Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-4149 State: PUBLISHED Published: 2009-12-09T18:00:00Z Last Updated: 2024-09-17T03:17:48.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web interface in CA Service Desk 12.1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter. Additional Analyst Notes: - CVE Program Container: References: - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=223999 - http://www.securityfocus.com/bid/37253
CVE ID: CVE-2009-4150 State: PUBLISHED Published: 2009-12-02T11:00:00Z Last Updated: 2024-09-16T23:35:40.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: dasauto in IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP1 permits execution by unprivileged user accounts, which has unspecified impact and local attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40343 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC64759 - http://secunia.com/advisories/36890 - http://www-01.ibm.com/support/docview.wss?uid=swg21403619 - http://securitytracker.com/id?1023242 - http://www-01.ibm.c
http://www-01.ibm.com/support/docview.wss?uid=swg21403619 - http://securitytracker.com/id?1023242 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40340 - http://www.vupen.com/english/advisories/2009/3340 - http://secunia.com/advisories/37454 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ40352 - http://www-01.ibm.com/support/docview.wss?uid=swg21386689
CVE ID: CVE-2009-4151 State: PUBLISHED Published: 2009-12-02T16:00:00 Last Updated: 2024-08-07T06:54:09.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in html/Elements/SetupSessionCookie in Best Practical Solutions RT 3.0.0 through 3.6.9 and 3.8.x through 3.8.5 allows remote attackers to hijack web sessions by setting the session identifier via a manipulation that leverages "HTTP access to the RT server," a related issue to CVE-2009-3585. Additional Analyst Notes: - CVE Program Container: References: - http://lists.bestpractical.com/pipermail/rt-announce/2009-November/000177.html - https://www.redhat.com/archives/fedora-package-announce/2009-De
al.com/pipermail/rt-announce/2009-November/000177.html - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00761.html - http://bestpractical.typepad.com/files/rt-3.6.2-3.6.3-session_fixation.v3.patch - http://secunia.com/advisories/37546 - http://bestpractical.typepad.com/files/rt-3.6.4-3.6.9-session_fixation.v2.patch - https://exchange.xforce.ibmcloud.com/vulnerabilities/54472 - http://lists.bestpractical.com/pipermail/rt-announce/2009-November/000176.html - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00794.html - http://bestpractical.typepad.com/files/rt-3.0.0-session_fixation.v3.patch - http://bestpractical.typepad.com/files/rt-3.0.1-3.0
bestpractical.typepad.com/files/rt-3.0.0-session_fixation.v3.patch - http://bestpractical.typepad.com/files/rt-3.0.1-3.0.6-session_fixation.v3.patch - http://secunia.com/advisories/37728 - http://bestpractical.typepad.com/files/rt-3.0.7-3.6.1-session_fixation.v3.patch - https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00832.html - http://blog.bestpractical.com/2009/11/session-fixation-vulnerability.html - http://bestpractical.typepad.com/files/rt-3.8-session_fixation.patch - http://www.securityfocus.com/bid/37162
CVE ID: CVE-2009-4152 State: PUBLISHED Published: 2009-12-02T16:00:00Z Last Updated: 2024-09-17T03:17:41.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Collaboration component in IBM WebSphere Portal 6.1.x before 6.1.0.3 allows remote attackers to inject arbitrary web script or HTML via the people picker tag. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PK93429 - http://www.vupen.com/english/advisories/2009/3367 - http://www.securityfocus.com/bid/37159 - http://www-01.ibm.com/support/docview.wss?uid=swg27014411 - http://secunia.com/advisories/37526
CVE ID: CVE-2009-4153 State: PUBLISHED Published: 2009-12-02T16:00:00Z Last Updated: 2024-09-16T20:11:51.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the XMLAccess component in IBM WebSphere Portal 6.1.x before 6.1.0.3 has unknown impact and attack vectors, related to the work directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/3367 - http://www.securityfocus.com/bid/37159 - http://www-01.ibm.com/support/docview.wss?uid=swg27014411 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK93783 - http://secunia.com/advisories/37526
CVE ID: CVE-2009-4154 State: PUBLISHED Published: 2009-12-02T17:00:00Z Last Updated: 2024-09-16T22:56:41.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in includes/feedcreator.class.php in Elxis CMS allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0911-exploits/elxiscms-disclose.txt - http://www.securityfocus.com/bid/37158
CVE ID: CVE-2009-4155 State: PUBLISHED Published: 2009-12-02T17:00:00 Last Updated: 2024-08-07T06:54:10.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Eshopbuilde CMS allow remote attackers to execute arbitrary SQL commands via the sitebid parameter to (1) home-f.asp and (2) opinions-f.asp; (3) sitebid, (4) id, (5) secText, (6) client-ip, and (7) G_id parameters to more-f.asp; (8) sitebid, (9) id, (10) ma_id, (11) mi_id, (12) secText, (13) client-ip, and (14) G_id parameters to selectintro.asp; (15) sitebid, (16) secText, (17) adv_code, and (18) client-ip parameters to advcount.asp; (19) sitebid, (20) secText, (21) Grp_Code, (22) _me
cText, (17) adv_code, and (18) client-ip parameters to advcount.asp; (19) sitebid, (20) secText, (21) Grp_Code, (22) _method, and (23) client-ip parameters to advview.asp; and (24) sitebid, (25) secText, (26) newsId, and (27) client-ip parameters to dis_new-f.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/508137/100/0/threaded
CVE ID: CVE-2009-4156 State: PUBLISHED Published: 2009-12-02T17:00:00 Last Updated: 2024-08-07T06:54:09.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in modules/pms/index.php in Ciamos CMS 0.9.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the module_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/10259 - http://www.securityfocus.com/bid/37160
CVE ID: CVE-2009-4157 State: PUBLISHED Published: 2009-12-02T17:00:00Z Last Updated: 2024-09-16T20:42:09.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in the ProofReader (com_proofreader) component 1.0 RC9 and earlier for Joomla! allow remote attackers to inject arbitrary web script or HTML via the URI, which is not properly handled in (1) 404 or (2) error pages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37145 - http://websecurity.com.ua/3482/
CVE ID: CVE-2009-4158 State: PUBLISHED Published: 2009-12-02T17:00:00Z Last Updated: 2024-09-16T17:08:25.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Calendar Base (cal) extension before 1.2.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/cal/1.2.1/ - http://secunia.com/advisories/37549 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-019/ - http://www.securityfocus.com/bid/37164
CVE ID: CVE-2009-4159 State: PUBLISHED Published: 2009-12-02T17:00:00Z Last Updated: 2024-09-17T00:46:50.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the newsletter configuration feature in the backend module in the Direct Mail (direct_mail) extension 2.6.4 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/direct_mail/2.6.5/ - http://www.securityfocus.com/bid/37166 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-018/ - http://secunia.c
w.securityfocus.com/bid/37166 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-018/ - http://secunia.com/advisories/37552
CVE ID: CVE-2009-4160 State: PUBLISHED Published: 2009-12-02T17:00:00Z Last Updated: 2024-09-16T22:10:19.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Simple download-system with counter and categories (kk_downloader) extension 1.2.1 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37168 - http://secunia.com/advisories/37550 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/
CVE ID: CVE-2009-4161 State: PUBLISHED Published: 2009-12-02T17:00:00Z Last Updated: 2024-09-17T01:16:18.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the [AN] Search it! (an_searchit) extension 2.4.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37165 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/
CVE ID: CVE-2009-4162 State: PUBLISHED Published: 2009-12-02T17:00:00Z Last Updated: 2024-09-16T23:51:05.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the DB Integration (wfqbe) extension 1.3.1 and earlier for TYPO3 allows local users to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37551 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/
CVE ID: CVE-2009-4163 State: PUBLISHED Published: 2009-12-02T17:00:00Z Last Updated: 2024-09-16T18:23:38.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the TW Productfinder (tw_productfinder) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/
CVE ID: CVE-2009-4164 State: PUBLISHED Published: 2009-12-02T17:00:00Z Last Updated: 2024-09-17T03:23:50.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the simple Glossar (simple_glossar) extension 1.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/
CVE ID: CVE-2009-4165 State: PUBLISHED Published: 2009-12-02T17:00:00Z Last Updated: 2024-09-16T22:36:44.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the simple Glossar (simple_glossar) extension 1.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/
CVE ID: CVE-2009-4166 State: PUBLISHED Published: 2009-12-02T17:00:00Z Last Updated: 2024-09-17T02:37:22.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Trips (mchtrips) extension 2.0.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/mchtrips/2.0.1/ - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/
CVE ID: CVE-2009-4167 State: PUBLISHED Published: 2009-12-02T17:00:00Z Last Updated: 2024-09-16T17:13:52.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Automatic Base Tags for RealUrl (lt_basetag) extension 1.0.0 for TYPO3 allows remote attackers to conduct "Cache spoofing" attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37169 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/
CVE ID: CVE-2009-4168 State: PUBLISHED Published: 2009-12-02T18:00:00 Last Updated: 2024-08-07T06:54:09.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Roy Tanck tagcloud.swf, as used in the WP-Cumulus plugin before 1.23 for WordPress and the Joomulus module 2.0 and earlier for Joomla!, allows remote attackers to inject arbitrary web script or HTML via the tagcloud parameter in a tags action. Cross-site scripting (XSS) vulnerability in tagcloud.swf in the WP-Cumulus Plug-in before 1.23 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tagcloud parameter. Additional Analyst Notes: - CVE Program Cont
ttackers to inject arbitrary web script or HTML via the tagcloud parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/508606/100/0/threaded - http://packetstormsecurity.org/1001-exploits/joomlajvclouds-xss.txt - http://websecurity.com.ua/3789/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/55156 - http://websecurity.com.ua/3665/ - http://www.securityfocus.com/archive/1/508833/100/0/threaded - http://websecurity.com.ua/3801/ - http://websecurity.com.ua/3839/ - http://www.securityfocus.com/archive/1/508071/100/0/threaded - http://secunia.com/advisories/37483 - http://www.roytanck.com/2009/11/15/wp-cumulus-updated-to-address-
100/0/threaded - http://secunia.com/advisories/37483 - http://www.roytanck.com/2009/11/15/wp-cumulus-updated-to-address-yet-another-security-issue/ - http://www.vupen.com/english/advisories/2009/3322 - http://secunia.com/advisories/38161 - http://www.securityfocus.com/bid/37100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54397 - http://www.securityfocus.com/bid/37479
CVE ID: CVE-2009-4169 State: PUBLISHED Published: 2009-12-02T18:00:00Z Last Updated: 2024-09-16T23:56:17.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in wp-cumulus.php in the WP-Cumulus Plug-in before 1.22 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.roytanck.com/2009/09/27/wp-cumulus-1-22-fixes-a-security-hole-please-upgrade/ - http://www.vupen.com/english/advisories/2009/3322 - http://www.securityfocus.com/bid/37102
CVE ID: CVE-2009-4170 State: PUBLISHED Published: 2009-12-02T18:00:00 Last Updated: 2024-08-07T06:54:09.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: WP-Cumulus Plug-in 1.20 for WordPress, and possibly other versions, allows remote attackers to obtain sensitive information via a crafted request to wp-cumulus.php, probably without parameters, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://websecurity.com.ua/3665/ - http://www.securityfocus.com/archive/1/508071/100/0/threaded
CVE ID: CVE-2009-4171 State: PUBLISHED Published: 2009-12-02T19:00:00 Last Updated: 2024-08-07T06:54:09.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: An ActiveX control in YahooBridgeLib.dll for Yahoo! Messenger 9.0.0.2162, and possibly other 9.0 versions, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by calling the RegisterMe method with a long argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/507818/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/54263 - http://www.securityfocus.com/bid/37007
CVE ID: CVE-2009-4172 State: PUBLISHED Published: 2009-12-02T19:00:00 Last Updated: 2024-08-07T06:54:09.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews 8 and 8b, when magic_quotes_gpc is disabled, allows remote attackers to inject arbitrary web script or HTML via the body of a news article in an addnews action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54225 - http://www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt - http://www.securityfocus.com/archive/1/507782/100/0/threaded - ht
rity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt - http://www.securityfocus.com/archive/1/507782/100/0/threaded - http://www.securityfocus.com/bid/36971
CVE ID: CVE-2009-4173 State: PUBLISHED Published: 2009-12-02T19:00:00 Last Updated: 2024-08-07T06:54:09.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote attackers to hijack the authentication of administrators for requests that create new users, including a new administrator, via an adduser action in the editusers module in index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/54240 - http://www.securityfocus
MORNINGSTAR-2009-02-CuteNews.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/54240 - http://www.securityfocus.com/archive/1/507782/100/0/threaded - http://www.securityfocus.com/bid/36971
CVE ID: CVE-2009-4174 State: PUBLISHED Published: 2009-12-02T19:00:00 Last Updated: 2024-08-07T06:54:09.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: The editnews module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b, when magic_quotes_gpc is disabled, allows remote authenticated users with Journalist or Editor access to bypass administrative moderation and edit previously submitted articles via a modified id parameter in a doeditnews action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54236 - http://www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt - http://www.securityf
rabilities/54236 - http://www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt - http://www.securityfocus.com/archive/1/507782/100/0/threaded - http://www.securityfocus.com/bid/36971
CVE ID: CVE-2009-4175 State: PUBLISHED Published: 2009-12-02T19:00:00 Last Updated: 2024-08-07T06:54:09.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote attackers to obtain sensitive information via an invalid date value in the from_date_day parameter to search.php, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54235 - http://www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt - http://www.securityfocus.com/archive/1/507782/100/0/threaded - http://www.securityfocus.
NINGSTAR-2009-02-CuteNews.txt - http://www.securityfocus.com/archive/1/507782/100/0/threaded - http://www.securityfocus.com/bid/36971
CVE ID: CVE-2009-4176 State: PUBLISHED Published: 2009-12-10T22:00:00 Last Updated: 2024-08-07T06:54:09.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in ovsessionmgr.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via a long (1) userid or (2) passwd parameter to ovlogin.exe. Additional Analyst Notes: - CVE Program Container: References: - http://dvlabs.tippingpoint.com/advisory/TPTI-09-09 - http://www.securityfocus.com/bid/37261 - http://marc.info/?l=bugtraq&m=126046355120442&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54660 - http://h20000.www2.hp.com/
=bugtraq&m=126046355120442&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54660 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877 - http://www.securityfocus.com/archive/1/508352/100/0/threaded - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877 - http://www.securityfocus.com/bid/37330
CVE ID: CVE-2009-4177 State: PUBLISHED Published: 2009-12-10T22:00:00 Last Updated: 2024-08-07T06:54:09.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in webappmon.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long HTTP Host header. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877 - http://www.securityfocus.com/bid/37261 - http://www.securityfocus.com/archive/1/508353/100/0/threaded - http://marc.info/?l=bugtraq&m=126046355120442&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
/100/0/threaded - http://marc.info/?l=bugtraq&m=126046355120442&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54661 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877 - http://dvlabs.tippingpoint.com/advisory/TPTI-09-10
CVE ID: CVE-2009-4178 State: PUBLISHED Published: 2009-12-10T22:00:00 Last Updated: 2024-08-07T06:54:10.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in OvWebHelp.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long Topic parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/508354/100/0/threaded - http://www.securityfocus.com/bid/37340 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877 - http://www.securityfocus.com/bid/37261 - http://marc.info/?l=bugtraq&m=126046355120442&w=2 -
nt.jsp?objectID=c01950877 - http://www.securityfocus.com/bid/37261 - http://marc.info/?l=bugtraq&m=126046355120442&w=2 - http://dvlabs.tippingpoint.com/advisory/TPTI-09-11 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54659
CVE ID: CVE-2009-4179 State: PUBLISHED Published: 2009-12-10T22:00:00 Last Updated: 2024-08-07T06:54:09.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in ovalarm.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long HTTP Accept-Language header in an OVABverbose action. Additional Analyst Notes: - CVE Program Container: References: - http://dvlabs.tippingpoint.com/advisory/TPTI-09-12 - https://exchange.xforce.ibmcloud.com/vulnerabilities/54657 - http://www.securityfocus.com/bid/37347 - http://www.securityfocus.com/archive/1/508355/100/0/threaded - http://www.securityfocus.