Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-4023 State: PUBLISHED Published: 2009-11-28T17:00:00 Last Updated: 2024-08-07T06:45:51.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in the sendmail implementation of the Mail::Send method (Mail/sendmail.php) in the Mail package 1.1.14 for PEAR allows remote attackers to read and write arbitrary files via a crafted $from parameter, a different vector than CVE-2009-4111. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37081 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html - http://secunia.com/advisories/37458 - http://www.openwall.com/lists/oss-secu
e-security-announce/2010-11/msg00001.html - http://secunia.com/advisories/37458 - http://www.openwall.com/lists/oss-security/2009/11/23/8 - http://www.vupen.com/english/advisories/2009/3300 - https://bugs.gentoo.org/show_bug.cgi?id=294256 - http://pear.php.net/bugs/bug.php?id=16200&edit=12&patch=quick-fix&revision=1241757412 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54362 - http://www.debian.org/security/2009/dsa-1938 - http://secunia.com/advisories/37410 - http://svn.php.net/viewvc/pear/packages/Mail/trunk/Mail/sendmail.php?r1=243717&r2=280134 - http://pear.php.net/bugs/bug.php?id=16200
CVE ID: CVE-2009-4024 State: PUBLISHED Published: 2009-11-28T17:00:00 Last Updated: 2024-08-07T06:45:50.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in the ping function in Ping.php in the Net_Ping package before 2.4.5 for PEAR allows remote attackers to execute arbitrary shell commands via the host parameter. NOTE: this has also been reported as a shell metacharacter problem. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01152.html - http://pear.php.net/package/Net_Ping/download/2.4.5 - http://svn.php.net/viewvc/pear/packages/Net_Ping/trunk/Ping.php
- http://pear.php.net/package/Net_Ping/download/2.4.5 - http://svn.php.net/viewvc/pear/packages/Net_Ping/trunk/Ping.php?r1=274728&r2=290669&pathrev=290669 - http://pear.php.net/advisory20091114-01.txt - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01130.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/54390 - http://blog.pear.php.net/2009/11/14/net_traceroute-and-net_ping-security-advisory/ - http://www.securityfocus.com/bid/37093 - http://www.vupen.com/english/advisories/2009/3320 - http://secunia.com/advisories/37502 - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01044.html - http://www.debian.org/security/2009/dsa-1949 -
edhat.com/archives/fedora-package-announce/2009-November/msg01044.html - http://www.debian.org/security/2009/dsa-1949 - http://secunia.com/advisories/37451
CVE ID: CVE-2009-4025 State: PUBLISHED Published: 2009-11-28T17:00:00 Last Updated: 2024-08-07T06:45:51.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in the traceroute function in Traceroute.php in the Net_Traceroute package before 0.21.2 for PEAR allows remote attackers to execute arbitrary shell commands via the host parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://pear.php.net/advisory20091114-01.txt - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00998.html - http://security.gentoo.org/glsa/glsa-200911-06.xm
hat.com/archives/fedora-package-announce/2009-November/msg00998.html - http://security.gentoo.org/glsa/glsa-200911-06.xml - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01007.html - http://pear.php.net/package/Net_Traceroute/download/0.21.2 - http://www.openwall.com/lists/oss-security/2009/11/23/8 - http://secunia.com/advisories/37497 - http://www.securityfocus.com/bid/37094 - http://blog.pear.php.net/2009/11/14/net_traceroute-and-net_ping-security-advisory/ - http://www.vupen.com/english/advisories/2009/3321 - http://secunia.com/advisories/37503 - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01110.html - https://exchange.xforce.ibmclou
- https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01110.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/54391 - http://osvdb.org/60515
CVE ID: CVE-2009-4026 State: PUBLISHED Published: 2009-12-02T16:00:00 Last Updated: 2024-08-07T06:45:50.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mac80211 subsystem in the Linux kernel before 2.6.32-rc8-next-20091201 allows remote attackers to cause a denial of service (panic) via a crafted Delete Block ACK (aka DELBA) packet, related to an erroneous "code shuffling patch." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37170 - http://www.ubuntu.com/usn/usn-864-1 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html - http://www.openwall.com/lists/oss-security/2009/12/01/2 - https://bugzilla.r
e-security-announce/2010-01/msg00000.html - http://www.openwall.com/lists/oss-security/2009/12/01/2 - https://bugzilla.redhat.com/show_bug.cgi?id=541149 - http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.32-rc8-next-20091201.gz - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=827d42c9ac91ddd728e4f4a31fefb906ef2ceff7 - http://secunia.com/advisories/38017
CVE ID: CVE-2009-4027 State: PUBLISHED Published: 2009-12-02T16:00:00 Last Updated: 2024-08-07T06:45:50.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the mac80211 subsystem in the Linux kernel before 2.6.32-rc8-next-20091201 allows remote attackers to cause a denial of service (system crash) via a Delete Block ACK (aka DELBA) packet that triggers a certain state change in the absence of an aggregation session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37170 - http://www.redhat.com/support/errata/RHSA-2010-0380.html - http://www.ubuntu.com/usn/usn-864-1 - http://lists.opensuse.org/opensuse-security-ann
pport/errata/RHSA-2010-0380.html - http://www.ubuntu.com/usn/usn-864-1 - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html - http://www.debian.org/security/2010/dsa-1996 - https://bugzilla.redhat.com/show_bug.cgi?id=541149 - http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.32-rc8-next-20091201.gz - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=827d42c9ac91ddd728e4f4a31fefb906ef2ceff7 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11583 - http://secunia.com/advisories/38017 - http://secunia.com/advisories/38492
CVE ID: CVE-2009-4028 State: PUBLISHED Published: 2009-11-30T17:00:00 Last Updated: 2024-08-07T06:45:50.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a crafted certificate, as demonstrated by a certificate presented by a server linked against the yaSSL library. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ov
tes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8510 - http://www.redhat.com/support/errata/RHSA-2010-0109.html - http://www.vupen.com/english/advisories/2010/1107 - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html - http://www.openwall.com/lists/oss-security/2009/11/19/3 - http://lists.mysql.com/commits/87446 - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html - http://dev.mysql.com/doc/refman/5.0/en/news-5-0-88.html - http://marc.info/?l=oss-security&m=125881733826437&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10940 - http://bu
733826437&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10940 - http://bugs.mysql.com/47320 - http://www.openwall.com/lists/oss-security/2009/11/23/16
CVE ID: CVE-2009-4029 State: PUBLISHED Published: 2009-12-20T02:00:00 Last Updated: 2024-08-07T06:45:50.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) dist or (2) distcheck rules in GNU Automake 1.11.1, 1.10.3, and release branches branch-1-4 through branch-1-9, when producing a distribution tarball for a package that uses Automake, assign insecure permissions (777) to directories in the build tree, which introduces a race condition that allows local users to modify the contents of package files, introduce Trojan horse programs, or conduct other attacks before the build is complete. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.
acks before the build is complete. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:203 - http://lists.gnu.org/archive/html/automake/2009-12/msg00012.html - http://lists.gnu.org/archive/html/automake-patches/2009-11/msg00017.html - http://savannah.gnu.org/forum/forum.php?forum_id=6077 - http://lists.gnu.org/archive/html/automake/2009-12/msg00013.html - http://www.securityfocus.com/archive/1/514526/100/0/threaded - http://lists.gnu.org/archive/html/automake/2009-12/msg00010.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11717 - http://wiki.rpath.com/wiki/Advisories:rPSA-2
rity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11717 - http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0071 - http://www.vupen.com/english/advisories/2009/3579 - http://lists.gnu.org/archive/html/automake/2009-12/msg00011.html - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021784.1-1
CVE ID: CVE-2009-4030 State: PUBLISHED Published: 2009-11-30T17:00:00 Last Updated: 2024-08-07T06:45:51.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL data home directory, related to incorrect calculation of the mysql_unpacked_real_data_home value. NOTE: this vulnerability exists because of a
elated to incorrect calculation of the mysql_unpacked_real_data_home value. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4098 and CVE-2008-2079. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38573 - http://www.ubuntu.com/usn/USN-1397-1 - http://secunia.com/advisories/38517 - http://www.redhat.com/support/errata/RHSA-2010-0109.html - http://www.vupen.com/english/advisories/2010/1107 - http://www.openwall.com/lists/oss-security/2009/11/24/6 - http://ubuntu.com/usn/usn-897-1 - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html - http://lists.apple.com/archives/security-announce/2010//Mar/msg000
rg/opensuse-security-announce/2010-05/msg00001.html - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://www.openwall.com/lists/oss-security/2009/11/19/3 - http://marc.info/?l=oss-security&m=125908080222685&w=2 - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html - http://support.apple.com/kb/HT4077 - http://marc.info/?l=oss-security&m=125908040022018&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11116 - http://www.redhat.com/support/errata/RHSA-2010-0110.html - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html - http://bugs.mysql.com/bug.php?id=32167 - http://lists.mysql.com/commits/
nsuse-security-announce/2010-11/msg00005.html - http://bugs.mysql.com/bug.php?id=32167 - http://lists.mysql.com/commits/89940 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8156 - http://www.debian.org/security/2010/dsa-1997
CVE ID: CVE-2009-4031 State: PUBLISHED Published: 2009-11-27T19:00:00 Last Updated: 2024-08-07T06:45:50.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_insn_fetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel before 2.6.32-rc8-next-20091125 tries to interpret instructions that contain too many bytes to be valid, which allows guest OS users to cause a denial of service (increased scheduling latency) on the host OS via unspecified manipulations related to SMP support. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/11/25/1 - http://secunia.com/advisories/377
ram Container: References: - http://www.openwall.com/lists/oss-security/2009/11/25/1 - http://secunia.com/advisories/37720 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.html - http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.32-rc8-next-20091125.gz - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11089 - http://www.openwall.com/lists/oss-security/2009/11/25/3 - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00777.html - http://git.kernel.org/?p=linux/kernel/git/avi/kvm.git%3Ba=commit%3Bh=e42d9b8141d1f54ff72ad3850bb110c95a5f3b88 - http://www.securityfocus.com/bid/37130 - https://bugzilla.red
%3Ba=commit%3Bh=e42d9b8141d1f54ff72ad3850bb110c95a5f3b88 - http://www.securityfocus.com/bid/37130 - https://bugzilla.redhat.com/show_bug.cgi?id=541160
CVE ID: CVE-2009-4032 State: PUBLISHED Published: 2009-11-27T19:00:00 Last Updated: 2024-08-07T06:45:50.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7e allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) graph.php, (2) include/top_graph_header.php, (3) lib/html_form.php, and (4) lib/timespan_settings.php, as demonstrated by the (a) graph_end or (b) graph_start parameters to graph.php; (c) the date1 parameter in a tree action to graph_view.php; and the (d) page_refresh and (e) default_dual_pane_width parameters to graph_settings.php. Additional Analyst Notes: - CVE Program
page_refresh and (e) default_dual_pane_width parameters to graph_settings.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.cacti.net/download_patches.php - http://www.securityfocus.com/archive/1/508129/100/0/threaded - http://archives.neohapsis.com/archives/fulldisclosure/2009-11/0292.html - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01390.html - http://secunia.com/advisories/38087 - http://jvn.jp/en/jp/JVN09758120/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/54388 - http://secunia.com/advisories/41041 - http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003901.html - http://docs.cacti.net/#cross-site_scripting_
ories/41041 - http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003901.html - http://docs.cacti.net/#cross-site_scripting_fixes - https://rhn.redhat.com/errata/RHSA-2010-0635.html - http://www.openwall.com/lists/oss-security/2009/11/25/2 - http://www.openwall.com/lists/oss-security/2009/11/30/2 - http://secunia.com/advisories/37481 - http://www.openwall.com/lists/oss-security/2009/11/25/4 - http://www.openwall.com/lists/oss-security/2009/11/26/1 - http://www.securityfocus.com/bid/37109 - http://www.vupen.com/english/advisories/2009/3325 - http://www.vupen.com/english/advisories/2010/2132 - http://secunia.com/advisories/37934 - http://www.osvdb.org/60483 - http://bugs.gentoo.org/show_bug.cgi?id
es/2010/2132 - http://secunia.com/advisories/37934 - http://www.osvdb.org/60483 - http://bugs.gentoo.org/show_bug.cgi?id=294573 - https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00166.html - http://www.cacti.net/downloads/patches/0.8.7e/cross_site_fix.patch
CVE ID: CVE-2009-4033 State: PUBLISHED Published: 2009-12-08T19:00:00 Last Updated: 2024-08-07T06:45:51.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain Red Hat patch for acpid 1.0.4 effectively triggers a call to the open function with insufficient arguments, which might allow local users to leverage weak permissions on /var/log/acpid, and obtain sensitive information by reading this file, cause a denial of service by overwriting this file, or gain privileges by executing this file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37249 - https://bugzilla.redhat.com/show_bug.cgi?id=542926 - http://securitytracker.com/
ttp://www.securityfocus.com/bid/37249 - https://bugzilla.redhat.com/show_bug.cgi?id=542926 - http://securitytracker.com/id?1023284 - https://bugzilla.redhat.com/show_bug.cgi?id=515062 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10555 - http://www.redhat.com/support/errata/RHSA-2009-1642.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/54677 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:342
CVE ID: CVE-2009-4034 State: PUBLISHED Published: 2009-12-15T18:00:00 Last Updated: 2024-08-07T06:45:51.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based PostgreSQL servers via a crafted server certificate issued by a legitimate Certification Authority, and (2) allows remote attackers to bypass intended client-hostname restrictions via a crafted cl
ertification Authority, and (2) allows remote attackers to bypass intended client-hostname restrictions via a crafted client certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/61038 - http://marc.info/?l=bugtraq&m=134124585221119&w=2 - http://www.postgresql.org/docs/current/static/release-8-2-15.html - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01035.html - http://www.postgresql.org/support/security.html - http://www.postgresql.org/docs/current/static/release-8-4-2.html - http://www.postgresql.org/docs/current/static/release-8-0-23.html -
gresql.org/docs/current/static/release-8-4-2.html - http://www.postgresql.org/docs/current/static/release-8-0-23.html - http://www.securityfocus.com/archive/1/509917/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html - http://www.postgresql.org/docs/current/static/release-8-3-9.html - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01056.html - http://www.securitytracker.com/id?1023325 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:333 - http://www.postgresql.org/docs/current/static/release-7-4-27.html - http://www.securityfocus.com/bid/37334 - http://www.vupen.com/english/advisories/2009/3519 - http://www.postg
-27.html - http://www.securityfocus.com/bid/37334 - http://www.vupen.com/english/advisories/2009/3519 - http://www.postgresql.org/docs/current/static/release-8-1-19.html - http://secunia.com/advisories/37663 - http://marc.info/?l=bugtraq&m=134124585221119&w=2 - http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0012
CVE ID: CVE-2009-4035 State: PUBLISHED Published: 2009-12-21T21:00:00 Last Updated: 2024-08-07T06:45:50.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and possibly other libraries and versions, does not check the return value of the getNextLine function, which allows context-dependent attackers to execute arbitrary code via a PDF file with a crafted Type 1 font that can produce a negative value, leading to a signed-to-unsigned integer conversion error and a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?
d a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1023356 - http://www.redhat.com/support/errata/RHSA-2009-1680.html - http://www.securityfocus.com/bid/37350 - http://cgit.freedesktop.org/poppler/poppler/tree/fofi/FoFiType1.cc?id=4b4fc5c017bf147c9069bbce32fc14467bd2a81a - http://secunia.com/advisories/37787 - http://secunia.com/advisories/37793 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54831 - http://secunia.com/advisories/37781 - http://www.redhat.com/support/errata/RHSA-2009-1682.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10996 - http://lists.opensuse.org/op
ps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10996 - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html - http://cgit.freedesktop.org/poppler/poppler/diff/fofi/FoFiType1.cc?id=4b4fc5c0 - http://www.redhat.com/support/errata/RHSA-2009-1681.html - http://secunia.com/advisories/37641 - https://bugzilla.redhat.com/show_bug.cgi?id=541614 - http://www.vupen.com/english/advisories/2009/3555
CVE ID: CVE-2009-4036 State: REJECTED Published: 2017-05-26T21:00:00 Last Updated: 2017-05-26T20:57:01 Description: No description available.
CVE ID: CVE-2009-4037 State: PUBLISHED Published: 2009-11-20T19:00:00Z Last Updated: 2024-09-16T23:15:21.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.1.7, and 2.2.x before 2.2 RC, allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) admin/db/users_db.inc, and various other .inc and .php files under (2) admin/, (3) dimensions/, (4) gl/, (5) inventory/, (6) manufacturing/, and (7) purchasing/. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37327 - http://sourceforge.net/projects/frontaccounting/files/FrontAccounting-2/2
ences: - http://secunia.com/advisories/37327 - http://sourceforge.net/projects/frontaccounting/files/FrontAccounting-2/2.1.7/frontaccount-2.1.7.tar.gz/download - http://sourceforge.net/projects/frontaccounting/files/FrontAccounting-2/2.2%20RC/frontaccount-2.2RC.tar.gz/download - http://frontaccounting.net/wb3/pages/posts/release-2.2-rc104.php - http://frontaccounting.net/wb3/pages/posts/2.1.7-security-release103.php - http://www.vupen.com/english/advisories/2009/3223
CVE ID: CVE-2009-4038 State: PUBLISHED Published: 2009-11-20T19:00:00Z Last Updated: 2024-09-16T17:23:44.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in NCH Software Axon Virtual PBX 2.10 and 2.11 allow remote attackers to inject arbitrary web script or HTML via the (1) onok or (2) oncancel parameter to the logon program. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37157 - http://osvdb.org/59871
CVE ID: CVE-2009-4039 State: PUBLISHED Published: 2009-11-20T19:00:00Z Last Updated: 2024-09-16T17:38:37.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Piwigo before 2.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37336 - http://piwigo.org/releases/2.0.6 - http://www.vupen.com/english/advisories/2009/3221