CVE-2009-5048

CVE-2009-5048 is a stored XSS in the Jetty project, specifically the Cookie Dump Servlet, affecting Jetty 6.1.x up to 6.1.20. The root cause is improper validation of user-supplied input in the Cookie Dump Servlet, enabling an attacker to inject script that could access cookie-based credentials. ...

CVE-2009-5043

creationtimestamp| type| source ---|---|--- 2019-10-31 19:33:45+00:00| seen| https://t.me/cibsecurity/7814 2019-11-06 22:28:25+00:00| seen| https://t.me/cibsecurity/7942 2024-02-01 08:37:07+00:00| seen| https://t.me/ctinow/177390...

CVE-2009-5042

creationtimestamp| type| source ---|---|--- 2019-10-31 19:33:45+00:00| seen| https://t.me/cibsecurity/7815 2019-11-06 22:28:26+00:00| seen| https://t.me/cibsecurity/7943 2024-02-01 08:37:06+00:00| seen| https://t.me/ctinow/177389...

CVE-2009-5043

burn allows file names to escape via mishandled quotation marks...

CVE-2009-5042

python-docutils allows insecure usage of temporary files...

CVE-2009-5042

CVE-2009-5042 involves the python-docutils project and is documented as allowing insecure usage of temporary files. The connected sources corroborate this vulnerability across multiple feeds (NVD, RH, OSV, Debian, GHSA, and others). Public metrics indicate two CVSS baselines: CVSS v2 base score 6...

CVE-2009-5041

CVE-2009-5041 describes a buffer overflow in the affected system caused by excessively long player names, potentially corrupting data on the server. The connected documents do not specify the exact product/version or a fix. NVD lists a network attack surface with high impact (CVSS v2: 7.5; CVSS v...

CVE-2009-5043

Technical details for CVE-2009-5043 are not publicly available in the provided connected documents. No affected products, versions, or remediation are specified here; monitor for updated advisories.

CVE-2009-5043

burn allows file names to escape via mishandled quotation marks...

CVE-2009-3725

creationtimestamp| type| source ---|---|--- 2019-10-31 01:33:13+00:00| seen| https://t.me/cibsecurity/7793 2019-10-31 02:11:18+00:00| seen| https://t.me/VulnerabilityNews/10321...

Design/Logic Flaw

drbd8 allows local users to bypass intended restrictions for certain actions via netlink packets, similar to CVE-2009-3725...

CVE-2010-0747

CVE-2010-0747 affects DRBD8. Local users can bypass intended restrictions via crafted netlink packets, allowing potential privilege escalation similar to CVE-2009-3725. The linked references indicate a local, low-complexity access bypass without remote code execution details. No explicit patch/ve...

CVE-2009-3723

creationtimestamp| type| source ---|---|--- 2019-10-29 21:31:15+00:00| seen| https://t.me/cibsecurity/7752 2024-01-29 14:41:40+00:00| seen| https://t.me/ctinow/175263...

CVE-2009-3887

creationtimestamp| type| source ---|---|--- 2019-10-29 21:31:15+00:00| seen| https://t.me/cibsecurity/7751 2024-01-29 14:41:41+00:00| seen| https://t.me/ctinow/175264...

CVE-2009-3723

asterisk allows calls on prohibited networks...

CVE-2009-3723

asterisk allows calls on prohibited networks...

CVE-2009-3887

ytnef has directory traversal...

CVE-2009-3723

Technical details about CVE-2009-3723 are not publicly provided in the connected documents; monitor for updates from vendors and security trackers for affected versions, impact, and fixes.

CVE-2009-3723

asterisk allows calls on prohibited networks...

CVE-2009-3887

CVE-2009-3887 affects the ytnef component (TNEF/Winmail.dat reader). The vulnerability is a path traversal (directory traversal) flaw caused by failure to properly filter special elements in the resource path, allowing access to locations outside a restricted directory. CVSS scores in the provide...