Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
archives/security-announce/2010/Jun/msg00000.html - http://secunia.com/advisories/36096 - http://secunia.com/advisories/40196 - http://secunia.com/advisories/40105 - http://www.vupen.com/english/advisories/2010/1373 - http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/59162 - http://lists.apple.com/archives/security-announce/2010//Jun/msg00002.html - http://www.vupen.com/english/advisories/2010/1512 - http://www.securitytracker.com/id?1022674 - http://www.securityfocus.com/bid/35954 - http://osvdb.org/56845 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7499 - http://support
org/56845 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7499 - http://support.apple.com/kb/HT4196 - http://www.vupen.com/english/advisories/2009/2172 - http://www.us-cert.gov/cas/techalerts/TA09-218A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/52419
CVE ID: CVE-2009-1727 State: PUBLISHED Published: 2009-08-06T16:00:00 Last Updated: 2024-08-07T05:20:35.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X 10.5 before 10.5.8 makes it easier for user-assisted remote attackers to execute arbitrary JavaScript via a web page that offers a download with a Content-Type value that is not on the list of possibly unsafe content types for Safari. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3757 - http://secunia.com/advisories/36096 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52420 - http://lists.apple.com/archive
cunia.com/advisories/36096 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52420 - http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html - http://www.securityfocus.com/bid/35954 - http://osvdb.org/56844 - http://www.vupen.com/english/advisories/2009/2172 - http://www.us-cert.gov/cas/techalerts/TA09-218A.html
CVE ID: CVE-2009-1728 State: PUBLISHED Published: 2009-08-06T16:00:00 Last Updated: 2024-08-07T05:20:35.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Image RAW in Apple Mac OS X 10.5 before 10.5.8, and 10.4 before Digital Camera RAW Compatibility Update 2.6, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Canon RAW image. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3757 - http://secunia.com/advisories/36096 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52423 - http://lists.apple.com/archives/security-announce/2009/Aug/ms
tps://exchange.xforce.ibmcloud.com/vulnerabilities/52423 - http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html - http://osvdb.org/56843 - http://www.securitytracker.com/id?1022674 - http://www.securityfocus.com/bid/35954 - http://www.vupen.com/english/advisories/2009/2172 - http://www.us-cert.gov/cas/techalerts/TA09-218A.html
CVE ID: CVE-2009-1729 State: PUBLISHED Published: 2009-05-21T14:00:00 Last Updated: 2024-08-07T05:20:35.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express 6 2005Q4 (aka 6.2) and 6.3 allow remote attackers to inject arbitrary web script or HTML via (1) the abperson_displayName parameter to uwc/abs/search.xml in the Add Contact implementation in the Personal Address Book component or (2) the temporaryCalendars parameter to uwc/base/UWCMain. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34155 - http://osvdb.org/54609 - http://www.vupen.co
E Program Container: References: - http://www.securityfocus.com/bid/34155 - http://osvdb.org/54609 - http://www.vupen.com/english/advisories/2009/1389 - http://www.securityfocus.com/bid/34154 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50658 - http://www.securityfocus.com/archive/1/503675/100/0/threaded - http://sunsolve.sun.com/search/document.do?assetkey=1-66-258068-1 - http://seclists.org/fulldisclosure/2009/May/0177.html - http://sunsolve.sun.com/search/document.do?assetkey=1-21-122793-26-1 - http://www.coresecurity.com/content/sun-communications-express - http://secunia.com/advisories/32474 - http://securitytracker.com/alerts/2009/May/1022266.html - http://osvdb.org/54610
CVE ID: CVE-2009-1730 State: PUBLISHED Published: 2009-05-20T18:00:00 Last Updated: 2024-08-07T05:20:35.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read or modify arbitrary files via directory traversal sequences in the (1) GET or (2) PUT command. Additional Analyst Notes: - CVE Program Container: References: - http://www.princeofnigeria.org/blogs/index.php/2009/05/17/netdecision-tftp-server-4-2-tftp-directo?blog=1 - http://secunia.com/advisories/35131 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50574 - http://www.securityfocus.com/bid/35002
CVE ID: CVE-2009-1731 State: PUBLISHED Published: 2009-05-20T18:00:00 Last Updated: 2024-08-07T05:20:35.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in panel/index.php in MLFFAT 2.1 allows remote attackers to execute arbitrary SQL commands via a base64-encoded supervisor cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34982 - http://www.vupen.com/english/advisories/2009/1308 - http://securityreason.com/exploitalert/6198 - http://www.sebug.net/exploit/11292/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/50526
CVE ID: CVE-2009-1732 State: PUBLISHED Published: 2009-05-20T19:00:00 Last Updated: 2024-08-07T05:20:35.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/usermanager in IPplan 4.91a allows remote attackers to inject arbitrary web script or HTML via the grp parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34985 - http://www.debian.org/security/2009/dsa-1827 - http://holisticinfosec.org/content/view/113/45/ - http://secunia.com/advisories/35714 - http://osvdb.org/54600 - http://www.securityfocus.com/bid/35037
CVE ID: CVE-2009-1733 State: PUBLISHED Published: 2009-05-20T19:00:00 Last Updated: 2024-08-07T05:20:35.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in IPplan 4.91a allows remote attackers to hijack the authentication of administrators for requests that (1) change the password, (2) add users, or (3) delete users via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54601 - http://secunia.com/advisories/34985 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50632 - http://holisticinfosec.org/content/view/113/45/
CVE ID: CVE-2009-1734 State: PUBLISHED Published: 2009-05-20T19:00:00 Last Updated: 2024-08-07T05:20:35.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in listing_video.php in VidSharePro allows remote attackers to execute arbitrary SQL commands via the catid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8737 - http://osvdb.org/54598 - http://secunia.com/advisories/35149 - http://www.securityfocus.com/bid/35033
CVE ID: CVE-2009-1735 State: PUBLISHED Published: 2009-05-20T19:00:00 Last Updated: 2024-08-07T05:20:35.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in VidSharePro allows remote attackers to inject arbitrary web script or HTML via the searchtxt parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50635 - https://www.exploit-db.com/exploits/8737 - http://osvdb.org/54599 - http://secunia.com/advisories/35149 - http://www.securityfocus.com/bid/35033
CVE ID: CVE-2009-1736 State: PUBLISHED Published: 2009-05-20T19:00:00 Last Updated: 2024-08-07T05:20:35.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the GridSupport (GS) Ticket System (com_gsticketsystem) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a viewCategory action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35025 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50624 - https://www.exploit-db.com/exploits/8731
CVE ID: CVE-2009-1737 State: PUBLISHED Published: 2009-05-20T19:00:00 Last Updated: 2024-08-07T05:20:35.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in bom.php in MyPic 2.1 allows remote attackers to list files in arbitrary directories via a .. (dot dot) in the dir parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50621 - http://hi.baidu.com/hirfire/blog/item/c3c0f6dda3ca47d18d10291a.html - http://secunia.com/advisories/35092 - http://www.osvdb.org/54565 - http://www.securityfocus.com/bid/35030
CVE ID: CVE-2009-1738 State: PUBLISHED Published: 2009-05-20T19:00:00 Last Updated: 2024-08-07T05:20:35.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Feed Block 6.x-1.x before 6.x-1.1, a module for Drupal, allows remote authenticated users with administrator feed permissions to inject arbitrary web script or HTML via unspecified vectors in "aggregator items." Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/453098 - http://www.osvdb.org/54429 - http://secunia.com/advisories/35044 - http://www.vupen.com/english/advisories/2009/1319 - http://drupal.org/node/461706 - http://www.securityfocus.com
35044 - http://www.vupen.com/english/advisories/2009/1319 - http://drupal.org/node/461706 - http://www.securityfocus.com/bid/34953 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50521
CVE ID: CVE-2009-1739 State: PUBLISHED Published: 2009-05-20T19:00:00 Last Updated: 2024-08-07T05:20:35.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: PAD Site Scripts 3.6 allows remote attackers to bypass authentication and gain privileges as other users, including administrative privileges, by setting the authuser cookie parameter to a valid username. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35027 - http://osvdb.org/54593 - https://www.exploit-db.com/exploits/8735 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50622 - http://secunia.com/advisories/35155
CVE ID: CVE-2009-1740 State: PUBLISHED Published: 2009-05-20T19:00:00 Last Updated: 2024-08-07T05:20:35.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in the D-Link MPEG4 Viewer ActiveX Control (csviewer.ocx) 2.11.918.2006 allow remote attackers to execute arbitrary code via a long argument to the (1) SetFilePath and (2) SetClientCookie methods. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54458 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50556 - http://www.securityfocus.com/bid
- http://osvdb.org/54458 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50556 - http://www.securityfocus.com/bid/34990 - http://secunia.com/advisories/35066
CVE ID: CVE-2009-1741 State: PUBLISHED Published: 2009-05-20T19:00:00 Last Updated: 2024-08-07T05:20:35.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in login.php in DM FileManager 3.9.2, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35167 - https://www.exploit-db.com/exploits/8741 - http://osvdb.org/54597 - http://www.securityfocus.com/bid/35035
CVE ID: CVE-2009-1742 State: PUBLISHED Published: 2009-05-20T19:00:00 Last Updated: 2024-08-07T05:20:35.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: code.php in PC4Arb Pc4 Uploader 9.0 and earlier makes it easier for remote attackers to conduct SQL injection attacks via crafted keyword sequences that are removed from a filter in the id parameter in a banner action, as demonstrated via the "UNIunionON" string, which is collapsed into "UNION" by the filter_sql function. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54572 - http://secunia.com/advisories/35122 - https://www.exploit-db.com/exploits/8709 - http://www.securityfocus.com/bid/3500
- http://secunia.com/advisories/35122 - https://www.exploit-db.com/exploits/8709 - http://www.securityfocus.com/bid/35004 - http://www.vupen.com/english/advisories/2009/1364 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50586
CVE ID: CVE-2009-1743 State: PUBLISHED Published: 2009-05-21T00:00:00 Last Updated: 2024-08-07T05:20:35.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in InstallHFZ.exe 6.5.201.0 in Pinnacle Hollywood Effects 6, a module in Pinnacle Systems Pinnacle Studio 12, allows remote attackers to create and overwrite arbitrary files via a filename containing a ..\ (dot dot backslash) sequence in a Hollywood FX Compressed Archive (.hfz) file. NOTE: this can be leveraged for code execution by decompressing a file to a Startup folder. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container:
OTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35078 - https://www.exploit-db.com/exploits/8670 - http://www.securityfocus.com/archive/1/503476/100/0/threaded - http://www.securityfocus.com/bid/34936 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50510 - http://retrogod.altervista.org/9sg_pinnacle_studio_12_hfz.htm - http://osvdb.org/54430
CVE ID: CVE-2009-1744 State: PUBLISHED Published: 2009-05-21T01:00:00 Last Updated: 2024-08-07T05:27:53.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: InstallHFZ.exe 6.5.201.0 in Pinnacle Hollywood Effects 6, a module in Pinnacle Systems Pinnacle Studio 12, allows remote attackers to cause a denial of service (application crash) via a crafted Hollywood FX Compressed Archive (.hfz) file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8670 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50856 - http://www.securityfocus.com/bid/35137
CVE ID: CVE-2009-1745 State: PUBLISHED Published: 2009-05-21T15:00:00 Last Updated: 2024-08-07T05:27:53.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, has a default root password hash, and permits password-based root logins over SSH, which makes it easier for remote attackers to obtain access. Additional Analyst Notes: - CVE Program Container: References: - http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt - http://www.securityfocus.com/archive/1/503649/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/50852
CVE ID: CVE-2009-1746 State: PUBLISHED Published: 2009-05-21T15:00:00 Last Updated: 2024-08-07T05:27:53.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in berita.php in Dian Gemilang DGNews 3.0 Beta allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54658 - https://www.exploit-db.com/exploits/8727 - http://www.securityfocus.com/bid/35016
CVE ID: CVE-2009-1747 State: PUBLISHED Published: 2009-05-21T18:00:00 Last Updated: 2024-08-07T05:27:53.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in 26th Avenue bSpeak 1.10 allows remote attackers to execute arbitrary SQL commands via the forumid parameter in a post action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35049 - https://www.exploit-db.com/exploits/8751 - http://secunia.com/advisories/35139
CVE ID: CVE-2009-1748 State: PUBLISHED Published: 2009-05-21T18:00:00 Last Updated: 2024-08-07T05:27:53.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in index.php in Catviz 0.4.0 Beta 1 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) webpages_form or (2) userman_form parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35042 - http://osvdb.org/54657 - https://www.exploit-db.com/exploits/8745
CVE ID: CVE-2009-1749 State: PUBLISHED Published: 2009-05-21T18:00:00 Last Updated: 2024-08-07T05:27:53.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Catviz 0.4.0 beta 1 allow remote attackers to inject arbitrary web script or HTML via the (1) userman_form and (2) webpages_form parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35042 - http://osvdb.org/54656 - https://www.exploit-db.com/exploits/8745
CVE ID: CVE-2009-1750 State: PUBLISHED Published: 2009-05-21T18:00:00 Last Updated: 2024-08-07T05:27:53.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in VidSharePro allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50625 - http://www.securityfocus.com/bid/35024 - https://www.exploit-db.com/exploits/8730 - http://osvdb.org/54611
CVE ID: CVE-2009-1751 State: PUBLISHED Published: 2009-05-21T18:00:00 Last Updated: 2024-08-07T05:27:53.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in list_list.php in Realty Webware Technologies Web-Base 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54655 - http://www.securityfocus.com/bid/35043 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50646 - https://www.exploit-db.com/exploits/8748
CVE ID: CVE-2009-1752 State: PUBLISHED Published: 2009-05-21T18:00:00 Last Updated: 2024-08-07T05:27:54.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: exJune Office Message System 1 does not properly restrict access to (1) configure.asp and (2) addmessage2.asp, which allows remote attackers to gain privileges a direct request. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50647 - https://www.exploit-db.com/exploits/8744 - http://secunia.com/advisories/35172
CVE ID: CVE-2009-1753 State: PUBLISHED Published: 2009-05-21T23:00:00 Last Updated: 2024-08-07T05:27:53.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Coccinelle 0.1.7 allows local users to overwrite arbitrary files via a symlink attack on an unspecified "result file." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35012 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00731.html - http://www.securityfocus.com/bid/34848 - http://secunia.com/advisories/35459 - http://packages.debian.org/changelogs/pool/main/c/coccinelle/coccinelle_0.1.7.deb-3/changelog - http://www.openwall.com/lists/oss-security/2009/05/06
angelogs/pool/main/c/coccinelle/coccinelle_0.1.7.deb-3/changelog - http://www.openwall.com/lists/oss-security/2009/05/06/2
CVE ID: CVE-2009-1754 State: PUBLISHED Published: 2009-05-26T15:16:00 Last Updated: 2024-08-07T05:27:54.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PackageManagerService class in services/java/com/android/server/PackageManagerService.java in Android 1.5 through 1.5 CRB42 does not properly check developer certificates during processing of sharedUserId requests at an application's installation time, which allows remote user-assisted attackers to access application data by creating a package that specifies a shared user ID with an arbitrary application. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35090 - http://www.op
Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35090 - http://www.openwall.com/lists/oss-security/2009/05/22/14 - http://www.ocert.org/advisories/ocert-2009-006.html - http://www.securityfocus.com/archive/1/503770 - http://android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=5d6d773fab559fdc12e553d60d789f3991ac552c
CVE ID: CVE-2009-1755 State: PUBLISHED Published: 2009-05-22T01:00:00Z Last Updated: 2024-09-17T03:23:44.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the packet_read_query_section function in packet.c in nsd 3.2.1, and process_query_section in query.c in nsd 2.3.7, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.nlnetlabs.nl/publications/NSD_vulnerability_announcement.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=529420 - http://bugs.debian.org/cgi-bin/bugreport.cgi
nouncement.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=529420 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=529418 - http://www.openwall.com/lists/oss-security/2009/05/19/1
CVE ID: CVE-2009-1756 State: PUBLISHED Published: 2009-05-22T01:00:00 Last Updated: 2024-08-07T05:27:53.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: SLiM Simple Login Manager 1.3.0 places the X authority magic cookie (mcookie) on the command line when invoking xauth from (1) app.cpp and (2) switchuser.cpp, which allows local users to access the X session by listing the process and its arguments. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54583 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50611 - http://www.securityfocus.com/bid/35015 - https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00000.html - http:
securityfocus.com/bid/35015 - https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00000.html - http://secunia.com/advisories/38070 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=529306 - https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00009.html - http://www.openwall.com/lists/oss-security/2009/05/18/2 - http://secunia.com/advisories/35132
CVE ID: CVE-2009-1757 State: PUBLISHED Published: 2009-05-22T01:00:00Z Last Updated: 2024-09-16T20:06:44.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Transmission 1.5 before 1.53 and 1.6 before 1.61 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/05/21/1 - http://www.transmissionbt.com/index.php