Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-4896 State: PUBLISHED Published: 2010-08-02T19:00:00Z Last Updated: 2024-08-07T07:17:26.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in the mlmmj-php-admin web interface for Mailing List Managing Made Joyful (mlmmj) 1.2.15 through 1.2.17 allow remote authenticated users to overwrite, create, or delete arbitrary files, or determine the existence of arbitrary directories, via a .. (dot dot) in a list name in a (1) edit or (2) save action. Additional Analyst Notes: - CVE Program Container: References: - http://mlmmj.org/node/84 - http://www.openwall.com/lists/oss-security/2010/06/26/1 - http://bugs.gentoo.org/show_
ces: - http://mlmmj.org/node/84 - http://www.openwall.com/lists/oss-security/2010/06/26/1 - http://bugs.gentoo.org/show_bug.cgi?id=259968 - http://www.openwall.com/lists/oss-security/2010/06/25/2 - http://secunia.com/advisories/40658 - http://www.openwall.com/lists/oss-security/2010/06/23/5 - https://bugzilla.redhat.com/show_bug.cgi?id=607256 - http://www.openwall.com/lists/oss-security/2010/07/06/1 - http://www.openwall.com/lists/oss-security/2010/06/23/6 - http://www.openwall.com/lists/oss-security/2010/07/04/4 - http://www.debian.org/security/2010/dsa-2073
CVE ID: CVE-2009-4897 State: PUBLISHED Published: 2010-07-22T01:00:00 Last Updated: 2024-08-07T07:17:26.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in gs/psi/iscan.c in Ghostscript 8.64 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document containing a long name. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201412-17.xml - http://www.mandriva.com/security/advisories?name=MDVSA-2010:134 - http://www.osvdb.org/66277 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60380 - http://www.ubuntu.com/usn/USN-961-1 - http
svdb.org/66277 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60380 - http://www.ubuntu.com/usn/USN-961-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:135 - http://secunia.com/advisories/40580 - http://www.securityfocus.com/bid/41593 - http://bugs.ghostscript.com/show_bug.cgi?id=690523 - https://bugzilla.redhat.com/show_bug.cgi?id=613792
CVE ID: CVE-2009-4898 State: PUBLISHED Published: 2010-09-07T16:30:00Z Last Updated: 2024-09-16T18:49:22.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in TWiki before 4.3.2 allows remote attackers to hijack the authentication of arbitrary users for requests that update pages, as demonstrated by a URL for a save script in the ACTION attribute of a FORM element, in conjunction with a call to the submit method in the onload attribute of a BODY element. NOTE: this issue exists because of an insufficient fix for CVE-2009-1339. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-securit
VE-2009-1339. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/08/02/17 - http://www.openwall.com/lists/oss-security/2010/08/03/8 - http://twiki.org/cgi-bin/view/Codev/SecurityAuditTokenBasedCsrfFix
CVE ID: CVE-2009-4899 State: PUBLISHED Published: 2019-10-28T14:12:51 Last Updated: 2024-08-07T07:17:25.986Z Vendors: n/a Products: n/a Problem Types: SQL injection Description: pixelpost 1.7.1 has SQL injection Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2009-4899 - https://access.redhat.com/security/cve/cve-2009-4899 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=597224
CVE ID: CVE-2009-4900 State: PUBLISHED Published: 2019-10-28T14:15:56 Last Updated: 2024-08-07T07:17:26.072Z Vendors: n/a Products: n/a Problem Types: XSS Description: pixelpost 1.7.1 has XSS Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2009-4900 - https://access.redhat.com/security/cve/cve-2009-4900 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=597224
CVE ID: CVE-2009-4901 State: PUBLISHED Published: 2010-06-18T16:00:00 Last Updated: 2024-08-07T07:17:25.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite before 1.5.4 might allow local users to cause a denial of service (daemon crash) via crafted SCARD_SET_ATTRIB message data, which is improperly demarshalled and triggers a buffer over-read, a related issue to CVE-2010-0407. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40758 - http://www.debian.org/security/2010/dsa-2059 - http://svn.debian.org/wsvn/pcsclite/?sc
www.securityfocus.com/bid/40758 - http://www.debian.org/security/2010/dsa-2059 - http://svn.debian.org/wsvn/pcsclite/?sc=1&rev=4208 - http://secunia.com/advisories/40239 - http://secunia.com/advisories/40140 - http://www.vupen.com/english/advisories/2010/1427 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042900.html - http://www.vupen.com/english/advisories/2010/1508 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - https://bugzilla.redhat.com/show_bug.cgi?id=596426 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042921.html
CVE ID: CVE-2009-4902 State: PUBLISHED Published: 2010-06-18T16:00:00 Last Updated: 2024-08-07T07:17:25.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite 1.5.4 and earlier might allow local users to gain privileges via crafted SCARD_CONTROL message data, which is improperly demarshalled. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-0407. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40758 - http://www.debian.org/security/2010/dsa-2059 - http://secunia.com/advisories/
- http://www.securityfocus.com/bid/40758 - http://www.debian.org/security/2010/dsa-2059 - http://secunia.com/advisories/40239 - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044124.html - http://secunia.com/advisories/40140 - http://www.vupen.com/english/advisories/2010/1427 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042900.html - http://svn.debian.org/wsvn/pcsclite/?sc=1&rev=4334 - http://www.vupen.com/english/advisories/2010/1508 - https://bugzilla.redhat.com/show_bug.cgi?id=596426 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042921.html
CVE ID: CVE-2009-4903 State: PUBLISHED Published: 2010-06-25T19:00:00 Last Updated: 2024-08-07T07:24:52.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in oBlog allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37661 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54712 - http://www.osvdb.org/60905
CVE ID: CVE-2009-4904 State: PUBLISHED Published: 2010-06-25T19:00:00 Last Updated: 2024-08-07T07:24:52.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: article.php in oBlog does not properly restrict comments, which allows remote attackers to cause a denial of service (blog spam) via a comment=new action. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0912-exploits/oblog-xssxsrf.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/59825
CVE ID: CVE-2009-4905 State: PUBLISHED Published: 2010-06-25T19:00:00Z Last Updated: 2024-09-16T19:40:53.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in Acc Statistics 1.1 allow remote attackers to hijack the authentication of administrators for requests that change (1) passwords, (2) usernames, and (3) e-mail addresses. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/10406 - http://secunia.com/advisories/37694 - http://www.vupen.com/english/advisories/2009/3509
CVE ID: CVE-2009-4906 State: PUBLISHED Published: 2010-06-25T19:00:00Z Last Updated: 2024-09-16T18:08:50.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in index.php in Acc PHP eMail 1.1 allows remote attackers to hijack the authentication of administrators for requests that change passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/3508 - http://packetstormsecurity.org/0912-exploits/ape-xsrf.txt - http://www.exploit-db.com/exploits/10412 - http://secunia.com/advisories/37666
CVE ID: CVE-2009-4907 State: PUBLISHED Published: 2010-06-25T19:00:00 Last Updated: 2024-08-07T07:24:52.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in oBlog allow remote attackers to hijack the authentication of administrators for requests that (1) change the admin password, (2) force an admin logout, (3) change the visibility of posts, (4) remove links, and (5) change the name fields of a blog. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37661 - http://packetstormsecurity.org/0912-exploits/oblog-xssxsrf.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/5
http://packetstormsecurity.org/0912-exploits/oblog-xssxsrf.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/54714 - http://osvdb.org/60907
CVE ID: CVE-2009-4908 State: PUBLISHED Published: 2010-06-25T19:00:00 Last Updated: 2024-08-07T07:24:52.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in oBlog allow remote attackers to inject arbitrary web script or HTML via the (1) commentName, (2) commentEmail, (3) commentWeb, or (4) commentText parameter to article.php; and allow remote authenticated administrators to inject arbitrary web script or HTML via the (5) article_id or (6) title parameter to admin/write.php, the (7) category_id or (8) category_name parameter to admin/groups.php, the (9) blogroll_id or (10) title parameter to admin/blogroll.php, or the (11) blo
y_name parameter to admin/groups.php, the (9) blogroll_id or (10) title parameter to admin/blogroll.php, or the (11) blog_name or (12) tag_line parameter to admin/settings.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37661 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54713 - http://packetstormsecurity.org/0912-exploits/oblog-xssxsrf.txt - http://osvdb.org/60906
CVE ID: CVE-2009-4909 State: PUBLISHED Published: 2010-06-25T19:00:00 Last Updated: 2024-08-07T07:24:52.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/index.php in oBlog allows remote attackers to conduct brute-force password guessing attacks via HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0912-exploits/oblog-xssxsrf.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/59824
CVE ID: CVE-2009-4910 State: PUBLISHED Published: 2010-06-29T18:00:00Z Last Updated: 2024-09-16T20:03:04.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the WebVPN portal on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCsq78418. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
CVE ID: CVE-2009-4911 State: PUBLISHED Published: 2010-06-29T18:00:00Z Last Updated: 2024-09-17T03:19:09.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (device crash) via vectors involving SSL VPN and PPPoE transactions, aka Bug ID CSCsm77958. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
CVE ID: CVE-2009-4912 State: PUBLISHED Published: 2010-06-29T18:00:00Z Last Updated: 2024-09-16T20:27:56.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) complete an SSL handshake with an HTTPS client even if this client is unauthorized, which might allow remote attackers to bypass intended access restrictions via an HTTPS session, aka Bug ID CSCso10876. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
CVE ID: CVE-2009-4913 State: PUBLISHED Published: 2010-06-29T18:00:00Z Last Updated: 2024-09-16T23:16:52.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPv6 implementation on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) exposes IP services on the "far side of the box," which might allow remote attackers to bypass intended access restrictions via IPv6 packets, aka Bug ID CSCso58622. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
CVE ID: CVE-2009-4914 State: PUBLISHED Published: 2010-06-29T18:00:00Z Last Updated: 2024-09-16T23:42:14.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (memory consumption) via Subject Alternative Name fields in an X.509 certificate, aka Bug ID CSCsq17879. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
CVE ID: CVE-2009-4915 State: PUBLISHED Published: 2010-06-29T18:00:00Z Last Updated: 2024-09-17T00:22:04.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (device reload) via unknown network traffic, as demonstrated by a "connection stress test," aka Bug ID CSCsq68451. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
CVE ID: CVE-2009-4916 State: PUBLISHED Published: 2010-06-29T18:00:00Z Last Updated: 2024-09-17T03:22:40.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote authenticated users to cause a denial of service (console hang) via a login action during failover replication, aka Bug ID CSCsq80095. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
CVE ID: CVE-2009-4917 State: PUBLISHED Published: 2010-06-29T18:00:00Z Last Updated: 2024-09-16T23:01:51.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (device reload) via a high volume of SIP traffic, aka Bug ID CSCsr65901. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
CVE ID: CVE-2009-4918 State: PUBLISHED Published: 2010-06-29T18:00:00Z Last Updated: 2024-09-16T17:02:40.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allow remote attackers to cause a denial of service (IKE process hang) via malformed NAT-T packets, aka Bug ID CSCsr74439. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
CVE ID: CVE-2009-4919 State: PUBLISHED Published: 2010-06-29T18:00:00Z Last Updated: 2024-09-16T20:46:54.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to have an unspecified impact via long IKE attributes, aka Bug ID CSCsu43121. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
CVE ID: CVE-2009-4920 State: PUBLISHED Published: 2010-06-29T18:00:00Z Last Updated: 2024-09-16T17:54:06.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in CTM on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software 8.1(2) allows remote attackers to cause a denial of service (watchdog traceback) via a large amount of small-packet data, aka Bug ID CSCsu11412. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
CVE ID: CVE-2009-4921 State: PUBLISHED Published: 2010-06-29T18:00:00Z Last Updated: 2024-09-17T03:28:44.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allow remote attackers to cause a denial of service (traceback) via malformed TCP packets, aka Bug ID CSCsm84110. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
CVE ID: CVE-2009-4922 State: PUBLISHED Published: 2010-06-29T18:00:00Z Last Updated: 2024-09-16T22:14:26.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote authenticated users to cause a denial of service (traceback) by establishing many IPsec L2L tunnels from remote peer IP addresses, aka Bug ID CSCso15583. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
CVE ID: CVE-2009-4923 State: PUBLISHED Published: 2010-06-29T18:00:00Z Last Updated: 2024-09-16T17:58:23.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the DTLS implementation on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (traceback) via TLS fragments, aka Bug ID CSCso53162. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
CVE ID: CVE-2009-4924 State: PUBLISHED Published: 2010-07-02T19:00:00Z Last Updated: 2024-09-17T01:11:36.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dan Pascu python-cjson 1.0.5 does not properly handle a ['/'] argument to cjson.encode, which makes it easier for remote attackers to conduct certain cross-site scripting (XSS) attacks involving Firefox and the end tag of a SCRIPT element. Additional Analyst Notes: - CVE Program Container: References: - http://pypi.python.org/pypi/python-cjson/ - http://t3.dotgnu.info/blog/insecurity/quotes-dont-help.html
CVE ID: CVE-2009-4925 State: PUBLISHED Published: 2010-07-09T17:00:00 Last Updated: 2024-08-07T07:24:52.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Portale e-commerce Creasito (aka creasito e-commerce content manager) 1.3.16, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the username parameter to (1) admin/checkuser.php and (2) checkuser.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/502818/100/0/threaded - http://www.exploit-db.com/exploits/8497 - http://secunia.com/advisories/34809 - http://www.securityfocus.com/bid/34
ed - http://www.exploit-db.com/exploits/8497 - http://secunia.com/advisories/34809 - http://www.securityfocus.com/bid/34605
CVE ID: CVE-2009-4926 State: PUBLISHED Published: 2010-07-09T17:00:00Z Last Updated: 2024-09-16T17:44:11.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Online Contact Manager (formerly EContact PRO) 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) showGroup parameter to (a) index.php and the (2) id parameter to (b) view.php, (c) email.php, (d) edit.php, and (e) delete.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstorm.linuxsecurity.com/0904-exploits/ocm30-xss.txt - http://www.securityfocus.com/bid/34626 - http://secunia.com/advisories/34826
CVE ID: CVE-2009-4927 State: PUBLISHED Published: 2010-07-09T17:00:00 Last Updated: 2024-08-07T07:24:52.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: WB News 2.1.2 allows remote attackers to bypass authentication and gain administrative access via a modified WBNEWS cookie, as demonstrated by setting this cookie to 1. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8492 - http://www.securityfocus.com/bid/34609 - http://secunia.com/advisories/34822
CVE ID: CVE-2009-4928 State: PUBLISHED Published: 2010-07-09T17:00:00 Last Updated: 2024-08-07T07:24:52.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in config.php in TotalCalendar 2.4 allows remote attackers to execute arbitrary PHP code via a URL in the inc_dir parameter, a different vector than CVE-2006-1922 and CVE-2006-7055. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34617 - http://www.exploit-db.com/exploits/8494
CVE ID: CVE-2009-4929 State: PUBLISHED Published: 2010-07-09T17:00:00 Last Updated: 2024-08-07T07:24:53.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/manage_users.php in TotalCalendar 2.4 does not require administrative authentication, which allows remote attackers to change arbitrary passwords via the newPW1 and newPW2 parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8496 - http://www.securityfocus.com/bid/34619 - http://secunia.com/advisories/34824
CVE ID: CVE-2009-4930 State: PUBLISHED Published: 2010-07-09T17:00:00 Last Updated: 2024-08-07T07:24:52.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the twbkwbis.P_SecurityQuestion (aka Change Security Question) page in SunGard Banner Student System 7.4 allows remote attackers to inject arbitrary web script or HTML via the New Question field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/502810/100/0/threaded - http://www.securityfocus.com/bid/34620
CVE ID: CVE-2009-4931 State: PUBLISHED Published: 2010-07-09T17:00:00 Last Updated: 2024-08-07T07:24:53.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Groovy Media Player 1.1.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a .m3u playlist file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34621 - http://www.exploit-db.com/exploits/8485 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49965