Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-0471 State: PUBLISHED Published: 2009-02-06T19:00:00 Last Updated: 2024-08-07T04:31:26.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the HTTP server in Cisco IOS 12.4(23) allows remote attackers to execute arbitrary commands, as demonstrated by executing the hostname command with a level/15/configure/-/hostname request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/500674/100/0/threaded - http://secunia.com/advisories/33844
CVE ID: CVE-2009-0472 State: PUBLISHED Published: 2009-02-06T19:00:00 Last Updated: 2024-08-07T04:31:26.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/882619 - http://rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=57729 - http://secunia.com/advisories/33783 - http://www.securityfocus.com/bid/33638 -
/php/enduser/std_adp.php?p_faqid=57729 - http://secunia.com/advisories/33783 - http://www.securityfocus.com/bid/33638 - http://www.vupen.com/english/advisories/2009/0347
CVE ID: CVE-2009-0473 State: PUBLISHED Published: 2009-02-06T19:00:00 Last Updated: 2024-08-07T04:31:26.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/619499 - http://rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=57729 - http://www.securityfocus.com/bid/33636 - http://secunia.com/advisories/
tion.cfg/php/enduser/std_adp.php?p_faqid=57729 - http://www.securityfocus.com/bid/33636 - http://secunia.com/advisories/33783 - http://www.vupen.com/english/advisories/2009/0347
CVE ID: CVE-2009-0474 State: PUBLISHED Published: 2009-02-06T19:00:00 Last Updated: 2024-08-07T04:31:26.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to obtain "internal web page information" and "internal information about the module" via unspecified vectors. NOTE: this may overlap CVE-2002-1603. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/124059 - http://rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=57729 - http://www.kb.cert.org/vuls/id/RGII-7MWKZ3 - htt
/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=57729 - http://www.kb.cert.org/vuls/id/RGII-7MWKZ3 - http://secunia.com/advisories/33783 - http://www.vupen.com/english/advisories/2009/0347
CVE ID: CVE-2009-0475 State: PUBLISHED Published: 2009-02-11T00:00:00 Last Updated: 2024-08-07T04:31:26.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the Huffman decoding functionality (pvmp3_huffman_parsing.cpp) in OpenCORE 2.0 and earlier allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a crafted MP3 file that triggers heap corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33673 - http://android.git.kernel.org/?p=platform/external/opencore.git%3Ba=commit%3Bh=7b466cd0ecfdba72c4cbd0f3a8c2001141376b0f - http://review.source.android.com/
atform/external/opencore.git%3Ba=commit%3Bh=7b466cd0ecfdba72c4cbd0f3a8c2001141376b0f - http://review.source.android.com/Gerrit#change%2C8815 - http://www.securityfocus.com/archive/1/500750/100/0/threaded - http://www.ocert.org/advisories/ocert-2009-002.html
CVE ID: CVE-2009-0476 State: PUBLISHED Published: 2009-02-08T21:00:00 Last Updated: 2024-08-07T04:31:26.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedia Soft audio components for .NET, allows remote attackers to execute arbitrary code via a long string in a playlist (.pls) file, as originally reported for Euphonics Audio Player 1.0. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7958 - http://www.securityfocus.com/archive/1/500652/100
am Container: References: - https://www.exploit-db.com/exploits/7958 - http://www.securityfocus.com/archive/1/500652/100/0/threaded - http://secunia.com/advisories/33817 - http://secunia.com/advisories/33791 - http://www.securityfocus.com/bid/33589 - https://www.exploit-db.com/exploits/7973 - https://www.exploit-db.com/exploits/7974 - http://www.vupen.com/english/advisories/2009/0316
CVE ID: CVE-2009-0477 State: PUBLISHED Published: 2009-02-08T21:00:00 Last Updated: 2024-08-07T04:31:26.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the process (aka proc) filesystem in Sun OpenSolaris snv_85 through snv_100 allows local users to gain privileges via vectors related to the contract filesystem. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0352 - http://www.securityfocus.com/bid/33654 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-244026-1 - http://www.ioactive.com/pdfs/OpenSolarisUPtrDeref.pdf
CVE ID: CVE-2009-0478 State: PUBLISHED Published: 2009-02-08T22:00:00 Last Updated: 2024-08-07T04:31:26.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service via an HTTP request with an invalid version number, which triggers a reachable assertion in (1) HttpMsg.c and (2) HttpStatusLine.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33604 - http://secunia.com/advisories/33731 - http://security.gentoo.org/glsa/glsa-200903-38.xml - http://www.securityfocus.com/archive/1/500653/100/0/threaded - http://lists.opensuse
entoo.org/glsa/glsa-200903-38.xml - http://www.securityfocus.com/archive/1/500653/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html - https://bugzilla.redhat.com/show_bug.cgi?id=484246 - http://www.squid-cache.org/Versions/v2/2.7/changesets/12432.patch - http://www.securitytracker.com/id?1021684 - http://www.squid-cache.org/Advisories/SQUID-2009_1.txt - http://www.mandriva.com/security/advisories?name=MDVSA-2009:034 - https://www.exploit-db.com/exploits/8021 - http://secunia.com/advisories/34467
CVE ID: CVE-2009-0479 State: PUBLISHED Published: 2009-02-09T01:00:00Z Last Updated: 2024-09-17T02:57:58.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in admin/admin_login.php in Online Grades 3.2.4 allow remote attackers to execute arbitrary SQL commands via the (1) uname or (2) pword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/51711 - http://secunia.com/advisories/33767
CVE ID: CVE-2009-0480 State: PUBLISHED Published: 2009-02-09T16:00:00 Last Updated: 2024-08-07T04:40:03.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv_82, uses an improper arena when allocating minor numbers for sockets, which allows local users to cause a denial of service (32-bit application failure and login outage) by opening a large number of sockets. Additional Analyst Notes: - CVE Program Container: References: - http://mail.opensolaris.org/pipermail/onnv-notify/2008-January/013262.html - http://support.avaya.com/elmodocs2/security/ASA-2009-042.htm - http://sunsolve.sun.com/search/document.d
y/013262.html - http://support.avaya.com/elmodocs2/security/ASA-2009-042.htm - http://sunsolve.sun.com/search/document.do?assetkey=1-21-116965-34-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-248026-1 - http://www.securityfocus.com/bid/33550 - http://www.vupen.com/english/advisories/2009/0364 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6038 - http://secunia.com/advisories/33751 - http://securitytracker.com/id?1021653
CVE ID: CVE-2009-0481 State: PUBLISHED Published: 2009-02-09T17:00:00 Last Updated: 2024-08-07T04:40:03.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 2.x before 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote authenticated users to conduct cross-site scripting (XSS) and related attacks by uploading HTML and JavaScript attachments that are rendered by web browsers. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html - http://secunia.com/advisories/34361 - http:/
/www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html - http://secunia.com/advisories/34361 - http://www.bugzilla.org/security/2.22.6/ - http://www.securityfocus.com/bid/33580
CVE ID: CVE-2009-0482 State: PUBLISHED Published: 2009-02-09T17:00:00 Last Updated: 2024-08-07T04:40:03.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Bugzilla before 3.2 before 3.2.1, 3.3 before 3.3.2, and other versions before 3.2 allows remote attackers to perform bug updating activities as other users via a link or IMG tag to process_bug.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html - http://secunia.com/advisories/34361 - http://www.bug
hat.com/archives/fedora-package-announce/2009-March/msg00687.html - http://secunia.com/advisories/34361 - http://www.bugzilla.org/security/2.22.6/ - http://www.securityfocus.com/bid/33580
CVE ID: CVE-2009-0483 State: PUBLISHED Published: 2009-02-09T17:00:00 Last Updated: 2024-08-07T04:40:03.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Bugzilla 2.22 before 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote attackers to delete keywords and user preferences via a link or IMG tag to (1) editkeywords.cgi or (2) userprefs.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html - https://bugzilla.mozilla.org/sho
ml - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html - https://bugzilla.mozilla.org/show_bug.cgi?id=466692 - http://secunia.com/advisories/34361 - http://www.bugzilla.org/security/2.22.6/ - http://www.securityfocus.com/bid/33580 - https://bugzilla.mozilla.org/show_bug.cgi?id=472362
CVE ID: CVE-2009-0484 State: PUBLISHED Published: 2009-02-09T17:00:00 Last Updated: 2024-08-07T04:40:03.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Bugzilla 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote attackers to delete shared or saved searches via a link or IMG tag to buglist.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html - https://bugzilla.mozilla.org/show_bug.cgi?id=466748 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html - http://secunia.com/advisories/343
8 - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html - http://secunia.com/advisories/34361 - http://www.bugzilla.org/security/2.22.6/ - http://www.securityfocus.com/bid/33580
CVE ID: CVE-2009-0485 State: PUBLISHED Published: 2009-02-09T17:00:00 Last Updated: 2024-08-07T04:40:03.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Bugzilla 2.17 to 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote attackers to delete unused flag types via a link or IMG tag to editflagtypes.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html - https://bugzilla.mozilla.org/show_bug.cgi?id=466692 - http://secunia.com
ora-package-announce/2009-March/msg00687.html - https://bugzilla.mozilla.org/show_bug.cgi?id=466692 - http://secunia.com/advisories/34361 - http://www.bugzilla.org/security/2.22.6/ - http://www.securityfocus.com/bid/33580
CVE ID: CVE-2009-0486 State: PUBLISHED Published: 2009-02-09T17:00:00 Last Updated: 2024-08-07T04:40:03.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 3.2.1, 3.0.7, and 3.3.2, when running under mod_perl, calls the srand function at startup time, which causes Apache children to have the same seed and produce insufficiently random numbers for random tokens, which allows remote attackers to bypass cross-site request forgery (CSRF) protection mechanisms and conduct unauthorized activities as other users. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html - https://www.redhat.
er: References: - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html - https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html - http://www.securityfocus.com/bid/33581 - http://secunia.com/advisories/34361 - http://www.bugzilla.org/security/3.0.7/
CVE ID: CVE-2009-0487 State: PUBLISHED Published: 2009-02-09T20:00:00 Last Updated: 2024-08-07T04:40:03.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Mahara before 1.0.9 allows remote attackers to inject arbitrary web script or HTML via a crafted forum post. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48518 - http://www.securityfocus.com/bid/33619 - http://secunia.com/advisories/33813 - http://mahara.org/interaction/forum/topic.php?id=198
CVE ID: CVE-2009-0488 State: PUBLISHED Published: 2009-02-09T20:00:00 Last Updated: 2024-08-07T04:40:03.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Phorum before 5.2.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33657 - http://www.phorum.org/phorum5/read.php?64%2C136129
CVE ID: CVE-2009-0489 State: PUBLISHED Published: 2009-02-09T20:00:00 Last Updated: 2024-08-07T04:40:03.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DBus configuration file for Wicd before 1.5.9 allows arbitrary users to own org.wicd.daemon, which allows local users to receive messages that were intended for the Wicd daemon, possibly including credentials. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200904-12.xml - http://secunia.com/advisories/34685 - http://sourceforge.net/project/shownotes.php?group_id=194573&release_id=659059 - http://www.openwall.com/lists/oss-security/2009/02/06/4 - http://secunia.com/advi
hp?group_id=194573&release_id=659059 - http://www.openwall.com/lists/oss-security/2009/02/06/4 - http://secunia.com/advisories/33870 - http://bazaar.launchpad.net/~wicd-devel/wicd/trunk/revision/222
CVE ID: CVE-2009-0490 State: PUBLISHED Published: 2009-02-10T01:00:00 Last Updated: 2024-08-07T04:40:03.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the String_parse::get_nonspace_quoted function in lib-src/allegro/strparse.cpp in Audacity 1.2.6 and other versions before 1.3.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a .gro file containing a long string. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7634 - http://osvdb.org/51070 - http://www.securityfocus.com/bid/33090 - http://lists.opensuse.org/opensuse-security-announce/2009-0
//osvdb.org/51070 - http://www.securityfocus.com/bid/33090 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://bugs.gentoo.org/show_bug.cgi?id=253493 - http://www.vupen.com/english/advisories/2009/0008 - http://secunia.com/advisories/33356 - http://n2.nabble.com/Audacity-%22String_parse::get_nonspace_quoted%28%29%22-Buffer-Overflow-td2139537.html
CVE ID: CVE-2009-0491 State: PUBLISHED Published: 2009-02-10T01:00:00 Last Updated: 2024-08-07T04:40:03.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Elecard MPEG Player 5.5 build 15884.081218 allows remote attackers to execute arbitrary code via a M3U file containing a long URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0007 - http://osvdb.org/51075 - http://secunia.com/advisories/33355 - https://www.exploit-db.com/exploits/7637
CVE ID: CVE-2009-0492 State: PUBLISHED Published: 2009-02-10T01:00:00 Last Updated: 2024-08-07T04:40:03.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in SimpleIrcBot before 1.0 Stable has unknown impact and attack vectors related to an "auth vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?group_id=249202&release_id=650796 - http://www.vupen.com/english/advisories/2009/0020 - http://www.securityfocus.com/bid/33127
CVE ID: CVE-2009-0493 State: PUBLISHED Published: 2009-02-10T01:00:00 Last Updated: 2024-08-07T04:40:03.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in IT!CMS 2.1a and earlier allows remote attackers to execute arbitrary SQL commands via the Username. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/47791 - https://www.exploit-db.com/exploits/7686 - http://www.securityfocus.com/bid/33139
CVE ID: CVE-2009-0494 State: PUBLISHED Published: 2009-02-10T01:00:00 Last Updated: 2024-08-07T04:40:03.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Portfol (com_portfol) 1.2 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the vcatid parameter in a viewcategory action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7734 - http://www.securityfocus.com/bid/33218
CVE ID: CVE-2009-0495 State: PUBLISHED Published: 2009-02-10T01:00:00 Last Updated: 2024-08-07T04:40:03.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/define.php in REALTOR 747 4.11 allows remote attackers to execute arbitrary PHP code via a URL in the INC_DIR parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7743 - http://www.securityfocus.com/bid/33227
CVE ID: CVE-2009-0496 State: PUBLISHED Published: 2009-02-10T01:00:00 Last Updated: 2024-08-07T04:40:03.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Ignite Realtime Openfire 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) log parameter to (a) logviewer.jsp and (b) log.jsp; (2) search parameter to (c) group-summary.jsp; (3) username parameter to (d) user-properties.jsp; (4) logDir, (5) maxTotalSize, (6) maxFileSize, (7) maxDays, and (8) logTimeout parameters to (e) audit-policy.jsp; (9) propName parameter to (f) server-properties.jsp; and the (10) roomconfig_roomname and (11) roomconfig_r
-policy.jsp; (9) propName parameter to (f) server-properties.jsp; and the (10) roomconfig_roomname and (11) roomconfig_roomdesc parameters to (g) muc-room-edit-form.jsp. NOTE: this can be leveraged for arbitrary code execution by using XSS to upload a malicious plugin. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.gentoo.org/show_bug.cgi?id=254309 - http://www.securityfocus.com/bid/32943 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47835 - http://www.securityfocus.com/bid/32940 - http://www.securityfocus.com/bid/32944 - http://www.igniterealtime.org/issues/browse/JM-1506 - http://secunia.com/advisories/33452 - http://www.securityfocus.com/bid/32935 -
gniterealtime.org/issues/browse/JM-1506 - http://secunia.com/advisories/33452 - http://www.securityfocus.com/bid/32935 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47845 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47834 - http://www.securityfocus.com/bid/32939 - http://www.securityfocus.com/bid/32938 - http://www.securityfocus.com/bid/32937 - http://www.securityfocus.com/archive/1/499880/100/0/threaded - http://www.coresecurity.com/content/openfire-multiple-vulnerabilities
CVE ID: CVE-2009-0497 State: PUBLISHED Published: 2009-02-10T01:00:00 Last Updated: 2024-08-07T04:40:03.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in log.jsp in Ignite Realtime Openfire 3.6.2 allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the log parameter. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.gentoo.org/show_bug.cgi?id=257585 - http://svn.igniterealtime.org/svn/repos/openfire/trunk/src/web/log.jsp - http://secunia.com/advisories/33452 - http://www.securityfocus.com/bid/32945 - http://www.securityfocus.com/archive/1/499880/100/0/threaded - https://exchange.xforce.
ww.securityfocus.com/bid/32945 - http://www.securityfocus.com/archive/1/499880/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/47806 - http://www.coresecurity.com/content/openfire-multiple-vulnerabilities
CVE ID: CVE-2009-0498 State: PUBLISHED Published: 2009-02-10T01:00:00 Last Updated: 2024-08-07T04:40:03.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: Virtual GuestBook (vgbook) 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to guestbook.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7744
CVE ID: CVE-2009-0499 State: PUBLISHED Published: 2009-02-10T02:00:00 Last Updated: 2024-08-07T04:40:03.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the forum code in Moodle 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 allows remote attackers to delete unauthorized forum posts via a link or IMG tag to post.php. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html - http://cvs.moodle.org/moodle/mod/forum/post.php?r1=1.154.2.14&r2=1.154.2.15 - http://moodle.org/security/ - http://secunia.com/advisories/34418 - http://www.openwa
.php?r1=1.154.2.14&r2=1.154.2.15 - http://moodle.org/security/ - http://secunia.com/advisories/34418 - http://www.openwall.com/lists/oss-security/2009/02/04/1