Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-0656 State: PUBLISHED Published: 2009-02-20T19:00:00 Last Updated: 2024-08-07T04:40:05.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Asus SmartLogon 1.0.0005 allows physically proximate attackers to bypass "security functions" by presenting an image with a modified viewpoint that matches the posture of a stored image of the authorized notebook user. Additional Analyst Notes: - CVE Program Container: References: - http://www.blackhat.com/presentations/bh-dc-09/Nguyen/BlackHat-DC-09-Nguyen-Face-not-your-password.pdf - http://www.securityfocus.com/archive/1/498997 - http://www.securityfocus.com/bid/32700 - http://www.blackhat.com/html/bh-dc-09/bh-dc-09-archive
s.com/archive/1/498997 - http://www.securityfocus.com/bid/32700 - http://www.blackhat.com/html/bh-dc-09/bh-dc-09-archives.html#Nguyen - https://exchange.xforce.ibmcloud.com/vulnerabilities/48962 - http://security.bkis.vn/?p=292
CVE ID: CVE-2009-0657 State: PUBLISHED Published: 2009-02-20T19:00:00 Last Updated: 2024-08-07T04:40:05.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Toshiba Face Recognition 2.0.2.32 allows physically proximate attackers to obtain notebook access by presenting a large number of images for which the viewpoint and lighting have been modified to match a stored image of the authorized notebook user. Additional Analyst Notes: - CVE Program Container: References: - http://www.blackhat.com/presentations/bh-dc-09/Nguyen/BlackHat-DC-09-Nguyen-Face-not-your-password.pdf - http://www.securityfocus.com/archive/1/498997 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48963 - htt
d.pdf - http://www.securityfocus.com/archive/1/498997 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48963 - http://www.securityfocus.com/bid/32700 - http://www.blackhat.com/html/bh-dc-09/bh-dc-09-archives.html#Nguyen - http://security.bkis.vn/?p=292
CVE ID: CVE-2009-0658 State: PUBLISHED Published: 2009-02-20T19:00:00 Last Updated: 2024-08-07T04:40:05.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF document, related to a non-JavaScript function call and possibly an embedded JBIG2 image stream, as exploited in the wild in February 2009 by Trojan.Pidief.E. Additional Analyst Notes: - CVE Program Container: References: - http://www.shadowserver.org/wiki/pmwiki.php?n=Calendar.20090219 - http://secunia.com/advisories/34790 - http://www.adobe.com/support/security/bulletins/apsb09-04.
p?n=Calendar.20090219 - http://secunia.com/advisories/34790 - http://www.adobe.com/support/security/bulletins/apsb09-04.html - https://www.exploit-db.com/exploits/8099 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5697 - http://isc.sans.org/diary.html?n&storyid=5902 - http://www.us-cert.gov/cas/techalerts/TA09-051A.html - http://www.adobe.com/support/security/advisories/apsa09-01.html - http://osvdb.org/52073 - http://secunia.com/advisories/34490 - http://secunia.com/advisories/33901 - http://www.redhat.com/support/errata/RHSA-2009-0376.html - http://www.symantec.com/security_response/writeup.jsp?docid=2009-021212-5523-99&tabid=2 - http://secunia.co
-0376.html - http://www.symantec.com/security_response/writeup.jsp?docid=2009-021212-5523-99&tabid=2 - http://secunia.com/advisories/34392 - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html - http://secunia.com/advisories/34706 - http://www.vupen.com/english/advisories/2009/0472 - http://www.kb.cert.org/vuls/id/905281 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1 - http://www.securityfocus.com/bid/33751 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48825 - http://www.securitytracker.com/id?1021739 - https://www.exploit-db.com/exploits/8090 - http://security.gentoo.org/glsa/glsa-200904-17.xml - http://lists.opensuse.org/opensuse-securit
t-db.com/exploits/8090 - http://security.gentoo.org/glsa/glsa-200904-17.xml - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html - http://www.vupen.com/english/advisories/2009/1019
CVE ID: CVE-2009-0659 State: PUBLISHED Published: 2009-02-20T19:00:00 Last Updated: 2024-08-07T04:40:05.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the GetStatsFromLine function in TPTEST 3.1.7 allows remote attackers to have an unknown impact via a STATS line with a long email field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48781 - http://secunia.com/advisories/33972 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48953
CVE ID: CVE-2009-0660 State: PUBLISHED Published: 2009-03-11T14:00:00 Last Updated: 2024-08-07T04:40:05.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0 before 1.0.10 and 1.1 before 1.1.2 allow remote attackers to inject arbitrary web script or HTML via a (1) profile and (2) blog, a different vulnerability than CVE-2009-0487. Additional Analyst Notes: - CVE Program Container: References: - http://mahara.org/interaction/forum/topic.php?id=350 - http://secunia.com/advisories/34231 - http://www.securityfocus.com/bid/34064 - http://secunia.com/advisories/34222 - http://wiki.mahara.org/Release_Notes/1.1.2 - http://ww
curityfocus.com/bid/34064 - http://secunia.com/advisories/34222 - http://wiki.mahara.org/Release_Notes/1.1.2 - http://www.vupen.com/english/advisories/2009/0665 - http://www.debian.org/security/2009/dsa-1736 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49168
CVE ID: CVE-2009-0661 State: PUBLISHED Published: 2009-03-19T10:00:00 Last Updated: 2024-08-07T04:40:05.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wee Enhanced Environment for Chat (WeeChat) 0.2.6 allows remote attackers to cause a denial of service (crash) via an IRC PRIVMSG command containing crafted color codes that trigger an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://savannah.nongnu.org/bugs/index.php?25862 - http://www.securityfocus.com/bid/34148 - http://secunia.com/advisories/34304 - http://weechat.flashtux.org/ - http://osvdb.org/52763 - http://www.vupen.com/english/advisories/2009/0758 - http://bugs.debian.org/cg
t.flashtux.org/ - http://osvdb.org/52763 - http://www.vupen.com/english/advisories/2009/0758 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519940 - http://www.debian.org/security/2009/dsa-1744 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49295 - http://secunia.com/advisories/34328 - http://www.openwall.com/lists/oss-security/2009/03/17/8
CVE ID: CVE-2009-0662 State: PUBLISHED Published: 2009-04-23T17:00:00 Last Updated: 2024-08-07T04:40:05.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PlonePAS product 3.x before 3.9 and 3.2.x before 3.2.2, a product for Plone, does not properly handle the login form, which allows remote authenticated users to acquire the identity of an arbitrary user via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34664 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50061 - http://secunia.com/advisories/34840 - http://plone.org/products/plone/security/advisories/cve-2009-0662 - http://osvdb.org/53975
CVE ID: CVE-2009-0663 State: PUBLISHED Published: 2009-04-30T20:00:00 Last Updated: 2024-08-07T04:40:05.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module 1.49 for Perl might allow context-dependent attackers to execute arbitrary code via unspecified input to an application that uses the getline and pg_getline functions to read database rows. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2009-1067.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/50467 - http://www.securityfocus.com/bid/34755 - http://security.debian.org/pool/upda
force.ibmcloud.com/vulnerabilities/50467 - http://www.securityfocus.com/bid/34755 - http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49-2+etch1.diff.gz - https://launchpad.net/bugs/cve/2009-0663 - http://secunia.com/advisories/34909 - http://www.redhat.com/support/errata/RHSA-2009-0479.html - http://secunia.com/advisories/35685 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9499 - http://www.debian.org/security/2009/dsa-1780 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - http://secunia.com/advisories/35058
CVE ID: CVE-2009-0664 State: PUBLISHED Published: 2009-04-23T17:00:00 Last Updated: 2024-08-07T04:40:05.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0.x before 1.0.11 and 1.1.x before 1.1.3 allow remote attackers to inject arbitrary web script or HTML via (1) the introduction field in a user profile or (2) an arbitrary text block in a user view. Additional Analyst Notes: - CVE Program Container: References: - http://mahara.org/interaction/forum/topic.php?id=532 - http://www.debian.org/security/2009/dsa-1778 - http://osvdb.org/53891 - http://secunia.com/advisories/34789 - http://www.securityfocus.com/bid/34677
y/2009/dsa-1778 - http://osvdb.org/53891 - http://secunia.com/advisories/34789 - http://www.securityfocus.com/bid/34677 - http://osvdb.org/53892 - http://secunia.com/advisories/34871
CVE ID: CVE-2009-0667 State: PUBLISHED Published: 2009-07-09T17:00:00 Last Updated: 2024-08-07T04:40:05.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Agent/Backend.pm in Ocsinventory-Agent before 0.0.9.3, and 1.x before 1.0.1, in OCS Inventory allows local users to gain privileges via a Trojan horse Perl module in an arbitrary directory. Additional Analyst Notes: - CVE Program Container: References: - http://nana.rulezlan.org/~goneri/ocsinventory-agent/Ocsinventory-Agent-0.0.9.3.tar.gz - http://www.vupen.com/english/advisories/2009/1809 - http://security.debian.org/pool/updates/main/o/ocsinventory-agent/ocsinventory-agent_0.0.9.2repack
dvisories/2009/1809 - http://security.debian.org/pool/updates/main/o/ocsinventory-agent/ocsinventory-agent_0.0.9.2repack1-4lenny1.diff.gz - http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=144 - http://osvdb.org/55718 - http://www.securityfocus.com/bid/35593 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506416 - http://secunia.com/advisories/35768 - http://www.debian.org/security/2009/dsa-1828 - http://secunia.com/advisories/35727
CVE ID: CVE-2009-0668 State: PUBLISHED Published: 2009-08-07T19:00:00 Last Updated: 2024-08-07T04:40:05.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to execute arbitrary Python code via vectors involving the ZEO network protocol. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2217 - http://secunia.com/advisories/36204 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52377 - http://pypi.python.org/pypi/ZODB3/3.8.2#whats-new-in-zodb-3-8-2 - ht
xchange.xforce.ibmcloud.com/vulnerabilities/52377 - http://pypi.python.org/pypi/ZODB3/3.8.2#whats-new-in-zodb-3-8-2 - http://secunia.com/advisories/36205 - http://mail.zope.org/pipermail/zope-announce/2009-August/002220.html - http://osvdb.org/56827 - http://www.securityfocus.com/bid/35987
CVE ID: CVE-2009-0669 State: PUBLISHED Published: 2009-08-07T19:00:00 Last Updated: 2024-08-07T04:40:05.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/2217 - http://secunia.com/advisories/36204 - http://osvdb.org/56826 - https://exchange.xforce.ibmcloud.com/vulnerabilities/52379 - http://pypi.python.org/pypi/ZODB3/3.8.2#whats-new-in-zodb-3-8-2 - http://secunia
ce.ibmcloud.com/vulnerabilities/52379 - http://pypi.python.org/pypi/ZODB3/3.8.2#whats-new-in-zodb-3-8-2 - http://secunia.com/advisories/36205 - http://mail.zope.org/pipermail/zope-announce/2009-August/002220.html - http://www.securityfocus.com/bid/35987
CVE ID: CVE-2009-0671 State: REJECTED Published: 2009-02-22T22:00:00 Last Updated: 2017-08-16T14:57:01 Description: No description available.
CVE ID: CVE-2009-0672 State: PUBLISHED Published: 2009-02-22T22:00:00 Last Updated: 2024-08-07T04:40:05.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Resend_Email module in Raven Web Services RavenNuke 2.30 allows remote authenticated administrators to execute arbitrary SQL commands via the user_prefix parameter to modules.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33787 - http://ravenphpscripts.com/postt17156.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/48791 - http://www.securityfocus.com/archive/1/500988/100/0/threaded - https://www.exploit-db.com/exploits/8068 -
lities/48791 - http://www.securityfocus.com/archive/1/500988/100/0/threaded - https://www.exploit-db.com/exploits/8068 - http://www.waraxe.us/advisory-72.html - http://osvdb.org/52298
CVE ID: CVE-2009-0673 State: PUBLISHED Published: 2009-02-22T22:00:00 Last Updated: 2024-08-07T04:40:05.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in the Custom Fields feature in the Your Account module in Raven Web Services RavenNuke 2.30 allows remote authenticated administrators to execute arbitrary PHP code via the ID Field Name box in a yaCustomFields action to admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33787 - http://ravenphpscripts.com/postt17156.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/48790 - http://www.securityfocus.com/archive/1/500988/100/0/thread
https://exchange.xforce.ibmcloud.com/vulnerabilities/48790 - http://www.securityfocus.com/archive/1/500988/100/0/threaded - https://www.exploit-db.com/exploits/8068 - http://www.waraxe.us/advisory-72.html
CVE ID: CVE-2009-0674 State: PUBLISHED Published: 2009-02-22T22:00:00 Last Updated: 2024-08-07T04:40:05.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: images/captcha.php in Raven Web Services RavenNuke 2.30, when register_globals and display_errors are enabled, allows remote attackers to determine the existence of local files by sending requests with full pathnames in the aFonts array parameter, and then observing the error messages, which differ between existing and nonexistent pathnames. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33787 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48792 - http://ravenphpscript
p://www.securityfocus.com/bid/33787 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48792 - http://ravenphpscripts.com/postt17156.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/48983 - http://www.securityfocus.com/archive/1/500988/100/0/threaded - https://www.exploit-db.com/exploits/8068 - http://www.waraxe.us/advisory-72.html
CVE ID: CVE-2009-0675 State: PUBLISHED Published: 2009-02-22T22:00:00 Last Updated: 2024-08-07T04:40:05.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFP_CLR_STATS requests only when the CAP_NET_ADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics, related to an "inverted logic" issue. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33938 - http://secunia.com/advisories/34502 - http://www.redhat.com/support/errata/RHSA-2009-0326.html - http://secunia.com/adv
http://secunia.com/advisories/34502 - http://www.redhat.com/support/errata/RHSA-2009-0326.html - http://secunia.com/advisories/37471 - http://www.redhat.com/support/errata/RHSA-2009-0360.html - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://www.debian.org/security/2009/dsa-1749 - http://www.debian.org/security/2009/dsa-1794 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11529 - http://secunia.com/advisories/33758 - http://www.ubuntu.com/usn/usn-751-1 - http://secunia.com/advisories/35011 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://openwall.com/lists/oss-security/2009/02/20/2 - http://lists.opensuse
yfocus.com/archive/1/507985/100/0/threaded - http://openwall.com/lists/oss-security/2009/02/20/2 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html - http://secunia.com/advisories/34981 - http://secunia.com/advisories/34394 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8685 - http://www.debian.org/security/2009/dsa-1787 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c25b9abbc2c2c0da88e180c3933d6e773245815a - http://www.mandriva.com/security/advisories?name=MDVSA-2009:071 - http://lists.openwall.net/netdev/2009/01/28/90 - http://secunia.com/advisories/34680 - http://www.vupen.com/english/ad
- http://lists.openwall.net/netdev/2009/01/28/90 - http://secunia.com/advisories/34680 - http://www.vupen.com/english/advisories/2009/3316 - https://bugzilla.redhat.com/show_bug.cgi?id=486534 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.6 - http://secunia.com/advisories/35394
CVE ID: CVE-2009-0676 State: PUBLISHED Published: 2009-02-22T22:00:00 Last Updated: 2024-08-07T04:40:05.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sock_getsockopt function in net/core/sock.c in the Linux kernel before 2.6.28.6 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel memory via an SO_BSDCOMPAT getsockopt request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35390 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48847 - http://openwall.com/lists/oss-security/2009/02/20/1 - http://secunia.com/advisories/34502 - http://www.redha
ies/48847 - http://openwall.com/lists/oss-security/2009/02/20/1 - http://secunia.com/advisories/34502 - http://www.redhat.com/support/errata/RHSA-2009-0326.html - http://secunia.com/advisories/34786 - http://secunia.com/advisories/34962 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8618 - http://secunia.com/advisories/37471 - http://www.redhat.com/support/errata/RHSA-2009-0360.html - http://rhn.redhat.com/errata/RHSA-2009-0459.html - http://www.openwall.com/lists/oss-security/2009/03/02/6 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://www.debian.org/security/2009/dsa-1749 - http://patchwork.kernel.org/patch/6816/ - http://w
/VMSA-2009-0016.html - http://www.debian.org/security/2009/dsa-1749 - http://patchwork.kernel.org/patch/6816/ - http://www.debian.org/security/2009/dsa-1794 - http://marc.info/?l=linux-kernel&m=123540732700371&w=2 - http://secunia.com/advisories/33758 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html - http://www.ubuntu.com/usn/usn-751-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11653 - http://www.securityfocus.com/bid/33846 - http://secunia.com/advisories/35011 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://www.openwall.com/lists/oss-security/2009/02/24/1 - http://lists.opensuse.org/opensuse-s
1/507985/100/0/threaded - http://www.openwall.com/lists/oss-security/2009/02/24/1 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html - http://lkml.org/lkml/2009/2/12/123 - http://secunia.com/advisories/34981 - http://secunia.com/advisories/34394 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=df0bca049d01c0ee94afb7cd5dfd959541e6c8da - https://bugzilla.redhat.com/show_bug.cgi?id=486305 - http://www.debian.org/security/2009/dsa-1787 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:071 - http://secunia.com/advisories/34680 - http://www.vupen.com/e
/www.mandriva.com/security/advisories?name=MDVSA-2009:071 - http://secunia.com/advisories/34680 - http://www.vupen.com/english/advisories/2009/3316 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.6 - http://secunia.com/advisories/35394
CVE ID: CVE-2009-0677 State: PUBLISHED Published: 2009-02-22T22:00:00 Last Updated: 2024-08-07T04:40:05.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: avatarlist.php in the Your Account module, reached through modules.php, in Raven Web Services RavenNuke 2.30 allows remote authenticated users to execute arbitrary code via PHP sequences in an element of the replacements array, which is processed by the preg_replace function with the eval switch, as specified in an element of the patterns array. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/33787 - http://secunia.com/advisories/33928 - http://www.osvdb.org/52007 - http://rave
http://www.securityfocus.com/bid/33787 - http://secunia.com/advisories/33928 - http://www.osvdb.org/52007 - http://ravenphpscripts.com/postt17156.html&sid=12d1201371612260a42fa846ebce7bad - http://www.securityfocus.com/archive/1/500988/100/0/threaded - https://www.exploit-db.com/exploits/8068 - http://www.waraxe.us/advisory-72.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/48789
CVE ID: CVE-2009-0678 State: PUBLISHED Published: 2009-02-22T22:00:00 Last Updated: 2024-08-07T04:40:05.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: images/captcha.php in RavenNuke 2.30 allows remote attackers to obtain sensitive information via an aFonts array parameter value that does not correspond to a valid font file, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48792 - http://ravenphpscripts.com/postt17156.html - http://www.securityfocus.com/archive/1/500988/100/0/threaded - https://www.exploit-db.com/exploits/8068 - http://www.waraxe.us/a
ww.securityfocus.com/archive/1/500988/100/0/threaded - https://www.exploit-db.com/exploits/8068 - http://www.waraxe.us/advisory-72.html
CVE ID: CVE-2009-0679 State: PUBLISHED Published: 2009-02-22T22:00:00 Last Updated: 2024-08-07T04:40:05.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Your Account module in RavenNuke 2.30 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://ravenphpscripts.com/postt17156.html - http://osvdb.org/52299 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48978