Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-2013 State: PUBLISHED Published: 2009-06-09T19:00:00 Last Updated: 2024-08-07T05:36:20.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in bin/aps_browse_sources.php in Frontis 3.9.01.24 allows remote attackers to execute arbitrary SQL commands via the source_class parameter in a browse_classes action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35369 - https://www.exploit-db.com/exploits/8900 - http://www.vupen.com/english/advisories/2009/1531
CVE ID: CVE-2009-2014 State: PUBLISHED Published: 2009-06-09T19:00:00 Last Updated: 2024-08-07T05:36:20.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the ComSchool (com_school) component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the classid parameter in a showclass action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8891 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50988 - http://www.securityfocus.com/bid/35257
CVE ID: CVE-2009-2015 State: PUBLISHED Published: 2009-06-09T19:00:00 Last Updated: 2024-08-07T05:36:20.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in includes/file_includer.php in the Ideal MooFAQ (com_moofaq) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35370 - http://www.vupen.com/english/advisories/2009/1530 - http://www.securityfocus.com/bid/35259 - https://www.exploit-db.com/exploits/8898
CVE ID: CVE-2009-2016 State: PUBLISHED Published: 2009-06-09T19:00:00 Last Updated: 2024-08-07T05:36:20.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in products.php in Virtue Shopping Mall allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8894 - http://secunia.com/advisories/35374 - http://www.vupen.com/english/advisories/2009/1527
CVE ID: CVE-2009-2017 State: PUBLISHED Published: 2009-06-09T19:00:00 Last Updated: 2024-08-07T05:36:20.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in products.php in Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1526 - https://www.exploit-db.com/exploits/8893 - http://secunia.com/advisories/35375
CVE ID: CVE-2009-2018 State: PUBLISHED Published: 2009-06-09T19:00:00 Last Updated: 2024-08-07T05:36:20.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/index.php in Jared Eckersley MyCars, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the authuserid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1523 - http://secunia.com/advisories/35281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50985 - https://www.exploit-db.com/exploits/8886
CVE ID: CVE-2009-2019 State: PUBLISHED Published: 2009-06-09T19:00:00 Last Updated: 2024-08-07T05:36:20.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news_detail.php in Virtue News Manager allows remote attackers to execute arbitrary SQL commands via the nid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1528 - http://secunia.com/advisories/35368 - https://www.exploit-db.com/exploits/8901
CVE ID: CVE-2009-2020 State: PUBLISHED Published: 2009-06-09T19:00:00 Last Updated: 2024-08-07T05:36:20.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in news_detail.php in Virtue News Manager allows remote attackers to inject arbitrary web script or HTML via the nid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1528 - https://www.exploit-db.com/exploits/8901
CVE ID: CVE-2009-2021 State: PUBLISHED Published: 2009-06-09T19:00:00 Last Updated: 2024-08-07T05:36:20.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in Virtue Classifieds allows remote attackers to execute arbitrary SQL commands via the category parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1525 - http://secunia.com/advisories/35376 - https://www.exploit-db.com/exploits/8892
CVE ID: CVE-2009-2022 State: PUBLISHED Published: 2009-06-09T19:00:00 Last Updated: 2024-08-07T05:36:20.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: fipsCMS Light 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file and obtain sensitive information via a direct request for _fipsdb/db.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8890 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50987
CVE ID: CVE-2009-2023 State: PUBLISHED Published: 2009-06-09T19:00:00 Last Updated: 2024-08-07T05:36:20.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Shop-Script Pro 2.12, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the current_currency parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8906 - http://www.vupen.com/english/advisories/2009/1533 - http://secunia.com/advisories/33634
CVE ID: CVE-2009-2024 State: PUBLISHED Published: 2009-06-09T19:00:00 Last Updated: 2024-08-07T05:36:20.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vlad Titarenko ASP VT Auth 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file and obtain usernames and passwords via a direct request for zHk8dEes3.txt. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50986 - https://www.exploit-db.com/exploits/8889
CVE ID: CVE-2009-2025 State: PUBLISHED Published: 2009-06-09T19:00:00 Last Updated: 2024-08-07T05:36:20.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/login.php in DM FileManager 3.9.2 allows remote attackers to bypass authentication and gain administrative access by setting the (1) USER, (2) GROUPID, (3) GROUP, and (4) USERID cookies to certain values. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35167 - http://www.vupen.com/english/advisories/2009/1532 - https://www.exploit-db.com/exploits/8903
CVE ID: CVE-2009-2026 State: PUBLISHED Published: 2009-08-10T18:00:00 Last Updated: 2024-08-07T05:36:20.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in a token searching function in the dtscore library in Data Transport Services in CA Software Delivery r11.2 C1, C2, C3, and SP4; Unicenter Software Delivery 4.0 C3; CA Advantage Data Transport 3.0 C1; and CA IT Client Manager r12 allows remote attackers to execute arbitrary code via crafted data. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2195 - http://www.zerodayinitiative.com/advisories/ZDI-09-052/ - http://secunia.com/advisories
m/english/advisories/2009/2195 - http://www.zerodayinitiative.com/advisories/ZDI-09-052/ - http://secunia.com/advisories/36142 - http://www.securityfocus.com/archive/1/505557/100/0/threaded - http://securitytracker.com/id?1022688 - http://www.securityfocus.com/bid/35984 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52322 - http://osvdb.org/56834 - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214090
CVE ID: CVE-2009-2027 State: PUBLISHED Published: 2009-06-10T19:00:00 Last Updated: 2024-08-07T05:36:20.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Installer in Apple Safari before 4.0 on Windows allows local users to gain privileges by checking a box that specifies an immediate launch of the application after installation, related to an unspecified compression method. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35339 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51290 - http://support.apple.com/kb/HT3613
CVE ID: CVE-2009-2028 State: PUBLISHED Published: 2009-06-11T15:00:00 Last Updated: 2024-08-07T05:36:20.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 have unknown impact and attack vectors, related to "Adobe internally discovered issues." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51126 - http://secunia.com/advisories/35734 - http://www.redhat.com/support/errata/RHSA-2009-1109.html - http://www.adobe.com/support/security/bulletins/
ries/35734 - http://www.redhat.com/support/errata/RHSA-2009-1109.html - http://www.adobe.com/support/security/bulletins/apsb09-07.html - http://security.gentoo.org/glsa/glsa-200907-06.xml - http://secunia.com/advisories/35496
CVE ID: CVE-2009-2029 State: PUBLISHED Published: 2009-06-11T15:00:00 Last Updated: 2024-08-07T05:36:20.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in rpc.nisd in Sun Solaris 8 through 10, and OpenSolaris before snv_104, allows remote authenticated users to cause a denial of service (NIS+ daemon hang) via unspecified vectors related to NIS+ callbacks. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-256748-1 - http://www.vupen.com/english/advisories/2009/1566 - http://www.securityfocus.com/bid/35276 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-112960-67-1 - htt
66 - http://www.securityfocus.com/bid/35276 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-112960-67-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6331
CVE ID: CVE-2009-2030 State: PUBLISHED Published: 2009-06-11T21:00:00 Last Updated: 2024-08-07T05:36:20.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the XML Digital Signature verification functionality in JVA-RUN in JDK 6.0 in IBM OS/400 i5/OS V5R4M0 and V6R1M0 has unknown impact and attack vectors related to "XML SECURITY PATCH." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35356 - http://www.attrition.org/pipermail/vim/2009-June/002190.html - http://www.securityfocus.com/bid/35265 - http://www-01.ibm.com/support/docview.wss?uid=nas2e858199605d67111862575cc003c7276 - http://www.vupen.com/englis
35265 - http://www-01.ibm.com/support/docview.wss?uid=nas2e858199605d67111862575cc003c7276 - http://www.vupen.com/english/advisories/2009/1536 - http://www-01.ibm.com/support/docview.wss?uid=nas2741c96b7c573b81a862575cc003c726e - https://exchange.xforce.ibmcloud.com/vulnerabilities/51005
CVE ID: CVE-2009-2031 State: PUBLISHED Published: 2009-06-11T21:00:00 Last Updated: 2024-08-07T05:36:20.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: smbfs in Sun OpenSolaris snv_84 through snv_110, when default mount permissions are used, allows local users to read arbitrary files, and list arbitrary directories, on CIFS volumes. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-257548-1 - http://www.vupen.com/english/advisories/2009/1569 - http://www.securityfocus.com/bid/35306
CVE ID: CVE-2009-2032 State: PUBLISHED Published: 2009-06-12T17:28:00 Last Updated: 2024-08-07T05:36:20.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.asp in PDshopPro, when downloaded before 20070308, allows remote attackers to inject arbitrary web script or HTML via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/55020 - http://secunia.com/advisories/34200 - http://packetstorm.linuxsecurity.com/0906-exploits/pdshoppro-xss.txt
CVE ID: CVE-2009-2033 State: PUBLISHED Published: 2009-06-12T17:28:00 Last Updated: 2024-08-07T05:36:20.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Yogurt 0.3 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8932 - http://www.securityfocus.com/bid/35324 - http://osvdb.org/55097
CVE ID: CVE-2009-2034 State: PUBLISHED Published: 2009-06-12T17:28:00 Last Updated: 2024-08-07T05:36:20.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in writemessage.php in Yogurt 0.3, when register_globals is enabled, allows remote authenticated users to execute arbitrary SQL commands via the original parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/55098 - https://www.exploit-db.com/exploits/8932 - http://www.securityfocus.com/bid/35324
CVE ID: CVE-2009-2035 State: PUBLISHED Published: 2009-06-12T17:28:00Z Last Updated: 2024-09-16T19:09:31.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Services 6.x before 6.x-0.14, a module for Drupal, when key-based access is enabled, allows remote attackers to read or add keys and access unauthorized services via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54999 - http://drupal.org/node/488004 - http://drupal.org/node/487784 - http://secunia.com/advisories/33371 - http://www.securityfocus.com/bid/35292
CVE ID: CVE-2009-2036 State: PUBLISHED Published: 2009-06-12T17:28:00 Last Updated: 2024-08-07T05:36:20.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Open Biller 0.1 allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/55103 - http://www.securityfocus.com/archive/1/504231/100/0/threaded - https://www.exploit-db.com/exploits/8927
CVE ID: CVE-2009-2037 State: PUBLISHED Published: 2009-06-12T17:28:00 Last Updated: 2024-08-07T05:36:20.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Online Grades & Attendance 3.2.5 and earlier, and possibly 3.2.6, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) GLOBALS[SKIN] parameter to index.php and the (2) skin parameter to admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50901 - https://www.exploit-db.com/exploits/8853 - https://exchange.xforce.ibmcloud.
xforce.ibmcloud.com/vulnerabilities/50901 - https://www.exploit-db.com/exploits/8853 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50902
CVE ID: CVE-2009-2038 State: PUBLISHED Published: 2009-06-12T17:28:00 Last Updated: 2024-08-07T05:36:21.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Finnish Bank Payment module 2.2 for osCommerce has unknown impact and attack vectors related to bank charges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51007 - http://secunia.com/advisories/35385 - http://www.cert.fi/haavoittuvuudet/2009/haavoittuvuus-2009-046.html - http://addons.oscommerce.com/info/5485
CVE ID: CVE-2009-2039 State: PUBLISHED Published: 2009-06-12T17:28:00 Last Updated: 2024-08-07T05:36:20.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Luottokunta module before 1.3 for osCommerce has unknown impact and attack vectors related to orders. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50925 - http://addons.oscommerce.com/info/3698 - http://www.securityfocus.com/bid/35191 - http://www.cert.fi/haavoittuvuudet/2009/haavoittuvuus-2009-046.html - http://secunia.com/advisories/35291
CVE ID: CVE-2009-2040 State: PUBLISHED Published: 2009-06-12T17:28:00 Last Updated: 2024-08-07T05:36:20.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/options.php in Grestul 1.2 does not properly restrict access, which allows remote attackers to bypass authentication and create administrative accounts via a manage_admin action in a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35367 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50999 - https://www.exploit-db.com/exploits/8902
CVE ID: CVE-2009-2041 State: PUBLISHED Published: 2009-06-12T20:07:00 Last Updated: 2024-08-07T05:36:20.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in A51 D.O.O. activeCollab 0.7.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1772. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN55752635/index.html - http://osvdb.org/55099 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51190
CVE ID: CVE-2009-2042 State: PUBLISHED Published: 2009-06-12T20:07:00 Last Updated: 2024-08-07T05:36:20.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: libpng before 1.2.37 does not properly parse 1-bit interlaced images with width values that are not divisible by 8, which causes libpng to include uninitialized bits in certain rows of a PNG file and might allow remote attackers to read portions of sensitive memory via "out-of-bounds pixels" in the file. Additional Analyst Notes: - CVE Program Container: References: - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.551809 - http://www.vupen.com/english/advisories/2010/0682 - http://sec
l=slackware-security&y=2009&m=slackware-security.551809 - http://www.vupen.com/english/advisories/2010/0682 - http://secunia.com/advisories/39206 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:063 - http://lists.vmware.com/pipermail/security-announce/2010/000090.html - http://secunia.com/advisories/39251 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50966 - http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html - http://secunia.com/advisories/35346 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://ubuntu.com/usn/usn-913-1 - http://www.debian.org/security/2010/dsa-2032 - http://www.libpng.org/pub/png/libpng.html - http://sec
om/usn/usn-913-1 - http://www.debian.org/security/2010/dsa-2032 - http://www.libpng.org/pub/png/libpng.html - http://secunia.com/advisories/35524 - http://www.securityfocus.com/bid/35233 - http://www.vmware.com/security/advisories/VMSA-2010-0007.html - http://support.apple.com/kb/HT4077 - http://www.vupen.com/english/advisories/2010/0637 - http://www.vupen.com/english/advisories/2009/1510 - http://secunia.com/advisories/35594 - http://secunia.com/advisories/39215 - http://secunia.com/advisories/35470 - http://security.gentoo.org/glsa/glsa-200906-01.xml - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00218.html - https://www.redhat.com/archives/fedora-package-announce/2
com/archives/fedora-package-announce/2009-June/msg00218.html - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00630.html - http://www.vupen.com/english/advisories/2010/0847 - http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html
CVE ID: CVE-2009-2043 State: PUBLISHED Published: 2009-06-12T21:07:00 Last Updated: 2024-08-07T05:36:20.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: nsViewManager.cpp in Mozilla Firefox 3.0.2 through 3.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to interaction with TinyMCE. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=488570 - http://www.securityfocus.com/bid/35413 - https://bugzilla.mozilla.org/show_bug.cgi?id=490425 - https://rhn.redhat.com/errata/RHSA-2009-1095.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/51197
CVE ID: CVE-2009-2044 State: PUBLISHED Published: 2009-06-12T21:07:00 Last Updated: 2024-08-07T05:36:20.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 3.0.10 and earlier on Linux allows remote attackers to cause a denial of service (application crash) via a URI for a large GIF image in the BACKGROUND attribute of a BODY element. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/504214 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51037 - https://bugzilla.mozilla.org/show_bug.cgi?id=496265 - http://www.securityfocus.com/bid/35280 - http://e-rdc.org/v1/news.php?readmore=137
CVE ID: CVE-2009-2045 State: PUBLISHED Published: 2009-06-24T22:00:00 Last Updated: 2024-08-07T05:36:20.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco Video Surveillance Stream Manager firmware before 5.3, as used on Cisco Video Surveillance Services Platforms and Video Surveillance Integrated Services Platforms, allows remote attackers to cause a denial of service (reboot) via a malformed payload in a UDP packet to port 37000, related to the xvcrman process, aka Bug ID CSCsj47924. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080ad1002.html - http://www.securitytracke
ttp://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080ad1002.html - http://www.securitytracker.com/id?1022446 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080ad0f8f.shtml
CVE ID: CVE-2009-2046 State: PUBLISHED Published: 2009-06-24T22:00:00 Last Updated: 2024-08-07T05:36:20.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: The embedded web server on the Cisco Video Surveillance 2500 Series IP Camera with firmware before 2.1 allows remote attackers to read arbitrary files via a (1) http or (2) https request, related to the (a) SD Camera Web Server and the (b) Wireless Camera HTTP Server, aka Bug IDs CSCsu05515 and CSCsr96497. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080ad1002.html - http://www.cisco.com/en/US/products/products_security_advisory0
ducts_applied_mitigation_bulletin09186a0080ad1002.html - http://www.cisco.com/en/US/products/products_security_advisory09186a0080ad0f8f.shtml - http://www.securitytracker.com/id?1022445 - http://www.securityfocus.com/bid/35478