Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-1432 State: PUBLISHED Published: 2009-04-30T20:00:00 Last Updated: 2024-08-07T05:13:25.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Reporting Server, as used in Symantec AntiVirus (SAV) Corporate Edition 10.1 before 10.1 MR8 and 10.2 before 10.2 MR2, Symantec Client Security (SCS) before 3.1 MR8, and the Symantec Endpoint Protection Manager (SEPM) component in Symantec Endpoint Protection (SEP) before 11.0 MR2, allows remote attackers to inject arbitrary text into the login screen, and possibly conduct phishing attacks, via vectors involving a URL that is not properly handled. Additional Analyst Notes: - CVE Program Container: References: - http:/
rs involving a URL that is not properly handled. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1204 - http://securitytracker.com/id?1022137 - http://secunia.com/advisories/34856 - http://securitytracker.com/id?1022138 - http://secunia.com/advisories/34935 - http://securitytracker.com/id?1022136 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_00 - http://www.vupen.com/english/advisories/2009/1202 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50172 - http://www.securityfocus.com/bid/34668
CVE ID: CVE-2009-1433 State: PUBLISHED Published: 2009-04-24T23:00:00Z Last Updated: 2024-09-17T00:55:49.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in File::find (filesystem/File.php) in SilverStripe before 2.3.1 allows remote attackers to execute arbitrary SQL commands via the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://open.silverstripe.com/wiki/ChangeLog/2.3.1 - http://open.silverstripe.com/ticket/3721 - http://www.securityfocus.com/bid/34485 - http://secunia.com/advisories/34633 - http://osvdb.org/53589
CVE ID: CVE-2009-1434 State: PUBLISHED Published: 2009-04-30T20:00:00 Last Updated: 2024-08-07T05:13:25.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Foswiki before 1.0.5 allows remote attackers to hijack the authentication of arbitrary users for requests that modify pages, change permissions, or change group memberships, as demonstrated by a URL for a (1) save or (2) view script in the SRC attribute of an IMG element, a related issue to CVE-2009-1339. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50256 - http://osvdb.org/54148 - http://sourceforge.net/
erences: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50256 - http://osvdb.org/54148 - http://sourceforge.net/mailarchive/forum.php?thread_name=49F61C4E.2040806%40lavrsen.dk&forum_name=foswiki-announce - http://foswiki.org/Support/SecurityAlert-CVE-2009-1434 - http://secunia.com/advisories/34863 - https://launchpad.net/bugs/cve/2009-1434
CVE ID: CVE-2009-1435 State: PUBLISHED Published: 2009-04-27T17:43:00 Last Updated: 2024-08-07T05:13:25.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: NTRtScan.exe in Trend Micro OfficeScan Client 8.0 SP1 and 8.0 SP1 Patch 1 allows local users to cause a denial of service (application crash) via directories with long pathnames. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34642 - http://www.securityfocus.com/archive/1/502847/100/0/threaded - http://www.securitytracker.com/id?1022109 - http://www.vupen.com/english/advisories/2009/1146 - http://www.securi
aded - http://www.securitytracker.com/id?1022109 - http://www.vupen.com/english/advisories/2009/1146 - http://www.securityfocus.com/archive/1/502860/100/0/threaded - http://es.geocities.com/jplopezy/officescan.zip - http://osvdb.org/53890 - http://secunia.com/advisories/34737
CVE ID: CVE-2009-1436 State: PUBLISHED Published: 2009-04-27T17:43:00 Last Updated: 2024-08-07T05:13:25.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: The db interface in libc in FreeBSD 6.3, 6.4, 7.0, 7.1, and 7.2-PRERELEASE does not properly initialize memory for Berkeley DB 1.85 database structures, which allows local users to obtain sensitive information by reading a database file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34666 - http://osvdb.org/53918 - http://security.freebsd.org/advisories/FreeBSD-SA-09:07.libc.asc - http://secunia.com/advisories/34810 - http://www.securitytracker.com/id?1022113 - http://kb.juni
BSD-SA-09:07.libc.asc - http://secunia.com/advisories/34810 - http://www.securitytracker.com/id?1022113 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10756
CVE ID: CVE-2009-1437 State: PUBLISHED Published: 2009-04-27T17:43:00 Last Updated: 2024-08-07T05:13:25.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.6 and earlier allows remote attackers to execute arbitrary code via a long string in a malformed playlist (.m3u) file. NOTE: this may overlap CVE-2008-3408. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49984 - https://www.exploit-db.com/exploits/8489 - https://www.exploit-db.com/exploits/8519 - http://secunia.com/advisories/34816 - https://www.exploit-db.com/ex
ts/8489 - https://www.exploit-db.com/exploits/8519 - http://secunia.com/advisories/34816 - https://www.exploit-db.com/exploits/8520 - http://osvdb.org/53885 - https://hansesecure.de/vulnerability-in-coolplayer/
CVE ID: CVE-2009-1438 State: PUBLISHED Published: 2009-04-27T17:43:00 Last Updated: 2024-08-07T05:13:25.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the CSoundFile::ReadMed function (src/load_med.cpp) in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted (1) song comment or (2) song name, which triggers a heap-based buffer overflow, as exploited in the wild in August 2008. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/53801 - http://www.ubuntu.com/usn/USN-771-1 - http://modplug-xmms.cvs.sourcefo
Container: References: - http://osvdb.org/53801 - http://www.ubuntu.com/usn/USN-771-1 - http://modplug-xmms.cvs.sourceforge.net/viewvc/modplug-xmms/libmodplug/src/load_med.cpp?r1=1.1&amp%3Br2=1.2 - http://secunia.com/advisories/34797 - http://secunia.com/advisories/35736 - http://secunia.com/advisories/36183 - http://www.debian.org/security/2009/dsa-1850 - https://bugzilla.redhat.com/show_bug.cgi?id=496834 - http://www.debian.org/security/2009/dsa-1851 - http://secunia.com/advisories/36158 - http://bugs.gentoo.org/show_bug.cgi?id=266913 - http://www.securityfocus.com/bid/30801 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:128 - https://exchange.xforce.ibmcloud.com/vulnerabili
801 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50388 - http://secunia.com/advisories/35026 - http://sourceforge.net/project/shownotes.php?release_id=677065&group_id=1275 - http://security.gentoo.org/glsa/glsa-200907-07.xml - http://secunia.com/advisories/35685 - http://www.redhat.com/archives/fedora-package-announce/2009-April/msg00908.html - http://www.redhat.com/archives/fedora-package-announce/2009-April/msg00907.html - http://www.vupen.com/english/advisories/2009/1104 - http://secunia.com/advisories/34930 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - http://www.openwall.com/list
sories/34930 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - http://www.openwall.com/lists/oss-security/2009/04/21/4
CVE ID: CVE-2009-1439 State: PUBLISHED Published: 2009-04-27T17:43:00 Last Updated: 2024-08-07T05:13:25.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35390 - http://www.openwall.com/lists/oss-security/2009/04/07/7 - http://www.openwall.com/lists/oss-security/2009/04/04/1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b3
com/lists/oss-security/2009/04/04/1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b363b3304bcf68c4541683b2eff70b29f0446a5b - http://secunia.com/advisories/35226 - http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html - http://secunia.com/advisories/37471 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01126.html - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html - http://secunia.com/advisories/35656 - http://xorl.wordpress.com/2009/04/07/linux-kernel-tree-connect-cifs-remote-buffer-overflow/ - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - https://oval.cisecurity.org/repo
mote-buffer-overflow/ - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8265 - http://www.debian.org/security/2009/dsa-1794 - http://www.securityfocus.com/archive/1/503610/100/0/threaded - http://www.securityfocus.com/bid/34453 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html - http://secunia.com/advisories/35185 - https://bugzilla.redhat.com/show_bug.cgi?id=494275 - http://secunia.com/advisories/35011 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://blog.fefe.de/?ts=b72905a8 - http://www.openwall.com/lists/oss-security/2009/04/07/3 - http:
7985/100/0/threaded - http://blog.fefe.de/?ts=b72905a8 - http://www.openwall.com/lists/oss-security/2009/04/07/3 - http://secunia.com/advisories/35120 - https://bugzilla.novell.com/show_bug.cgi?id=492282 - http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html - http://www.ubuntu.com/usn/usn-793-1 - https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01271.html - http://www.redhat.com/support/errata/RHSA-2009-1081.html - http://secunia.com/advisories/34981 - http://www.debian.org/security/2009/dsa-1800 - http://secunia.com/advisories/35343 - http://lists.samba.org/archive/linux-cifs-client/2009-April/004322.html - http://secunia.com/advisories/35387 - http
3 - http://lists.samba.org/archive/linux-cifs-client/2009-April/004322.html - http://secunia.com/advisories/35387 - http://www.debian.org/security/2009/dsa-1787 - http://secunia.com/advisories/35217 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10321 - http://wiki.rpath.com/Advisories:rPSA-2009-0084 - http://secunia.com/advisories/35121 - http://www.vupen.com/english/advisories/2009/3316 - http://secunia.com/advisories/35394
CVE ID: CVE-2009-1440 State: PUBLISHED Published: 2009-04-27T17:43:00 Last Updated: 2024-08-07T05:13:25.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in DownloadListCtrl.cpp in amule 2.2.4 allows remote attackers to conduct argument injection attacks into a command for mplayer via a crafted filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2009/dsa-1821 - http://www.securityfocus.com/bid/34683 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=525078 - http://secunia.com/advisories/34839 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50205 - http://www.openwall.com/lists/oss-s
.com/advisories/34839 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50205 - http://www.openwall.com/lists/oss-security/2009/04/22/1
CVE ID: CVE-2009-1441 State: PUBLISHED Published: 2009-05-07T17:00:00 Last Updated: 2024-08-07T05:13:25.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the ParamTraits<SkBitmap>::Read function in Google Chrome before 1.0.154.64 allows attackers to leverage renderer access to cause a denial of service (application crash) or possibly execute arbitrary code via vectors related to a large bitmap that arrives over the IPC channel. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=10869 - http://www.vupen.com/english/advisories/2009/1266 - https://exchange.xforce.ibmcloud.com/vulnerabili
s/detail?id=10869 - http://www.vupen.com/english/advisories/2009/1266 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50362 - http://www.securitytracker.com/id?1022174 - http://osvdb.org/54288 - http://googlechromereleases.blogspot.com/2009/05/stable-update-security-fix.html - http://secunia.com/advisories/35014 - http://www.securityfocus.com/bid/34859
CVE ID: CVE-2009-1442 State: PUBLISHED Published: 2009-05-07T17:00:00 Last Updated: 2024-08-07T05:13:25.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in Skia, as used in Google Chrome 1.x before 1.0.154.64 and 2.x, and possibly Android, might allow remote attackers to execute arbitrary code in the renderer process via a crafted (1) image or (2) canvas. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=10736 - http://www.vupen.com/english/advisories/2009/1266 - http://googlechromereleases.blogspot.com/2009/05/stable-update-security-fix.html - http://secunia.com/advisories/35014 - htt
://googlechromereleases.blogspot.com/2009/05/stable-update-security-fix.html - http://secunia.com/advisories/35014 - http://osvdb.org/54248 - http://www.securitytracker.com/id?1022175 - http://www.securityfocus.com/bid/34859 - http://code.google.com/p/skia/source/detail?r=159
CVE ID: CVE-2009-1443 State: PUBLISHED Published: 2009-04-27T19:00:00Z Last Updated: 2024-09-16T17:28:32.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1152 - http://secunia.com/advisories/34763 - http://www.securityfocus.com/bid/34694 - http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=133&cntnt01returnid=51
CVE ID: CVE-2009-1444 State: PUBLISHED Published: 2009-04-27T19:00:00 Last Updated: 2024-08-07T05:13:25.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in indexk.php in WebPortal CMS 0.8-beta allows remote attackers to execute arbitrary PHP code via a URL in the lib_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8516 - http://osvdb.org/54121 - http://www.securityfocus.com/bid/34687
CVE ID: CVE-2009-1445 State: PUBLISHED Published: 2009-04-27T19:00:00 Last Updated: 2024-08-07T05:13:25.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in WebPortal CMS 0.8-beta allow remote attackers to (1) read arbitrary files via directory traversal sequences in the lang parameter to libraries/helpdocs/help.php and (2) include and execute arbitrary local files via directory traversal sequences in the error parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54120 - http://osvdb.org/54119 - https://www.exploit-db.com/exploits/8516 - http://www.securityfocus.com/bid/34687
CVE ID: CVE-2009-1446 State: PUBLISHED Published: 2009-04-27T19:00:00 Last Updated: 2024-08-07T05:13:25.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in upload.php in Elkagroup Image Gallery 1.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in gallery/pictures/. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54115 - https://www.exploit-db.com/exploits/8514 - http://www.vupen.com/english/advisories/2009/1149 - http://ww
vdb.org/54115 - https://www.exploit-db.com/exploits/8514 - http://www.vupen.com/english/advisories/2009/1149 - http://www.securityfocus.com/bid/34679 - http://secunia.com/advisories/25844
CVE ID: CVE-2009-1447 State: PUBLISHED Published: 2009-04-27T19:00:00 Last Updated: 2024-08-07T05:13:25.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in admin/editor/image.php in e-cart.biz Free Shopping Cart allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34590 - http://secunia.com/advisories/34736 - https://www.exploit-db.com/exploits/8474 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49956
CVE ID: CVE-2009-1448 State: PUBLISHED Published: 2009-04-27T22:00:00 Last Updated: 2024-08-07T05:13:25.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in apricot.php in LovPop.net APRICOT, probably 1.20, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000019.html - http://jvn.jp/en/jp/JVN82744714/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/49948
CVE ID: CVE-2009-1449 State: PUBLISHED Published: 2009-04-27T22:00:00 Last Updated: 2024-08-07T05:13:25.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.1 allows remote attackers to execute arbitrary code via a skin file (skin.ini) with a large PlaylistSkin parameter. NOTE: this may overlap CVE-2008-5735. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/50448 - https://www.exploit-db.com/exploits/8527 - http://osvdb.org/54113 - http://secunia.com/advisories/34816
CVE ID: CVE-2009-1450 State: PUBLISHED Published: 2009-04-28T15:00:00 Last Updated: 2024-08-07T05:13:25.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in format.php in SMA-DB 0.3.12 allows remote attackers to execute arbitrary PHP code via a URL in the _page_content parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7936
CVE ID: CVE-2009-1451 State: PUBLISHED Published: 2009-04-28T15:00:00 Last Updated: 2024-08-07T05:13:25.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in startpage.php in SMA-DB 0.3.12 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7936
CVE ID: CVE-2009-1452 State: PUBLISHED Published: 2009-04-28T16:00:00 Last Updated: 2024-08-07T05:13:25.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in theme/format.php in SMA-DB 0.3.13 allow remote attackers to execute arbitrary PHP code via a URL in the (1) _page_css and (2) _page_javascript parameters. NOTE: the _page_content vector is already is covered by CVE-2009-1450. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8460 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49928 - http://www.securityfocus.com/bid/34569
CVE ID: CVE-2009-1453 State: PUBLISHED Published: 2009-04-28T16:00:00 Last Updated: 2024-08-07T05:13:25.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in class.eport.php in Tiny Blogr 1.0.0 rc4, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the txtUsername parameter (aka the Username field). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34768 - http://www.securityfocus.com/bid/34581 - https://www.exploit-db.com/exploits/8464 - http://www.securityfocus.com/archive/1/502747/100/0/t
tyfocus.com/bid/34581 - https://www.exploit-db.com/exploits/8464 - http://www.securityfocus.com/archive/1/502747/100/0/threaded
CVE ID: CVE-2009-1454 State: PUBLISHED Published: 2009-04-28T16:00:00 Last Updated: 2024-08-07T05:13:25.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in tasks.php in WebCollab before 2.50 (aka Billy Goat) allows remote attackers to inject arbitrary web script or HTML via the selection parameter in a todo action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49939 - http://secunia.com/advisories/34568 - http://www.osvdb.org/53780 - http://holisticinfosec.org/content/view/108/45/ - http://sourceforge.net/project/shownotes.php?release_id=676245&group_id=75945 - http
cinfosec.org/content/view/108/45/ - http://sourceforge.net/project/shownotes.php?release_id=676245&group_id=75945 - http://www.securityfocus.com/bid/34576
CVE ID: CVE-2009-1455 State: PUBLISHED Published: 2009-04-28T16:00:00 Last Updated: 2024-08-07T05:13:25.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in WebCollab before 2.50 (aka Billy Goat) allow remote attackers to hijack the authentication of administrators for requests that change an arbitrary password or have other unspecified impact. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49940 - http://secunia.com/advisories/34568 - http://holisticinfosec.org/content/view/108/45/ - http://sourceforge.net/project/shownotes.php?release_id=676245&gro
8 - http://holisticinfosec.org/content/view/108/45/ - http://sourceforge.net/project/shownotes.php?release_id=676245&group_id=75945 - http://www.osvdb.org/53781
CVE ID: CVE-2009-1456 State: PUBLISHED Published: 2009-04-28T16:00:00 Last Updated: 2024-08-07T05:13:25.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin.php in Malleo 1.2.3 allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the module parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/502763/100/0/threaded - http://secunia.com/advisories/34766 - http://www.securityfocus.com/bid/34588
CVE ID: CVE-2009-1457 State: PUBLISHED Published: 2009-04-28T16:00:00 Last Updated: 2024-08-07T05:13:25.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in player.php in Nuke Evolution Xtreme 2.x allows remote attackers to inject arbitrary web script or HTML via the defaultVisualExt parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/49944 - http://www.securityfocus.com/bid/34594 - http://secunia.com/advisories/34783 - http://osvdb.org/53779