Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-3881 State: PUBLISHED Published: 2009-11-09T19:00:00 Last Updated: 2024-08-07T06:45:50.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not prevent the existence of children of a resurrected ClassLoader, which allows remote attackers to gain privileges via unspecified vectors, related to an "information leak vulnerability," aka Bug Id 6636650. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11484 - https://bugzilla.redhat.com/show_bug.cgi?id=530173 - http://security.gentoo.org/glsa/gl
3Aorg.mitre.oval%3Adef%3A11484 - https://bugzilla.redhat.com/show_bug.cgi?id=530173 - http://security.gentoo.org/glsa/glsa-200911-02.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6906 - http://java.sun.com/javase/6/webnotes/6u17.html - http://java.sun.com/j2se/1.5.0/ReleaseNotes.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:084 - http://secunia.com/advisories/37386
CVE ID: CVE-2009-3882 State: PUBLISHED Published: 2009-11-09T19:00:00 Last Updated: 2024-08-07T06:45:50.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to "information leaks in mutable variables," aka Bug Id 6657026. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200911-02.xml - https://bugzilla.redhat.com/show_bug.cgi?id=530175 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8841 - http://ja
.cgi?id=530175 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8841 - http://java.sun.com/javase/6/webnotes/6u17.html - http://java.sun.com/j2se/1.5.0/ReleaseNotes.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:084 - http://secunia.com/advisories/37386 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7300
CVE ID: CVE-2009-3883 State: PUBLISHED Published: 2009-11-09T19:00:00 Last Updated: 2024-08-07T06:45:50.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Windows Pluggable Look and Feel (PL&F) feature in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to "information leaks in mutable variables," aka Bug Id 6657138. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200911-02.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10191 - https:/
a-200911-02.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10191 - https://bugzilla.redhat.com/show_bug.cgi?id=530175 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6968 - http://java.sun.com/javase/6/webnotes/6u17.html - http://java.sun.com/j2se/1.5.0/ReleaseNotes.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:084 - http://secunia.com/advisories/37386
CVE ID: CVE-2009-3884 State: PUBLISHED Published: 2009-11-09T19:00:00 Last Updated: 2024-08-07T06:45:50.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo (aka tz) files, aka Bug Id 6824265. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=530300 - http://support.apple.com/kb/HT3970 - http://support.apple.com/kb/HT3969 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://lists.apple.com/archives/secu
/support.apple.com/kb/HT3969 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://lists.apple.com/archives/security-announce/2009/Dec/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11686 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6960 - http://lists.apple.com/archives/security-announce/2009/Dec/msg00001.html - http://secunia.com/advisories/37581 - http://java.sun.com/javase/6/webnotes/6u17.html - http://java.sun.com/j2se/1.5.0/ReleaseNotes.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:084 - http://secunia.com/advisories/37386
CVE ID: CVE-2009-3885 State: PUBLISHED Published: 2009-11-09T19:00:00 Last Updated: 2024-08-07T06:45:51.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java SE 5.0 before Update 22 and 6 before Update 17 on Windows allows remote attackers to cause a denial of service via a BMP file containing a link to a UNC share pathname for an International Color Consortium (ICC) profile file, probably a related issue to CVE-2007-2789, aka Bug Id 6632445. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7094 - http://java.sun.com/javase/6/webnotes/6u17.html - https://bugzilla.redhat.c
inition/oval%3Aorg.mitre.oval%3Adef%3A7094 - http://java.sun.com/javase/6/webnotes/6u17.html - https://bugzilla.redhat.com/show_bug.cgi?id=530114 - http://java.sun.com/j2se/1.5.0/ReleaseNotes.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:084
CVE ID: CVE-2009-3886 State: PUBLISHED Published: 2009-11-09T19:00:00 Last Updated: 2024-08-07T06:45:51.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java Web Start implementation in Sun Java SE 6 before Update 17 does not properly handle the interaction between a signed JAR file and a JNLP (1) application or (2) applet, which has unspecified impact and attack vectors, related to a "regression," aka Bug Id 6870531. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6794 - https://bugzilla.redhat.com/show_bug.cgi?id=532914 - http://security.gentoo.org/glsa/glsa-200911-02.
oval%3Adef%3A6794 - https://bugzilla.redhat.com/show_bug.cgi?id=532914 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://java.sun.com/javase/6/webnotes/6u17.html - http://secunia.com/advisories/37386
CVE ID: CVE-2009-3887 State: PUBLISHED Published: 2019-10-29T12:37:48 Last Updated: 2024-08-07T06:45:50.396Z Vendors: ytnef Products: ytnef Problem Types: path traversal Description: ytnef has directory traversal Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2009-3887 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-3887 - https://access.redhat.com/security/cve/cve-2009-3887 - http://ocert.org/advisories/ocert-2009-013.html - https://www.akitasecurity.nl/advisory.php?id=AK20090601
CVE ID: CVE-2009-3888 State: PUBLISHED Published: 2009-11-16T19:00:00 Last Updated: 2024-08-07T06:45:50.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_mmap_pgoff function in mm/nommu.c in the Linux kernel before 2.6.31.6, when the CPU lacks a memory management unit, allows local users to cause a denial of service (OOPS) via an application that attempts to allocate a large amount of memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/11/13/3 - http://www.ubuntu.com/usn/usn-864-1 - http://www.openwall.com/lists/oss-security/2009/11/09/2 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.6 -
tp://www.openwall.com/lists/oss-security/2009/11/09/2 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.6 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=89a8640279f8bb78aaf778d1fc5c4a6778f18064
CVE ID: CVE-2009-3889 State: PUBLISHED Published: 2009-11-16T19:00:00 Last Updated: 2024-08-07T06:45:50.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dbg_lvl file for the megaraid_sas driver in the Linux kernel before 2.6.27 has world-writable permissions, which allows local users to change the (1) behavior and (2) logging level of the driver by modifying this file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html - http://www.ubuntu.com/usn/usn-864-1 - https://bugzilla.redhat.com/show_bug.cgi?id=526068 - http://www.openwall.com/lists/oss-security/2009/11/13/4 - http://www.securit
ugzilla.redhat.com/show_bug.cgi?id=526068 - http://www.openwall.com/lists/oss-security/2009/11/13/4 - http://www.securityfocus.com/bid/37019 - http://support.avaya.com/css/P8/documents/100073666 - http://secunia.com/advisories/37909 - http://osvdb.org/60202 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11018 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=66dca9b8c50b5e59d3bea8b21cee5c6dae6c9c46 - http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html - http://www.openwall.com/lists/oss-security/2009/11/13/1 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27 - http://lists.opensuse.or
ists/oss-security/2009/11/13/1 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27 - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html - https://rhn.redhat.com/errata/RHSA-2010-0095.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7163 - https://rhn.redhat.com/errata/RHSA-2010-0046.html - http://www.debian.org/security/2010/dsa-2005
CVE ID: CVE-2009-3890 State: PUBLISHED Published: 2009-11-17T18:00:00Z Last Updated: 2024-09-16T23:46:39.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the wp_check_filetype function in wp-includes/functions.php in WordPress before 2.8.6, when a certain configuration of the mod_mime module in the Apache HTTP Server is enabled, allows remote authenticated users to execute arbitrary code by posting an attachment with a multiple-extension filename, and then accessing this attachment via a direct request to a wp-content/uploads/ pathname, as demonstrated by a .php.jpg filename. Additional Analyst Notes: - CVE Program Container: Reference
/uploads/ pathname, as demonstrated by a .php.jpg filename. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37332 - http://www.openwall.com/lists/oss-security/2009/11/16/1 - http://archives.neohapsis.com/archives/fulldisclosure/2009-11/0142.html - http://wordpress.org/development/2009/11/wordpress-2-8-6-security-release/ - http://archives.neohapsis.com/archives/fulldisclosure/2009-11/0153.html - http://www.openwall.com/lists/oss-security/2009/11/15/3 - http://core.trac.wordpress.org/ticket/11122 - http://www.osvdb.org/59958 - http://archives.neohapsis.com/archives/fulldisclosure/2009-11/0149.html - http://www.openwall.com/lists/oss-security/2009
ttp://archives.neohapsis.com/archives/fulldisclosure/2009-11/0149.html - http://www.openwall.com/lists/oss-security/2009/11/15/2
CVE ID: CVE-2009-3891 State: PUBLISHED Published: 2009-11-17T18:00:00Z Last Updated: 2024-09-16T19:41:50.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in wp-admin/press-this.php in WordPress before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML via the s parameter (aka the selection variable). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37332 - http://www.openwall.com/lists/oss-security/2009/11/16/1 - http://wordpress.org/development/2009/11/wordpress-2-8-6-security-release/ - http://www.osvdb.org/59959 - http://www.openwall.com/lists/oss-security/2009
2009/11/wordpress-2-8-6-security-release/ - http://www.osvdb.org/59959 - http://www.openwall.com/lists/oss-security/2009/11/15/3 - http://core.trac.wordpress.org/ticket/11119 - http://core.trac.wordpress.org/attachment/ticket/11119/press-this-xss-bug-11-10-2009.patch - http://www.openwall.com/lists/oss-security/2009/11/15/2 - http://core.trac.wordpress.org/attachment/ticket/11119/press-this.002.diff
CVE ID: CVE-2009-3892 State: PUBLISHED Published: 2009-11-17T18:00:00Z Last Updated: 2024-08-07T06:45:50.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Best Practical Solutions RT 3.6.x before 3.6.9, 3.8.x before 3.8.5, and other 3.4.6 through 3.8.4 versions allows remote attackers to inject arbitrary web script or HTML via certain Custom Fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/11/16/4 - http://lists.bestpractical.com/pipermail/rt-announce/2009-September/000173.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546778 - http://lists.bestpractical.
ounce/2009-September/000173.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546778 - http://lists.bestpractical.com/pipermail/rt-announce/2009-September/000172.html - http://www.openwall.com/lists/oss-security/2009/11/15/1
CVE ID: CVE-2009-3893 State: REJECTED Published: 2021-06-11T21:13:05 Last Updated: 2021-06-11T21:13:05 Description: No description available.
CVE ID: CVE-2009-3894 State: PUBLISHED Published: 2009-11-27T20:00:00 Last Updated: 2024-08-07T06:45:50.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple untrusted search path vulnerabilities in dstat before 0.7.0 allow local users to gain privileges via a Trojan horse Python module in (1) the current working directory or (2) a certain subdirectory of the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200911-04.xml - http://osvdb.org/60511 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:341 - http://bugs.gentoo.org/show_bug.cgi?id=293497 - http://svn.rpmforge.net/svn/trunk/t
ity/advisories?name=MDVSA-2009:341 - http://bugs.gentoo.org/show_bug.cgi?id=293497 - http://svn.rpmforge.net/svn/trunk/tools/dstat/ChangeLog - http://secunia.com/advisories/37445 - https://bugzilla.redhat.com/show_bug.cgi?id=538459 - http://www.redhat.com/support/errata/RHSA-2009-1619.html - http://www.securityfocus.com/bid/37131 - http://secunia.com/advisories/37457 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8969
CVE ID: CVE-2009-3895 State: PUBLISHED Published: 2009-11-20T18:00:00 Last Updated: 2024-08-07T06:45:50.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the exif_entry_fix function (aka the tag fixup routine) in libexif/exif-entry.c in libexif 0.6.18 allows remote attackers to cause a denial of service or possibly execute arbitrary code via an invalid EXIF image. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://libexif.cvs.sourceforge.net/viewvc/libexif/libexif/NEWS?view=markup&pathrev=libexif-0_6_19-release - http://secunia.com/advisories/37378 - http://
t/viewvc/libexif/libexif/NEWS?view=markup&pathrev=libexif-0_6_19-release - http://secunia.com/advisories/37378 - http://bugs.gentoo.org/show_bug.cgi?id=293190 - http://www.vupen.com/english/advisories/2009/3243 - http://www.openwall.com/lists/oss-security/2009/11/19/2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54275 - http://www.securityfocus.com/bid/37022 - http://www.osvdb.org/59956 - http://sourceforge.net/mailarchive/message.php?msg_name=20091113072359.GA22681%40coneharvesters.com - http://bugs.debian.org/557137
CVE ID: CVE-2009-3896 State: PUBLISHED Published: 2009-11-24T17:00:00 Last Updated: 2024-08-07T06:45:50.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: src/http/ngx_http_parse.c in nginx (aka Engine X) 0.1.0 through 0.4.14, 0.5.x before 0.5.38, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.14 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a long URI. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=552035 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00428.html - http://www.securityfocus.com/bid/36839 - ht
ww.redhat.com/archives/fedora-package-announce/2009-December/msg00428.html - http://www.securityfocus.com/bid/36839 - http://www.openwall.com/lists/oss-security/2009/11/23/10 - https://bugzilla.redhat.com/show_bug.cgi?id=539565 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00442.html - http://security.debian.org/pool/updates/main/n/nginx/nginx_0.4.13-2+etch3.diff.gz - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00449.html - http://www.debian.org/security/2009/dsa-1920 - http://secunia.com/advisories/48577 - http://www.openwall.com/lists/oss-security/2009/11/20/6 - http://sysoev.ru/nginx/patch.null.pointer.txt - http://www.openwall.com
w.openwall.com/lists/oss-security/2009/11/20/6 - http://sysoev.ru/nginx/patch.null.pointer.txt - http://www.openwall.com/lists/oss-security/2009/11/20/1 - http://security.gentoo.org/glsa/glsa-201203-22.xml - http://marc.info/?l=nginx&m=125692080328141&w=2
CVE ID: CVE-2009-3897 State: PUBLISHED Published: 2009-11-24T17:00:00 Last Updated: 2024-08-07T06:45:50.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user accounts by replacing the auth socket, related to the parent directories of the base_dir directory, and possibly the base_dir directory itself. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37443 - http://www.osvdb.org/60316 - http://marc.info/?l=oss-security&m=125881481222441&w=2 - http://www.dovecot.org/list/dovecot-new
//www.osvdb.org/60316 - http://marc.info/?l=oss-security&m=125881481222441&w=2 - http://www.dovecot.org/list/dovecot-news/2009-November/000143.html - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html - http://www.vupen.com/english/advisories/2009/3306 - http://marc.info/?l=oss-security&m=125900267208712&w=2 - http://marc.info/?l=oss-security&m=125871729029145&w=2 - http://www.securityfocus.com/bid/37084 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:306 - http://marc.info/?l=oss-security&m=125900271508796&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54363
CVE ID: CVE-2009-3898 State: PUBLISHED Published: 2009-11-24T17:00:00 Last Updated: 2024-08-07T06:45:51.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. (dot dot) in the Destination HTTP header for the WebDAV (1) COPY or (2) MOVE method. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=oss-security&m=125897425223039&w=2 - http://www.openwall.com/lists/oss-security/2009/11/23/10 - http://marc.info/?l=oss-security&m=125897327
7425223039&w=2 - http://www.openwall.com/lists/oss-security/2009/11/23/10 - http://marc.info/?l=oss-security&m=125897327321676&w=2 - http://archives.neohapsis.com/archives/fulldisclosure/2009-09/0379.html - http://secunia.com/advisories/48577 - http://secunia.com/advisories/36818 - http://marc.info/?l=oss-security&m=125900327409842&w=2 - http://www.openwall.com/lists/oss-security/2009/11/20/1 - http://security.gentoo.org/glsa/glsa-201203-22.xml
CVE ID: CVE-2009-3899 State: PUBLISHED Published: 2009-11-06T15:00:00 Last Updated: 2024-08-07T06:45:51.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the Sockets Direct Protocol (SDP) driver in Sun Solaris 10, and OpenSolaris snv_57 through snv_94, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36904 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-141444-09-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6563 - http://www.vupen.com/english/advisories/2009/313
y.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6563 - http://www.vupen.com/english/advisories/2009/3130 - http://securitytracker.com/id?1023124 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-264730-1
CVE ID: CVE-2009-3900 State: PUBLISHED Published: 2009-11-06T15:00:00 Last Updated: 2024-08-07T06:45:50.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Cluster Management component in IBM PowerHA 5.4, 5.4.1, 5.5, and 6.1 on AIX allows remote attackers to modify the operating-system configuration via packets to the godm port (6177/tcp). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37267 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ62630 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ61323 - http://www.securityfocus.com/bid/36931 - https://exchange.xforce.ibmcloud.com/vulnerabilit
docview.wss?uid=isg1IZ61323 - http://www.securityfocus.com/bid/36931 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54154 - http://www-01.ibm.com/support/docview.wss?uid=isg1IZ61325 - http://www.vupen.com/english/advisories/2009/3153 - http://aix.software.ibm.com/aix/efixes/security/haport_advisory.asc
CVE ID: CVE-2009-3901 State: PUBLISHED Published: 2009-11-06T15:00:00Z Last Updated: 2024-09-16T22:01:40.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in e-Courier CMS allow remote attackers to inject arbitrary web script or HTML via the UserGUID parameter to home/index.asp and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37240 - http://packetstormsecurity.org/0911-exploits/ecourier-xss.txt
CVE ID: CVE-2009-3902 State: PUBLISHED Published: 2009-11-06T15:00:00 Last Updated: 2024-08-07T06:45:50.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Cherokee Web Server 0.5.4 and earlier for Windows allows remote attackers to read arbitrary files via a /\.. (slash backslash dot dot) in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36874 - http://freetexthost.com/ncyss3plli - http://osvdb.org/59588 - http://secunia.com/advisories/37183 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54024 - http://www.vupen.com/english/advisories/2009/3091 - http://pocoftheday.blogspot.c
e.ibmcloud.com/vulnerabilities/54024 - http://www.vupen.com/english/advisories/2009/3091 - http://pocoftheday.blogspot.com/2009/10/cherokee-web-server-054-directory.html
CVE ID: CVE-2009-3903 State: PUBLISHED Published: 2009-11-06T15:00:00 Last Updated: 2024-08-07T06:45:50.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in jspui/index.jsp in ManageEngine Netflow Analyzer 7.5 build 7500 allow remote attackers to inject arbitrary web script or HTML via the (1) view and (2) section parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/55772 - http://www.securityfocus.com/bid/35630 - http://secunia.com/advisories/35105 - https://exchange.xforc
/osvdb.org/55772 - http://www.securityfocus.com/bid/35630 - http://secunia.com/advisories/35105 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51630