Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-1836 State: PUBLISHED Published: 2009-06-12T21:07:00 Last Updated: 2024-08-07T05:27:54.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 use the HTTP Host header to determine the context of a document provided in a non-200 CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an "SSL tampering" attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1572 - http://www.slackware.com/security/viewer.php?l=slackware-securi
s: - http://www.vupen.com/english/advisories/2009/1572 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275 - http://www.debian.org/security/2009/dsa-1830 - http://secunia.com/advisories/35536 - http://secunia.com/advisories/35602 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11764 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html - http://www.securityfocus.com/bid/35326 - http://www.mozilla.org/security/announce/2009/mfsa2009-27.html - http://secunia.com/advisories/35440 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html - http://www.ubu
.com/advisories/35440 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html - http://www.ubuntu.com/usn/usn-782-1 - http://secunia.com/advisories/35431 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html - http://secunia.com/advisories/35331 - http://secunia.com/advisories/35468 - http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf - http://secunia.com/advisories/35439 - http://secunia.com/advisories/35882 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:141 - http://secunia.com/advisories/35415 - https://rhn.redhat.com/errata
ndriva.com/security/advisories?name=MDVSA-2009:141 - http://secunia.com/advisories/35415 - https://rhn.redhat.com/errata/RHSA-2009-1095.html - http://www.securityfocus.com/bid/35380 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468 - http://secunia.com/advisories/35561 - https://bugzilla.redhat.com/show_bug.cgi?id=503578 - http://osvdb.org/55160 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408 - http://www.debian.org/security/2009/dsa-1820 - http://www.redhat.com/support/errata/RHSA-2009-1126.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1 - http://www.securitytracker.c
a/RHSA-2009-1126.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1 - http://www.securitytracker.com/id?1022396 - http://research.microsoft.com/apps/pubs/default.aspx?id=79323 - https://bugzilla.mozilla.org/show_bug.cgi?id=479880
CVE ID: CVE-2009-1837 State: PUBLISHED Published: 2009-06-12T21:07:00 Last Updated: 2024-08-07T05:27:54.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the NPObjWrapper_NewResolve function in modules/plugin/base/src/nsJSNPRuntime.cpp in xul.dll in Mozilla Firefox 3 before 3.0.11 might allow remote attackers to execute arbitrary code via a page transition during Java applet loading, related to a use-after-free vulnerability for memory associated with a destroyed Java object. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1572 - http://www.mozilla.org/security/announce/2009/mfsa2009-28.html - http:
tp://www.vupen.com/english/advisories/2009/1572 - http://www.mozilla.org/security/announce/2009/mfsa2009-28.html - http://secunia.com/advisories/34241 - http://secunia.com/secunia_research/2009-19/ - http://www.securityfocus.com/archive/1/504260/100/0/threaded - https://bugzilla.mozilla.org/show_bug.cgi?id=486269 - http://www.securityfocus.com/bid/35360 - http://www.securityfocus.com/bid/35326 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html - http://secunia.com/advisories/35431 - http://secunia.com/advisories/35331 - http://secunia.com/advisories/35468 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html - http://secunia.com/advi
sories/35468 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html - http://secunia.com/advisories/35415 - https://rhn.redhat.com/errata/RHSA-2009-1095.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468 - http://www.securitytracker.com/id?1022386 - https://bugzilla.redhat.com/show_bug.cgi?id=503579 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10628 - http://www.debian.org/security/2009/dsa-1820 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1
CVE ID: CVE-2009-1838 State: PUBLISHED Published: 2009-06-12T21:07:00 Last Updated: 2024-08-07T05:27:54.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: The garbage-collection implementation in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 sets an element's owner document to null in unspecified circumstances, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted event handler, related to an incorrect context for this event handler. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=489131 - http://www.vupen.com/english/advisories/200
ntainer: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=489131 - http://www.vupen.com/english/advisories/2009/1572 - http://rhn.redhat.com/errata/RHSA-2009-1096.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11080 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275 - http://www.debian.org/security/2009/dsa-1830 - http://secunia.com/advisories/35536 - http://secunia.com/advisories/35602 - http://www.mozilla.org/security/announce/2009/mfsa2009-29.html - http://www.redhat.com/support/errata/RHSA-2009-1125.html - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.
hat.com/support/errata/RHSA-2009-1125.html - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html - http://www.securityfocus.com/bid/35326 - http://secunia.com/advisories/35440 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html - http://www.ubuntu.com/usn/usn-782-1 - http://secunia.com/advisories/35428 - http://secunia.com/advisories/35431 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html - http://secunia.com/advisories/35331 - http://secunia.com/advisories/35468 - http://secunia.com/advisories/35439 - http://secunia.com/advisories/35882 - https://www.redhat.com/archives/fedora-package-announce/2009-Jun
dvisories/35439 - http://secunia.com/advisories/35882 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:141 - http://secunia.com/advisories/35415 - https://rhn.redhat.com/errata/RHSA-2009-1095.html - http://www.securityfocus.com/bid/35383 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468 - http://osvdb.org/55157 - http://secunia.com/advisories/35561 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408 - https://bugzilla.redhat.com/show_bug.cgi?id=503580 - http://www.debian.org/security/2009/dsa-1820 - http
curity.425408 - https://bugzilla.redhat.com/show_bug.cgi?id=503580 - http://www.debian.org/security/2009/dsa-1820 - http://www.redhat.com/support/errata/RHSA-2009-1126.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1 - http://www.securitytracker.com/id?1022397
CVE ID: CVE-2009-1839 State: PUBLISHED Published: 2009-06-12T21:07:00 Last Updated: 2024-08-07T05:27:54.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 3 before 3.0.11 associates an incorrect principal with a file: URL loaded through the location bar, which allows user-assisted remote attackers to bypass intended access restrictions and read files via a crafted HTML document, aka a "file-URL-to-file-URL scripting" attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=479943 - http://www.vupen.com/english/advisories/2009/1572 - https://bugzilla.redhat.com/show_bug.cgi?id=503581 - https://oval.cisec
p://www.vupen.com/english/advisories/2009/1572 - https://bugzilla.redhat.com/show_bug.cgi?id=503581 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9256 - http://www.securityfocus.com/bid/35326 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html - http://www.mozilla.org/security/announce/2009/mfsa2009-30.html - http://secunia.com/advisories/35431 - http://secunia.com/advisories/35331 - http://secunia.com/advisories/35468 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html - http://secunia.com/advisories/35415 - https://rhn.redhat.com/errata/RHSA-2009-1095.html - http://www.securityfocus.com/b
http://secunia.com/advisories/35415 - https://rhn.redhat.com/errata/RHSA-2009-1095.html - http://www.securityfocus.com/bid/35386 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468 - http://osvdb.org/55163 - http://www.debian.org/security/2009/dsa-1820 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1
CVE ID: CVE-2009-1840 State: PUBLISHED Published: 2009-06-12T21:07:00 Last Updated: 2024-08-07T05:27:54.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.0.11, Thunderbird, and SeaMonkey do not check content policy before loading a script file into a XUL document, which allows remote attackers to bypass intended access restrictions via a crafted HTML document, as demonstrated by a "web bug" in an e-mail message, or web script or an advertisement in a web page. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1572 - http://www.securityfocus.com/bid/35326 - https://exchange.xforce.ibmcloud.com/v
vupen.com/english/advisories/2009/1572 - http://www.securityfocus.com/bid/35326 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51076 - http://www.mozilla.org/security/announce/2009/mfsa2009-31.html - https://bugzilla.mozilla.org/show_bug.cgi?id=477979 - http://osvdb.org/55158 - http://secunia.com/advisories/35440 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html - http://secunia.com/advisories/35431 - http://secunia.com/advisories/35331 - http://secunia.com/advisories/35468 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9448 - http://secunia.com/advisories/35439 - https://www.redhat.com/archives/fedora-package-
al%3Aorg.mitre.oval%3Adef%3A9448 - http://secunia.com/advisories/35439 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:141 - http://secunia.com/advisories/35415 - http://www.securitytracker.com/id?1022379 - https://rhn.redhat.com/errata/RHSA-2009-1095.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468 - http://www.debian.org/security/2009/dsa-1820 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1 - https://bugzilla.redhat.com/show_bug.cgi?id=503582
CVE ID: CVE-2009-1841 State: PUBLISHED Published: 2009-06-12T21:07:00 Last Updated: 2024-08-07T05:27:54.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: js/src/xpconnect/src/xpcwrappedjsclass.cpp in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to execute arbitrary web script with the privileges of a chrome object, as demonstrated by the browser sidebar and the FeedWriter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1572 - http://rhn.redhat.com/errata/RHSA-2009-1096.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=
/rhn.redhat.com/errata/RHSA-2009-1096.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275 - http://www.debian.org/security/2009/dsa-1830 - http://secunia.com/advisories/35536 - http://secunia.com/advisories/35602 - https://bugzilla.mozilla.org/show_bug.cgi?id=479560 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html - http://www.securityfocus.com/bid/35326 - http://secunia.com/advisories/35440 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html - http://www.ubuntu.com/usn/usn-782-1 - http://secunia.com/advisories/35428 - http://secunia.com/advisories/35431 - https://www.redhat
buntu.com/usn/usn-782-1 - http://secunia.com/advisories/35428 - http://secunia.com/advisories/35431 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html - http://secunia.com/advisories/35331 - http://secunia.com/advisories/35468 - http://www.mozilla.org/security/announce/2009/mfsa2009-32.html - http://secunia.com/advisories/35439 - http://secunia.com/advisories/35882 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:141 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9815 - http://secunia.com/advisories/35415 - https://rhn.redhat.
ository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9815 - http://secunia.com/advisories/35415 - https://rhn.redhat.com/errata/RHSA-2009-1095.html - https://bugzilla.redhat.com/show_bug.cgi?id=503583 - http://osvdb.org/55159 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468 - http://secunia.com/advisories/35561 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408 - http://www.debian.org/security/2009/dsa-1820 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1 - http://www.securitytracker.com/id?1022397 - http://www.securityfocus.com/bid/35373
CVE ID: CVE-2009-1842 State: PUBLISHED Published: 2009-06-01T14:00:00 Last Updated: 2024-08-07T05:27:54.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in main/tracking/userLog.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35117 - http://gsasec.blogspot.com/2009/05/php-nuke-v80-referer-sql-injection.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/50818
CVE ID: CVE-2009-1843 State: PUBLISHED Published: 2009-06-01T14:00:00 Last Updated: 2024-08-07T05:27:54.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Flash Quiz Beta 2 allow remote attackers to execute arbitrary SQL commands via the (1) quiz parameter to (a) num_questions.php, (b) answers.php, (c) high_score.php, (d) high_score_web.php, (e) results_table_web.php, and (f) question.php; and the (2) order_number parameter to (g) answers.php and (h) question.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35060 - http://www.securityfocus.com/archive/1/503701/100/0/threaded - https:/
ences: - http://www.securityfocus.com/bid/35060 - http://www.securityfocus.com/archive/1/503701/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/50668
CVE ID: CVE-2009-1844 State: PUBLISHED Published: 2009-06-01T14:00:00 Last Updated: 2024-08-07T05:27:54.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Drupal 5.x before 5.18 and 6.x before 6.12 allow (1) remote authenticated users to inject arbitrary web script or HTML via crafted UTF-8 byte sequences that are treated as UTF-7 by Internet Explorer 6 and 7, which are not properly handled in the "HTML exports of books" feature; and (2) allow remote authenticated users with administer taxonomy permissions to inject arbitrary web script or HTML via the help text of an arbitrary vocabulary. NOTE: vector 1 exists because of an
to inject arbitrary web script or HTML via the help text of an arbitrary vocabulary. NOTE: vector 1 exists because of an incomplete fix for CVE-2009-1575. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/461886 - http://www.debian.org/security/2009/dsa-1808 - http://secunia.com/advisories/35282
CVE ID: CVE-2009-1845 State: PUBLISHED Published: 2009-06-01T19:00:00 Last Updated: 2024-08-07T05:27:54.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ajax/updatecheck.php in Lussumo Vanilla 1.1.5 and 1.1.7 allows remote attackers to inject arbitrary web script or HTML via the RequestName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35234 - http://lussumo.com/community/discussion/9524/vanilla-118-released/#Item_0 - http://gsasec.blogspot.com/2009/05/vanilla-v117-cross-site-scripting.html - http://www.securityfocus.com/archive/1/503847/100/0/threaded
CVE ID: CVE-2009-1846 State: PUBLISHED Published: 2009-06-01T19:00:00 Last Updated: 2024-08-07T05:27:54.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in SiteX 0.7.4 Build 418 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the THEME_FOLDER parameter to (1) Corporate/homepage.php, (2) Fusion/homepage.php, (3) Joombo/homepage.php, (4) Streamline/homepage.php, and (5) Structure/homepage.php in themes/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8816 - http://www.securityfocus.com/bid/35122
CVE ID: CVE-2009-1847 State: PUBLISHED Published: 2009-06-01T19:00:00 Last Updated: 2024-08-07T05:27:54.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Easy PX 41 CMS 9.0 B1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the fiche parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35252 - https://www.exploit-db.com/exploits/8815 - http://www.securityfocus.com/bid/35119
CVE ID: CVE-2009-1848 State: PUBLISHED Published: 2009-06-01T19:00:00 Last Updated: 2024-08-07T05:27:54.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JoomlaMe AgoraGroups (aka AG or com_agoragroup) component 0.3.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a groupdetail action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35118 - https://www.exploit-db.com/exploits/8814
CVE ID: CVE-2009-1849 State: PUBLISHED Published: 2009-06-01T19:00:00Z Last Updated: 2024-09-17T02:15:46.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Monitor_Bandwidth function in PRTG Traffic Grapher 6.2.2.977 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35249 - http://blog.bkis.com/?p=704 - http://www.securityfocus.com/bid/35128 - http://www.paessler.com/support/kb/questions/prtg6history
CVE ID: CVE-2009-1850 State: PUBLISHED Published: 2009-06-01T19:00:00 Last Updated: 2024-08-07T05:27:54.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in phpBugTracker 1.0.3 allows remote attackers to execute arbitrary SQL commands via the password parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35101 - https://www.exploit-db.com/exploits/8808 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50752
CVE ID: CVE-2009-1851 State: PUBLISHED Published: 2009-06-01T19:00:00Z Last Updated: 2024-09-17T00:51:45.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in include.php in phpBugTracker 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35125 - http://www.vupen.com/english/advisories/2009/1432
CVE ID: CVE-2009-1852 State: PUBLISHED Published: 2009-06-01T19:00:00 Last Updated: 2024-08-07T05:27:54.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Graphiks MyForum 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8803 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50749 - http://www.securityfocus.com/bid/35096
CVE ID: CVE-2009-1853 State: PUBLISHED Published: 2009-06-01T19:00:00 Last Updated: 2024-08-07T05:27:54.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in Kensei Board 2.0 BETA (aka 2.0.0b) and earlier allow remote attackers to execute arbitrary SQL commands via the (1) f and (2) t parameters in a showforum action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8802 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50747
CVE ID: CVE-2009-1854 State: PUBLISHED Published: 2009-06-01T19:00:00 Last Updated: 2024-08-07T05:27:54.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Million Dollar Text Links 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the userid cookie to 1. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8813
CVE ID: CVE-2009-1855 State: PUBLISHED Published: 2009-06-11T15:00:00 Last Updated: 2024-08-07T05:27:54.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow attackers to execute arbitrary code via a PDF file containing a malformed U3D model file with a crafted extension block. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35274 - http://www.securityfocus.com/archive/1/504229/100/0/threaded - http://www.vupen.com/english/advisories/2009/1547 - http://secunia.
.securityfocus.com/archive/1/504229/100/0/threaded - http://www.vupen.com/english/advisories/2009/1547 - http://secunia.com/advisories/35655 - http://www.us-cert.gov/cas/techalerts/TA09-161A.html - http://secunia.com/advisories/35734 - http://www.redhat.com/support/errata/RHSA-2009-1109.html - http://www.adobe.com/support/security/bulletins/apsb09-07.html - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html - http://securitytracker.com/id?1022361 - http://www.securityfocus.com/bid/35282 - http://security.gentoo.org/glsa/glsa-200907-06.xml - http://secunia.com/advisories/34580 - http://www.zerodayinitiative.com/advisories/ZDI-09-042 - http://secunia.com/advisories/3568