Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
.com/security/advisories?name=MDVSA-2009:111 - http://www.vupen.com/english/advisories/2009/1180 - http://secunia.com/advisories/34910 - http://securitytracker.com/id?1022126 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10446 - http://securitytracker.com/id?1022127 - http://secunia.com/advisories/34866 - http://www.securityfocus.com/bid/34743 - https://bugzilla.mozilla.org/show_bug.cgi?id=489676 - http://www.mozilla.org/security/announce/2009/mfsa2009-23.html - https://bugzilla.mozilla.org/show_bug.cgi?id=489647 - http://www.ubuntu.com/usn/USN-765-1 - http://secunia.com/advisories/34919 - https://bugzilla.mozilla.org/show_bug.cgi?id=490233 - https:
u.com/usn/USN-765-1 - http://secunia.com/advisories/34919 - https://bugzilla.mozilla.org/show_bug.cgi?id=490233 - https://rhn.redhat.com/errata/RHSA-2009-0449.html - https://bugzilla.redhat.com/show_bug.cgi?id=497447 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.350967 - http://secunia.com/advisories/34851
CVE ID: CVE-2009-1314 State: PUBLISHED Published: 2009-04-17T00:00:00 Last Updated: 2024-08-07T05:04:49.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the savefile action with a file parameter containing a filename that has an executable extension. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50389 - https://www.exploit-db.com/exploits/8382
CVE ID: CVE-2009-1315 State: PUBLISHED Published: 2009-04-17T10:00:00 Last Updated: 2024-08-07T05:04:49.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in AbleSpace 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) gid parameter to groups_profile.php, (2) cat_id and (3) razd_id parameters to adv_cat.php, and the (4) URL to blogs_full.php. Additional Analyst Notes: - CVE Program Container: References: - http://dsecrg.com/pages/vul/show.php?id=137 - http://www.securityfocus.com/bid/34512 - http://www.securityfocus.com/archive/1/502670/100/0/threaded - http://secunia.com/advisories/34663 - https://ex
/34512 - http://www.securityfocus.com/archive/1/502670/100/0/threaded - http://secunia.com/advisories/34663 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44847 - https://www.exploit-db.com/exploits/8424
CVE ID: CVE-2009-1316 State: PUBLISHED Published: 2009-04-17T10:00:00 Last Updated: 2024-08-07T05:04:49.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in AbleSpace 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to events_view.php and the (2) id parameter to events_clndr_view.php. Additional Analyst Notes: - CVE Program Container: References: - http://dsecrg.com/pages/vul/show.php?id=137 - http://www.securityfocus.com/bid/34512 - http://www.securityfocus.com/archive/1/502670/100/0/threaded - http://secunia.com/advisories/34663 - https://www.exploit-db.com/exploits/8424
CVE ID: CVE-2009-1317 State: PUBLISHED Published: 2009-04-17T10:00:00 Last Updated: 2024-08-07T05:04:49.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Aqua CMS 1.1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) userSID cookie parameter to droplets/functions/base.php and the (2) username parameter to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8432 - http://secunia.com/advisories/34720 - http://www.securityfocus.com/bid/34516
CVE ID: CVE-2009-1318 State: PUBLISHED Published: 2009-04-17T10:00:00 Last Updated: 2024-08-07T05:04:49.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary files via directory traversal sequences in the t parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8423 - http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1470 - http://www.securityfocus.com/bid/34511 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49869
CVE ID: CVE-2009-1319 State: PUBLISHED Published: 2009-04-17T10:00:00 Last Updated: 2024-08-07T05:04:49.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in includes/ini.inc.php in GuestCal 2.1 allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the lang parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34519 - http://secunia.com/advisories/34721 - https://www.exploit-db.com/exploits/8431
CVE ID: CVE-2009-1320 State: PUBLISHED Published: 2009-04-17T10:00:00Z Last Updated: 2024-09-17T02:31:05.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in include/zstore.php in Zazzle Store Builder 1.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) gridPage and (2) gridSort parameters. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34525 - http://holisticinfosec.org/content/view/102/45/ - http://secunia.com/advisories/34009
CVE ID: CVE-2009-1321 State: PUBLISHED Published: 2009-04-17T10:00:00 Last Updated: 2024-08-07T05:04:49.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.asp in ASP Product Catalog 1.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49858 - http://www.securityfocus.com/bid/34504 - https://www.exploit-db.com/exploits/8418
CVE ID: CVE-2009-1322 State: PUBLISHED Published: 2009-04-17T10:00:00 Last Updated: 2024-08-07T05:04:49.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASP Product Catalog 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for database/aspProductCatalog.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49859 - https://www.exploit-db.com/exploits/8418
CVE ID: CVE-2009-1323 State: PUBLISHED Published: 2009-04-17T10:00:00 Last Updated: 2024-08-07T05:04:49.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in body.asp in Web File Explorer 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49801 - http://secunia.com/advisories/34648 - http://www.securityfocus.com/bid/34462 - https://www.exploit-db.com/exploits/8382
CVE ID: CVE-2009-1324 State: PUBLISHED Published: 2009-04-17T10:00:00 Last Updated: 2024-08-07T05:13:24.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Mini-stream ASX to MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34681 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49840 - https://www.exploit-db.com/exploits/8412 - https://www.exploit-db.com/exploits/8407 - http://www.securityfocus.com/bid/34494
CVE ID: CVE-2009-1325 State: PUBLISHED Published: 2009-04-17T10:00:00 Last Updated: 2024-08-07T05:13:24.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Mini-stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8416 - http://secunia.com/advisories/34692 - https://www.exploit-db.com/exploits/8402 - http://www.securityfocus.com/bid/34494 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49844
CVE ID: CVE-2009-1326 State: PUBLISHED Published: 2009-04-17T10:00:00 Last Updated: 2024-08-07T05:13:24.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8410 - http://secunia.com/advisories/34647 - https://www.exploit-db.com/exploits/8404 - http://www.securityfocus.com/bid/34494 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49843
CVE ID: CVE-2009-1327 State: PUBLISHED Published: 2009-04-17T10:00:00 Last Updated: 2024-08-07T05:13:25.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Mini-stream WM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49842 - https://www.exploit-db.com/exploits/8411 - https://www.exploit-db.com/exploits/8403 - http://www.securityfocus.com/bid/34494 - http://secunia.com/advisories/34674
CVE ID: CVE-2009-1328 State: PUBLISHED Published: 2009-04-17T10:00:00 Last Updated: 2024-08-07T05:13:25.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Mini-stream RM-MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8405 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49841 - https://www.exploit-db.com/exploits/8413 - http://www.securityfocus.com/bid/34494 - http://secunia.com/advisories/34653
CVE ID: CVE-2009-1329 State: PUBLISHED Published: 2009-04-17T10:00:00 Last Updated: 2024-08-07T05:13:24.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Mini-stream Shadow Stream Recorder 3.0.1.7 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34719 - https://www.exploit-db.com/exploits/8405/ - http://www.securityfocus.com/bid/34494 - https://www.exploit-db.com/exploits/8426
CVE ID: CVE-2009-1330 State: PUBLISHED Published: 2009-04-17T10:00:00 Last Updated: 2024-08-07T05:13:24.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long filename in a playlist (.pls) file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34514 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50326 - https://www.exploit-db.com/exploits/39933/ - https://www.exploit-db.com/exploits/8427
CVE ID: CVE-2009-1331 State: PUBLISHED Published: 2009-04-17T14:00:00 Last Updated: 2024-08-07T05:13:24.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Microsoft Windows Media Player (WMP) 11.0.5721.5260 allows remote attackers to cause a denial of service (application crash) via a crafted .mid file, as demonstrated by crash.mid. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34534 - http://osvdb.org/53804 - https://www.exploit-db.com/exploits/8445
CVE ID: CVE-2009-1332 State: PUBLISHED Published: 2009-04-17T14:00:00 Last Updated: 2024-08-07T05:13:24.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Online Help feature in Sun Java System Directory Server 5.2 and Enterprise Edition 5 allows remote attackers to determine the existence of files and directories, and possibly obtain partial contents of files, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34548 - http://osvdb.org/53800 - http://www.vupen.com/english/advisories/2009/1059 - http://secunia.com/advisories/34751 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-255848-1
CVE ID: CVE-2009-1333 State: PUBLISHED Published: 2009-04-17T14:00:00 Last Updated: 2024-08-07T05:13:24.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in refresh_rate.htm in the web interface on the HP Deskjet 6840 printer with firmware XF1M131A allows remote attackers to inject arbitrary web script or HTML via the POST request body. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/502620/100/0/threaded - http://www.securityfocus.com/bid/34480 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49850 - http://secunia.com/advisories/34702 - http://osvdb.org/53769
CVE ID: CVE-2009-1334 State: PUBLISHED Published: 2009-04-17T14:00:00 Last Updated: 2024-08-07T05:13:24.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login/FilepathLogin.html in IBM Tivoli Continuous Data Protection (CDP) for Files 3.1.4.0 allows remote attackers to inject arbitrary web script or HTML via the reason parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34646 - http://www.osvdb.org/53651 - http://www.securityfocus.com/bid/34513 - http://www.insight-tech.org/index.php?p=IBM-Tivoli-Continuous-Data-Protection-for-Files-version-3-1-4-0---XSS - http://securitytracker.c
ht-tech.org/index.php?p=IBM-Tivoli-Continuous-Data-Protection-for-Files-version-3-1-4-0---XSS - http://securitytracker.com/id?1022060 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49872 - http://www.vupen.com/english/advisories/2009/1021
CVE ID: CVE-2009-1335 State: PUBLISHED Published: 2009-04-17T14:00:00 Last Updated: 2024-08-07T05:13:25.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7 and 8 on Windows XP and Vista allows remote attackers to cause a denial of service (application hang) via a large document composed of unprintable characters, aka MSRC 9011jr. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0111.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/50350 - http://www.securityfocus.com/bid/34478 - http://www.securityfocus.com/archive/1/502617/100/0/threaded
CVE ID: CVE-2009-1336 State: PUBLISHED Published: 2009-04-22T15:00:00 Last Updated: 2024-08-07T05:13:24.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: fs/nfs/client.c in the Linux kernel before 2.6.23 does not properly initialize a certain structure member that stores the maximum NFS filename length, which allows local users to cause a denial of service (OOPS) via a long filename, related to the encode_lookup function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37471 - http://secunia.com/advisories/35160 - http://secunia.com/advisories/35656 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://www.debian
http://secunia.com/advisories/35656 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://www.debian.org/security/2009/dsa-1794 - http://secunia.com/advisories/35324 - http://secunia.com/advisories/35015 - http://secunia.com/advisories/35011 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://www.openwall.com/lists/oss-security/2009/04/06/1 - http://www.securitytracker.com/id?1022176 - http://www.ubuntu.com/usn/usn-793-1 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10859 - http://www.redhat.com/support/errata/RHSA-2009-1077.html - http://git.kerne
nition/oval%3Aorg.mitre.oval%3Adef%3A10859 - http://www.redhat.com/support/errata/RHSA-2009-1077.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=54af3bb543c071769141387a42deaaab5074da55 - http://www.redhat.com/support/errata/RHSA-2009-1024.html - https://bugzilla.redhat.com/show_bug.cgi?id=494074 - http://www.openwall.com/lists/oss-security/2009/04/17/2 - http://rhn.redhat.com/errata/RHSA-2009-0473.html - http://www.securityfocus.com/bid/34390 - http://www.vupen.com/english/advisories/2009/3316 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8495
CVE ID: CVE-2009-1337 State: PUBLISHED Published: 2009-04-22T15:00:00 Last Updated: 2024-08-07T05:13:25.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAP_KILL capability is held, which allows local users to send an arbitrary signal to a process by running a program that modifies the exit_signal field and then uses an exec system call to launch a setuid application. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35390 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:135 - http://www.securityfocus.
cunia.com/advisories/35390 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:135 - http://www.securityfocus.com/archive/1/512019/100/0/threaded - http://secunia.com/advisories/35226 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html - http://secunia.com/advisories/37471 - http://secunia.com/advisories/35160 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01126.html - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html - http://www.openwall.com/lists/oss-security/2009/04/07/1 - http://secunia.com/advisories/35656 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - https://bugzilla.redhat.com/show_
com/advisories/35656 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - https://bugzilla.redhat.com/show_bug.cgi?id=493771 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=432870dab85a2f69dc417022646cb9a70acf7f94 - http://www.debian.org/security/2009/dsa-1794 - http://www.securityfocus.com/archive/1/503610/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html - http://marc.info/?l=linux-kernel&m=123560588713763&w=2 - http://secunia.com/advisories/35324 - http://secunia.com/advisories/35185 - http://secunia.com/advisories/35015 - http://patchwork.kernel.org/patch/16544/ - https://oval.cisecurity.org/reposito
- http://secunia.com/advisories/35015 - http://patchwork.kernel.org/patch/16544/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11206 - http://secunia.com/advisories/35011 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://secunia.com/advisories/35120 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html - http://www.ubuntu.com/usn/usn-793-1 - http://secunia.com/advisories/34981 - http://www.debian.org/security/2009/dsa-1800 - http://www.redhat.com/support/errata/RHSA-2009-1077.html - http://www.securitytracker.com/id?1022141 - http://www.securityfocus.com/bid/34405 - http://secunia.com/advisories/35387 -
p://www.securitytracker.com/id?1022141 - http://www.securityfocus.com/bid/34405 - http://secunia.com/advisories/35387 - http://secunia.com/advisories/34917 - https://rhn.redhat.com/errata/RHSA-2009-1550.html - http://www.debian.org/security/2009/dsa-1787 - http://www.redhat.com/support/errata/RHSA-2009-1024.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:119 - http://www.openwall.com/lists/oss-security/2009/04/17/3 - http://rhn.redhat.com/errata/RHSA-2009-0473.html - http://wiki.rpath.com/Advisories:rPSA-2009-0084 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc1 - http://www.redhat.com/support/errata/RHSA-2009-0451.html - https://oval.cisecurity.o
v2.6/testing/ChangeLog-2.6.30-rc1 - http://www.redhat.com/support/errata/RHSA-2009-0451.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8295 - http://secunia.com/advisories/35121 - http://www.vupen.com/english/advisories/2009/3316 - http://secunia.com/advisories/35394 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10919
CVE ID: CVE-2009-1338 State: PUBLISHED Published: 2009-04-22T15:00:00 Last Updated: 2024-08-07T05:13:25.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kill_something_info function in kernel/signal.c in the Linux kernel before 2.6.28 does not consider PID namespaces when processing signals directed to PID -1, which allows local users to bypass the intended namespace isolation, and send arbitrary signals to all processes in all namespaces, via a kill command. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d25141a818383b3c3b09f065698c544a7a0ec6e7 - http://secunia.com/advisories
ernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d25141a818383b3c3b09f065698c544a7a0ec6e7 - http://secunia.com/advisories/35656 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28 - http://www.securityfocus.com/archive/1/503610/100/0/threaded - https://bugzilla.redhat.com/show_bug.cgi?id=496031 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50386 - http://www.openwall.com/lists/oss-security/2009/04/17/4 - http://secunia.com/advisories/35120 - http://www.ubuntu.com/usn/usn-793-1 - http://www.redhat.com/support/errata/RHSA-2009-1081.html - http://secunia.com/advisories/34981 - http://www.debian.org/security/2009/dsa-1800 - http://lkml.org/lkml/2008/7/23/148 - http://secunia.c
/advisories/34981 - http://www.debian.org/security/2009/dsa-1800 - http://lkml.org/lkml/2008/7/23/148 - http://secunia.com/advisories/35343 - http://www.openwall.com/lists/oss-security/2009/04/21/1 - http://www.debian.org/security/2009/dsa-1787 - http://wiki.rpath.com/Advisories:rPSA-2009-0084 - http://www.openwall.com/lists/oss-security/2009/04/16/2 - http://secunia.com/advisories/35121
CVE ID: CVE-2009-1339 State: PUBLISHED Published: 2009-04-30T20:00:00 Last Updated: 2024-08-07T05:13:25.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in TWiki before 4.3.1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that update pages, as demonstrated by a URL for a save script in the SRC attribute of an IMG element, a related issue to CVE-2009-1434. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/bugs/cve/2009-1339 - http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2009-1339 - http://www.vupen.com/english/advisories/2009/1217 - http:
p://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2009-1339 - http://www.vupen.com/english/advisories/2009/1217 - http://sourceforge.net/mailarchive/forum.php?thread_name=7E0723DC-CBFF-4DBD-B26C-8686287FF689%40twiki.net&forum_name=twiki-announce - http://secunia.com/advisories/34880 - http://twiki.org/p/pub/Codev/SecurityAlert-CVE-2009-1339/TWiki-4.3.0-c-diff-cve-2009-1339.txt - http://www.nabble.com/Bug-526258:-CVE-2009-1339:-CSRF-Vulnerability-with-Image-Tag-td23311575.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/50254 - http://bugs.debian.org/526258 - http://securitytracker.com/id?1022146