Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-0680 State: PUBLISHED Published: 2009-02-22T22:00:00 Last Updated: 2024-08-07T04:40:05.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/welcome/VPN_only in the web interface in Netgear SSL312 allows remote attackers to cause a denial of service (device crash) via a crafted query string, as demonstrated using directory traversal sequences. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2009-02/0084.html - http://www.helith.net/txt/netgear_ssl312_remote_dos.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/48605 - http://www.securityfocus.com/bid/33675 - https://www.exploit-
tps://exchange.xforce.ibmcloud.com/vulnerabilities/48605 - http://www.securityfocus.com/bid/33675 - https://www.exploit-db.com/exploits/8008 - http://secunia.com/advisories/33896
CVE ID: CVE-2009-0681 State: PUBLISHED Published: 2009-04-15T10:00:00 Last Updated: 2024-08-07T04:40:05.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: PGP Desktop before 9.10 allows local users to (1) cause a denial of service (crash) via a crafted IOCTL request to pgpdisk.sys, and (2) cause a denial of service (crash) and execute arbitrary code via a crafted IRP in an IOCTL request to pgpwded.sys. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/502633/100/0/threaded - http://en.securitylab.ru/lab/PT-2009-01 - https://pgp.custhelp.com/cgi-bin/pgp.cfg/php/enduser/std_adp.php?p_faqid=1014&p_topview=1 - http://www.security
009-01 - https://pgp.custhelp.com/cgi-bin/pgp.cfg/php/enduser/std_adp.php?p_faqid=1014&p_topview=1 - http://www.securitytracker.com/id?1022034
CVE ID: CVE-2009-0682 State: PUBLISHED Published: 2009-08-19T17:00:00 Last Updated: 2024-08-07T04:40:05.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: vetmonnt.sys in CA Internet Security Suite r3, vetmonnt.sys before 9.0.0.184 in Internet Security Suite r4, and vetmonnt.sys before 10.0.0.217 in Internet Security Suite r5 do not properly verify IOCTL calls, which allows local users to cause a denial of service (system crash) via a crafted call. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/506103/100/0/threaded - http://osvdb.org/57228 - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214673 - http
/0/threaded - http://osvdb.org/57228 - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=214673 - http://www.securityfocus.com/archive/1/505880/100/0/threaded - http://en.securitylab.ru/lab/PT-2009-05
CVE ID: CVE-2009-0686 State: PUBLISHED Published: 2009-04-01T10:00:00 Last Updated: 2024-08-07T04:40:05.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TrendMicro Activity Monitor Module (tmactmon.sys) 2.52.0.1002 in Trend Micro Internet Pro 2008 and 2009, and Security Pro 2008 and 2009, allows local users to gain privileges via a crafted IRP in a METHOD_NEITHER IOCTL request to \Device\tmactmon that overwrites memory. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8322 - http://www.securitytracker.com/id?1021955 - http://www.securityfocus.com/bid/34304 - http://milw0rm.com/sploits/2009-trendmicro_local_expl_0day.zip -
m/id?1021955 - http://www.securityfocus.com/bid/34304 - http://milw0rm.com/sploits/2009-trendmicro_local_expl_0day.zip - http://en.securitylab.ru/lab/PT-2009-09 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49513 - http://www.securityfocus.com/archive/1/502314/100/0/threaded
CVE ID: CVE-2009-0687 State: PUBLISHED Published: 2009-08-11T10:00:00 Last Updated: 2024-08-07T04:40:05.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, MirOS 10 and earlier, and MidnightBSD 0.3-current allows remote attackers to cause a denial of service (panic) via crafted IP packets that trigger a NULL pointer dereference during translation, related to an IPv4 packet with an ICMPv6 payload. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/53608 - http://www.openbsd.org/errata43.html#013_pf - http://ftp.netbsd.org/pub/NetBSD
eferences: - http://www.osvdb.org/53608 - http://www.openbsd.org/errata43.html#013_pf - http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-001.txt.asc - https://www.exploit-db.com/exploits/8406 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49837 - http://www.helith.net/txt/multiple_vendor-PF_null_pointer_dereference.txt - http://www.securityfocus.com/archive/1/502634 - https://www.exploit-db.com/exploits/8581 - http://www.openbsd.org/errata44.html#013_pf - http://www.vupen.com/english/advisories/2009/1015 - ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.3/common/013_pf.patch - http://www.openbsd.org/errata45.html#002_pf
CVE ID: CVE-2009-0688 State: PUBLISHED Published: 2009-05-15T15:00:00 Last Updated: 2024-08-07T04:40:05.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54515 - http://secunia.com/advisories/35239 - http://www.us-cert.gov/cas/techalerts/TA10-103B.html - http://secunia.com/advisories/35321 - http://www.kb.cert.org/vuls/id/238019 - http://secuni
/techalerts/TA10-103B.html - http://secunia.com/advisories/35321 - http://www.kb.cert.org/vuls/id/238019 - http://secunia.com/advisories/35497 - http://secunia.com/advisories/35102 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.448834 - http://secunia.com/advisories/35746 - http://secunia.com/advisories/39428 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020755.1-1 - http://secunia.com/advisories/35094 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://www.debian.org/security/2009/dsa-1807 - http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0091 - https://oval.cisecurity.org/repository/search/definitio
sa-1807 - http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0091 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6136 - http://secunia.com/advisories/35097 - http://www.vupen.com/english/advisories/2009/1313 - http://www.vupen.com/english/advisories/2009/2012 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10687 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021699.1-1 - http://security.gentoo.org/glsa/glsa-200907-09.xml - http://support.apple.com/kb/HT4077 - http://www.oracle.com/technetwork/topics/security/cpuapr2010-09950
-200907-09.xml - http://support.apple.com/kb/HT4077 - http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html - http://support.avaya.com/elmodocs2/security/ASA-2009-184.htm - http://sunsolve.sun.com/search/document.do?assetkey=1-66-264248-1 - http://secunia.com/advisories/35206 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-259148-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:113 - http://www.redhat.com/support/errata/RHSA-2009-1116.html - http://www.securityfocus.com/bid/34961 - http://secunia.com/advisories/35416 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-273910-1 - http://osvdb.org/54514 - http://www.ubuntu.com/usn/usn-790-1 -
solve.sun.com/search/document.do?assetkey=1-66-273910-1 - http://osvdb.org/54514 - http://www.ubuntu.com/usn/usn-790-1 - http://www.securitytracker.com/id?1022231 - ftp://ftp.andrew.cmu.edu/pub/cyrus-mail/cyrus-sasl-2.1.23.tar.gz - https://exchange.xforce.ibmcloud.com/vulnerabilities/50554
CVE ID: CVE-2009-0689 State: PUBLISHED Published: 2009-07-01T12:26:00 Last Updated: 2024-08-07T04:40:05.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format a
a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number. Additional Analyst Notes: - CVE Program Container: References: - http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gdtoa/gdtoaimp.h - http://secunia.com/secunia_research/2009-35/ - https://bugzilla.mozilla.org/show_bug.cgi?id=516862 - http://securityreason.com/achievement_securityalert/63 - http://www.securityfocus.com/archive/1/507979/100/0/threaded - http://securityreason.com/achievement_securityalert/78 - http://www.redhat
tyfocus.com/archive/1/507979/100/0/threaded - http://securityreason.com/achievement_securityalert/78 - http://www.redhat.com/support/errata/RHSA-2010-0153.html - http://securityreason.com/achievement_securityalert/75 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:330 - http://secunia.com/advisories/39001 - http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html - http://www.securityfocus.com/archive/1/507977/100/0/threaded - http://support.apple.com/kb/HT4225 - http://securityreason.com/achievement_securityalert/73 - http://securityreason.com/achievement_securityalert/72 - http://www.mozilla.org/security/announce/2009/mfsa2009-59.html - http://www.vupen.com/
om/achievement_securityalert/72 - http://www.mozilla.org/security/announce/2009/mfsa2009-59.html - http://www.vupen.com/english/advisories/2010/0094 - http://www.vupen.com/english/advisories/2010/0648 - http://www.vupen.com/english/advisories/2010/0650 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1 - http://www.vupen.com/english/advisories/2009/3299 - http://www.redhat.com/support/errata/RHSA-2009-1601.html - http://www.securityfocus.com/archive/1/508423/100/0/threaded - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - https://lists.debian.org/debian-lts-announce/2018/11/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2010-
/lists.debian.org/debian-lts-announce/2018/11/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html - http://rhn.redhat.com/errata/RHSA-2014-0312.html - http://secunia.com/advisories/37683 - http://secunia.com/advisories/38977 - http://www.opera.com/support/kb/view/942/ - http://securityreason.com/achievement_securityalert/69 - http://www.redhat.com/support/errata/RHSA-2010-0154.html - http://support.apple.com/kb/HT4077 - https://bugzilla.mozilla.org/show_bug.cgi?id=516396 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6528 - http://secunia.com/advisories/37682 - https://oval.cisecurity.org/repository/search/defin
Aorg.mitre.oval%3Adef%3A6528 - http://secunia.com/advisories/37682 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9541 - http://secunia.com/advisories/38066 - http://www.ubuntu.com/usn/USN-915-1 - http://www.securityfocus.com/archive/1/508417/100/0/threaded - http://rhn.redhat.com/errata/RHSA-2014-0311.html - http://www.vupen.com/english/advisories/2009/3297 - http://securityreason.com/achievement_securityalert/76 - http://secunia.com/advisories/37431 - http://securityreason.com/achievement_securityalert/81 - http://securityreason.com/achievement_securityalert/71 - http://securitytracker.com/id?1022478 - http://lists.apple.com/archives/security-annou
om/achievement_securityalert/71 - http://securitytracker.com/id?1022478 - http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html - http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gdtoa/misc.c - http://www.vupen.com/english/advisories/2009/3334 - http://securityreason.com/achievement_securityalert/77 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:294 - http://www.securityfocus.com/bid/35510
CVE ID: CVE-2009-0690 State: PUBLISHED Published: 2009-06-23T21:21:00Z Last Updated: 2024-09-16T23:01:54.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a negative value for the stream offset in a JPEG2000 (aka JPX) stream, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted PDF file that triggers an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35442 - http://www.foxitsoftware.com/pdf/r
otes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35442 - http://www.foxitsoftware.com/pdf/reader/security.htm#0602 - http://securitytracker.com/id?1022425 - http://www.kb.cert.org/vuls/id/251793 - http://secunia.com/advisories/35512 - http://www.vupen.com/english/advisories/2009/1640
CVE ID: CVE-2009-0691 State: PUBLISHED Published: 2009-06-23T21:21:00Z Last Updated: 2024-09-16T22:45:23.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a fatal error during decoding of a JPEG2000 (aka JPX) header, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted PDF file that triggers an invalid memory access. Additional Analyst Notes: - CVE Program Container: References: - http://www.foxitsoftware.com/pdf/reader/security.htm#0602 - http://securitytracke
- CVE Program Container: References: - http://www.foxitsoftware.com/pdf/reader/security.htm#0602 - http://securitytracker.com/id?1022425 - http://www.kb.cert.org/vuls/id/251793 - http://www.securityfocus.com/bid/35443 - http://secunia.com/advisories/35512 - http://www.vupen.com/english/advisories/2009/1640
CVE ID: CVE-2009-0692 State: PUBLISHED Published: 2009-07-14T20:16:00 Last Updated: 2024-08-07T04:48:51.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 before 3.1.2p1, 3.0, and 2.0 allows remote DHCP servers to execute arbitrary code via a crafted subnet-mask option. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1891 - https://www.isc.org/node/468 - http://secunia.com/advisories/35830 - https://bugzilla.redhat.com/show_bug.cgi?id=507717 - http://secunia.com/advisories
http://secunia.com/advisories/35830 - https://bugzilla.redhat.com/show_bug.cgi?id=507717 - http://secunia.com/advisories/35832 - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083 - http://secunia.com/advisories/35850 - http://secunia.com/advisories/35785 - http://www.kb.cert.org/vuls/id/410676 - http://secunia.com/advisories/35880 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00003.html - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083 - https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00340.html - http://secunia.com/advisories/40551 - http://www.osvdb.org/55819 - http://www.securityfocus.com/bid/35668 - http:/
tml - http://secunia.com/advisories/40551 - http://www.osvdb.org/55819 - http://www.securityfocus.com/bid/35668 - http://www.debian.org/security/2009/dsa-1833 - http://security.gentoo.org/glsa/glsa-200907-12.xml - http://www.mandriva.com/security/advisories?name=MDVSA-2009:151 - http://www.redhat.com/support/errata/RHSA-2009-1136.html - http://secunia.com/advisories/35831 - http://secunia.com/advisories/35829 - http://www.vupen.com/english/advisories/2010/1796 - http://secunia.com/advisories/35841 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5941 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10758 - http:/
val%3Adef%3A5941 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10758 - http://www.ubuntu.com/usn/usn-803-1 - http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-010.txt.asc - https://www.isc.org/downloadables/12 - http://www.redhat.com/support/errata/RHSA-2009-1154.html - http://secunia.com/advisories/37342 - http://secunia.com/advisories/35851 - http://secunia.com/advisories/35849 - http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561471 - http://www.securitytracker.com/id?1022548 - http://secunia.com/advisories/36457 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg011
22548 - http://secunia.com/advisories/36457 - https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01177.html
CVE ID: CVE-2009-0693 State: PUBLISHED Published: 2012-06-19T20:00:00Z Last Updated: 2024-09-16T19:25:41.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Wyse Device Manager (WDM) 4.7.x allow remote attackers to execute arbitrary code via (1) the User-Agent HTTP header to hserver.dll or (2) unspecified input to hagent.exe. Additional Analyst Notes: - CVE Program Container: References: - http://www.wyse.com/serviceandsupport/Wyse%20Security%20Bulletin%20WSB09-01.pdf - http://www.kb.cert.org/vuls/id/654545 - http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0101.html - http://www.theregister.co.uk/2009/07/10/wyse_remote_exploit_bugs/
CVE ID: CVE-2009-0695 State: PUBLISHED Published: 2012-06-19T20:00:00Z Last Updated: 2024-09-17T02:31:30.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: hagent.exe in Wyse Device Manager (WDM) 4.7.x does not require authentication for commands, which allows remote attackers to obtain management access via a crafted query, as demonstrated by a V52 query that triggers a power-off action. Additional Analyst Notes: - CVE Program Container: References: - http://www.wyse.com/serviceandsupport/Wyse%20Security%20Bulletin%20WSB09-01.pdf - http://www.kb.cert.org/vuls/id/654545 - http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0101.html - http://www.theregister.co.uk/2009/
id/654545 - http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0101.html - http://www.theregister.co.uk/2009/07/10/wyse_remote_exploit_bugs/ - http://www.exploit-db.com/exploits/19137/
CVE ID: CVE-2009-0696 State: PUBLISHED Published: 2009-07-29T17:00:00 Last Updated: 2024-08-07T04:48:51.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an ANY record in the prerequisite section of a crafted dynamic update message, as exploited in the wild in July 2009. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36035 - http://secunia.com/advisories/36063 - http://www.vupe
ram Container: References: - http://secunia.com/advisories/36035 - http://secunia.com/advisories/36063 - http://www.vupen.com/english/advisories/2009/2171 - http://secunia.com/advisories/36056 - http://secunia.com/advisories/36038 - http://aix.software.ibm.com/aix/efixes/security/bind_advisory.asc - http://www.kb.cert.org/vuls/id/725188 - http://secunia.com/advisories/37471 - http://secunia.com/advisories/36050 - http://www.openbsd.org/errata44.html#014_bind - http://www.securityfocus.com/archive/1/505403/100/0/threaded - http://secunia.com/advisories/36192 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://www.vupen.com/english/advisories/2009/2088 - http://www.securit
are.com/security/advisories/VMSA-2009-0016.html - http://www.vupen.com/english/advisories/2009/2088 - http://www.securitytracker.com/id?1022613 - https://www.isc.org/node/474 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020788.1-1 - http://www.vupen.com/english/advisories/2009/2247 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7806 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://secunia.com/advisories/39334 - http://www.vupen.com/english/advisories/2009/2036 - http://wiki.rpath.com/Advisories:rPSA-2009-0113 - http://secunia.com/advisories/36098 - https://oval.cisecurity.org/repository/search/definition/oval%3Ao
rPSA-2009-0113 - http://secunia.com/advisories/36098 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10414 - http://up2date.astaro.com/2009/08/up2date_7505_released.html - http://www.ubuntu.com/usn/usn-808-1 - http://secunia.com/advisories/36086 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01265.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12245 - http://secunia.com/advisories/36053 - ftp://ftp.sco.com/pub/unixware7/714/security/p535243_uw7/p535243b.txt - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561499 - ftp://ftp.netbsd.org/
://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561499 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-013.txt.asc - http://www.vupen.com/english/advisories/2009/3316 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=538975 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-264828-1
CVE ID: CVE-2009-0698 State: PUBLISHED Published: 2009-02-23T15:00:00 Last Updated: 2024-08-07T04:48:51.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the 4xm demuxer (demuxers/demux_4xm.c) in xine-lib 1.1.16.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a 4X movie file with a large current_track value, a similar issue to CVE-2009-0385. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-746-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:299 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48954 - http://sourceforge.net/project/showno
name=MDVSA-2009:299 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48954 - http://sourceforge.net/project/shownotes.php?release_id=660071 - http://bugs.xine-project.org/show_bug.cgi?id=205 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:298 - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html - http://www.trapkit.de/advisories/TKADV2009-004.txt - http://www.securityfocus.com/archive/1/500514/100/0/threaded
CVE ID: CVE-2009-0699 State: PUBLISHED Published: 2009-02-23T15:00:00 Last Updated: 2024-08-07T04:48:51.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in pagesUTF8/auftrag_allgemeinauftrag.jsp in Plunet BusinessManager 4.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the (1) QUB and (2) Bez74 parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securenetwork.it/ricerca/advisory/download/SN-2008-04.txt - http://archives.neohapsis.com/archives/bugtraq/2009-01/0032.html - http://archives.neohapsis.com/archives/bugtraq/2009-01/0054.html - https://exchange.xforc