Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-2711 State: PUBLISHED Published: 2009-08-07T18:33:00 Last Updated: 2024-08-07T05:59:56.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv_120, and X11 6.4.1 for Solaris 8, when the Xorg or Xnewt server is used, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different vulnerability than CVE-2009-1276. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020463.1-1 - http://secunia.com/advisories/36170 - https://oval.cisecurity.org/re
.com/search/document.do?assetkey=1-77-1020463.1-1 - http://secunia.com/advisories/36170 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5838 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-258928-1 - http://www.securityfocus.com/bid/35964 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-115298-02-1
CVE ID: CVE-2009-2712 State: PUBLISHED Published: 2009-08-07T18:33:00 Last Updated: 2024-08-07T05:59:56.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java System Access Manager 6.3 2005Q1, 7.0 2005Q4, and 7.1; and OpenSSO Enterprise 8.0; when AMConfig.properties enables the debug flag, allows local users to discover cleartext passwords by reading debug files. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/56815 - http://www.securityfocus.com/bid/35963 - http://secunia.com/advisories/36169 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-119465-16-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-256668-1 - http://w
rch/document.do?assetkey=1-21-119465-16-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-256668-1 - http://www.vupen.com/english/advisories/2009/2177
CVE ID: CVE-2009-2713 State: PUBLISHED Published: 2009-08-07T18:33:00 Last Updated: 2024-08-07T05:59:56.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CDCServlet component in Sun Java System Access Manager 7.0 2005Q4 and 7.1, when Cross Domain Single Sign On (CDSSO) is enabled, does not ensure that "policy advice" is presented to the correct client, which allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1 - http://secunia.com/advisories/36167 - http://www.securityfocus.com/bid/35961 - http://sunsolve.sun.com/s
1-126356-03-1 - http://secunia.com/advisories/36167 - http://www.securityfocus.com/bid/35961 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-255968-1 - http://www.vupen.com/english/advisories/2009/2176
CVE ID: CVE-2009-2714 State: PUBLISHED Published: 2009-08-07T18:33:00 Last Updated: 2024-08-07T05:59:56.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun VirtualBox 3.0.0 and 3.0.2 allows guest OS users to cause a denial of service (host OS reboot) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35960 - http://www.vupen.com/english/advisories/2009/2173 - http://secunia.com/advisories/36080 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-265268-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16725
CVE ID: CVE-2009-2715 State: PUBLISHED Published: 2009-08-07T18:33:00 Last Updated: 2024-08-07T05:59:56.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun VirtualBox 2.2 through 3.0.2 r49928 allows guest OS users to cause a denial of service (Linux host OS reboot) via a sysenter instruction. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52211 - http://www.securityfocus.com/bid/35915 - http://www.exploit-db.com/exploits/9323
CVE ID: CVE-2009-2716 State: PUBLISHED Published: 2009-08-10T20:00:00 Last Updated: 2024-08-07T05:59:56.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: The plugin functionality in Sun Java SE 6 before Update 15 does not properly implement version selection, which allows context-dependent attackers to leverage vulnerabilities in "old zip and certificate handling" and have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37460 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://java.sun.com/javase/6/webnotes/6u15.h
11-02.xml - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://java.sun.com/javase/6/webnotes/6u15.html - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://secunia.com/advisories/37386 - http://www.vupen.com/english/advisories/2009/3316
CVE ID: CVE-2009-2717 State: PUBLISHED Published: 2009-08-10T20:00:00Z Last Updated: 2024-09-16T16:48:57.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Abstract Window Toolkit (AWT) implementation in Sun Java SE 6 before Update 15 on Windows 2000 Professional does not provide a Security Warning Icon, which makes it easier for context-dependent attackers to trick a user into interacting unsafely with an untrusted applet. Additional Analyst Notes: - CVE Program Container: References: - http://java.sun.com/javase/6/webnotes/6u15.html
CVE ID: CVE-2009-2718 State: PUBLISHED Published: 2009-08-10T20:00:00 Last Updated: 2024-08-07T05:59:57.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Abstract Window Toolkit (AWT) implementation in Sun Java SE 6 before Update 15 on X11 does not impose the intended constraint on distance from the window border to the Security Warning Icon, which makes it easier for context-dependent attackers to trick a user into interacting unsafely with an untrusted applet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37460 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.vmware.com/security/advisories/VMSA-2009-0016.ht
37460 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://java.sun.com/javase/6/webnotes/6u15.html - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://secunia.com/advisories/37386 - http://www.vupen.com/english/advisories/2009/3316
CVE ID: CVE-2009-2719 State: PUBLISHED Published: 2009-08-10T20:00:00 Last Updated: 2024-08-07T05:59:57.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java Web Start implementation in Sun Java SE 6 before Update 15 allows context-dependent attackers to cause a denial of service (NullPointerException) via a crafted .jnlp file, as demonstrated by the jnlp_file/appletDesc/index.html#misc test in the Technology Compatibility Kit (TCK) for the Java Network Launching Protocol (JNLP). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37460 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.vmware.com/security/advisorie
nia.com/advisories/37460 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://java.sun.com/javase/6/webnotes/6u15.html - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://secunia.com/advisories/37386 - http://www.vupen.com/english/advisories/2009/3316
CVE ID: CVE-2009-2720 State: PUBLISHED Published: 2009-08-10T20:00:00 Last Updated: 2024-08-07T05:59:56.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the javax.swing.plaf.synth.SynthContext.isSubregion method in the Swing implementation in Sun Java SE 6 before Update 15 allows context-dependent attackers to cause a denial of service (NullPointerException in the Jemmy library) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37460 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://java.sun.com/javase/6/webn
a/glsa-200911-02.xml - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://java.sun.com/javase/6/webnotes/6u15.html - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://secunia.com/advisories/37386 - http://www.vupen.com/english/advisories/2009/3316
CVE ID: CVE-2009-2721 State: PUBLISHED Published: 2009-08-10T20:00:00 Last Updated: 2024-08-07T05:59:57.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka BugId 6406003. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37460 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1 - http://java.sun.com/j2se
/507985/100/0/threaded - http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1 - http://java.sun.com/j2se/1.5.0/ReleaseNotes.html - http://secunia.com/advisories/37386 - http://www.vupen.com/english/advisories/2009/3316
CVE ID: CVE-2009-2722 State: PUBLISHED Published: 2009-08-10T20:00:00 Last Updated: 2024-08-07T05:59:57.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka BugId 6429594. NOTE: this issue exists because of an incorrect fix for BugId 6406003. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2543 - http://secunia.com/advisories/37460 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://www.securityfocus.com/archiv
glsa-200911-02.xml - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1 - http://java.sun.com/j2se/1.5.0/ReleaseNotes.html - http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html - http://secunia.com/advisories/37386 - http://www.vupen.com/english/advisories/2009/3316
CVE ID: CVE-2009-2723 State: PUBLISHED Published: 2009-08-10T20:00:00 Last Updated: 2024-08-07T05:59:57.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in deserialization in the Provider class in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, aka BugId 6444262. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2543 - http://secunia.com/advisories/37460 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://sunsolve.sun.com/search/docum
MSA-2009-0016.html - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1 - http://java.sun.com/j2se/1.5.0/ReleaseNotes.html - http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html - http://secunia.com/advisories/37386 - http://www.vupen.com/english/advisories/2009/3316
CVE ID: CVE-2009-2724 State: PUBLISHED Published: 2009-08-10T20:00:00 Last Updated: 2024-08-07T05:59:57.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the java.lang package in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, related to a "3Y Race condition in reflection checks." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37460 - http://security.gentoo.org/glsa/glsa-200911-02.xml - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1 - http://j
us.com/archive/1/507985/100/0/threaded - http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1 - http://java.sun.com/j2se/1.5.0/ReleaseNotes.html - http://secunia.com/advisories/37386 - http://www.vupen.com/english/advisories/2009/3316
CVE ID: CVE-2009-2726 State: PUBLISHED Published: 2009-08-12T10:00:00 Last Updated: 2024-08-07T05:59:57.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP channel driver in Asterisk Open Source 1.2.x before 1.2.34, 1.4.x before 1.4.26.1, 1.6.0.x before 1.6.0.12, and 1.6.1.x before 1.6.1.4; Asterisk Business Edition A.x.x, B.x.x before B.2.5.9, C.2.x before C.2.4.1, and C.3.x before C.3.1; and Asterisk Appliance s800i 1.2.x before 1.3.0.3 does not use a maximum width when invoking sscanf style functions, which allows remote attackers to cause a denial of service (stack memory consumption) via SIP packets containing large sequences of ASCII decimal characters, as demonstra
service (stack memory consumption) via SIP packets containing large sequences of ASCII decimal characters, as demonstrated via vectors related to (1) the CSeq value in a SIP header, (2) large Content-Length value, and (3) SDP. Additional Analyst Notes: - CVE Program Container: References: - http://labs.mudynamics.com/advisories/MU-200908-01.txt - http://www.vupen.com/english/advisories/2009/2229 - http://downloads.digium.com/pub/security/AST-2009-005.html - http://www.securityfocus.com/bid/36015 - http://www.securityfocus.com/archive/1/505669/100/0/threaded - http://www.securitytracker.com/id?1022705 - http://secunia.com/advisories/36227
CVE ID: CVE-2009-2727 State: PUBLISHED Published: 2009-08-10T23:00:00Z Last Updated: 2024-09-16T17:03:42.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5.3.0, 5.3.7 through 5.3.10, and 6.1.0 through 6.1.3, when the rpc.ttdbserver daemon is enabled in /etc/inetd.conf, allows remote attackers to execute arbitrary code via a long XDR-encoded ASCII string to remote procedure 15. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=isg1IZ52843 - http://secunia.com/advisories/35505 - http://aix.software.ibm.com
tp://www.ibm.com/support/docview.wss?uid=isg1IZ52843 - http://secunia.com/advisories/35505 - http://aix.software.ibm.com/aix/efixes/security/libtt_advisory.asc - http://www.vupen.com/english/advisories/2009/1620 - http://www.ibm.com/support/docview.wss?uid=isg1IZ52848 - http://www.ibm.com/support/docview.wss?uid=isg1IZ52844 - http://risesecurity.org/advisories/RISE-2009001.txt - http://www.ibm.com/support/docview.wss?uid=isg1IZ52850 - http://www.ibm.com/support/docview.wss?uid=isg1IZ52847 - http://www.ibm.com/support/docview.wss?uid=isg1IZ52849 - http://www.securityfocus.com/bid/35419 - http://www.ibm.com/support/docview.wss?uid=isg1IZ52851 - http://www.ibm.com/support/docview.wss?uid=isg1IZ
m/bid/35419 - http://www.ibm.com/support/docview.wss?uid=isg1IZ52851 - http://www.ibm.com/support/docview.wss?uid=isg1IZ52842 - http://www.ibm.com/support/docview.wss?uid=isg1IZ52846 - http://www.ibm.com/support/docview.wss?uid=isg1IZ52845
CVE ID: CVE-2009-2730 State: PUBLISHED Published: 2009-08-12T10:00:00 Last Updated: 2024-08-07T05:59:57.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: libgnutls in GnuTLS before 2.8.2 does not properly handle a '\0' character in a domain name in the subject's (1) Common Name (CN) or (2) Subject Alternative Name (SAN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8409 - http://www.securitytracker.c
tps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8409 - http://www.securitytracker.com/id?1022777 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://www.openwall.com/lists/oss-security/2009/08/14/6 - http://www.redhat.com/support/errata/RHSA-2009-1232.html - http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html - http://secunia.com/advisories/36496 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10778 - http://secunia.com/advisories/36266 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/52404 - https://rhn
rityfocus.com/archive/1/507985/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/52404 - https://rhn.redhat.com/errata/RHSA-2010-0095.html - http://article.gmane.org/gmane.network.gnutls.general/1733
CVE ID: CVE-2009-2732 State: PUBLISHED Published: 2009-08-20T22:00:00 Last Updated: 2024-08-07T05:59:57.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an Authorization HTTP header that lacks a : (colon) character in the base64-decoded string. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36403 - http://www.securityfocus.com/archive/1/505862/100/0/threaded - http://www.securityfocus.com/archive/1/505876/100/0/threaded - http://www.vupen.com/english/advisories/20
0/0/threaded - http://www.securityfocus.com/archive/1/505876/100/0/threaded - http://www.vupen.com/english/advisories/2009/2317 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:181
CVE ID: CVE-2009-2733 State: PUBLISHED Published: 2009-10-16T16:00:00 Last Updated: 2024-08-07T05:59:57.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Achievo before 1.4.0 allow remote attackers to inject arbitrary web script or HTML via (1) the scheduler title in the scheduler module, and the (2) atksearch[contractnumber], (3) atksearch_AE_customer[customer], (4) atksearchmode[contracttype], and possibly (5) atksearch[contractname] parameters to the Organization Contracts administration page, reachable through dispatch.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud
through dispatch.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53745 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53744 - http://secunia.com/advisories/37035 - http://securitytracker.com/id?1023017 - http://www.securityfocus.com/bid/36661 - http://www.achievo.org/download/releasenotes/1_4_0 - http://www.bonsai-sec.com/blog/index.php/cross-site-scripting-payloads/ - http://www.securityfocus.com/archive/1/507133/100/0/threaded - http://www.bonsai-sec.com/research/vulnerabilities/achievo-multiple-xss-0101.txt
CVE ID: CVE-2009-2734 State: PUBLISHED Published: 2009-10-16T16:00:00 Last Updated: 2024-08-07T05:59:57.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the get_employee function in classweekreport.inc in Achievo before 1.4.0 allows remote attackers to execute arbitrary SQL commands via the userid parameter (aka user_id variable) to dispatch.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/507131/100/0/threaded - http://www.securityfocus.com/bid/36660 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53743 - http://secunia.com/advisories/37035 - http://securitytracker.com/id?1023017
.xforce.ibmcloud.com/vulnerabilities/53743 - http://secunia.com/advisories/37035 - http://securitytracker.com/id?1023017 - http://www.achievo.org/download/releasenotes/1_4_0 - http://www.bonsai-sec.com/research/vulnerabilities/achievo-sql-injection-0102.txt
CVE ID: CVE-2009-2735 State: PUBLISHED Published: 2009-08-11T10:00:00 Last Updated: 2024-08-07T05:59:57.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin.php in sun-jester OpenNews 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9371 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52289 - http://osvdb.org/56812 - http://secunia.com/advisories/36154 - http://www.vupen.com/english/advisories/2009/2168
CVE ID: CVE-2009-2736 State: PUBLISHED Published: 2009-08-11T10:00:00 Last Updated: 2024-08-07T05:59:57.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in admin.php in sun-jester OpenNews 1.0 allows remote authenticated administrators to inject arbitrary PHP code into config.php via the "Overall Width" field in a setconfig action. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9371 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52289 - http://secunia.com/advisories/36154 - http://osvdb.org/56813 - http://www.vupen.com/english/advisories/2009/2168
CVE ID: CVE-2009-2737 State: PUBLISHED Published: 2009-08-11T10:00:00 Last Updated: 2024-08-07T05:59:57.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EditCSVAction function in cgi/actions.py in Roundup 1.2 before 1.2.1, 1.4 through 1.4.6, and possibly other versions does not properly check permissions, which allows remote authenticated users with edit or create privileges for a class to modify arbitrary items within that class, as demonstrated by editing all queries, modifying settings, and adding roles to users. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34192 - http://www.osvdb.org/56368 - https://www.redhat.com/arch
Container: References: - http://secunia.com/advisories/34192 - http://www.osvdb.org/56368 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00429.html - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00439.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=518768 - http://www.securityfocus.com/bid/34059 - http://issues.roundup-tracker.org/issue2550521 - https://bugzilla.redhat.com/show_bug.cgi?id=489355 - http://www.debian.org/security/2009/dsa-1754
CVE ID: CVE-2009-2738 State: PUBLISHED Published: 2009-08-11T18:00:00Z Last Updated: 2024-09-17T03:32:39.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the WebGUI in FreeNAS before 0.7RC1 allows remote attackers to hijack the authentication of users for unspecified requests via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.freenas.org/index.php?option=com_frontpage&Itemid=22 - http://jvn.jp/en/jp/JVN15267895/index.html - http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000053.html - http://www.ipa.go.jp/security/vuln/documents/2009/200908_freenas.html
CVE ID: CVE-2009-2739 State: PUBLISHED Published: 2009-08-11T18:00:00 Last Updated: 2024-08-07T05:59:57.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in FreeNAS before 0.69.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN89791790/index.html - http://www.freenas.org/index.php?option=com_frontpage&Itemid=22 - http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000052.html - http://www.securityfocus.com/bid/36146