deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-4119
Published: 2009-12-01
Description: Cross-site scripting (XSS) vulnerability in Feed Element Mapper module 5.x before 5.x-1.3, 6.x before 6.x-1.3, and 6.x-2.0-alpha before 6.x-2.0-alpha4 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://drupal.org/node/636496; http://drupal.org/node/636498; http://drupal.org/node/636518
CVE: CVE-2009-4120
Published: 2009-12-01
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Quick.Cart 3.4 allow remote attackers to hijack the authentication of the administrator for requests that (1) delete orders via an orders-delete action to admin.php, and possibly (2) delete products or (3) delete pages via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://archives.neohapsis.com/archives/fulldisclosure/2009-11/0260.html; http://www.securityfocus.com/bid/37115; https://exchange.xforce.ibmcloud.com/vulnerabilities/54413
CVE: CVE-2009-4121
Published: 2009-12-01
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Quick.CMS 2.4 and Quick.CMS.Lite 2.4 allow remote attackers to hijack the authentication of the administrator for requests that (1) delete web pages via a p-delete action to admin.php, and possibly (2) delete products or (3) delete orders via unspecified vectors.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://archives.neohapsis.com/archives/fulldisclosure/2009-11/0260.html; http://osvdb.org/60495; http://secunia.com/advisories/37421
CVE: CVE-2009-2626
Published: 2009-12-01
Description: The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore function to restore the variable.
CVSS Score: 6.4 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=540605; http://secunia.com/advisories/37482; http://securityreason.com/achievement_securityalert/65
CVE: CVE-2009-4128
Published: 2009-12-01
Description: GNU GRand Unified Bootloader (GRUB) 2 1.97 only compares the submitted portion of a password with the actual password, which makes it easier for physically proximate attackers to conduct brute force attacks and bypass authentication by submitting a password whose length is 1.
CVSS Score: 7.2 (HIGH)
CWE: CWE-287
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=555195; http://www.openwall.com/lists/oss-security/2024/01/15/3; http://www.securityfocus.com/bid/36968
CVE: CVE-2009-3672
Published: 2009-12-02
Description: Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory that (1) were not properly initialized or (2) are deleted, which allows remote attackers to execute arbitrary code via vectors involving a call to the getElementsByTagName method for the STYLE tag name, selection of the single element in the returned list, and a change to the outerHTML property of this element, related to Cascading Style Sheets (CSS) and mshtml.dll, aka "HTML Object Memory Corruption Vulnerability." NOTE: some of these details are obtained from third party information. NOTE: this issue was originally assigned CVE-2009-4054, but Microsoft assigned a duplicate identifier of CVE-2009-3672. CVE consumers should use this identifier instead of CVE-2009-4054.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/37448; http://www.kb.cert.org/vuls/id/515749; http://www.microsoft.com/technet/security/advisory/977981.mspx
CVE: CVE-2009-4055
Published: 2009-12-02
Description: rtp.c in Asterisk Open Source 1.2.x before 1.2.37, 1.4.x before 1.4.27.1, 1.6.0.x before 1.6.0.19, and 1.6.1.x before 1.6.1.11; Business Edition B.x.x before B.2.5.13, C.2.x.x before C.2.4.6, and C.3.x.x before C.3.2.3; and s800i 1.3.x before 1.3.0.6 allows remote attackers to cause a denial of service (daemon crash) via an RTP comfort noise payload with a long data length.
CVSS Score: 5.0 (MEDIUM)
References: http://downloads.asterisk.org/pub/security/AST-2009-010-1.2.diff.txt; http://downloads.asterisk.org/pub/security/AST-2009-010-1.4.diff.txt; http://downloads.asterisk.org/pub/security/AST-2009-010-1.6.0.diff.txt
CVE: CVE-2009-4150
Published: 2009-12-02
Description: dasauto in IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP1 permits execution by unprivileged user accounts, which has unspecified impact and local attack vectors.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/36890; http://secunia.com/advisories/37454; http://securitytracker.com/id?1023242
CVE: CVE-2009-2686
Published: 2009-12-02
Description: Unspecified vulnerability in HP NonStop G06.12.00 through G06.32.00, H06.08.00 through H06.18.01, and J06.04.00 through J06.07.01 allows local users to gain privileges, cause a denial of service, or obtain "access to data" via unknown vectors.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/37560; http://www.vupen.com/english/advisories/2009/3373; https://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01923646
CVE: CVE-2009-3585
Published: 2009-12-02
Description: Session fixation vulnerability in html/Elements/SetupSessionCookie in Best Practical Solutions RT 3.0.0 through 3.6.9 and 3.8.x through 3.8.5 allows remote attackers to hijack web sessions by setting the session identifier via a manipulation that leverages a second web server within the same domain.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-287
References: http://bestpractical.typepad.com/files/rt-3.0.0-session_fixation.v3.patch; http://bestpractical.typepad.com/files/rt-3.0.1-3.0.6-session_fixation.v3.patch; http://bestpractical.typepad.com/files/rt-3.0.7-3.6.1-session_fixation.v3.patch
CVE: CVE-2009-4026
Published: 2009-12-02
Description: The mac80211 subsystem in the Linux kernel before 2.6.32-rc8-next-20091201 allows remote attackers to cause a denial of service (panic) via a crafted Delete Block ACK (aka DELBA) packet, related to an erroneous "code shuffling patch."
CVSS Score: 7.8 (HIGH)
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=827d42c9ac91ddd728e4f4a31fefb906ef2ceff7; http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html; http://secunia.com/advisories/38017
CVE: CVE-2009-4027
Published: 2009-12-02
Description: Race condition in the mac80211 subsystem in the Linux kernel before 2.6.32-rc8-next-20091201 allows remote attackers to cause a denial of service (system crash) via a Delete Block ACK (aka DELBA) packet that triggers a certain state change in the absence of an aggregation session.
CVSS Score: 7.1 (HIGH)
CWE: CWE-362
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=827d42c9ac91ddd728e4f4a31fefb906ef2ceff7; http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html; http://secunia.com/advisories/38017
CVE: CVE-2009-4151
Published: 2009-12-02
Description: Session fixation vulnerability in html/Elements/SetupSessionCookie in Best Practical Solutions RT 3.0.0 through 3.6.9 and 3.8.x through 3.8.5 allows remote attackers to hijack web sessions by setting the session identifier via a manipulation that leverages "HTTP access to the RT server," a related issue to CVE-2009-3585.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-287
References: http://bestpractical.typepad.com/files/rt-3.0.0-session_fixation.v3.patch; http://bestpractical.typepad.com/files/rt-3.0.1-3.0.6-session_fixation.v3.patch; http://bestpractical.typepad.com/files/rt-3.0.7-3.6.1-session_fixation.v3.patch
CVE: CVE-2009-4152
Published: 2009-12-02
Description: Cross-site scripting (XSS) vulnerability in the Collaboration component in IBM WebSphere Portal 6.1.x before 6.1.0.3 allows remote attackers to inject arbitrary web script or HTML via the people picker tag.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/37526; http://www-01.ibm.com/support/docview.wss?uid=swg1PK93429; http://www-01.ibm.com/support/docview.wss?uid=swg27014411
CVE: CVE-2009-4153
Published: 2009-12-02
Description: Unspecified vulnerability in the XMLAccess component in IBM WebSphere Portal 6.1.x before 6.1.0.3 has unknown impact and attack vectors, related to the work directory.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/37526; http://www-01.ibm.com/support/docview.wss?uid=swg1PK93783; http://www-01.ibm.com/support/docview.wss?uid=swg27014411
CVE: CVE-2009-4154
Published: 2009-12-02
Description: Directory traversal vulnerability in includes/feedcreator.class.php in Elxis CMS allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.org/0911-exploits/elxiscms-disclose.txt; http://www.securityfocus.com/bid/37158; http://packetstormsecurity.org/0911-exploits/elxiscms-disclose.txt
CVE: CVE-2009-4155
Published: 2009-12-02
Description: Multiple SQL injection vulnerabilities in Eshopbuilde CMS allow remote attackers to execute arbitrary SQL commands via the sitebid parameter to (1) home-f.asp and (2) opinions-f.asp; (3) sitebid, (4) id, (5) secText, (6) client-ip, and (7) G_id parameters to more-f.asp; (8) sitebid, (9) id, (10) ma_id, (11) mi_id, (12) secText, (13) client-ip, and (14) G_id parameters to selectintro.asp; (15) sitebid, (16) secText, (17) adv_code, and (18) client-ip parameters to advcount.asp; (19) sitebid, (20) secText, (21) Grp_Code, (22) _method, and (23) client-ip parameters to advview.asp; and (24) sitebid, (25) secText, (26) newsId, and (27) client-ip parameters to dis_new-f.asp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/archive/1/508137/100/0/threaded; http://www.securityfocus.com/archive/1/508137/100/0/threaded
CVE: CVE-2009-4156
Published: 2009-12-02
Description: PHP remote file inclusion vulnerability in modules/pms/index.php in Ciamos CMS 0.9.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the module_path parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.exploit-db.com/exploits/10259; http://www.securityfocus.com/bid/37160; http://www.exploit-db.com/exploits/10259
CVE: CVE-2009-4157
Published: 2009-12-02
Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in the ProofReader (com_proofreader) component 1.0 RC9 and earlier for Joomla! allow remote attackers to inject arbitrary web script or HTML via the URI, which is not properly handled in (1) 404 or (2) error pages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://websecurity.com.ua/3482/; http://www.securityfocus.com/bid/37145; http://websecurity.com.ua/3482/
CVE: CVE-2009-4158
Published: 2009-12-02
Description: SQL injection vulnerability in the Calendar Base (cal) extension before 1.2.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/37549; http://typo3.org/extensions/repository/view/cal/1.2.1/; http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-019/
CVE: CVE-2009-4159
Published: 2009-12-02
Description: Cross-site scripting (XSS) vulnerability in the newsletter configuration feature in the backend module in the Direct Mail (direct_mail) extension 2.6.4 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://secunia.com/advisories/37552; http://typo3.org/extensions/repository/view/direct_mail/2.6.5/; http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-018/
CVE: CVE-2009-4160
Published: 2009-12-02
Description: Unspecified vulnerability in the Simple download-system with counter and categories (kk_downloader) extension 1.2.1 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown attack vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/37550; http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/; http://www.securityfocus.com/bid/37168
CVE: CVE-2009-4161
Published: 2009-12-02
Description: Cross-site scripting (XSS) vulnerability in the [AN] Search it! (an_searchit) extension 2.4.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/; http://www.securityfocus.com/bid/37165; http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/
CVE: CVE-2009-4162
Published: 2009-12-02
Description: Unspecified vulnerability in the DB Integration (wfqbe) extension 1.3.1 and earlier for TYPO3 allows local users to execute arbitrary commands via unspecified vectors.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/37551; http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/; http://secunia.com/advisories/37551
CVE: CVE-2009-4163
Published: 2009-12-02
Description: SQL injection vulnerability in the TW Productfinder (tw_productfinder) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/; http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/
CVE: CVE-2009-4164
Published: 2009-12-02
Description: Cross-site scripting (XSS) vulnerability in the simple Glossar (simple_glossar) extension 1.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/; http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/
CVE: CVE-2009-4165
Published: 2009-12-02
Description: SQL injection vulnerability in the simple Glossar (simple_glossar) extension 1.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/; http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/
CVE: CVE-2009-4166
Published: 2009-12-02
Description: SQL injection vulnerability in the Trips (mchtrips) extension 2.0.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://typo3.org/extensions/repository/view/mchtrips/2.0.1/; http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/; http://typo3.org/extensions/repository/view/mchtrips/2.0.1/
CVE: CVE-2009-4167
Published: 2009-12-02
Description: Unspecified vulnerability in the Automatic Base Tags for RealUrl (lt_basetag) extension 1.0.0 for TYPO3 allows remote attackers to conduct "Cache spoofing" attacks via unspecified vectors.
CVSS Score: 6.4 (MEDIUM)
References: http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/; http://www.securityfocus.com/bid/37169; http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/
CVE: CVE-2009-4146
Published: 2009-12-02
Description: The _rtld function in the Run-Time Link-Editor (rtld) in libexec/rtld-elf/rtld.c in FreeBSD 7.1, 7.2, and 8.0 does not clear the LD_PRELOAD environment variable, which allows local users to gain privileges by executing a setuid or setguid program with a modified LD_PRELOAD variable containing an untrusted search path that points to a Trojan horse library, a different vector than CVE-2009-4147.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://packetstormsecurity.com/files/152997/FreeBSD-rtld-execl-Privilege-Escalation.html; http://people.freebsd.org/~cperciva/rtld.patch; http://secunia.com/advisories/37517
CVE: CVE-2009-4168
Published: 2009-12-02
Description: Cross-site scripting (XSS) vulnerability in Roy Tanck tagcloud.swf, as used in the WP-Cumulus plugin before 1.23 for WordPress and the Joomulus module 2.0 and earlier for Joomla!, allows remote attackers to inject arbitrary web script or HTML via the tagcloud parameter in a tags action. Cross-site scripting (XSS) vulnerability in tagcloud.swf in the WP-Cumulus Plug-in before 1.23 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tagcloud parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/1001-exploits/joomlajvclouds-xss.txt; http://secunia.com/advisories/37483; http://secunia.com/advisories/38161
CVE: CVE-2009-4169
Published: 2009-12-02
Description: Cross-site scripting (XSS) vulnerability in wp-cumulus.php in the WP-Cumulus Plug-in before 1.22 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.roytanck.com/2009/09/27/wp-cumulus-1-22-fixes-a-security-hole-please-upgrade/; http://www.securityfocus.com/bid/37102; http://www.vupen.com/english/advisories/2009/3322
CVE: CVE-2009-4170
Published: 2009-12-02
Description: WP-Cumulus Plug-in 1.20 for WordPress, and possibly other versions, allows remote attackers to obtain sensitive information via a crafted request to wp-cumulus.php, probably without parameters, which reveals the installation path in an error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://websecurity.com.ua/3665/; http://www.securityfocus.com/archive/1/508071/100/0/threaded; http://websecurity.com.ua/3665/
CVE: CVE-2009-4127
Published: 2009-12-02
Description: Unspecified vulnerability in Wikipedia Toolbar extension before 0.5.9.2 for Firefox allows user-assisted remote attackers to execute arbitrary JavaScript with Chrome privileges via vectors involving unspecified Toolbar buttons and the eval function.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/37377; http://www.securityfocus.com/bid/37038; http://www.vupen.com/english/advisories/2009/3268
CVE: CVE-2009-4147
Published: 2009-12-02
Description: The _rtld function in the Run-Time Link-Editor (rtld) in libexec/rtld-elf/rtld.c in FreeBSD 7.1 and 8.0 does not clear the (1) LD_LIBMAP, (2) LD_LIBRARY_PATH, (3) LD_LIBMAP_DISABLE, (4) LD_DEBUG, and (5) LD_ELF_HINTS_PATH environment variables, which allows local users to gain privileges by executing a setuid or setguid program with a modified variable containing an untrusted search path that points to a Trojan horse library, different vectors than CVE-2009-4146.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://packetstormsecurity.com/files/152997/FreeBSD-rtld-execl-Privilege-Escalation.html; http://people.freebsd.org/~cperciva/rtld.patch; http://secunia.com/advisories/37517
CVE: CVE-2009-4171
Published: 2009-12-02
Description: An ActiveX control in YahooBridgeLib.dll for Yahoo! Messenger 9.0.0.2162, and possibly other 9.0 versions, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by calling the RegisterMe method with a long argument.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/archive/1/507818/100/0/threaded; http://www.securityfocus.com/bid/37007; https://exchange.xforce.ibmcloud.com/vulnerabilities/54263
CVE: CVE-2009-4172
Published: 2009-12-02
Description: Cross-site scripting (XSS) vulnerability in index.php in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews 8 and 8b, when magic_quotes_gpc is disabled, allows remote attackers to inject arbitrary web script or HTML via the body of a news article in an addnews action.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt; http://www.securityfocus.com/archive/1/507782/100/0/threaded; http://www.securityfocus.com/bid/36971
CVE: CVE-2009-4173
Published: 2009-12-02
Description: Cross-site request forgery (CSRF) vulnerability in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote attackers to hijack the authentication of administrators for requests that create new users, including a new administrator, via an adduser action in the editusers module in index.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt; http://www.securityfocus.com/archive/1/507782/100/0/threaded; http://www.securityfocus.com/bid/36971
CVE: CVE-2009-4174
Published: 2009-12-02
Description: The editnews module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b, when magic_quotes_gpc is disabled, allows remote authenticated users with Journalist or Editor access to bypass administrative moderation and edit previously submitted articles via a modified id parameter in a doeditnews action.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-264
References: http://www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt; http://www.securityfocus.com/archive/1/507782/100/0/threaded; http://www.securityfocus.com/bid/36971
CVE: CVE-2009-4175
Published: 2009-12-02
Description: CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote attackers to obtain sensitive information via an invalid date value in the from_date_day parameter to search.php, which reveals the installation path in an error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.morningstarsecurity.com/advisories/MORNINGSTAR-2009-02-CuteNews.txt; http://www.securityfocus.com/archive/1/507782/100/0/threaded; http://www.securityfocus.com/bid/36971
CVE: CVE-2009-0895
Published: 2009-12-03
Description: Integer overflow in Novell eDirectory 8.7.3.x before 8.7.3.10 ftf2 and 8.8.x before 8.8.5.2 allows remote attackers to execute arbitrary code via an NDS Verb 0x1 request containing a large integer value that triggers a heap-based buffer overflow.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://secunia.com/advisories/37554; http://www.iss.net/threats/356.html; http://www.novell.com/support/viewContent.do?externalId=7004912
CVE: CVE-2009-1567
Published: 2009-12-03
Description: Multiple stack-based buffer overflows in the Lateral Arts Photobox uploader ActiveX control 1.x before 1.3, and 2.2.0.6, allow remote attackers to execute arbitrary code via a long URL string for the (1) LogURL, (2) ConnectURL, (3) SkinURL, (4) AlbumCreateURL, (5) ErrorURL, or (6) httpsinglehost property value.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/37138; http://secunia.com/advisories/37492; http://secunia.com/secunia_research/2009-41/
CVE: CVE-2009-4186
Published: 2009-12-03
Description: Stack consumption vulnerability in Apple Safari 4.0.3 on Windows allows remote attackers to cause a denial of service (application crash) via a long URI value (aka url) in the Cascading Style Sheets (CSS) background property.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.exploit-db.com/exploits/10102; http://www.securityfocus.com/bid/37039; https://exchange.xforce.ibmcloud.com/vulnerabilities/54487
CVE: CVE-2009-4187
Published: 2009-12-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in the Gateway component in Sun Java System Portal Server 6.3.1, 7.1, and 7.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://securitytracker.com/id?1023260; http://sunsolve.sun.com/search/document.do?assetkey=1-21-138686-04-1; http://sunsolve.sun.com/search/document.do?assetkey=1-66-269368-1