Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
apache.org/viewvc?rev=902650&view=rev - https://exchange.xforce.ibmcloud.com/vulnerabilities/55857 - http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html - https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2009-2903 State: PUBLISHED Published: 2009-09-15T22:00:00 Last Updated: 2024-08-07T06:07:37.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the appletalk subsystem in the Linux kernel 2.4.x through 2.4.37.6 and 2.6.x through 2.6.31, when the appletalk and ipddp modules are loaded but the ipddp"N" device is not found, allows remote attackers to cause a denial of service (memory consumption) via IP-DDP datagrams. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/09/17/11 - http://www.securityfocus.com/bid/36379 - http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html -
- http://www.securityfocus.com/bid/36379 - http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html - http://www.ubuntu.com/usn/USN-852-1 - http://secunia.com/advisories/36707 - https://bugzilla.redhat.com/show_bug.cgi?id=522331 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:329 - http://www.openwall.com/lists/oss-security/2009/09/14/1 - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html - http://secunia.com/advisories/37909 - http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html - http://git.kernel.org/?p=linux/kernel/git/davem/net-next-2.6.git%3Ba=commit%3Bh=ffcfb8db540ff879c2a85bf7e404954281443414 - http://lists
el.org/?p=linux/kernel/git/davem/net-next-2.6.git%3Ba=commit%3Bh=ffcfb8db540ff879c2a85bf7e404954281443414 - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html - http://secunia.com/advisories/37105 - http://www.openwall.com/lists/oss-security/2009/09/14/2
CVE ID: CVE-2009-2904 State: PUBLISHED Published: 2009-10-01T15:00:00 Last Updated: 2024-08-07T06:07:37.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in sshd in OpenSSH 4.3 in Red Hat Enterprise Linux (RHEL) 5.4 and Fedora 11, allows local users to gain privileges via hard links to setuid programs that use configuration files within the chroot directory, related to requirements for directory ownership. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38794 - http://lists.vmware.com/pipermail/security-announce/2010/000082.html - http://www.secur
//secunia.com/advisories/38794 - http://lists.vmware.com/pipermail/security-announce/2010/000082.html - http://www.securityfocus.com/bid/36552 - https://rhn.redhat.com/errata/RHSA-2009-1470.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/038214.html - http://secunia.com/advisories/38834 - http://osvdb.org/58495 - http://secunia.com/advisories/39182 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9862 - https://bugzilla.redhat.com/show_bug.cgi?id=522141 - http://www.vupen.com/english/advisories/2010/0528
CVE ID: CVE-2009-2905 State: PUBLISHED Published: 2009-09-29T19:00:00 Last Updated: 2024-08-07T06:07:37.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in textbox.c in newt 0.51.5, 0.51.6, and 0.52.2 allows local users to cause a denial of service (application crash) or possibly execute arbitrary code via a request to display a crafted text dialog box. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38794 - http://lists.vmware.com/pipermail/security-announce/2010/000082.html - http://www.debian.org/security/2009/dsa-1894 - https://bugzilla.redhat.com/show_bug.cgi?id=523955 - https://rhn.redhat.com/errat
ww.debian.org/security/2009/dsa-1894 - https://bugzilla.redhat.com/show_bug.cgi?id=523955 - https://rhn.redhat.com/errata/RHSA-2009-1463.html - http://support.avaya.com/css/P8/documents/100067251 - http://www.securityfocus.com/bid/36515 - http://security.debian.org/pool/updates/main/n/newt/newt_0.52.2-10+etch1.diff.gz - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8556 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9664 - http://secunia.com/advisories/37922 - http://www.ubuntu.com/usn/USN-837-1 - http://secunia.com/advisories/38833 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://lis
7-1 - http://secunia.com/advisories/38833 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html - http://www.vupen.com/english/advisories/2010/0528
CVE ID: CVE-2009-2906 State: PUBLISHED Published: 2009-10-07T18:00:00 Last Updated: 2024-08-07T06:07:37.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: smbd in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8, and 3.4 before 3.4.2 allows remote authenticated users to cause a denial of service (infinite loop) via an unanticipated oplock break notification reply packet. Additional Analyst Notes: - CVE Program Container: References: - http://samba.org/samba/security/CVE-2009-2906.html - http://news.samba.org/releases/3.4.2/ - http://www.securityfocus.com/archive/1/507856/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3
s.com/archive/1/507856/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9944 - https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00098.html - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://news.samba.org/releases/3.2.15/ - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021111.1-1 - http://osvdb.org/58519 - http://www.vupen.com/english/advisories/2009/2810 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561439 - http://secunia.com/advisories/37428 - http://secunia.com/advisories/36937 - http://www.ubuntu.com/usn/USN-839-1 - htt
- http://secunia.com/advisories/37428 - http://secunia.com/advisories/36937 - http://www.ubuntu.com/usn/USN-839-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53575 - http://support.apple.com/kb/HT4077 - http://www.securityfocus.com/bid/36573 - http://news.samba.org/releases/3.0.37/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7090 - http://secunia.com/advisories/36918 - http://www.securitytracker.com/id?1022976 - http://secunia.com/advisories/36893 - http://news.samba.org/releases/3.3.8/ - http://secunia.com/advisories/36953 - http://wiki.rpath.com/Advisories:rPSA-2009-0145 - http://lists.opensuse.org/opensuse-security-announce/2009-10/
/36953 - http://wiki.rpath.com/Advisories:rPSA-2009-0145 - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html - https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00095.html
CVE ID: CVE-2009-2907 State: PUBLISHED Published: 2010-03-24T18:00:00Z Last Updated: 2024-09-16T19:10:18.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SpringSource tc Server 6.0.20.B and earlier, Application Management Suite (AMS) before 2.0.0.SR4, Hyperic HQ Open Source before 4.2.x, Hyperic HQ 4.0 Enterprise before 4.0.3.2, and Hyperic HQ 4.1 Enterprise before 4.1.2.1 allow remote attackers to inject arbitrary web script or HTML via the description field and unspecified "input fields." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38913 - http://www.springsource.com/
lyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38913 - http://www.springsource.com/security/cve-2009-2907
CVE ID: CVE-2009-2908 State: PUBLISHED Published: 2009-10-13T10:00:00 Last Updated: 2024-08-07T06:07:37.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d_delete function in fs/ecryptfs/inode.c in eCryptfs in the Linux kernel 2.6.31 allows local users to cause a denial of service (kernel OOPS) and possibly execute arbitrary code via unspecified vectors that cause a "negative dentry" and trigger a NULL pointer dereference, as demonstrated via a Mutt temporary directory in an eCryptfs mount. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-852-1 - http://secunia.com/advisories/38794 - http://lists.vmware.com/pipermail/security-an
ttp://www.ubuntu.com/usn/USN-852-1 - http://secunia.com/advisories/38794 - http://lists.vmware.com/pipermail/security-announce/2010/000082.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/53693 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10216 - http://secunia.com/advisories/37075 - http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.31.y.git%3Ba=commit%3Bh=afc2b6932f48f200736d3e36ad66fee0ec733136 - https://bugzilla.redhat.com/show_bug.cgi?id=527534 - https://bugs.launchpad.net/ecryptfs/+bug/387073 - https://rhn.redhat.com/errata/RHSA-2009-1548.html - http://secunia.com/advisories/38834 - https://www.redhat.com/archives/fedora-pa
.redhat.com/errata/RHSA-2009-1548.html - http://secunia.com/advisories/38834 - https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00483.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6992 - http://www.openwall.com/lists/oss-security/2009/10/06/1 - http://www.securityfocus.com/bid/36639 - http://secunia.com/advisories/37105 - http://www.vupen.com/english/advisories/2010/0528
CVE ID: CVE-2009-2909 State: PUBLISHED Published: 2009-10-20T17:00:00 Last Updated: 2024-08-07T06:07:37.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the ax25_setsockopt function in net/ax25/af_ax25.c in the ax25 subsystem in the Linux kernel before 2.6.31.2 allows local users to cause a denial of service (OOPS) via a crafted optlen value in an SO_BINDTODEVICE operation. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=528887 - http://www.ubuntu.com/usn/usn-864-1 - http://secunia.com/advisories/37351 - http://secunia.com/advisories/37075 - http://marc.info/?l=oss-security&m=1254941196179
://secunia.com/advisories/37351 - http://secunia.com/advisories/37075 - http://marc.info/?l=oss-security&m=125494119617994&w=2 - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html - http://article.gmane.org/gmane.linux.kernel/896907 - http://www.securityfocus.com/bid/36635 - https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00483.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.2 - http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=b7058842c940ad2c08dd829b21e5c92ebe3b8758 - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html
CVE ID: CVE-2009-2910 State: PUBLISHED Published: 2009-10-20T17:00:00 Last Updated: 2024-08-07T06:07:37.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the x86_64 platform does not clear certain kernel registers before a return to user mode, which allows local users to read register values from an earlier process by switching an ia32 process to 64-bit mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.4 - http://www.redhat.com/support/errata/RHSA-2009-1671.html - http://git.kernel.org/?p=linux/kernel/git/x86/linux-2.6-tip.git%3Ba=co
w.redhat.com/support/errata/RHSA-2009-1671.html - http://git.kernel.org/?p=linux/kernel/git/x86/linux-2.6-tip.git%3Ba=commit%3Bh=24e35800cdc4350fc34e2bed37b608a9e13ab3b6 - https://rhn.redhat.com/errata/RHSA-2009-1540.html - http://www.ubuntu.com/usn/usn-864-1 - http://secunia.com/advisories/36927 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7359 - http://secunia.com/advisories/37351 - http://secunia.com/advisories/37075 - http://support.avaya.com/css/P8/documents/100073666 - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html - http://www.openwall.co
9-11/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html - http://www.openwall.com/lists/oss-security/2009/10/02/1 - https://bugzilla.redhat.com/show_bug.cgi?id=526788 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10823 - http://www.securityfocus.com/bid/36576 - http://marc.info/?l=oss-security&m=125444390112831&w=2 - http://marc.info/?l=oss-security&m=125511635004768&w=2 - http://marc.info/?l=oss-security&m=125442304214452&w=2 - https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00483.html - https://rhn.redhat.com/errata/RHSA-2010-0095.html - https://rhn.redhat.com/errata/RHSA-2010-0046.ht
ober/msg00483.html - https://rhn.redhat.com/errata/RHSA-2010-0095.html - https://rhn.redhat.com/errata/RHSA-2010-0046.html - http://lkml.org/lkml/2009/10/1/164 - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html
CVE ID: CVE-2009-2911 State: PUBLISHED Published: 2009-10-22T16:00:00 Last Updated: 2024-08-07T06:07:37.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to (1) cause a denial of service or gain privileges via a print operation with a large number of arguments that trigger a kernel stack overflow, (2) cause a denial of service via crafted DWARF expressions that trigger a kernel stack frame overflow, or (3) cause a denial of service (infinite loop) via vectors that trigger creation of large unwind tables, related to Common Information Entry (CIE) and Cal
finite loop) via vectors that trigger creation of large unwind tables, related to Common Information Entry (CIE) and Call Frame Instruction (CFI) records. Additional Analyst Notes: - CVE Program Container: References: - http://sources.redhat.com/bugzilla/show_bug.cgi?id=10750 - https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00793.html - http://gcc.gnu.org/bugzilla/show_bug.cgi?id=41633 - http://www.openwall.com/lists/oss-security/2009/10/21/1 - https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00627.html - https://bugzilla.redhat.com/show_bug.cgi?id=529175 - http://secunia.com/advisories/37167 - http://www.securityfocus.com/bid/36778 - http://ww
at.com/show_bug.cgi?id=529175 - http://secunia.com/advisories/37167 - http://www.securityfocus.com/bid/36778 - http://www.vupen.com/english/advisories/2009/2989
CVE ID: CVE-2009-2912 State: PUBLISHED Published: 2009-08-20T22:00:00 Last Updated: 2024-08-07T06:07:37.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) sendfile and (2) sendfilev functions in Sun Solaris 8 through 10, and OpenSolaris before snv_110, allow local users to cause a denial of service (panic) via vectors related to vnode function calls. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2316 - http://secunia.com/advisories/36400 - http://www.securityfocus.com/bid/36083 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-127721-02-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-25
solve.sun.com/search/document.do?assetkey=1-21-127721-02-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-258588-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020445.1-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5692
CVE ID: CVE-2009-2913 State: PUBLISHED Published: 2009-08-20T22:00:00Z Last Updated: 2024-09-16T22:46:49.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in XZero Community Classifieds 4.97.8 allows remote attackers to inject arbitrary web script or HTML via the URI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35996
CVE ID: CVE-2009-2914 State: PUBLISHED Published: 2009-08-20T22:00:00Z Last Updated: 2024-09-16T17:27:49.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in XZero Community Classifieds 4.97.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the name of an uploaded file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2010
CVE ID: CVE-2009-2915 State: PUBLISHED Published: 2009-08-21T10:00:00Z Last Updated: 2024-09-16T17:03:53.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in 2fly_gift.php in 2FLY Gift Delivery System 6.0 allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a content action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36294 - http://packetstormsecurity.org/0908-exploits/discuz60-sql.txt
CVE ID: CVE-2009-2916 State: PUBLISHED Published: 2009-08-21T10:00:00 Last Updated: 2024-08-07T06:07:37.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the CNS_AddTxt function in logs.dll in 2K Games Vietcong 2 1.10 and earlier might allow remote attackers to execute arbitrary code via format string specifiers in the nickname. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/vietcong2fs-adv.txt - http://osvdb.org/57002 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52422 - http://secunia.com/advisories/36301
CVE ID: CVE-2009-2917 State: PUBLISHED Published: 2009-08-21T10:00:00 Last Updated: 2024-08-07T06:07:37.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in ImTOO MPEG Encoder 3.1.53 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted string in a (1) .cue or (2) .m3u playlist file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52857 - http://www.exploit-db.com/exploits/9382
CVE ID: CVE-2009-2918 State: PUBLISHED Published: 2009-08-21T10:00:00 Last Updated: 2024-08-07T06:07:37.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tgbvpn.sys driver in TheGreenBow IPSec VPN Client 4.61.003 allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted request to the 0x80000034 IOCTL, probably involving an input or output buffer size of 0. Additional Analyst Notes: - CVE Program Container: References: - https://www.evilfingers.com/advisory/Advisory/TheGreenBow_VPN_Client_tgbvpn.sys_DoS.php - http://secunia.com/advisories/36332 - http://www.securityfocus.com/archive/1/505816/100/0/threaded - http://www.vupen.c
http://secunia.com/advisories/36332 - http://www.securityfocus.com/archive/1/505816/100/0/threaded - http://www.vupen.com/english/advisories/2009/2294
CVE ID: CVE-2009-2919 State: PUBLISHED Published: 2009-08-21T10:00:00 Last Updated: 2024-08-07T06:07:37.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Boonex Orca 2.0 and 2.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the topic title field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33545 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48434 - http://securityreason.com/exploitalert/5644
CVE ID: CVE-2009-2920 State: PUBLISHED Published: 2009-08-21T10:00:00 Last Updated: 2024-08-07T06:07:37.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Elvin 1.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) component and (2) priority parameters to buglist.php; and the (3) Username (4) E-mail, (5) Pass, and (6) Confirm pass fields to createaccount.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9342 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51671
CVE ID: CVE-2009-2921 State: PUBLISHED Published: 2009-08-21T10:00:00 Last Updated: 2024-08-07T06:07:37.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in login.php in MOC Designs PHP News 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) newsuser parameter (User field) and (2) newspassword parameter (Password field). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52231 - http://www.exploit-db.com/exploits/9353 - http://www.vupen.com/english/advisories/2009/2161
CVE ID: CVE-2009-2922 State: PUBLISHED Published: 2009-08-21T10:00:00 Last Updated: 2024-08-07T06:07:37.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in pixaria.image.php in Pixaria Gallery 2.0.0 through 2.3.5 allows remote attackers to read arbitrary files via a base64-encoded file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35802 - http://www.exploit-db.com/exploits/9257 - http://www.pixaria.com/news/article/234 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51994
CVE ID: CVE-2009-2923 State: PUBLISHED Published: 2009-08-21T10:00:00 Last Updated: 2024-08-07T06:07:37.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in BitmixSoft PHP-Lance 1.52 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) language parameter to show.php and (2) in parameter to advanced_search.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/57247 - http://osvdb.org/57246 - http://www.exploit-db.com/exploits/9444
CVE ID: CVE-2009-2924 State: PUBLISHED Published: 2009-08-21T10:00:00 Last Updated: 2024-08-07T06:07:37.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Videos Broadcast Yourself 2 allow remote attackers to execute arbitrary SQL commands via the (1) UploadID parameter to videoint.php, and possibly the (2) cat_id parameter to catvideo.php and (3) uid parameter to cviewchannels.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9453
CVE ID: CVE-2009-2925 State: PUBLISHED Published: 2009-08-21T10:00:00 Last Updated: 2024-08-07T06:07:37.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in DJcalendar.cgi in DJCalendar allows remote attackers to read arbitrary files via a .. (dot dot) in the TEMPLATE parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52463 - http://www.exploit-db.com/exploits/9140