Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-5109 State: PUBLISHED Published: 2011-12-25T01:00:00Z Last Updated: 2024-09-17T02:06:57.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long entry in a .pls file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/10782 - http://www.exploit-db.com/exploits/18082 - http://www.exploit-db.com/exploits/10745 - http://www.exploit-db.com/exploits/10747 - http://www.osvdb.org/61341
CVE ID: CVE-2009-5110 State: PUBLISHED Published: 2011-12-27T18:00:00Z Last Updated: 2024-09-16T22:03:20.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: dhttpd allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris. Additional Analyst Notes: - CVE Program Container: References: - http://ha.ckers.org/slowloris/
CVE ID: CVE-2009-5111 State: PUBLISHED Published: 2011-12-27T18:00:00Z Last Updated: 2024-09-17T03:38:21.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: GoAhead WebServer allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris. Additional Analyst Notes: - CVE Program Container: References: - http://ha.ckers.org/slowloris/
CVE ID: CVE-2009-5112 State: PUBLISHED Published: 2012-03-19T18:00:00 Last Updated: 2024-08-07T07:32:22.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to obtain the installation path via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://websecurity.com.ua/2628/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/74320
CVE ID: CVE-2009-5113 State: PUBLISHED Published: 2012-03-19T18:00:00 Last Updated: 2024-08-07T07:32:22.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the DOC parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/74184 - http://websecurity.com.ua/2628/
CVE ID: CVE-2009-5114 State: PUBLISHED Published: 2012-03-19T18:00:00 Last Updated: 2024-08-07T07:32:22.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the DOC parameter. Additional Analyst Notes: - CVE Program Container: References: - http://websecurity.com.ua/2628/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/74321
CVE ID: CVE-2009-5115 State: PUBLISHED Published: 2012-08-22T10:00:00 Last Updated: 2024-08-07T07:32:22.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee Common Management Agent (CMA) 3.5.5 through 3.5.5.588 and 3.6.0 through 3.6.0.608, and McAfee Agent 4.0 before Patch 3, allows remote authenticated users to overwrite arbitrary files by accessing a report-writing ActiveX control COM object. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10002 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78446
CVE ID: CVE-2009-5116 State: PUBLISHED Published: 2012-08-22T10:00:00Z Last Updated: 2024-09-16T18:29:53.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee LinuxShield 1.5.1 and earlier does not properly implement client authentication, which allows remote authenticated users to obtain Admin access to the statistics server by leveraging a client account. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10007
CVE ID: CVE-2009-5117 State: PUBLISHED Published: 2012-08-22T10:00:00 Last Updated: 2024-08-07T07:32:24.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Post Protection feature in McAfee Host Data Loss Prevention (DLP) 3.x before 3.0.100.10 and 9.x before 9.0.0.422, when HTTP Capture mode is enabled, allows local users to obtain sensitive information from web traffic by reading unspecified files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78447 - https://kc.mcafee.com/corporate/index?page=content&id=SB10011
CVE ID: CVE-2009-5118 State: PUBLISHED Published: 2012-08-22T10:00:00 Last Updated: 2024-08-07T07:32:22.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in McAfee VirusScan Enterprise before 8.7i allows local users to gain privileges via a Trojan horse DLL in an unspecified directory, as demonstrated by scanning a document located on a remote share. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10013 - https://exchange.xforce.ibmcloud.com/vulnerabilities/78448
CVE ID: CVE-2009-5119 State: PUBLISHED Published: 2012-08-23T10:00:00Z Last Updated: 2024-09-16T18:19:16.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Apache Tomcat in Websense Manager in Websense Web Security 7.0 and Web Filter 7.0 enables weak SSL ciphers in conf/server.xml, which makes it easier for remote attackers to obtain sensitive information by sniffing the network and then conducting a brute-force attack against encrypted session data. Additional Analyst Notes: - CVE Program Container: References: - http://www.websense.com/support/article/t-kbarticle/v7-Apache-Tomcat-security-vulnerabilities-1258048503850
CVE ID: CVE-2009-5120 State: PUBLISHED Published: 2012-08-23T10:00:00Z Last Updated: 2024-09-16T18:39:06.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Apache Tomcat in Websense Manager in Websense Web Security 7.0 and Web Filter 7.0 allows connections to TCP port 1812 from arbitrary source IP addresses, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via UTF-7 text to the 404 error page of a Project Woodstock service on this port. Additional Analyst Notes: - CVE Program Container: References: - http://www.websense.com/support/article/t-kbarticle/v7-Apache-Tomcat-security-vulnerabilities-1258048503850
CVE ID: CVE-2009-5121 State: PUBLISHED Published: 2012-08-23T10:00:00Z Last Updated: 2024-09-16T17:07:39.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Websense Email Security 7.1 before Hotfix 4 allows remote attackers to bypass the sender-based blacklist by using the 8BITMIME EHLO keyword in the SMTP session. Additional Analyst Notes: - CVE Program Container: References: - http://www.websense.com/support/article/t-kbarticle/Hotfix-4-for-Websense-Email-Security-v7-1
CVE ID: CVE-2009-5122 State: PUBLISHED Published: 2012-08-23T10:00:00 Last Updated: 2024-08-07T07:32:22.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Personal Email Manager component in Websense Email Security before 7.2 allows remote attackers to obtain potentially sensitive information from the JBoss status page via an unspecified query. Additional Analyst Notes: - CVE Program Container: References: - http://www.websense.com/content/support/library/email/v72wes/release_notes/WES72_ReleaseNotes.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/78449
CVE ID: CVE-2009-5123 State: PUBLISHED Published: 2012-08-26T01:00:00Z Last Updated: 2024-09-16T16:32:45.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Antivirus component in Comodo Internet Security before 3.11.108364.552 allows remote attackers to cause a denial of service (memory consumption) via a crafted compressed file. Additional Analyst Notes: - CVE Program Container: References: - http://personalfirewall.comodo.com/release_notes.html
CVE ID: CVE-2009-5124 State: PUBLISHED Published: 2012-08-26T01:00:00Z Last Updated: 2024-09-17T02:21:07.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Antivirus component in Comodo Internet Security before 3.11.108364.552 allows remote attackers to cause a denial of service (application crash) via a crafted packed file. Additional Analyst Notes: - CVE Program Container: References: - http://personalfirewall.comodo.com/release_notes.html
CVE ID: CVE-2009-5125 State: PUBLISHED Published: 2012-08-26T01:00:00Z Last Updated: 2024-09-16T20:41:55.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Comodo Internet Security before 3.9.95478.509 allows remote attackers to bypass malware detection in an RAR archive via an unspecified manipulation of the archive file format. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34737 - http://personalfirewall.comodo.com/release_notes.html - http://blog.zoller.lu/2009/04/comodo-antivirus-evasionbypass.html - http://www.securityfocus.com/archive/1/503018
CVE ID: CVE-2009-5126 State: PUBLISHED Published: 2012-08-26T01:00:00Z Last Updated: 2024-09-16T17:18:01.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Antivirus component in Comodo Internet Security before 3.8.65951.477 allows remote attackers to cause a denial of service (application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://personalfirewall.comodo.com/release_notes.html
CVE ID: CVE-2009-5127 State: PUBLISHED Published: 2012-08-26T01:00:00Z Last Updated: 2024-09-17T03:38:21.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Antivirus component in Comodo Internet Security before 3.8.64739.471 allows remote attackers to cause a denial of service (application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://personalfirewall.comodo.com/release_notes.html
CVE ID: CVE-2009-5128 State: PUBLISHED Published: 2012-08-26T19:00:00Z Last Updated: 2024-09-16T19:04:12.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service (memory consumption and process crash) via a large file that is not properly handled during buffering. Additional Analyst Notes: - CVE Program Container: References: - http://kb.websense.com/pf/12/webfiles/V10000%20Documentation/V10000%20Patches/v1.0.1/V10000_v1.0.1_ReleaseNotes.pdf
CVE ID: CVE-2009-5129 State: PUBLISHED Published: 2012-08-26T19:00:00Z Last Updated: 2024-09-17T01:56:51.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service (intermittent LDAP authentication outage) via a login attempt with an incorrect password. Additional Analyst Notes: - CVE Program Container: References: - http://kb.websense.com/pf/12/webfiles/V10000%20Documentation/V10000%20Patches/v1.0.1/V10000_v1.0.1_ReleaseNotes.pdf
CVE ID: CVE-2009-5130 State: PUBLISHED Published: 2012-08-26T19:00:00Z Last Updated: 2024-09-16T18:59:03.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Rules Service in Websense Email Security before 7.1 allows remote attackers to cause a denial of service (service crash) via an attachment with a crafted size. Additional Analyst Notes: - CVE Program Container: References: - http://www.websense.com/support/article/t-kbarticle/Release-Notes-for-Websense-Email-Security-v7-1
CVE ID: CVE-2009-5131 State: PUBLISHED Published: 2012-08-26T19:00:00Z Last Updated: 2024-09-17T01:26:58.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Receive Service in Websense Email Security before 7.1 does not recognize domain extensions in the blacklist, which allows remote attackers to bypass intended access restrictions and send e-mail messages via an SMTP session. Additional Analyst Notes: - CVE Program Container: References: - http://www.websense.com/support/article/t-kbarticle/Release-Notes-for-Websense-Email-Security-v7-1
CVE ID: CVE-2009-5132 State: PUBLISHED Published: 2012-08-26T19:00:00 Last Updated: 2024-08-07T07:32:23.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Filtering Service in Websense Web Security and Web Filter before 6.3.1 Hotfix 106 and 7.x before 7.1 allow remote attackers to cause a denial of service (filtering outage) via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.websense.com/content/support/library/web/v71/wws_pdfs/ws_releasenotes.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/78570
CVE ID: CVE-2009-5134 State: PUBLISHED Published: 2013-01-18T23:00:00 Last Updated: 2024-08-07T07:32:23.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the "create torrent dialog" functionality in uTorrent 1.8.3 build 15772, and possibly other versions before 1.8.3 (Build 16010), allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a text file containing a large string. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://forum.utorrent.com/viewtopic.php?id=58768 - https://exchange.xforce.ibmclou
CVE Program Container: References: - http://forum.utorrent.com/viewtopic.php?id=58768 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52907 - http://www.exploit-db.com/exploits/9539
CVE ID: CVE-2009-5135 State: PUBLISHED Published: 2013-05-02T10:00:00 Last Updated: 2024-08-07T07:32:22.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java XML parser in Echo before 2.1.1 and 3.x before 3.0.b6 allows remote attackers to read arbitrary files via a request containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34218 - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20090305-0_echo_nextapp_xml_injection.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/49167
a/advisories_txt/20090305-0_echo_nextapp_xml_injection.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/49167 - http://www.securityfocus.com/archive/1/501637/100/0/threaded - http://echo.nextapp.com/site/node/5742 - http://www.exploit-db.com/exploits/8191/ - http://www.vupen.com/english/advisories/2009/0653
CVE ID: CVE-2009-5136 State: PUBLISHED Published: 2013-10-11T22:00:00Z Last Updated: 2024-09-17T03:23:50.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: The policy definition evaluator in Condor before 7.4.2 does not properly handle attributes in a WANT_SUSPEND policy that evaluate to an UNDEFINED state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job. Additional Analyst Notes: - CVE Program Container: References: - https://htcondor-wiki.cs.wisc.edu/index.cgi/tktview?tn=1001 - https://bugzilla.redhat.com/show_bug.cgi?id=540545 - http://rhn.redhat.com/errata/RHSA-2010-0773.html - http://research.cs.wisc.edu/htcondor/m
t.com/show_bug.cgi?id=540545 - http://rhn.redhat.com/errata/RHSA-2010-0773.html - http://research.cs.wisc.edu/htcondor/manual/v7.6/8_5Stable_Release.html
CVE ID: CVE-2009-5137 State: PUBLISHED Published: 2014-01-02T22:00:00Z Last Updated: 2024-09-16T20:32:17.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a long URL in the [playlist] section in a .pls file, a different vector than CVE-2009-1667. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/8663/
CVE ID: CVE-2009-5138 State: PUBLISHED Published: 2014-03-06T18:00:00 Last Updated: 2024-08-07T07:32:22.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: GnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not enabled, treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates, a different vulnerability than CVE-2014-1959. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/57321 - http://secunia.com/advisories/57260 - http://lists.opensuse.org/opensuse-security-announce/2014-
.com/advisories/57321 - http://secunia.com/advisories/57260 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00020.html - http://secunia.com/advisories/57274 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00000.html - http://article.gmane.org/gmane.comp.security.oss.general/12223 - http://rhn.redhat.com/errata/RHSA-2014-0247.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00003.html - http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3351/focus=3361 - https://gitorious.org/gnutls/gnutls/commit/c8dcbedd1fdc312f5b1a70fcfbc1afe235d800cd - http://se
.devel/3351/focus=3361 - https://gitorious.org/gnutls/gnutls/commit/c8dcbedd1fdc312f5b1a70fcfbc1afe235d800cd - http://secunia.com/advisories/57254 - https://bugzilla.redhat.com/show_bug.cgi?id=1069301 - http://thread.gmane.org/gmane.comp.security.oss.general/12127
CVE ID: CVE-2009-5139 State: PUBLISHED Published: 2020-02-12T13:29:00 Last Updated: 2024-08-07T07:32:23.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP implementation on the Gizmo5 software phone provides hashed credentials in a response to an invalid authentication challenge, which makes it easier for remote attackers to obtain access via a brute-force attack, related to a "SIP Digest Leak" issue. Additional Analyst Notes: - CVE Program Container: References: - https://resources.enablesecurity.com/resources/sipdigestleak-tut.pdf - http://voipsa.org/pipermail/voipsec_voipsa.org/2009-April/002946.html
CVE ID: CVE-2009-5140 State: PUBLISHED Published: 2020-02-12T13:28:56 Last Updated: 2024-08-07T07:32:23.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP implementation on the Linksys SPA2102 phone adapter provides hashed credentials in a response to an invalid authentication challenge, which makes it easier for remote attackers to obtain access via a brute-force attack, related to a "SIP Digest Leak" issue. Additional Analyst Notes: - CVE Program Container: References: - https://resources.enablesecurity.com/resources/sipdigestleak-tut.pdf - http://voipsa.org/pipermail/voipsec_voipsa.org/2009-April/002946.html
CVE ID: CVE-2009-5141 State: PUBLISHED Published: 2014-04-01T00:00:00Z Last Updated: 2024-09-16T17:28:04.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in War FTP Daemon (warftpd) 1.82 RC 12 allows remote authenticated users to cause a denial of service (crash) via format string specifiers in a LIST command. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/62599 - http://www.exploit-db.com/exploits/9622 - http://archives.neohapsis.com/archives/bugtraq/2009-09/0105.html - http://www.warftp.org/index.php?menu=338&cmd=show_article&article_id=1003 - https://www.corelan.be/index.php/forum/security-advisories-archive
index.php?menu=338&cmd=show_article&article_id=1003 - https://www.corelan.be/index.php/forum/security-advisories-archive-2009/corelan-09001-warftpd-1-82-rc12-dos/
CVE ID: CVE-2009-5142 State: PUBLISHED Published: 2014-08-21T23:00:00Z Last Updated: 2024-09-16T23:22:04.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in timthumb.php in TimThumb 1.09 and earlier, as used in Mimbo Pro 2.3.1 and other products, allows remote attackers to inject arbitrary web script or HTML via the src parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127724/WordPress-Gamespeed-Theme-Cross-Site-Scripting.html - http://www.osvdb.org/71878 - https://code.google.com/p/timthumb/issues/detail?id=49 - https://code.google.com/p/timthumb/source/detail?r=65
CVE ID: CVE-2009-5143 State: PUBLISHED Published: 2015-08-04T10:00:00 Last Updated: 2024-08-07T07:32:24.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: GE Healthcare Discovery 530C has a password of #bigguy1 for the (1) acqservice user and (2) wsservice user of the Xeleris System, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value. Additional Analyst Notes: - CVE Program Container: References: - http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/ - https://twitter.com/digitalbond/status/619250429751222277 - https://ics-ce
omasbrewster/2015/07/10/vulnerable-breasts/ - https://twitter.com/digitalbond/status/619250429751222277 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02 - http://apps.gehealthcare.com/servlet/ClientServlet/5323167-1EN_r2.pdf?REQ=RAA&DIRECTION=5323167-1EN&FILENAME=5323167-1EN_r2.pdf&FILEREV=2&DOCREV_ORG=2
CVE ID: CVE-2009-5144 State: PUBLISHED Published: 2018-02-03T00:00:00 Last Updated: 2024-08-07T07:32:22.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod-gnutls does not validate client certificates when "GnuTLSClientVerify require" is set in a directory context, which allows remote attackers to spoof clients via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://issues.outoforder.cc/view.php?id=93 - https://bugzilla.redhat.com/show_bug.cgi?id=1197127 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=578663 - http://www.openwall.com/lists/oss-security/2015/02/26/6
CVE ID: CVE-2009-5145 State: PUBLISHED Published: 2017-08-07T17:00:00 Last Updated: 2024-08-07T07:32:22.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ZMI pages that use the manage_tabs_message in Zope 2.11.4, 2.11.2, 2.10.9, 2.10.7, 2.10.6, 2.10.5, 2.10.4, 2.10.2, 2.10.1, 2.12. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/zope2/+bug/490514 - http://www.securityfocus.com/bid/72792/info - http://www.openwall.com/lists/oss-security/2015/03/02/7 - http://cve.killedkenny.io/cve/CVE-2009-5145 - https://github.com/zopefoundation/Zope/commit/2abdf14620f146857dc8e3ffd2b6a754884c331d - https://
io/cve/CVE-2009-5145 - https://github.com/zopefoundation/Zope/commit/2abdf14620f146857dc8e3ffd2b6a754884c331d - https://security-tracker.debian.org/tracker/CVE-2009-5145/
CVE ID: CVE-2009-5146 State: REJECTED Published: 2020-02-18T16:28:56 Last Updated: 2020-02-18T16:28:56 Description: No description available.
CVE ID: CVE-2009-5147 State: PUBLISHED Published: 2017-03-29T14:00:00 Last Updated: 2024-08-07T07:32:23.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: DL::dlopen in Ruby 1.8, 1.9.0, 1.9.2, 1.9.3, 2.0.0 before patchlevel 648, and 2.1 before 2.1.8 opens libraries with tainted names. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ruby/ruby/commit/4600cf725a86ce31266153647ae5aa1197b1215b - http://seclists.org/oss-sec/2015/q3/222 - https://www.ruby-lang.org/en/news/2015/12/16/unsafe-tainted-string-usage-in-fiddle-and-dl-cve-2015-7551/ - https://access.redhat.com/errata/RHSA-2018:0583 - https://bugzilla.redhat.com/show_bug.cgi?id=1248935 - http
015-7551/ - https://access.redhat.com/errata/RHSA-2018:0583 - https://bugzilla.redhat.com/show_bug.cgi?id=1248935 - http://www.securityfocus.com/bid/76060