Provide references for further information: Can you share references or external links related to CVE-2009-1031?

{'name': '8211', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8211'}, {'name': '34329', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34329'}, {'name': '52773', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/52773'}, {'name': 'ADV-2009-0738', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0738'}, {'name': '34125', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34125'}, {'name': 'servuftp-mkd-dir-traversal(49258)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49258'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1031?


Explain the CVE ID: What does the identifier CVE-2009-1032 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1032.

SQL injection vulnerability in gallery_list.php in YABSoft Advanced Image Hosting (AIH) Script 2.3 allows remote attackers to execute arbitrary SQL commands via the gal parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-1032?

{'name': '34176', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34176'}, {'name': '52813', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/52813'}, {'name': '8238', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8238'}, {'name': 'advancedimage-gallerylist-sql-injection(49316)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49316'}, {'name': '34366', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34366'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1032?


Explain the CVE ID: What does the identifier CVE-2009-1033 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1033.

SQL injection vulnerability in misc.php in DeluxeBB 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the qorder parameter, a different vector than CVE-2005-2989 and CVE-2006-2503.


Provide references for further information: Can you share references or external links related to CVE-2009-1033?

{'name': '8240', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8240'}, {'name': '34174', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34174'}, {'name': 'deluxebb-qorder-sql-injection(49313)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49313'}, {'name': '52788', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/52788'}, {'name': '34365', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34365'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1033?


Explain the CVE ID: What does the identifier CVE-2009-1034 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1034.

SQL injection vulnerability in the Tasklist module 5.x-1.x before 5.x-1.3 and 5.x-2.x before 5.x-2.0-alpha1, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via values in the URI.


Provide references for further information: Can you share references or external links related to CVE-2009-1034?

{'name': 'tasklist-unspecifed-sql-injection(49320)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49320'}, {'name': '34171', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34171'}, {'name': '52781', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/52781'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/406316'}, {'name': '34376', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34376'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1034?


Explain the CVE ID: What does the identifier CVE-2009-1035 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1035.

Cross-site scripting (XSS) vulnerability in the Tasklist module 5.x-1.x before 5.x-1.3 and 5.x-2.x before 5.x-2.0-alpha1, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via Cascading Style Sheets (CSS).


Provide references for further information: Can you share references or external links related to CVE-2009-1035?

{'name': '52782', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/52782'}, {'name': 'tasklist-css-xss(49319)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49319'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/406316'}, {'name': '34376', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34376'}, {'name': '34170', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34170'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1035?


Explain the CVE ID: What does the identifier CVE-2009-1036 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1036.

Cross-site request forgery (CSRF) vulnerability in the Plus 1 module before 6.x-2.6, a module for Drupal, allows remote attackers to cast votes for content via unspecified aspects of the URI.


Provide references for further information: Can you share references or external links related to CVE-2009-1036?

{'name': '52786', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/52786'}, {'name': '34168', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34168'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/405672'}, {'name': 'plus1-unspecified-csrf(49310)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49310'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/406314'}, {'name': '34378', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34378'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1036?


Explain the CVE ID: What does the identifier CVE-2009-1037 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1037.

Unspecified vulnerability in the Send by e-mail module in the "Printer, e-mail and PDF versions" module 5.x before 5.x-4.4 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to send unlimited spam messages via unknown vectors related to the flood control API.


Provide references for further information: Can you share references or external links related to CVE-2009-1037?

{'name': '34173', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34173'}, {'name': '34374', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34374'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/406516'}, {'name': '52785', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/52785'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1037?


Explain the CVE ID: What does the identifier CVE-2009-1038 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1038.

Multiple SQL injection vulnerabilities in YAP Blog 1.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) image_id parameter to comments.php, and remote authenticated administrators to execute arbitrary SQL commands via the (2) user parameter in a modif action to admin/index.php.


Provide references for further information: Can you share references or external links related to CVE-2009-1038?

{'name': '8217', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8217'}, {'name': '52762', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/52762'}, {'name': '52761', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/52761'}, {'name': '34274', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34274'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1038?


Explain the CVE ID: What does the identifier CVE-2009-1039 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1039.

Buffer overflow in CDex 1.70b2 allows remote attackers to execute arbitrary code via a crafted Info header in an Ogg Vorbis (.ogg) file.


Provide references for further information: Can you share references or external links related to CVE-2009-1039?

{'name': '34164', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34164'}, {'name': '8231', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8231'}, {'tags': ['x_refsource_MISC'], 'url': 'http://retrogod.altervista.org/9sg_cdex_ogg.html'}, {'name': '20090317 CDex v1.70b2 (.ogg) local buffer overflow exploit poc', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/501928/100/0/threaded'}, {'name': 'cdex-ogg-bo(49304)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49304'}, {'name': '52812', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/52812'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1039?


Explain the CVE ID: What does the identifier CVE-2009-1040 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1040.

Buffer overflow in WinAsm Studio 5.1.5.0 allows user-assisted remote attackers to execute arbitrary code via a crafted project (.wap) file.


Provide references for further information: Can you share references or external links related to CVE-2009-1040?

{'name': 'winasmstudio-wap-bo(49266)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49266'}, {'name': '34132', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34132'}, {'name': '8224', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8224'}, {'name': '52776', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/52776'}, {'name': '34309', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34309'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1040?


Explain the CVE ID: What does the identifier CVE-2009-1041 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1041.

The ktimer feature (sys/kern/kern_time.c) in FreeBSD 7.0, 7.1, and 7.2 allows local users to overwrite arbitrary kernel memory via an out-of-bounds timer value.


Provide references for further information: Can you share references or external links related to CVE-2009-1041?

{'name': 'FreeBSD-SA-09:06', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'http://security.freebsd.org/advisories/FreeBSD-SA-09:06.ktimer.asc'}, {'name': '8261', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8261'}, {'name': '1021882', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1021882'}, {'name': 'freebsd-ktimer-memory-overwrite(49362)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49362'}, {'name': '34196', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34196'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1041?


Explain the CVE ID: What does the identifier CVE-2009-1042 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1042.

Unspecified vulnerability in Apple Safari on Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.


Provide references for further information: Can you share references or external links related to CVE-2009-1042?

{'tags': ['x_refsource_MISC'], 'url': 'http://dvlabs.tippingpoint.com/blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero-day-exploits'}, {'name': 'apple-safari-unspecified-code-execution(49388)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49388'}, {'name': '34183', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34183'}, {'tags': ['x_refsource_MISC'], 'url': 'http://cansecwest.com/index.html'}, {'name': '52888', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/52888'}, {'name': '1021879', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1021879'}, {'tags': ['x_refsource_MISC'], 'url': 'http://twitter.com/tippingpoint1/status/1351485521'}, {'tags': ['x_refsource_MISC'], 'url': 'http://news.cnet.com/8301-1009_3-10199652-83.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blogs.zdnet.com/security/?p=2934'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.h-online.com/security/Pwn2Own-2009-Safari-IE-8-and-Firefox-exploited--/news/112889'}, {'tags': ['x_refsource_MISC'], 'url': 'http://dvlabs.tippingpoint.com/blog/2009/02/25/pwn2own-2009'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1042?


Explain the CVE ID: What does the identifier CVE-2009-1043 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1043.

Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.


Provide references for further information: Can you share references or external links related to CVE-2009-1043?

{'tags': ['x_refsource_MISC'], 'url': 'http://dvlabs.tippingpoint.com/blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero-day-exploits'}, {'name': '1021880', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1021880'}, {'tags': ['x_refsource_MISC'], 'url': 'http://dvlabs.tippingpoint.com/blog/2009/03/20/pwn2own-day-2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://cansecwest.com/index.html'}, {'name': '34182', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34182'}, {'tags': ['x_refsource_MISC'], 'url': 'http://news.cnet.com/8301-1009_3-10199652-83.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blogs.zdnet.com/security/?p=2934'}, {'name': 'microsoft-ie-unspecified-code-execution(49389)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49389'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.h-online.com/security/Pwn2Own-2009-Safari-IE-8-and-Firefox-exploited--/news/112889'}, {'tags': ['x_refsource_MISC'], 'url': 'http://dvlabs.tippingpoint.com/blog/2009/02/25/pwn2own-2009'}, {'name': '52892', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/52892'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1043?


Explain the CVE ID: What does the identifier CVE-2009-1044 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1044.

Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the _moveToEdgeShift XUL tree method, which triggers garbage collection on objects that are still in use, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.


Provide references for further information: Can you share references or external links related to CVE-2009-1044?

{'name': '1021878', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1021878'}, {'tags': ['x_refsource_MISC'], 'url': 'http://dvlabs.tippingpoint.com/blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero-day-exploits'}, {'tags': ['x_refsource_MISC'], 'url': 'http://twitter.com/tippingpoint1/status/1351635812'}, {'name': '34510', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34510'}, {'name': 'FEDORA-2009-3101', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html'}, {'name': '34511', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34511'}, {'name': 'MDVSA-2009:084', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2009:084'}, {'name': 'RHSA-2009:0397', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2009-0397.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://cansecwest.com/index.html'}, {'name': 'SUSE-SA:2009:022', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00008.html'}, {'name': '34505', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34505'}, {'name': '34521', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34521'}, {'name': 'RHSA-2009:0398', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2009-0398.html'}, {'name': '20090330 ZDI-09-015: Mozilla Firefox XUL _moveToEdgeShift() Memory Corruption Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/502303/100/0/threaded'}, {'name': '34471', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34471'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2009/mfsa2009-13.html'}, {'name': 'USN-745-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-745-1'}, {'name': '34527', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34527'}, {'name': '34181', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34181'}, {'name': 'DSA-1756', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1756'}, {'name': '34792', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34792'}, {'tags': ['x_refsource_MISC'], 'url': 'http://news.cnet.com/8301-1009_3-10199652-83.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blogs.zdnet.com/security/?p=2934'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-09-015'}, {'name': 'oval:org.mitre.oval:def:11368', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11368'}, {'name': '52896', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/52896'}, {'name': 'ADV-2009-0864', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0864'}, {'name': 'FEDORA-2009-3100', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01040.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.h-online.com/security/Pwn2Own-2009-Safari-IE-8-and-Firefox-exploited--/news/112889'}, {'name': '34549', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34549'}, {'name': '34550', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34550'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/elmodocs2/security/ASA-2009-113.htm'}, {'tags': ['x_refsource_MISC'], 'url': 'http://dvlabs.tippingpoint.com/blog/2009/02/25/pwn2own-2009'}, {'name': 'FEDORA-2009-3099', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01023.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=484320'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blogs.zdnet.com/security/?p=2941'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1044?


Explain the CVE ID: What does the identifier CVE-2009-1045 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1045.

requests/status.xml in VLC 0.9.8a allows remote attackers to cause a denial of service (stack consumption and crash) via a long input argument in an in_play action.


Provide references for further information: Can you share references or external links related to CVE-2009-1045?

{'name': 'vlcmediaplayer-web-status-bo(49249)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49249'}, {'name': '8213', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8213'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=262708'}, {'name': 'oval:org.mitre.oval:def:14357', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14357'}, {'name': '[oss-security] 20090317 CVE request -- firefox, vlc, WeeChat', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2009/03/17/4'}, {'name': '34126', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34126'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1045?


Explain the CVE ID: What does the identifier CVE-2009-1046 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1046.

The console selection feature in the Linux kernel 2.6.28 before 2.6.28.4, 2.6.25, and possibly earlier versions, when the UTF-8 console is used, allows physically proximate attackers to cause a denial of service (memory corruption) by selecting a small number of 3-byte UTF-8 characters, which triggers an "off-by-two memory error." NOTE: it is not clear whether this issue crosses privilege boundaries.


Provide references for further information: Can you share references or external links related to CVE-2009-1046?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.4'}, {'name': '[oss-security] 20090212 http://www.securityfocus.com/bid/33672/info kernel issue', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2009/02/12/9'}, {'name': '[oss-security] 20090212 Re: http://www.securityfocus.com/bid/33672/info kernel', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2009/02/12/10'}, {'name': '33672', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/33672'}, {'name': 'USN-751-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-751-1'}, {'name': '[linux-kernel] 20090202 Re: [PATCH] Fix memory corruption in console selection', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.openwall.net/linux-kernel/2009/02/02/364'}, {'name': '34981', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34981'}, {'name': 'DSA-1800', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1800'}, {'name': '[oss-security] 20090212 Re: http://www.securityfocus.com/bid/33672/info kernel issue', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2009/02/12/11'}, {'name': '34917', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34917'}, {'name': 'DSA-1787', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1787'}, {'name': 'RHSA-2009:0451', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2009-0451.html'}, {'name': '[linux-kernel] 20090130 [PATCH] Fix memory corruption in console selection', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.openwall.net/linux-kernel/2009/01/30/333'}, {'name': '35121', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35121'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1046?


Explain the CVE ID: What does the identifier CVE-2009-1047 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1047.

Cross-site scripting (XSS) vulnerability in the Send by e-mail module in the "Printer, e-mail and PDF versions" module 5.x before 5.x-4.4 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via vectors involving outbound HTML e-mail.


Provide references for further information: Can you share references or external links related to CVE-2009-1047?

{'name': '52852', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/52852'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/406516'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1047?


Explain the CVE ID: What does the identifier CVE-2009-1048 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1048.

The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before 6.5.20, 7.1 before 7.1.39, and 7.3 before 7.3.14 allows remote attackers to bypass authentication, and reconfigure the phone or make arbitrary use of the phone, via a (1) http or (2) https request with 127.0.0.1 in the Host header.


Provide references for further information: Can you share references or external links related to CVE-2009-1048?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.csnc.ch/misc/files/advisories/cve-2009-1048.txt'}, {'name': '36293', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/36293'}, {'name': '20090812 Authentication Bypass of Snom Phone Web Interface', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/505723/100/0/threaded'}, {'name': 'snom-httphost-security-bypass(52424)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/52424'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1048?


Explain the CVE ID: What does the identifier CVE-2009-1049 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1049.

SQL injection vulnerability in articleCall.php in Bloginator 1A allows remote attackers to execute arbitrary SQL commands via the id parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-1049?

{'name': '8244', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8244'}, {'name': '34395', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34395'}, {'name': 'bloginator-articlecall-sql-injection(49325)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49325'}, {'name': '34187', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34187'}, {'name': '8243', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8243'}, {'name': '52839', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/52839'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1049?


Explain the CVE ID: What does the identifier CVE-2009-1050 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1050.

Bloginator 1A allows remote attackers to bypass authentication and gain administrative access by setting the identifyYourself cookie.


Provide references for further information: Can you share references or external links related to CVE-2009-1050?

{'name': '52838', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/52838'}, {'name': '34395', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34395'}, {'name': 'bloginator-cookie-security-bypass(49324)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49324'}, {'name': '34187', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34187'}, {'name': '8243', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8243'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1050?


Explain the CVE ID: What does the identifier CVE-2009-1051 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1051.

FubarForum 1.6 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv.


Provide references for further information: Can you share references or external links related to CVE-2009-1051?

{'name': '20090317 [ECHO_ADV_107$2009] FubarForum <= 1.6 Critical File Disclosure Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/501902/100/0/threaded'}, {'name': '34358', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34358'}, {'tags': ['x_refsource_MISC'], 'url': 'http://e-rdc.org/v1/news.php?readmore=131'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1051?


Explain the CVE ID: What does the identifier CVE-2009-1052 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1052.

FireAnt 1.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv.


Provide references for further information: Can you share references or external links related to CVE-2009-1052?

{'tags': ['x_refsource_MISC'], 'url': 'http://e-rdc.org/v1/news.php?readmore=130'}, {'name': '34359', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34359'}, {'name': '20090317 [ECHO_ADV_106$2009] FireAnt <= 1.3 Critical File Disclosure Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/501905/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1052?


Explain the CVE ID: What does the identifier CVE-2009-1053 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1053.

chaozzDB 1.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv.


Provide references for further information: Can you share references or external links related to CVE-2009-1053?

{'name': '20090317 [ECHO_ADV_105$2009] chaozzDB <= 1.2 Critical File Disclosure Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/501901/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://e-rdc.org/v1/news.php?readmore=129'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1053?


Explain the CVE ID: What does the identifier CVE-2009-1054 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1054.

Unspecified vulnerability in JustSystems Ichitaro 13, 2004 through 2008, Lite2, and Ichitaro viewer 5.1.5.0 and earlier allows remote attackers to execute arbitrary code via a crafted file, as exploited in the wild by Trojan.Tarodrop.H in March 2009.


Provide references for further information: Can you share references or external links related to CVE-2009-1054?

{'name': '34138', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34138'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-031608-2424-99'}, {'name': 'ichitaro-webpuraguinbyua-code-execution(49280)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49280'}, {'name': 'ADV-2009-0769', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0769'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.justsystems.com/jp/info/js09001.html'}, {'name': '34405', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34405'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1054?


Explain the CVE ID: What does the identifier CVE-2009-1055 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1055.

Unspecified vulnerability in the web service in Sitecore CMS 5.3.1 rev. 071114 allows remote authenticated users to gain access to security databases, and obtain administrative and user credentials, via unknown vectors related to SOAP and XML requests.


Provide references for further information: Can you share references or external links related to CVE-2009-1055?

{'name': '20090317 Sitecore .NET 5.3.x - web service information disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/501929/100/0/threaded'}, {'name': 'ADV-2009-0753', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0753'}, {'name': 'sitecore-web-service-info-disclosure(49298)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49298'}, {'name': '34162', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34162'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sdn5.sitecore.net/Products/Sitecore%20V5/Sitecore%20CMS%205%2C-d-%2C3/ReleaseNotes/V5%2C-d-%2C3%2C-d-%2C2/ChangeLog.aspx'}, {'name': '34356', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34356'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1055?


Explain the CVE ID: What does the identifier CVE-2009-1056 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1056.

IBM Rational AppScan Enterprise before 5.5 FP1 allows remote attackers to read arbitrary exported reports by "forcefully browsing."


Provide references for further information: Can you share references or external links related to CVE-2009-1056?

{'name': '34349', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34349'}, {'name': '1021863', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1021863'}, {'name': '52764', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/52764'}, {'name': 'PK79991', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PK79991'}, {'name': '34163', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34163'}, {'name': 'ADV-2009-0768', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0768'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1056?


Explain the CVE ID: What does the identifier CVE-2009-1057 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1057.

MicroSmarts Enterprise ZipItFast! 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file that triggers memory corruption, related to a "format string buffer overflow." NOTE: CVE has not investigated whether the specified file.zip file can be used for exploitation of this product.


Provide references for further information: Can you share references or external links related to CVE-2009-1057?

{'name': '52550', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/52550'}, {'name': '34223', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34223'}, {'name': 'zipitfast-zip-bo(49491)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49491'}, {'name': '8180', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8180'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1057?


Explain the CVE ID: What does the identifier CVE-2009-1058 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1058.

Stack-based buffer overflow in ZipGenius might allow remote attackers to execute arbitrary code via a crafted .zip file that triggers an SEH overwrite.  NOTE: it is possible that this overlaps CVE-2005-3317. NOTE: CVE has not investigated whether the specified file.zip file can be used for exploitation of this product.


Provide references for further information: Can you share references or external links related to CVE-2009-1058?

{'name': 'zipgenius-zip-bo(49490)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49490'}, {'name': '8180', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8180'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1058?


Explain the CVE ID: What does the identifier CVE-2009-1059 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1059.

Stack-based buffer overflow in Trident PowerZip 7.2 might allow remote attackers to execute arbitrary code via a crafted .zip file.  NOTE: CVE has not investigated whether the specified file.zip file can be used for exploitation of this product.


Provide references for further information: Can you share references or external links related to CVE-2009-1059?

{'name': '8180', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8180'}, {'name': 'powerzip-zip-bo(49492)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49492'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1059?


Explain the CVE ID: What does the identifier CVE-2009-1060 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1060.

Unspecified vulnerability in Apple Safari on Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link, as demonstrated by Charlie Miller during a PWN2OWN competition at CanSecWest 2009.


Provide references for further information: Can you share references or external links related to CVE-2009-1060?

{'tags': ['x_refsource_MISC'], 'url': 'http://dvlabs.tippingpoint.com/blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero-day-exploits'}, {'tags': ['x_refsource_MISC'], 'url': 'http://cansecwest.com/index.html'}, {'name': '34179', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34179'}, {'name': '52888', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/52888'}, {'name': '1021879', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1021879'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9129978'}, {'name': 'apple-safari-unspecified-code-execution1(49463)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49463'}, {'tags': ['x_refsource_MISC'], 'url': 'http://news.cnet.com/8301-1009_3-10199652-83.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://dvlabs.tippingpoint.com/blog/2009/02/25/pwn2own-2009'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1060?


Explain the CVE ID: What does the identifier CVE-2009-1061 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1061.

Unspecified vulnerability in Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 might allow remote attackers to execute arbitrary code via unknown attack vectors related to JBIG2 and "input validation," a different vulnerability than CVE-2009-0193 and CVE-2009-1062.


Provide references for further information: Can you share references or external links related to CVE-2009-1061?

{'name': '34790', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34790'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb09-04.html'}, {'name': '34229', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34229'}, {'name': '34490', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34490'}, {'name': '1021892', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1021892'}, {'name': 'RHSA-2009:0376', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2009-0376.html'}, {'name': '34392', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34392'}, {'name': 'SUSE-SA:2009:014', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html'}, {'name': '34706', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34706'}, {'name': '256788', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1'}, {'name': 'GLSA-200904-17', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200904-17.xml'}, {'name': 'SUSE-SR:2009:009', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html'}, {'name': 'ADV-2009-1019', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/1019'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1061?


Explain the CVE ID: What does the identifier CVE-2009-1062 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1062.

Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 might allow remote attackers to trigger memory corruption and possibly execute arbitrary code via unknown attack vectors related to JBIG2, a different vulnerability than CVE-2009-0193 and CVE-2009-1061.


Provide references for further information: Can you share references or external links related to CVE-2009-1062?

{'name': '34790', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34790'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb09-04.html'}, {'name': '34229', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34229'}, {'name': '34490', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34490'}, {'name': '1021892', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1021892'}, {'name': 'RHSA-2009:0376', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2009-0376.html'}, {'name': '34392', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34392'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ivizsecurity.com/security-advisory-iviz-sr-09001.html'}, {'name': 'SUSE-SA:2009:014', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html'}, {'name': '34706', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34706'}, {'name': '256788', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1'}, {'name': 'GLSA-200904-17', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200904-17.xml'}, {'name': 'SUSE-SR:2009:009', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html'}, {'name': 'ADV-2009-1019', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/1019'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1062?


Explain the CVE ID: What does the identifier CVE-2009-1063 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1063.

Buffer overflow in eXeScope 6.50 allows user-assisted remote attackers to execute arbitrary code via a crafted executable (.exe) file.


Provide references for further information: Can you share references or external links related to CVE-2009-1063?

{'name': '52868', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/52868'}, {'name': 'ADV-2009-0821', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0821'}, {'name': '34413', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34413'}, {'name': 'exescope-exe-bo(49379)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49379'}, {'name': '34219', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34219'}, {'name': '8270', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8270'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1063?


Explain the CVE ID: What does the identifier CVE-2009-1064 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1064.

Argument injection vulnerability in orbitmxt.dll 2.1.0.2 in the Orbit Downloader 2.8.7 and earlier ActiveX control allows remote attackers to overwrite arbitrary files via whitespace and a command-line switch, followed by a full pathname, in the third argument to the download method.


Provide references for further information: Can you share references or external links related to CVE-2009-1064?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.waraxe.us/advisory-73.html'}, {'name': '34200', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34200'}, {'name': '8257', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8257'}, {'name': 'orbitdownloader-activex-file-deletion(49353)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49353'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1064?


Explain the CVE ID: What does the identifier CVE-2009-1065 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1065.

SQL injection vulnerability in index.php in Pixie CMS 1.01a allows remote attackers to execute arbitrary SQL commands via the x parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2009-1065?

{'name': '52834', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/52834'}, {'name': '34364', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34364'}, {'name': 'pixiecms-index-sql-injection(49334)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49334'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1065?


Explain the CVE ID: What does the identifier CVE-2009-1066 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1066.

SQL injection vulnerability in the referral function in admin/lib/lib_logs.php in Pixie CMS 1.01a allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header in a request.


Provide references for further information: Can you share references or external links related to CVE-2009-1066?

{'name': '34189', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34189'}, {'name': '52833', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/52833'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lampsecurity.org/Pixie-CMS-Multiple-Vulnerabilities'}, {'name': '8252', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8252'}, {'name': '20090319 Pixie CMS Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0324.html'}, {'name': 'pixiecms-referral-sql-injection(49335)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49335'}, {'name': '34364', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34364'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1066?


Explain the CVE ID: What does the identifier CVE-2009-1067 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1067.

Cross-site scripting (XSS) vulnerability in index.php in Pixie CMS 1.01a allows remote attackers to inject arbitrary web script or HTML via the x parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-1067?

{'name': '34189', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34189'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lampsecurity.org/Pixie-CMS-Multiple-Vulnerabilities'}, {'name': '52832', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/52832'}, {'name': 'pixiecms-index-xss(49333)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49333'}, {'name': '8252', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8252'}, {'name': '20090319 Pixie CMS Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0324.html'}, {'name': '34364', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34364'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1067?


Explain the CVE ID: What does the identifier CVE-2009-1068 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1068.

Stack-based buffer overflow in BS.Player (bsplayer) 2.32 Build 975 Free and 2.34 Build 980 PRO and earlier allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long hostname in a .bsl playlist file.


Provide references for further information: Can you share references or external links related to CVE-2009-1068?

{'tags': ['x_refsource_MISC'], 'url': 'http://retrogod.altervista.org/9sg_bsplayer_seh.html'}, {'name': 'bsplayer-bsl-bo(49342)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49342'}, {'name': '34412', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34412'}, {'name': '8251', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8251'}, {'name': 'ADV-2009-0800', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0800'}, {'name': '20090320 Bs.Player <= 2.34 Build 980 (.bsl) local buffer overflow 0day exploit (seh)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/502016/100/0/threaded'}, {'name': '8249', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8249'}, {'name': '52841', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/52841'}, {'name': '34190', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34190'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1068?


Explain the CVE ID: What does the identifier CVE-2009-1069 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1069.

Multiple cross-site scripting (XSS) vulnerabilities in the node edit form feature in Drupal Content Construction Kit (CCK) 6.x before 6.x-2.2, a module for Drupal, allow remote attackers to inject arbitrary web script or HTML via the (1) titles of candidate referenced nodes in the Node reference sub-module and the (2) names of candidate referenced users in the User reference sub-module.


Provide references for further information: Can you share references or external links related to CVE-2009-1069?

{'name': '34172', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34172'}, {'name': '52784', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/52784'}, {'name': 'cck-node-user-xss(49317)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49317'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/406520'}, {'name': '52783', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/52783'}, {'name': '34370', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34370'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1069?


Explain the CVE ID: What does the identifier CVE-2009-1070 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1070.

Cross-site scripting (XSS) vulnerability in system/index.php in ExpressionEngine 1.6.4 through 1.6.6, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the avatar parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-1070?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.ngenuity.org/wordpress/2009/01/28/ngenuity-2009-003-expressionengine-persistent-cross-site-scripting/'}, {'name': '20090322 ExpressionEngine Persistent Cross-Site Scripting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/502045/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://expressionengine.com/docs/changelog.html#v167'}, {'name': '34379', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34379'}, {'name': 'expressionengine-avatar-xss(49359)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49359'}, {'name': '34193', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34193'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1070?


Explain the CVE ID: What does the identifier CVE-2009-1071 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1071.

Stack-based buffer overflow in Icarus 2.0 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted Portable Game Notation (.pgn) file.


Provide references for further information: Can you share references or external links related to CVE-2009-1071?

{'name': 'icarus-pgn-bo(49309)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49309'}, {'name': '34167', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34167'}, {'name': '8236', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8236'}, {'name': '52780', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/52780'}, {'name': '34368', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34368'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1071?


Explain the CVE ID: What does the identifier CVE-2009-1072 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1072.

nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.


Provide references for further information: Can you share references or external links related to CVE-2009-1072?

{'name': '35390', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35390'}, {'name': '34432', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34432'}, {'name': '34422', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34422'}, {'name': 'ADV-2009-0802', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0802'}, {'name': '34786', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34786'}, {'name': '[oss-security] 20090323 CVE request: kernel: nfsd did not drop CAP_MKNOD for non-root', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2009/03/23/1'}, {'name': '34205', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34205'}, {'name': 'SUSE-SA:2009:028', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html'}, {'name': '37471', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/37471'}, {'name': '35656', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35656'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2009-0016.html'}, {'name': '[linux-kernel] 20090311 VFS, NFS security bug? Should CAP_MKNOD and CAP_LINUX_IMMUTABLE be added to CAP_FS_MASK?', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://thread.gmane.org/gmane.linux.kernel/805280'}, {'name': 'SUSE-SA:2009:030', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html'}, {'name': '35185', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35185'}, {'name': 'oval:org.mitre.oval:def:10314', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10314'}, {'name': '20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/507985/100/0/threaded'}, {'name': 'oval:org.mitre.oval:def:8382', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8382'}, {'name': 'SUSE-SA:2009:031', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html'}, {'name': 'SUSE-SA:2009:021', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html'}, {'name': 'USN-793-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-793-1'}, {'name': 'RHSA-2009:1081', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2009-1081.html'}, {'name': 'DSA-1800', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1800'}, {'name': '35343', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35343'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.9'}, {'name': 'linux-kernel-capmknod-security-bypass(49356)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49356'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=76a67ec6fb79ff3570dcb5342142c16098299911'}, {'name': '35121', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35121'}, {'name': 'ADV-2009-3316', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/3316'}, {'name': '35394', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35394'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1072?


Explain the CVE ID: What does the identifier CVE-2009-1073 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1073.

nss-ldapd before 0.6.8 uses world-readable permissions for the /etc/nss-ldapd.conf file, which allows local users to obtain a cleartext password for the LDAP server by reading the bindpw field.


Provide references for further information: Can you share references or external links related to CVE-2009-1073?

{'name': '[oss-security] 20090324 Re: CVE request -- ucd-snmp / net-snmp, libnss-ldapd / nss_ldap', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2009/03/25/4'}, {'name': '[oss-security] 20090323 CVE request -- ucd-snmp / net-snmp, libnss-ldapd / nss_ldap', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2009/03/23/3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=520476'}, {'name': '34211', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34211'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://arthurenhella.demon.nl/viewvc/nss-ldapd/nss-ldapd/debian/libnss-ldapd.postinst?r1=795&r2=813'}, {'name': '[oss-security] 20090324 Re: CVE request -- ucd-snmp / net-snmp, libnss-ldapd / nss_ldap', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2009/03/24/2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://arthurenhella.demon.nl/viewvc/nss-ldapd/nss-ldapd/man/nss-ldapd.conf.5.xml?r1=805&r2=806'}, {'name': '[oss-security] 20090324 Re: CVE request -- ucd-snmp / net-snmp, libnss-ldapd / nss_ldap', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2009/03/25/3'}, {'name': '34523', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34523'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://ch.tudelft.nl/~arthur/nss-ldapd/news.html#20090322'}, {'tags': ['x_refsource_MISC'], 'url': 'http://launchpad.net/bugs/cve/2009-1073'}, {'name': 'DSA-1758', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1758'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1073?


Explain the CVE ID: What does the identifier CVE-2009-1074 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1074.

Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not use SSL in all expected circumstances, which makes it easier for remote attackers to obtain sensitive information by sniffing the network, related to "ssl termination devices" and lack of support for relative URLs.


Provide references for further information: Can you share references or external links related to CVE-2009-1074?

{'name': '253267', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1'}, {'name': '1021881', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1021881'}, {'name': '34191', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34191'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blogs.sun.com/security/entry/sun_alert_253267_sun_java'}, {'name': 'ADV-2009-0797', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0797'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1'}, {'name': '34380', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34380'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1074?


Explain the CVE ID: What does the identifier CVE-2009-1075 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1075.

Sun Java System Identity Manager (IdM) 7.0 through 8.0 responds differently to failed use of the Forgot Password feature depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.


Provide references for further information: Can you share references or external links related to CVE-2009-1075?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-21-140936-01-1'}, {'name': '253267', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1'}, {'name': '1021881', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1021881'}, {'name': '34191', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34191'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blogs.sun.com/security/entry/sun_alert_253267_sun_java'}, {'name': 'ADV-2009-0797', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0797'}, {'name': '34380', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34380'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1075?


Explain the CVE ID: What does the identifier CVE-2009-1076 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1076.

Sun Java System Identity Manager (IdM) 7.0 through 8.0 responds differently to failed use of the end-user question-based login feature depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.


Provide references for further information: Can you share references or external links related to CVE-2009-1076?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-21-140936-01-1'}, {'name': '253267', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-21-137621-11-1'}, {'name': '1021881', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1021881'}, {'name': '34191', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34191'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blogs.sun.com/security/entry/sun_alert_253267_sun_java'}, {'name': 'ADV-2009-0797', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0797'}, {'name': '34380', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34380'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1076?


Explain the CVE ID: What does the identifier CVE-2009-1077 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1077.

The Change My Password implementation in the admin interface in Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not enforce the RequiresChallenge property setting, which allows remote authenticated users to change the passwords of other users, as demonstrated by changing the administrator's password.


Provide references for further information: Can you share references or external links related to CVE-2009-1077?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-21-140936-01-1'}, {'name': '253267', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-21-137621-11-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-21-139010-06-1'}, {'name': '1021881', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1021881'}, {'name': '34191', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34191'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blogs.sun.com/security/entry/sun_alert_253267_sun_java'}, {'name': 'ADV-2009-0797', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0797'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1'}, {'name': '34380', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34380'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1077?


Explain the CVE ID: What does the identifier CVE-2009-1078 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1078.

Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not enforce the expected privilege requirements for (1) deleting audit policies and (2) modifying workflows, which allows remote authenticated users to have an unspecified impact.


Provide references for further information: Can you share references or external links related to CVE-2009-1078?


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1078?


Explain the CVE ID: What does the identifier CVE-2009-1079 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1079.

Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs 19659, 19660, and 19683.


Provide references for further information: Can you share references or external links related to CVE-2009-1079?

{'name': '253267', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1'}, {'name': '1021881', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1021881'}, {'name': '34191', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34191'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blogs.sun.com/security/entry/sun_alert_253267_sun_java'}, {'name': 'ADV-2009-0797', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0797'}, {'name': '34380', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34380'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1079?


Explain the CVE ID: What does the identifier CVE-2009-1080 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1080.

Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID 19033.


Provide references for further information: Can you share references or external links related to CVE-2009-1080?


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1080?


Explain the CVE ID: What does the identifier CVE-2009-1081 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1081.

Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs 19595 and 19661.


Provide references for further information: Can you share references or external links related to CVE-2009-1081?


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1081?


Explain the CVE ID: What does the identifier CVE-2009-1082 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1082.

Sun Java System Identity Manager (IdM) 7.0 through 8.0 allows remote authenticated users to gain privileges by submitting crafted commands to the Admin Console, as demonstrated by privileges for account creation and other administrative capabilities, related to the saveNoValidate action and saveNoValidateAllowedFormsAndWorkflows IDs.


Provide references for further information: Can you share references or external links related to CVE-2009-1082?


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1082?


Explain the CVE ID: What does the identifier CVE-2009-1083 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1083.

Sun Java System Identity Manager (IdM) 7.0 through 8.0 on Linux, AIX, Solaris, and HP-UX permits "control characters" in the passwords of user accounts, which allows remote attackers to execute arbitrary commands via vectors involving "resource adapters."


Provide references for further information: Can you share references or external links related to CVE-2009-1083?


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1083?


Explain the CVE ID: What does the identifier CVE-2009-1084 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1084.

Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not properly restrict access to the System Configuration object, which allows remote authenticated administrators and possibly remote attackers to have an unspecified impact by modifying this object.


Provide references for further information: Can you share references or external links related to CVE-2009-1084?

{'name': '253267', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-66-253267-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-21-139010-06-1'}, {'name': '1021881', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1021881'}, {'name': '34191', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34191'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blogs.sun.com/security/entry/sun_alert_253267_sun_java'}, {'name': 'ADV-2009-0797', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0797'}, {'name': 'jsim-sco-unspecified(49607)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49607'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-21-140935-01-1'}, {'name': '34380', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34380'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1084?


Explain the CVE ID: What does the identifier CVE-2009-1085 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1085.

Piwik 0.2.32 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the API key and other sensitive information via a direct request for misc/cron/archive.sh.


Provide references for further information: Can you share references or external links related to CVE-2009-1085?

{'name': '[oss-security] 20090323 CVE request: API key disclosure in piwik', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2009/03/23/2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dev.piwik.org/trac/ticket/599'}, {'tags': ['x_refsource_MISC'], 'url': 'http://marco-ziesing.de/archives/35-Schluesselloch-in-Piwik.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1085?


Explain the CVE ID: What does the identifier CVE-2009-1086 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1086.

Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns 1.4.x allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a DNS resource record (RR) with a long (1) class field (clas variable) and possibly (2) TTL field.


Provide references for further information: Can you share references or external links related to CVE-2009-1086?

{'name': '35013', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35013'}, {'name': '[oss-security] 20090324 CVE id request: ldns', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2009/03/24/4'}, {'name': '34233', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34233'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.nlnetlabs.nl/svn/ldns/tags/release-1.5.0/Changelog'}, {'name': '35065', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35065'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nlnetlabs.nl/bugs/show_bug.cgi?id=232'}, {'name': 'SUSE-SR:2009:010', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html'}, {'name': 'DSA-1795', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1795'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1086?


Explain the CVE ID: What does the identifier CVE-2009-1087 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1087.

Multiple argument injection vulnerabilities in PPLive.exe in PPLive 1.9.21 and earlier allow remote attackers to execute arbitrary code via a UNC share pathname in the LoadModule argument to the (1) synacast, (2) Play, (3) pplsv, or (4) ppvod URI handler.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2009-1087?

{'name': 'ADV-2009-0739', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/0739'}, {'name': 'pplive-uri-code-execution(49263)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49263'}, {'name': '34327', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34327'}, {'name': '8215', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8215'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1087?


Explain the CVE ID: What does the identifier CVE-2009-1088 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1088.

Hannon Hill Cascade Server 5.7 and other versions allows remote authenticated users to execute arbitrary programs or Java code via a crafted XSLT stylesheet with "extension elements and extension functions" that trigger code execution by Xalan-Java, as demonstrated using xalan://java.lang.Runtime.


Provide references for further information: Can you share references or external links related to CVE-2009-1088?

{'name': '8247', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8247'}, {'tags': ['x_refsource_MISC'], 'url': 'http://support.hannonhill.com/browse/CSCD-4753'}, {'name': '20090319 Command Execution in Hannon Hill Cascade Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/501981/100/0/threaded'}, {'name': '34186', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34186'}, {'name': 'cascadeserver-xlst-command-execution(49332)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49332'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1088?


Explain the CVE ID: What does the identifier CVE-2009-1089 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1089.

Absolute path traversal vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to read arbitrary files via a base64-encoded absolute path in the filename parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-1089?

{'tags': ['x_refsource_MISC'], 'url': 'http://security.bkis.vn/?p=345'}, {'name': 'rapidleech-filename-info-disclosure(49253)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49253'}, {'name': '34300', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34300'}, {'name': '34119', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34119'}, {'name': '20090314 [Bkis-03-2009] Multiple Vulnerabilities found in Rapidleech rev.36', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/501854/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1089?


Explain the CVE ID: What does the identifier CVE-2009-1090 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1090.

Directory traversal vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the uploaded parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-1090?

{'name': 'rapidleech-uploaded-file-include(49256)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49256'}, {'name': '52753', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/52753'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.bkis.vn/?p=345'}, {'name': '34300', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34300'}, {'name': '34119', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34119'}, {'name': '20090314 [Bkis-03-2009] Multiple Vulnerabilities found in Rapidleech rev.36', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/501854/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1090?


Explain the CVE ID: What does the identifier CVE-2009-1091 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1091.

Cross-site scripting (XSS) vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to inject arbitrary web script or HTML via the uploaded parameter.


Provide references for further information: Can you share references or external links related to CVE-2009-1091?

{'name': '52754', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/52754'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.bkis.vn/?p=345'}, {'name': '34300', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34300'}, {'name': '34119', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34119'}, {'name': '20090314 [Bkis-03-2009] Multiple Vulnerabilities found in Rapidleech rev.36', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/501854/100/0/threaded'}, {'name': 'rapidleech-upload-xss(49257)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49257'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1091?


Explain the CVE ID: What does the identifier CVE-2009-1092 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1092.

Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU~1.OCX 7.0 for GeoVision DVR systems allows remote attackers to execute arbitrary code by calling the GetAudioPlayingTime method with certain arguments.


Provide references for further information: Can you share references or external links related to CVE-2009-1092?

{'name': 'geovision-liveaudio-activex-dos(49238)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/49238'}, {'name': '34115', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34115'}, {'tags': ['x_refsource_MISC'], 'url': 'http://retrogod.altervista.org/9sg_geovision_liveaudio_freedmem.html'}, {'name': '8206', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8206'}, {'name': '20090313 GeoVision LiveAudio ActiveX Control GetAudioPlayingTime() remote freed-memory access exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/501773/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1092?


Explain the CVE ID: What does the identifier CVE-2009-1093 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1093.

LdapCtx in the LDAP service in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier does not close the connection when initialization fails, which allows remote attackers to cause a denial of service (LDAP service hang).


Provide references for further information: Can you share references or external links related to CVE-2009-1093?

{'name': 'SUSE-SA:2009:036', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html'}, {'name': 'MDVSA-2009:137', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2009:137'}, {'name': '34632', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34632'}, {'name': 'SSRT090058', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133'}, {'name': '35156', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35156'}, {'name': '34675', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34675'}, {'name': 'SUSE-SA:2009:029', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html'}, {'name': '35776', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35776'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/elmodocs2/security/ASA-2009-109.htm'}, {'name': '37460', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/37460'}, {'name': '34489', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34489'}, {'name': 'GLSA-200911-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200911-02.xml'}, {'name': 'RHSA-2009:1038', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2009-1038.html'}, {'name': 'RHSA-2009:1198', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://rhn.redhat.com/errata/RHSA-2009-1198.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2009-0016.html'}, {'name': 'HPSBUX02429', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=124344236532162&w=2'}, {'name': 'RHSA-2009:0394', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2009-0394.html'}, {'name': '34495', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34495'}, {'name': '1021893', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1021893'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-19-1'}, {'name': '36185', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/36185'}, {'name': 'RHSA-2009:0377', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://rhn.redhat.com/errata/RHSA-2009-0377.html'}, {'name': '35255', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35255'}, {'name': 'ADV-2009-1426', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/1426'}, {'name': '254569', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-66-254569-1'}, {'name': 'SUSE-SR:2009:011', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html'}, {'name': 'MDVSA-2009:162', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2009:162'}, {'name': '20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/507985/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html'}, {'name': 'RHSA-2009:0392', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2009-0392.html'}, {'name': '35223', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35223'}, {'name': '34240', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34240'}, {'name': 'oval:org.mitre.oval:def:11343', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11343'}, {'name': '34496', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34496'}, {'name': 'HPSBMA02429', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133'}, {'name': 'oval:org.mitre.oval:def:6676', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6676'}, {'name': 'USN-748-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-748-1'}, {'name': 'DSA-1769', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2009/dsa-1769'}, {'name': '35416', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35416'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/elmodocs2/security/ASA-2009-108.htm'}, {'name': '37386', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/37386'}, {'name': 'SUSE-SA:2009:016', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html'}, {'name': 'ADV-2009-3316', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/3316'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2009-1093?


Explain the CVE ID: What does the identifier CVE-2009-1094 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2009-1094.

Unspecified vulnerability in the LDAP implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier allows remote LDAP servers to execute arbitrary code via unknown vectors related to serialized data.