 2009-11-28T11:00:00 Last Updated: 2024-08-07T06:54:09.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in banner-edit.php in OpenX adserver 2.8.1 and earlier allows remote authenticated users with banner / file upload permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an images directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/508050/100/0/threaded - http://www.openx.org/docs/2.8/release-notes/openx-2.8.2 - http://secunia.com/advisories
rchive/1/508050/100/0/threaded - http://www.openx.org/docs/2.8/release-notes/openx-2.8.2 - http://secunia.com/advisories/37475 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54394 - https://developer.openx.org/jira/browse/OX-5747 - http://www.securityfocus.com/bid/37110 - http://osvdb.org/60499
CVE ID: CVE-2009-4099 State: PUBLISHED Published: 2009-11-28T11:00:00 Last Updated: 2024-08-07T06:54:09.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Google Calendar GCalendar (com_gcalendar) component 1.1.2, 2.1.4, and possibly earlier versions for Joomla! allows remote attackers to execute arbitrary SQL commands via the gcid parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54450 - http://secunia.com/advisories/37476 - http://packetstormsecurity.org/0911-exploits/joomlagcalendar-sql.txt - h
s/54450 - http://secunia.com/advisories/37476 - http://packetstormsecurity.org/0911-exploits/joomlagcalendar-sql.txt - http://www.securityfocus.com/bid/37134 - http://www.securityfocus.com/bid/37141 - http://osvdb.org/60517
CVE ID: CVE-2009-4100 State: PUBLISHED Published: 2009-11-28T11:00:00 Last Updated: 2024-08-07T06:54:10.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yoono extension before 6.1.1 for Firefox performs certain operations with chrome privileges, which allows user-assisted remote attackers to execute arbitrary commands and perform cross-domain scripting attacks via DOM event handlers such as onload. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37123 - http://www.vupen.com/english/advisories/2009/3326 - https://addons.mozilla.org/en-US/firefox/addons/versions/1833#version-6.1.1 - https://exchange.xforce.ibmcloud.com/vulnerabil
://addons.mozilla.org/en-US/firefox/addons/versions/1833#version-6.1.1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54417 - http://www.net-security.org/secworld.php?id=8527 - http://secunia.com/advisories/37468
CVE ID: CVE-2009-4101 State: PUBLISHED Published: 2009-11-28T11:00:00 Last Updated: 2024-08-07T06:54:08.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: infoRSS 1.1.4.2 and earlier extension for Firefox performs certain operations with chrome privileges, which allows remote attackers to execute arbitrary commands and perform cross-domain scripting attacks via the description tag of an RSS feed. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54370 - http://secunia.com/advisories/37467 - https://addons.mozilla.org/en-US/firefox/addons/versions/361#version-1.2.0 - http://www.vupen.com/english/advisories/2009/3
ps://addons.mozilla.org/en-US/firefox/addons/versions/361#version-1.2.0 - http://www.vupen.com/english/advisories/2009/3323