Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-1758 State: PUBLISHED Published: 2009-05-22T01:00:00 Last Updated: 2024-08-07T05:27:53.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hypervisor_callback function in Xen, possibly before 3.4.0, as applied to the Linux kernel 2.6.30-rc4, 2.6.18, and probably other versions allows guest user applications to cause a denial of service (kernel oops) of the guest OS by triggering a segmentation fault in "certain address ranges." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35093 - http://www.openwall.com/lists/oss-security/2009/05/14/2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.
penwall.com/lists/oss-security/2009/05/14/2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10313 - http://secunia.com/advisories/35298 - http://www.securityfocus.com/bid/34957 - http://lists.xensource.com/archives/html/xen-devel/2009-05/msg00561.html - http://www.debian.org/security/2009/dsa-1809
CVE ID: CVE-2009-1759 State: PUBLISHED Published: 2009-05-22T01:00:00 Last Updated: 2024-08-07T05:27:53.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the btFiles::BuildFromMI function (trunk/btfiles.cpp) in Enhanced CTorrent (aka dTorrent) 3.3.2 and probably earlier, and CTorrent 1.3.4, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Torrent file containing a long path. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01102.html - https://bugzilla.redhat.com/show_bug.cgi?id=501813 - http://www.vupen.com/
-package-announce/2009-August/msg01102.html - https://bugzilla.redhat.com/show_bug.cgi?id=501813 - http://www.vupen.com/english/advisories/2009/1092 - http://dtorrent.svn.sourceforge.net/viewvc/dtorrent/dtorrent/trunk/btfiles.cpp?r1=296&r2=301&view=patch - https://www.exploit-db.com/exploits/8470 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49959 - http://secunia.com/advisories/34752 - http://www.openwall.com/lists/oss-security/2009/05/20/3 - http://www.securityfocus.com/bid/34584 - http://www.debian.org/security/2009/dsa-1817 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01010.html - http://secunia.com/advisories/36471 - http://secunia.com/advisories/354
ora-package-announce/2009-August/msg01010.html - http://secunia.com/advisories/36471 - http://secunia.com/advisories/35499 - http://sourceforge.net/tracker/?func=detail&aid=2782875&group_id=202532&atid=981959
CVE ID: CVE-2009-1760 State: PUBLISHED Published: 2009-06-11T21:00:00 Last Updated: 2024-08-07T05:27:53.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in src/torrent_info.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) and partial relative pathname in a Multiple File Mode list element in a .torrent file. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200907-14.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/51008 - http://www
://security.gentoo.org/glsa/glsa-200907-14.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/51008 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:139 - http://secunia.com/advisories/35277 - http://secunia.com/advisories/35848 - http://www.vupen.com/english/advisories/2009/1534 - http://www.securityfocus.com/bid/35262 - http://census-labs.com/news/2009/06/08/libtorrent-rasterbar/ - http://www.debian.org/security/2009/dsa-1815 - http://sourceforge.net/project/shownotes.php?group_id=79942&release_id=686456 - http://www.securityfocus.com/archive/1/504151/100/0/threaded
CVE ID: CVE-2009-1761 State: PUBLISHED Published: 2009-06-16T23:00:00 Last Updated: 2024-08-07T05:27:53.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: The message engine in CA ARCserve Backup r12.0 and r12.0 SP1 for Windows allows remote attackers to cause a denial of service (crash) via (1) an invalid 0x13 message, which is not properly handled in the ASCORE module, or (2) a 0x3B message with invalid stub data that triggers an RPC marshalling error. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/504348/100/0/threaded - http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=209502 - http://www.ivizsecurity.
48/100/0/threaded - http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=209502 - http://www.ivizsecurity.com/security-advisory-iviz-sr-09004.html - http://community.ca.com/blogs/casecurityresponseblog/archive/2009/06/15/ca20090615-01-ca-arcserve-backup-message-engine-denial-of-service-vulnerabilities.aspx - http://www.securityfocus.com/archive/1/504349/100/0/threaded - http://secunia.com/advisories/35473 - http://www.securityfocus.com/bid/35396 - http://www.ivizsecurity.com/security-advisory-iviz-sr-09003.html - http://www.vupen.com/english/advisories/2009/1608 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51169 - http://www.securitytracker.com/id?1022405
CVE ID: CVE-2009-1762 State: PUBLISHED Published: 2009-05-22T16:25:00 Last Updated: 2024-08-07T05:27:53.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess login page (aka gw/webacc) in Novell GroupWise 7.x before 7.03 HP2 allow remote attackers to inject arbitrary web script or HTML via the (1) GWAP.version or (2) User.Theme (aka User.Theme.index) parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1393 - https://bugzilla.novell.com/show_bug.cgi?id=484942 - http://secunia.com/advisories/35177 - http://packetstorm.linuxsecurity.com/0905-exploit
ell.com/show_bug.cgi?id=484942 - http://secunia.com/advisories/35177 - http://packetstorm.linuxsecurity.com/0905-exploits/groupwise-xss.txt - http://www.novell.com/support/search.do?cmd=displayKC&externalId=7003271 - http://www.securityfocus.com/bid/35061 - http://securitytracker.com/id?1022267 - http://www.securityfocus.com/archive/1/503700/100/0/threaded
CVE ID: CVE-2009-1763 State: PUBLISHED Published: 2009-05-22T16:25:00 Last Updated: 2024-08-07T05:27:54.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Solaris Secure Digital slot driver (aka sdhost) in Sun OpenSolaris snv_105 through snv_108 on the x86 platform allows local users to gain privileges or cause a denial of service (filesystem or memory corruption) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50687 - http://www.vupen.com/english/advisories/2009/1410 - http://www.securityfocus.com/bid/35069 - http://sunsolve.sun.com/search/document.do?asse
/english/advisories/2009/1410 - http://www.securityfocus.com/bid/35069 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-259408-1 - http://www.securitytracker.com/id?1022271
CVE ID: CVE-2009-1764 State: PUBLISHED Published: 2009-05-22T18:00:00 Last Updated: 2024-08-07T05:27:54.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in inc/ajax.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a digg action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8726 - http://www.securityfocus.com/bid/34981 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50553
CVE ID: CVE-2009-1765 State: PUBLISHED Published: 2009-05-22T18:00:00 Last Updated: 2024-08-07T05:27:54.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in pluck 4.6.2, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the langpref parameter to (1) data/modules/contactform/module_info.php, (2) data/modules/blog/module_info.php, and (3) data/modules/albums/module_info.php, different vectors than CVE-2008-3194. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35007 - http://secunia.com/advisories/35145 - https://w
rogram Container: References: - http://www.securityfocus.com/bid/35007 - http://secunia.com/advisories/35145 - https://www.exploit-db.com/exploits/8715
CVE ID: CVE-2009-1766 State: PUBLISHED Published: 2009-05-22T18:00:00 Last Updated: 2024-08-07T05:27:53.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in LightOpenCMS 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/504101/100/0/threaded - https://www.exploit-db.com/exploits/8724
CVE ID: CVE-2009-1767 State: PUBLISHED Published: 2009-05-22T18:00:00 Last Updated: 2024-08-07T05:27:53.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/edituser.php in 2daybiz Template Monster Clone does not require administrative authentication, which allows remote attackers to modify arbitrary accounts via the (1) loginname, (2) password, (3) email, (4) firstname, or (5) lastname parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34977 - http://secunia.com/advisories/35090 - https://www.exploit-db.com/exploits/8691 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50561
CVE ID: CVE-2009-1768 State: PUBLISHED Published: 2009-05-22T18:00:00 Last Updated: 2024-08-07T05:27:53.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download.php in Rama Zaiten CMS 0.9.8 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50572 - http://secunia.com/advisories/35116 - http://www.vupen.com/english/advisories/2009/1343 - http://osvdb.org/54546 - http://www.securityfocus.com/bid/34995 - https://www.exploit-db.com/exploits/8700
CVE ID: CVE-2009-1769 State: PUBLISHED Published: 2009-05-22T18:00:00 Last Updated: 2024-08-07T05:27:54.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in Open Computer and Software Inventory Next Generation (OCS Inventory NG) 1.01 generates different error messages depending on whether a username is valid, which allows remote attackers to enumerate valid usernames. Additional Analyst Notes: - CVE Program Container: References: - http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=133&cntnt01returnid=69 - http://secunia.com/advisories/35157 - http://secunia.com/advisories/35313 - http://www.securityfocus.com/bid/35023 -
9 - http://secunia.com/advisories/35157 - http://secunia.com/advisories/35313 - http://www.securityfocus.com/bid/35023 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=529344 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00063.html - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00057.html - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00050.html
CVE ID: CVE-2009-1770 State: PUBLISHED Published: 2009-05-22T18:00:00 Last Updated: 2024-08-07T05:27:54.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in includes/database/examples/addressbook.php in Flyspeck CMS 6.8 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8714 - http://www.securityfocus.com/bid/35011 - http://www.vupen.com/english/advisories/2009/1367
CVE ID: CVE-2009-1771 State: PUBLISHED Published: 2009-05-22T18:00:00 Last Updated: 2024-08-07T05:27:54.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in Flyspeck CMS 6.8 does not require administrative authentication for the updateExistingContent action, which allows remote attackers to create or modify admin accounts via the (1) users[fullname], (2) users[email], (3) users[role_id], (4) users[username], and (5) users[password] parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8714 - http://www.securityfocus.com/bid/35011 - http://www.vupen.com/english/advisories/2009/1367
CVE ID: CVE-2009-1772 State: PUBLISHED Published: 2009-05-22T18:00:00Z Last Updated: 2024-09-16T18:28:33.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in activeCollab 2.1 Corporate allows remote attackers to inject arbitrary web script or HTML via the re_route parameter to the login script. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35079 - http://pridels-team.blogspot.com/2009/05/activecollab-xss-and-full-path.html - http://www.securityfocus.com/bid/35022
CVE ID: CVE-2009-1773 State: PUBLISHED Published: 2009-05-22T18:00:00Z Last Updated: 2024-09-16T19:52:34.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: activeCollab 2.1 Corporate allows remote attackers to obtain sensitive information via an invalid re_route parameter to the login script, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35079 - http://pridels-team.blogspot.com/2009/05/activecollab-xss-and-full-path.html - http://www.securityfocus.com/bid/35022
CVE ID: CVE-2009-1774 State: PUBLISHED Published: 2009-05-22T18:00:00 Last Updated: 2024-08-07T05:27:54.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in plugins/ddb/foot.php in Strawberry 1.1.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the file parameter to example/index.php. NOTE: this was originally reported as an issue affecting the do parameter, but traversal with that parameter might depend on a modified example/index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/expl
hird party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8681 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50562 - http://www.securityfocus.com/bid/34971 - http://secunia.com/advisories/28330
CVE ID: CVE-2009-1775 State: PUBLISHED Published: 2009-05-22T20:00:00Z Last Updated: 2024-09-16T19:46:01.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Ulteo Open Virtual Desktop 1.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) admin/applications.php, (2) admin/appsgroup.php, (3) admin/users.php, (4) admin/usersgroup.php, and (5) admin/tasks.php; (6) show parameter to admin/logs.php; and (7) mode parameter to admin/configuration-partial.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - h
se details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.insight-tech.org/index.php?p=Ulteo-Open-Virtual-Desktop-v1-0-multiple-XSS - http://www.ulteo.com/home/en/ovdi/openvirtualdesktop/downloadnow?autolang=en - http://secunia.com/advisories/34923 - http://www.securityfocus.com/bid/34927
CVE ID: CVE-2009-1776 State: PUBLISHED Published: 2009-05-22T20:00:00 Last Updated: 2024-08-07T05:27:54.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via javascript: URIs in the (1) request and (2) return_link_url parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.ush.it/team/ush/hack-formmail_192/adv.txt - http://www.securityfocus.com/archive/1/503446/100/0/threaded - http://www.securityfocus.com/bid/34929 - http://secunia.com/advisories/35068
CVE ID: CVE-2009-1777 State: PUBLISHED Published: 2009-05-22T20:00:00 Last Updated: 2024-08-07T05:27:54.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the redirect parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.ush.it/team/ush/hack-formmail_192/adv.txt - http://www.securityfocus.com/archive/1/503446/100/0/threaded - http://www.securityfocus.com/bid/34929 - http://secunia.com/advisories/35068
CVE ID: CVE-2009-1778 State: PUBLISHED Published: 2009-05-22T20:00:00 Last Updated: 2024-08-07T05:27:54.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the new user registration feature in BigACE CMS 2.5, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.bigace.de/BIGACE-2.6.html - http://www.bigace.de/Security-Fix-for-2.5.html - https://www.exploit-db.com/exploits/8664 - http://www.securityfocus.com/bid/34920 - http://www.securityfocus.com/archive/1/503448/100/0/threaded - http://secunia.com/advisori
securityfocus.com/bid/34920 - http://www.securityfocus.com/archive/1/503448/100/0/threaded - http://secunia.com/advisories/35063
CVE ID: CVE-2009-1779 State: PUBLISHED Published: 2009-05-22T20:00:00 Last Updated: 2024-08-07T05:27:54.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin.php in Frax.dk Php Recommend 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the form_include_template parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1287 - http://www.securityfocus.com/bid/34909 - https://www.exploit-db.com/exploits/8658
CVE ID: CVE-2009-1780 State: PUBLISHED Published: 2009-05-22T20:00:00 Last Updated: 2024-08-07T05:27:54.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin.php in Frax.dk Php Recommend 1.3 and earlier does not require authentication when the user password is changed, which allows remote attackers to gain administrative privileges via modified form_admin_user and form_admin_pass parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1287 - http://www.securityfocus.com/bid/34909 - https://www.exploit-db.com/exploits/8658
CVE ID: CVE-2009-1781 State: PUBLISHED Published: 2009-05-22T20:00:00 Last Updated: 2024-08-07T05:27:54.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in admin.php in Frax.dk Php Recommend 1.3 and earlier allows remote attackers to inject arbitrary PHP code into phpre_config.php via the form_aula parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1287 - http://www.securityfocus.com/bid/34909 - https://www.exploit-db.com/exploits/8658
CVE ID: CVE-2009-1782 State: PUBLISHED Published: 2009-05-22T20:00:00 Last Updated: 2024-08-07T05:27:54.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple F-Secure anti-virus products, including Anti-Virus for Microsoft Exchange 7.10 and earlier; Internet Gatekeeper for Windows 6.61 and earlier, Windows 6.61 and earlier, and Linux 2.16 and earlier; Internet Security 2009 and earlier, Anti-Virus 2009 and earlier, Client Security 8.0 and earlier, and others; allow remote attackers to bypass malware detection via a crafted (1) ZIP and (2) RAR archive. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35008 - http://www.securityt
itional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35008 - http://www.securitytracker.com/id?1022172 - http://www.vupen.com/english/advisories/2009/1262 - http://www.securitytracker.com/id?1022170 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50346 - http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2009-1.html - http://www.securityfocus.com/bid/34849 - http://www.securitytracker.com/id?1022171
CVE ID: CVE-2009-1783 State: PUBLISHED Published: 2009-05-22T20:00:00 Last Updated: 2024-08-07T05:27:54.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple FRISK Software F-Prot anti-virus products, including Antivirus for Exchange, Linux on IBM zSeries, Linux x86 File Servers, Linux x86 Mail Servers, Linux x86 Workstations, Solaris Mail Servers, Antivirus for Windows, and others, allow remote attackers to bypass malware detection via a crafted CAB archive. Additional Analyst Notes: - CVE Program Container: References: - http://blog.zoller.lu/2009/04/advisory-f-prot-frisk-cab-bypass.html - http://www.securityfocus.com/bid/34896 - http://www.securityfocus.com/archive/1/50
visory-f-prot-frisk-cab-bypass.html - http://www.securityfocus.com/bid/34896 - http://www.securityfocus.com/archive/1/503393/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/50427
CVE ID: CVE-2009-1784 State: PUBLISHED Published: 2009-05-22T20:00:00 Last Updated: 2024-08-07T05:27:54.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AVG parsing engine 8.5 323, as used in multiple AVG anti-virus products including Anti-Virus Network Edition, Internet Security Netzwerk Edition, Server Edition für Linux/FreeBSD, Anti-Virus SBS Edition, and others allows remote attackers to bypass malware detection via a crafted (1) RAR and (2) ZIP archive. Additional Analyst Notes: - CVE Program Container: References: - http://blog.zoller.lu/2009/04/avg-zip-evasion-bypass.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/50426 - http://www.securityfocus.com/arc
-zip-evasion-bypass.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/50426 - http://www.securityfocus.com/archive/1/503392/100/0/threaded - http://www.securityfocus.com/bid/34895
CVE ID: CVE-2009-1785 State: PUBLISHED Published: 2009-05-22T20:00:00Z Last Updated: 2024-09-16T17:07:46.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Ulteo Open Virtual Desktop 1.0 allows remote attackers to inject arbitrary web script or HTML via the error parameter to header.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.ulteo.com/home/en/ovdi/openvirtualdesktop/downloadnow?autolang=en - http://secunia.com/advisories/34923
CVE ID: CVE-2009-1786 State: PUBLISHED Published: 2009-05-26T15:16:00 Last Updated: 2024-08-07T05:27:54.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: The malloc subsystem in libc in IBM AIX 5.3 and 6.1 allows local users to create or overwrite arbitrary files via a symlink attack on the log file associated with the MALLOCDEBUG environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://aix.software.ibm.com/aix/efixes/security/libc_advisory.asc - http://www.ibm.com/support/docview.wss?uid=isg1IZ50445 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6276 - http://www.ibm.com/support/docview.wss?uid=isg1