Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
.adobe.com/support/security/bulletins/apsb10-02.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6795 - http://www.redhat.com/support/errata/RHSA-2010-0060.html - http://contagiodump.blogspot.com/2009/12/virustotal-httpwww.html - http://www.vupen.com/english/advisories/2010/0103 - http://www.adobe.com/support/security/advisories/apsa09-07.html - http://www.symantec.com/connect/blogs/zero-day-xmas-present - http://www.shadowserver.org/wiki/pmwiki.php/Calendar/20091214 - http://secunia.com/advisories/38215 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html - http://www.us-cert.gov/cas/techalerts/TA10-013A.html
CVE ID: CVE-2009-4325 State: PUBLISHED Published: 2009-12-16T18:00:00Z Last Updated: 2024-09-17T02:53:04.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Client Interfaces component in IBM DB2 8.2 before FP18, 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 does not validate an unspecified pointer, which allows attackers to overwrite "external memory" via unknown vectors, related to a missing "check for null pointers." Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT - http:/
b2_v82/APARLIST.TXT - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg1LI72709 - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v97/APARLIST.TXT - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg1LI74500 - http://www-01.ibm.com/support/docview.wss?uid=swg21293566 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC64702 - http://www.vupen.com/english/advisories/2009/3520 - http://www.securityfocus.com/bid/37332 - http://www-01.ibm.com/support/docview.wss?uid=swg1LI74504 - http://ww
09/3520 - http://www.securityfocus.com/bid/37332 - http://www-01.ibm.com/support/docview.wss?uid=swg1LI74504 - http://www-01.ibm.com/support/docview.wss?uid=swg21412902 - http://secunia.com/advisories/37759
CVE ID: CVE-2009-4326 State: PUBLISHED Published: 2009-12-16T18:00:00Z Last Updated: 2024-09-16T19:19:15.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RAND scalar function in the Common Code Infrastructure component in IBM DB2 9.5 before FP5 and 9.7 before FP1, when the Database Partitioning Feature (DPF) is used, produces "repeating" return values, which might allow attackers to defeat protection mechanisms based on randomization by predicting a value. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC63946 - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v97/APARLIST.TXT - ftp
ew.wss?uid=swg1IC63946 - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v97/APARLIST.TXT - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg21293566 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ44872 - http://www.vupen.com/english/advisories/2009/3520 - http://www.securityfocus.com/bid/37332 - http://www-01.ibm.com/support/docview.wss?uid=swg21412902 - http://secunia.com/advisories/37759
CVE ID: CVE-2009-4327 State: PUBLISHED Published: 2009-12-16T18:00:00Z Last Updated: 2024-09-16T17:19:02.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Common Code Infrastructure component in IBM DB2 9.5 before FP5 and 9.7 before FP1 does not properly validate the size of a memory pool during a creation attempt, which allows attackers to cause a denial of service (memory consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v97/APARLIST.TXT - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - http://www-01.ibm.
IST.TXT - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg21293566 - http://www.vupen.com/english/advisories/2009/3520 - http://www.securityfocus.com/bid/37332 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC63179 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ43772 - http://www-01.ibm.com/support/docview.wss?uid=swg21412902 - http://secunia.com/advisories/37759
CVE ID: CVE-2009-4328 State: PUBLISHED Published: 2009-12-16T18:00:00Z Last Updated: 2024-09-16T18:43:48.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the DRDA Services component in IBM DB2 9.5 before FP5 allows remote authenticated users to cause a denial of service (server trap) by calling a SQL stored procedure in unknown circumstances. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC64298 - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg21293566 - http://www.vupen.com/english/advis
st/db2_v95/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg21293566 - http://www.vupen.com/english/advisories/2009/3520 - http://www.securityfocus.com/bid/37332 - http://www-01.ibm.com/support/docview.wss?uid=swg21412902 - http://secunia.com/advisories/37759
CVE ID: CVE-2009-4329 State: PUBLISHED Published: 2009-12-16T18:00:00Z Last Updated: 2024-09-17T00:21:28.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Engine Utilities component in IBM DB2 9.5 before FP5 allows remote authenticated users to cause a denial of service (segmentation fault) by modifying the db2ra data stream sent in a request from the Load Utility. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ52083 - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg21293566 - http://w
b2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg21293566 - http://www.vupen.com/english/advisories/2009/3520 - http://www.securityfocus.com/bid/37332 - http://www-01.ibm.com/support/docview.wss?uid=swg21412902 - http://secunia.com/advisories/37759
CVE ID: CVE-2009-4330 State: PUBLISHED Published: 2009-12-16T18:00:00Z Last Updated: 2024-09-16T19:15:02.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in db2licm in the Engine Utilities component in IBM DB2 9.5 before FP5 has unknown impact and local attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC62501 - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg21293566 - http://www.vupen.com/english/advisories/2009/3520 - http://www.securityfocus.com/bid/37332 - http://www-01.ibm.c
93566 - http://www.vupen.com/english/advisories/2009/3520 - http://www.securityfocus.com/bid/37332 - http://www-01.ibm.com/support/docview.wss?uid=swg21412902 - http://secunia.com/advisories/37759
CVE ID: CVE-2009-4331 State: PUBLISHED Published: 2009-12-16T18:00:00 Last Updated: 2024-08-07T07:01:20.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Install component in IBM DB2 9.5 before FP5 and 9.7 before FP1 configures the High Availability (HA) scripts with incorrect file-permission and authorization settings, which has unknown impact and local attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC63959 - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v97/APARLIST.TXT - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT -
list/db2_v97/APARLIST.TXT - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg21293566 - http://www.vupen.com/english/advisories/2009/3520 - http://www.securityfocus.com/bid/37332 - http://www-01.ibm.com/support/docview.wss?uid=swg21412902 - http://secunia.com/advisories/37759 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC63581
CVE ID: CVE-2009-4332 State: PUBLISHED Published: 2009-12-16T18:00:00Z Last Updated: 2024-09-17T04:13:45.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: db2pd in the Problem Determination component in IBM DB2 9.1 before FP7 and 9.5 before FP5 allows attackers to cause a denial of service (NULL pointer dereference and application termination) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ28509 - http:/
/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ28509 - http://www-01.ibm.com/support/docview.wss?uid=swg21293566 - http://www.vupen.com/english/advisories/2009/3520 - http://www.securityfocus.com/bid/37332 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ28510 - http://www-01.ibm.com/support/docview.wss?uid=swg21412902 - http://secunia.com/advisories/37759
CVE ID: CVE-2009-4333 State: PUBLISHED Published: 2009-12-16T18:00:00Z Last Updated: 2024-09-17T04:24:00.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Relational Data Services component in IBM DB2 9.5 before FP5 allows attackers to obtain the password argument from the SET ENCRYPTION PASSWORD statement via vectors involving the GET SNAPSHOT FOR DYNAMIC SQL command. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg21293566 - http://www.vupen.com/english/advisories/2009/3520 - http://www.securityfocus.com/bid/37332 -
view.wss?uid=swg21293566 - http://www.vupen.com/english/advisories/2009/3520 - http://www.securityfocus.com/bid/37332 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ38819 - http://www-01.ibm.com/support/docview.wss?uid=swg21412902 - http://secunia.com/advisories/37759
CVE ID: CVE-2009-4334 State: PUBLISHED Published: 2009-12-16T18:00:00Z Last Updated: 2024-09-16T21:57:58.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Self Tuning Memory Manager (STMM) component in IBM DB2 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 uses 0666 permissions for the STMM log file, which allows local users to cause a denial of service or have unspecified other impact by writing to this file. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC64019 - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT - ftp://ftp.software.ibm.com/ps/products/db2/fixe
ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v97/APARLIST.TXT - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg21293566 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ50355 - http://www.vupen.com/english/advisories/2009/3520 - http://www.securityfocus.com/bid/37332 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ48106 - http://www-01.ibm.com/support/docview.wss?uid=swg21412902 - http://secunia.com/advisories/37759
CVE ID: CVE-2009-4335 State: PUBLISHED Published: 2009-12-16T18:00:00 Last Updated: 2024-08-07T07:01:19.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in bundled stored procedures in the Spatial Extender component in IBM DB2 9.5 before FP5 have unknown impact and remote attack vectors, related to "remote exploits." Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg21293566 - http://www.vupen.com/english/advisories/2009/3520 - http://www.securityfocus.com/bid/37332 - http://www-01.ibm.c
93566 - http://www.vupen.com/english/advisories/2009/3520 - http://www.securityfocus.com/bid/37332 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC62625 - http://www-01.ibm.com/support/docview.wss?uid=swg21412902 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55007 - http://secunia.com/advisories/37759
CVE ID: CVE-2009-4336 State: PUBLISHED Published: 2009-12-17T17:00:00 Last Updated: 2024-08-07T07:01:19.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Diocese of Portsmouth Calendar (pd_calendar) extension 0.4.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54780 - http://www.vupen.com/english/advisories/2009/3550 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/
CVE ID: CVE-2009-4337 State: PUBLISHED Published: 2009-12-17T17:00:00 Last Updated: 2024-08-07T07:01:19.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Diocese of Portsmouth Calendar (pd_calendar) extension 0.4.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors, a different issue than CVE-2008-6691. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54779 - http://www.vupen.com/english/advisories/2009/3550 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/
CVE ID: CVE-2009-4338 State: PUBLISHED Published: 2009-12-17T17:00:00 Last Updated: 2024-08-07T07:01:19.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Flash SlideShow (slideshow) extension 0.2.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54781 - http://www.vupen.com/english/advisories/2009/3550 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/
CVE ID: CVE-2009-4339 State: PUBLISHED Published: 2009-12-17T17:00:00 Last Updated: 2024-08-07T07:01:19.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Subscription (mf_subscription) extension 0.2.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54782 - http://www.vupen.com/english/advisories/2009/3550 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/
CVE ID: CVE-2009-4340 State: PUBLISHED Published: 2009-12-17T17:00:00 Last Updated: 2024-08-07T07:01:19.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the No indexed Search (no_indexed_search) extension 0.2.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54784 - http://www.vupen.com/english/advisories/2009/3550 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/
CVE ID: CVE-2009-4341 State: PUBLISHED Published: 2009-12-17T17:00:00 Last Updated: 2024-08-07T07:01:20.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the No indexed Search (no_indexed_search) extension 0.2.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54783 - http://www.vupen.com/english/advisories/2009/3550 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/
CVE ID: CVE-2009-4342 State: PUBLISHED Published: 2009-12-17T17:00:00 Last Updated: 2024-08-07T07:01:20.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Job Exchange (jobexchange) extension 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54785 - http://www.vupen.com/english/advisories/2009/3550 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/
CVE ID: CVE-2009-4343 State: PUBLISHED Published: 2009-12-17T17:00:00 Last Updated: 2024-08-07T07:01:19.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Training Company Database (trainincdb) extension 0.4.7 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54786 - http://www.vupen.com/english/advisories/2009/3550 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/
CVE ID: CVE-2009-4344 State: PUBLISHED Published: 2009-12-17T17:00:00 Last Updated: 2024-08-07T07:01:20.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the ZID Linkliste (zid_linklist) extension 1.0.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54789 - http://www.vupen.com/english/advisories/2009/3550 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/
CVE ID: CVE-2009-4345 State: PUBLISHED Published: 2009-12-17T17:00:00 Last Updated: 2024-08-07T07:01:19.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the vShoutbox (vshoutbox) extension 0.0.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/3550 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54787 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/
CVE ID: CVE-2009-4346 State: PUBLISHED Published: 2009-12-17T17:00:00Z Last Updated: 2024-09-17T02:42:39.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Frontend news submitter with RTE (fe_rtenews) extension 1.4.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/3550 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/
CVE ID: CVE-2009-4347 State: PUBLISHED Published: 2009-12-17T17:00:00 Last Updated: 2024-08-07T07:01:20.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in daloradius-users/login.php in daloRADIUS 0.9-8 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37751 - http://www.securityfocus.com/archive/1/508473/100/0/threaded - http://packetstormsecurity.org/0912-exploits/daloradius-xss.txt
CVE ID: CVE-2009-4348 State: PUBLISHED Published: 2009-12-17T17:00:00 Last Updated: 2024-08-07T07:01:19.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Harold Bakker's NewsScript (HB-NS) 1.3 allows remote attackers to inject arbitrary web script or HTML via the topic parameter in a topic action, a different vector than CVE-2006-2146. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/10466 - http://secunia.com/advisories/37792
CVE ID: CVE-2009-4349 State: PUBLISHED Published: 2009-12-17T17:00:00 Last Updated: 2024-08-07T07:01:20.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in administration/administrators.php in Link Up Gold 5.0 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/3532 - http://osvdb.org/61017 - http://secunia.com/advisories/37712 - http://www.exploit-db.com/exploits/10436 - http://packetstormsecurity.org/0912-exploits/linkupgold-xsrf.txt - https://exchange
/www.exploit-db.com/exploits/10436 - http://packetstormsecurity.org/0912-exploits/linkupgold-xsrf.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/54759
CVE ID: CVE-2009-4350 State: PUBLISHED Published: 2009-12-17T17:00:00Z Last Updated: 2024-09-16T23:36:06.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Arctic Issue Tracker 2.1.1 allows remote attackers to execute arbitrary SQL commands via the (1) matchings[id] or (2) matchings[title] parameters in a Login action to an unspecified program, or (3) the matchings[id] parameter in a search action to index.php, a different vector than CVE-2008-3250. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37723 - http://packetst
. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37723 - http://packetstormsecurity.com/0912-exploits/arcticissue-xss.txt - http://osvdb.org/60957
CVE ID: CVE-2009-4351 State: PUBLISHED Published: 2009-12-17T18:00:00 Last Updated: 2024-08-07T07:01:20.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ADMIN/loginaction.php in WSCreator 1.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the Email (aka username) parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/60987 - http://www.vupen.com/english/advisories/2009/3524 - http://www.securityfocus.com/archive/1/508471/100/0/threaded - http://www.exploit-db.com/exploits/10446 - http://secunia.com/advisories/37753 - https://exchange.xforce.ibmcloud.com/vulne
p://www.exploit-db.com/exploits/10446 - http://secunia.com/advisories/37753 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54791
CVE ID: CVE-2009-4352 State: PUBLISHED Published: 2009-12-17T18:00:00 Last Updated: 2024-08-07T07:01:20.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in TransWARE Active! mail 2003 build 2003.0139.0871 and earlier, and possibly other versions before 2003.0139.0939, allow remote attackers to inject arbitrary web script or HTML via the (1) From, (2) To, (3) Cc, and (4) Bcc parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37602 - http://jvn.jp/en/jp/JVN49083120/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/54750 - http://jvndb.jvn.jp/en/contents/200