Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-4724 State: PUBLISHED Published: 2010-03-18T18:00:00 Last Updated: 2024-08-07T07:17:26.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in shop.htm in PaymentProcessorScript.net PPScript allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9351 - http://secunia.com/advisories/36100
CVE ID: CVE-2009-4725 State: PUBLISHED Published: 2010-03-18T18:00:00 Last Updated: 2024-08-07T07:17:24.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in modules/aljazeera/admin/setup.php in Arab Portal 2.2 and earlier, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2133 - http://www.securityfocus.com/bid/35921 - http://www.exploit-db.com/exploits/9347
CVE ID: CVE-2009-4726 State: PUBLISHED Published: 2010-03-18T18:00:00 Last Updated: 2024-08-07T07:17:25.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download.php in Quickdev 4 PHP allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9334 - http://www.vupen.com/english/advisories/2009/2126 - http://secunia.com/advisories/36130
CVE ID: CVE-2009-4727 State: PUBLISHED Published: 2010-03-18T18:00:00 Last Updated: 2024-08-07T07:17:24.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in x/login in JungleScripts Ajax Short Url Script allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36132 - http://www.vupen.com/english/advisories/2009/2124 - http://www.exploit-db.com/exploits/9332
CVE ID: CVE-2009-4728 State: PUBLISHED Published: 2010-03-18T18:00:00 Last Updated: 2024-08-07T07:17:25.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the administrative interface in Questions Answered 1.3 allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9341 - http://www.vupen.com/english/advisories/2009/2130
CVE ID: CVE-2009-4729 State: PUBLISHED Published: 2010-03-18T18:00:00 Last Updated: 2024-08-07T07:17:25.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in x10 Adult Media Script 1.7 allow remote attackers to inject arbitrary web script or HTML via the (1) pic_id parameter to includes/video_ad.php, (2) category parameter to linkvideos_listing.php, (3) id parameter to templates/header1.php, and (4) key parameter to video_listing.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36067 - http://www.exploit-db.com/exploits/9340 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
nia.com/advisories/36067 - http://www.exploit-db.com/exploits/9340 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52163 - http://www.osvdb.org/56671 - http://www.osvdb.org/56672 - http://www.osvdb.org/56674 - http://www.osvdb.org/56673
CVE ID: CVE-2009-4730 State: PUBLISHED Published: 2010-03-18T18:00:00 Last Updated: 2024-08-07T07:17:25.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in report.php in x10 Adult Media Script 1.7 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36067 - http://www.exploit-db.com/exploits/9340 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52164
CVE ID: CVE-2009-4731 State: PUBLISHED Published: 2010-03-18T18:00:00 Last Updated: 2024-08-07T07:17:24.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in photos.php in Model Agency Manager PRO (formerly Modeling Agency Content Management Script) allows remote attackers to execute arbitrary SQL commands via the album parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52155 - http://www.securityfocus.com/bid/35892 - http://packetstormsecurity.org/0907-exploits/articlepubpro-sql.txt - http://secunia.com/advisories/36066
CVE ID: CVE-2009-4732 State: PUBLISHED Published: 2010-03-18T18:00:00 Last Updated: 2024-08-07T07:17:24.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in tt/index.php in TT Web Site Manager 0.5, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the tt_name parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9335 - http://secunia.com/advisories/36129 - http://www.vupen.com/english/advisories/2009/2127
CVE ID: CVE-2009-4733 State: PUBLISHED Published: 2010-03-18T18:00:00 Last Updated: 2024-08-07T07:17:24.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in checkuser.php in SimpleLoginSys 0.5, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9336 - http://www.vupen.com/english/advisories/2009/2128
CVE ID: CVE-2009-4734 State: PUBLISHED Published: 2010-03-18T18:00:00 Last Updated: 2024-08-07T07:17:24.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in Allomani Movies Library (Movies & Clips) 2.7.0 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52011 - http://www.exploit-db.com/exploits/9275 - http://www.vupen.com/english/advisories/2009/2031
CVE ID: CVE-2009-4735 State: PUBLISHED Published: 2010-03-18T18:00:00 Last Updated: 2024-08-07T07:17:24.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in Allomani Audio & Video Library (Songs & Clips version) 2.7.0 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52013 - http://www.exploit-db.com/exploits/9274 - http://www.vupen.com/english/advisories/2009/2030
CVE ID: CVE-2009-4736 State: PUBLISHED Published: 2010-03-23T18:00:00 Last Updated: 2024-08-07T07:17:24.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in CommonSense CMS 5.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18880 - http://secunia.com/advisories/37992 - http://packetstormsecurity.org/0607-exploits/newangels-11.txt - http://www.osvdb.org/61380 - http://www.exploit-db.com/exploits/10766 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55158
CVE ID: CVE-2009-4737 State: PUBLISHED Published: 2010-04-06T22:00:00 Last Updated: 2024-08-07T07:17:25.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in JustSystems Corporation Ichitaro 13, 2004 through 2009, Viewer 2009 19.0.1.0 and earlier, and other versions allows context-dependent attackers to execute arbitrary code via a crafted Rich Text File (RTF), related to "pvpara ffooter." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34611 - http://www.osvdb.org/53349 - http://www.vupen.com/english/advisories/2009/0957 - http://www.justsystems.com/jp/info/js09002.html - http://www.securityfocus.com/bid
en.com/english/advisories/2009/0957 - http://www.justsystems.com/jp/info/js09002.html - http://www.securityfocus.com/bid/34403 - http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000018.html - http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20090407 - http://www.ipa.go.jp/security/vuln/documents/2009/200904_ichitaro.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/49739 - http://jvn.jp/en/jp/JVN33846134/index.html
CVE ID: CVE-2009-4738 State: PUBLISHED Published: 2013-01-18T23:00:00Z Last Updated: 2024-09-16T18:45:16.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in JustSystems Corporation ATOK 2006 through 2009 and ATOK flat-rate service, and Just Smile 4 with the ATOK Smile module, allows physically proximate users to bypass the screen lock and execute commands with system privileges via unknown vectors related to "launching external applications." Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN57040664/index.html - http://www.justsystems.com/jp/info/js09003.html - http://www.securityfocus.com/bid/36220 - http://jvnd
0664/index.html - http://www.justsystems.com/jp/info/js09003.html - http://www.securityfocus.com/bid/36220 - http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000057.html - http://secunia.com/advisories/36560
CVE ID: CVE-2009-4739 State: PUBLISHED Published: 2010-03-26T20:00:00 Last Updated: 2024-08-07T07:17:24.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in SkaDate Dating allows remote attackers to execute arbitrary PHP code via a URL in the language_id parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via directory traversal sequences. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57249 - http://osvdb.org/56543 - http://www.securityfocus.com/bid/35813 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52003 - h
svdb.org/56543 - http://www.securityfocus.com/bid/35813 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52003 - http://secunia.com/advisories/35997 - http://www.exploit-db.com/exploits/9260
CVE ID: CVE-2009-4740 State: PUBLISHED Published: 2010-03-26T20:00:00Z Last Updated: 2024-09-16T16:28:16.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Webesse E-Card (ws_ecard) extension 1.0.2 and earlier for TYPO3 has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-010/
CVE ID: CVE-2009-4741 State: PUBLISHED Published: 2010-03-26T20:00:00Z Last Updated: 2024-09-17T00:21:01.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Extras Manager before 2.0.0.67 in Skype before 4.1.0.179 on Windows has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37012 - https://developer.skype.com/WindowsSkype/ReleaseNotes#head-21c1b2583e7cc405f994ca162d574fb15a6e986b - http://www.securityfocus.com/bid/36459
CVE ID: CVE-2009-4742 State: PUBLISHED Published: 2010-03-26T20:00:00 Last Updated: 2024-08-07T07:17:24.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Docebo 3.6.0.3 allow remote attackers to execute arbitrary SQL commands via (1) the word parameter in a play help action to the faq module, reachable through index.php; (2) the word parameter in a play keyw action to the link module, reachable through index.php; (3) the id_certificate parameter in an elemmetacertificate action to the meta_certificate module, reachable through index.php; or (4) the id_certificate parameter in an elemcertificate action to the certificate module, reachabl
through index.php; or (4) the id_certificate parameter in an elemcertificate action to the certificate module, reachable through index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/507072/100/0/threaded - http://www.securityfocus.com/bid/36654 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53701
CVE ID: CVE-2009-4743 State: PUBLISHED Published: 2010-03-26T20:00:00 Last Updated: 2024-08-07T07:17:25.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in history-storage.aspx in AfterLogic WebMail Pro 4.7.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) HistoryStorageObjectName and (2) HistoryKey parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53672 - http://www.gardienvirtuel.com/fichiers/documents/publications/GVI_2009-01_EN.txt - http://www.securityfocus.com/bid/36605 - http://secunia.com/advisories/3
ers/documents/publications/GVI_2009-01_EN.txt - http://www.securityfocus.com/bid/36605 - http://secunia.com/advisories/36964 - http://osvdb.org/58712
CVE ID: CVE-2009-4744 State: PUBLISHED Published: 2010-03-26T20:00:00 Last Updated: 2024-08-07T07:17:25.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Contact module in Exponent CMS 0.97-GA20090213 allows remote attackers to inject arbitrary web script or HTML via the email parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/58647 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53687 - http://www.securityfocus.com/bid/36626 - http://secunia.com/advisories/36703
CVE ID: CVE-2009-4745 State: PUBLISHED Published: 2010-03-26T20:00:00 Last Updated: 2024-08-07T07:17:24.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in Dreamlevels DreamPoll 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) sortField, (2) sortDesc, or (3) pageNumber parameter in a login action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/507039/100/0/threaded
CVE ID: CVE-2009-4746 State: PUBLISHED Published: 2010-03-26T20:00:00 Last Updated: 2024-08-07T07:17:25.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Dreamlevels DreamPoll 3.1 allows remote attackers to inject arbitrary web script or HTML via the recordsPerPage parameter in a poll_default login action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/507039/100/0/threaded
CVE ID: CVE-2009-4747 State: PUBLISHED Published: 2010-03-26T20:00:00 Last Updated: 2024-08-07T07:17:24.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in public/code/cp_html2xhtmlbasic.php in All In One Control Panel (AIOCP) 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter, a different vector than CVE-2009-3220. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53679 - http://www.securityfocus.com/bid/36609 - http://www.securityfocus.com/archive/1/507030/100/0/threaded
CVE ID: CVE-2009-4748 State: PUBLISHED Published: 2010-03-26T20:00:00 Last Updated: 2024-08-07T07:17:24.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mycategoryorder.php in the My Category Order plugin 2.8 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the parentID parameter in an act_OrderCategories action to wp-admin/post-new.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9150 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51727 - http://www.securityfocus.com/bid/35704 - http://packetstormsecurity.org/0907-exploits/wpmco-sql.txt
CVE ID: CVE-2009-4749 State: PUBLISHED Published: 2010-03-26T20:00:00 Last Updated: 2024-08-07T07:17:25.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PHP Live! 3.2.1 and 3.2.2 allow remote attackers to execute arbitrary SQL commands via the x parameter to (1) message_box.php and (2) request.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35718 - http://packetstormsecurity.org/0907-exploits/phplive-sql.txt - http://www.exploit-db.com/exploits/9174 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51784
CVE ID: CVE-2009-4750 State: PUBLISHED Published: 2010-03-26T20:00:00 Last Updated: 2024-08-07T07:17:25.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in home.php in Top Paidmailer allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35723 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51661 - http://www.packetstormsecurity.org/0907-exploits/toppaidmailer-rfi.txt - http://www.osvdb.org/55797
CVE ID: CVE-2009-4751 State: PUBLISHED Published: 2010-03-26T20:00:00 Last Updated: 2024-08-07T07:17:25.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute arbitrary SQL commands via the id parameter in a rubrik action. Additional Analyst Notes: - CVE Program Container: References: - http://www.packetstormsecurity.org/0907-exploits/swingerclub-sqlrfi.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/51660 - http://www.osvdb.org/55794 - http://secunia.com/advisories/35724
CVE ID: CVE-2009-4752 State: PUBLISHED Published: 2010-03-26T20:00:00 Last Updated: 2024-08-07T07:17:24.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute arbitrary PHP code via a URL in the go parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51662 - http://www.packetstormsecurity.org/0907-exploits/swingerclub-sqlrfi.txt - http://www.osvdb.org/55795 - http://secunia.com/advisories/35724
CVE ID: CVE-2009-4753 State: PUBLISHED Published: 2010-03-29T18:00:00 Last Updated: 2024-08-07T07:17:24.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the FTP server on the Addonics NAS Adapter NASU2FW41 with loader 1.17 allow remote attackers to cause a denial of service (TCP/IP outage) via long arguments to the (1) XRMD, (2) delete, (3) RNFR, or (4) RNTO command. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8584 - http://www.securityfocus.com/bid/34796 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50289 - http://secunia.com/advisories/34965 - http://www.securityfocus.com/archive/1/
force.ibmcloud.com/vulnerabilities/50289 - http://secunia.com/advisories/34965 - http://www.securityfocus.com/archive/1/503146/100/0/threaded
CVE ID: CVE-2009-4754 State: PUBLISHED Published: 2010-03-29T18:00:00 Last Updated: 2024-08-07T07:17:25.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Mercury Audio Player 1.21 allows remote attackers to execute arbitrary code via a long string in a malformed playlist (.m3u) file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50288 - http://secunia.com/advisories/34957 - http://www.exploit-db.com/exploits/8583 - http://www.securityfocus.com/bid/34788 - http://www.exploit-db.com/exploits/8578
CVE ID: CVE-2009-4755 State: PUBLISHED Published: 2010-03-29T18:00:00 Last Updated: 2024-08-07T07:17:24.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Mercury Audio Player 1.21 allow remote attackers to execute arbitrary code via a long string in a malformed (1) .b4s or (2) .pls playlist file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54170 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50288 - http://secunia.com/advisories/34957 - http://www.securityfocus.com/bid/34788 - http://www.exploit-db.com/exploits/8580 - http://www.exploit-db.com/exploits/8582
CVE ID: CVE-2009-4756 State: PUBLISHED Published: 2010-03-29T18:00:00 Last Updated: 2024-08-07T07:17:25.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in TraktorBeatport.exe 1.0.0.283 in Beatport Player 1.0.0.0 allows remote attackers to execute arbitrary code via a long string in a malformed playlist (.m3u) file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8588 - http://www.securityfocus.com/bid/34793 - http://www.exploit-db.com/exploits/8592 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50267 - http://www.exploit-db.com/exploits/8590 - http://www.exploit-db.com/exploits/8591
CVE ID: CVE-2009-4757 State: PUBLISHED Published: 2010-03-29T18:00:00 Last Updated: 2024-08-07T07:17:25.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in BrotherSoft EW-MusicPlayer 0.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a malformed playlist (.m3u) file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8601 - http://www.securityfocus.com/bid/34806
CVE ID: CVE-2009-4758 State: PUBLISHED Published: 2010-03-29T18:00:00 Last Updated: 2024-08-07T07:17:25.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in dicas Mpegable Player 2.12 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a .YUV file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50264 - http://www.exploit-db.com/exploits/8568 - http://www.securityfocus.com/bid/34770
CVE ID: CVE-2009-4759 State: PUBLISHED Published: 2010-03-29T18:00:00 Last Updated: 2024-08-07T07:17:25.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in BrotherSoft BMXPlay 0.4.4b allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a .BMX file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34810 - http://www.exploit-db.com/exploits/8607
CVE ID: CVE-2009-4760 State: PUBLISHED Published: 2010-03-29T18:00:00 Last Updated: 2024-08-07T07:17:25.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Winn ASP Guestbook 1.01 Beta stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for data/guestbook.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50294 - http://www.exploit-db.com/exploits/8596 - http://www.vupen.com/english/advisories/2009/1244