Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-1009 State: PUBLISHED Published: 2009-04-15T10:00:00 Last Updated: 2024-08-07T04:57:17.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.1.9 allows local users to affect confidentiality, integrity, and availability, related to HTML. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022055 - http://www.securityfocus.com/bid/34461 - http://osvdb.org/53748 - http://secunia.com/advisories/34693 - http://www-01.ibm.com/support/docview.wss?uid=swg21660640 - http://www.us-cert.gov/cas/techalerts/TA09-105A.html - http://www.o
www-01.ibm.com/support/docview.wss?uid=swg21660640 - http://www.us-cert.gov/cas/techalerts/TA09-105A.html - http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html
CVE ID: CVE-2009-1010 State: PUBLISHED Published: 2009-04-15T10:00:00 Last Updated: 2024-08-07T04:57:17.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and availability, related to HTML, a different vulnerability than CVE-2009-1008. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022055 - http://www.securityfocus.com/bid/34461 - http://secunia.com/advisories/34693 - http://osvdb.org/53749 - http://www-01.ibm.com/support/docview.wss?uid=swg21660640 - http://www.
.com/advisories/34693 - http://osvdb.org/53749 - http://www-01.ibm.com/support/docview.wss?uid=swg21660640 - http://www.us-cert.gov/cas/techalerts/TA09-105A.html - http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html
CVE ID: CVE-2009-1011 State: PUBLISHED Published: 2009-04-15T10:00:00 Last Updated: 2024-08-07T04:57:17.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and availability, related to HTML. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is for multiple integer overflows in a function that parses an optional data stream within a Microsoft Office file, leading to a heap-based buffer overflow. Additional Analyst Notes: - CVE P
l data stream within a Microsoft Office file, leading to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022055 - http://www.securityfocus.com/bid/34461 - http://secunia.com/advisories/34693 - http://osvdb.org/53750 - http://www-01.ibm.com/support/docview.wss?uid=swg21660640 - http://www.us-cert.gov/cas/techalerts/TA09-105A.html - http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=798
CVE ID: CVE-2009-1012 State: PUBLISHED Published: 2009-04-15T10:00:00 Last Updated: 2024-08-07T04:57:17.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the plug-ins for Apache and IIS web servers in Oracle BEA WebLogic Server 7.0 Gold through SP7, 8.1 Gold through SP6, 9.0, 9.1, 9.2 Gold through MP3, 10.0 Gold through MP1, and 10.3 allows remote attackers to affect confidentiality, integrity, and availability. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow in an unspecified plug-in that parses HTTP requests, which leads to a heap-ba
esearcher that this is an integer overflow in an unspecified plug-in that parses HTTP requests, which leads to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022059 - http://www.securityfocus.com/bid/34461 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64935 - http://www.us-cert.gov/cas/techalerts/TA09-105A.html - http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html - http://secunia.com/secunia_research/2009-22/ - http://www.oracle.com/technology/deploy/security/wls-security/1012.html - http://osvdb.org/53765
CVE ID: CVE-2009-1013 State: PUBLISHED Published: 2009-04-15T10:00:00 Last Updated: 2024-08-07T04:57:17.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.19 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-1014. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34461 - http://secunia.com/advisories/34693 - http://www.us-cert.gov/cas/techalerts/TA09-105A.html - http://www.oracle.com/technetwork/topics/security/cpuapr
/34693 - http://www.us-cert.gov/cas/techalerts/TA09-105A.html - http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html - http://www.securitytracker.com/id?1022057 - http://osvdb.org/53756
CVE ID: CVE-2009-1014 State: PUBLISHED Published: 2009-04-15T10:00:00 Last Updated: 2024-08-07T04:57:17.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.19 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-1013. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34461 - http://osvdb.org/53757 - http://secunia.com/advisories/34693 - http://www.us-cert.gov/cas/techalerts/TA09-105A.html - http://www.oracle.com/technetwo
://secunia.com/advisories/34693 - http://www.us-cert.gov/cas/techalerts/TA09-105A.html - http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html - http://www.securitytracker.com/id?1022057
CVE ID: CVE-2009-1015 State: PUBLISHED Published: 2009-07-14T23:00:00 Last Updated: 2024-08-07T04:57:17.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.05, and 10.2.04 allows remote authenticated users to affect integrity via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35776 - http://osvdb.org/55893 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51747 - http://www.vupen.com/english/advisories/2009/1900 - http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html - http://www.securitytracker.
ories/2009/1900 - http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html - http://www.securitytracker.com/id?1022560 - http://www.securityfocus.com/bid/35682
CVE ID: CVE-2009-1016 State: PUBLISHED Published: 2009-04-15T10:00:00 Last Updated: 2024-08-07T04:57:17.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote authenticated users to affect confidentiality, integrity, and availability, related to IIS. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow involving an unspecified Server Plug-in and a crafted SSL certificate. Additional Analyst Notes: - CVE Program Conta
low involving an unspecified Server Plug-in and a crafted SSL certificate. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64934 - http://www.securitytracker.com/id?1022059 - http://www.securityfocus.com/bid/34461 - http://www.us-cert.gov/cas/techalerts/TA09-105A.html - http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html - http://secunia.com/secunia_research/2009-23/
CVE ID: CVE-2009-1017 State: PUBLISHED Published: 2009-04-15T10:00:00 Last Updated: 2024-08-07T04:57:17.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2009-0994. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1022055 - http://www.securityfocus.com/bid/34461 - http://secunia.com/advisories/34693 - http://www.us-cert.gov/cas/techalerts/TA09-105A.html - http://www.oracle.com/technetwork
/secunia.com/advisories/34693 - http://www.us-cert.gov/cas/techalerts/TA09-105A.html - http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html - http://osvdb.org/53746
CVE ID: CVE-2009-1018 State: PUBLISHED Published: 2009-10-22T18:00:00 Last Updated: 2024-08-07T04:57:17.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LTRIC (WMSYS.LTRIC). Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/59112 - http://secunia.com/advisories/37027 - http://www.securitytracker.com/id?1023057 - http://www.us-cert.gov/cas/techalerts/TA09-294A.html - http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html - http://www.securityfocus.com/b
09-294A.html - http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html - http://www.securityfocus.com/bid/36765
CVE ID: CVE-2009-1019 State: PUBLISHED Published: 2009-07-14T23:00:00 Last Updated: 2024-08-07T04:57:17.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Network Authentication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/55884 - http://secunia.com/advisories/35776 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51748 - http://www.vupen.com/english/advisories/2009/1900 - http://www.securityfocus.com/bid/35680 - http://www.o
lities/51748 - http://www.vupen.com/english/advisories/2009/1900 - http://www.securityfocus.com/bid/35680 - http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html - http://www.securitytracker.com/id?1022560
CVE ID: CVE-2009-1020 State: PUBLISHED Published: 2009-07-14T23:00:00 Last Updated: 2024-08-07T04:57:17.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Network Foundation component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/55897 - http://secunia.com/advisories/35776 - http://www.vupen.com/english/advisories/2009/1900 - http://www.securityfocus.com/bid/35684 - http://www.oracle.com/technetwork/topics/security/cpujul2009-091332
2009/1900 - http://www.securityfocus.com/bid/35684 - http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html - http://www.securitytracker.com/id?1022560 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51749
CVE ID: CVE-2009-1021 State: PUBLISHED Published: 2009-07-14T23:00:00 Last Updated: 2024-08-07T04:57:17.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35776 - http://osvdb.org/55886 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51750 - http://www.vupen.com/english/advisories/2009/1900 - http://www.securityfocus.com/bid/35685 - http://www.oracle.com/technet
tp://www.vupen.com/english/advisories/2009/1900 - http://www.securityfocus.com/bid/35685 - http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html - http://www.securitytracker.com/id?1022560
CVE ID: CVE-2009-1022 State: PUBLISHED Published: 2009-03-20T00:00:00 Last Updated: 2024-08-07T04:57:17.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Preview/ Set Segment function in Gretech GOMlab GOM Encoder 1.0.0.11 and earlier allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a long text field in a subtitle (.srt) file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34120 - http://www.securityfocus.com/archive/1/501846/100/0/threaded - http://security.bkis.vn/?p=352 - https://exchange.xforce.ibmclou
www.securityfocus.com/archive/1/501846/100/0/threaded - http://security.bkis.vn/?p=352 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49252 - http://www.vupen.com/english/advisories/2009/0735 - https://www.exploit-db.com/exploits/8225 - http://osvdb.org/52677 - http://secunia.com/advisories/34314
CVE ID: CVE-2009-1023 State: PUBLISHED Published: 2009-03-20T00:00:00 Last Updated: 2024-08-07T04:57:17.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in phpComasy 0.9.1 allows remote attackers to execute arbitrary SQL commands via the entry_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0734 - http://osvdb.org/52817 - http://www.securityfocus.com/bid/34131 - https://www.exploit-db.com/exploits/8220 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49268
CVE ID: CVE-2009-1024 State: PUBLISHED Published: 2009-03-20T00:00:00 Last Updated: 2024-08-07T04:57:17.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Beerwin PHPLinkAdmin 1.0 allow remote attackers to execute arbitrary SQL commands via the linkid parameter to edlink.php, and unspecified other vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49265 - http://www.vupen.com/english/advisories/2009/0733 - http://osvdb.org/52778 - https://www.exploit-db.com/exploits/8216 - http://www.securityfocus.com/bid/34129 - http://secunia.com/advisories/34323
CVE ID: CVE-2009-1025 State: PUBLISHED Published: 2009-03-20T00:00:00 Last Updated: 2024-08-07T04:57:17.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in linkadmin.php in Beerwin PHPLinkAdmin 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49265 - http://www.vupen.com/english/advisories/2009/0733 - https://www.exploit-db.com/exploits/8216 - http://osvdb.org/52779 - http://www.securityfocus.com/bid/34129 - http://secunia.com/advisories/34323
CVE ID: CVE-2009-1026 State: PUBLISHED Published: 2009-03-20T00:00:00 Last Updated: 2024-08-07T04:57:17.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in login.php in Kim Websites 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0732 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49259 - https://www.exploit-db.com/exploits/8209 - http://www.securityfocus.com/bid/34116
CVE ID: CVE-2009-1027 State: PUBLISHED Published: 2009-03-20T00:00:00 Last Updated: 2024-08-07T04:57:17.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in OpenCart 1.1.8 allows remote attackers to execute arbitrary SQL commands via the order parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49262 - http://www.ngenuity.org/wordpress/2009/03/10/ngenuity-2009-005-opencart-order-by-blind-sql-injection/ - http://www.securityfocus.com/bid/34121 - http://www.securityfocus.com/archive/1/501843/100/0/threaded - http://secunia.com/advisories/34313
CVE ID: CVE-2009-1028 State: PUBLISHED Published: 2009-03-20T00:00:00 Last Updated: 2024-08-07T04:57:17.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in ediSys eZip Wizard 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8217 - http://secunia.com/advisories/39169 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49148 - https://www.exploit-db.com/exploits/8180 - http://www.securityfocus.com/bid/34044
CVE ID: CVE-2009-1029 State: PUBLISHED Published: 2009-03-20T00:00:00 Last Updated: 2024-08-07T04:57:17.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in POP Peeper 3.4.0.0 and earlier allows remote POP3 servers to execute arbitrary code via a long Date header, related to Imap.dll. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34093 - http://www.krakowlabs.com/res/adv/KL0309ADV-poppeeper_date-bof.txt - https://www.exploit-db.com/exploits/8203 - http://www.securityfocus.com/archive/1/501701/100/0/threaded - http://secunia.com/advisories/34077 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
ve/1/501701/100/0/threaded - http://secunia.com/advisories/34077 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49215
CVE ID: CVE-2009-1030 State: PUBLISHED Published: 2009-03-20T00:00:00 Last Updated: 2024-08-07T04:57:17.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the choose_primary_blog function in wp-includes/wpmu-functions.php in WordPress MU (WPMU) before 2.7 allows remote attackers to inject arbitrary web script or HTML via the HTTP Host header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34075 - http://www.securitytracker.com/id?1021838 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49184 - http://www.securityfocus.com/archive/1/501667/100/0/threaded - http://marc.info/?l=bugt
loud.com/vulnerabilities/49184 - http://www.securityfocus.com/archive/1/501667/100/0/threaded - http://marc.info/?l=bugtraq&m=126996727024732&w=2 - https://www.exploit-db.com/exploits/8196 - http://marc.info/?l=bugtraq&m=126996727024732&w=2
CVE ID: CVE-2009-1031 State: PUBLISHED Published: 2009-03-20T00:00:00 Last Updated: 2024-08-07T04:57:17.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the FTP server in Rhino Software Serv-U File Server 7.0.0.1 through 7.4.0.1 allows remote attackers to create arbitrary directories via a \.. (backslash dot dot) in an MKD request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8211 - http://secunia.com/advisories/34329 - http://osvdb.org/52773 - http://www.vupen.com/english/advisories/2009/0738 - http://www.securityfocus.com/bid/34125 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
glish/advisories/2009/0738 - http://www.securityfocus.com/bid/34125 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49258
CVE ID: CVE-2009-1032 State: PUBLISHED Published: 2009-03-20T18:00:00 Last Updated: 2024-08-07T04:57:17.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in gallery_list.php in YABSoft Advanced Image Hosting (AIH) Script 2.3 allows remote attackers to execute arbitrary SQL commands via the gal parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34176 - http://osvdb.org/52813 - https://www.exploit-db.com/exploits/8238 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49316 - http://secunia.com/advisories/34366
CVE ID: CVE-2009-1033 State: PUBLISHED Published: 2009-03-20T18:00:00 Last Updated: 2024-08-07T04:57:17.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in misc.php in DeluxeBB 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the qorder parameter, a different vector than CVE-2005-2989 and CVE-2006-2503. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8240 - http://www.securityfocus.com/bid/34174 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49313 - http://osvdb.org/52788 - http://secunia.com/advisories/34365
CVE ID: CVE-2009-1034 State: PUBLISHED Published: 2009-03-20T18:00:00 Last Updated: 2024-08-07T04:57:17.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Tasklist module 5.x-1.x before 5.x-1.3 and 5.x-2.x before 5.x-2.0-alpha1, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via values in the URI. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49320 - http://www.securityfocus.com/bid/34171 - http://www.osvdb.org/52781 - http://drupal.org/node/406316 - http://secunia.com/advisories/34376
CVE ID: CVE-2009-1035 State: PUBLISHED Published: 2009-03-20T18:00:00 Last Updated: 2024-08-07T04:57:17.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Tasklist module 5.x-1.x before 5.x-1.3 and 5.x-2.x before 5.x-2.0-alpha1, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via Cascading Style Sheets (CSS). Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/52782 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49319 - http://drupal.org/node/406316 - http://secunia.com/advisories/34376 - http://www.securityfocus.com/bid/34170
CVE ID: CVE-2009-1036 State: PUBLISHED Published: 2009-03-20T18:00:00 Last Updated: 2024-08-07T04:57:17.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Plus 1 module before 6.x-2.6, a module for Drupal, allows remote attackers to cast votes for content via unspecified aspects of the URI. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/52786 - http://www.securityfocus.com/bid/34168 - http://drupal.org/node/405672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49310 - http://drupal.org/node/406314 - http://secunia.com/advisories/34378
CVE ID: CVE-2009-1037 State: PUBLISHED Published: 2009-03-20T18:00:00 Last Updated: 2024-08-07T04:57:17.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Send by e-mail module in the "Printer, e-mail and PDF versions" module 5.x before 5.x-4.4 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to send unlimited spam messages via unknown vectors related to the flood control API. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34173 - http://secunia.com/advisories/34374 - http://drupal.org/node/406516 - http://osvdb.org/52785