Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-5034 State: PUBLISHED Published: 2010-12-16T19:45:00 Last Updated: 2024-08-07T07:24:54.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Lotus Notes Traveler before 8.5.0.2 allows remote authenticated users to cause a denial of service (memory consumption and daemon crash) by syncing a large volume of data, related to the launch of a new process to handle the data while the previous process is still operating on the data. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64741 - http://www-10.lotus.com/ldd/dominowiki.nsf/page.xsp?documentId=A6604E906E0DF2DF8525778B005D4466&action=openDocume
4741 - http://www-10.lotus.com/ldd/dominowiki.nsf/page.xsp?documentId=A6604E906E0DF2DF8525778B005D4466&action=openDocument - http://www-1.ibm.com/support/docview.wss?uid=swg1LO41707 - http://www-01.ibm.com/support/docview.wss?uid=swg24019529&aid=1
CVE ID: CVE-2009-5035 State: PUBLISHED Published: 2010-12-16T19:45:00Z Last Updated: 2024-09-17T01:22:10.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Nokia client in IBM Lotus Notes Traveler before 8.5.0.2 does not properly handle multiple outgoing e-mail messages between sync operations, which might allow remote attackers to read communications intended for other recipients by examining appended messages. Additional Analyst Notes: - CVE Program Container: References: - http://www-10.lotus.com/ldd/dominowiki.nsf/page.xsp?documentId=A6604E906E0DF2DF8525778B005D4466&action=openDocument - http://www-1.ibm.com/support/docview.wss?uid=swg1LO47028
CVE ID: CVE-2009-5036 State: PUBLISHED Published: 2010-12-16T19:45:00Z Last Updated: 2024-09-16T18:29:36.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: traveler.exe in IBM Lotus Notes Traveler before 8.0.1.3 CF1 allows remote authenticated users to cause a denial of service (daemon crash) via a malformed invitation document in a sync operation. Additional Analyst Notes: - CVE Program Container: References: - http://www-10.lotus.com/ldd/dominowiki.nsf/page.xsp?documentId=A6604E906E0DF2DF8525778B005D4466&action=openDocument - http://www-01.ibm.com/support/docview.wss?uid=swg24019529&aid=3 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO44111
CVE ID: CVE-2009-5037 State: PUBLISHED Published: 2011-01-07T11:00:00 Last Updated: 2024-08-07T07:24:54.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allow remote attackers to cause a denial of service (ASDM syslog outage) via a long URL, aka Bug IDs CSCsm11264 and CSCtb92911. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64732 - https://supportforums.cisco.com/thread/238724 - http://www.securitytracker.com/id?1024963 - https://supportforums.cisco.com/thread/2018112 - http://www.cisco.com/en/US/docs/security/asa/asa
acker.com/id?1024963 - https://supportforums.cisco.com/thread/2018112 - http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf
CVE ID: CVE-2009-5038 State: PUBLISHED Published: 2011-01-07T18:00:00 Last Updated: 2024-08-07T07:24:54.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS before 15.0(1)XA does not properly handle IRC traffic during a specific time period after an initial reload, which allows remote attackers to cause a denial of service (device reload) via an attempted connection to a certain IRC server, related to a "corrupted magic value," aka Bug ID CSCso05336. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64682 - http://www.securityfocus.com/bid/45764 - http://www.cisco.com/en/US/docs/ios/15_0/15_0x/15_01_XA/r
lnerabilities/64682 - http://www.securityfocus.com/bid/45764 - http://www.cisco.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdf
CVE ID: CVE-2009-5039 State: PUBLISHED Published: 2011-01-07T18:00:00 Last Updated: 2024-08-07T07:24:54.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the gk_circuit_info_do_in_acf function in the H.323 implementation in Cisco IOS before 15.0(1)XA allows remote attackers to cause a denial of service (memory consumption) via a large number of calls over a long duration, as demonstrated by InterZone Clear Token (IZCT) test traffic, aka Bug ID CSCsz72535. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64731 - http://www.cisco.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdf
CVE ID: CVE-2009-5040 State: PUBLISHED Published: 2011-01-07T18:00:00 Last Updated: 2024-08-07T07:24:53.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: CallManager Express (CME) on Cisco IOS before 15.0(1)XA allows remote authenticated users to cause a denial of service (device crash) by using an extension mobility (EM) phone to interact with the menu for SNR number changes, aka Bug ID CSCta63555. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64681 - http://www.securityfocus.com/bid/45765 - http://www.cisco.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdf
CVE ID: CVE-2009-5041 State: PUBLISHED Published: 2019-10-31T15:35:27 Last Updated: 2024-08-07T07:24:54.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: overkill has buffer overflow via long player names that can corrupt data on the server machine Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2009-5041
CVE ID: CVE-2009-5042 State: PUBLISHED Published: 2019-10-31T15:40:22 Last Updated: 2024-08-07T07:24:54.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: python-docutils allows insecure usage of temporary files Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2009-5042
CVE ID: CVE-2009-5043 State: PUBLISHED Published: 2019-10-31T15:28:37 Last Updated: 2024-08-07T07:24:54.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: burn allows file names to escape via mishandled quotation marks Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2009-5043
CVE ID: CVE-2009-5044 State: PUBLISHED Published: 2011-06-24T20:00:00 Last Updated: 2024-08-07T07:24:54.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 allows local users to overwrite arbitrary files via a symlink attack on a pdf#####.tmp temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2009/08/09/1 - http://openwall.com/lists/oss-security/2009/08/10/2 - http://secunia.com/advisories/44999 - http://www.securityfocus.com/bid/36381 - http://openwall.com/lists/oss-security/2009/08/14/4 - http://openwall.com/lists/oss-security/2009/08/14/5 - http:
6381 - http://openwall.com/lists/oss-security/2009/08/14/4 - http://openwall.com/lists/oss-security/2009/08/14/5 - http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/groff/groff-1.20.1-owl-tmp.diff.diff?r1=1.1%3Br2=1.2%3Bf=h - ftp://ftp.gnu.org/gnu/groff/groff-1.20.1-1.21.diff.gz - http://www.mandriva.com/security/advisories?name=MDVSA-2013:085 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/groff/groff-1.20.1-owl-tmp.diff - https://support.apple.com/kb/HT205031 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=538330 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:086
CVE ID: CVE-2009-5045 State: PUBLISHED Published: 2019-11-06T19:51:28 Last Updated: 2024-08-07T07:24:53.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dump Servlet information leak in jetty before 6.1.22. Additional Analyst Notes: - CVE Program Container: References: - http://www.ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt - https://security-tracker.debian.org/tracker/CVE-2009-5045 - https://www.openwall.com/lists/oss-security/2011/01/14/2
CVE ID: CVE-2009-5046 State: PUBLISHED Published: 2019-11-06T19:57:15 Last Updated: 2024-08-07T07:24:53.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: JSP Dump and Session Dump Servlet XSS in jetty before 6.1.22. Additional Analyst Notes: - CVE Program Container: References: - http://www.ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt - https://security-tracker.debian.org/tracker/CVE-2009-5046 - https://www.openwall.com/lists/oss-security/2011/01/14/2
CVE ID: CVE-2009-5047 State: REJECTED Published: 2019-11-15T15:47:52 Last Updated: 2022-09-29T01:35:09 Description: No description available.
CVE ID: CVE-2009-5048 State: PUBLISHED Published: 2019-11-06T18:35:11 Last Updated: 2024-08-07T07:24:53.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cookie Dump Servlet stored XSS vulnerability in jetty though 6.1.20. Additional Analyst Notes: - CVE Program Container: References: - http://www.ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt - https://security-tracker.debian.org/tracker/CVE-2009-5048 - https://www.openwall.com/lists/oss-security/2011/01/14/2
CVE ID: CVE-2009-5049 State: PUBLISHED Published: 2019-11-06T18:46:12 Last Updated: 2024-08-07T07:24:54.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebApp JSP Snoop page XSS in jetty though 6.1.21. Additional Analyst Notes: - CVE Program Container: References: - http://www.ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt - https://security-tracker.debian.org/tracker/CVE-2009-5049 - https://www.openwall.com/lists/oss-security/2011/01/14/2
CVE ID: CVE-2009-5050 State: PUBLISHED Published: 2019-11-06T18:58:28 Last Updated: 2024-08-07T07:24:54.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: konversation before 1.2.3 allows attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2009-5050 - https://www.openwall.com/lists/oss-security/2011/01/14/2 - https://bugs.kde.org/show_bug.cgi?id=219985
CVE ID: CVE-2009-5051 State: PUBLISHED Published: 2011-01-18T17:00:00 Last Updated: 2024-08-07T07:24:54.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hastymail2 before RC 8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64891 - http://www.hastymail.org/security/
CVE ID: CVE-2009-5052 State: PUBLISHED Published: 2011-02-03T16:00:00Z Last Updated: 2024-09-16T22:15:52.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Smarty before 3.0.0 beta 6 have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://smarty-php.googlecode.com/svn/trunk/distribution/change_log.txt
CVE ID: CVE-2009-5053 State: PUBLISHED Published: 2011-02-03T16:00:00Z Last Updated: 2024-09-17T00:45:39.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Smarty before 3.0.0 beta 6 allows remote attackers to execute arbitrary PHP code by injecting this code into a cache file. Additional Analyst Notes: - CVE Program Container: References: - http://smarty-php.googlecode.com/svn/trunk/distribution/change_log.txt
CVE ID: CVE-2009-5054 State: PUBLISHED Published: 2011-02-03T16:00:00Z Last Updated: 2024-09-17T01:35:52.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Smarty before 3.0.0 beta 4 does not consider the umask value when setting the permissions of files, which might allow attackers to bypass intended access restrictions via standard filesystem operations. Additional Analyst Notes: - CVE Program Container: References: - http://smarty-php.googlecode.com/svn/trunk/distribution/change_log.txt
CVE ID: CVE-2009-5055 State: PUBLISHED Published: 2011-03-18T16:00:00Z Last Updated: 2024-09-16T18:44:17.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Ticket Request System (OTRS) before 2.4.4 grants ticket access on the basis of single-digit substrings of the CustomerID value, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by visiting a ticket, as demonstrated by leveraging the CustomerID 12 account to read tickets that should be available only to CustomerID 1 or CustomerID 2. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.otrs.org/show_bug.cgi?id=4105 - http://source.otrs.org
Analyst Notes: - CVE Program Container: References: - http://bugs.otrs.org/show_bug.cgi?id=4105 - http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807
CVE ID: CVE-2009-5056 State: PUBLISHED Published: 2011-03-18T16:00:00Z Last Updated: 2024-09-16T18:34:52.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Ticket Request System (OTRS) before 2.4.0-beta2 does not properly enforce the move_into permission setting for a queue, which allows remote authenticated users to bypass intended access restrictions and read a ticket by watching this ticket, and then selecting the ticket from the watched-tickets list. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.otrs.org/show_bug.cgi?id=3583 - http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807
CVE ID: CVE-2009-5057 State: PUBLISHED Published: 2011-03-18T16:00:00Z Last Updated: 2024-09-16T23:51:42.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: The S/MIME feature in Open Ticket Request System (OTRS) before 2.3.4 does not configure the RANDFILE and HOME environment variables for OpenSSL, which might make it easier for remote attackers to decrypt e-mail messages that had lower than intended entropy available for cryptographic operations, related to inability to write to the seeding file. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.otrs.org/show_bug.cgi?id=3462 - http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807
CVE ID: CVE-2009-5058 State: PUBLISHED Published: 2011-03-22T17:00:00Z Last Updated: 2024-09-16T22:15:44.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.5 services for Lotus Domino allows remote authenticated users to cause a denial of service (daemon crash) by deleting an item that is accessed through a connector, aka SPR RELS7LARKR. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27013341
CVE ID: CVE-2009-5059 State: PUBLISHED Published: 2011-03-22T17:00:00Z Last Updated: 2024-09-17T04:04:10.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.10 services for Lotus Domino might allow remote authenticated users to cause a denial of service (daemon crash) by checking out a document that is accessed through a connector, aka SPR MMOI7PSR8J. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27013341
CVE ID: CVE-2009-5060 State: PUBLISHED Published: 2011-03-22T17:00:00Z Last Updated: 2024-09-16T19:09:21.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.11 services for Lotus Domino might allow remote authenticated users to cause a denial of service (daemon crash) by accessing an entry in a calendar, aka SPR MZHA7SEBJX. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27013341
CVE ID: CVE-2009-5061 State: PUBLISHED Published: 2011-03-22T17:00:00Z Last Updated: 2024-09-17T03:02:47.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.14 services for Lotus Domino, when Domino Native Authentication is enabled, might allow remote authenticated users to cause a denial of service (daemon crash) by going offline, aka SPR MLZG7UPB9N. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27013341
CVE ID: CVE-2009-5062 State: PUBLISHED Published: 2011-03-22T17:00:00Z Last Updated: 2024-09-16T23:46:01.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Lotus Quickr 8.1 before 8.1.0.15 services for Lotus Domino on AIX allows remote authenticated users to cause a denial of service (daemon crash) by subscribing to an Atom feed, aka SPR JRIE7VKMP9. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27013341
CVE ID: CVE-2009-5063 State: PUBLISHED Published: 2011-08-31T23:00:00 Last Updated: 2024-08-07T07:24:54.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the embedded_profile_len function in pngwutil.c in libpng before 1.2.39beta5 allows context-dependent attackers to cause a denial of service (memory leak or segmentation fault) via a JPEG image containing an iCCP chunk with a negative embedded profile length. NOTE: this is due to an incomplete fix for CVE-2006-7244. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49660 - http://www.openwall.com/lists/oss-security/2011/03/22/7 - http://security.gentoo.org/glsa/glsa-2
.com/advisories/49660 - http://www.openwall.com/lists/oss-security/2011/03/22/7 - http://security.gentoo.org/glsa/glsa-201206-15.xml - http://www.openwall.com/lists/oss-security/2011/03/28/6 - http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commitdiff%3Bh=948ee23a2a400672b1751cfc646a7467741e9b2e#patch18
CVE ID: CVE-2009-5064 State: PUBLISHED Published: 2011-03-30T22:00:00 Last Updated: 2024-08-07T07:24:54.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: ldd in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits certain LD_TRACE_LOADED_OBJECTS checks. NOTE: the GNU C Library vendor states "This is just nonsense. There are a gazillion other ways to introduce code if people are downloading arbitrary binaries and install them in appropriate directories or set LD_LIBRARY_PATH etc. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/
tories or set LD_LIBRARY_PATH etc. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/03/07/7 - http://openwall.com/lists/oss-security/2011/03/08/10 - https://bugzilla.redhat.com/show_bug.cgi?id=682998 - http://openwall.com/lists/oss-security/2011/03/08/7 - http://openwall.com/lists/oss-security/2011/03/08/3 - http://reverse.lostrealm.com/protect/ldd.html - http://openwall.com/lists/oss-security/2011/03/07/10 - http://www.catonmat.net/blog/ldd-arbitrary-code-execution/ - http://openwall.com/lists/oss-security/2011/03/08/2 - http://openwall.com/lists/oss-security/2011/03/07/13 - http://openwall.com/lists/oss-security/2011/03/08/1 - htt
/08/2 - http://openwall.com/lists/oss-security/2011/03/07/13 - http://openwall.com/lists/oss-security/2011/03/08/1 - http://www.redhat.com/support/errata/RHSA-2011-1526.html - https://bugzilla.redhat.com/show_bug.cgi?id=531160
CVE ID: CVE-2009-5065 State: PUBLISHED Published: 2011-04-11T18:00:00 Last Updated: 2024-08-07T07:24:54.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47177 - https://bugzilla.redhat.com/show_bug.cgi?id=684877 - http://secunia.com/advisories/44074 - http://lists.opensuse.org/opensuse-updates/2011-04/msg00026.html - https://bugzilla.novell.com/s
.com/advisories/44074 - http://lists.opensuse.org/opensuse-updates/2011-04/msg00026.html - https://bugzilla.novell.com/show_bug.cgi?id=680074 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:082 - http://code.google.com/p/feedparser/issues/detail?id=195 - http://support.novell.com/security/cve/CVE-2009-5065.html
CVE ID: CVE-2009-5066 State: PUBLISHED Published: 2012-08-13T20:00:00 Last Updated: 2024-08-07T07:24:54.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: twiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as command-line arguments, which allows local users to read the credentials by listing the process and its arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/07/23/2 - http://objectopia.com/2009/10/01/securing-jmx-invoker-layer-in-jboss/ - https://issues.jboss.org/browse/JBPAPP-3391?_sscc=t - http://rhn.redhat.com/errata/RHSA-2013-0192.html - http://rhn.redhat.com/errata/RHSA-2013-0198
wse/JBPAPP-3391?_sscc=t - http://rhn.redhat.com/errata/RHSA-2013-0192.html - http://rhn.redhat.com/errata/RHSA-2013-0198.html - http://rhn.redhat.com/errata/RHSA-2013-0195.html - http://rhn.redhat.com/errata/RHSA-2013-0221.html - http://rhn.redhat.com/errata/RHSA-2013-0196.html - http://rhn.redhat.com/errata/RHSA-2013-0193.html - http://secunia.com/advisories/51984 - http://secunia.com/advisories/52054 - http://rhn.redhat.com/errata/RHSA-2013-0191.html - http://rhn.redhat.com/errata/RHSA-2013-0533.html - http://rhn.redhat.com/errata/RHSA-2013-0197.html - http://rhn.redhat.com/errata/RHSA-2013-0194.html - http://www.openwall.com/lists/oss-security/2012/07/20/1
CVE ID: CVE-2009-5067 State: PUBLISHED Published: 2012-10-10T18:00:00Z Last Updated: 2024-08-07T07:24:54.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in html2ps before 1.0b6 allows remote attackers to read arbitrary files via a .. (dot dot) in the "include file" SSI directive. NOTE: this issue only might be a vulnerability in limited scenarios, such as if html2ps is invoked by a web application, or if a user-assisted attacker provides filenames whose contents could cause a denial of service, such as certain devices. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/81614/html2ps-1.0-beta5
ional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/81614/html2ps-1.0-beta5-File-Disclosure.html - http://www.openwall.com/lists/oss-security/2012/10/05/5 - https://bugzilla.redhat.com/show_bug.cgi?id=526513 - http://www.openwall.com/lists/oss-security/2012/10/05/1 - http://www.securityfocus.com/bid/36524 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:161 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=548633 - http://user.it.uu.se/~jan/html2ps-1.0b7.tar.gz
CVE ID: CVE-2009-5068 State: PUBLISHED Published: 2020-01-15T20:27:08 Last Updated: 2024-08-07T07:24:54.035Z Vendors: SMF Products: SMF Problem Types: file disclosure Description: There is a file disclosure vulnerability in SMF (Simple Machines Forum) affecting versions through v2.0.3. On some configurations a SMF deployment is shared by several "co-admins" that are not trusted beyond the SMF deployment. This vulnerability allows them to read arbitrary files on the filesystem and therefore gain new privileges by reading the settings.php with the database passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/02/01/4
CVE ID: CVE-2009-5069 State: REJECTED Published: 2020-11-05T19:59:49 Last Updated: 2020-11-05T19:59:49 Description: No description available.
CVE ID: CVE-2009-5070 State: REJECTED Published: 2020-11-05T20:00:12 Last Updated: 2020-11-05T20:00:12 Description: No description available.