rainbutterfly/cve_corpus huggingface dataset:
CVE-2009-0818 
Cross-site scripting (XSS) vulnerability in the taxonomy_theme_admin_table_builder function (taxonomy_theme_admin.inc) in Taxonomy Theme module before 5.x-1.2, a module for Drupal, allows remote authenticated users with the "administer taxonomy" permission, or the ability to create pages when tagging is enabled, to inject arbitrary web script or HTML via the Vocabulary name (name parameter) to index.php.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-05T02:00:00.000Z
CVE-2009-0819 
sql/item_xmlfunc.cc in MySQL 5.1 before 5.1.32 and 6.0 before 6.0.10 allows remote authenticated users to cause a denial of service (crash) via "an XPath expression employing a scalar expression as a FilterExpr with ExtractValue() or UpdateXML()," which triggers an assertion failure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-05T02:00:00.000Z
CVE-2009-0820 
Multiple eval injection vulnerabilities in phpScheduleIt before 1.2.11 allow remote attackers to execute arbitrary code via (1) the end_date parameter to reserve.php and (2) the start_date and end_date parameters to check.php.  NOTE: the start_date/reserve.php vector is already covered by CVE-2008-6132.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-05T02:00:00.000Z
CVE-2009-0821 
Mozilla Firefox 2.0.0.20 and earlier allows remote attackers to cause a denial of service (application crash) via nested calls to the window.print function, as demonstrated by a window.print(window.print()) in the onclick attribute of an INPUT element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-05T02:00:00.000Z
CVE-2009-0824 
Elaborate Bytes ElbyCDIO.sys 6.0.2.0 and earlier, as distributed in SlySoft AnyDVD before 6.5.2.6, Virtual CloneDrive 5.4.2.3 and earlier, CloneDVD 2.9.2.0 and earlier, and CloneCD 5.3.1.3 and earlier, uses the METHOD_NEITHER communication method for IOCTLs and does not properly validate a buffer associated with the Irp object, which allows local users to cause a denial of service (system crash) via a crafted IOCTL call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-14T18:00:00.000Z
CVE-2009-0825 
SQL injection vulnerability in system/rss.php in TinX/cms 3.x before 3.5.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-09T21:00:00.000Z
CVE-2009-0826 
BlogHelper stores common_db.inc under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-05T20:00:00.000Z
CVE-2009-0827 
PollHelper stores poll.inc under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-05T20:00:00.000Z
CVE-2009-0828 
QuoteBook stores quotes.inc under the web root with insufficient access control, which allows remote attackers to obtain sensitive database information, including user credentials, via a direct request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-05T20:00:00.000Z
CVE-2009-0829 
Multiple SQL injection vulnerabilities in QuoteBook allow remote attackers to execute arbitrary SQL commands via the (1) MyBox and (2) selectFavorites parameters to (a) quotes.php and the (3) QuoteName and (4) QuoteText parameters to (b) quotesadd.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-05T20:00:00.000Z
CVE-2009-0830 
Cross-site scripting (XSS) vulnerability in QuoteBook allows remote attackers to inject arbitrary web script or HTML via the (1) QuoteName and (2) QuoteText parameters to quotesadd.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-05T20:00:00.000Z
CVE-2009-0831 
SQL injection vulnerability in members.php in the Members CV (job) module 1.0 for PHP-Fusion, when magic_quotes_gpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the sortby parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-05T20:00:00.000Z
CVE-2009-0832 
SQL injection vulnerability in items.php in the E-Cart module 1.3 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the CA parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-05T20:00:00.000Z
CVE-2009-0833 
Heap-based buffer overflow in gen_msn.dll in the gen_msn plugin 0.31 for Winamp 5.541 allows remote attackers to execute arbitrary code via a playlist (.pls) file with a long URL in the File1 field.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-05T20:00:00.000Z
CVE-2009-0834 
The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T11:00:00.000Z
CVE-2009-0835 
The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform, when CONFIG_SECCOMP is enabled, does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass intended access restrictions via crafted syscalls that are misinterpreted as (a) stat or (b) chmod, a related issue to CVE-2009-0342 and CVE-2009-0343.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T11:00:00.000Z
CVE-2009-0836 
Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301, does not require user confirmation before performing dangerous actions defined in a PDF file, which allows remote attackers to execute arbitrary programs and have unspecified other impact via a crafted file, as demonstrated by the "Open/Execute a file" action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-10T20:00:00.000Z
CVE-2009-0837 
Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to execute arbitrary code via a long (1) relative path or (2) absolute path in the filename argument in an action, as demonstrated by the "Open/Execute a file" action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-10T20:00:00.000Z
CVE-2009-0838 
The crypto pseudo device driver in Sun Solaris 10, and OpenSolaris snv_88 through snv_102, does not properly free memory, which allows local users to cause a denial of service (panic) via unspecified vectors, related to the vmem_hash_delete function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-06T18:00:00.000Z
CVE-2009-0839 
Stack-based buffer overflow in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when the server has a map with a long IMAGEPATH or NAME attribute, allows remote attackers to execute arbitrary code via a crafted id parameter in a query action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-31T18:00:00.000Z
CVE-2009-0840 
Heap-based buffer underflow in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to have an unknown impact via a negative value in the Content-Length HTTP header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-31T18:00:00.000Z
CVE-2009-0841 
Directory traversal vulnerability in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when running on Windows with Cygwin, allows remote attackers to create arbitrary files via a .. (dot dot) in the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-31T18:00:00.000Z
CVE-2009-0842 
mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to read arbitrary invalid .map files via a full pathname in the map parameter, which triggers the display of partial file contents within an error message, as demonstrated by a /tmp/sekrut.map symlink.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-31T18:00:00.000Z
CVE-2009-0843 
The msLoadQuery function in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to determine the existence of arbitrary files via a full pathname in the queryfile parameter, which triggers different error messages depending on whether this pathname exists.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-31T18:00:00.000Z
CVE-2009-0844 
The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause a denial of service (daemon crash) and possibly obtain sensitive information via a crafted length value that triggers a buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-09T00:00:00.000Z
CVE-2009-0845 
The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3, when SPNEGO is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via invalid ContextFlags data in the reqFlags field in a negTokenInit token.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-27T16:00:00.000Z
CVE-2009-0846 
The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors involving an invalid DER encoding that triggers a free of an uninitialized pointer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-09T00:00:00.000Z
CVE-2009-0847 
The asn1buf_imbed function in the ASN.1 decoder in MIT Kerberos 5 (aka krb5) 1.6.3, when PK-INIT is used, allows remote attackers to cause a denial of service (application crash) via a crafted length value that triggers an erroneous malloc call, related to incorrect calculations with pointer arithmetic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-09T00:00:00.000Z
CVE-2009-0848 
Untrusted search path vulnerability in GTK2 in OpenSUSE 11.0 and 11.1 allows local users to execute arbitrary code via a Trojan horse GTK module in an unspecified "relative search path."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-11T14:00:00.000Z
CVE-2009-0849 
Stack-based buffer overflow in the DtbClsLogin function in NovaStor NovaNET 12 allows remote attackers to (1) execute arbitrary code on Linux platforms via a long username field during backup domain authentication, related to libnnlindtb.so; or (2) cause a denial of service (daemon crash) on Windows platforms via a long username field during backup domain authentication, related to nnwindtb.dll.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-09T17:00:00.000Z
CVE-2009-0850 
Cross-site scripting (XSS) vulnerability in BitDefender Internet Security 2009 allows user-assisted remote attackers to inject arbitrary web script or HTML via the filename of a virus-infected file, as demonstrated by a filename inside a (1) rar or (2) zip archive file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-09T17:00:00.000Z
CVE-2009-0851 
Multiple SQL injection vulnerabilities in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) viewforum.php and (2) viewtopic.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-09T17:00:00.000Z
CVE-2009-0852 
showme.php in CelerBB 0.0.2 allows remote attackers to obtain "reserved information" via the user parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-09T17:00:00.000Z
CVE-2009-0853 
login.php in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allows remote attackers to bypass authentication and obtain administrative access via special characters in the Username parameter, as demonstrated by an admin'# parameter value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-09T17:00:00.000Z
CVE-2009-0854 
Untrusted search path vulnerability in dash 0.5.4, when used as a login shell, allows local users to execute arbitrary code via a Trojan horse .profile file in the current working directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-11T14:00:00.000Z
CVE-2009-0855 
Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.23 on z/OS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-09T00:00:00.000Z
CVE-2009-0856 
Multiple cross-site scripting (XSS) vulnerabilities in sample applications in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, and 6.1 before 6.1.0.23 on z/OS, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-09T21:00:00.000Z
CVE-2009-0857 
Cross-site scripting (XSS) vulnerability in /prm/reports in the Performance Reporting Module (PRM) for Sun Management Center (SunMC) 3.6.1 and 4.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.  NOTE: this can be leveraged for access to the SunMC Web Console.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-09T21:00:00.000Z
CVE-2009-0858 
The response_addname function in response.c in Daniel J. Bernstein djbdns 1.05 and earlier does not constrain offsets in the required manner, which allows remote attackers, with control over a third-party subdomain served by tinydns and axfrdns, to trigger DNS responses containing arbitrary records via crafted zone data for this subdomain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-09T21:00:00.000Z
CVE-2009-0859 
The shm_get_stat function in ipc/shm.c in the shm subsystem in the Linux kernel before 2.6.28.5, when CONFIG_SHMEM is disabled, misinterprets the data type of an inode, which allows local users to cause a denial of service (system hang) via an SHM_INFO shmctl call, as demonstrated by running the ipcs program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-09T21:00:00.000Z
CVE-2009-0860 
Cross-site scripting (XSS) vulnerability in the web user interface in the login application in NetMRI 3.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to error pages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-10T14:00:00.000Z
CVE-2009-0861 
Cross-site scripting (XSS) vulnerability in phpDenora before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via an IRC channel name.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-10T14:00:00.000Z
CVE-2009-0862 
Cross-site scripting (XSS) vulnerability in the hook_cntrlr_error_output function in modules/page/hooks/listeners.php in the admincp component in TangoCMS 2.2.x (aka Eagle) before 2.2.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-10T14:00:00.000Z
CVE-2009-0863 
SQL injection vulnerability in admin/delete_page.php in S-Cms 1.1 Stable allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-10T14:00:00.000Z
CVE-2009-0864 
S-Cms 1.1 Stable allows remote attackers to bypass authentication and obtain administrative access via an OK value for the login cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-10T14:00:00.000Z
CVE-2009-0865 
Directory traversal vulnerability in the SnapShotToFile method in the GeoVision LiveX (aka LiveX_v8200) ActiveX control 8.1.2 and 8.2.0 in LIVEX_~1.OCX allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the argument, possibly involving the PlayX and SnapShotX methods.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-10T14:00:00.000Z
CVE-2009-0866 
pHNews Alpha 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for extra/genbackup.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-10T14:00:00.000Z
CVE-2009-0867 
The HRM-S service in Fujitsu Enhanced Support Facility 3.0 and 3.0.1 allows remote attackers to obtain (1) hardware and (2) software information via unspecified requests in a client connection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-10T14:00:00.000Z
CVE-2009-0868 
CRLF injection vulnerability in the WebLink template in Fujitsu Jasmine2000 Enterprise Edition allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-10T14:00:00.000Z
CVE-2009-0869 
Buffer overflow in the client in IBM Tivoli Storage Manager (TSM) HSM 5.3.2.0 through 5.3.5.0, 5.4.0.0 through 5.4.2.5, and 5.5.0.0 through 5.5.1.4 on Windows allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-10T20:00:00.000Z
CVE-2009-0870 
The NFSv4 Server module in the kernel in Sun Solaris 10, and OpenSolaris before snv_111, allow local users to cause a denial of service (infinite loop and system hang) by accessing an hsfs filesystem that is shared through NFSv4, related to the rfs4_op_readdir function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-10T20:00:00.000Z
CVE-2009-0871 
The SIP channel driver in Asterisk Open Source 1.4.22, 1.4.23, and 1.4.23.1; 1.6.0 before 1.6.0.6; 1.6.1 before 1.6.1.0-rc2; and Asterisk Business Edition C.2.3, with the pedantic option enabled, allows remote authenticated users to cause a denial of service (crash) via a SIP INVITE request without any headers, which triggers a NULL pointer dereference in the (1) sip_uri_headers_cmp and (2) sip_uri_params_cmp functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-11T14:00:00.000Z
CVE-2009-0872 
The NFS server in Sun Solaris 10, and OpenSolaris before snv_111, does not properly implement the AUTH_NONE (aka sec=none) security mode in combination with other security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a combination of the AUTH_NONE and AUTH_SYS security modes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-11T14:00:00.000Z
CVE-2009-0873 
The NFS daemon (aka nfsd) in Sun Solaris 10 and OpenSolaris before snv_106, when NFSv3 is used, does not properly implement combinations of security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a combination of the sec=sys and sec=krb5 security modes, related to modes that "override each other."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-11T14:00:00.000Z
CVE-2009-0874 
Multiple unspecified vulnerabilities in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_94, allow local users to cause a denial of service (process hang), or possibly bypass file permissions or gain kernel-context privileges, via vectors including ones related to (1) an argument handling deadlock in a door server and (2) watchpoint problems in the door_call function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-12T15:00:00.000Z
CVE-2009-0875 
Race condition in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_94, allows local users to cause a denial of service (process hang), or possibly bypass file permissions or gain kernel-context privileges, via vectors involving the time at which control is transferred from a caller to a door server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-12T15:00:00.000Z
CVE-2009-0876 
Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain privileges via a hardlink attack, which preserves setuid/setgid bits on Linux, related to DT_RPATH:$ORIGIN.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-12T15:00:00.000Z
CVE-2009-0877 
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express allow remote attackers to inject arbitrary web script or HTML via the (1) Full Name or (2) Subject field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-12T15:00:00.000Z
CVE-2009-0878 
The read_game_map function in src/terrain_translation.cpp in Wesnoth before r32987 allows remote attackers to cause a denial of service (memory consumption and daemon hang) via a map with a large (1) width or (2) height.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-12T15:00:00.000Z
CVE-2009-0879 
The CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to cause a denial of service (daemon crash) via a long consumer name, as demonstrated by an M-POST request to a long /CIMListener/ URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-12T15:00:00.000Z