Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
w.securityfocus.com/bid/37347 - http://www.securityfocus.com/archive/1/508355/100/0/threaded - http://www.securityfocus.com/bid/37261 - http://marc.info/?l=bugtraq&m=126046355120442&w=2 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877
CVE ID: CVE-2009-4180 State: PUBLISHED Published: 2009-12-10T22:00:00 Last Updated: 2024-08-07T06:54:09.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in snmpviewer.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long HTTP Host header. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877 - http://www.securityfocus.com/archive/1/508356/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/54656 - http://www.securityfocus.com/bid/37261 - http://marc.info/?l=bugtraq&
change.xforce.ibmcloud.com/vulnerabilities/54656 - http://www.securityfocus.com/bid/37261 - http://marc.info/?l=bugtraq&m=126046355120442&w=2 - http://www.securityfocus.com/bid/37348 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877 - http://dvlabs.tippingpoint.com/advisory/TPTI-09-13
CVE ID: CVE-2009-4181 State: PUBLISHED Published: 2009-12-10T22:00:00 Last Updated: 2024-08-07T06:54:09.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via vectors involving the sel and arg parameters to jovgraph.exe. Additional Analyst Notes: - CVE Program Container: References: - http://dvlabs.tippingpoint.com/advisory/TPTI-09-14 - http://www.securityfocus.com/archive/1/508357/100/0/threaded - http://www.securityfocus.com/bid/37261 - http://marc.info/?l=bugtraq&m=126046355120442&w=2 - https://exchange.xforce.ibmc
ttp://www.securityfocus.com/bid/37261 - http://marc.info/?l=bugtraq&m=126046355120442&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54655 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877 - http://www.securityfocus.com/bid/37343
CVE ID: CVE-2009-4182 State: PUBLISHED Published: 2010-01-14T18:00:00Z Last Updated: 2024-09-17T01:56:21.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in HP Web Jetadmin 10.2, when a remote SQL server is used, allow remote attackers to obtain access to data or cause a denial of service, possibly by leveraging authentication and encryption weaknesses on the SQL server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37787 - http://marc.info/?l=bugtraq&m=126341293311108&w=2 - http://marc.info/?l=bugtraq&m=126341293311108&w=2
CVE ID: CVE-2009-4183 State: PUBLISHED Published: 2010-01-28T20:00:00Z Last Updated: 2024-09-16T18:04:03.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP OpenView Storage Data Protector 6.00 and 6.10 allows local users to obtain unspecified "access" via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/61955 - http://secunia.com/advisories/38306 - http://www.securityfocus.com/bid/37964 - http://marc.info/?l=bugtraq&m=126461112019142&w=2 - http://marc.info/?l=bugtraq&m=126461112019142&w=2
CVE ID: CVE-2009-4184 State: PUBLISHED Published: 2010-02-03T18:00:00 Last Updated: 2024-08-07T06:54:09.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Enterprise Cluster Master Toolkit (ECMT) B.05.00 on HP-UX B.11.23 (11i v2) and HP-UX B.11.31 (11i v3) allows local users to gain access to an Oracle or Sybase database via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12172 - http://www.securitytracker.com/id?1023523 - http://secunia.com/advisories/38423 - http://www.vupen.com/english/advisories/2010/0272 - http://h20000.www
id?1023523 - http://secunia.com/advisories/38423 - http://www.vupen.com/english/advisories/2010/0272 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01894850 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8305 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01894850 - http://www.securityfocus.com/bid/38035
CVE ID: CVE-2009-4185 State: PUBLISHED Published: 2010-02-05T22:13:00 Last Updated: 2024-08-07T06:54:10.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in proxy/smhui/getuiinfo in HP System Management Homepage (SMH) before 6.0 allows remote attackers to inject arbitrary web script or HTML via the servercert parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38341 - http://www.securityfocus.com/bid/38081 - http://marc.info/?l=bugtraq&m=126529736830358&w=2 - http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-15 - http://www.securitytracker.com/id?1023541 - http://ww
www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-15 - http://www.securitytracker.com/id?1023541 - http://www.vupen.com/english/advisories/2010/0294 - http://www.securityfocus.com/archive/1/509195/100/0/threaded - http://marc.info/?l=bugtraq&m=126529736830358&w=2
CVE ID: CVE-2009-4186 State: PUBLISHED Published: 2009-12-03T17:00:00 Last Updated: 2024-08-07T06:54:09.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack consumption vulnerability in Apple Safari 4.0.3 on Windows allows remote attackers to cause a denial of service (application crash) via a long URI value (aka url) in the Cascading Style Sheets (CSS) background property. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54487 - http://www.exploit-db.com/exploits/10102 - http://www.securityfocus.com/bid/37039
CVE ID: CVE-2009-4187 State: PUBLISHED Published: 2009-12-03T17:00:00Z Last Updated: 2024-09-17T02:33:00.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Gateway component in Sun Java System Portal Server 6.3.1, 7.1, and 7.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1023260 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-138686-04-1 - http://www.securityfocus.com/bid/37186 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-269368-1
CVE ID: CVE-2009-4188 State: PUBLISHED Published: 2009-12-03T17:00:00Z Last Updated: 2024-09-16T16:37:37.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat servlet container. NOTE: this might overlap CVE-2009-3098. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36258 - http://www.intevydis.com/blog/?p=87
CVE ID: CVE-2009-4189 State: PUBLISHED Published: 2009-12-03T17:00:00Z Last Updated: 2024-09-16T22:26:01.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat servlet container. NOTE: this might overlap CVE-2009-3099 and CVE-2009-3843. Additional Analyst Notes: - CVE Program Container: References: - http://www.intevydis.com/blog/?p=87
CVE ID: CVE-2009-4190 State: PUBLISHED Published: 2009-12-03T17:00:00Z Last Updated: 2024-09-17T00:20:39.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the kernel in Sun OpenSolaris 2009.06 allows remote attackers to cause a denial of service (panic) via unknown vectors, as demonstrated by the vd_solaris2 module in VulnDisco Pack Professional 8.12. NOTE: as of 20091203, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://www.intevydis.com/blog/?p
for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://www.intevydis.com/blog/?p=79 - http://www.intevydis.com/vd-list.shtml
CVE ID: CVE-2009-4191 State: PUBLISHED Published: 2009-12-03T17:00:00Z Last Updated: 2024-09-17T01:41:25.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the kernel in Sun Solaris 10 and OpenSolaris 2009.06 on the x86-64 platform allows local users to gain privileges via unknown vectors, as demonstrated by the vd_sol_local module in VulnDisco Pack Professional 8.12. NOTE: as of 20091203, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://www.intev
CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://www.intevydis.com/blog/?p=79 - http://www.intevydis.com/vd-list.shtml
CVE ID: CVE-2009-4192 State: PUBLISHED Published: 2009-12-03T19:00:00Z Last Updated: 2024-09-16T22:50:40.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in dialog/file_manager.php in Interspire Knowledge Manager 5 allows remote attackers to read arbitrary files via a .. (dot dot) in the p parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36541
CVE ID: CVE-2009-4193 State: PUBLISHED Published: 2009-12-03T19:00:00 Last Updated: 2024-08-07T06:54:10.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Merkaartor 0.14 allows local users to append data to arbitrary files via a symlink attack on the /tmp/merkaartor.log temporary file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/53486 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00870.html - http://trac.openstreetmap.org/ticket/2320 - http://osvdb.org/58389 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=548546 - https://www.redhat.com/archives/fedora-package-announce/2009
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=548546 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00869.html - http://www.securityfocus.com/bid/36529 - http://secunia.com/advisories/36897
CVE ID: CVE-2009-4194 State: PUBLISHED Published: 2009-12-03T19:00:00 Last Updated: 2024-08-07T06:54:10.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Golden FTP Server 4.30 Free and Professional, 4.50, and possibly other versions allows remote authenticated users to delete arbitrary files via a .. (dot dot) in the DELE command. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37527 - http://www.exploit-db.com/exploits/10258 - http://blog.sat0ri.com/?p=292 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54497
CVE ID: CVE-2009-4195 State: PUBLISHED Published: 2009-12-04T11:00:00 Last Updated: 2024-08-07T06:54:09.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier, and CS3 13.0.0 allows remote attackers to execute arbitrary code via a long DSC comment in an Encapsulated PostScript (.eps) file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/60632 - http://retrogod.altervista.org/9sg_adobe_illuso.html - http://secunia.com/advisories/37563 - http://blogs.adobe.com/psirt/2009/12/potential_adobe_illustrator_cs.html -
.html - http://secunia.com/advisories/37563 - http://blogs.adobe.com/psirt/2009/12/potential_adobe_illustrator_cs.html - http://www.securitytracker.com/id?1023276 - http://www.vupen.com/english/advisories/2009/3396 - http://www.securityfocus.com/bid/37192 - http://www.adobe.com/support/security/bulletins/apsb10-01.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/54521 - http://www.securityfocus.com/archive/1/508175/100/0/threaded
CVE ID: CVE-2009-4196 State: PUBLISHED Published: 2009-12-04T11:00:00 Last Updated: 2024-08-07T06:54:09.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in multiple scripts in Forms/ in Huawei MT882 V100R002B020 ARG-T running firmware 3.7.9.98 allow remote attackers to inject arbitrary web script or HTML via the (1) BackButton parameter to error_1; (2) wzConnFlag parameter to fresh_pppoe_1; (3) diag_pppindex_argen and (4) DiagStartFlag parameters to rpDiag_argen_1; (5) wzdmz_active and (6) wzdmzHostIP parameters to rpNATdmz_argen_1; (7) wzVIRTUALSVR_endPort, (8) wzVIRTUALSVR_endPortLocal, (9) wzVIRTUALSVR_IndexFlag, (10) wzVI
ters to rpNATdmz_argen_1; (7) wzVIRTUALSVR_endPort, (8) wzVIRTUALSVR_endPortLocal, (9) wzVIRTUALSVR_IndexFlag, (10) wzVIRTUALSVR_localIP, (11) wzVIRTUALSVR_startPort, and (12) wzVIRTUALSVR_startPortLocal parameters to rpNATvirsvr_argen_1; (13) Connect_DialFlag, (14) Connect_DialHidden, and (15) Connect_Flag parameters to rpStatus_argen_1; (16) Telephone_select, and (17) wzFirstFlag parameters to rpwizard_1; and (18) wzConnectFlag parameter to rpwizPppoe_1. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/10276 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54526 - http://www.securityfocus.com/bid/37194
CVE ID: CVE-2009-4197 State: PUBLISHED Published: 2009-12-04T11:00:00 Last Updated: 2024-08-07T06:54:09.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: rpwizPppoe.htm in Huawei MT882 V100R002B020 ARG-T running firmware 3.7.9.98 contains a form that does not disable the autocomplete setting for the password parameter, which makes it easier for local users or physically proximate attackers to obtain the password from web browsers that support autocomplete. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/10276 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54528 - http://www.securityfocus.com/bid/37194
CVE ID: CVE-2009-4198 State: PUBLISHED Published: 2009-12-04T19:00:00 Last Updated: 2024-08-07T06:54:10.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in my_orders.php in MyMiniBill allows remote authenticated users to execute arbitrary SQL commands via the orderid parameter in a status action. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1490 - http://www.exploit-db.com/exploits/8864 - http://secunia.com/advisories/35285
CVE ID: CVE-2009-4199 State: PUBLISHED Published: 2009-12-04T19:00:00 Last Updated: 2024-08-07T06:54:10.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Mambo Resident (aka Mos Res or com_mosres) component 1.0f for Mambo and Joomla!, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) property_uid parameter in a viewproperty action to index.php and the (2) regID parameter in a showregion action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35202 - http://www.exploit-db.com/exploits/8872
CVE ID: CVE-2009-4200 State: PUBLISHED Published: 2009-12-04T19:00:00 Last Updated: 2024-08-07T06:54:10.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Seminar (com_seminar) component 1.28 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a View_seminar action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8867 - http://www.securityfocus.com/bid/35192
CVE ID: CVE-2009-4201 State: PUBLISHED Published: 2009-12-04T19:00:00 Last Updated: 2024-08-07T06:54:10.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Mp3 Tag Assistant Professional 2.92 build 300 allow remote attackers to execute arbitrary code via an MP3 file with a long string in the (1) ID3v1, (2) ID3v2, or (3) APEv2 metadata field. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54810 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50870 - http://secunia.com/advisories/35305 - http://liquidworm.blogspot.com/2009/05/mp3-tag-assistant-pro-292-tag-metadata.html
CVE ID: CVE-2009-4202 State: PUBLISHED Published: 2009-12-04T19:00:00 Last Updated: 2024-08-07T06:54:09.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Omilen Photo Gallery (com_omphotogallery) component Beta 0.5 for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1494 - http://www.exploit-db.com/exploits/8870 - http://www.securityfocus.com/bid/35201
CVE ID: CVE-2009-4203 State: PUBLISHED Published: 2009-12-04T19:00:00 Last Updated: 2024-08-07T06:54:10.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in admin/aclass/admin_func.php in Arab Portal 2.2 allow remote attackers to execute arbitrary SQL commands via the (1) X-Forwarded-For or (2) Client-IP HTTP header in a request to the default URI under admin/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54811 - http://www.securityfocus.com/bid/35149 - http://www.exploit-db.com/exploits/8828 - http://secunia.com/advisories/35257 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50859
CVE ID: CVE-2009-4204 State: PUBLISHED Published: 2009-12-04T19:00:00 Last Updated: 2024-08-07T06:54:09.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in read.php in Flashlight Free Edition allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50906 - http://www.exploit-db.com/exploits/8856
CVE ID: CVE-2009-4205 State: PUBLISHED Published: 2009-12-04T19:00:00 Last Updated: 2024-08-07T06:54:10.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin.php in Flashlight Free Edition allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the action parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8856 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50907
CVE ID: CVE-2009-4206 State: PUBLISHED Published: 2009-12-04T19:00:00 Last Updated: 2024-08-07T06:54:09.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin.link.modify.php in Million Dollar Text Links 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8830 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50864 - http://secunia.com/advisories/34994
CVE ID: CVE-2009-4207 State: PUBLISHED Published: 2009-12-04T19:00:00Z Last Updated: 2024-09-16T19:21:01.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Webform module 5.x before 5.x-2.7 and 6.x before 6.x-2.7, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via a submission. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35197 - http://drupal.org/node/481268 - http://secunia.com/advisories/35339 - http://drupal.org/node/481258 - http://drupal.org/node/481260
CVE ID: CVE-2009-4208 State: PUBLISHED Published: 2009-12-04T19:00:00 Last Updated: 2024-08-07T06:54:09.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the os_news module in Open-school (OS) 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50873 - http://www.exploit-db.com/exploits/8839
CVE ID: CVE-2009-4209 State: PUBLISHED Published: 2009-12-04T19:00:00 Last Updated: 2024-08-07T06:54:09.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in moziloCMS 1.11.1 allow remote attackers to inject arbitrary web script or HTML via the (1) cat and (2) file parameters in an editsite action, different vectors than CVE-2008-6127 and CVE-2009-1367. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/504091/100/0/threaded - http://www.securityfocus.com/bid/35212
CVE ID: CVE-2009-4210 State: PUBLISHED Published: 2009-12-13T01:00:00 Last Updated: 2024-08-07T06:54:09.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted media content. Additional Analyst Notes: - CVE Program Container: References: - http://support.microsoft.com/kb/955759 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11677 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54644 - http://securitytracker.com/id?1023302 - http:
def%3A11677 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54644 - http://securitytracker.com/id?1023302 - http://www.securityfocus.com/bid/37251 - http://www.securityfocus.com/archive/1/508323/100/0/threaded - http://www.osvdb.org/60857 - http://www.microsoft.com/technet/security/advisory/954157.mspx - http://support.microsoft.com/kb/976138 - http://www.vupen.com/english/advisories/2009/3440 - http://support.microsoft.com/kb/954157 - http://www.fortiguard.com/advisory/FGA-2009-45.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/54645 - http://secunia.com/advisories/37592
CVE ID: CVE-2009-4211 State: PUBLISHED Published: 2009-12-04T22:00:00 Last Updated: 2024-08-07T06:54:10.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: The U.S. Defense Information Systems Agency (DISA) Security Readiness Review (SRR) script for the Solaris x86 platform executes files in arbitrary directories as root for filenames equal to (1) java, (2) openssl, (3) php, (4) snort, (5) tshark, (6) vncserver, or (7) wireshark, which allows local users to gain privileges via a Trojan horse program. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/433821 - http://securitytracker.com/id?1023265 - http://www.securityfocus.com/bid/3720