Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
urity/2009/dsa-1941 - http://bugs.freedesktop.org/attachment.cgi?id=30599&action=edit - http://www.mandriva.com/security/advisories?name=MDVSA-2011:175 - http://www.securityfocus.com/bid/36976 - http://bugs.freedesktop.org/show_bug.cgi?id=23074 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534680 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54215 - http://secunia.com/advisories/37333 - http://www.vupen.com/english/advisories/2009/3227
CVE ID: CVE-2009-3939 State: PUBLISHED Published: 2009-11-16T19:00:00 Last Updated: 2024-08-07T06:45:50.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38276 - http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html - http://www.ubuntu.com/usn/usn-864-1 - https://bugzilla.redhat.com/show_bug.cgi?id=526068 - http://lists.opensuse.org/opensuse-security-announce
sn/usn-864-1 - https://bugzilla.redhat.com/show_bug.cgi?id=526068 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html - http://secunia.com/advisories/38779 - http://www.securityfocus.com/bid/37019 - http://support.avaya.com/css/P8/documents/100073666 - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html - http://secunia.com/advisories/37909 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html - http://www.debian.org/security/2010/dsa-1996 - http://www.openwall.com/lists/oss-security/2009/11/13/1 - https://oval.cisecurity.org/repository/search/de
10/dsa-1996 - http://www.openwall.com/lists/oss-security/2009/11/13/1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10310 - https://rhn.redhat.com/errata/RHSA-2010-0095.html - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html - http://osvdb.org/60201 - https://rhn.redhat.com/errata/RHSA-2010-0046.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7540 - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html - http://secunia.com/advisories/38017 - http://secunia.com/advisories/38492
CVE ID: CVE-2009-3940 State: PUBLISHED Published: 2009-11-16T19:00:00 Last Updated: 2024-08-07T06:45:50.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Guest Additions in Sun xVM VirtualBox 1.6.x and 2.0.x before 2.0.12, 2.1.x, and 2.2.x, and Sun VirtualBox before 3.0.10, allows guest OS users to cause a denial of service (memory consumption) on the guest OS via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-271149-1 - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html - http://secunia.com/advisories/38420
CVE ID: CVE-2009-3941 State: PUBLISHED Published: 2009-11-16T19:00:00Z Last Updated: 2024-09-17T00:51:11.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Martin Lambers mpop before 1.0.19, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the (1) subject's Common Name or (2) Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. Additional Analyst Notes: - CVE Program Container: References: - http://mpop.sourceforge.net/news.html - http://secunia.com/advisories/3731
Notes: - CVE Program Container: References: - http://mpop.sourceforge.net/news.html - http://secunia.com/advisories/37312 - http://www.vupen.com/english/advisories/2009/3225
CVE ID: CVE-2009-3942 State: PUBLISHED Published: 2009-11-16T19:00:00 Last Updated: 2024-08-07T06:45:50.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Martin Lambers msmtp before 1.4.19, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the (1) subject's Common Name or (2) Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html
Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html - http://msmtp.sourceforge.net/news.html - http://secunia.com/advisories/37321 - http://www.vupen.com/english/advisories/2009/3224
CVE ID: CVE-2009-3943 State: PUBLISHED Published: 2009-11-16T19:00:00 Last Updated: 2024-08-07T06:45:50.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 6.0.2900.2180 and 7 through 7.0.6000.16711 allows remote attackers to cause a denial of service (application hang) via a JavaScript loop that configures the home page by using the setHomePage method and a DHTML behavior property. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/507760/100/0/threaded - http://www.securityfocus.com/archive/1/507731/100/0/threaded - http://websecurity.com.ua/3658/
CVE ID: CVE-2009-3944 State: PUBLISHED Published: 2009-11-16T19:00:00 Last Updated: 2024-08-07T06:45:50.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Research In Motion (RIM) BlackBerry Browser on the BlackBerry 8800 allows remote attackers to cause a denial of service (application hang) via a JavaScript loop that configures the home page by using the setHomePage method and a DHTML behavior property. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/507759/100/0/threaded
CVE ID: CVE-2009-3945 State: PUBLISHED Published: 2009-11-16T20:00:00 Last Updated: 2024-08-07T06:45:50.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Front-End Editor in the com_content component in Joomla! before 1.5.15 allows remote authenticated users, with Author privileges, to replace the articles of an arbitrary user via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://developer.joomla.org/security/news/305-20091103-core-front-end-editor-issue-.html - http://secunia.com/advisories/37262 - http://osvdb.org/59801 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54161
CVE ID: CVE-2009-3946 State: PUBLISHED Published: 2009-11-16T20:00:00 Last Updated: 2024-08-07T06:45:50.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joomla! before 1.5.15 allows remote attackers to read an extension's XML file, and thereby obtain the extension's version number, via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://developer.joomla.org/security/news/306-20091103-core-xml-file-read-issue.html - http://secunia.com/advisories/37262 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54160 - http://www.osvdb.org/59800
CVE ID: CVE-2009-3947 State: PUBLISHED Published: 2009-11-16T20:00:00 Last Updated: 2024-08-07T06:45:50.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the FTP service on the Tandberg MXP F7.0 allows remote attackers to cause a denial of service (process crash or device reboot) or possibly execute arbitrary code via a long USER command, as demonstrated by a command ending with many space characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9131 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51673
CVE ID: CVE-2009-3948 State: PUBLISHED Published: 2009-11-16T20:00:00 Last Updated: 2024-08-07T06:45:50.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: JetAudio 7.5.3 COWON Media Center allows remote attackers to cause a denial of service (memory consumption and application crash) via a long string at the end of a .wav file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51697 - http://www.exploit-db.com/exploits/9139
CVE ID: CVE-2009-3949 State: PUBLISHED Published: 2009-11-16T20:00:00 Last Updated: 2024-08-07T06:45:50.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: cp/profile.php in VivaPrograms Infinity 2.0.5 and earlier does not require administrative authentication for the donewauthor action, which allows remote attackers to create administrative accounts via the name, password, and conf_password parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51779 - http://www.exploit-db.com/exploits/9159
CVE ID: CVE-2009-3950 State: PUBLISHED Published: 2009-11-16T20:00:00 Last Updated: 2024-08-07T06:45:50.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Bractus SunTrack allow remote attackers to inject arbitrary web script or HTML via the (1) title parameter to newprofile.html; the (2) firstname, (3) lastname, and (4) company parameters to signup/signup.html; and the (5) firstname, (6) lastname, and (7) address[0].street1 parameters to contact.html. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/507655/100/0/threaded
CVE ID: CVE-2009-3951 State: PUBLISHED Published: 2009-12-10T19:00:00 Last Updated: 2024-08-07T06:45:50.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 on Windows allows remote attackers to obtain the names of local files via unknown vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4820. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1023307 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6663 - http://support.apple.com/kb/HT400
/oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6663 - http://support.apple.com/kb/HT4004 - http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html - http://www.vupen.com/english/advisories/2009/3456 - http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00003.html - http://secunia.com/advisories/37584 - http://secunia.com/advisories/37902 - http://www.adobe.com/support/security/bulletins/apsb09-19.html - http://osvdb.org/60891 - http://www.us-cert.gov/cas/techalerts/TA09-343A.html - http://secunia.com/advisories/38241 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54637 - http://www.securityfocus.com/bid/37199 - http://www.
8241 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54637 - http://www.securityfocus.com/bid/37199 - http://www.vupen.com/english/advisories/2010/0173
CVE ID: CVE-2009-3952 State: PUBLISHED Published: 2010-01-08T17:00:00Z Last Updated: 2024-09-17T03:38:05.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Illustrator CS3 13.0.3 and earlier and Illustrator CS4 14.0.0 allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb10-01.html - http://www.securityfocus.com/bid/37666
CVE ID: CVE-2009-3953 State: PUBLISHED Published: 2010-01-13T19:00:00.000Z Last Updated: 2025-10-22T00:05:53.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration "array boundary issue," a different vulnerability than CVE-2009-2994. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.metasploit.com/modules/exploit/windows/fileformat/adobe_u3d_meshdecl - http://secunia.com/ad
t: References: - http://www.metasploit.com/modules/exploit/windows/fileformat/adobe_u3d_meshdecl - http://secunia.com/advisories/38138 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8242 - http://www.adobe.com/support/security/bulletins/apsb10-02.html - http://www.redhat.com/support/errata/RHSA-2010-0060.html - http://www.vupen.com/english/advisories/2010/0103 - http://www.securitytracker.com/id?1023446 - http://osvdb.org/61690 - https://bugzilla.redhat.com/show_bug.cgi?id=554293 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55551 - http://secunia.com/advisories/38215 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.ht
s/55551 - http://secunia.com/advisories/38215 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html - http://www.us-cert.gov/cas/techalerts/TA10-013A.html - http://www.securityfocus.com/bid/37758
CVE ID: CVE-2009-3954 State: PUBLISHED Published: 2010-01-13T19:00:00 Last Updated: 2024-08-07T06:45:50.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow attackers to execute arbitrary code via unspecified vectors, related to a "DLL-loading vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38138 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55552 - http://www.adobe.com/support/security/bulletins/apsb10-02.html - http://www.redhat.com/support/errata/RHSA-2010-0060.html - https://oval.cisecu
pport/security/bulletins/apsb10-02.html - http://www.redhat.com/support/errata/RHSA-2010-0060.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8528 - http://www.vupen.com/english/advisories/2010/0103 - http://www.securitytracker.com/id?1023446 - http://www.securityfocus.com/bid/37761 - https://bugzilla.redhat.com/show_bug.cgi?id=554293 - http://secunia.com/advisories/38215 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html - http://www.us-cert.gov/cas/techalerts/TA10-013A.html
CVE ID: CVE-2009-3955 State: PUBLISHED Published: 2010-01-13T19:00:00 Last Updated: 2024-08-07T06:45:50.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted JPC_MS_RGN marker in the Jp2c stream of a JpxDecode encoded data stream, which triggers an integer sign extension that bypasses a sanity check, leading to memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38138 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8255 - http://www.a
ories/38138 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8255 - http://www.adobe.com/support/security/bulletins/apsb10-02.html - http://www.redhat.com/support/errata/RHSA-2010-0060.html - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=836 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55553 - http://www.vupen.com/english/advisories/2010/0103 - http://www.securitytracker.com/id?1023446 - https://bugzilla.redhat.com/show_bug.cgi?id=554293 - http://secunia.com/advisories/38215 - http://www.securityfocus.com/bid/37757 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html - http://www.us-cert.gov/cas/
com/bid/37757 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html - http://www.us-cert.gov/cas/techalerts/TA10-013A.html
CVE ID: CVE-2009-3956 State: PUBLISHED Published: 2010-01-13T19:00:00 Last Updated: 2024-08-07T06:45:50.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, does not enable the Enhanced Security feature, which has unspecified impact and attack vectors, related to a "script injection vulnerability," as demonstrated by Acrobat Forms Data Format (FDF) behavior that allows cross-site scripting (XSS) by user-assisted remote attackers. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/55554 - http://secunia.
tes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/55554 - http://secunia.com/advisories/38138 - https://bugzilla.redhat.com/show_bug.cgi?id=554296 - http://www.adobe.com/support/security/bulletins/apsb10-02.html - http://www.redhat.com/support/errata/RHSA-2010-0060.html - http://www.securityfocus.com/bid/37763 - http://www.stratsec.net/files/SS-2010-001_Stratsec_Acrobat_Script_Injection_Security_Advisory_v1.0.pdf - http://www.vupen.com/english/advisories/2010/0103 - http://www.securitytracker.com/id?1023446 - http://secunia.com/advisories/38215 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html - http://www.us-cert.gov/
/advisories/38215 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html - http://www.us-cert.gov/cas/techalerts/TA10-013A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8327 - http://www.packetstormsecurity.org/1001-exploits/SS-2010-001.txt
CVE ID: CVE-2009-3957 State: PUBLISHED Published: 2010-01-13T19:00:00 Last Updated: 2024-08-07T06:45:50.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow attackers to cause a denial of service (NULL pointer dereference) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/55555 - http://www.adobe.com/support/security/bulletins/apsb10-02.html - http://www.securityfocus.com/bid/37760 - http://www.vupen.com/english/advisories/2010/0103 - http://www.securitytracker.com/id?1023446 - http://lists.ope
37760 - http://www.vupen.com/english/advisories/2010/0103 - http://www.securitytracker.com/id?1023446 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html - http://www.us-cert.gov/cas/techalerts/TA10-013A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7975
CVE ID: CVE-2009-3958 State: PUBLISHED Published: 2010-01-13T19:00:00 Last Updated: 2024-08-07T06:45:50.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control before 1.6.2.49 in gp.ocx in the Download Manager in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow remote attackers to execute arbitrary code via unspecified initialization parameters. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8455 - http://www.securityfocus.com/bid/37759 - htt
urity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8455 - http://www.securityfocus.com/bid/37759 - http://www.adobe.com/support/security/bulletins/apsb10-02.html - http://www.vupen.com/english/advisories/2010/0103 - http://www.securitytracker.com/id?1023446 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55556 - http://www.kb.cert.org/vuls/id/773545 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html - http://www.us-cert.gov/cas/techalerts/TA10-013A.html
CVE ID: CVE-2009-3959 State: PUBLISHED Published: 2010-01-13T19:00:00 Last Updated: 2024-08-07T06:45:50.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a malformed PDF document. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/55557 - http://secunia.com/advisories/38138 - http://www.securityfocus.com/archive/1/508949 - http://www.adobe.com/support/security/bulletins/apsb10-02.html - http://www.redhat.com/support/errata/RHSA-20
1/508949 - http://www.adobe.com/support/security/bulletins/apsb10-02.html - http://www.redhat.com/support/errata/RHSA-2010-0060.html - http://www.securityfocus.com/bid/37756 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8539 - http://www.vupen.com/english/advisories/2010/0103 - http://www.securitytracker.com/id?1023446 - https://bugzilla.redhat.com/show_bug.cgi?id=554293 - http://secunia.com/advisories/38215 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html - http://www.us-cert.gov/cas/techalerts/TA10-013A.html
CVE ID: CVE-2009-3960 State: PUBLISHED Published: 2010-02-15T18:00:00.000Z Last Updated: 2025-10-22T00:05:53.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data Services 2.0.1, and ColdFusion 7.0.2, 8.0, 8.0.1, and 9.0, allows remote attackers to obtain sensitive information via vectors that are associated with a request, and related to injected tags and external entity references in XML documents. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/38197 -
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/38197 - http://securitytracker.com/id?1023584 - http://www.osvdb.org/62292 - http://secunia.com/advisories/38543 - https://www.exploit-db.com/exploits/41855/ - http://www.adobe.com/support/security/bulletins/apsb10-05.html
CVE ID: CVE-2009-3961 State: PUBLISHED Published: 2009-11-17T18:00:00 Last Updated: 2024-08-07T06:45:50.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in user.php in Super Serious Stats (aka superseriousstats) before 1.1.2p1 allows remote attackers to execute arbitrary SQL commands via the uid parameter, related to an "incorrect regexp." NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/3175 - http://code.google.com/p/superseriousstats/ - http://secunia.com/advisories/37316
CVE ID: CVE-2009-3962 State: PUBLISHED Published: 2009-11-17T18:00:00 Last Updated: 2024-08-07T06:45:50.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management interface on the 2wire Gateway 1700HG, 1701HG, 1800HW, 2071, 2700HG, and 2701HG-T with software before 5.29.52 allows remote attackers to cause a denial of service (reboot) via a %0d%0a sequence in the page parameter to the xslt program on TCP port 50001, a related issue to CVE-2006-4523. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/507587/100/0/threaded - http://webvuln.com/advisories/2wire.remote.denial.of.service.txt - http://www.securitytracker.com/i
587/100/0/threaded - http://webvuln.com/advisories/2wire.remote.denial.of.service.txt - http://www.securitytracker.com/id?1023116 - http://www.vupen.com/english/advisories/2009/3110