Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-2438 State: PUBLISHED Published: 2009-07-13T14:00:00Z Last Updated: 2024-09-17T02:42:57.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in the search module in ClanSphere 2009.0 and 2009.0.2 allows remote attackers to inject arbitrary web script or HTML via the text parameter in a list action. NOTE: this might overlap CVE-2008-1399. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0907-exploits/clansphere-xss.txt - http://secunia.com/advisories/35744 - http://www.securityfocus.com/bid/35605 - http://www.vupen.com/english/advisories/2009/1836
CVE ID: CVE-2009-2439 State: PUBLISHED Published: 2009-07-13T14:00:00 Last Updated: 2024-08-07T05:52:14.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Web Development House Alibaba Clone allow remote attackers to execute arbitrary SQL commands via the (1) IndustryID parameter to category.php and the (2) SellerID parameter to supplier/view_contact_details.php. NOTE: this is a product that was developed by a third party; it is not associated with alibaba.com or the Alibaba Group. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1838 - http://secunia.com/advisories/35741 - htt
m Container: References: - http://www.vupen.com/english/advisories/2009/1838 - http://secunia.com/advisories/35741 - http://packetstormsecurity.org/0907-exploits/alibabaclone-sql.txt
CVE ID: CVE-2009-2440 State: PUBLISHED Published: 2009-07-13T14:00:00Z Last Updated: 2024-09-16T22:45:17.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in JNM Guestbook 3.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1831 - http://secunia.com/advisories/35760 - http://packetstormsecurity.org/0907-exploits/jnm-xss.txt
CVE ID: CVE-2009-2441 State: PUBLISHED Published: 2009-07-13T14:00:00 Last Updated: 2024-08-07T05:52:14.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ogp_show.php in Online Guestbook Pro 5.1 allows remote attackers to inject arbitrary web script or HTML via the entry parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35762 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51721 - http://www.vupen.com/english/advisories/2009/1830 - http://www.packetstormsecurity.com/0907-exploits/ogp51-xss.txt
CVE ID: CVE-2009-2442 State: PUBLISHED Published: 2009-07-13T14:00:00Z Last Updated: 2024-09-17T00:16:00.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in public/index.php in Linea21 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the search parameter in a resultats-recherche action. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1837 - http://secunia.com/advisories/35745 - http://www.packetstormsecurity.com/0907-exploits/linea-xss.txt
CVE ID: CVE-2009-2443 State: PUBLISHED Published: 2009-07-13T14:00:00 Last Updated: 2024-08-07T05:52:14.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siteframe 3.2.3, and other 3.2.x versions, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35761 - http://www.packetstormsecurity.org/0907-exploits/siteframe-sqlphpinfo.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/51579 - http://osvdb.org/55683 - http://www.securityfocus.com/bid/35598 - http://www.vupen.com/english/advisories/2009/1822
CVE ID: CVE-2009-2444 State: PUBLISHED Published: 2009-07-13T14:00:00 Last Updated: 2024-08-07T05:52:14.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in maillinglist/setup/step1.php.inc in ADbNewsSender before 1.5.6, and 2.0 before RC2, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the path_to_lang parameter to setup/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://r00tsecurity.org/forums/index.php?showtopic=9460 - http://www.vupen.com/english/advisories/2009/1808 - http://sourceforge.net/project/shownotes.php?release_id=694644 - http://sourceforge.net/apps/manti
dvisories/2009/1808 - http://sourceforge.net/project/shownotes.php?release_id=694644 - http://sourceforge.net/apps/mantisbt/adbnewssender/view.php?id=22 - http://www.securityfocus.com/bid/35596 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51720 - http://secunia.com/advisories/35845
CVE ID: CVE-2009-2445 State: PUBLISHED Published: 2009-07-13T17:00:00 Last Updated: 2024-08-07T05:52:14.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle iPlanet Web Server (formerly Sun Java System Web Server or Sun ONE Web Server) 6.1 before SP12, and 7.0 through Update 6, when running on Windows, allows remote attackers to read arbitrary JSP files via an alternate data stream syntax, as demonstrated by a .jsp::$DATA URI. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN47124169/index.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-266429-1 - http://secunia.com/advisories/35701 - http://www.vupen.com/english/adviso
om/search/document.do?assetkey=1-26-266429-1 - http://secunia.com/advisories/35701 - http://www.vupen.com/english/advisories/2009/1786 - http://jvndb.jvn.jp/jvndb/JVNDB-2009-002069 - http://www.osvdb.org/55655 - http://securitytracker.com/id?1022511 - http://isowarez.de/SunOne_Webserver.txt
CVE ID: CVE-2009-2446 State: PUBLISHED Published: 2009-07-13T17:00:00 Last Updated: 2024-08-07T05:52:14.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in a database name in a (1) COM_CREATE_DB or (2) COM_DROP_DB request. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1397-1 -
ty information. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1397-1 - http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0058.html - http://www.securityfocus.com/archive/1/504799/100/0/threaded - http://secunia.com/advisories/38517 - http://ubuntu.com/usn/usn-897-1 - http://www.redhat.com/support/errata/RHSA-2009-1289.html - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://securitytracker.com/id?1022533 - http://www.osvdb.org/55734 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11857 - http://www.vupen.com/english/advisories/2009/1857 - http://support.apple
efinition/oval%3Aorg.mitre.oval%3Adef%3A11857 - http://www.vupen.com/english/advisories/2009/1857 - http://support.apple.com/kb/HT4077 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51614 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:179 - http://www.securityfocus.com/bid/35609 - http://www.redhat.com/support/errata/RHSA-2010-0110.html - http://secunia.com/advisories/35767 - http://secunia.com/advisories/36566
CVE ID: CVE-2009-2447 State: PUBLISHED Published: 2009-07-13T17:00:00Z Last Updated: 2024-09-16T20:02:54.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ogp_show.php in Online Guestbook Pro 5.1 allow remote attackers to inject arbitrary web script or HTML via the (1) search or (2) display parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35762 - http://www.packetstormsecurity.com/0907-exploits/ogp51-morexss.txt
CVE ID: CVE-2009-2448 State: PUBLISHED Published: 2009-07-13T17:00:00Z Last Updated: 2024-09-16T22:30:49.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ogp_show.php in Online Guestbook Pro 5.1 allows remote attackers to inject arbitrary web script or HTML via the search_choice parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35762
CVE ID: CVE-2009-2449 State: PUBLISHED Published: 2009-07-13T17:00:00 Last Updated: 2024-08-07T05:52:14.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in maillinglist/admin/change_config.php in ADbNewsSender before 1.5.6 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the path_to_lang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=694644 - http://sourceforge.net/apps/mantisbt/adbnewssender/view.php?id=22 - http://www.securityfocus.com/bid/35596 - http://secunia.com/advisories/35845
CVE ID: CVE-2009-2450 State: PUBLISHED Published: 2009-07-13T17:00:00 Last Updated: 2024-08-07T05:52:14.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OAmon.sys kernel driver 3.1.0.0 and earlier in Tall Emu Online Armor Personal Firewall AV+ before 3.5.0.12, and Personal Firewall 3.5 before 3.5.0.14, allows local users to gain privileges via crafted METHOD_NEITHER IOCTL requests to \Device\OAmon containing arbitrary kernel addresses, as demonstrated using the 0x830020C3 IOCTL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50960 - http://www.securityfocus.com/bid/35227 - http://www.exploit-db.com/expl
ange.xforce.ibmcloud.com/vulnerabilities/50960 - http://www.securityfocus.com/bid/35227 - http://www.exploit-db.com/exploits/8875 - http://milw0rm.com/sploits/2009-OAmon_Exp.zip - http://www.ntinternals.org/ntiadv0806/ntiadv0806.html
CVE ID: CVE-2009-2451 State: PUBLISHED Published: 2009-07-14T14:00:00 Last Updated: 2024-08-07T05:52:14.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in MIM:InfiniX 1.2.003 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters in a calendar action, or (3) a search term in the search form. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34750 - http://www.securityfocus.com/archive/1/503046/100/0/threaded - http://www.securityfocus.com/archive/1/503480 - http://www.exploit-db.com/exploits/8558
CVE ID: CVE-2009-2452 State: PUBLISHED Published: 2009-07-14T14:00:00Z Last Updated: 2024-09-16T22:14:05.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Citrix Licensing 11.5 have unknown impact and attack vectors, related to "underlying components of the License Management Console." Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX120742 - http://secunia.com/advisories/34937 - http://www.securityfocus.com/bid/34759
CVE ID: CVE-2009-2453 State: PUBLISHED Published: 2009-07-14T14:00:00Z Last Updated: 2024-09-16T18:29:10.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix XenApp (formerly Presentation Server) 4.5 Hotfix Rollup Pack 3 does not apply an access policy when it is defined with the Access Gateway Advanced Edition filters, which allows attackers to bypass intended access restrictions via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX118792 - http://secunia.com/advisories/34865 - http://www.vupen.com/english/advisories/2009/1154 - http://www.securitytracker.com/id?1022114 - http://osvdb.org/53900 - http://
ww.vupen.com/english/advisories/2009/1154 - http://www.securitytracker.com/id?1022114 - http://osvdb.org/53900 - http://www.securityfocus.com/bid/34691
CVE ID: CVE-2009-2454 State: PUBLISHED Published: 2009-07-14T14:00:00Z Last Updated: 2024-09-16T20:21:47.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Citrix Web Interface 4.6, 5.0, and 5.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX120697 - http://www.securityfocus.com/bid/34761 - http://secunia.com/advisories/34868
CVE ID: CVE-2009-2455 State: PUBLISHED Published: 2009-07-14T14:00:00Z Last Updated: 2024-09-16T17:58:25.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in webadmin/admin.php in @mail 5.6.1 allow remote attackers to inject arbitrary web script or HTML via the (1) type and (2) func parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34403
CVE ID: CVE-2009-2456 State: PUBLISHED Published: 2009-07-14T20:16:00 Last Updated: 2024-08-07T05:52:14.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DS\NDSD component in Novell eDirectory 8.8 before SP5 allows remote attackers to cause a denial of service (ndsd core dump) via an LDAP request containing multiple . (dot) wildcard characters in the Relative Distinguished Name (RDN). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34160 - http://www.novell.com/support/viewContent.do?externalId=3426981 - http://osvdb.org/55848 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51705 - http://www.securityfocus.com/bid/35666
//osvdb.org/55848 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51705 - http://www.securityfocus.com/bid/35666 - http://www.vupen.com/english/advisories/2009/1883
CVE ID: CVE-2009-2457 State: PUBLISHED Published: 2009-07-14T20:16:00 Last Updated: 2024-08-07T05:52:14.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DS\NDSD component in Novell eDirectory 8.8 before SP5 allows remote attackers to cause a denial of service (crash) via a malformed bind LDAP packet. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/55849 - http://secunia.com/advisories/34160 - http://www.novell.com/support/viewContent.do?externalId=3426981 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51706 - http://www.securityfocus.com/bid/35666 - http://www.vupen.com/english/advisories/2009/1883
CVE ID: CVE-2009-2458 State: PUBLISHED Published: 2009-07-14T20:16:00 Last Updated: 2024-08-07T05:52:15.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun Fire V215 Server, when using XVR-100 graphic cards on system boards with part number 375-3463 and a hardware dash level -04 or later, allows remote attackers to cause a denial of service (panic) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51695 - http://www.securityfocus.com/bid/35661 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-257329-1
CVE ID: CVE-2009-2459 State: PUBLISHED Published: 2009-07-14T20:16:00 Last Updated: 2024-08-07T05:52:14.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in mimeTeX, when downloaded before 20090713, have unknown impact and attack vectors related to the (1) \environ, (2) \input, and (3) \counter TeX directives. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1875 - http://secunia.com/advisories/35752 - http://www.vupen.com/english/advisories/2010/0877 - http://scary.beasts.org/security/CESA-2009-009.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039314.
ry.beasts.org/security/CESA-2009-009.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039314.html
CVE ID: CVE-2009-2460 State: PUBLISHED Published: 2009-07-14T20:16:00 Last Updated: 2024-08-07T05:52:14.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in mathtex.cgi in mathTeX, when downloaded before 20090713, have unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1875 - http://www.securityfocus.com/archive/1/504919/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/51796 - http://secunia.com/advisories/35816 - http://www.ocert.org/advisories/ocert-2009-010.html - http://groups.google.com/group/comp.text.tex/brows
isories/35816 - http://www.ocert.org/advisories/ocert-2009-010.html - http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578
CVE ID: CVE-2009-2461 State: PUBLISHED Published: 2009-07-14T20:16:00 Last Updated: 2024-08-07T05:52:14.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1875 - http://www.securityfocus.com/archive/1/504919/100/0/threaded - http://secunia.com/advisories/35816 - http://www.ocert.org/advisories/ocert-2009-010.html - http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578 - https://exchange.xfor
09-010.html - http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51797
CVE ID: CVE-2009-2462 State: PUBLISHED Published: 2009-07-22T18:00:00 Last Updated: 2024-08-07T05:52:15.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: The browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) the frame chain and synchronous events, (2) a SetMayHaveFrame assertion and nsCSSFrameConstructor::CreateFloatingLetterFrame, (3) nsCSSFrameConstructor::ConstructFrame, (4) the child list and initial reflow, (5) GetLastSpecialSibling, (6) nsFrameManager::GetPrimaryFrameFor and MathML, (7) nsFrame::GetBoxAs
and initial reflow, (5) GetLastSpecialSibling, (6) nsFrameManager::GetPrimaryFrameFor and MathML, (7) nsFrame::GetBoxAscent, (8) nsCSSFrameConstructor::AdjustParentFrame, (9) nsDOMOfflineResourceList, and (10) nsContentUtils::ComparePosition. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1 - http://www.redhat.com/support/errata/RHSA-2010-0153.html - https://bugzilla.mozilla.org/show_bug.cgi?id=463350 - https://bugzilla.mozilla.org/show_bug.cgi?id=468211 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html - htt
zilla.org/show_bug.cgi?id=468211 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html - http://secunia.com/advisories/36145 - http://secunia.com/advisories/35944 - https://bugzilla.mozilla.org/show_bug.cgi?id=461861 - http://www.vupen.com/english/advisories/2010/0650 - http://secunia.com/advisories/35943 - https://bugzilla.mozilla.org/show_bug.cgi?id=442227 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html - http://rhn.redhat.com/errata/RHSA-2009-1162.html - http://www.mozilla.org/security/announce/2009/mfsa2009-34.html - http://www.redhat.com/support/errata/RHSA-2010-0154.html - https://oval.cisecurity.org/repository/search/definition/
l - http://www.redhat.com/support/errata/RHSA-2010-0154.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10906 - https://bugzilla.mozilla.org/show_bug.cgi?id=466763 - http://www.securityfocus.com/bid/35758 - http://www.vupen.com/english/advisories/2009/2152 - http://secunia.com/advisories/36005 - https://bugzilla.mozilla.org/show_bug.cgi?id=445177 - http://rhn.redhat.com/errata/RHSA-2009-1163.html - https://bugzilla.mozilla.org/show_bug.cgi?id=472668 - http://secunia.com/advisories/35947 - http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html - https://bugzilla.mozilla.org/show_bug.cgi?id=472950 - https://bugzilla.mozilla.org/
ity-announce/2009-08/msg00002.html - https://bugzilla.mozilla.org/show_bug.cgi?id=472950 - https://bugzilla.mozilla.org/show_bug.cgi?id=491134 - http://secunia.com/advisories/35914 - http://www.vupen.com/english/advisories/2009/1972 - https://bugzilla.mozilla.org/show_bug.cgi?id=413085
CVE ID: CVE-2009-2463 State: PUBLISHED Published: 2009-07-22T18:00:00 Last Updated: 2024-08-07T05:52:14.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox before 3.0.12, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors that trigger buffer overflows. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1 - htt
st Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1 - http://www.redhat.com/support/errata/RHSA-2010-0153.html - http://secunia.com/advisories/39001 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10369 - https://bugzilla.mozilla.org/show_bug.cgi?id=492779 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01032.html - http://secunia.com/advisories/36145 - http://secunia.com/advisories/35944 - http://www.vupen.com/english/advisories/2010/0648 - http://www.vupen.com/english/advisories/2010/0650 - http
ies/35944 - http://www.vupen.com/english/advisories/2010/0648 - http://www.vupen.com/english/advisories/2010/0650 - http://secunia.com/advisories/35943 - http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html - http://secunia.com/advisories/38977 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html - http://rhn.redhat.com/errata/RHSA-2009-1162.html - http://www.mozilla.org/security/announce/2009/mfsa2009-34.html - http://www.redhat.com/support/errata/RHSA-2010-0154.html - http://www.securityfocus.com/bid/35758 - http://www.vupen.com/english/advisories/2009/2152 - http://secunia.com/advisories/36005 - http://rhn.redhat.com/errata/RHSA-2009-1163.html
om/english/advisories/2009/2152 - http://secunia.com/advisories/36005 - http://rhn.redhat.com/errata/RHSA-2009-1163.html - http://secunia.com/advisories/35947 - http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html - http://www.ubuntu.com/usn/USN-915-1 - http://secunia.com/advisories/35914 - http://www.vupen.com/english/advisories/2009/1972 - http://www.mozilla.org/security/announce/2010/mfsa2010-07.html