Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
possibly other unspecified passwords. NOTE: this was originally reported as a problem in DFLabs PTK, but this issue affects any product that is installed within the XAMPP environment, and should not be viewed as a vulnerability within that product. NOTE: DFLabs states that PTK is intended for use in a laboratory with "no contact from / to internet." Additional Analyst Notes: - CVE Program Container: References: - http://ptk.dflabs.com/security.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/49306 - http://www.apachefriends.org/en/faq-xampp-linux.html - http://www.ibm.com/developerworks/linux/library/l-xampp/ - http://www.debianhelp.co.uk/xampp.htm
CVE ID: CVE-2009-0920 State: PUBLISHED Published: 2009-03-25T01:00:00 Last Updated: 2024-08-07T04:57:16.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long OvOSLocale cookie, a variant of CVE-2008-0067. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0819 - http://www.securityfocus.com/bid/34294 - http://securityreason.com/securityalert/8308 - http://www.coresecurity.com/content/openview-buffer-overflows - http://www.securityfocus.com/archive/1/5
ityalert/8308 - http://www.coresecurity.com/content/openview-buffer-overflows - http://www.securityfocus.com/archive/1/502054/100/0/threaded - http://secunia.com/advisories/34444 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49364 - http://marc.info/?l=bugtraq&m=123791084113871&w=2 - http://marc.info/?l=bugtraq&m=123791084113871&w=2 - http://www.securitytracker.com/id?1021883
CVE ID: CVE-2009-0921 State: PUBLISHED Published: 2009-03-25T01:00:00 Last Updated: 2024-08-07T04:57:16.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) a long OvAcceptLang cookie, which triggers the error in ov.dll and ovwww.dll, or (2) a long Accept-Language HTTP header, which triggers the error in ovwww.dll or libovwww.so.4. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0819 - https://exchange.xforce.ibmcloud.com/vulnerabilities/4936
erences: - http://www.vupen.com/english/advisories/2009/0819 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49363 - http://www.securityfocus.com/bid/34134 - http://www.coresecurity.com/content/openview-buffer-overflows - http://www.securityfocus.com/archive/1/502054/100/0/threaded - http://www.securityfocus.com/bid/34135 - http://secunia.com/advisories/34444 - http://marc.info/?l=bugtraq&m=123791084113871&w=2 - http://marc.info/?l=bugtraq&m=123791084113871&w=2 - http://www.securitytracker.com/id?1021883
CVE ID: CVE-2009-0922 State: PUBLISHED Published: 2009-03-17T17:00:00 Last Updated: 2024-08-07T04:57:16.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumption and crash) by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using mismatched encoding conversion requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.postgresql.org/about/news.1065 - http://www.securitytracker.com/id?1021860 - https://www.redhat.com/archives/fedora-package-announce/2009
out/news.1065 - http://www.securitytracker.com/id?1021860 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00843.html - http://www.redhat.com/support/errata/RHSA-2009-1067.html - http://archives.postgresql.org//pgsql-bugs/2009-02/msg00176.php - http://www.securityfocus.com/bid/34090 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10874 - http://marc.info/?l=bugtraq&m=134124585221119&w=2 - http://www.openwall.com/lists/oss-security/2009/03/11/4 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-258808-1 - http://secunia.com/advisories/34453 - http://www.vupen.com/english/advisories/2009/0767 - http://www.securityfocus.com
- http://secunia.com/advisories/34453 - http://www.vupen.com/english/advisories/2009/0767 - http://www.securityfocus.com/archive/1/503598/100/0/threaded - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=517405 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:079 - http://archives.postgresql.org/pgsql-bugs/2009-02/msg00172.php - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00810.html - http://secunia.com/advisories/35100 - https://bugzilla.redhat.com/show_bug.cgi?id=488156 - http://wiki.rpath.com/Advisories:rPSA-2009-0086 - http://www.vupen.com/english/advisories/2009/1316 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3
upen.com/english/advisories/2009/1316 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6252 - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020455.1-1 - http://marc.info/?l=bugtraq&m=134124585221119&w=2
CVE ID: CVE-2009-0923 State: PUBLISHED Published: 2009-03-17T19:12:00 Last Updated: 2024-08-07T04:57:16.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Kerberos Incremental Propagation in Solaris 10 and OpenSolaris snv_01 through snv_110 allows remote attackers to cause a denial of service (loss of incremental propagation requests to slave KDC servers) via unknown vectors related to the master Key Distribution Center (KDC) server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1021851 - http://secunia.com/advisories/34298 - http://secunia.com/advisories/34487 - http://www.securityfocus.com/bid/34
021851 - http://secunia.com/advisories/34298 - http://secunia.com/advisories/34487 - http://www.securityfocus.com/bid/34139 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6174 - http://support.avaya.com/elmodocs2/security/ASA-2009-102.htm - http://www.vupen.com/english/advisories/2009/0875 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-249926-1 - http://www.vupen.com/english/advisories/2009/0741 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49276
CVE ID: CVE-2009-0924 State: PUBLISHED Published: 2009-03-17T19:12:00 Last Updated: 2024-08-07T04:57:16.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun OpenSolaris snv_39 through snv_45, when running in 64-bit mode on x86 architectures, allows local users to cause a denial of service (hang of UFS filesystem write) via unknown vectors related to the (1) ufs_getpage and (2) ufs_putapage routines, aka CR 6442712. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-254628-1 - http://www.securitytracker.com/id?1021850 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49281 -
1-66-254628-1 - http://www.securitytracker.com/id?1021850 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49281 - http://www.vupen.com/english/advisories/2009/0742 - http://secunia.com/advisories/34331 - http://www.securityfocus.com/bid/34137 - http://www.vupen.com/english/advisories/2009/0876 - http://support.avaya.com/elmodocs2/security/ASA-2009-103.htm
CVE ID: CVE-2009-0925 State: PUBLISHED Published: 2009-03-17T19:12:00 Last Updated: 2024-08-07T04:57:16.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun Solaris 10 on SPARC sun4v systems, and OpenSolaris snv_47 through snv_85, allows local users to cause a denial of service (hang of UFS filesystem write) via unknown vectors related to the (1) ufs_getpage and (2) ufs_putapage routines, aka CR 6425723. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-254628-1 - http://www.securitytracker.com/id?1021850 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49282 - http://www
-1 - http://www.securitytracker.com/id?1021850 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49282 - http://www.vupen.com/english/advisories/2009/0742 - http://secunia.com/advisories/34331 - http://www.securityfocus.com/bid/34137 - http://www.vupen.com/english/advisories/2009/0876 - http://support.avaya.com/elmodocs2/security/ASA-2009-103.htm
CVE ID: CVE-2009-0926 State: PUBLISHED Published: 2009-03-17T19:12:00 Last Updated: 2024-08-07T04:57:16.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the UFS filesystem functionality in Sun OpenSolaris snv_86 through snv_91, when running in 32-bit mode on x86 systems, allows local users to cause a denial of service (panic) via unknown vectors related to the (1) ufs_getpage and (2) ufs_putapage routines, aka CR 6679732. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-254628-1 - http://www.securitytracker.com/id?1021850 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
setkey=1-66-254628-1 - http://www.securitytracker.com/id?1021850 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49283 - http://www.vupen.com/english/advisories/2009/0742 - http://secunia.com/advisories/34331 - http://www.securityfocus.com/bid/34137 - http://www.vupen.com/english/advisories/2009/0876 - http://support.avaya.com/elmodocs2/security/ASA-2009-103.htm
CVE ID: CVE-2009-0927 State: PUBLISHED Published: 2009-03-19T10:00:00.000Z Last Updated: 2025-10-22T00:05:55.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object, a different vulnerability than CVE-2009-0658. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.zerodayinitiative.com/advisories/ZDI-09-014 - http://www.exploit-db.com/exploits/9579 - http://www.securityfocus.com/bid/34169 - http://secunia.com/advis
ZDI-09-014 - http://www.exploit-db.com/exploits/9579 - http://www.securityfocus.com/bid/34169 - http://secunia.com/advisories/34790 - http://www.adobe.com/support/security/bulletins/apsb09-04.html - http://www.securitytracker.com/id?1021861 - http://www.vupen.com/english/advisories/2009/0770 - http://secunia.com/advisories/34490 - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html - http://www.securityfocus.com/archive/1/502116/100/0/threaded - http://secunia.com/advisories/34706 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1 - http://security.gentoo.org/glsa/glsa-200904-17.xml - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg0001
ttp://security.gentoo.org/glsa/glsa-200904-17.xml - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html - http://www.vupen.com/english/advisories/2009/1019 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49312
CVE ID: CVE-2009-0928 State: PUBLISHED Published: 2009-03-25T01:00:00 Last Updated: 2024-08-07T04:57:16.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Adobe Acrobat Reader and Acrobat Professional 7.1.0, 8.1.3, 9.0.0, and other versions allows remote attackers to execute arbitrary code via a PDF file containing a JBIG2 stream with a size inconsistency related to an unspecified table. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=776 - http://secunia.com/advisories/34790 - http://www.adobe.com/support/security/bulletins/apsb09-04.html - http://www.securityfocu
/secunia.com/advisories/34790 - http://www.adobe.com/support/security/bulletins/apsb09-04.html - http://www.securityfocus.com/bid/34229 - http://secunia.com/advisories/34490 - http://www.securitytracker.com/id?1021892 - http://www.redhat.com/support/errata/RHSA-2009-0376.html - http://secunia.com/advisories/34392 - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html - http://secunia.com/advisories/34706 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1 - http://security.gentoo.org/glsa/glsa-200904-17.xml - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html - http://www.vupen.com/english/advisories/2009/1019
CVE ID: CVE-2009-0929 State: PUBLISHED Published: 2009-03-17T21:00:00 Last Updated: 2024-08-07T04:57:16.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the media manager in Nucleus CMS before 3.40 allows remote attackers to read arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49142 - http://www.vupen.com/english/advisories/2009/0637 - http://www.nucleuscms.org/index.php/item/index.php/item/3051 - http://secunia.com/advisories/34180 - http://www.securityfocus.com/bid/34040
CVE ID: CVE-2009-0930 State: PUBLISHED Published: 2009-03-17T21:00:00 Last Updated: 2024-08-07T04:57:16.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 4.2.2 and 4.3.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) smime.php, (2) pgp.php, and (3) message.php. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html - http://secunia.com/advisories/33719 - http://www.debian.org/security/2009/dsa-1770 - http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.699.2.375 - http://secunia.com
/www.debian.org/security/2009/dsa-1770 - http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.699.2.375 - http://secunia.com/advisories/34418 - http://cvs.horde.org/co.php/imp/docs/CHANGES?r=1.699.2.301.2.3 - http://lists.horde.org/archives/announce/2009/000484.html - http://secunia.com/advisories/34703 - http://lists.horde.org/archives/announce/2009/000485.html - http://www.securityfocus.com/bid/33492
CVE ID: CVE-2009-0931 State: PUBLISHED Published: 2009-03-17T21:00:00Z Last Updated: 2024-09-16T19:04:13.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the tag cloud search script (horde/services/portal/cloud_search.php) in Horde before 3.2.4 and 3.3.3, and Horde Groupware before 1.1.5, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.horde.org/archives/announce/2009/000486.html - http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.503 - http://www.securityfocus.com/bid/33491 - http://secunia.com/advisories/3369
rg/co.php/horde/docs/CHANGES?r=1.515.2.503 - http://www.securityfocus.com/bid/33491 - http://secunia.com/advisories/33695 - http://lists.horde.org/archives/announce/2009/000483.html - http://lists.horde.org/archives/announce/2009/000482.html - http://cvs.horde.org/co.php/groupware/docs/groupware/CHANGES?r=1.28.2.5 - http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.413.2.5
CVE ID: CVE-2009-0932 State: PUBLISHED Published: 2009-03-17T21:00:00 Last Updated: 2024-08-07T04:57:16.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in framework/Image/Image.php in Horde before 3.2.4 and 3.3.3 and Horde Groupware before 1.1.5 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the Horde_Image driver name. Additional Analyst Notes: - CVE Program Container: References: - http://lists.horde.org/archives/announce/2009/000486.html - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html - http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.503 - http
g/opensuse-security-announce/2009-03/msg00004.html - http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.503 - http://www.securityfocus.com/bid/33491 - http://secunia.com/advisories/33695 - http://lists.horde.org/archives/announce/2009/000483.html - http://secunia.com/advisories/34418 - http://lists.horde.org/archives/announce/2009/000482.html - http://cvs.horde.org/co.php/groupware/docs/groupware/CHANGES?r=1.28.2.5 - http://cvs.horde.org/co.php/horde/docs/CHANGES?r=1.515.2.413.2.5 - http://secunia.com/advisories/34609 - http://securityreason.com/securityalert/8077
CVE ID: CVE-2009-0933 State: PUBLISHED Published: 2009-03-17T22:00:00 Last Updated: 2024-08-07T04:57:17.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the administrative interface in Dotclear before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49138 - http://dotclear.org/blog/post/2009/02/05/Dotclear-2.1.5 - http://www.vupen.com/english/advisories/2009/0636 - http://secunia.com/advisories/34181 - http://www.securityfocus.com/bid/34036
CVE ID: CVE-2009-0934 State: PUBLISHED Published: 2009-03-18T01:00:00 Last Updated: 2024-08-07T04:57:16.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ejabberd before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to links and MUC logs. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49289 - http://www.securityfocus.com/bid/34133 - http://secunia.com/advisories/34354 - http://www.process-one.net/en/ejabberd/release_notes/release_note_ejabberd_204 - http://www.debian.org/security/2009/dsa-1774 - http://osvdb.org/52
en/ejabberd/release_notes/release_note_ejabberd_204 - http://www.debian.org/security/2009/dsa-1774 - http://osvdb.org/52714 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00735.html - http://secunia.com/advisories/34781 - http://secunia.com/advisories/34340 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00675.html - http://www.openwall.com/lists/oss-security/2009/03/16/1
CVE ID: CVE-2009-0935 State: PUBLISHED Published: 2009-03-18T01:00:00 Last Updated: 2024-08-07T04:57:17.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: The inotify_read function in the Linux kernel 2.6.27 to 2.6.27.13, 2.6.28 to 2.6.28.2, and 2.6.29-rc3 allows local users to cause a denial of service (OOPS) via a read with an invalid address to an inotify instance, which causes the device's event list mutex to be unlocked twice and prevents proper synchronization of a data structure for the inotify instance. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49331 - http://www.securityfocus.com/bid/33624 - htt
References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49331 - http://www.securityfocus.com/bid/33624 - http://www.openwall.com/lists/oss-security/2009/03/06/2 - http://marc.info/?l=linux-kernel&m=123337123501681&w=2 - https://bugzilla.redhat.com/show_bug.cgi?id=488935 - http://www.openwall.com/lists/oss-security/2009/03/19/2 - http://www.openwall.com/lists/oss-security/2009/03/18/5 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.3
CVE ID: CVE-2009-0936 State: PUBLISHED Published: 2009-03-18T01:00:00 Last Updated: 2024-08-07T04:57:16.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Tor before 0.2.0.34 allows attackers to cause a denial of service (infinite loop) via "corrupt votes." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34583 - http://archives.seul.org/or/announce/Feb-2009/msg00000.html - http://secunia.com/advisories/33880 - http://www.securityfocus.com/bid/33713 - http://security.gentoo.org/glsa/glsa-200904-11.xml
CVE ID: CVE-2009-0937 State: PUBLISHED Published: 2009-03-18T01:00:00 Last Updated: 2024-08-07T04:57:16.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34583 - http://archives.seul.org/or/announce/Feb-2009/msg00000.html - http://secunia.com/advisories/33880 - http://www.securityfocus.com/bid/33713 - http://security.gentoo.org/glsa/glsa-200904-11.xml
CVE ID: CVE-2009-0938 State: PUBLISHED Published: 2009-03-18T01:00:00 Last Updated: 2024-08-07T04:57:16.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service (exit node crash) via "malformed input." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34583 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49323 - http://archives.seul.org/or/announce/Feb-2009/msg00000.html - http://secunia.com/advisories/33880 - http://www.securityfocus.com/bid/33713 - http://security.gentoo.org/glsa/glsa-200904-11.xml
CVE ID: CVE-2009-0939 State: PUBLISHED Published: 2009-03-18T01:00:00 Last Updated: 2024-08-07T04:57:16.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "Spec conformance," as demonstrated using 192.168.0. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34583 - http://archives.seul.org/or/announce/Feb-2009/msg00000.html - http://secunia.com/advisories/33880 - http://www.securityfocus.com/bid/33713 - http://security.gentoo.org/glsa/glsa-200904-11.xml
CVE ID: CVE-2009-0940 State: PUBLISHED Published: 2009-03-18T20:35:00 Last Updated: 2024-08-07T04:57:17.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders allow remote attackers to hijack the intranet connectivity of arbitrary users for requests that (1) print documents via unknown vectors, (2) modify the network configuration via a NetIPChange request to hp/device/config_result_YesNo.html/config, or (3) change the password via the Password and ConfirmPassword parameters to hp/device/set_config_password.html/config. Additi
change the password via the Password and ConfirmPassword parameters to hp/device/set_config_password.html/config. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0754 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01684566 - http://osvdb.org/52848 - http://www.securityfocus.com/bid/34143 - http://osvdb.org/52849 - http://www.securityfocus.com/archive/1/501884/100/0/threaded - http://www.louhinetworks.fi/advisory/HP_20090317.txt - http://osvdb.org/52847
CVE ID: CVE-2009-0941 State: PUBLISHED Published: 2009-03-18T20:35:00 Last Updated: 2024-08-07T04:57:17.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders has no management password by default, which makes it easier for remote attackers to obtain access. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0754 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01684566 - http://www.securityfocus.com/archive/1/501884/100/0/threaded - http://www.louhinetworks.fi/advisory/HP_20090317.txt