Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-3904 State: PUBLISHED Published: 2009-11-06T15:00:00 Last Updated: 2024-08-07T06:45:50.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: classes/session/cc_admin_session.php in CubeCart 4.3.4 does not properly restrict administrative access permissions, which allows remote attackers to bypass restrictions and gain administrative access via a HTTP request that contains an empty (1) sessID (ccAdmin cookie), (2) X_CLUSTER_CLIENT_IP header, or (3) User-Agent header. Additional Analyst Notes: - CVE Program Container: References: - http://www.acunetix.com/blog/websecuritynews/cubecart-4-session-management-bypass-leads-to-administrator-access/ - https://exchange.xforc
ix.com/blog/websecuritynews/cubecart-4-session-management-bypass-leads-to-administrator-access/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/54062 - http://www.securitytracker.com/id?1023120 - http://www.vupen.com/english/advisories/2009/3113 - http://www.securityfocus.com/archive/1/507594/100/0/threaded - http://forums.cubecart.com/index.php?showtopic=39691?read=1 - http://forums.cubecart.com/index.php?showtopic=39748 - http://secunia.com/advisories/37197 - http://www.securityfocus.com/bid/36882
CVE ID: CVE-2009-3905 State: PUBLISHED Published: 2009-11-06T15:00:00 Last Updated: 2024-08-07T06:45:50.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in e-Courier CMS allow remote attackers to inject arbitrary web script or HTML via the UserGUID parameter to (1) Wizard_tracking.asp, (2) wizard_oe2.asp, (3) your-register.asp, (4) main-whyregister.asp, and (5) your.asp in home/, and other unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37240
CVE ID: CVE-2009-3906 State: REJECTED Published: 2009-12-12T02:00:00Z Last Updated: 2024-09-16T19:35:40.855Z Description: No description available.
CVE ID: CVE-2009-3907 State: REJECTED Published: 2009-12-12T02:00:00Z Last Updated: 2024-09-17T03:27:24.162Z Description: No description available.
CVE ID: CVE-2009-3908 State: REJECTED Published: 2009-12-12T02:00:00Z Last Updated: 2024-09-16T23:36:26.771Z Description: No description available.
CVE ID: CVE-2009-3909 State: PUBLISHED Published: 2009-11-19T00:00:00 Last Updated: 2024-08-07T06:45:50.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the read_channel_data function in plug-ins/file-psd/psd-load.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a crafted PSD file that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/60178 - http://www.debian.org/security/2009/dsa-1941 - http://security.gentoo.org/glsa/glsa-201209-23.xml - http://git.gnome.org/cgit/gimp/commit/?id=9cc8d78ff33b7a36852b74e64b427489cad44d0e - http://www.vupen.com/english/advisorie
p://git.gnome.org/cgit/gimp/commit/?id=9cc8d78ff33b7a36852b74e64b427489cad44d0e - http://www.vupen.com/english/advisories/2009/3270 - http://rhn.redhat.com/errata/RHSA-2012-1181.html - http://git.gnome.org/cgit/gimp/commit/?id=0e440cb6d4d6ee029667363d244aff61b154c33c - http://secunia.com/secunia_research/2009-43/ - https://bugzilla.gnome.org/show_bug.cgi?id=600741 - http://www.securityfocus.com/archive/1/507928/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html - http://www.securityfocus.com/bid/37040 - http://secunia.com/advisories/50737 - http://www.vupen.com/english/advisories/2010/1021 - http://secunia.com/advisories/37348 - http://www.mandriva.co
50737 - http://www.vupen.com/english/advisories/2010/1021 - http://secunia.com/advisories/37348 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:332
CVE ID: CVE-2009-3911 State: PUBLISHED Published: 2009-11-09T17:00:00 Last Updated: 2024-08-07T06:45:51.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in settings.php in TFTgallery 0.13 allows remote attackers to inject arbitrary web script or HTML via the sample parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37156 - http://www.securityfocus.com/bid/36898 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54087 - http://packetstormsecurity.org/0911-exploits/tftgallery-traversal.txt
CVE ID: CVE-2009-3912 State: PUBLISHED Published: 2009-11-09T17:00:00Z Last Updated: 2024-09-17T03:23:31.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in TFTgallery 0.13 allows remote attackers to read arbitrary files via a ..%2F (encoded dot dot slash) in the album parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37156 - http://www.securityfocus.com/bid/36899 - http://packetstormsecurity.org/0911-exploits/tftgallery-traversal.txt
CVE ID: CVE-2009-3913 State: PUBLISHED Published: 2009-11-09T17:00:00 Last Updated: 2024-08-07T06:45:50.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in summary.php in Xerox Fiery Webtools allows remote attackers to execute arbitrary SQL commands via the select parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/507650/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/54137 - http://www.securityfocus.com/bid/36906
CVE ID: CVE-2009-3914 State: PUBLISHED Published: 2009-11-09T17:00:00 Last Updated: 2024-08-07T06:45:50.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Temporary Invitation module 5.x before 5.x-2.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via the Name field in an invitation. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/623018 - http://www.securityfocus.com/bid/37072 - http://secunia.com/advisories/37286 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54148 - http://osvdb.org/59679 - http://drupal.org/node/623526
CVE ID: CVE-2009-3915 State: PUBLISHED Published: 2009-11-09T17:00:00 Last Updated: 2024-08-07T06:45:50.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the "Separate title and URL" formatter in the Link module 5.x before 5.x-2.6 and 6.x before 6.x-2.7, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the link title field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36928 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54142 - http://osvdb.org/59672 - http://secunia.com/advisories/37289 - http://drupal.org/node/620668 - http://drupal.o
s/54142 - http://osvdb.org/59672 - http://secunia.com/advisories/37289 - http://drupal.org/node/620668 - http://drupal.org/node/620662 - http://drupal.org/node/623562
CVE ID: CVE-2009-3916 State: PUBLISHED Published: 2009-11-09T17:00:00 Last Updated: 2024-08-07T06:45:50.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Node Hierarchy module 5.x before 5.x-1.3 and 6.x before 6.x-1.3, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via a child node title. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54146 - http://osvdb.org/59674 - http://secunia.com/advisories/37284 - http://drupal.org/node/622100 - http://www.securityfocus.com/bid/37071 - http://drupal.org/node/622092 - http://drupal.org
tp://drupal.org/node/622100 - http://www.securityfocus.com/bid/37071 - http://drupal.org/node/622092 - http://drupal.org/node/623490
CVE ID: CVE-2009-3917 State: PUBLISHED Published: 2009-11-09T17:00:00 Last Updated: 2024-08-07T06:45:50.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the S5 Presentation Player module 6.x-1.x before 6.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via an unspecified field that is copied to the HTML HEAD element. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36923 - http://drupal.org/node/623508 - http://secunia.com/advisories/37285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54147 - http://osvdb.org/59678
CVE ID: CVE-2009-3918 State: PUBLISHED Published: 2009-11-09T17:00:00 Last Updated: 2024-08-07T06:45:50.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Zoomify module 5.x before 5.x-2.2 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the node title. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/623436 - http://osvdb.org/59671 - http://secunia.com/advisories/37263 - http://drupal.org/node/623434 - http://www.securityfocus.com/bid/36930 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54155 - http://drupal.org/node/62367
.securityfocus.com/bid/36930 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54155 - http://drupal.org/node/623678
CVE ID: CVE-2009-3919 State: PUBLISHED Published: 2009-11-09T17:00:00 Last Updated: 2024-08-07T06:45:50.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the NGP COO/CWP Integration (crmngp) module 6.x before 6.x-1.12 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified "user-supplied information." Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/623506 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54151 - http://osvdb.org/59676 - http://secunia.com/advisories/37287 - http://drupal.org/node/623546 - http://www.securityfocus.com/bid/36927
CVE ID: CVE-2009-3920 State: PUBLISHED Published: 2009-11-09T17:00:00 Last Updated: 2024-08-07T06:45:50.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: An administration page in the NGP COO/CWP Integration (crmngp) module 6.x before 6.x-1.12 for Drupal does not perform the expected access control, which allows remote attackers to read log information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/623506 - http://secunia.com/advisories/37287 - http://osvdb.org/59677 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54153 - http://drupal.org/node/623546 - http://www.securityfocus.com/bid/36927
CVE ID: CVE-2009-3921 State: PUBLISHED Published: 2009-11-09T17:00:00Z Last Updated: 2024-09-17T01:30:37.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Smartqueue_og module 5.x before 5.x-1.3 and 6.x before 6.x-1.0-rc3, a module for Drupal, does not verify group-node privileges in certain circumstances involving subqueue creation, which allows remote authenticated users to discover arbitrary organic group names by reading confirmation messages. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37288 - http://drupal.org/node/623554 - http://drupal.org/node/617496 - http://drupal.org/node/617500 - http://www.securityfocus.com/bi
drupal.org/node/623554 - http://drupal.org/node/617496 - http://drupal.org/node/617500 - http://www.securityfocus.com/bid/36925 - http://osvdb.org/59675
CVE ID: CVE-2009-3922 State: PUBLISHED Published: 2009-11-09T17:00:00 Last Updated: 2024-08-07T06:45:50.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the User Protect module 5.x before 5.x-1.4 and 6.x before 6.x-1.3, a module for Drupal, allow remote attackers to hijack the authentication of administrators for requests that (1) delete the editing protection of a user or (2) delete a certain type of administrative-bypass rule. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54145 - http://drupal.org/node/623162 - http://www.securityfocus.com/bid
://exchange.xforce.ibmcloud.com/vulnerabilities/54145 - http://drupal.org/node/623162 - http://www.securityfocus.com/bid/36922 - http://drupal.org/node/623186 - http://secunia.com/advisories/37283 - http://osvdb.org/59692 - http://drupal.org/node/623180
CVE ID: CVE-2009-3923 State: PUBLISHED Published: 2009-11-10T00:00:00 Last Updated: 2024-08-07T06:45:50.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VirtualBox 2.0.8 and 2.0.10 web service in Sun Virtual Desktop Infrastructure (VDI) 3.0 does not require authentication, which allows remote attackers to obtain unspecified access via vectors involving requests to an Apache HTTP Server. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54136 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-268328-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-141481-03-1 - http://www.securityfocus.c
setkey=1-66-268328-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-141481-03-1 - http://www.securityfocus.com/bid/36917
CVE ID: CVE-2009-3924 State: PUBLISHED Published: 2009-11-10T02:00:00 Last Updated: 2024-08-07T06:45:50.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in pbsv.dll, as used in Soldier of Fortune II and possibly other applications when Even Balance PunkBuster 1.728 or earlier is enabled, allows remote attackers to cause a denial of service (application server crash) and possibly execute arbitrary code via a long restart packet. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/sof2pbbof-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/52400 - http://aluigi.org/poc/sof2pbbof.zip - http://secunia.com/a
https://exchange.xforce.ibmcloud.com/vulnerabilities/52400 - http://aluigi.org/poc/sof2pbbof.zip - http://secunia.com/advisories/36221
CVE ID: CVE-2009-3925 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3926 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3927 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3928 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3929 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2009-3930 State: PUBLISHED Published: 2009-11-10T19:00:00 Last Updated: 2024-08-07T06:45:50.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in Christos Zoulas file before 5.02 allow user-assisted remote attackers to have an unspecified impact via a malformed compound document (aka cdf) file that triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://mx.gw.com/pipermail/file/2009/000382.html - http://www.securityfocus.com/bid/37074
CVE ID: CVE-2009-3931 State: PUBLISHED Published: 2009-11-12T16:00:00 Last Updated: 2024-08-07T06:45:50.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in browser/download/download_exe.cc in Google Chrome before 3.0.195.32 allows remote attackers to force the download of certain dangerous files via a "Content-Disposition: attachment" designation, as demonstrated by (1) .mht and (2) .mhtml files, which are automatically executed by Internet Explorer 6; (3) .svg files, which are automatically executed by Safari; (4) .xml files; (5) .htt files; (6) .xsl files; (7) .xslt files; and (8) image files that are forbidden by the victim's site policy.
s; (5) .htt files; (6) .xsl files; (7) .xslt files; and (8) image files that are forbidden by the victim's site policy. Additional Analyst Notes: - CVE Program Container: References: - http://codereview.chromium.org/download/issue243115_2002.diff - http://code.google.com/p/chromium/issues/detail?id=23979 - http://googlechromereleases.blogspot.com/2009/11/stable-channel-update.html - http://codereview.chromium.org/243115 - http://securethoughts.com/2009/11/using-blended-browser-threats-involving-chrome-to-steal-files-on-your-computer/ - http://www.osvdb.org/59742 - http://codereview.chromium.org/261022 - http://secunia.com/advisories/37273 - http://codereview.chromium.org/download/issue261022
dereview.chromium.org/261022 - http://secunia.com/advisories/37273 - http://codereview.chromium.org/download/issue261022_1.diff - https://exchange.xforce.ibmcloud.com/vulnerabilities/54171 - http://www.vupen.com/english/advisories/2009/3159 - http://www.securityfocus.com/bid/36947 - http://www.securityfocus.com/archive/1/507713
CVE ID: CVE-2009-3932 State: PUBLISHED Published: 2009-11-12T16:00:00Z Last Updated: 2024-09-17T04:29:34.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Gears plugin in Google Chrome before 3.0.195.32 allows user-assisted remote attackers to cause a denial of service (memory corruption and plugin crash) or possibly execute arbitrary code via unspecified use of the Gears SQL API, related to putting "SQL metadata into a bad state." Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2009/11/stable-channel-update.html - http://www.osvdb.org/59743 - http://secunia.com/advisories/37273 - http://www.vupen.com/english/advisor
el-update.html - http://www.osvdb.org/59743 - http://secunia.com/advisories/37273 - http://www.vupen.com/english/advisories/2009/3159 - http://www.securityfocus.com/bid/36947 - http://code.google.com/p/chromium/issues/detail?id=26179
CVE ID: CVE-2009-3933 State: PUBLISHED Published: 2009-11-12T16:00:00 Last Updated: 2024-08-07T06:45:50.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit before r50173, as used in Google Chrome before 3.0.195.32, allows remote attackers to cause a denial of service (CPU consumption) via a web page that calls the JavaScript setInterval method, which triggers an incompatibility between the WTF::currentTime and base::Time functions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://googlechromereleases.blogspot.com/2009/11/stable-channel-update.html - http://www.vupen.com/english/advisories/2011/0212 - http://trac.
eases.blogspot.com/2009/11/stable-channel-update.html - http://www.vupen.com/english/advisories/2011/0212 - http://trac.webkit.org/changeset/50173 - https://bugs.webkit.org/show_bug.cgi?id=30833 - http://codereview.chromium.org/339039 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54297 - http://code.google.com/p/chromium/issues/detail?id=25892 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://src.chromium.org/viewvc/chrome?view=rev&revision=30311 - http://src.chromium.org/viewvc/chrome/branches/195/src/webkit/webkit.gyp?r1=30311&r2=30310 - http://www.osvdb.org/59745
CVE ID: CVE-2009-3934 State: PUBLISHED Published: 2009-11-12T16:00:00 Last Updated: 2024-08-07T06:45:50.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebFrameLoaderClient::dispatchDidChangeLocationWithinPage function in src/webkit/glue/webframeloaderclient_impl.cc in Google Chrome before 3.0.195.32 allows user-assisted remote attackers to cause a denial of service via a page-local link, related to an "empty redirect chain," as demonstrated by a message in Yahoo! Mail. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://googlechromereleases.blogspot.com/2009/11/stable-channel-update.html - http://www.vupen.com/eng
dvisories/43068 - http://googlechromereleases.blogspot.com/2009/11/stable-channel-update.html - http://www.vupen.com/english/advisories/2011/0212 - http://src.chromium.org/viewvc/chrome?view=rev&revision=30772 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://codereview.chromium.org/326015 - http://code.google.com/p/chromium/issues/detail?id=22205 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54296 - http://src.chromium.org/viewvc/chrome/branches/195/src/webkit/glue/webframeloaderclient_impl.cc?r1=30772&r2=30771 - http://www.osvdb.org/59744
CVE ID: CVE-2009-3935 State: PUBLISHED Published: 2009-11-12T16:00:00Z Last Updated: 2024-09-16T19:55:50.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Advanced Management Module firmware before 2.50G for the IBM BladeCenter T 8720-2xx and 8730-2xx have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36970 - http://www.vupen.com/english/advisories/2009/3188 - ftp://download2.boulder.ibm.com/ecc/sar/CMA/XSA/00pj6/0/ibm_fw_amm_bbet50g_anyos_noarch.chg
CVE ID: CVE-2009-3936 State: PUBLISHED Published: 2009-11-13T16:00:00 Last Updated: 2024-08-07T06:45:50.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Citrix Online Plug-in for Windows 11.0.x before 11.0.150 and 11.x before 11.2, Online Plug-in for Mac before 11.0, Receiver for iPhone before 1.0.3, and ICA Java, Mac, UNIX, and Windows Clients for XenApp and XenDesktop allows remote attackers to impersonate the SSL/TLS server and bypass authentication via a crafted certificate, a different vulnerability than CVE-2009-3555. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/3206 - http://su
onal Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/3206 - http://support.citrix.com/article/CTX123248 - http://www.securityfocus.com/bid/37073 - http://secunia.com/advisories/37319 - http://www.securitytracker.com/id?1023168 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54213
CVE ID: CVE-2009-3937 State: PUBLISHED Published: 2009-11-13T16:00:00Z Last Updated: 2024-09-17T00:55:36.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Solaris TCP sockets in Sun OpenSolaris snv_106 through snv_126 allows local users to cause a denial of service (kernel memory consumption) via unspecified vectors involving tcp_sendmsg processing "ancillary data." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36992 - http://www.vupen.com/english/advisories/2009/3213 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-266488-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-68-nv_osol0906u5-1 - h
search/document.do?assetkey=1-66-266488-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-68-nv_osol0906u5-1 - http://www.securitytracker.com/id?1023162
CVE ID: CVE-2009-3938 State: PUBLISHED Published: 2009-11-13T16:00:00 Last Updated: 2024-08-07T06:45:50.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ABWOutputDev::endWord function in poppler/ABWOutputDev.cc in Poppler (aka libpoppler) 0.10.6, 0.12.0, and possibly other versions, as used by the Abiword pdftoabw utility, allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2009/dsa-1941 - http://bugs.freedesktop.org/attachment.cgi?id=30599&action=edit - http://www.mandriva.com/security