Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-2273 State: PUBLISHED Published: 2009-07-01T12:26:00 Last Updated: 2024-08-07T05:44:55.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the Wi-Fi component on the Huawei D100 does not use encryption, which makes it easier for remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/504645/100/0/threaded
CVE ID: CVE-2009-2274 State: PUBLISHED Published: 2009-07-01T12:26:00 Last Updated: 2024-08-07T05:44:55.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Huawei D100 allows remote attackers to obtain sensitive information via a direct request to (1) lan_status_adv.asp, (2) wlan_basic_cfg.asp, or (3) lancfg.asp in en/, related to use of JavaScript to protect against reading file contents. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/504645/100/0/threaded - http://secunia.com/advisories/35638
CVE ID: CVE-2009-2275 State: PUBLISHED Published: 2009-07-01T12:26:00 Last Updated: 2024-08-07T05:44:55.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in frontend/x3/stats/lastvisit.html in cPanel allows remote attackers to read arbitrary files via a .. (dot dot) in the domain parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35518 - http://www.securitytracker.com/id?1022490 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51426 - http://www.exploit-db.com/exploits/9039
CVE ID: CVE-2009-2276 State: PUBLISHED Published: 2009-07-01T12:26:00 Last Updated: 2024-08-07T05:44:55.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in voteforus.php in the Vote For Us extension 1.0.1 and earlier for PunBB allows remote attackers to execute arbitrary SQL commands via the out parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9058
CVE ID: CVE-2009-2277 State: PUBLISHED Published: 2010-04-01T19:00:00 Last Updated: 2024-08-07T05:44:55.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "context data." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39037 - http://lists.vmware.com/pipermail/security-announce/2010/000086.html - http://www.vmware.com/security/advisories/VMSA-2010-0005.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.
mware.com/security/advisories/VMSA-2010-0005.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7080
CVE ID: CVE-2009-2281 State: PUBLISHED Published: 2009-10-23T18:00:00Z Last Updated: 2024-09-16T16:23:42.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer underflows in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x through 4.10.4 and 5.x before 5.4.2 allow remote attackers to execute arbitrary code via (1) a crafted Content-Length HTTP header or (2) a large HTTP request, related to an integer overflow that triggers a heap-based buffer overflow. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-0840. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-securit
VE-2009-0840. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/07/01/6 - http://security.debian.org/pool/updates/main/m/mapserver/mapserver_4.10.0-5.1+etch4.diff.gz - http://trac.osgeo.org/mapserver/browser/tags/rel-5-4-2/mapserver/HISTORY.TXT - http://www.openwall.com/lists/oss-security/2009/07/01/1 - http://www.debian.org/security/2009/dsa-1914 - http://trac.osgeo.org/mapserver/ticket/2943 - http://security.debian.org/pool/updates/main/m/mapserver/mapserver_5.0.3-3+lenny4.diff.gz
CVE ID: CVE-2009-2282 State: PUBLISHED Published: 2009-07-01T12:26:00Z Last Updated: 2024-09-16T23:16:10.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Virtual Network Terminal Server daemon (vntsd) for Logical Domains (aka LDoms) in Sun Solaris 10, and OpenSolaris snv_41 through snv_108, on SPARC platforms does not check authorization for guest console access, which allows local control-domain users to gain guest-domain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-21-141778-01-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-262708-1 - http://secunia.com
nt.do?assetkey=1-21-141778-01-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-262708-1 - http://secunia.com/advisories/35547 - http://www.osvdb.org/55329 - http://www.securityfocus.com/bid/35502
CVE ID: CVE-2009-2283 State: PUBLISHED Published: 2009-07-01T12:26:00 Last Updated: 2024-08-07T05:44:55.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the help jsp scripts in Sun Java Web Console 3.0.2 through 3.0.5, and Sun Java Web Console in Solaris 10, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-262428-1 - http://secunia.com/advisories/35597 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020659.1-1 - http://sunsolve.sun.com/search/document.do
5597 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020659.1-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-136987-03-1
CVE ID: CVE-2009-2284 State: PUBLISHED Published: 2009-07-01T12:26:00 Last Updated: 2024-08-07T05:44:55.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpMyAdmin before 3.2.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted SQL bookmark. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00256.html - http://www.phpmyadmin.net/home_page/security/PMASA-2009-5.php - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00152.html - http://secunia.com/advisories/35715 - http://secunia.com/advisories/35649 - ht
ackage-announce/2009-July/msg00152.html - http://secunia.com/advisories/35715 - http://secunia.com/advisories/35649 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:192 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00150.html
CVE ID: CVE-2009-2285 State: PUBLISHED Published: 2009-07-01T12:26:00 Last Updated: 2024-08-07T05:44:55.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service (crash) via a crafted TIFF image, a different vulnerability than CVE-2008-2327. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00161.html - http://secunia.com/advisories/35866 - https://www.redhat.com/archives/fedora-package-announce/2009-J
uly/msg00161.html - http://secunia.com/advisories/35866 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00655.html - http://www.vupen.com/english/advisories/2009/1637 - http://www.openwall.com/lists/oss-security/2009/06/23/1 - http://bugzilla.maptools.org/show_bug.cgi?id=2065 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7049 - http://secunia.com/advisories/39135 - http://support.apple.com/kb/HT4004 - http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html - https://usn.ubuntu.com/797-1/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10145 - http://support.apple.com/kb
tps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10145 - http://support.apple.com/kb/HT4105 - http://secunia.com/advisories/35716 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00714.html - http://www.openwall.com/lists/oss-security/2009/06/22/1 - http://secunia.com/advisories/35912 - http://support.apple.com/kb/HT4070 - http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html - http://secunia.com/advisories/35883 - http://www.vupen.com/english/advisories/2009/2727 - http://secunia.com/advisories/35695 - http://www.lan.st/showthread.php?t=1856&page=3 - http://secunia.com/advisories/36194 - http://secunia.com/advisori
695 - http://www.lan.st/showthread.php?t=1856&page=3 - http://secunia.com/advisories/36194 - http://secunia.com/advisories/36831 - http://security.gentoo.org/glsa/glsa-200908-03.xml - http://www.vupen.com/english/advisories/2009/3184 - http://support.apple.com/kb/HT4013 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00142.html - http://lists.apple.com/archives/security-announce/2010//Mar/msg00003.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-267808-1 - http://www.redhat.com/support/errata/RHSA-2009-1159.html - http://secunia.com/advisories/38241 - https://bugs.launchpad.net/ubuntu/+source/tiff/+bug/380149 - http://lists.apple.com/archives/security-an
isories/38241 - https://bugs.launchpad.net/ubuntu/+source/tiff/+bug/380149 - http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00230.html - http://www.debian.org/security/2009/dsa-1835 - http://www.openwall.com/lists/oss-security/2009/06/29/5 - http://www.vupen.com/english/advisories/2010/0173 - http://support.apple.com/kb/HT3937
CVE ID: CVE-2009-2286 State: PUBLISHED Published: 2009-07-01T12:26:00 Last Updated: 2024-08-07T05:44:55.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in compface 1.5.2 and earlier allows user-assisted attackers to cause a denial of service (crash) via a long declaration in a .xbm file. NOTE: this issue only affects compface on distributions that used a certain patch. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2009/07/03/1 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534973 - http://www.openwall.com/lists/oss-security/2009/06/29/2 - http://www.openwall.com/lists/oss-security/2009/06/29/4 -
73 - http://www.openwall.com/lists/oss-security/2009/06/29/2 - http://www.openwall.com/lists/oss-security/2009/06/29/4 - http://www.securityfocus.com/bid/35863
CVE ID: CVE-2009-2287 State: PUBLISHED Published: 2009-07-01T12:26:00 Last Updated: 2024-08-07T05:44:55.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kvm_arch_vcpu_ioctl_set_sregs function in the KVM in Linux kernel 2.6 before 2.6.30, when running on x86 systems, does not validate the page table root in a KVM_SET_SREGS call, which allows local users to cause a denial of service (crash or hang) via a crafted cr3 value, which triggers a NULL pointer dereference in the gfn_to_rmap function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35675 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 - http://www.ubunt
http://secunia.com/advisories/35675 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 - http://www.ubuntu.com/usn/usn-807-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=59839dfff5eabca01cc4e20b45797a60a80af8cb - http://sourceforge.net/tracker/?func=detail&atid=893831&aid=2687641&group_id=180599 - http://secunia.com/advisories/36045 - http://secunia.com/advisories/36054 - http://www.debian.org/security/2009/dsa-1845 - http://www.openwall.com/lists/oss-security/2009/06/30/1 - http://git.kernel.org/?p=linux/kernel/git/stable/stable-queue.git%3Ba=blob%3Bf=queue-2.6.30/kvm-x86-check-for-cr3-validity-in-ioctl_set_sregs.patch%3Bh=b48a47dad2cf
able/stable-queue.git%3Ba=blob%3Bf=queue-2.6.30/kvm-x86-check-for-cr3-validity-in-ioctl_set_sregs.patch%3Bh=b48a47dad2cf76358b327368f80c0805e6370c68%3Bhb=e7c45b24f298b5d9efd7d401150f64a1b51aaac4
CVE ID: CVE-2009-2288 State: PUBLISHED Published: 2009-07-01T12:26:00 Last Updated: 2024-08-07T05:44:55.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) ping or (2) Traceroute parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35688 - http://security.gentoo.org/glsa/glsa-200907-15.xml - http://secunia.com/advisories/35543 - http://secunia.com/advisories/39227 - http://tracker.nagios.org/view.php?id=15 - http://www.nagios.org/development/history/core-3x/ - http://marc.info/?l=bugtraq&m=126996888626
ios.org/view.php?id=15 - http://www.nagios.org/development/history/core-3x/ - http://marc.info/?l=bugtraq&m=126996888626964&w=2 - http://www.vupen.com/english/advisories/2010/0750 - http://secunia.com/advisories/35692 - http://www.securitytracker.com/id?1022503 - http://www.ubuntu.com/usn/USN-795-1 - http://marc.info/?l=bugtraq&m=126996888626964&w=2 - http://www.debian.org/security/2009/dsa-1825
CVE ID: CVE-2009-2289 State: PUBLISHED Published: 2009-07-01T12:26:00 Last Updated: 2024-08-07T05:44:55.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Arcade Trade Script 1.0 beta allows remote attackers to inject arbitrary web script or HTML via the q parameter in a gamelist action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/503801/100/0/threaded - http://secunia.com/advisories/35197 - http://www.davidsopas.com/2009/05/25/arcade-trade-script-xss
CVE ID: CVE-2009-2290 State: PUBLISHED Published: 2009-07-01T12:26:00 Last Updated: 2024-08-07T05:44:55.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Boy Scout Advancement (com_bsadv) component 0.3 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a (1) account or (2) event task to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/503794/100/0/threaded - http://www.securityfocus.com/bid/35087
CVE ID: CVE-2009-2291 State: PUBLISHED Published: 2009-07-01T12:26:00Z Last Updated: 2024-09-17T03:28:02.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in LoginToboggan 6.x-1.x before 6.x-1.5, a module for Drupal, when "Allow users to login using their e-mail address" is enabled, allows remote blocked users to bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34945 - http://www.osvdb.org/54428 - http://secunia.com/advisories/35081 - http://drupal.org/node/461662 - http://drupal.org/node/461682 - http://www.vupen.com/english/advisories/2009/13
/35081 - http://drupal.org/node/461662 - http://drupal.org/node/461682 - http://www.vupen.com/english/advisories/2009/1312
CVE ID: CVE-2009-2292 State: PUBLISHED Published: 2009-07-01T12:26:00 Last Updated: 2024-08-07T05:44:55.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Appleple a-News 2.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50679 - http://www.securityfocus.com/bid/35070 - http://www.osvdb.org/54636 - http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000030.html - http://jvn.jp/en/jp/JVN42927215/index.html - http://www.appleple.com/news/index.php?ID=170 - http://secunia.com/advisorie
ttp://jvn.jp/en/jp/JVN42927215/index.html - http://www.appleple.com/news/index.php?ID=170 - http://secunia.com/advisories/35171
CVE ID: CVE-2009-2293 State: PUBLISHED Published: 2009-07-01T12:26:00 Last Updated: 2024-08-07T05:44:55.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Optimum Web Design Tutorial Share 3.5.0 and earlier allows remote attackers to bypass authentication and obtain administrative access by setting the usernamed cookie parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50685 - http://osvdb.org/54704 - http://www.securityfocus.com/bid/35075 - http://secunia.com/advisories/35207 - http://www.exploit-db.com/exploits/8766
CVE ID: CVE-2009-2294 State: PUBLISHED Published: 2009-07-05T16:00:00 Last Updated: 2024-08-07T05:44:55.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the Png_datainfo_callback function in Dillo 2.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PNG image with crafted (1) width or (2) height values. Additional Analyst Notes: - CVE Program Container: References: - http://www.ocert.org/advisories/ocert-2009-008.html - http://www.securityfocus.com/archive/1/504727/100/0/threaded - http://secunia.com/advisories/35647 - http://osvdb.org/55656
CVE ID: CVE-2009-2295 State: PUBLISHED Published: 2009-07-05T16:00:00 Last Updated: 2024-08-07T05:44:55.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in CamlImages 2.2 and earlier might allow context-dependent attackers to execute arbitrary code via a crafted PNG image with large width and height values that trigger a heap-based buffer overflow in the (1) read_png_file or (2) read_png_file_as_rgb24 function. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1874 - http://www.securityfocus.com/archive/1/504696/100/0/threaded - http://secunia.com/advisories/35819 - http://www.debian.org/sec
/www.securityfocus.com/archive/1/504696/100/0/threaded - http://secunia.com/advisories/35819 - http://www.debian.org/security/2009/dsa-1832 - http://www.securityfocus.com/bid/35556 - http://www.ocert.org/advisories/ocert-2009-009.html
CVE ID: CVE-2009-2296 State: PUBLISHED Published: 2009-07-02T10:00:00 Last Updated: 2024-08-07T05:44:55.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv_119, does not properly implement the nfs_portmon setting, which allows remote attackers to access shares, and read, create, and modify arbitrary files, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-262668-1 - http://secunia.com/advisories/35672 - http://www.vupen.com/english/advisories/2009/1747 - http://secunia.com/advisories/42550 - https://exchange.
ries/35672 - http://www.vupen.com/english/advisories/2009/1747 - http://secunia.com/advisories/42550 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51450 - http://www.securityfocus.com/bid/35546 - https://support.avaya.com/css/P8/documents/100058487 - http://osvdb.org/55519 - http://www.securitytracker.com/id?1022492 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-139991-03-1
CVE ID: CVE-2009-2297 State: PUBLISHED Published: 2009-07-02T10:00:00 Last Updated: 2024-08-07T05:44:55.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the udp subsystem in the kernel in Sun Solaris 10, and OpenSolaris snv_90 through snv_108, when Solaris Trusted Extensions is enabled, allows remote attackers to cause a denial of service (panic) via unspecified vectors involving the crgetlabel function, related to a "TX panic." NOTE: this issue exists because of a regression in earlier kernel patches. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-02-1 - http://sunso
CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-02-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-262048-1 - http://secunia.com/advisories/35579
CVE ID: CVE-2009-2298 State: PUBLISHED Published: 2009-07-02T10:00:00Z Last Updated: 2024-09-16T16:33:00.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in rping in HP OpenView Network Node Manager (OV NNM) 7.53 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, possibly involving a CGI request to webappmon.exe. NOTE: this may overlap CVE-2009-1420. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=810
CVE ID: CVE-2009-2299 State: PUBLISHED Published: 2009-07-02T10:00:00 Last Updated: 2024-08-07T05:44:55.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Artofdefence Hyperguard Web Application Firewall (WAF) module before 2.5.5-11635, 3.0 before 3.0.3-11636, and 3.1 before 3.1.1-11637, a module for the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via an HTTP request with a large Content-Length value but no POST data. Additional Analyst Notes: - CVE Program Container: References: - http://www.h4ck1nb3rg.at/wafs/advisory_artofdefence_hyperguard_200907.txt - http://www.securityfocus.com/archive/1/504680/100/0/threaded - http://
afs/advisory_artofdefence_hyperguard_200907.txt - http://www.securityfocus.com/archive/1/504680/100/0/threaded - http://secunia.com/advisories/35645
CVE ID: CVE-2009-2300 State: PUBLISHED Published: 2009-07-02T10:00:00 Last Updated: 2024-08-07T05:44:55.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management interface in the phion airlock Web Application Firewall (WAF) 4.1-10.41 does not properly handle CGI requests that specify large width and height parameters for an image, which allows remote attackers to execute arbitrary commands or cause a denial of service (resource consumption) via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/504681/100/0/threaded - http://secunia.com/advisories/35641 - https://techzone.phion.com/hotfix_HF4112
CVE ID: CVE-2009-2301 State: PUBLISHED Published: 2009-07-02T10:00:00 Last Updated: 2024-08-07T05:44:55.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: The radware AppWall Web Application Firewall (WAF) 1.0.2.6, with Gateway 4.6.0.2, allows remote attackers to read source code via a direct request to (1) funcs.inc, (2) defines.inc, or (3) msg.inc in Management/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/504682/100/0/threaded
CVE ID: CVE-2009-2302 State: PUBLISHED Published: 2009-07-02T10:00:00 Last Updated: 2024-08-07T05:44:55.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Aardvark Topsites PHP 5.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search action. NOTE: it was later reported that 5.2.1 is also affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35506 - http://www.securityfocus.com/archive/1/504574/100/0/threaded - http://secunia.com/advisories/41985 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51391 - http://
/0/threaded - http://secunia.com/advisories/41985 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51391 - http://www.securityfocus.com/archive/1/514423/100/0/threaded - http://websec.id3as.com/aardvark-topsites-php-521-security-vulnerabilities-disclosure/