Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-4970 State: PUBLISHED Published: 2010-07-27T18:39:00Z Last Updated: 2024-09-16T19:19:07.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the t3m_affiliate extension 0.5.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/36138 - http://www.vupen.com/english/advisories/2009/2411 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-013/
CVE ID: CVE-2009-4971 State: PUBLISHED Published: 2010-07-27T18:39:00Z Last Updated: 2024-09-16T18:23:23.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the AJAX Chat (vjchat) extension before 0.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2411 - http://www.securityfocus.com/bid/36141 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-013/
CVE ID: CVE-2009-4972 State: PUBLISHED Published: 2010-07-27T18:39:00Z Last Updated: 2024-09-17T00:06:59.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php (aka the log in page) in SimpleID before 0.6.5 allows remote attackers to inject arbitrary web script or HTML via the s parameter. Additional Analyst Notes: - CVE Program Container: References: - http://blog.n0where.org/post/171292151 - http://simpleid.sourceforge.net/news/2009/08/security-advisory-sa-2009-1-cross-site-scripting-vulnerability-version-065-released - http://osvdb.org/57327 - http://simpleid.sourceforge.net/advisories/sa-2009-1 - http://sourceforge.net/tracke
released - http://osvdb.org/57327 - http://simpleid.sourceforge.net/advisories/sa-2009-1 - http://sourceforge.net/tracker/?func=detail&aid=2843998&group_id=203264&atid=984892
CVE ID: CVE-2009-4973 State: PUBLISHED Published: 2010-07-27T18:39:00 Last Updated: 2024-08-07T07:24:53.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in rss.php in TotalCalendar 2.4 allows remote attackers to execute arbitrary SQL commands via the selectedCal parameter in a SwitchCal action. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9524
CVE ID: CVE-2009-4974 State: PUBLISHED Published: 2010-07-27T18:39:00 Last Updated: 2024-08-07T07:24:53.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in box_display.php in TotalCalendar 2.4 allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the box parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9524
CVE ID: CVE-2009-4975 State: PUBLISHED Published: 2010-08-02T20:00:00 Last Updated: 2024-08-07T07:24:53.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in webview.cpp in QtDemoBrowser allows remote attackers to inject arbitrary web script or HTML via a URL associated with a nonexistent domain name, related to a "universal XSS" issue, a similar vulnerability to CVE-2010-2536. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.kde.org/show_bug.cgi?id=217464 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60879 - https://bugs.webkit.org/show_bug.cgi?id=32252 - http://bugreports.qt.nokia.com/browse/QTWEBKI
om/vulnerabilities/60879 - https://bugs.webkit.org/show_bug.cgi?id=32252 - http://bugreports.qt.nokia.com/browse/QTWEBKIT-22
CVE ID: CVE-2009-4976 State: PUBLISHED Published: 2010-08-02T20:00:00 Last Updated: 2024-08-07T07:24:53.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in webkitpart.cpp in kwebkitpart allows remote attackers to inject arbitrary web script or HTML via a URL associated with a nonexistent domain name, related to a "universal XSS" issue, a similar vulnerability to CVE-2010-2536. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/60878 - http://websvn.kde.org/?view=rev&revision=1059140 - https://bugs.kde.org/show_bug.cgi?id=217464
CVE ID: CVE-2009-4977 State: PUBLISHED Published: 2010-08-25T19:00:00 Last Updated: 2024-08-07T07:24:53.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in MyBackup 1.4.0 allows remote authenticated users to execute arbitrary PHP code via a URL in the main_content parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9365 - http://www.vupen.com/english/advisories/2009/2165 - http://secunia.com/advisories/36106
CVE ID: CVE-2009-4978 State: PUBLISHED Published: 2010-08-25T19:00:00 Last Updated: 2024-08-07T07:24:53.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in down.php in MyBackup 1.4.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9365 - http://www.vupen.com/english/advisories/2009/2165 - http://secunia.com/advisories/36106
CVE ID: CVE-2009-4979 State: PUBLISHED Published: 2010-08-25T19:00:00Z Last Updated: 2024-09-16T16:48:45.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in search.php in Photokorn Gallery 1.81 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) where[], (2) sort, (3) order, and (4) Match parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35966 - http://secunia.com/advisories/36150 - http://holisticinfosec.org/content/view/120/45/
CVE ID: CVE-2009-4980 State: PUBLISHED Published: 2010-08-25T19:00:00Z Last Updated: 2024-09-16T22:08:59.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Photokorn Gallery 1.81 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) where[] parameter to search.php and (2) qc parameter to admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35966 - http://secunia.com/advisories/36150 - http://holisticinfosec.org/content/view/120/45/
CVE ID: CVE-2009-4981 State: PUBLISHED Published: 2010-08-25T19:00:00Z Last Updated: 2024-09-16T16:38:36.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Photokorn Gallery 1.81 allow remote attackers to hijack the authentication of administrators. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36150 - http://holisticinfosec.org/content/view/120/45/
CVE ID: CVE-2009-4982 State: PUBLISHED Published: 2010-08-25T19:00:00 Last Updated: 2024-08-07T07:24:53.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the select function in Irokez CMS 0.7.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35957 - http://www.exploit-db.com/exploits/9369 - http://www.vupen.com/english/advisories/2009/2167 - http://secunia.com/advisories/23497
CVE ID: CVE-2009-4983 State: PUBLISHED Published: 2010-08-25T19:00:00Z Last Updated: 2024-09-16T17:23:17.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Silurus Classifieds 1.0 allow remote attackers to inject arbitrary web script or HTML via the ID parameter to (1) category.php and (2) wcategory.php, and the (3) keywords parameter to search.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0908-exploits/silurus-xss.txt - http://secunia.com/advisories/36124
CVE ID: CVE-2009-4984 State: PUBLISHED Published: 2010-08-25T19:00:00 Last Updated: 2024-08-07T07:24:53.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Accessories Me PHP Affiliate Script 1.4 allow remote attackers to inject arbitrary web script or HTML via the (1) Keywords parameter to search.php and (2) SearchIndex parameter to browse.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9370 - http://secunia.com/advisories/36148
CVE ID: CVE-2009-4985 State: PUBLISHED Published: 2010-08-25T19:00:00 Last Updated: 2024-08-07T07:24:54.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in browse.php in Accessories Me PHP Affiliate Script 1.4 allows remote attackers to execute arbitrary SQL commands via the Go parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9370
CVE ID: CVE-2009-4986 State: PUBLISHED Published: 2010-08-25T19:00:00 Last Updated: 2024-08-07T07:24:53.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in In-Portal 4.3.1, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the env parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9358 - http://secunia.com/advisories/36165 - http://www.vupen.com/english/advisories/2009/2164
CVE ID: CVE-2009-4987 State: PUBLISHED Published: 2010-08-25T19:00:00 Last Updated: 2024-08-07T07:24:53.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/header.php in Scripteen Free Image Hosting Script 2.3 allows remote attackers to bypass authentication and gain administrative access by setting the cookgid cookie value to 1, a different vector than CVE-2008-3211. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36002 - http://www.exploit-db.com/exploits/9256 - http://www.securityfocus.com/bid/35801 - http://www.osvdb.org/56539 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51996
CVE ID: CVE-2009-4988 State: PUBLISHED Published: 2010-08-25T19:00:00 Last Updated: 2024-08-07T07:24:54.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in NT_Naming_Service.exe in SAP Business One 2005 A 6.80.123 and 6.80.320 allows remote attackers to execute arbitrary code via a long GIOP request to TCP port 30000. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/52256 - http://www.securitytracker.com/id?1022655 - http://www.vupen.com/english/advisories/2009/2170 - http://secunia.com/advisories/36103 - http://www.exploit-db.com/exploits/9319 - http://www.securityfocus.com/archiv
70 - http://secunia.com/advisories/36103 - http://www.exploit-db.com/exploits/9319 - http://www.securityfocus.com/archive/1/505489/100/0/threaded - http://www.securityfocus.com/bid/35933
CVE ID: CVE-2009-4989 State: PUBLISHED Published: 2010-08-25T19:00:00Z Last Updated: 2024-09-16T18:50:16.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in AJ Auction Pro OOPD 3.0 allows remote attackers to inject arbitrary web script or HTML via the txtkeyword parameter in a search action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36163 - http://packetstormsecurity.org/0908-exploits/ajauctionprooopd-xss.txt - http://www.securityfocus.com/bid/35968
CVE ID: CVE-2009-4990 State: PUBLISHED Published: 2010-08-25T19:00:00Z Last Updated: 2024-09-16T20:32:04.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Webform report module 5.x and 6.x for Drupal allows remote attackers to inject arbitrary web script or HTML via a submission. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35953 - http://drupal.org/node/540980 - http://secunia.com/advisories/36181
CVE ID: CVE-2009-4991 State: PUBLISHED Published: 2010-08-25T19:00:00Z Last Updated: 2024-09-16T17:07:48.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in users/resume_register.php in Omnistar Recruiting allows remote attackers to inject arbitrary web script or HTML via the job2 parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31514 - http://packetstormsecurity.org/0908-exploits/omnistarrecruiting-xss.txt
CVE ID: CVE-2009-4992 State: PUBLISHED Published: 2010-08-25T19:00:00 Last Updated: 2024-08-07T07:24:53.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in paidbanner.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9383
CVE ID: CVE-2009-4993 State: PUBLISHED Published: 2010-08-25T19:00:00 Last Updated: 2024-08-07T07:24:53.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in home.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9383
CVE ID: CVE-2009-4994 State: PUBLISHED Published: 2010-08-25T19:00:00Z Last Updated: 2024-09-16T23:25:29.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in frmKBSearch.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote attackers to inject arbitrary web script or HTML via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://holisticinfosec.org/content/view/123/45/ - http://www.smartertools.com/SmarterTrack/ReleaseNotes.aspx - http://secunia.com/advisories/36172
CVE ID: CVE-2009-4995 State: PUBLISHED Published: 2010-08-25T19:00:00Z Last Updated: 2024-09-16T22:52:08.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in frmTickets.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote attackers to inject arbitrary web script or HTML via the email address field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36172
CVE ID: CVE-2009-4996 State: PUBLISHED Published: 2010-09-07T17:00:00Z Last Updated: 2024-09-16T19:09:15.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xfce4-session 4.5.91 in Xfce does not lock the screen when the suspend or hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action, a related issue to CVE-2010-2532. NOTE: there is no general agreement that this is a vulnerability, because separate control over locking can be an equally secure, or more secure, behavior in some threat environments Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.xfce.org/show_bu
me threat environments Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.xfce.org/show_bug.cgi?id=4805 - https://bugzilla.redhat.com/show_bug.cgi?id=614608 - https://bugzilla.redhat.com/show_bug.cgi?id=587633 - https://bugzilla.redhat.com/show_bug.cgi?id=525395
CVE ID: CVE-2009-4997 State: PUBLISHED Published: 2010-09-07T17:00:00Z Last Updated: 2024-09-16T23:31:27.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: gnome-power-manager 2.27.92 does not properly implement the lock_on_suspend and lock_on_hibernate settings for locking the screen when the suspend or hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action, a related issue to CVE-2010-2532. NOTE: this issue exists because of a regression that followed a gnome-power-manager fix a few years earlier. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubu
fix a few years earlier. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/gnome-power-manager/+bug/42052 - https://bugs.launchpad.net/ubuntu/+source/gnome-power-manager/+bug/428115
CVE ID: CVE-2009-4998 State: PUBLISHED Published: 2010-09-20T21:00:00Z Last Updated: 2024-09-16T22:40:08.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-019 and 4.0.2.x before 4.0.2.7-P8AE-FP007, in certain FileTracker configurations, does not apply a security policy to the first document added during a session, which might allow remote attackers to bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://download2.boulder.ibm.com/sar/CMA/IMA/00yrk/0/readme-ae351-021.htm - http://www-01.ibm.com/support/docv
rences: - http://download2.boulder.ibm.com/sar/CMA/IMA/00yrk/0/readme-ae351-021.htm - http://www-01.ibm.com/support/docview.wss?uid=swg1PJ36552 - http://download2.boulder.ibm.com/sar/CMA/IMA/00y3y/0/readme-4027-P8AE-FP007.htm
CVE ID: CVE-2009-4999 State: PUBLISHED Published: 2010-09-20T21:00:00Z Last Updated: 2024-09-17T00:35:47.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-016 allows remote attackers to inject arbitrary web script or HTML via the Name field. Additional Analyst Notes: - CVE Program Container: References: - http://download2.boulder.ibm.com/sar/CMA/IMA/00yrk/0/readme-ae351-021.htm - http://www-01.ibm.com/support/docview.wss?uid=swg1PJ34852
CVE ID: CVE-2009-5000 State: PUBLISHED Published: 2010-09-20T21:00:00Z Last Updated: 2024-09-16T23:56:26.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.3-P8AE-FP003 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to .jsp pages. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PJ35679 - http://download2.boulder.ibm.com/sar/CMA/IMA/00y3y/0/readme-4027-P8AE-FP007.htm
CVE ID: CVE-2009-5001 State: PUBLISHED Published: 2010-09-20T21:00:00Z Last Updated: 2024-09-16T20:07:19.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.2-P8AE-FP002 grants a document's Creator-Owner full control over an annotation object, even if the default instance security has changed, which might allow remote authenticated users to bypass intended access restrictions in opportunistic circumstances. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PJ35547 - http://download2.boulder.ibm.com/sar/CMA/IMA/00y3y/0/r
es: - http://www-01.ibm.com/support/docview.wss?uid=swg1PJ35547 - http://download2.boulder.ibm.com/sar/CMA/IMA/00y3y/0/readme-4027-P8AE-FP007.htm
CVE ID: CVE-2009-5002 State: PUBLISHED Published: 2010-09-20T21:00:00Z Last Updated: 2024-09-16T20:01:15.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.1-P8AE-FP001 does not record Get Content Failure Audit events, which might allow remote attackers to attempt content access without detection. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PJ34853 - http://download2.boulder.ibm.com/sar/CMA/IMA/00y3y/0/readme-4027-P8AE-FP007.htm
CVE ID: CVE-2009-5003 State: PUBLISHED Published: 2010-09-22T19:00:00 Last Updated: 2024-08-07T07:24:53.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in click.php in e-soft24 Banner Exchange Script 1.0 allows remote attackers to execute arbitrary SQL commands via the targetid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0907-exploits/bes-sql.txt - http://www.exploit-db.com/exploits/9387 - http://www.securityfocus.com/bid/43287 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52328
CVE ID: CVE-2009-5004 State: PUBLISHED Published: 2019-11-09T03:01:54 Last Updated: 2024-08-07T07:24:53.678Z Vendors: qpid-cpp Products: qpid-cpp Problem Types: Other Description: qpid-cpp 1.0 crashes when a large message is sent and the Digest-MD5 mechanism with a security layer is in use . Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2009-5004 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-5004 - https://access.redhat.com/security/cve/cve-2009-5004 - https://bugzilla.redhat.com/show_bug.cgi?id=501792
CVE ID: CVE-2009-5005 State: PUBLISHED Published: 2010-10-18T16:00:00Z Last Updated: 2024-08-07T07:24:53.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cluster::deliveredEvent function in cluster/Cluster.cpp in Apache Qpid, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote attackers to cause a denial of service (daemon crash and cluster outage) via invalid AMQP data. Additional Analyst Notes: - CVE Program Container: References: - https://rhn.redhat.com/errata/RHSA-2010-0774.html - https://bugzilla.redhat.com/show_bug.cgi?id=642373 - http://www.vupen.com/english/advisories/2010/2684 - http://svn.apache.org/viewvc?revision=785788&view=revision
=642373 - http://www.vupen.com/english/advisories/2010/2684 - http://svn.apache.org/viewvc?revision=785788&view=revision - http://secunia.com/advisories/41812 - http://secunia.com/advisories/41710 - https://rhn.redhat.com/errata/RHSA-2010-0773.html
CVE ID: CVE-2009-5006 State: PUBLISHED Published: 2010-10-18T16:00:00Z Last Updated: 2024-08-07T07:24:53.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in the C++ Broker component in Apache Qpid before 0.6, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote authenticated users to cause a denial of service (NULL pointer dereference, daemon crash, and cluster outage) by attempting to modify the alternate of an exchange. Additional Analyst Notes: - CVE Program Container: References: - https://rhn.redhat.com/errata/RHSA-2010-0774.html - http://svn.apache.org/
Notes: - CVE Program Container: References: - https://rhn.redhat.com/errata/RHSA-2010-0774.html - http://svn.apache.org/viewvc?revision=811188&view=revision - http://www.vupen.com/english/advisories/2010/2684 - https://issues.apache.org/jira/browse/QPID-2080 - https://bugzilla.redhat.com/show_bug.cgi?id=642377 - http://secunia.com/advisories/41812 - http://secunia.com/advisories/41710 - https://rhn.redhat.com/errata/RHSA-2010-0773.html
CVE ID: CVE-2009-5007 State: PUBLISHED Published: 2010-10-12T21:00:00 Last Updated: 2024-08-07T07:24:53.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco trial client on Linux for Cisco AnyConnect SSL VPN allows local users to overwrite arbitrary files via a symlink attack on unspecified temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42093 - http://www.infradead.org/openconnect.html