Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-2368 State: PUBLISHED Published: 2009-07-08T15:00:00Z Last Updated: 2024-09-16T23:25:37.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Socks Server 5 before 3.7.8-8 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1806 - http://secunia.com/advisories/35718 - http://sourceforge.net/project/shownotes.php?release_id=695068
CVE ID: CVE-2009-2369 State: PUBLISHED Published: 2009-07-08T15:00:00 Last Updated: 2024-08-07T05:52:13.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the wxImage::Create function in src/common/image.cpp in wxWidgets 2.8.10 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted JPEG file, which triggers a heap-based buffer overflow. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51516 - http://osvdb.org/55520 - http://secuni
ainer: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51516 - http://osvdb.org/55520 - http://secunia.com/advisories/35351 - http://www.securityfocus.com/bid/35552 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00712.html - http://www.vupen.com/english/advisories/2009/1770 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00693.html - http://secunia.com/advisories/35913
CVE ID: CVE-2009-2370 State: PUBLISHED Published: 2009-07-08T15:00:00Z Last Updated: 2024-09-16T18:08:39.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Advanced Forum 5.x before 5.x-1.1 and 6.x before 6.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/507550 - http://drupal.org/node/507580 - http://secunia.com/advisories/35682 - http://secunia.com/advisories/35678 - http://www.vupen.com/english/advisories/2009/1769 - http://osvdb.org/55521 - http://drupal.org/node/507526
CVE ID: CVE-2009-2371 State: PUBLISHED Published: 2009-07-08T15:00:00Z Last Updated: 2024-09-17T03:53:36.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advanced Forum 6.x before 6.x-1.1, a module for Drupal, does not prevent users from modifying user signatures after the associated comment format has been changed to an administrator-controlled input format, which allows remote authenticated users to inject arbitrary web script, HTML, and possibly PHP code via a crafted user signature. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/507580 - http://secunia.com/advisories/35678 - http://www.vupen.com/english/advisories/2009/1769 - http:/
rupal.org/node/507580 - http://secunia.com/advisories/35678 - http://www.vupen.com/english/advisories/2009/1769 - http://osvdb.org/55522 - http://drupal.org/node/507526
CVE ID: CVE-2009-2372 State: PUBLISHED Published: 2009-07-08T15:00:00 Last Updated: 2024-08-07T05:52:14.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Drupal 6.x before 6.13 does not prevent users from modifying user signatures after the associated comment format has been changed to an administrator-controlled input format, which allows remote authenticated users to inject arbitrary web script, HTML, and possibly PHP code via a crafted user signature. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/507572 - http://secunia.com/advisories/35681 - http://www.securitytracker.com/id?1022497 - http://osvdb.org/55525
CVE ID: CVE-2009-2373 State: PUBLISHED Published: 2009-07-08T15:00:00 Last Updated: 2024-08-07T05:52:14.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Forum module in Drupal 6.x before 6.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/507572 - http://secunia.com/advisories/35681 - http://osvdb.org/55524
CVE ID: CVE-2009-2374 State: PUBLISHED Published: 2009-07-08T15:00:00 Last Updated: 2024-08-07T05:52:13.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: Drupal 5.x before 5.19 and 6.x before 6.13 does not properly sanitize failed login attempts for pages that contain a sortable table, which includes the username and password in links that can be read from (1) the HTTP referer header of external web sites that are visited from those links or (2) when page caching is enabled, the Drupal page cache. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/507572 - http://secunia.com/advisories/35681 - http://secunia.com/advisories/35657 - http://osv
- http://drupal.org/node/507572 - http://secunia.com/advisories/35681 - http://secunia.com/advisories/35657 - http://osvdb.org/55524
CVE ID: CVE-2009-2375 State: PUBLISHED Published: 2009-07-08T15:00:00 Last Updated: 2024-08-07T05:52:13.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Photo DVD Maker 8.02, and possibly earlier versions, allows remote attackers to execute arbitrary code via a long File_Name parameter in a .pdm file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1793 - http://blog.bkis.com/?p=713 - http://www.securityfocus.com/archive/1/504738/100/0/threaded - http://secunia.com/advisories/35709
CVE ID: CVE-2009-2376 State: PUBLISHED Published: 2009-07-08T15:00:00 Last Updated: 2024-08-07T05:52:14.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Html::textarea function in application/libraries/Html.php in TangoCMS 2.x before 2.3.0 allows remote attackers to inject arbitrary web script or HTML via the value parameter, related to the Contact module. Additional Analyst Notes: - CVE Program Container: References: - http://tangocms.org/changelog - http://dev.tangocms.org/repositories/diff/tangocms?rev=2372 - http://dev.tangocms.org/issues/show/140 - http://secunia.com/advisories/35642 - https://exchange.xforce.ibmcloud.com/vu
http://dev.tangocms.org/issues/show/140 - http://secunia.com/advisories/35642 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51432
CVE ID: CVE-2009-2377 State: PUBLISHED Published: 2009-07-08T15:00:00 Last Updated: 2024-08-07T05:52:13.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Avax Vector ActiveX control in avPreview.ocx in AVAX-software Avax Vector ActiveX 1.3 allows remote attackers to cause a denial of service (application crash) via a long PrinterName property. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/504729/100/0/threaded - http://www.securityfocus.com/bid/35583
CVE ID: CVE-2009-2378 State: PUBLISHED Published: 2009-07-08T15:00:00 Last Updated: 2024-08-07T05:52:13.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in formmailer.admin.inc.php in Jax FormMailer 3.0.0 allows remote attackers to execute arbitrary PHP code via a URL in the BASE_DIR[jax_formmailer] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9051 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51443
CVE ID: CVE-2009-2379 State: PUBLISHED Published: 2009-07-08T15:00:00 Last Updated: 2024-08-07T05:52:13.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cmd parameter. Additional Analyst Notes: - CVE Program Container: References: - http://forum.bigace.de/announcements/security-patch-for-bigace-2-6 - http://www.securityfocus.com/bid/35537 - http://securitytracker.com/id?1022489 - http://secunia.com/advisories/35643 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51444 - http://osvdb.org/55510 - http://
nia.com/advisories/35643 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51444 - http://osvdb.org/55510 - http://www.bigace.de/Security-patch-for-BIGACE-2.6-released.html - http://www.exploit-db.com/exploits/9052
CVE ID: CVE-2009-2380 State: PUBLISHED Published: 2009-07-08T15:00:00 Last Updated: 2024-08-07T05:52:13.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in includes/functions.php in 4images 1.7 through 1.7.7 allows remote attackers to inject arbitrary web script or HTML via vectors related to the url variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35342 - http://www.4homepages.de/forum/index.php?topic=25057.0 - http://www.osvdb.org/55508 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51470 - http://secunia.com/advisories/35639
CVE ID: CVE-2009-2381 State: PUBLISHED Published: 2009-07-08T15:00:00 Last Updated: 2024-08-07T05:52:13.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gizmo 3.1.0.79 on Linux does not verify a server's SSL certificate, which allows remote servers to obtain the credentials of arbitrary users via a spoofed certificate. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35628 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51399 - http://www.securityfocus.com/bid/35508 - http://www.securityfocus.com/archive/1/504572/100/0/threaded
CVE ID: CVE-2009-2382 State: PUBLISHED Published: 2009-07-08T15:00:00 Last Updated: 2024-08-07T05:52:13.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin.php in phpMyBlockchecker 1.0.0055 allows remote attackers to bypass authentication and gain administrative access by setting the PHPMYBCAdmin cookie to LOGGEDIN. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51445 - http://www.exploit-db.com/exploits/9053 - http://osvdb.org/55505 - http://secunia.com/advisories/35660
CVE ID: CVE-2009-2383 State: PUBLISHED Published: 2009-07-08T15:00:00 Last Updated: 2024-08-07T05:52:13.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in BTE_RW_webajax.php in the Related Sites plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the guid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51446 - http://www.securityfocus.com/bid/35538 - http://www.exploit-db.com/exploits/9054
CVE ID: CVE-2009-2384 State: PUBLISHED Published: 2009-07-08T15:00:00 Last Updated: 2024-08-07T05:52:13.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in amp.exe in Brothersoft PEamp 1.02b allows user-assisted remote attackers to execute arbitrary code via a long string in a .m3u playlist file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9061 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51479 - http://secunia.com/advisories/35663
CVE ID: CVE-2009-2385 State: PUBLISHED Published: 2009-07-08T15:00:00 Last Updated: 2024-08-07T05:52:13.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the awardsMembers function in Sources/Profile.php in the Member Awards component 1.0.2 for Simple Machines Forum (SMF) allows remote attackers to execute arbitrary SQL commands via the id parameter in a profile action to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35661 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51441 - http://www.exploit-db.com/exploits
a.com/advisories/35661 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51441 - http://www.exploit-db.com/exploits/9050 - http://www.securityfocus.com/bid/35536
CVE ID: CVE-2009-2386 State: PUBLISHED Published: 2009-07-10T15:00:00Z Last Updated: 2024-09-16T19:24:28.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure method vulnerability in Awingsoft Awakening Winds3D Viewer plugin 3.5.0.0, 3.0.0.5, and possibly other versions allows remote attackers to force the download and execution of arbitrary files via the GetURL method. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35764 - http://www.securityfocus.com/bid/35595 - http://www.vupen.com/english/advisories/2009/1834 - http://www.coresecurity.com/content/winds3d-viewer-advisory
CVE ID: CVE-2009-2387 State: PUBLISHED Published: 2009-07-09T16:00:00 Last Updated: 2024-08-07T05:52:13.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the proc filesystem in Sun OpenSolaris snv_49 through snv_109 allows local users to cause a denial of service (deadlock and panic) via unknown vectors, related to the ldt_rewrite_syscall function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35588 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-258888-1
CVE ID: CVE-2009-2388 State: PUBLISHED Published: 2009-07-09T16:00:00Z Last Updated: 2024-09-16T16:59:10.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the txtPassword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/55560 - http://secunia.com/advisories/35677
CVE ID: CVE-2009-2389 State: PUBLISHED Published: 2009-07-09T16:00:00 Last Updated: 2024-08-07T05:52:13.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in newsscript.php in USOLVED NEWSolved 1.1.6, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) jahr or (2) idneu parameter in an archive action, or (3) the newsid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35611 - http://www.exploit-db.com/exploits/9042
CVE ID: CVE-2009-2390 State: PUBLISHED Published: 2009-07-09T16:00:00 Last Updated: 2024-08-07T05:52:13.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the BookFlip (com_bookflip) component 2.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the book_id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35519 - http://www.exploit-db.com/exploits/9040 - http://secunia.com/advisories/35608
CVE ID: CVE-2009-2391 State: PUBLISHED Published: 2009-07-09T16:00:00 Last Updated: 2024-08-07T05:52:14.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to inject arbitrary web script or HTML via the tid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9022 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51388 - http://secunia.com/advisories/35591
CVE ID: CVE-2009-2392 State: PUBLISHED Published: 2009-07-09T16:00:00 Last Updated: 2024-08-07T05:52:13.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to execute arbitrary SQL commands via the tid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51387 - http://www.exploit-db.com/exploits/9022 - http://secunia.com/advisories/35591
CVE ID: CVE-2009-2393 State: PUBLISHED Published: 2009-07-09T16:00:00 Last Updated: 2024-08-07T05:52:13.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/index.php in Virtuenetz Virtue Online Test Generator does not require administrative privileges, which allows remote authenticated users to have an unknown impact via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/51386 - http://www.exploit-db.com/exploits/9022 - http://secunia.com/advisories/35591
CVE ID: CVE-2009-2394 State: PUBLISHED Published: 2009-07-09T16:00:00 Last Updated: 2024-08-07T05:52:13.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in cat.php in SMSPages 1.0 in Mr.Saphp Arabic Script Mobile (aka Messages Library) 2.0 allows remote attackers to execute arbitrary SQL commands via the CatID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9027
CVE ID: CVE-2009-2395 State: PUBLISHED Published: 2009-07-09T16:00:00 Last Updated: 2024-08-07T05:52:14.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the K2 (com_k2) component 1.0.1 Beta and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the category parameter in an itemlist action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35517 - http://www.exploit-db.com/exploits/9030 - http://www.vupen.com/english/advisories/2009/1733
CVE ID: CVE-2009-2396 State: PUBLISHED Published: 2009-07-09T16:00:00 Last Updated: 2024-08-07T05:52:14.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in template/album.php in DM Albums 1.9.2, as used standalone or as a WordPress plugin, allows remote attackers to execute arbitrary PHP code via a URL in the SECURITY_FILE parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9043 - http://secunia.com/advisories/35619 - http://www.securityfocus.com/bid/35521
CVE ID: CVE-2009-2397 State: PUBLISHED Published: 2009-07-09T16:00:00 Last Updated: 2024-08-07T05:52:13.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download.php in Audio Article Directory allows remote attackers to read arbitrary files via directory traversal sequences in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35609 - http://www.exploit-db.com/exploits/9041 - http://www.vupen.com/english/advisories/2009/1738
CVE ID: CVE-2009-2398 State: PUBLISHED Published: 2009-07-09T16:00:00 Last Updated: 2024-08-07T05:52:13.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in test/index.php in PHP-Sugar 0.80 allows remote attackers to read arbitrary files via a ..// (dot dot slash slash) in the t parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/1735 - http://www.exploit-db.com/exploits/9036
CVE ID: CVE-2009-2399 State: PUBLISHED Published: 2009-07-09T16:00:00 Last Updated: 2024-08-07T05:52:13.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in dm-albums/template/album.php in DM FileManager 3.9.4, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the SECURITY_FILE parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35622 - http://www.exploit-db.com/exploits/9044
CVE ID: CVE-2009-2400 State: PUBLISHED Published: 2009-07-09T16:00:00 Last Updated: 2024-08-07T05:52:13.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the PHP (com_php) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9028 - http://www.vupen.com/english/advisories/2009/1732 - http://www.securityfocus.com/bid/35515
CVE ID: CVE-2009-2401 State: PUBLISHED Published: 2009-07-09T16:00:00 Last Updated: 2024-08-07T05:52:14.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PHPEcho CMS 2.0-rc3 allows remote attackers to inject arbitrary web script or HTML via a forum post. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9014 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51360 - http://www.securityfocus.com/bid/35488
CVE ID: CVE-2009-2402 State: PUBLISHED Published: 2009-07-09T16:00:00 Last Updated: 2024-08-07T05:52:14.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the forum module in PHPEcho CMS 2.0-rc3 allows remote attackers to execute arbitrary SQL commands via the id parameter in a thread action, a different vector than CVE-2008-0355. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9014 - http://www.securityfocus.com/bid/35488
CVE ID: CVE-2009-2403 State: PUBLISHED Published: 2009-07-09T16:00:00 Last Updated: 2024-08-07T05:52:13.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in SCMPX 1.5.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long string in a .m3u playlist file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/9033 - http://www.vupen.com/english/advisories/2009/1729 - http://secunia.com/advisories/35596
CVE ID: CVE-2009-2404 State: PUBLISHED Published: 2009-08-03T14:00:00 Last Updated: 2024-08-07T05:52:14.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long domain name in the subject's Common Name (CN) field of an X.509 certificate, related to the cert_TestHostName function. Additional Analyst Notes: - CVE Program Container: References: - http://www.bla
lated to the cert_TestHostName function. Additional Analyst Notes: - CVE Program Container: References: - http://www.blackhat.com/presentations/bh-usa-09/MARLINSPIKE/BHUSA09-Marlinspike-DefeatSSL-SLIDES.pdf - http://secunia.com/advisories/36139 - http://secunia.com/advisories/36102 - http://secunia.com/advisories/36157 - http://www.us-cert.gov/cas/techalerts/TA10-103B.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11174 - http://www.mandriva.com/security/advisories?name=MDVSA-2009:197 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8658 - http://www.novell.com/linux/security/advisories/2009_48_firefox.htm