Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-2198 State: PUBLISHED Published: 2009-08-04T16:13:00 Last Updated: 2024-08-07T05:44:55.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple GarageBand before 5.1 reconfigures Safari to accept all cookies regardless of domain name, which makes it easier for remote web servers to track users. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52248 - http://support.apple.com/kb/HT3732 - http://osvdb.org/56738 - http://www.securityfocus.com/bid/35926 - http://www.vupen.com/english/advisories/2009/2141 - http://www.securitytracker.com/id?1022649 - http://secunia.com/advisories/36114 - http://list
ish/advisories/2009/2141 - http://www.securitytracker.com/id?1022649 - http://secunia.com/advisories/36114 - http://lists.apple.com/archives/security-announce/2009/Aug/msg00000.html
CVE ID: CVE-2009-2199 State: PUBLISHED Published: 2009-08-12T19:00:00 Last Updated: 2024-08-07T05:44:55.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in WebKit in Apple Safari before 4.0.3, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to spoof domain names in URLs, and possibly conduct phishing attacks, via unspecified homoglyphs. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html - http://www.vupen.com/english/advisories/2011/0212 - http://lists
com/archives/security-announce/2009/Aug/msg00002.html - http://www.vupen.com/english/advisories/2011/0212 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://www.securitytracker.com/id?1022719 - http://www.securityfocus.com/bid/36026 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html - http://secunia.com/advisories/36677 - http://support.apple.com/kb/HT3860 - http://support.apple.com/kb/HT3733
CVE ID: CVE-2009-2200 State: PUBLISHED Published: 2009-08-12T19:00:00 Last Updated: 2024-08-07T05:44:55.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari before 4.0.3 does not properly restrict the URL scheme of the pluginspage attribute of an EMBED element, which allows user-assisted remote attackers to launch arbitrary file: URLs and obtain sensitive information via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html - http://www.vupen.com/english/advisories/2011/0212 - http://www.securitytracker.com/id?102
ounce/2009/Aug/msg00002.html - http://www.vupen.com/english/advisories/2011/0212 - http://www.securitytracker.com/id?1022720 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://www.securityfocus.com/bid/36024 - http://support.apple.com/kb/HT3733
CVE ID: CVE-2009-2201 State: PUBLISHED Published: 2009-09-15T22:00:00 Last Updated: 2024-08-07T05:44:55.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: The screensharing feature in the Admin application in Apple Xsan before 2.2 places a cleartext username and password in a URL within an error dialog, which allows physically proximate attackers to obtain credentials by reading this dialog. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53232 - http://www.securityfocus.com/bid/36385 - http://osvdb.org/58133 - http://www.vupen.com/english/advisories/2009/2644 - http://www.securitytracker.com/id?1022904 - http
//osvdb.org/58133 - http://www.vupen.com/english/advisories/2009/2644 - http://www.securitytracker.com/id?1022904 - http://support.apple.com/kb/HT3797 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00005.html - http://secunia.com/advisories/36673
CVE ID: CVE-2009-2202 State: PUBLISHED Published: 2009-09-10T21:00:00 Last Updated: 2024-08-07T05:44:55.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted H.264 movie file. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3859 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5467 - http://www.securityfocus.com/bid/36328 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00002.html - https://exchange.xforce.ibmcloud.com/v
6328 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/53127 - http://www.vupen.com/english/advisories/2009/3184 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-2203 State: PUBLISHED Published: 2009-09-10T21:00:00 Last Updated: 2024-08-07T05:44:55.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MPEG-4 video file. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5672 - http://support.apple.com/kb/HT3859 - http://www.securityfocus.com/bid/36328 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00002.html - http://www.vupen.com/english/advisories/
28 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00002.html - http://www.vupen.com/english/advisories/2009/3184 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-2204 State: PUBLISHED Published: 2009-08-03T18:00:00 Last Updated: 2024-08-07T05:44:55.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the CoreTelephony component in Apple iPhone OS before 3.0.1 allows remote attackers to execute arbitrary code, obtain GPS coordinates, or enable the microphone via an SMS message that triggers memory corruption, as demonstrated by Charlie Miller at SyScan '09 Singapore. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2009/Jul/msg00001.html - http://support.apple.com/kb/HT3754 - http://www.syscan.org/Sg/program.html - http://www.blac
ce/2009/Jul/msg00001.html - http://support.apple.com/kb/HT3754 - http://www.syscan.org/Sg/program.html - http://www.blackhat.com/presentations/bh-usa-09/MILLER/BHUSA09-Miller-FuzzingPhone-PAPER.pdf - http://news.cnet.com/8301-1009_3-10278472-83.html - http://secunia.com/advisories/36070 - http://securitytracker.com/id?1022626 - http://www.securityfocus.com/bid/35569 - http://www.vupen.com/english/advisories/2009/2105 - http://www.osvdb.org/55687
CVE ID: CVE-2009-2205 State: PUBLISHED Published: 2009-09-09T22:00:00 Last Updated: 2024-08-07T05:44:55.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Java Web Start command launcher in Java for Mac OS X 10.5 before Update 5 allows attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2543 - http://securitytracker.com/id?1022820 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html
CVE ID: CVE-2009-2206 State: PUBLISHED Published: 2009-09-10T21:00:00 Last Updated: 2024-08-07T05:44:54.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in the AudioCodecs library in the CoreAudio component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted (1) AAC or (2) MP3 file, as demonstrated by a ringtone with malformed entries in the sample size table. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022869 - http://www.securityfocus.com/archive/1/506
Program Container: References: - http://www.securitytracker.com/id?1022869 - http://www.securityfocus.com/archive/1/506464/100/0/threaded - http://www.trapkit.de/advisories/TKADV2009-007.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/53180 - http://www.securityfocus.com/bid/36338 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html - http://secunia.com/advisories/36677 - http://support.apple.com/kb/HT3860
CVE ID: CVE-2009-2207 State: PUBLISHED Published: 2009-09-10T21:00:00 Last Updated: 2024-08-07T05:44:55.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MobileMail component in Apple iPhone OS 3.0 and 3.0.1, and iPhone OS 3.0 for iPod touch, lists deleted e-mail messages in Spotlight search results, which might allow local users to obtain sensitive information by reading these messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36337 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53182 - http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html - http://secunia.com/advisories/36677 - http://supp
://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html - http://secunia.com/advisories/36677 - http://support.apple.com/kb/HT3860
CVE ID: CVE-2009-2208 State: PUBLISHED Published: 2009-06-24T23:00:00 Last Updated: 2024-08-07T05:44:55.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeBSD 6.3, 6.4, 7.1, and 7.2 does not enforce permissions on the SIOCSIFINFO_IN6 IOCTL, which allows local users to modify or disable IPv6 network interfaces, as demonstrated by modifying the MTU. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51044 - http://www.securitytracker.com/id?1022367 - http://secunia.com/advisories/35410 - http://security.FreeBSD.org/advisories/FreeBSD-SA-09:10.ipv6.asc
CVE ID: CVE-2009-2209 State: PUBLISHED Published: 2009-06-24T23:00:00 Last Updated: 2024-08-07T05:44:55.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in rscms_mod_newsview.php in RS-CMS 2.1 allows remote attackers to execute arbitrary SQL commands via the key parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/9000 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51304 - http://osvdb.org/55325 - http://www.vupen.com/english/advisories/2009/1658
CVE ID: CVE-2009-2210 State: PUBLISHED Published: 2009-06-25T17:00:00 Last Updated: 2024-08-07T05:44:55.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a multipart/alternative e-mail message containing a text/enhanced part that triggers access to an incorrect object type. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2009-1134.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275 - http://ww
.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275 - http://www.debian.org/security/2009/dsa-1830 - http://secunia.com/advisories/35602 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9994 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html - http://www.mozilla.org/security/announce/2009/mfsa2009-33.html - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html - http://secunia.com/advisories/35882 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51315 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:141 - http://secunia.c
.ibmcloud.com/vulnerabilities/51315 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:141 - http://secunia.com/advisories/35561 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408 - http://www.securityfocus.com/bid/35461 - http://secunia.com/advisories/35633 - http://securitytracker.com/id?1022433 - https://bugzilla.mozilla.org/show_bug.cgi?id=495057
CVE ID: CVE-2009-2211 State: PUBLISHED Published: 2009-06-25T17:00:00Z Last Updated: 2024-09-17T03:18:46.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the CQWeb server in IBM Rational ClearQuest 7.0.0 before 7.0.0.6 and 7.0.1 before 7.0.1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35564 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK77030 - http://www.securitytracker.com/id?1022456
CVE ID: CVE-2009-2212 State: PUBLISHED Published: 2009-06-25T17:00:00Z Last Updated: 2024-09-16T23:00:57.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CQWeb server in IBM Rational ClearQuest 7.0.0 before 7.0.0.6 and 7.0.1 before 7.0.1.5 allows attackers to discover a (1) username or (2) password via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35564 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK77030 - http://www.securitytracker.com/id?1022456
CVE ID: CVE-2009-2213 State: PUBLISHED Published: 2009-06-25T21:00:00 Last Updated: 2024-10-21T16:31:37.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the Security global settings on the Citrix NetScaler Access Gateway appliance with Enterprise Edition firmware 9.0, 8.1, and earlier specifies Allow for the Default Authorization Action option, which might allow remote authenticated users to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51274 - http://www.securityfocus.com/bid/35422 - http://www.vupen.com/english/adv
ge.xforce.ibmcloud.com/vulnerabilities/51274 - http://www.securityfocus.com/bid/35422 - http://www.vupen.com/english/advisories/2009/1641 - http://support.citrix.com/article/CTX118770
CVE ID: CVE-2009-2214 State: PUBLISHED Published: 2009-06-25T21:00:00 Last Updated: 2024-08-07T05:44:55.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Secure Gateway service in Citrix Secure Gateway 3.1 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an unspecified request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022420 - http://www.securityfocus.com/bid/35421 - http://secunia.com/advisories/35503 - http://www.vupen.com/english/advisories/2009/1633 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51216 - http://support.citrix.com/article/CTX121172
CVE ID: CVE-2009-2215 State: PUBLISHED Published: 2009-06-25T21:00:00Z Last Updated: 2024-09-16T17:02:42.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in URD before 0.6.2 allow remote attackers to inject arbitrary web script or HTML via vectors related to the fatal_error page and unspecified other components. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35540 - http://sourceforge.net/project/shownotes.php?release_id=692011
CVE ID: CVE-2009-2216 State: PUBLISHED Published: 2009-06-25T21:00:00 Last Updated: 2024-08-07T05:44:55.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CMD_REDIRECT in DirectAdmin 1.33.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the URI in a view=advanced request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51292 - http://secunia.com/advisories/35525 - http://www.securityfocus.com/bid/35450 - http://www.vupen.com/english/advisories/2009/1663 - http://pridels-team.blogspot.com/2009/06/directadmin-v1336-xss-vuln.html
CVE ID: CVE-2009-2217 State: PUBLISHED Published: 2009-06-25T21:00:00 Last Updated: 2024-08-07T05:44:55.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in NBBC before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via an invalid URL in a BBCode img tag. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35520 - http://sourceforge.net/forum/message.php?msg_id=7455625 - http://sourceforge.net/forum/message.php?msg_id=7456208 - http://osvdb.org/55266 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51288 - http://sourceforge.net/tracker/?func=detail&aid=2809888&group_
ps://exchange.xforce.ibmcloud.com/vulnerabilities/51288 - http://sourceforge.net/tracker/?func=detail&aid=2809888&group_id=235382&atid=1096820
CVE ID: CVE-2009-2218 State: PUBLISHED Published: 2009-06-25T21:00:00 Last Updated: 2024-08-07T05:44:55.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in phpCollegeExchange 0.1.5c, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the home parameter to (1) i_head.php, (2) i_nav.php, (3) user_new_2.php, or (4) house/myrents.php; or (5) allbooks.php, (6) home.php, or (7) mybooks.php in books/. NOTE: house/myrents.php was also separately reported as a local file inclusion issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9
e inclusion issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9008 - http://secunia.com/advisories/35452
CVE ID: CVE-2009-2219 State: PUBLISHED Published: 2009-06-25T21:00:00 Last Updated: 2024-08-07T05:44:55.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpCollegeExchange 0.1.5c allow remote attackers to inject arbitrary web script or HTML via the (1) _SESSION[handle] parameter to (a) home.php, (b) books/allbooks.php, or (c) books/home.php; or the (2) home parameter to (d) i_head.php or (e) i_nav.php, or (f) allbooks.php, (g) home.php, or (h) i_nav.php in books/. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9008 - http://secunia.com/advisories/35452
CVE ID: CVE-2009-2220 State: PUBLISHED Published: 2009-06-26T15:00:00 Last Updated: 2024-08-07T05:44:55.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Tribiq CMS 5.0.12c, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to include and possibly execute arbitrary files via directory traversal sequences in the template_path parameter to (1) masthead.inc.php, (2) toppanel.inc.php, and (3) contact.inc.php in templates/mytribiqsite/tribiq-CL-9000/includes; and the use_template_family parameter to (4) templates/mytribiqsite/tribiq-CL-9000/includes/nlarlist_content.inc.php. NOTE: the tribal-GPL-
e_family parameter to (4) templates/mytribiqsite/tribiq-CL-9000/includes/nlarlist_content.inc.php. NOTE: the tribal-GPL-1066/includes/header.inc.php vector is already covered by CVE-2008-4894. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35484 - http://secunia.com/advisories/35535 - http://www.exploit-db.com/exploits/9012
CVE ID: CVE-2009-2221 State: PUBLISHED Published: 2009-06-26T15:00:00Z Last Updated: 2024-09-17T01:11:30.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PHP-I-BOARD 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000045.html - http://php.s3.to/bbs/bbs8.php - http://secunia.com/advisories/35532 - http://jvn.jp/jp/JVN20219071/index.html
CVE ID: CVE-2009-2222 State: PUBLISHED Published: 2009-06-26T15:00:00Z Last Updated: 2024-09-16T18:13:27.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in PHP-I-BOARD 1.2 and earlier allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors, probably related to mail. Additional Analyst Notes: - CVE Program Container: References: - http://php.s3.to/bbs/bbs8.php - http://secunia.com/advisories/35532 - http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000046.html - http://jvn.jp/jp/JVN32788272/index.html
CVE ID: CVE-2009-2223 State: PUBLISHED Published: 2009-06-26T15:00:00 Last Updated: 2024-08-07T05:44:55.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in locms/smarty.php in LightOpenCMS 0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cwd parameter. NOTE: remote file inclusion attacks may be possible. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9015
CVE ID: CVE-2009-2224 State: PUBLISHED Published: 2009-06-26T15:00:00 Last Updated: 2024-08-07T05:44:55.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ang/shared/flags.php in AN Guestbook 0.7.8, when register_globals is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the g_lang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9013 - http://www.securityfocus.com/bid/35486 - http://www.attrition.org/pipermail/vim/2009-June/002196.html
CVE ID: CVE-2009-2225 State: PUBLISHED Published: 2009-06-26T15:00:00 Last Updated: 2024-08-07T05:44:55.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in SureThing CD/DVD Labeler 5.1.616 trial version allows user-assisted remote attackers to execute arbitrary code via a crafted (1) m3u or (2) pls playlist file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/55297 - http://secunia.com/advisories/35361 - http://www.securityfocus.com/bid/43852 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51331
CVE ID: CVE-2009-2226 State: PUBLISHED Published: 2009-06-26T15:00:00Z Last Updated: 2024-09-17T02:52:04.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Let's PHP! Tree BBS 2004/11/23 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35466 - http://jvn.jp/jp/JVN93827000/index.html - http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000044.html - http://php.s3.to/bbs/bbs6.php
CVE ID: CVE-2009-2227 State: PUBLISHED Published: 2009-06-26T18:00:00 Last Updated: 2024-08-07T05:44:55.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in B Labs Bopup Communication Server 3.2.26.5460 allows remote attackers to execute arbitrary code via a crafted request to TCP port 19810. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9002 - http://www.vupen.com/english/advisories/2009/1645 - http://secunia.com/advisories/35516 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51305 - http://osvdb.org/55275