Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
40 - http://marc.info/?l=bugtraq&m=127678688104458&w=2 - http://marc.info/?l=openssl-cvs&m=126692170906712&w=2 - http://secunia.com/advisories/38761 - http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html - http://www.securityfocus.com/bid/38562 - https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9790 - http://marc.info/?l=openssl-cvs&m=126692180606861&w=2 - http://www.redhat.com/support/errata/RHSA-2010-0977.html - http://www.vupen.com/english/advisories/2010/0839 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:076 - http://marc.info/?l=bu
/english/advisories/2010/0839 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:076 - http://marc.info/?l=bugtraq&m=127128920008563&w=2 - https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html - http://www.ubuntu.com/usn/USN-1003-1 - http://secunia.com/advisories/39932 - http://www.vupen.com/english/advisories/2010/0933 - http://www.redhat.com/support/errata/RHSA-2011-0896.html - http://marc.info/?l=bugtraq&m=127128920008563&w=2 - https://kb.bluecoat.com/index?page=content&id=SA50 - http://www.vupen.com/english/advisories/2010/1216 - http://secunia.com/advisories/42733 - http://secunia.com/advisories/37291 - http://lists.fedoraproject.org/pipermail/packag
p://secunia.com/advisories/42733 - http://secunia.com/advisories/37291 - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038587.html - http://aix.software.ibm.com/aix/efixes/security/openssl_advisory.asc - http://packetstormsecurity.com/files/153392/ABB-HMI-Outdated-Software-Components.html
CVE ID: CVE-2009-3246 State: PUBLISHED Published: 2009-09-18T20:00:00 Last Updated: 2024-08-07T06:22:24.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in spnews.php in MyBuxScript PTC-BUX allows remote attackers to execute arbitrary SQL commands via the id parameter in an spnews action to the default URI. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2495 - http://www.exploit-db.com/exploits/9555 - http://www.packetstormsecurity.com/0909-exploits/mybuxscript-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabil
- http://www.packetstormsecurity.com/0909-exploits/mybuxscript-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/52945
CVE ID: CVE-2009-3247 State: PUBLISHED Published: 2009-09-18T20:00:00 Last Updated: 2024-08-07T06:22:23.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Activities module in vtiger CRM 5.0.4 allows remote attackers to inject arbitrary web script or HTML via the action parameter to phprint.php. NOTE: the query_string vector is already covered by CVE-2008-3101.3. Additional Analyst Notes: - CVE Program Container: References: - http://www.ush.it/2009/08/18/vtiger-crm-504-multiple-vulnerabilities/ - http://www.ush.it/team/ush/hack-vtigercrm_504/vtigercrm_504.txt - http://www.osvdb.org/57240 - http://www.exploit-db.com/exploits/9450 -
t/team/ush/hack-vtigercrm_504/vtigercrm_504.txt - http://www.osvdb.org/57240 - http://www.exploit-db.com/exploits/9450 - http://www.securityfocus.com/bid/36062 - http://secunia.com/advisories/36309 - http://www.vupen.com/english/advisories/2009/2319
CVE ID: CVE-2009-3248 State: PUBLISHED Published: 2009-09-18T20:00:00 Last Updated: 2024-08-07T06:22:24.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the RSS module in vtiger CRM 5.0.4 allows remote attackers to hijack the authentication of Admin users for requests that modify the news feed system via the rssurl parameter in a Save action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.ush.it/2009/08/18/vtiger-crm-504-multiple-vulnerabilities/ - http://www.ush.it/team/ush/hack-vtigercrm_504/vtigercrm_504.txt - http://www.exploit-db.com/exploits/9450 - http://marc.info/?l=bugtraq&m=1
eam/ush/hack-vtigercrm_504/vtigercrm_504.txt - http://www.exploit-db.com/exploits/9450 - http://marc.info/?l=bugtraq&m=125060676515670&w=2 - http://www.securityfocus.com/bid/36062 - http://www.osvdb.org/57238 - http://secunia.com/advisories/36309 - http://www.vupen.com/english/advisories/2009/2319
CVE ID: CVE-2009-3249 State: PUBLISHED Published: 2009-09-18T20:00:00 Last Updated: 2024-08-07T06:22:23.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in vtiger CRM 5.0.4 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the module parameter to graph.php; or the (2) module or (3) file parameter to include/Ajax/CommonAjax.php, reachable through modules/Campaigns/CampaignsAjax.php, modules/SalesOrder/SalesOrderAjax.php, modules/System/SystemAjax.php, modules/Products/ProductsAjax.php, modules/uploads/uploadsAjax.php, modules/Dashboard/DashboardAjax.php, modules/Potentials/PotentialsAjax.ph
uctsAjax.php, modules/uploads/uploadsAjax.php, modules/Dashboard/DashboardAjax.php, modules/Potentials/PotentialsAjax.php, modules/Notes/NotesAjax.php, modules/Faq/FaqAjax.php, modules/Quotes/QuotesAjax.php, modules/Utilities/UtilitiesAjax.php, modules/Calendar/ActivityAjax.php, modules/Calendar/CalendarAjax.php, modules/PurchaseOrder/PurchaseOrderAjax.php, modules/HelpDesk/HelpDeskAjax.php, modules/Invoice/InvoiceAjax.php, modules/Accounts/AccountsAjax.php, modules/Reports/ReportsAjax.php, modules/Contacts/ContactsAjax.php, and modules/Portal/PortalAjax.php; and allow remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the step parameter in an Impor
te authenticated users to include and execute arbitrary local files via a .. (dot dot) in the step parameter in an Import action to the (4) Accounts, (5) Contacts, (6) HelpDesk, (7) Leads, (8) Potentials, (9) Products, or (10) Vendors module, reachable through index.php and related to modules/Import/index.php and multiple Import.php files. Additional Analyst Notes: - CVE Program Container: References: - http://www.ush.it/2009/08/18/vtiger-crm-504-multiple-vulnerabilities/ - http://securityreason.com/securityalert/8118 - http://www.ush.it/team/ush/hack-vtigercrm_504/vtigercrm_504.txt - http://www.osvdb.org/57239 - http://www.exploit-db.com/exploits/9450 - http://marc.info/?l=bugtraq&m=1250606
m_504.txt - http://www.osvdb.org/57239 - http://www.exploit-db.com/exploits/9450 - http://marc.info/?l=bugtraq&m=125060676515670&w=2 - http://www.securityfocus.com/bid/36062 - http://secunia.com/advisories/36309 - http://www.vupen.com/english/advisories/2009/2319
CVE ID: CVE-2009-3250 State: PUBLISHED Published: 2009-09-18T20:00:00 Last Updated: 2024-08-07T06:22:24.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: The saveForwardAttachments procedure in the Compose Mail functionality in vtiger CRM 5.0.4 allows remote authenticated users to execute arbitrary code by composing an e-mail message with an attachment filename ending in (1) .php in installations based on certain Apache HTTP Server configurations, (2) .php. on Windows, or (3) .php/ on Linux, and then making a direct request to a certain pathname under storage/. Additional Analyst Notes: - CVE Program Container: References: - http://www.ush.it/2009/08/18/vtiger-crm-504-multiple-
. Additional Analyst Notes: - CVE Program Container: References: - http://www.ush.it/2009/08/18/vtiger-crm-504-multiple-vulnerabilities/ - http://www.ush.it/team/ush/hack-vtigercrm_504/vtigercrm_504.txt - http://www.exploit-db.com/exploits/9450 - http://marc.info/?l=bugtraq&m=125060676515670&w=2 - http://www.securityfocus.com/bid/36062 - http://secunia.com/advisories/36309 - http://www.osvdb.org/57237 - http://www.vupen.com/english/advisories/2009/2319
CVE ID: CVE-2009-3251 State: PUBLISHED Published: 2009-09-18T20:00:00Z Last Updated: 2024-09-17T02:01:47.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: include/utils/ListViewUtils.php in vtiger CRM before 5.1.0 allows remote authenticated users to bypass intended access restrictions and read the (1) visibility, (2) location, and (3) recurrence fields of a calendar via a custom view. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/57241 - http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/4208 - http://secunia.com/advisories/36309 - http://trac.vtiger.com/cgi-bin/trac.cgi/changeset/12407
CVE ID: CVE-2009-3252 State: PUBLISHED Published: 2009-09-18T20:00:00 Last Updated: 2024-08-07T06:22:24.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in news.php in Rock Band CMS 0.10 allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) id parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52940 - http://www.exploit-db.com/exploits/9553 - http://www.vupen.com/english/advisories/2009/2494 - http://secunia.com/advisories/36517
CVE ID: CVE-2009-3253 State: PUBLISHED Published: 2009-09-18T20:00:00 Last Updated: 2024-08-07T06:22:23.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in TriceraSoft Swift Ultralite 1.032 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long string in a .M3U playlist file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36508 - http://www.exploit-db.com/exploits/9546
CVE ID: CVE-2009-3254 State: PUBLISHED Published: 2009-09-18T20:00:00 Last Updated: 2024-08-07T06:22:23.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Ultimate Player 1.56 beta allow remote attackers to execute arbitrary code via a long string in a (1) .m3u or (2) .upl playlist file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2491 - http://www.exploit-db.com/exploits/9548
CVE ID: CVE-2009-3255 State: PUBLISHED Published: 2009-09-18T20:00:00 Last Updated: 2024-08-07T06:22:24.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in RASH Quote Management System (RQMS) 1.2.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter in an admin action to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/57468 - http://packetstormsecurity.org/0908-exploits/rqms-bypass.txt - http://www.vupen.com/english/advisories/2009/2446 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52895 - http://secunia.com/adviso
om/english/advisories/2009/2446 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52895 - http://secunia.com/advisories/36477
CVE ID: CVE-2009-3256 State: PUBLISHED Published: 2009-09-18T20:00:00Z Last Updated: 2024-09-17T04:09:50.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in include/ajax/blogInfo.php in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HTML via the URI, as demonstrated by a SCRIPT element in an arbitrary parameter such as the asd parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0908-exploits/livestreet-xss.txt
CVE ID: CVE-2009-3257 State: PUBLISHED Published: 2009-09-18T21:00:00Z Last Updated: 2024-09-16T19:57:02.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: vtiger CRM before 5.1.0 allows remote authenticated users to bypass the permissions on the (1) Account Billing Address and (2) Shipping Address fields in a profile by creating a Sales Order (SO) associated with that profile. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36309 - http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/5055
CVE ID: CVE-2009-3258 State: PUBLISHED Published: 2009-09-18T21:00:00Z Last Updated: 2024-09-17T01:21:10.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: vtiger CRM before 5.1.0 allows remote authenticated users, with certain View privileges, to delete (1) attachments, (2) reports, (3) filters, (4) views, and (5) tickets; insert (6) attachments, (7) reports, (8) filters, (9) views, and (10) tickets; and edit (11) reports, (12) filters, (13) views, and (14) tickets via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://forums.vtiger.com/viewtopic.php?t=16756 - http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/5249 - http://forums.vtiger.co
/forums.vtiger.com/viewtopic.php?t=16756 - http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/5249 - http://forums.vtiger.com/viewtopic.php?t=15094 - http://secunia.com/advisories/36309
CVE ID: CVE-2009-3259 State: PUBLISHED Published: 2009-09-18T21:00:00 Last Updated: 2024-08-07T06:22:24.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in RASH Quote Management System (RQMS) 1.2.2 allow remote attackers to execute arbitrary SQL commands via (1) the search parameter in a search action, (2) the quote parameter in a quote addition, or (3) a User_Name cookie in unspecified administrative actions. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/57469 - http://osvdb.org/57470 - ht
n. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/57469 - http://osvdb.org/57470 - http://osvdb.org/57467 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52895 - http://secunia.com/advisories/36477
CVE ID: CVE-2009-3260 State: PUBLISHED Published: 2009-09-18T21:00:00Z Last Updated: 2024-09-16T23:00:36.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HTML via the header of the topic in a comment. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2471 - http://packetstormsecurity.org/0908-exploits/livestreet-xss.txt
CVE ID: CVE-2009-3261 State: PUBLISHED Published: 2009-09-18T21:00:00Z Last Updated: 2024-09-16T18:14:12.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: update/update_0.1.2_to_0.2.php in LiveStreet 0.2 does not require administrative authentication, which allows remote attackers to perform DROP TABLE operations via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0908-exploits/livestreet-xss.txt
CVE ID: CVE-2009-3262 State: PUBLISHED Published: 2009-09-18T21:00:00Z Last Updated: 2024-09-17T03:32:46.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Self Service UI (SSUI) in IBM Tivoli Identity Manager (ITIM) 5.0.0.5 allows remote authenticated users to inject arbitrary web script or HTML via the last name field in a profile. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36511 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ54747 - http://securitytracker.com/id?1022837
CVE ID: CVE-2009-3263 State: PUBLISHED Published: 2009-09-18T22:00:00 Last Updated: 2024-08-07T06:22:24.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Google Chrome 2.x and 3.x before 3.0.195.21 allows remote attackers to inject arbitrary web script or HTML via a (1) RSS or (2) Atom feed, related to the rendering of the application/rss+xml content type as XML "active content." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/506517/100/0/threaded - http://securethoughts.com/2009/09/exploiting-chrome-and-operas-inbuilt-atomrss-reader-with-script-execution-and-more/ - http://www.
rethoughts.com/2009/09/exploiting-chrome-and-operas-inbuilt-atomrss-reader-with-script-execution-and-more/ - http://www.securityfocus.com/bid/36416 - http://googlechromereleases.blogspot.com/2009/09/stable-channel-update.html - http://code.google.com/p/chromium/issues/detail?id=21238 - http://secunia.com/advisories/36770
CVE ID: CVE-2009-3264 State: PUBLISHED Published: 2009-09-18T22:00:00 Last Updated: 2024-08-07T06:22:24.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: The getSVGDocument method in Google Chrome before 3.0.195.21 omits an unspecified "access check," which allows remote web servers to bypass the Same Origin Policy and conduct cross-site scripting attacks via unknown vectors, related to a user's visit to a different web server that hosts an SVG document. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/58193 - http://www.securityfocus.com/bid/36416 - http://googlechromereleases.blogspot.com/2009/09/stable-channel-update.html - http://secunia.com
tyfocus.com/bid/36416 - http://googlechromereleases.blogspot.com/2009/09/stable-channel-update.html - http://secunia.com/advisories/36770 - http://code.google.com/p/chromium/issues/detail?id=21338
CVE ID: CVE-2009-3265 State: PUBLISHED Published: 2009-09-18T22:00:00 Last Updated: 2024-08-07T06:22:24.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Opera 9 and 10 allows remote attackers to inject arbitrary web script or HTML via a (1) RSS or (2) Atom feed, related to the rendering of the application/rss+xml content type as "scripted content." NOTE: the vendor reportedly considers this behavior a "design feature," not a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/506517/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.m
ecurityfocus.com/archive/1/506517/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6370 - http://securethoughts.com/2009/09/exploiting-chrome-and-operas-inbuilt-atomrss-reader-with-script-execution-and-more/
CVE ID: CVE-2009-3266 State: PUBLISHED Published: 2009-09-18T22:00:00 Last Updated: 2024-08-07T06:22:24.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 10.01 does not properly restrict HTML in a (1) RSS or (2) Atom feed, which allows remote attackers to conduct cross-site scripting (XSS) attacks, and conduct cross-zone scripting attacks involving the Feed Subscription Page to read feeds or create feed subscriptions, via a crafted feed, related to the rendering of the application/rss+xml content type as "scripted content." Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/support/kb/view/939/ - http://www.vupen.com/english/advis
s: - CVE Program Container: References: - http://www.opera.com/support/kb/view/939/ - http://www.vupen.com/english/advisories/2009/3073 - http://www.securityfocus.com/archive/1/506517/100/0/threaded - http://archives.neohapsis.com/archives/bugtraq/2009-10/0289.html - http://securethoughts.com/2009/10/hijacking-operas-native-page-using-malicious-rss-payloads/ - http://www.osvdb.org/59358 - http://www.opera.com/docs/changelogs/unix/1001/ - http://secunia.com/advisories/37182 - http://www.securityfocus.com/bid/36850 - http://securethoughts.com/2009/09/exploiting-chrome-and-operas-inbuilt-atomrss-reader-with-script-execution-and-more/ - http://www.securityfocus.com/bid/36418 - https://exchange.x
ras-inbuilt-atomrss-reader-with-script-execution-and-more/ - http://www.securityfocus.com/bid/36418 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54021 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6314 - http://www.opera.com/docs/changelogs/mac/1001/ - http://www.opera.com/docs/changelogs/windows/1001/
CVE ID: CVE-2009-3267 State: PUBLISHED Published: 2009-09-18T22:00:00 Last Updated: 2024-08-07T06:22:24.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 6.0.2900.2180, and 7.0.6000.16711, allows remote attackers to cause a denial of service (CPU consumption) via an automatically submitted form containing a KEYGEN element, a related issue to CVE-2009-1828. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5519 - http://www.securityfocus.com/archive/1/506328/100/100/threaded - http://websecurity.com.ua/3194/
CVE ID: CVE-2009-3268 State: PUBLISHED Published: 2009-09-18T22:00:00 Last Updated: 2024-08-07T06:22:24.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome 1.0.154.48 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an automatically submitted form containing a KEYGEN element, a related issue to CVE-2009-1828. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/506328/100/100/threaded - http://websecurity.com.ua/3194/
CVE ID: CVE-2009-3269 State: PUBLISHED Published: 2009-09-18T22:00:00 Last Updated: 2024-08-07T06:22:24.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 9.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a series of automatic submissions of a form containing a KEYGEN element, a related issue to CVE-2009-1828. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/506328/100/100/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6358 - http://websecurity.com.ua/3194/
CVE ID: CVE-2009-3270 State: PUBLISHED Published: 2009-09-18T22:00:00 Last Updated: 2024-08-07T06:22:23.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7 through 7.0.6000.16711 allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in a loop, aka a "printing DoS attack," possibly a related issue to CVE-2009-0821. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6281 - http://websecurity.com.ua/2872/ - http://www.securityfocus.com/archive/1/506328/100/100/threaded - http://www.securityfocus.com/
ebsecurity.com.ua/2872/ - http://www.securityfocus.com/archive/1/506328/100/100/threaded - http://www.securityfocus.com/bid/79354
CVE ID: CVE-2009-3271 State: PUBLISHED Published: 2009-09-21T19:00:00 Last Updated: 2024-08-07T06:22:24.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari on iPhone OS 3.0.1 allows remote attackers to cause a denial of service (application crash) via a long tel: URL in the SRC attribute of an IFRAME element. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36386 - http://www.exploit-db.com/exploits/9666 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53251
CVE ID: CVE-2009-3272 State: PUBLISHED Published: 2009-09-21T19:00:00 Last Updated: 2024-08-07T06:22:24.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack consumption vulnerability in WebKit.dll in WebKit in Apple Safari 3.2.3, and possibly other versions before 4.1.2, allows remote attackers to cause a denial of service (application crash) via JavaScript code that calls eval on a long string composed of A/ sequences. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://www.exploit-db.com/e
ies/2011/0212 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://www.exploit-db.com/exploits/9606