Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache
E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207
e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2009-1192 State: PUBLISHED Published: 2009-04-24T15:00:00 Last Updated: 2024-08-07T05:04:49.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) agp_generic_alloc_page and (2) agp_generic_alloc_pages functions in drivers/char/agp/generic.c in the agp subsystem in the Linux kernel before 2.6.30-rc3 do not zero out pages that may later be available to a user-space process, which allows local users to obtain sensitive information by reading these pages. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2009:135 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ade
ity/advisories?name=MDVSA-2009:135 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10567 - http://secunia.com/advisories/37471 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html - http://secunia.com/advisories/35656 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://www.debian.org/security/2009/dsa-1794 - http://secunia.com/advisories/37351 - https://bugzilla.redhat.com/show_bug.cgi?id=497020 - http://www.securityfocus.com/archive/1/503610/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html - http://openwall.com/lists/oss-security/2009/04/22/2 - http://www.kernel.o
suse-security-announce/2009-11/msg00007.html - http://openwall.com/lists/oss-security/2009/04/22/2 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc3 - http://secunia.com/advisories/35011 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://www.securityfocus.com/bid/34673 - http://secunia.com/advisories/35120 - http://www.ubuntu.com/usn/usn-793-1 - http://www.redhat.com/support/errata/RHSA-2009-1081.html - http://secunia.com/advisories/34981 - http://www.debian.org/security/2009/dsa-1800 - http://secunia.com/advisories/35343 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8003 - http://secunia.com/advisories/
s://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8003 - http://secunia.com/advisories/35387 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=59de2bebabc5027f93df999d59cc65df591c3e6e - http://www.debian.org/security/2009/dsa-1787 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:119 - http://wiki.rpath.com/Advisories:rPSA-2009-0084 - http://secunia.com/advisories/35121 - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html - http://www.vupen.com/english/advisories/2009/3316
CVE ID: CVE-2009-1193 State: REJECTED Published: 2018-01-30T21:00:00 Last Updated: 2018-01-30T20:57:01 Description: No description available.
CVE ID: CVE-2009-1194 State: PUBLISHED Published: 2009-05-11T15:19:00 Last Updated: 2024-08-07T05:04:49.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the pango_glyph_string_set_size function in pango/glyphstring.c in Pango before 1.24 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long glyph string that triggers a heap-based buffer overflow, as demonstrated by a long document.location value in Firefox. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35038 - http://www.debian.org/security/2009/dsa-1798 - http://github.com/bratsche/p
ces: - http://secunia.com/advisories/35038 - http://www.debian.org/security/2009/dsa-1798 - http://github.com/bratsche/pango/commit/4de30e5500eaeb49f4bf0b7a07f718e149a2ed5e - http://www.redhat.com/support/errata/RHSA-2009-0476.html - http://secunia.com/advisories/36145 - https://bugzilla.mozilla.org/show_bug.cgi?id=480134 - http://www.ocert.org/advisories/ocert-2009-001.html - http://secunia.com/advisories/35018 - http://secunia.com/advisories/35021 - http://www.securityfocus.com/bid/34870 - http://www.securitytracker.com/id?1022196 - http://osvdb.org/54279 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00005.html - http://www.openwall.com/lists/oss-security/2009/05/07/1 -
pensuse.org/opensuse-security-announce/2009-07/msg00005.html - http://www.openwall.com/lists/oss-security/2009/05/07/1 - http://www.vupen.com/english/advisories/2009/1269 - http://www.securityfocus.com/bid/35758 - https://bugzilla.redhat.com/show_bug.cgi?id=496887 - http://secunia.com/advisories/36005 - https://launchpad.net/bugs/cve/2009-1194 - http://secunia.com/advisories/35685 - http://www.mozilla.org/security/announce/2009/mfsa2009-36.html - http://www.ubuntu.com/usn/USN-773-1 - http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - https://oval.cisecurity.org/repository/search/definition/
pensuse.org/opensuse-security-announce/2009-07/msg00002.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10137 - http://secunia.com/advisories/35914 - http://www.vupen.com/english/advisories/2009/1972 - http://secunia.com/advisories/35027 - http://www.securityfocus.com/archive/1/503349/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/50397 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1
CVE ID: CVE-2009-1195 State: PUBLISHED Published: 2009-05-28T20:14:00 Last Updated: 2024-08-07T05:04:49.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring (1) Options Includes, (2) Options +Includes, or (3) Options +IncludesNOEXEC in a .htaccess file, and then inserting an exec element in a .shtml file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35261 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01363.html - h
p://secunia.com/advisories/35261 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01363.html - http://www.redhat.com/support/errata/RHSA-2009-1075.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8704 - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/50808 - http://www.redhat.com/support/errata/RHSA-2009-1156.html - https://bugzilla.redhat.com/show_bug.cgi?id=489436 - http://secunia.com/advisories/35395 - http://secunia.com/advisories/37152 - http://osvdb.org/54733 - http://www.securityfocus.com/bid/35115 - http://www.securityfocus.com/archive
dvisories/37152 - http://osvdb.org/54733 - http://www.securityfocus.com/bid/35115 - http://www.securityfocus.com/archive/1/507852/100/0/threaded - http://www.securityfocus.com/archive/1/507857/100/0/threaded - http://marc.info/?l=bugtraq&m=129190899612998&w=2 - http://secunia.com/advisories/35453 - http://svn.apache.org/viewvc?view=rev&revision=772997 - http://security.gentoo.org/glsa/glsa-200907-04.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11094 - http://www.securitytracker.com/id?1022296 - http://wiki.rpath.com/Advisories:rPSA-2009-0142 - http://secunia.com/advisories/35264 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:124
:rPSA-2009-0142 - http://secunia.com/advisories/35264 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:124 - http://marc.info/?l=apache-httpd-dev&m=124048996106302&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12377 - http://www.vupen.com/english/advisories/2009/3184 - http://www.vupen.com/english/advisories/2009/1444 - http://marc.info/?l=bugtraq&m=129190899612998&w=2 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://www.debian.org/security/2009/dsa-1816 - http://secunia.com/advisories/35721 - http://support.apple.com/kb/HT3937 - http://www.ubuntu.com/usn/usn-787-1 - https://lists.apache.org/thread
ories/35721 - http://support.apple.com/kb/HT3937 - http://www.ubuntu.com/usn/usn-787-1 - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd
e.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r7dd6be4dc38148704f2edafb44a8712abaa3a2be120d6c3314d55919%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r84d043c2115176958562133d96d851495d712aa49da155d81f6733be%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c80
9d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc4c53a0d57b2771ecd4b965010580db355e38137c8711311ee1073a8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2009-1196 State: PUBLISHED Published: 2009-06-09T17:00:00 Last Updated: 2024-08-07T05:04:49.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to cause a denial of service (cupsd daemon outage or crash) via manipulations of the timing of CUPS browse packets, related to a "pointer use-after-delete flaw." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35340 - http://www.vupen.com/english/advisories/2009/1488 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50944 - http://securitytracker.com/id?1022327 - https://bu
9/1488 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50944 - http://securitytracker.com/id?1022327 - https://bugzilla.redhat.com/show_bug.cgi?id=497135 - http://www.securityfocus.com/bid/35194 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11217 - http://www.redhat.com/support/errata/RHSA-2009-1083.html
CVE ID: CVE-2009-1197 State: PUBLISHED Published: 2017-10-30T16:00:00 Last Updated: 2024-08-07T05:04:49.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache jUDDI before 2.0 allows attackers to spoof entries in log files via vectors related to error logging of keys from uddiget.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101625 - http://marc.info/?l=juddi-dev&m=125000625404010&w=2 - http://issues.apache.org/jira/browse/JUDDI-220
CVE ID: CVE-2009-1198 State: PUBLISHED Published: 2017-10-30T16:00:00 Last Updated: 2024-08-07T05:04:48.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Apache jUDDI before 2.0 allows remote attackers to inject arbitrary web script or HTML via the dsname parameter to happyjuddi.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101623 - http://marc.info/?l=juddi-dev&m=125000625404010&w=2 - http://issues.apache.org/jira/browse/JUDDI-221
CVE ID: CVE-2009-1201 State: PUBLISHED Published: 2009-06-25T17:00:00 Last Updated: 2024-08-07T05:04:49.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in the csco_wrap_js function in /+CSCOL+/cte.js in WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass a DOM wrapper and conduct cross-site scripting (XSS) attacks by setting CSCO_WebVPN['process'] to the name of a crafted function, aka Bug ID CSCsy80694. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35476 - https://www.trustwave.com/spiderlabs/advisories/TWSL2009-0
ainer: References: - http://www.securityfocus.com/bid/35476 - https://www.trustwave.com/spiderlabs/advisories/TWSL2009-002.txt - http://www.securityfocus.com/archive/1/504516/100/0/threaded - http://www.securitytracker.com/id?1022457 - http://www.vupen.com/english/advisories/2009/1713 - http://secunia.com/advisories/35511
CVE ID: CVE-2009-1202 State: PUBLISHED Published: 2009-06-25T17:00:00 Last Updated: 2024-08-07T05:04:49.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass certain protection mechanisms involving URL rewriting and HTML rewriting, and conduct cross-site scripting (XSS) attacks, by modifying the first hex-encoded character in a /+CSCO+ URI, aka Bug ID CSCsy80705. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/504516/100/0/threaded - http://www.securitytracker.com/id?1022457 - http://www.securi
://www.securityfocus.com/archive/1/504516/100/0/threaded - http://www.securitytracker.com/id?1022457 - http://www.securityfocus.com/bid/35480 - http://www.vupen.com/english/advisories/2009/1713 - http://secunia.com/advisories/35511
CVE ID: CVE-2009-1203 State: PUBLISHED Published: 2009-06-25T17:00:00 Last Updated: 2024-08-07T05:04:48.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 does not properly distinguish its own login screen from the login screens it produces for third-party (1) FTP and (2) CIFS servers, which makes it easier for remote attackers to trick a user into sending WebVPN credentials to an arbitrary server via a URL associated with that server, aka Bug ID CSCsy80709. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/504516/100/0/thread
itional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/504516/100/0/threaded - http://www.securitytracker.com/id?1022457 - http://www.vupen.com/english/advisories/2009/1713 - http://www.securityfocus.com/bid/35475 - http://secunia.com/advisories/35511
CVE ID: CVE-2009-1204 State: PUBLISHED Published: 2009-04-01T01:00:00 Last Updated: 2024-08-07T05:04:49.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in TikiWiki (Tiki) CMS/Groupware 2.2 allows remote attackers to inject arbitrary web script or HTML via the PHP_SELF portion of a URI to (1) tiki-galleries.php, (2) tiki-list_file_gallery.php, (3) tiki-listpages.php, and (4) tiki-orphan_pages.php. Additional Analyst Notes: - CVE Program Container: References: - http://dev.tikiwiki.org/tiki-view_tracker_item.php?itemId=2359&trackerId=5&show=view&reloff=3&cant=1229&status=o&trackerId=5&sort_mode=created_desc - http://info.tikiwiki.org/tik
2359&trackerId=5&show=view&reloff=3&cant=1229&status=o&trackerId=5&sort_mode=created_desc - http://info.tikiwiki.org/tiki-read_article.php?articleId=51 - http://www.securityfocus.com/bid/34107 - http://www.securityfocus.com/bid/34108 - http://www.securityfocus.com/archive/1/501702/100/0/threaded - http://www.securityfocus.com/bid/34105 - http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki/branches/2.0/changelog.txt?view=markup - http://secunia.com/advisories/34273 - http://www.securityfocus.com/bid/34106
CVE ID: CVE-2009-1205 State: REJECTED Published: 2009-04-01T10:00:00 Last Updated: 2009-04-03T09:00:00 Description: No description available.
CVE ID: CVE-2009-1206 State: PUBLISHED Published: 2009-04-01T10:00:00 Last Updated: 2024-08-07T05:04:49.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in futomi's CGI Cafe Access Analyzer CGI Professional Version 4.11.5 and earlier allows remote attackers to gain administrative privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34315 - http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000016.html - http://www.vupen.com/english/advisories/2009/0888 - http://www.futomi.com/library/info/2009/20090331.html - http://secunia.com/advisories/34516 - https://exchange.xforce.ibmcloud
/www.futomi.com/library/info/2009/20090331.html - http://secunia.com/advisories/34516 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49525 - http://jvn.jp/en/jp/JVN63511247/index.html
CVE ID: CVE-2009-1207 State: PUBLISHED Published: 2009-04-01T10:00:00 Last Updated: 2024-08-07T05:04:49.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the dircmp script in Sun Solaris 8 through 10, and OpenSolaris snv_01 through snv_111, allows local users to overwrite arbitrary files, probably involving a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49526 - http://www.securityfocus.com/bid/34316 - http://www.vupen.com/english/advisories/2009/1105 - http://support.avaya.com/elmodocs2/security/ASA-2009-140.htm - https://oval.cisecurity.org/repository/s
ries/2009/1105 - http://support.avaya.com/elmodocs2/security/ASA-2009-140.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6183 - http://secunia.com/advisories/34558 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-138897-01-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-253468-1 - http://secunia.com/advisories/34813
CVE ID: CVE-2009-1208 State: PUBLISHED Published: 2009-04-01T10:00:00 Last Updated: 2024-08-07T05:04:49.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in auth2db 0.2.5, and possibly other versions before 0.2.7, uses the addslashes function instead of the mysql_real_escape_string function, which allows remote attackers to conduct SQL injection attacks using multibyte character encodings. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34287 - http://secunia.com/advisories/34488 - http://www.debian.org/security/2009/dsa-1757 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=521823 - https://exchange
ttp://www.debian.org/security/2009/dsa-1757 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=521823 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49518 - http://www.auth2db.com.ar/?title=CHANGELOG
CVE ID: CVE-2009-1209 State: PUBLISHED Published: 2009-04-01T10:00:00 Last Updated: 2024-08-07T05:04:49.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in W3C Amaya Web Browser 11.1 allows remote attackers to execute arbitrary code via a script tag with a long defer attribute. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0889 - https://www.exploit-db.com/exploits/8314 - https://www.exploit-db.com/exploits/8321 - http://secunia.com/advisories/34531 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47399 - http://www.securityfocus.com/bid/34295
CVE ID: CVE-2009-1210 State: PUBLISHED Published: 2009-04-01T10:00:00 Last Updated: 2024-08-07T05:04:49.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier allows remote attackers to execute arbitrary code via a PN-DCP packet with format string specifiers in the station name. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2009-02.html - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01213.html - https://oval.cisecurity.org/repository
https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01213.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9526 - http://www.securityfocus.com/bid/34291 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01167.html - http://secunia.com/advisories/35464 - http://www.redhat.com/support/errata/RHSA-2009-1100.html - http://secunia.com/advisories/34778 - https://www.exploit-db.com/exploits/8308 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5976 - http://www.securityfocus.com/archive/1/502745/100/0/t
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5976 - http://www.securityfocus.com/archive/1/502745/100/0/threaded - http://secunia.com/advisories/34970 - http://www.debian.org/security/2009/dsa-1785 - http://secunia.com/advisories/35133 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00675.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/49512 - http://secunia.com/advisories/35416 - http://secunia.com/advisories/34542 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:088 - http://wiki.rpath.com/Advisories:rPSA-2009-0062 - http://secunia.com/advisories/35224
CVE ID: CVE-2009-1211 State: PUBLISHED Published: 2009-04-01T10:00:00Z Last Updated: 2024-09-17T04:09:14.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header. Additional Analyst Notes: - CVE Program Container: References: - https://hypersonic.bluecoat.com/support/securityadvisories/ProxySG_in