Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-3458 State: PUBLISHED Published: 2009-10-19T22:00:00 Last Updated: 2024-08-07T06:31:10.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-2998. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36638 - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - http://securitytracker.com/id?1023007 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - https://oval.cisecurity.org/r
ytracker.com/id?1023007 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6499 - http://www.vupen.com/english/advisories/2009/2898
CVE ID: CVE-2009-3459 State: PUBLISHED Published: 2009-10-13T10:00:00 Last Updated: 2024-08-07T06:31:10.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption, as exploited in the wild in October 2009. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36983 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6534 - http:/
/advisories/36983 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6534 - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - http://securitytracker.com/id?1023007 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - http://www.iss.net/threats/348.html - http://www.vupen.com/english/advisories/2009/2851 - http://isc.sans.org/diary.html?storyid=7300 - http://blogs.adobe.com/psirt/2009/10/adobe_reader_and_acrobat_issue_1.html - http://www.securityfocus.com/bid/36600 - http://www.vupen.com/english/advisories/2009/2898 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53691
CVE ID: CVE-2009-3460 State: PUBLISHED Published: 2009-10-19T22:00:00 Last Updated: 2024-08-07T06:31:09.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36638 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6550 - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - http://securitytracker.com/id?1023007 - http://www.adobe.com/support/sec
www.us-cert.gov/cas/techalerts/TA09-286B.html - http://securitytracker.com/id?1023007 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - http://www.vupen.com/english/advisories/2009/2898
CVE ID: CVE-2009-3461 State: PUBLISHED Published: 2009-10-19T22:00:00 Last Updated: 2024-08-07T06:31:09.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe Acrobat 9.x before 9.2 allows attackers to bypass intended file-extension restrictions via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36638 - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - http://securitytracker.com/id?1023007 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6466 - http://www.vupen.com/english/
ps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6466 - http://www.vupen.com/english/advisories/2009/2898
CVE ID: CVE-2009-3462 State: PUBLISHED Published: 2009-10-19T22:00:00 Last Updated: 2024-08-07T06:31:10.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 on Unix, when Debug mode is enabled, allow attackers to execute arbitrary code via unspecified vectors, related to a "format bug." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36638 - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - http://securitytracker.com/id?1023007 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - http://www.vupen.com/english/advisories/2009/2898 - htt
http://www.adobe.com/support/security/bulletins/apsb09-15.html - http://www.vupen.com/english/advisories/2009/2898 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6429
CVE ID: CVE-2009-3463 State: PUBLISHED Published: 2009-11-04T15:00:00 Last Updated: 2024-08-07T06:31:10.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54118 - http://www.securityfocus.com/bid/36905 - http://www.adobe.com/support/security/bulletins/apsb09-16.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitr
com/support/security/bulletins/apsb09-16.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5677 - http://www.vupen.com/english/advisories/2009/3134 - http://securitytracker.com/id?1023123
CVE ID: CVE-2009-3464 State: PUBLISHED Published: 2009-11-04T15:00:00 Last Updated: 2024-08-07T06:31:10.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an "invalid pointer vulnerability," a different issue than CVE-2009-3465. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36905 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54119 - http://www.adobe.com/support/security/bulletins/apsb09-16.html - https://
ge.xforce.ibmcloud.com/vulnerabilities/54119 - http://www.adobe.com/support/security/bulletins/apsb09-16.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6394 - http://www.vupen.com/english/advisories/2009/3134 - http://securitytracker.com/id?1023123
CVE ID: CVE-2009-3465 State: PUBLISHED Published: 2009-11-04T15:00:00 Last Updated: 2024-08-07T06:31:10.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an "invalid pointer vulnerability," a different issue than CVE-2009-3464. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36905 - http://www.adobe.com/support/security/bulletins/apsb09-16.html - http://www.vupen.com/english/advisories/2009/3134 - https://exchange.
be.com/support/security/bulletins/apsb09-16.html - http://www.vupen.com/english/advisories/2009/3134 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54120 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5722 - http://securitytracker.com/id?1023123
CVE ID: CVE-2009-3466 State: PUBLISHED Published: 2009-11-04T15:00:00 Last Updated: 2024-08-07T06:31:09.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via a crafted web page that triggers memory corruption, related to an "invalid string length vulnerability." NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54121 - http://www.securityfocus.com/bid/36905 - http://www.adobe.com/support/security/bulletins/apsb09-16.html - https://oval.cisecurity.org/r
rityfocus.com/bid/36905 - http://www.adobe.com/support/security/bulletins/apsb09-16.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6395 - http://www.vupen.com/english/advisories/2009/3134 - http://securitytracker.com/id?1023123
CVE ID: CVE-2009-3467 State: PUBLISHED Published: 2010-05-13T17:00:00Z Last Updated: 2024-09-17T04:04:59.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in an unspecified method in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39790 - http://www.vupen.com/english/advisories/2010/1127 - http://www.adobe.com/support/security/bulletins/apsb10-11.html
CVE ID: CVE-2009-3468 State: PUBLISHED Published: 2009-09-29T19:00:00 Last Updated: 2024-08-07T06:31:10.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Common Desktop Environment (CDE) in Sun Solaris 10, when Trusted Extensions is enabled, allow local users to execute arbitrary commands or bypass the Mandatory Access Control (MAC) policy via unknown vectors, related to a menu typo and the Style Manager. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/58319 - http://www.securitytracker.com/id?1022943 - http://www.securityfocus.com/bid/36510 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-26748
com/id?1022943 - http://www.securityfocus.com/bid/36510 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-267488-1 - http://www.vupen.com/english/advisories/2009/2756 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-139620-01-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53461 - http://secunia.com/advisories/36822 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-126365-15-1
CVE ID: CVE-2009-3469 State: PUBLISHED Published: 2009-09-29T19:00:00 Last Updated: 2024-08-07T06:31:09.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in profiles/html/simpleSearch.do in IBM Lotus Connections 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/58320 - http://www.securityfocus.com/bid/36513 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO44244 - http://secunia.com/advisories/36849 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53460 - http://www.vupen.com/english/advisories/2009/2760 -
36849 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53460 - http://www.vupen.com/english/advisories/2009/2760 - http://www.securitytracker.com/id?1022945 - http://www-01.ibm.com/support/docview.wss?uid=swg24024414
CVE ID: CVE-2009-3470 State: PUBLISHED Published: 2009-09-29T21:00:00 Last Updated: 2024-08-07T06:31:09.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Informix Dynamic Server (IDS) 10.00 before 10.00.xC11, 11.10 before 11.10.xC4, and 11.50 before 11.50.xC5 allows remote attackers to cause a denial of service (memory corruption, assertion failure, and daemon crash) by sending a long password over a JDBC connection. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36538 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC61195 - http://www.securitytracker.com/id?1022955 - http://secunia.com/advisories/36853 - http://www.vu
ew.wss?uid=swg1IC61195 - http://www.securitytracker.com/id?1022955 - http://secunia.com/advisories/36853 - http://www.vupen.com/english/advisories/2009/2786
CVE ID: CVE-2009-3471 State: PUBLISHED Published: 2009-09-29T21:00:00 Last Updated: 2024-08-07T06:31:09.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP2 does not perform the expected drops of certain table functions upon a loss of privileges by the functions' definers, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/58477 - http://www.securityfocus.com/bid/36540 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC63548 - http://secunia.com/advisories/36890 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ4677
iew.wss?uid=swg1IC63548 - http://secunia.com/advisories/36890 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ46773 - http://www-01.ibm.com/support/docview.wss?uid=swg21426108 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ46658 - ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg21432298 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ46774 - http://www-01.ibm.com/support/docview.wss?uid=swg21403619 - http://www-01.ibm.com/support/docview.wss?uid=swg21386689
CVE ID: CVE-2009-3472 State: PUBLISHED Published: 2009-09-29T21:00:00 Last Updated: 2024-08-07T06:31:10.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 8 before FP18, 9.1 before FP8, and 9.5 before FP4 allows remote authenticated users to bypass intended access restrictions, and update, insert, or delete table rows, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ50078 - http://www.securityfocus.com/bid/36540 - http://secunia.com/advisories/36890 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ50074 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ50079 - http://ww
w-01.ibm.com/support/docview.wss?uid=swg1IZ50074 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ50079 - http://www-01.ibm.com/support/docview.wss?uid=swg21403619 - http://osvdb.org/58478 - http://www-01.ibm.com/support/docview.wss?uid=swg21386689
CVE ID: CVE-2009-3473 State: PUBLISHED Published: 2009-09-29T21:00:00 Last Updated: 2024-08-07T06:31:10.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 9.1 before FP8 does not require the SETSESSIONUSER privilege for the SET SESSION AUTHORIZATION statement, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36540 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55883 - http://osvdb.org/58479 - http://secunia.com/advisories/36890 - http://www-01.ibm.com/support/docview.wss?uid=swg21403619
CVE ID: CVE-2009-3474 State: PUBLISHED Published: 2009-09-29T23:00:00 Last Updated: 2024-08-07T06:31:10.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSAML 2.x before 2.2.1 and XMLTooling 1.x before 1.2.1, as used by Internet2 Shibboleth Service Provider 2.x before 2.2.1, do not follow the KeyDescriptor element's Use attribute, which allows remote attackers to use a certificate for both signing and encryption when it is designated for just one purpose, potentially weakening the intended security application of the certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36516 - https://exchange.xforce.ibmcloud.com/vul
- CVE Program Container: References: - http://www.securityfocus.com/bid/36516 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53474 - http://shibboleth.internet2.edu/secadv/secadv_20090817a.txt - http://secunia.com/advisories/36876 - http://www.debian.org/security/2009/dsa-1896 - http://secunia.com/advisories/36868 - http://www.debian.org/security/2009/dsa-1895 - https://bugs.internet2.edu/jira/browse/CPPOST-28 - http://secunia.com/advisories/36855
CVE ID: CVE-2009-3475 State: PUBLISHED Published: 2009-09-29T23:00:00Z Last Updated: 2024-09-17T02:16:57.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet2 Shibboleth Service Provider software 1.3.x before 1.3.3 and 2.x before 2.2.1, when using PKIX trust validation, does not properly handle a '\0' character in the subject or subjectAltName fields of a certificate, which allows remote man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36876 - http://www.debian.o
ditional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36876 - http://www.debian.org/security/2009/dsa-1896 - http://www.debian.org/security/2009/dsa-1895 - http://shibboleth.internet2.edu/secadv/secadv_20090817.txt - http://secunia.com/advisories/36861 - http://secunia.com/advisories/36855
CVE ID: CVE-2009-3476 State: PUBLISHED Published: 2009-09-29T23:00:00 Last Updated: 2024-08-07T06:31:09.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in OpenSAML before 1.1.3 as used in Internet2 Shibboleth Service Provider software 1.3.x before 1.3.4, and XMLTooling before 1.2.2 as used in Internet2 Shibboleth Service Provider software 2.x before 2.2.1, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed encoded URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36870 - http://www.securityfocus.com/bid/36514 - http://secunia.com/advisories/36869 - https://e
/secunia.com/advisories/36870 - http://www.securityfocus.com/bid/36514 - http://secunia.com/advisories/36869 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53471 - http://shibboleth.internet2.edu/secadv/secadv_20090826.txt
CVE ID: CVE-2009-3477 State: PUBLISHED Published: 2009-09-29T23:00:00 Last Updated: 2024-08-07T06:31:10.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Blackberry Browser in RIM BlackBerry Device Software 4.5.0 before 4.5.0.173, 4.6.0 before 4.6.0.303, 4.6.1 before 4.6.1.309, 4.7.0 before 4.7.0.179, and 4.7.1 before 4.7.1.57 does not properly handle "hidden" characters including a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows remote man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. Additional A
via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36528 - http://secunia.com/advisories/36875 - http://www.blackberry.com/btsc/viewContent.do?externalId=KB19552 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53490 - http://www.securitytracker.com/id?1022951
CVE ID: CVE-2009-3478 State: PUBLISHED Published: 2009-09-29T23:00:00Z Last Updated: 2024-09-16T22:50:56.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in (1) src/content/js/connection/sftp.js and (2) src/content/js/connection/controlSocket.js.in in FireFTP Extension 1.0.5 for Firefox allows remote authenticated SFTP users to cause victims to alter permissions, delete, download, or move the wrong file via a filename containing " (double quotes), which is not properly filtered or encoded when FireFTP constructs the command to send to psftp.exe. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozdev.org/source/browse
send to psftp.exe. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozdev.org/source/browse/fireftp/src/content/js/connection/controlSocket.js.in.diff?r1=1.74%3Br2=1.75%3Bf=h - http://vuln.sg/fireftp105-en.html - http://secunia.com/advisories/36860 - http://www.securityfocus.com/bid/36536 - http://www.mozdev.org/source/browse/fireftp/src/content/js/connection/sftp.js.diff?r1=1.8%3Br2=1.9%3Bf=h - http://www.mozdev.org/source/browse/fireftp/src/content/js/connection/controlSocket.js.in.diff?r1=1.75%3Br2=1.76%3Bf=h
CVE ID: CVE-2009-3479 State: PUBLISHED Published: 2009-09-30T15:00:00Z Last Updated: 2024-09-16T17:14:31.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Bibliography (Biblio) 5.x before 5.x-1.17 and 6.x before 6.x-1.6, a module for Drupal, allows remote attackers, with "create content displayed by the Bibliography module" permissions, to inject arbitrary web script or HTML via a title. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/534752 - http://secunia.com/advisories/36083 - http://drupal.org/node/534842 - http://www.securityfocus.com/bid/35865 - http://drupal.org/node/534744
CVE ID: CVE-2009-3480 State: PUBLISHED Published: 2009-09-30T15:00:00 Last Updated: 2024-08-07T06:31:10.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the iCRM Basic (com_icrmbasic) component 1.4.2.31 for Joomla! allows remote attackers to execute arbitrary SQL commands via the p3 parameter to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53493 - http://osvdb.org/58381 - http://www.securityfocus.com/bid/36533 - http://secunia.com/advisories/36892
CVE ID: CVE-2009-3481 State: PUBLISHED Published: 2009-09-30T15:00:00Z Last Updated: 2024-09-16T22:36:04.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain interface in the iCRM Basic (com_icrmbasic) component 1.4.2.31 for Joomla! does not require administrative authentication, which has unspecified impact and remote attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/58382 - http://www.securityfocus.com/bid/36533 - http://secunia.com/advisories/36892
CVE ID: CVE-2009-3482 State: PUBLISHED Published: 2009-09-30T15:00:00 Last Updated: 2025-01-21T16:20:14.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: TrustPort Antivirus before 2.8.0.2266 and PC Security before 2.0.0.1291 use weak permissions (Everyone: Full Control) for files under %PROGRAMFILES%, which allows local users to gain privileges by replacing executables with Trojan horse programs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.trustport.com/en/notices/security-update-of-trustport-products - http://secunia.com/advisories/36880 - http://www.securityfocus.com/archive/1/506751/100/0/threaded
CVE ID: CVE-2009-3483 State: PUBLISHED Published: 2009-09-30T15:00:00 Last Updated: 2024-08-07T06:31:10.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Create New Site feature in GlobalSCAPE CuteFTP Professional, Home, and Lite 8.3.3 and 8.3.3.0054 allows user-assisted remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a site list containing an entry with a long label. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/58387 - http://secunia.com/advisories/36874 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53487 - http://www.packetstormsecurity.
unia.com/advisories/36874 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53487 - http://www.packetstormsecurity.org/0909-exploits/Dr_IDE-CuteFTP_FTP_8.3.3-PoC.py.txt