Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
p://www.securityfocus.com/bid/37006 - http://www.vupen.com/english/advisories/2009/3228 - http://www.redhat.com/support/errata/RHSA-2011-0837.html - http://git.gnome.org/cgit/gimp/commit/?h=gimp-2-6&id=df2b0aca2e7cdb95ebfd3454c65aaba0a83e9bbe - http://www.redhat.com/support/errata/RHSA-2011-0838.html - http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/54254 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8290 - http://secunia.com/advisories/37232 - http://secunia.com/advisories/50737 - http://secunia.com/secunia_research/2009-42/ - http://www.vupen.com/english/advisories/2
/secunia.com/advisories/50737 - http://secunia.com/secunia_research/2009-42/ - http://www.vupen.com/english/advisories/2010/1021 - http://www.securityfocus.com/archive/1/507813/100/0/threaded - https://bugzilla.gnome.org/show_bug.cgi?id=600484 - http://www.osvdb.org/59930
CVE ID: CVE-2009-1571 State: PUBLISHED Published: 2010-02-21T17:00:00 Last Updated: 2024-08-07T05:20:34.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in low-memory situations. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-895-1 - http://www.redhat.com/support/errata/RHSA-2010-0153.html - http://secunia.com/secunia_research/2009-45/ - http://secunia.co
p://www.redhat.com/support/errata/RHSA-2010-0153.html - http://secunia.com/secunia_research/2009-45/ - http://secunia.com/advisories/38847 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html - http://www.redhat.com/support/errata/RHSA-2010-0113.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:051 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:042 - http://www.mozilla.org/security/announce/2010/mfsa2010-03.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html - http://www.redhat.com/support/errata/RHSA-2010-0112.html - http://www.vupen.com/english/advisories/2010/0650 - http://lists.fedoraproject.or
m/support/errata/RHSA-2010-0112.html - http://www.vupen.com/english/advisories/2010/0650 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11227 - http://secunia.com/advisories/38770 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56361 - http://www.debian.org/security/2010/dsa-1999 - http://www.redhat.com/support/errata/RHSA-2010-0154.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html - http://secunia.com/advisories/38772 - http://www.ubuntu.com/usn/USN-896-1 - http://www.vupen.com/english/advisories/2010/0405 - http://se
m/advisories/38772 - http://www.ubuntu.com/usn/USN-896-1 - http://www.vupen.com/english/advisories/2010/0405 - http://secunia.com/advisories/37242 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8615 - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036097.html - https://bugzilla.mozilla.org/show_bug.cgi?id=526500 - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036132.html - http://www.securityfocus.com/archive/1/509585/100/0/threaded
CVE ID: CVE-2009-1572 State: PUBLISHED Published: 2009-05-06T17:00:00 Last Updated: 2024-08-07T05:20:34.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of service (crash) via an AS path containing ASN elements whose string representation is longer than expected, which triggers an assert error. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/54200 - http://secunia.com/advisories/35203 - http://secunia.com/advisories/34999 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:109 - http://www.securitytracker.com/id?1022164 - http://www.ubun
//www.mandriva.com/security/advisories?name=MDVSA-2009:109 - http://www.securitytracker.com/id?1022164 - http://www.ubuntu.com/usn/usn-775-1 - http://www.openwall.com/lists/oss-security/2009/05/01/1 - http://marc.info/?l=quagga-dev&m=123364779626078&w=2 - http://thread.gmane.org/gmane.network.quagga.devel/6513 - http://www.debian.org/security/2009/dsa-1788 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50317 - http://secunia.com/advisories/35685 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01107.html - http://secunia.com/advisories/35061 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - http://bugs.debian.org/cgi-bin/bugreport.cgi
ttp://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526311 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01037.html - http://www.securityfocus.com/bid/34817 - http://www.openwall.com/lists/oss-security/2009/05/01/2
CVE ID: CVE-2009-1573 State: PUBLISHED Published: 2009-05-06T17:00:00 Last Updated: 2024-08-07T05:20:34.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place the magic cookie (MCOOKIE) on the command line, which allows local users to gain privileges by listing the process and its arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/05/05/2 - http://www.openwall.com/lists/oss-security/2009/05/05/4 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526678 - http://secunia.com/advisories/39834 - http://www.securityfocu
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526678 - http://secunia.com/advisories/39834 - http://www.securityfocus.com/bid/34828 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50348 - http://www.vupen.com/english/advisories/2010/1185 - http://www.ubuntu.com/usn/USN-939-1
CVE ID: CVE-2009-1574 State: PUBLISHED Published: 2009-05-06T17:00:00 Last Updated: 2024-08-07T05:20:33.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service (crash) via crafted fragmented packets without a payload, which triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50412 - http://www.ubuntu.com/usn/USN-785-1 - http://sourceforge.net/project/shownotes.php?group_id=74601&release_id=677611 - http://secunia.com/advisories/35159 - https://www.redhat.com/archives/fedora-package-
group_id=74601&release_id=677611 - http://secunia.com/advisories/35159 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00789.html - http://www.openwall.com/lists/oss-security/2009/04/29/6 - http://www.securityfocus.com/bid/34765 - http://www.redhat.com/support/errata/RHSA-2009-1036.html - http://secunia.com/advisories/35113 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9624 - http://secunia.com/advisories/35404 - http://www.openwall.com/lists/oss-security/2009/05/04/3 - http://secunia.com/advisories/35212 - https://bugzilla.redhat.com/show_bug.cgi?id=497990 - http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.
tps://bugzilla.redhat.com/show_bug.cgi?id=497990 - http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html - http://security.gentoo.org/glsa/glsa-200905-03.xml - http://secunia.com/advisories/35685 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00746.html - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - http://support.apple.com/kb/HT4298 - http://www.vupen.com/english/advisories/2009/3184 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://secunia.com/advisories/35153 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00725.html - http://lists.apple.com/archives/security-announce/
.redhat.com/archives/fedora-package-announce/2009-May/msg00725.html - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - http://www.debian.org/security/2009/dsa-1804 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:112 - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-1575 State: PUBLISHED Published: 2009-05-06T17:00:00 Last Updated: 2024-08-07T05:20:35.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal before 5.17.0, allows remote attackers to inject arbitrary web script or HTML via crafted UTF-8 byte sequences before the Content-Type meta tag, which are treated as UTF-7 by Internet Explorer 6 and 7. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00108.html - http://www.osvdb.org/54152 - http://www.vbdrupal.org/forum/showthread.php?p=
a-package-announce/2009-May/msg00108.html - http://www.osvdb.org/54152 - http://www.vbdrupal.org/forum/showthread.php?p=9953#post9953 - http://www.vupen.com/english/advisories/2009/1216 - http://secunia.com/advisories/34980 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50250 - http://drupal.org/node/449078 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00133.html - http://secunia.com/advisories/34950 - http://secunia.com/advisories/34948 - http://www.debian.org/security/2009/dsa-1792
CVE ID: CVE-2009-1576 State: PUBLISHED Published: 2009-05-06T17:00:00 Last Updated: 2024-08-07T05:20:34.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal before 5.17.0, allows user-assisted remote attackers to obtain sensitive information by tricking victims into visiting the front page of the site with a crafted URL and causing form data to be sent to an attacker-controlled site, possibly related to multiple / (slash) characters that are not properly handled by includes/bootstrap.inc, as demonstrated using the search box. NOTE: this vulnerability can be leveraged to conduct cross-site
es/bootstrap.inc, as demonstrated using the search box. NOTE: this vulnerability can be leveraged to conduct cross-site request forgery (CSRF) attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00108.html - http://www.osvdb.org/54153 - http://www.vbdrupal.org/forum/showthread.php?p=9953#post9953 - http://www.vupen.com/english/advisories/2009/1216 - http://secunia.com/advisories/34980 - http://drupal.org/node/449078 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00133.html - http://secunia.com/advisories/34950 - http://secunia.com/advisories/34948 - http://www.debian.org/security/
00133.html - http://secunia.com/advisories/34950 - http://secunia.com/advisories/34948 - http://www.debian.org/security/2009/dsa-1792 - http://drupal.org/files/sa-core-2009-005/SA-CORE-2009-005-5.16.patch
CVE ID: CVE-2009-1577 State: PUBLISHED Published: 2009-05-07T17:00:00 Last Updated: 2024-08-07T05:20:34.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the putstring function in find.c in Cscope before 15.6 allow user-assisted remote attackers to execute arbitrary code via a long (1) function name or (2) symbol in a source-code file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/05/06/9 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9837 - http://www.redhat.com/support/errata/RHSA-2009-1101.html - http://cvs.fedoraproject.org/vi
org.mitre.oval%3Adef%3A9837 - http://www.redhat.com/support/errata/RHSA-2009-1101.html - http://cvs.fedoraproject.org/viewvc/rpms/cscope/devel/cscope-15.5-putstring-overflow.patch - http://cscope.cvs.sourceforge.net/viewvc/cscope/cscope/src/find.c?view=log#rev1.19 - http://cscope.cvs.sourceforge.net/viewvc/cscope/cscope/src/find.c?r1=1.18&r2=1.19 - http://www.openwall.com/lists/oss-security/2009/05/05/1 - http://security.gentoo.org/glsa/glsa-200905-02.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/50366 - https://bugzilla.redhat.com/show_bug.cgi?id=499174 - http://secunia.com/advisories/35213 - https://bugzilla.redhat.com/show_bug.cgi?id=189666 - http://www.openwall.com/lists/oss
://secunia.com/advisories/35213 - https://bugzilla.redhat.com/show_bug.cgi?id=189666 - http://www.openwall.com/lists/oss-security/2009/05/06/10
CVE ID: CVE-2009-1578 State: PUBLISHED Published: 2009-05-14T17:00:00 Last Updated: 2024-08-07T05:20:34.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.4.18 and NaSMail before 1.7 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) certain encrypted strings in e-mail headers, related to contrib/decrypt_headers.php; (2) PHP_SELF; and (3) the query string (aka QUERY_STRING). Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html - https://gna.org/forum/forum.php?forum_id=2146 - http:/
ts.apple.com/archives/security-announce/2010//Jun/msg00001.html - https://gna.org/forum/forum.php?forum_id=2146 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:110 - http://www.securityfocus.com/bid/34916 - http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog - http://www.vupen.com/english/advisories/2010/1481 - http://www.squirrelmail.org/security/issue/2009-05-09 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00566.html - http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13670 - http://secunia.com/advisories/35140 - http://download.gna.org/nasmail/nasmail-1.7.zip - http
l?view=rev&revision=13670 - http://secunia.com/advisories/35140 - http://download.gna.org/nasmail/nasmail-1.7.zip - http://osvdb.org/60468 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00577.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11624 - http://support.apple.com/kb/HT4188 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50459 - http://secunia.com/advisories/40220 - http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13672 - http://www.vupen.com/english/advisories/2009/1296 - http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/contrib/decry
009/1296 - http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/contrib/decrypt_headers.php?r1=13672&r2=13671&pathrev=13672 - http://secunia.com/advisories/35259 - http://secunia.com/advisories/35052 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50460 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00572.html - http://www.redhat.com/support/errata/RHSA-2009-1066.html - http://secunia.com/advisories/37415 - http://secunia.com/advisories/35073 - http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/functions/global.php?r1=13670&r2=13669&pathrev=13670 - http://www.squirrelmail.org
l/branches/SM-1_4-STABLE/squirrelmail/functions/global.php?r1=13670&r2=13669&pathrev=13670 - http://www.squirrelmail.org/security/issue/2009-05-08 - http://www.vupen.com/english/advisories/2009/3315 - https://bugzilla.redhat.com/show_bug.cgi?id=500363 - http://www.debian.org/security/2009/dsa-1802
CVE ID: CVE-2009-1579 State: PUBLISHED Published: 2009-05-14T17:00:00 Last Updated: 2024-08-07T05:20:34.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.18 and NaSMail before 1.7 allows remote attackers to execute arbitrary commands via shell metacharacters in a username string that is used by the ypmatch program. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10986 - http://squirrelmail.svn.sourceforge.net/viewvc/squ
rg/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10986 - http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/functions/imap_general.php?r1=13674&r2=13673&pathrev=13674 - https://gna.org/forum/forum.php?forum_id=2146 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:110 - http://www.securityfocus.com/bid/34916 - http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog - http://www.vupen.com/english/advisories/2010/1481 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00566.html - http://secunia.com/advisories/35140 - http://download.gna.org/nasmail/nas
dora-package-announce/2009-May/msg00566.html - http://secunia.com/advisories/35140 - http://download.gna.org/nasmail/nasmail-1.7.zip - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00577.html - https://bugzilla.redhat.com/show_bug.cgi?id=500360 - http://support.apple.com/kb/HT4188 - http://secunia.com/advisories/40220 - http://www.vupen.com/english/advisories/2009/1296 - http://secunia.com/advisories/35259 - http://secunia.com/advisories/35052 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00572.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/50461 - http://www.redhat.com/support/errata/RHSA-2009-1066.html - http://secunia.com/advisori
cloud.com/vulnerabilities/50461 - http://www.redhat.com/support/errata/RHSA-2009-1066.html - http://secunia.com/advisories/37415 - http://secunia.com/advisories/35073 - http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13674 - http://www.vupen.com/english/advisories/2009/3315 - http://www.squirrelmail.org/security/issue/2009-05-10 - http://www.debian.org/security/2009/dsa-1802
CVE ID: CVE-2009-1580 State: PUBLISHED Published: 2009-05-14T17:00:00 Last Updated: 2024-08-07T05:20:34.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in SquirrelMail before 1.4.18 allows remote attackers to hijack web sessions via a crafted cookie. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:110 - http://www.securityfocus.com/bid/34916 - http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog - http://www.vupen.com/english/advisories/20
e.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog - http://www.vupen.com/english/advisories/2010/1481 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00566.html - http://secunia.com/advisories/35140 - http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13676 - https://bugzilla.redhat.com/show_bug.cgi?id=500358 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00577.html - http://support.apple.com/kb/HT4188 - http://secunia.com/advisories/40220 - http://www.squirrelmail.org/security/issue/2009-05-11 - http://www.vupen.com/english/advisories/2009/1296 - http://secunia.com/advisories/35052 - https://ww
/issue/2009-05-11 - http://www.vupen.com/english/advisories/2009/1296 - http://secunia.com/advisories/35052 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00572.html - http://secunia.com/advisories/35073 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50462 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10107 - http://www.debian.org/security/2009/dsa-1802
CVE ID: CVE-2009-1581 State: PUBLISHED Published: 2009-05-14T17:00:00 Last Updated: 2024-08-07T05:20:33.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: functions/mime.php in SquirrelMail before 1.4.18 does not protect the application's content from Cascading Style Sheets (CSS) positioning in HTML e-mail messages, which allows remote attackers to spoof the user interface, and conduct cross-site scripting (XSS) and phishing attacks, via a crafted message. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html - https://bugzilla.redhat.com/show_bug.cgi?id=500356 - http://www.mandriva.com/security
announce/2010//Jun/msg00001.html - https://bugzilla.redhat.com/show_bug.cgi?id=500356 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:110 - http://www.securityfocus.com/bid/34916 - http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/doc/ChangeLog - http://www.vupen.com/english/advisories/2010/1481 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10441 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00566.html - http://secunia.com/advisories/35140 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00577.html - http://www.squirrelmail.org/security/issue/200
/www.redhat.com/archives/fedora-package-announce/2009-May/msg00577.html - http://www.squirrelmail.org/security/issue/2009-05-12 - http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/functions/mime.php?r1=13667&r2=13666&pathrev=13667 - http://support.apple.com/kb/HT4188 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50463 - http://secunia.com/advisories/40220 - http://www.vupen.com/english/advisories/2009/1296 - http://secunia.com/advisories/35259 - http://secunia.com/advisories/35052 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00572.html - http://www.redhat.com/support/errata/RHSA-2009-1066.html - http://secunia.co
a-package-announce/2009-May/msg00572.html - http://www.redhat.com/support/errata/RHSA-2009-1066.html - http://secunia.com/advisories/35073 - http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13667 - http://www.debian.org/security/2009/dsa-1802
CVE ID: CVE-2009-1582 State: PUBLISHED Published: 2009-05-07T23:00:00 Last Updated: 2024-08-07T05:20:34.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Million Dollar Text Links 1.0 does not properly restrict administrator access to admin.home.php, which allows remote attackers to bypass intended restrictions and gain privileges via a direct request to admin.home.php after visiting admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8605 - http://osvdb.org/54204 - http://www.securityfocus.com/bid/34809 - http://secunia.com/advisories/34994 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50306
CVE ID: CVE-2009-1583 State: PUBLISHED Published: 2009-05-07T23:00:00 Last Updated: 2024-08-07T05:20:33.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in TemaTres 1.0.3 and 1.031 allow remote attackers to inject arbitrary web script or HTML via the (1) search form; (2) _expresion_de_busqueda, (3) letra, (4) estado_id, and (5) tema parameters to index.php; the (6) PATH_INFO to index.php; (7) unspecified parameters when editing a term as specified by the edit_id and tema parameters to index.php; and the (7) y, (8) ord, and (9) m parameters to sobre.php. Additional Analyst Notes: - CVE Program Container: References: - https://