Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-2169 State: PUBLISHED Published: 2009-06-22T22:00:00Z Last Updated: 2024-09-17T03:42:38.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure method vulnerability in the PDFVIEWER.PDFViewerCtrl.1 ActiveX control (pdfviewer.ocx) in Edraw PDF Viewer Component before 3.2.0.126 allows remote attackers to create and overwrite arbitrary files via a URL argument to the FtpConnect argument and a target filename argument to the FtpDownloadFile method. NOTE: this can be leveraged for code execution by writing to a Startup folder. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35509 - http://archives.neohapsis.com/archi
Notes: - CVE Program Container: References: - http://secunia.com/advisories/35509 - http://archives.neohapsis.com/archives/fulldisclosure/2009-06/0198.html
CVE ID: CVE-2009-2170 State: PUBLISHED Published: 2009-06-23T16:00:00Z Last Updated: 2024-09-16T19:40:19.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0 before 1.0.12 and 1.1 before 1.1.5 allow remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://mahara.org/interaction/forum/topic.php?id=752
CVE ID: CVE-2009-2171 State: PUBLISHED Published: 2009-06-23T16:00:00Z Last Updated: 2024-09-16T20:16:25.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact. Additional Analyst Notes: - CVE Program Container: References: - http://mahara.org/interaction/forum/topic.php?id=753
CVE ID: CVE-2009-2172 State: PUBLISHED Published: 2009-06-23T21:21:00 Last Updated: 2024-08-07T05:44:55.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in forum/radioandtv.php in the Radio and TV Player addon for vBulletin allows remote registered users to inject arbitrary web script or HTML via the station parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35385 - https://www.exploit-db.com/exploits/8965
CVE ID: CVE-2009-2173 State: PUBLISHED Published: 2009-06-23T21:21:00 Last Updated: 2024-08-07T05:44:54.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LAN game feature in Carom3D 5.06 allows remote authenticated users to cause a denial of service (application hang) via a crafted HTTP request to TCP port 28012. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8971 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51219
CVE ID: CVE-2009-2174 State: PUBLISHED Published: 2009-06-23T21:21:00Z Last Updated: 2024-09-16T17:59:01.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: GUPnP 0.12.7 allows remote attackers to cause a denial of service (crash) via an empty (1) subscription or (2) control message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35390 - http://www.osvdb.org/55128 - http://secunia.com/advisories/35472 - http://git.gupnp.org/cgit.cgi?url=gupnp/tree/NEWS&id=ce714a6700ce03953a2886a66ec57db59205f4e6 - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00494.html - https://www.redhat.com/archives/fedora-package-annou
dhat.com/archives/fedora-package-announce/2009-June/msg00494.html - https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00607.html - http://www.vupen.com/english/advisories/2009/1597 - http://secunia.com/advisories/35482 - http://bugzilla.openedhand.com/show_bug.cgi?id=1604
CVE ID: CVE-2009-2175 State: PUBLISHED Published: 2009-06-23T21:21:00 Last Updated: 2024-08-07T05:44:55.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the flattenIncrementally function in flatten.c in xcftools 1.0.4, as reachable from the (1) xcf2pnm and (2) xcf2png utilities, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted image that causes a conversion to a location "above or to the left of the canvas." NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi
formation. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=533361 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050542.html - http://www.securityfocus.com/bid/43883 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050562.html - http://osvdb.org/55187 - http://www.vupen.com/english/advisories/2009/1638 - http://secunia.com/advisories/35397 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050526.html
CVE ID: CVE-2009-2176 State: PUBLISHED Published: 2009-06-23T21:21:00 Last Updated: 2024-08-07T05:44:55.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in fuzzylime (cms) 3.03a and earlier, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) list parameter to code/confirm.php and the (2) template parameter to code/display.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35418 - http://osvdb.org/55183 - http://osvdb.org/55182 - https://www.exploit-db.com/exploits/8978 - https://exchang
bid/35418 - http://osvdb.org/55183 - http://osvdb.org/55182 - https://www.exploit-db.com/exploits/8978 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51205 - http://secunia.com/advisories/35489
CVE ID: CVE-2009-2177 State: PUBLISHED Published: 2009-06-23T21:21:00 Last Updated: 2024-08-07T05:44:54.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: code/display.php in fuzzylime (cms) 3.03a and earlier, when magic_quotes_gpc is disabled, allows remote attackers to conduct directory traversal attacks and overwrite arbitrary files via a "....//" (dot dot) in the s parameter, which is collapsed into a "../" value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35418 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51206 - https://www.exploit-db.com/exploits/8978 - http://osvdb.org/55184 - http://secunia.com/advisories/
lnerabilities/51206 - https://www.exploit-db.com/exploits/8978 - http://osvdb.org/55184 - http://secunia.com/advisories/35489
CVE ID: CVE-2009-2178 State: PUBLISHED Published: 2009-06-23T21:21:00 Last Updated: 2024-08-07T05:44:55.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in website.php in phpDatingClub 3.7 allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/55316 - https://www.exploit-db.com/exploits/8990
CVE ID: CVE-2009-2179 State: PUBLISHED Published: 2009-06-23T21:21:00 Last Updated: 2024-08-07T05:44:54.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in phpDatingClub 3.7 allows remote attackers to execute arbitrary SQL commands via the sform[day] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8990 - http://osvdb.org/55315
CVE ID: CVE-2009-2180 State: PUBLISHED Published: 2009-06-23T21:21:00 Last Updated: 2024-08-07T05:44:55.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in upfiles/index.php in Pc4 Uploader 10.0 and earlier allow remote attackers to read arbitrary files via (1) a .. (dot dot) or (2) absolute path in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/55314 - https://www.exploit-db.com/exploits/8988
CVE ID: CVE-2009-2181 State: PUBLISHED Published: 2009-06-23T21:21:00 Last Updated: 2024-08-07T05:44:55.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin-files/templates/list_dir.php in Campsite 3.3.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the listbasedir parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8995 - http://osvdb.org/55313
CVE ID: CVE-2009-2182 State: PUBLISHED Published: 2009-06-23T21:21:00 Last Updated: 2024-08-07T05:44:55.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Campsite 3.3.0 RC1 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[g_campsiteDir] parameter to (1) ad_popup.php, (2) camp_html.php, (3) init_content.php, (4) logout.php, (5) menu.php, and (6) set-author.php in admin-files/; (7) conf/liveuser_configuration.php; (8) include/phorum_load.php; (9) CommandProcessor.php and (10) index.php in admin-files/article_import; and (11) add.php, (12) add_move.php, (13) autopublish.php, and (14) autopublish_del
x.php in admin-files/article_import; and (11) add.php, (12) add_move.php, (13) autopublish.php, and (14) autopublish_del.php in admin-files/articles/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8995
CVE ID: CVE-2009-2183 State: PUBLISHED Published: 2009-06-23T21:21:00 Last Updated: 2024-08-07T05:44:55.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin-files/ad.php in Campsite 3.3.0 RC1 allows remote attackers to read and possibly execute arbitrary local files via a .. (dot dot) in the GLOBALS[g_campsiteDir] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8995 - http://osvdb.org/55312
CVE ID: CVE-2009-2184 State: PUBLISHED Published: 2009-06-23T21:21:00 Last Updated: 2024-08-07T05:44:55.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in forcedownload.php in Gravy Media Photo Host 1.0.8 allows remote attackers to read arbitrary files via an encoded "/" (slash) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8996 - http://www.vupen.com/english/advisories/2009/1651 - http://osvdb.org/55280 - http://secunia.com/advisories/35518 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51299
CVE ID: CVE-2009-2185 State: PUBLISHED Published: 2009-06-24T23:00:00 Last Updated: 2024-08-07T05:44:55.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ASN.1 parser (pluto/asn1.c, libstrongswan/asn1/asn1.c, libstrongswan/asn1/asn1_parser.c) in (a) strongSwan 2.8 before 2.8.10, 4.2 before 4.2.16, and 4.3 before 4.3.2; and (b) openSwan 2.6 before 2.6.22 and 2.4 before 2.4.15 allows remote attackers to cause a denial of service (pluto IKE daemon crash) via an X.509 certificate with (1) crafted Relative Distinguished Names (RDNs), (2) a crafted UTCTIME string, or (3) a crafted GENERALIZEDTIME string. Additional Analyst Notes: - CVE Program Container: References: - http://www.
g, or (3) a crafted GENERALIZEDTIME string. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1639 - http://secunia.com/advisories/35740 - http://www.ingate.com/Relnote.php?ver=481 - http://www.securitytracker.com/id?1022428 - http://www.redhat.com/support/errata/RHSA-2009-1138.html - http://www.vupen.com/english/advisories/2009/1706 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11079 - http://secunia.com/advisories/36950 - http://secunia.com/advisories/35522 - http://secunia.com/advisories/36922 - http://secunia.com/advisories/37504 - http://www.debian.org/security/2009/dsa-1899 - http://w
nia.com/advisories/36922 - http://secunia.com/advisories/37504 - http://www.debian.org/security/2009/dsa-1899 - http://www.securityfocus.com/bid/35452 - http://download.strongswan.org/CHANGES42.txt - http://download.strongswan.org/CHANGES2.txt - http://up2date.astaro.com/2009/07/up2date_7404_released.html - http://www.debian.org/security/2009/dsa-1898 - http://www.vupen.com/english/advisories/2009/1829 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00337.html - http://secunia.com/advisories/35698 - http://www.vupen.com/english/advisories/2009/3354 - http://download.strongswan.org/CHANGES4.txt - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00264
http://download.strongswan.org/CHANGES4.txt - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00264.html - http://secunia.com/advisories/35804
CVE ID: CVE-2009-2186 State: PUBLISHED Published: 2009-06-24T22:00:00 Last Updated: 2024-08-07T05:44:55.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe Shockwave Player before 11.0.0.465 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2009-1860, related to an older issue that "was previously resolved in Shockwave Player 11.0.0.465." Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb09-08.html
CVE ID: CVE-2009-2187 State: PUBLISHED Published: 2009-06-24T22:00:00Z Last Updated: 2024-09-17T01:25:35.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple memory leaks in the (1) IP and (2) IPv6 multicast implementation in the kernel in Sun Solaris 10, and OpenSolaris snv_67 through snv_93, allow local users to cause a denial of service (memory consumption) via vectors related to the association of (a) DL_ENABMULTI_REQ and (b) DL_DISABMULTI_REQ messages with ARP messages. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35552 - http://bugs.opensolaris.org/view_bug.do?bug_id=6731600 - http://sunsolve.sun.com/search/document.
com/advisories/35552 - http://bugs.opensolaris.org/view_bug.do?bug_id=6731600 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-262408-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-01-1 - http://www.securityfocus.com/bid/35474 - http://bugs.opensolaris.org/view_bug.do?bug_id=6709252
CVE ID: CVE-2009-2188 State: PUBLISHED Published: 2009-08-06T16:00:00 Last Updated: 2024-08-07T05:44:55.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ImageIO in Apple Mac OS X 10.5 before 10.5.8, and Safari before 4.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an image with crafted EXIF metadata. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3757 - http://osvdb.org/56842 - http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html - http://secunia.com/advisories/36096 - http://lists.apple.com/archives/security-announce/2009/Aug/msg
Aug/msg00002.html - http://secunia.com/advisories/36096 - http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html - http://www.securitytracker.com/id?1022674 - http://www.securityfocus.com/bid/35954 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52386 - http://www.vupen.com/english/advisories/2009/2172 - http://www.us-cert.gov/cas/techalerts/TA09-218A.html - http://support.apple.com/kb/HT3733
CVE ID: CVE-2009-2189 State: PUBLISHED Published: 2010-12-22T01:00:00 Last Updated: 2024-08-07T05:44:55.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 does not limit the rate of (1) Router Advertisement and (2) Neighbor Discovery packets, which allows remote attackers to cause a denial of service (resource consumption and device restart) by sending many packets. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html - http://support.apple.com/kb/HT4298
rences: - http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html - http://support.apple.com/kb/HT4298 - http://www.securitytracker.com/id?1024907
CVE ID: CVE-2009-2190 State: PUBLISHED Published: 2009-08-06T16:00:00 Last Updated: 2024-08-07T05:44:55.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: launchd in Apple Mac OS X 10.5 before 10.5.8 allows remote attackers to cause a denial of service (individual service outage) by making many connections to an inetd-based launchd service. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3757 - http://osvdb.org/56841 - http://secunia.com/advisories/36096 - http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/52425 - http://www.securitytracker.com/id?1022672 -
msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/52425 - http://www.securitytracker.com/id?1022672 - http://www.securityfocus.com/bid/35954 - http://www.vupen.com/english/advisories/2009/2172 - http://www.us-cert.gov/cas/techalerts/TA09-218A.html
CVE ID: CVE-2009-2191 State: PUBLISHED Published: 2009-08-06T16:00:00 Last Updated: 2024-08-07T05:44:55.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Login Window in Apple Mac OS X 10.4.11 and 10.5 before 10.5.8 allows attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in an application name. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3757 - http://secunia.com/advisories/36096 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52428 - http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html - http://www.securit
om/vulnerabilities/52428 - http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html - http://www.securityfocus.com/bid/35954 - http://www.vupen.com/english/advisories/2009/2172 - http://www.us-cert.gov/cas/techalerts/TA09-218A.html - http://osvdb.org/56840
CVE ID: CVE-2009-2192 State: PUBLISHED Published: 2009-08-06T16:00:00 Last Updated: 2024-08-07T05:44:55.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: MobileMe in Apple Mac OS X 10.5 before 10.5.8 does not properly delete credentials upon signout from the preference pane, which makes it easier for attackers to hijack a MobileMe session via unspecified vectors, related to a "logic issue." Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3757 - http://secunia.com/advisories/36096 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52432 - http://osvdb.org/56839 - http://lists.apple.com/archives/security-announce/2009/Aug/msg0000
.com/vulnerabilities/52432 - http://osvdb.org/56839 - http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html - http://www.securityfocus.com/bid/35954 - http://www.vupen.com/english/advisories/2009/2172 - http://www.us-cert.gov/cas/techalerts/TA09-218A.html
CVE ID: CVE-2009-2193 State: PUBLISHED Published: 2009-08-06T16:00:00 Last Updated: 2024-08-07T05:44:55.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the kernel in Apple Mac OS X 10.5 before 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via a crafted AppleTalk response packet. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3757 - http://secunia.com/advisories/36096 - http://osvdb.org/56838 - http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html - http://www.securitytracker.com/id?1022674 - http://www.securityfocus.com/bid/35954 - https
unce/2009/Aug/msg00001.html - http://www.securitytracker.com/id?1022674 - http://www.securityfocus.com/bid/35954 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52435 - http://www.vupen.com/english/advisories/2009/2172 - http://www.us-cert.gov/cas/techalerts/TA09-218A.html
CVE ID: CVE-2009-2194 State: PUBLISHED Published: 2009-08-06T16:00:00 Last Updated: 2024-08-07T05:44:55.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Mac OS X 10.5 before 10.5.8 does not properly share file descriptors over local sockets, which allows local users to cause a denial of service (system crash) by placing file descriptors in messages sent to a socket that has no receiver, related to a "synchronization issue." Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3757 - http://osvdb.org/56836 - http://secunia.com/advisories/36096 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52439 - http://lists.apple.com/ar
://secunia.com/advisories/36096 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52439 - http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html - http://www.securitytracker.com/id?1022672 - http://www.securityfocus.com/bid/35954 - http://www.vupen.com/english/advisories/2009/2172 - http://www.us-cert.gov/cas/techalerts/TA09-218A.html
CVE ID: CVE-2009-2195 State: PUBLISHED Published: 2009-08-12T19:00:00 Last Updated: 2024-08-07T05:44:55.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in WebKit in Apple Safari before 4.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted floating-point numbers. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html - http://www.vupen.com/english/advisories/2011/0212 - http://support.apple.com/kb/HT4225 - http://www.securityfocus.com/bid/36023 - http://lists.opensuse.org/opensuse
/0212 - http://support.apple.com/kb/HT4225 - http://www.securityfocus.com/bid/36023 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://www.securitytracker.com/id?1022717 - http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html - http://support.apple.com/kb/HT3733
CVE ID: CVE-2009-2196 State: PUBLISHED Published: 2009-08-12T19:00:00 Last Updated: 2024-08-07T05:44:55.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Apple Safari 4 before 4.0.3 allows remote web servers to place an arbitrary web site in the Top Sites view, and possibly conduct phishing attacks, via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html - http://www.securityfocus.com/bid/36022 - http://www.securitytracker.com/id?1022718 - http://support.apple.com/kb/HT3733
CVE ID: CVE-2009-2197 State: PUBLISHED Published: 2016-03-24T01:00:00 Last Updated: 2024-08-07T05:44:55.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari before 9.1 allows remote attackers to spoof the user interface via a web page that places text in a crafted context, leading to unintended use of that text within a Safari dialog. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035354 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html - http://www.securityfocus.com/bid/85055 - https://support.apple.com/HT206171