Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ml - http://secunia.com/advisories/34418 - http://secunia.com/advisories/34729 - http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0050 - https://issues.rpath.com/browse/RPL-2991 - https://bugzilla.redhat.com/show_bug.cgi?id=487744 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:095 - http://www.vupen.com/english/advisories/2009/0816 - http://secunia.com/advisories/34469 - http://secunia.com/advisories/35569 - http://www.vupen.com/english/advisories/2009/1708 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49327 - http://www.securityfocus.com/bid/34184 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:096 - http://secunia.com/advisories/35559 - http://secunia.c
http://www.mandriva.com/security/advisories?name=MDVSA-2009:096 - http://secunia.com/advisories/35559 - http://secunia.com/advisories/34373 - http://secunia.com/advisories/34398 - https://usn.ubuntu.com/757-1/ - http://bugs.gentoo.org/show_bug.cgi?id=261087 - http://www.redhat.com/support/errata/RHSA-2009-0345.html - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00770.html - http://www.vupen.com/english/advisories/2009/0777 - http://www.securityfocus.com/archive/1/501994/100/0/threaded - http://www.ubuntu.com/usn/USN-743-1
CVE ID: CVE-2009-0585 State: PUBLISHED Published: 2009-03-14T18:00:00 Last Updated: 2024-08-07T04:40:05.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the soup_base64_encode function in soup-misc.c in libsoup 2.x.x before 2.2.x, and 2.x before 2.24, allows context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2009-0344.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9599 - http://support.avaya.com/elmodocs2/security/ASA-2009-088.htm - http://
h/definition/oval%3Aorg.mitre.oval%3Adef%3A9599 - http://support.avaya.com/elmodocs2/security/ASA-2009-088.htm - http://www.mandriva.com/security/advisories?name=MDVSA-2009:081 - http://openwall.com/lists/oss-security/2009/03/12/2 - http://www.securityfocus.com/bid/34100 - http://secunia.com/advisories/35065 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49273 - http://secunia.com/advisories/34310 - http://www.securityfocus.com/archive/1/501712/100/0/threaded - http://www.debian.org/security/2009/dsa-1748 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html - http://secunia.com/advisories/34401 - http://ocert.org/patches/2008-015/libsoup-CVE-2009-0585.diff - h
5/msg00000.html - http://secunia.com/advisories/34401 - http://ocert.org/patches/2008-015/libsoup-CVE-2009-0585.diff - http://www.ubuntu.com/usn/USN-737-1 - http://secunia.com/advisories/34337 - http://www.ocert.org/advisories/ocert-2008-015.html
CVE ID: CVE-2009-0586 State: PUBLISHED Published: 2009-03-14T18:00:00 Last Updated: 2024-08-07T04:40:04.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the gst_vorbis_tag_add_coverart function (gst-libs/gst/tag/gstvorbistag.c) in vorbistag in gst-plugins-base (aka gstreamer-plugins-base) before 0.10.23 in GStreamer allows context-dependent attackers to execute arbitrary code via a crafted COVERART tag that is converted from a base64 representation, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9694 - http://
ner: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9694 - http://secunia.com/advisories/34335 - http://secunia.com/advisories/35777 - http://secunia.com/advisories/34350 - http://security.gentoo.org/glsa/glsa-200907-11.xml - http://cgit.freedesktop.org/gstreamer/gst-plugins-base/commit/?id=566583e87147f774e7fc4c78b5f7e61d427e40a9 - http://openwall.com/lists/oss-security/2009/03/12/2 - http://www.securityfocus.com/bid/34100 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:085 - http://www.securityfocus.com/archive/1/501712/100/0/threaded - http://ocert.org/patches/2008-015/gst-plugins-base-CVE-2009-0586.diff - http://lists.op
rchive/1/501712/100/0/threaded - http://ocert.org/patches/2008-015/gst-plugins-base-CVE-2009-0586.diff - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html - http://www.ubuntu.com/usn/USN-735-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49274 - http://www.ocert.org/advisories/ocert-2008-015.html
CVE ID: CVE-2009-0587 State: PUBLISHED Published: 2009-03-14T18:00:00 Last Updated: 2024-08-07T04:40:05.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in Evolution Data Server (aka evolution-data-server) before 2.24.5 allow context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation in (1) addressbook/libebook/e-vcard.c in evc or (2) camel/camel-mime-utils.c in libcamel. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35357 - http://osvdb.org/52703 - http://www.ubuntu.com/usn/USN-733-1 - https://oval.cisecurity.org/repository/search/definition/ov
tp://osvdb.org/52703 - http://www.ubuntu.com/usn/USN-733-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11385 - http://secunia.com/advisories/34339 - http://www.redhat.com/support/errata/RHSA-2009-0358.html - http://secunia.com/advisories/34348 - http://openwall.com/lists/oss-security/2009/03/12/2 - http://www.securityfocus.com/bid/34100 - http://secunia.com/advisories/34351 - http://www.redhat.com/support/errata/RHSA-2009-0355.html - http://www.securityfocus.com/archive/1/501712/100/0/threaded - http://www.debian.org/security/2009/dsa-1813 - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html - http://osvdb.org/52702 - http:
9/dsa-1813 - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html - http://osvdb.org/52702 - http://www.redhat.com/support/errata/RHSA-2009-0354.html - http://secunia.com/advisories/34338 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:078 - http://ocert.org/patches/2008-015/camel-CVE-2009-0587.diff - http://ocert.org/patches/2008-015/evc-CVE-2009-0587.diff - http://www.ocert.org/advisories/ocert-2008-015.html
CVE ID: CVE-2009-0588 State: PUBLISHED Published: 2009-05-27T16:00:00 Last Updated: 2024-08-07T04:40:05.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: agent/request/op.cgi in the Registration Authority (RA) component in Red Hat Certificate System (RHCS) 7.3 and Dogtag Certificate System allows remote authenticated users to approve certificate requests queued for arbitrary agent groups via a modified request ID field. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=488706 - http://secunia.com/advisories/35263 - http://www.securitytracker.com/id?1022278 - http://www.securityfocus.com/bid/35104 - https://bugzilla.redh
ories/35263 - http://www.securitytracker.com/id?1022278 - http://www.securityfocus.com/bid/35104 - https://bugzilla.redhat.com/show_bug.cgi?id=484828 - http://www.redhat.com/support/errata/RHSA-2009-1065.html - http://secunia.com/advisories/35242
CVE ID: CVE-2009-0589 State: REJECTED Published: 2009-03-26T10:00:00Z Last Updated: 2024-09-17T01:16:04.171Z Description: No description available.
CVE ID: CVE-2009-0590 State: PUBLISHED Published: 2009-03-27T16:00:00 Last Updated: 2024-08-07T04:40:04.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=124464882609472&w=2 - http://www.vupen.com/english/advisories/2009/0850 - http://securitytracker.com/id?1021905 - http://secunia.com/advisories/34896 - http://www.mandriva
advisories/2009/0850 - http://securitytracker.com/id?1021905 - http://secunia.com/advisories/34896 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:087 - http://www.vupen.com/english/advisories/2009/1175 - http://secunia.com/advisories/42724 - http://www.securityfocus.com/archive/1/502429/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html - http://wiki.rpath.com/Advisories:rPSA-2009-0057 - http://www.debian.org/security/2009/dsa-1763 - http://secunia.com/advisories/38794 - http://lists.vmware.com/pipermail/security-announce/2010/000082.html - http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847 - http://secunia.c
nce/2010/000082.html - http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847 - http://secunia.com/advisories/34960 - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html - http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0057 - http://secunia.com/advisories/34666 - http://www.ubuntu.com/usn/usn-750-1 - http://security.FreeBSD.org/advisories/FreeBSD-SA-09:08.openssl.asc - http://marc.info/?l=bugtraq&m=124464882609472&w=2 - http://www.vupen.com/english/advisories/2009/1020 - http://secunia.com/advisories/35729 - http://www.redhat.com/support/errata/RHSA-2009-1335.html - http://www.osvdb.org/52864 - http://secunia.com/advisories/34561 - http://secun
com/support/errata/RHSA-2009-1335.html - http://www.osvdb.org/52864 - http://secunia.com/advisories/34561 - http://secunia.com/advisories/35380 - http://marc.info/?l=bugtraq&m=127678688104458&w=2 - http://secunia.com/advisories/42467 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html - http://secunia.com/advisories/35065 - https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10198 - http://secunia.com/advisories/36533 - http://www.php.net/archive/2009.php#id2009-04-08-1 - http://secunia.com/advisories/34411 - ftp://ftp.netbsd.org/pub/NetBSD/security/advi
et/archive/2009.php#id2009-04-08-1 - http://secunia.com/advisories/34411 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc - http://www.securityfocus.com/archive/1/515055/100/0/threaded - http://secunia.com/advisories/34509 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49431 - http://secunia.com/advisories/35181 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-258048-1 - http://secunia.com/advisories/38834 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6996 - https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/
rch/definition/oval%3Aorg.mitre.oval%3Adef%3A6996 - https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html - http://www.vupen.com/english/advisories/2010/3126 - http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html - http://support.apple.com/kb/HT3865 - http://www.vupen.com/english/advisories/2009/1220 - http://www.openssl.org/news/secadv_20090325.txt - http://www.vupen.com/english/advisories/2009/1548 - http://secunia.com/advisories/36701 - http://support.avaya.com/elmodocs2/security/ASA-2009-172.htm - http://www.vmware.com/security/advisories/VMSA-2010-0019.html - http://marc.info/?l=bugtraq&m=125017764422557&w=2 - https://kb.bluecoat.com/index?page=content&i
s/VMSA-2010-0019.html - http://marc.info/?l=bugtraq&m=125017764422557&w=2 - https://kb.bluecoat.com/index?page=content&id=SA50 - http://secunia.com/advisories/34460 - http://marc.info/?l=bugtraq&m=125017764422557&w=2 - http://www.securityfocus.com/bid/34256 - http://secunia.com/advisories/42733 - http://www.vupen.com/english/advisories/2010/0528
CVE ID: CVE-2009-0591 State: PUBLISHED Published: 2009-03-27T16:00:00 Last Updated: 2024-08-07T04:40:05.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CMS_verify function in OpenSSL 0.9.8h through 0.9.8j, when CMS is enabled, does not properly handle errors associated with malformed signed attributes, which allows remote attackers to repudiate a signature that originally appeared to be valid but was actually invalid. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=124464882609472&w=2 - http://www.vupen.com/english/advisories/2009/0850 - http://www.vupen.com/english/advisories/2009/1175 - http://secunia.com/advisories/42724 -
english/advisories/2009/0850 - http://www.vupen.com/english/advisories/2009/1175 - http://secunia.com/advisories/42724 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49432 - http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847 - http://secunia.com/advisories/34666 - http://marc.info/?l=bugtraq&m=124464882609472&w=2 - http://www.vupen.com/english/advisories/2009/1020 - http://secunia.com/advisories/35729 - http://secunia.com/advisories/35380 - http://marc.info/?l=bugtraq&m=127678688104458&w=2 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html - http://secunia.com/advisories/35065 - http://www.php.net/archive/2009.php#id2009-04-08-1 - h
ce/2009/Sep/msg00004.html - http://secunia.com/advisories/35065 - http://www.php.net/archive/2009.php#id2009-04-08-1 - http://secunia.com/advisories/34411 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc - http://www.osvdb.org/52865 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html - http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html - http://support.apple.com/kb/HT3865 - http://www.openssl.org/news/secadv_20090325.txt - http://www.vupen.com/english/advisories/2009/1548 - http://secunia.com/advisories/36701 - https://kb.bluecoat.com/index?page=content&id=SA50 - http://secunia.com/advisories/34460 - http://www.securityfocus.co
- https://kb.bluecoat.com/index?page=content&id=SA50 - http://secunia.com/advisories/34460 - http://www.securityfocus.com/bid/34256 - http://securitytracker.com/id?1021907 - http://secunia.com/advisories/42733
CVE ID: CVE-2009-0592 State: PUBLISHED Published: 2009-02-16T17:00:00 Last Updated: 2024-08-07T04:40:05.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in PNphpBB2 1.2i and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the ModName parameter to (1) admin_words.php, (2) admin_groups_reapir.php, (3) admin_smilies.php, (4) admin_ranks.php, (5) admin_styles.php, and (6) admin_users.php in admin/. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33365 - http://www.securityfocus.com/bid/33103 - https://www.exploit-db.com/exploits/7658
CVE ID: CVE-2009-0593 State: PUBLISHED Published: 2009-02-16T17:00:00 Last Updated: 2024-08-07T04:40:05.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in members.php in plx Auto Reminder 3.7 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a newar action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7663 - http://www.securityfocus.com/bid/33106 - http://secunia.com/advisories/33283
CVE ID: CVE-2009-0594 State: PUBLISHED Published: 2009-02-16T17:00:00 Last Updated: 2024-08-07T04:40:04.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in phpSkelSite 1.4 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33092 - https://www.exploit-db.com/exploits/7648 - http://secunia.com/advisories/33382
CVE ID: CVE-2009-0595 State: PUBLISHED Published: 2009-02-16T17:00:00 Last Updated: 2024-08-07T04:40:05.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in skysilver/login.tpl.php in phpSkelSite 1.4, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33092 - https://www.exploit-db.com/exploits/7648 - http://secunia.com/advisories/33382
CVE ID: CVE-2009-0596 State: PUBLISHED Published: 2009-02-16T17:00:00 Last Updated: 2024-08-07T04:40:05.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in skysilver/login.tpl.php in phpSkelSite 1.4, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the TplSuffix parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33092 - https://www.exploit-db.com/exploits/7648 - http://secunia.com/advisories/33382
CVE ID: CVE-2009-0597 State: PUBLISHED Published: 2009-02-16T17:00:00 Last Updated: 2024-08-07T04:40:05.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/index.php in w3b>cms (aka w3blabor CMS) before 3.4.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the benutzername parameter (aka Username field) in a login action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33364 - http://www.securityfocus.com/bid/33082 - http://forum.w3bcms.de/viewtopic.php?f=5&t=256 - http://osvdb.org/51108 - https://www.exploit-db.com/exploits/7640
CVE ID: CVE-2009-0598 State: PUBLISHED Published: 2009-02-16T17:00:00 Last Updated: 2024-08-07T04:40:05.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in PhpMesFilms 1.0 and 1.8 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33332 - https://www.exploit-db.com/exploits/7660 - http://www.securityfocus.com/bid/33105
CVE ID: CVE-2009-0599 State: PUBLISHED Published: 2009-02-16T20:00:00 Last Updated: 2024-08-07T04:40:05.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in wiretap/netscreen.c in Wireshark 0.99.7 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed NetScreen snoop file. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm - http://secunia.com/advisories/34344 - http://secunia.com/advisories/33872 - http://www.securityfocus.com/archive/1/501763/100/0/threaded - http://secunia.com/advisories/34144 - http://www.securityfocus.com/
.securityfocus.com/archive/1/501763/100/0/threaded - http://secunia.com/advisories/34144 - http://www.securityfocus.com/bid/33690 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9677 - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html - http://www.securitytracker.com/id?1021697 - https://issues.rpath.com/browse/RPL-2984 - http://osvdb.org/51815 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00652.html - https://bugs.wireshark.org/bugzilla/attachment.cgi?id=2590 - http://wiki.rpath.com/Advisories:rPSA-2009-0040 - http://www.redhat.com/support/errata/RHSA-2009-0313.html - http://www.vupen.com/english/adv
/Advisories:rPSA-2009-0040 - http://www.redhat.com/support/errata/RHSA-2009-0313.html - http://www.vupen.com/english/advisories/2009/0370 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14732 - http://www.wireshark.org/security/wnpa-sec-2009-01.html - http://secunia.com/advisories/34264
CVE ID: CVE-2009-0600 State: PUBLISHED Published: 2009-02-16T20:00:00 Last Updated: 2024-08-07T04:40:04.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wireshark 0.99.6 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted Tektronix K12 text capture file, as demonstrated by a file with exactly one frame. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2009-082.htm - http://secunia.com/advisories/34344 - http://secunia.com/advisories/33872 - http://www.securityfocus.com/archive/1/501763/100/0/threaded - http://secunia.com/advisories/34144 - https://oval
3872 - http://www.securityfocus.com/archive/1/501763/100/0/threaded - http://secunia.com/advisories/34144 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15041 - http://www.securityfocus.com/bid/33690 - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html - http://www.securitytracker.com/id?1021697 - https://issues.rpath.com/browse/RPL-2984 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00652.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10853 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1937 - http://wiki.rpath.com/Advisories:rPSA-2009-0040 - http:
853 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1937 - http://wiki.rpath.com/Advisories:rPSA-2009-0040 - http://www.redhat.com/support/errata/RHSA-2009-0313.html - http://www.vupen.com/english/advisories/2009/0370 - http://www.wireshark.org/security/wnpa-sec-2009-01.html - http://secunia.com/advisories/34264
CVE ID: CVE-2009-0601 State: PUBLISHED Published: 2009-02-16T20:00:00 Last Updated: 2024-08-07T04:40:05.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms allows local users to cause a denial of service (application crash) via format string specifiers in the HOME environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/501763/100/0/threaded - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3150 - http://www.securityfocus.com/bid/33690 - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html - http://ww
www.securityfocus.com/bid/33690 - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html - http://www.securitytracker.com/id?1021697 - https://issues.rpath.com/browse/RPL-2984 - http://wiki.rpath.com/Advisories:rPSA-2009-0040 - http://www.vupen.com/english/advisories/2009/0370 - http://www.wireshark.org/security/wnpa-sec-2009-01.html - http://secunia.com/advisories/34264
CVE ID: CVE-2009-0602 State: PUBLISHED Published: 2009-02-16T20:00:00 Last Updated: 2024-08-07T04:40:04.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in upload.php in WikkiTikkiTavi 1.11 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in img/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33647 - https://www.exploit-db.com/exploits/7998 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48571
CVE ID: CVE-2009-0603 State: PUBLISHED Published: 2009-02-16T20:00:00 Last Updated: 2024-08-07T04:40:04.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in the Link module 5.x-2.5 for Drupal 5.10 allows remote authenticated users, with "administer content types" privileges, to inject arbitrary web script or HTML via the description parameter (aka the Help field). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/51780 - http://secunia.com/advisories/33835 - http://www.securityfocus.com/bid/33642 - http://archives.neohapsis