Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2010-0651
WebKit before r52784, as used in Google Chrome before 4.0.249.78 and Apple Safari before 4.0.5, permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote attackers to obtain sensitive information via a crafted document.
Affected Products: n/a
References: [{'name': 'MDVSA-2011:039', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:039'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html'}, {'name': 'ADV-2010-2722', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/2722'}, {'name': '43068', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43068'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=9877'}, {'tags': ['x_refsource_MISC'], 'url': 'http://scarybeastsecurity.blogspot.com/2009/12/generic-cross-browser-cross-domain.html'}, {'name': 'USN-1006-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1006-1'}, {'name': '41856', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/41856'}, {'name': 'ADV-2011-0212', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0212'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://trac.webkit.org/changeset/52784'}, {'tags': ['x_refsource_MISC'], 'url': 'http://websec.sv.cmu.edu/css/css.pdf'}, {'name': 'oval:org.mitre.oval:def:13653', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13653'}, {'name': '1023506', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1023506'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs'}, {'name': 'SUSE-SR:2011:002', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.webkit.org/show_bug.cgi?id=29820'}, {'name': 'ADV-2011-0552', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0552'}]
CVE State: PUBLISHED
Explain CVE-2010-0652
Microsoft Internet Explorer permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote HTTP servers to obtain sensitive information via a crafted document.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=9877'}]
CVE State: PUBLISHED
Explain CVE-2010-0653
Opera before 10.10 permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote attackers to obtain sensitive information via a crafted document.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://scarybeastsecurity.blogspot.com/2009/12/generic-cross-browser-cross-domain.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://websec.sv.cmu.edu/css/css.pdf'}, {'name': 'SUSE-SR:2010:014', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=9877'}]
CVE State: PUBLISHED
Explain CVE-2010-0654
Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 permit cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote attackers to obtain sensitive information via a crafted document.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://scarybeastsecurity.blogspot.com/2009/12/generic-cross-browser-cross-domain.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://websec.sv.cmu.edu/css/css.pdf'}, {'name': 'oval:org.mitre.oval:def:11811', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11811'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=524223'}, {'tags': ['x_refsource_MISC'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=9877'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2010/mfsa2010-46.html'}]
CVE State: PUBLISHED
Explain CVE-2010-0655
Use-after-free vulnerability in Google Chrome before 4.0.249.78 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving the display of a blocked popup window during navigation to a different web site.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html'}, {'name': '1023506', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1023506'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2009-65/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=12523'}, {'name': 'oval:org.mitre.oval:def:14069', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14069'}]
CVE State: PUBLISHED
Explain CVE-2010-0656
WebKit before r51295, as used in Google Chrome before 4.0.249.78, presents a directory-listing page in response to an XMLHttpRequest for a file:/// URL that corresponds to a directory, which allows attackers to obtain sensitive information or possibly have unspecified other impact via a crafted local HTML document.
Affected Products: n/a
References: [{'name': 'MDVSA-2011:039', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:039'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html'}, {'name': 'ADV-2010-2722', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/2722'}, {'name': '43068', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43068'}, {'name': 'USN-1006-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1006-1'}, {'name': '41856', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/41856'}, {'name': 'ADV-2011-0212', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0212'}, {'name': 'FEDORA-2010-8360', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041383.html'}, {'name': '1023506', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1023506'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://trac.webkit.org/changeset/51295'}, {'name': 'SUSE-SR:2011:002', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html'}, {'name': '38372', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38372'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=20450'}, {'name': 'oval:org.mitre.oval:def:14501', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14501'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.webkit.org/show_bug.cgi?id=31329'}, {'name': 'ADV-2011-0552', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0552'}, {'name': 'FEDORA-2010-8379', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041432.html'}, {'name': 'FEDORA-2010-8423', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041436.html'}]
CVE State: PUBLISHED
Explain CVE-2010-0657
Google Chrome before 4.0.249.78 on Windows does not perform the expected encoding, escaping, and quoting for the URL in the --app argument in a desktop shortcut, which allows user-assisted remote attackers to execute arbitrary programs or obtain sensitive information by tricking a user into creating a crafted shortcut.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html'}, {'name': 'oval:org.mitre.oval:def:14306', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14306'}, {'name': '1023506', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1023506'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=23693'}]
CVE State: PUBLISHED
Explain CVE-2010-0658
Multiple integer overflows in Skia, as used in Google Chrome before 4.0.249.78, allow remote attackers to execute arbitrary code in the Chrome sandbox or cause a denial of service (memory corruption and application crash) via vectors involving CANVAS elements.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=8864'}, {'name': '1023506', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1023506'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=24071'}, {'name': 'oval:org.mitre.oval:def:13852', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13852'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=24646'}]
CVE State: PUBLISHED
Explain CVE-2010-0659
The image decoder in WebKit before r52833, as used in Google Chrome before 4.0.249.78, does not properly handle a failure of memory allocation, which allows remote attackers to execute arbitrary code in the Chrome sandbox via a malformed GIF file that specifies a large size.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html'}, {'name': '43068', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43068'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://trac.webkit.org/changeset/52833'}, {'name': 'ADV-2011-0212', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0212'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.webkit.org/show_bug.cgi?id=33231'}, {'name': '1023506', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1023506'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=28566'}, {'name': 'SUSE-SR:2011:002', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html'}, {'name': 'oval:org.mitre.oval:def:14079', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14079'}]
CVE State: PUBLISHED
Explain CVE-2010-0660
Google Chrome before 4.0.249.78 sends an https URL in the Referer header of an http request in certain circumstances involving https to http redirection, which allows remote HTTP servers to obtain potentially sensitive information via standard HTTP logging.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:14247', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14247'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html'}, {'name': '1023506', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1023506'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=29920'}]
CVE State: PUBLISHED
Explain CVE-2010-0661
WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401, as used in Google Chrome before 4.0.249.78, allows remote attackers to bypass the Same Origin Policy via vectors involving the window.open method.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html'}, {'name': '43068', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43068'}, {'name': 'ADV-2011-0212', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0212'}, {'name': '1023506', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1023506'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=30660'}, {'name': 'SUSE-SR:2011:002', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://flock.com/security/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.webkit.org/show_bug.cgi?id=32647'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://trac.webkit.org/changeset/52401'}, {'name': 'oval:org.mitre.oval:def:14482', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14482'}]
CVE State: PUBLISHED
Explain CVE-2010-0662
The ParamTraits<SkBitmap>::Read function in common/common_param_traits.cc in Google Chrome before 4.0.249.78 does not use the correct variables in calculations designed to prevent integer overflows, which allows attackers to leverage renderer access to cause a denial of service or possibly have unspecified other impact via bitmap data, related to deserialization.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html'}, {'name': '1023506', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1023506'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs'}, {'name': 'googlechrome-paramtraits-dos(56627)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56627'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=31307'}, {'name': 'oval:org.mitre.oval:def:14457', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14457'}]
CVE State: PUBLISHED
Explain CVE-2010-0663
The ParamTraits<SkBitmap>::Read function in common/common_param_traits.cc in Google Chrome before 4.0.249.78 does not initialize the memory locations that will hold bitmap data, which might allow remote attackers to obtain potentially sensitive information from process memory by providing insufficient data, related to use of a (1) thumbnail database or (2) HTML canvas.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:14002', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14002'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html'}, {'name': '1023506', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1023506'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=31307'}]
CVE State: PUBLISHED
Explain CVE-2010-0664
Stack consumption vulnerability in the ChildProcessSecurityPolicy::CanRequestURL function in browser/child_process_security_policy.cc in Google Chrome before 4.0.249.78 allows remote attackers to cause a denial of service (memory consumption and application crash) via a URL that specifies multiple protocols, as demonstrated by a URL that begins with many repetitions of the view-source: substring.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=31517'}, {'name': '1023506', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1023506'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs'}, {'name': 'oval:org.mitre.oval:def:14097', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14097'}, {'tags': ['x_refsource_MISC'], 'url': 'http://twitter.com/akirsanov/statuses/7370288490'}, {'tags': ['x_refsource_MISC'], 'url': 'http://exchange.kg/other/chrome3_0day-denial_of_service_crash.html'}]
CVE State: PUBLISHED
Explain CVE-2010-0665
JAG (Just Another Guestbook) 1.14 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request for jag/database.sql.
Affected Products: n/a
References: [{'name': 'jag-database-info-disclosure(56228)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56228'}, {'name': '11406', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11406'}]
CVE State: PUBLISHED
Explain CVE-2010-0666
Unspecified vulnerability in eMBox in Novell eDirectory 8.8 SP5 Patch 2 and earlier allows remote attackers to cause a denial of service (crash) via unknown a crafted SOAP request, a different issue than CVE-2008-0926.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.novell.com/support/viewContent.do?externalId=3426981'}, {'name': '1023558', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1023558'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5067743&sliceId=&docTypeID=DT_SUSESDB_PSDB_1_1&dialogID=122457794&stateId=0%200%20122459671'}, {'name': 'ADV-2010-0334', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0334'}]
CVE State: PUBLISHED
Explain CVE-2010-0667
MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the GATEWAY_INTERFACE environment variable is set, which allows remote attackers to obtain sensitive information via unspecified vectors.
Affected Products: n/a
References: [{'name': '[oss-security] 20100215 CVE Request -- MoinMoin -- 1.8.7', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/02/15/2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://moinmo.in/SecurityFixes'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://hg.moinmo.in/moin/1.9/rev/04afdde50094'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://moinmo.in/MoinMoinChat/Logs/moin-dev/2010-01-18'}, {'name': '[oss-security] 20100221 Re: CVE Request -- MoinMoin -- 1.8.7', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=oss-security&m=126676896601156&w=2'}, {'name': '[oss-security] 20100121 CVE request: MoinMoin information disclosure', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/01/21/6'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://hg.moinmo.in/moin/1.9/rev/9d8e7ce3c3a2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://hg.moinmo.in/moin/1.9/raw-file/1.9.1/docs/CHANGES'}, {'name': '[oss-security] 20100215 Re: CVE Request -- MoinMoin -- 1.8.7', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=oss-security&m=126625972814888&w=2'}, {'name': '38242', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38242'}]
CVE State: PUBLISHED
Explain CVE-2010-0668
Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors, related to configurations that have a non-empty superuser list, the xmlrpc action enabled, the SyncPages action enabled, or OpenID configured.
Affected Products: n/a
References: [{'name': 'moinmoin-superuser-unspecified(56002)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56002'}, {'name': '[oss-security] 20100215 CVE Request -- MoinMoin -- 1.8.7', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/02/15/2'}, {'name': '38023', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38023'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://moinmo.in/SecurityFixes'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://hg.moinmo.in/moin/1.8/raw-file/1.8.7/docs/CHANGES'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=569975'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=565604'}, {'name': '62043', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/62043'}, {'name': '[oss-security] 20100221 Re: CVE Request -- MoinMoin -- 1.8.7', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=oss-security&m=126676896601156&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://moinmo.in/MoinMoinRelease1.8'}, {'name': '38709', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38709'}, {'name': '[oss-security] 20100215 Re: CVE Request -- MoinMoin -- 1.8.7', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=oss-security&m=126625972814888&w=2'}, {'name': 'DSA-2014', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2010/dsa-2014'}, {'name': 'FEDORA-2010-1712', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035438.html'}, {'name': '38444', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38444'}, {'name': '38903', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38903'}, {'name': 'FEDORA-2010-1743', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035374.html'}, {'name': 'ADV-2010-0600', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0600'}, {'name': 'ADV-2010-0266', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0266'}]
CVE State: PUBLISHED
Explain CVE-2010-0669
MoinMoin before 1.8.7 and 1.9.x before 1.9.2 does not properly sanitize user profiles, which has unspecified impact and attack vectors.
Affected Products: n/a
References: [{'name': '[oss-security] 20100215 CVE Request -- MoinMoin -- 1.8.7', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/02/15/2'}, {'name': '38023', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38023'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://moinmo.in/SecurityFixes'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://hg.moinmo.in/moin/1.8/raw-file/1.8.7/docs/CHANGES'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://moinmo.in/MoinMoinRelease1.8'}, {'name': 'DSA-2014', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2010/dsa-2014'}, {'name': '[oss-security] 20100221 Re: CVE Request -- MoinMoin -- 1.8.7', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/02/21/2'}, {'name': '38444', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38444'}, {'name': '38903', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38903'}, {'name': '[oss-security] 20100215 Re: CVE Request -- MoinMoin -- 1.8.7', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/02/15/4'}, {'name': 'ADV-2010-0600', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0600'}]
CVE State: PUBLISHED
Explain CVE-2010-0670
Unspecified vulnerability in the IP-Tech JQuarks (com_jquarks) Component before 0.2.4 for Joomla! allows attackers to obtain the installation path for Joomla! via unknown vectors.
Affected Products: n/a
References: [{'name': 'jquarks-unspecified-path-disclosure(56523)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56523'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.iptechinside.com/labs/news/show/6'}]
CVE State: PUBLISHED
Explain CVE-2010-0671
SQL injection vulnerability in index.php in KR MEDIA Pogodny CMS allows remote attackers to execute arbitrary SQL commands via the id parameter in a niusy action.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://ariko-security.com/feb2010/ad439.html'}, {'name': '62343', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/62343'}, {'name': '38571', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38571'}, {'name': '38253', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38253'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1002-exploits/pogodnycms-sql.txt'}, {'name': '11473', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11473'}, {'name': '20100216 Pogodny CMS SQL vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/509554/100/0/threaded'}]
CVE State: PUBLISHED
Explain CVE-2010-0672
SQL injection vulnerability in index.php in WSN Guest 1.02 allows remote attackers to execute arbitrary SQL commands via the orderlinks parameter.
Affected Products: n/a
References: [{'name': 'wsnguest-orderlinks-sql-injection(56256)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56256'}, {'name': '38236', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38236'}, {'name': '11436', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11436'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1002-exploits/wsnguest102-sql.txt'}]
CVE State: PUBLISHED
Explain CVE-2010-0673
SQL injection vulnerability in cplphoto.php in the Copperleaf Photolog plugin 0.16, and possibly earlier, for WordPress allows remote attackers to execute arbitrary SQL commands via the postid parameter.
Affected Products: n/a
References: [{'name': '62346', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/62346'}, {'name': '11458', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11458'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1002-exploits/wpcopperleaf-sql.txt'}, {'name': '38579', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38579'}, {'name': '38239', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38239'}]
CVE State: PUBLISHED
Explain CVE-2010-0674
StatCounteX 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for path/stats.mdb.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1002-exploits/statcountex-disclose.txt'}, {'name': 'statcountex-stats-info-disclosure(56264)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56264'}, {'name': '11434', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11434'}]
CVE State: PUBLISHED
Explain CVE-2010-0675
Cross-site scripting (XSS) vulnerability in index.php in BGSvetionik BGS CMS 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action.  NOTE: some of these details are obtained from third party information.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1002-exploits/bgscms-xss.txt'}, {'name': '38264', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38264'}, {'name': '38597', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38597'}, {'name': '62363', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/62363'}]
CVE State: PUBLISHED
Explain CVE-2010-0676
Directory traversal vulnerability in index.php in the RWCards (com_rwcards) component 3.0.18 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1002-exploits/joomlarwcards-lfi.txt'}, {'name': '38267', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38267'}, {'name': '38638', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38638'}]
CVE State: PUBLISHED
Explain CVE-2010-0677
SQL injection vulnerability in index.php in Katalog Stron Hurricane 1.3.5, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the get parameter.
Affected Products: n/a
References: [{'name': '62339', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/62339'}, {'name': '11452', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11452'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1002-exploits/katalog-rfisql.txt'}, {'name': '38581', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38581'}]
CVE State: PUBLISHED
Explain CVE-2010-0678
PHP remote file inclusion vulnerability in includes/moderation.php in Katalog Stron Hurricane 1.3.5, and possibly earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the includes_directory parameter.
Affected Products: n/a
References: [{'name': '11452', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11452'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1002-exploits/katalog-rfisql.txt'}, {'name': '38581', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38581'}, {'name': '62340', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/62340'}]
CVE State: PUBLISHED
Explain CVE-2010-0679
Multiple stack-based buffer overflows in the HyleosChemView.HLChemView ActiveX control (HyleosChemView.ocx) in Hyleos ChemView 1.9.5.1 allow remote attackers to execute arbitrary code via a large number of white space characters in the filename argument to the (1) SaveasMolFile and (2) ReadMolFile methods.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1002-exploits/hyleoschemview-heap.rb.txt'}, {'name': '38523', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38523'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-assessment.com/files/advisories/2010-02-11_ChemviewX_Activex.pdf'}, {'name': '38225', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38225'}, {'name': '62276', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/62276'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1002-advisories/chemviewx-overflow.txt'}, {'name': '11422', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11422'}]
CVE State: PUBLISHED
Explain CVE-2010-0680
Directory traversal vulnerability in index.php in ZeusCMS 0.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter.
Affected Products: n/a
References: [{'name': '38237', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38237'}, {'name': '11437', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11437'}]
CVE State: PUBLISHED
Explain CVE-2010-0681
ZeusCMS 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request for admin/backup.sql.
Affected Products: n/a
References: [{'name': '11437', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11437'}]
CVE State: PUBLISHED
Explain CVE-2010-0682
WordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other authors via a direct request with a modified p parameter.
Affected Products: n/a
References: [{'name': 'FEDORA-2010-19329', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052932.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://tmacuk.co.uk/?p=180'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://wordpress.org/development/2010/02/wordpress-2-9-2/'}, {'name': '42871', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42871'}, {'tags': ['x_refsource_MISC'], 'url': 'http://hakre.wordpress.com/2010/02/16/the-short-memory-of-wordpress-org-security/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://core.trac.wordpress.org/ticket/11236'}, {'name': '38592', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38592'}, {'name': 'FEDORA-2010-19330', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052917.html'}, {'name': '62330', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/62330'}]
CVE State: PUBLISHED
Explain CVE-2010-0683
Unspecified vulnerability in TIBRepoServer5.jar in TIBCO Administrator 5.4.0 through 5.6.0, when JMS transport is used, allows remote authenticated users to execute arbitrary code on all domain nodes via vectors related to leveraging administrative credentials.
Affected Products: n/a
References: [{'name': 'ADV-2010-0463', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0463'}, {'name': '38732', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38732'}, {'name': '38396', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38396'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.tibco.com/multimedia/security_advisory_administrator_tcm8-10685.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.tibco.com/services/support/advisories/adminstrator-advisory_20100223.jsp'}]
CVE State: PUBLISHED
Explain CVE-2010-0684
Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script or HTML via the JMSDestination parameter in a queue action.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://issues.apache.org/activemq/browse/AMQ-2613'}, {'name': '20100330 CVE-2010-0684: Apache ActiveMQ Persistent Cross-Site Scripting (XSS) Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/510419/100/0/threaded'}, {'name': '1023778', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1023778'}, {'name': 'activemq-createdestination-xss(57397)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57397'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://activemq.apache.org/activemq-531-release.html'}, {'name': '39119', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39119'}, {'name': '39223', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39223'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://issues.apache.org/activemq/browse/AMQ-2625'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.rajatswarup.com/CVE-2010-0684.txt'}]
CVE State: PUBLISHED
Explain CVE-2010-0685
The design of the dialplan functionality in Asterisk Open Source 1.2.x, 1.4.x, and 1.6.x; and Asterisk Business Edition B.x.x and C.x.x, when using the ${EXTEN} channel variable and wildcard pattern matches, allows context-dependent attackers to inject strings into the dialplan using metacharacters that are injected when the variable is expanded, as demonstrated using the Dial application to process a crafted SIP INVITE message that adds an unintended outgoing channel leg.  NOTE: it could be argued that this is not a vulnerability in Asterisk, but a class of vulnerabilities that can occur in any program that uses this feature without the associated filtering functionality that is already available.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://svn.asterisk.org/svn/asterisk/branches/1.2/README-SERIOUSLY.bestpractices.txt'}, {'name': '39096', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39096'}, {'name': '1023637', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1023637'}, {'name': 'FEDORA-2010-3724', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037679.html'}, {'name': '20100218 AST-2010-002: Dialplan injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/509608/100/0/threaded'}, {'name': '38641', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38641'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://downloads.digium.com/pub/security/AST-2010-002.html'}, {'name': 'ADV-2010-0439', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0439'}, {'name': 'asterisk-dial-weak-security(56397)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56397'}]
CVE State: PUBLISHED
Explain CVE-2010-0686
WebAccess in VMware VirtualCenter 2.0.2 and 2.5, VMware Server 2.0, and VMware ESX 3.0.3 and 3.5 allows remote attackers to leverage proxy-server functionality to spoof the origin of requests via unspecified vectors, related to a "URL forwarding vulnerability."
Affected Products: n/a
References: [{'name': '39037', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39037'}, {'name': '[security-announce] 20100329 VMSA-2010-0005 VMware products address vulnerabilities in WebAccess', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.vmware.com/pipermail/security-announce/2010/000086.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2010-0005.html'}, {'name': '1023769', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1023769'}]
CVE State: PUBLISHED
Explain CVE-2010-0688
Stack-based buffer overflow in Orbital Viewer 1.04 allows user-assisted remote attackers to execute arbitrary code via a crafted (1) .orb or (2) .ov file.
Affected Products: n/a
References: [{'name': '38720', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38720'}, {'name': '40985', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40985'}, {'name': '62580', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/62580'}, {'name': 'orbitalviewer-ov-bo(59560)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/59560'}, {'name': '13940', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/13940'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-011-orbital-viewer-orb-buffer-overflow/'}, {'name': 'ADV-2010-0478', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0478'}, {'name': '38436', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38436'}]
CVE State: PUBLISHED
Explain CVE-2010-0689
The ExecuteExe method in the DVBSExeCall Control ActiveX control 1.0.0.1 in DVBSExeCall.ocx in DATEV Base System (aka Grundpaket Basis) allows remote attackers to execute arbitrary commands via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://sotiriu.de/demos/videos/nso-2010-003.html'}, {'name': '38415', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38415'}, {'name': '62564', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/62564'}, {'name': 'datev-dvbsexecall-command-execution(56530)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56530'}, {'name': 'ADV-2010-0474', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0474'}, {'name': '20100225 NSOADV-2010-003: DATEV ActiveX Control remote command execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/509743/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sotiriu.de/adv/NSOADV-2010-003.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.datev.de/info-db/1080162'}, {'name': '38716', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38716'}]
CVE State: PUBLISHED
Explain CVE-2010-0690
SQL injection vulnerability in index.php in CommodityRentals Video Games Rentals allows remote attackers to execute arbitrary SQL commands via the pfid parameter in a catalog action.
Affected Products: n/a
References: [{'name': '38555', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38555'}, {'name': '11409', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11409'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1002-exploits/videogamesrental-sql.txt'}, {'name': 'videogames-index-sql-injection(56226)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56226'}, {'name': '62295', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/62295'}]
CVE State: PUBLISHED
Explain CVE-2010-0691
SQL injection vulnerability in druckansicht.php in JTL-Shop 2 allows remote attackers to execute arbitrary SQL commands via the s parameter.
Affected Products: n/a
References: [{'name': '11445', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11445'}, {'name': '62329', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/62329'}, {'name': '38588', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38588'}]
CVE State: PUBLISHED
Explain CVE-2010-0692
SQL injection vulnerability in the IP-Tech JQuarks (com_jquarks) Component 0.2.3, and possibly earlier, for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.  NOTE: some of these details are obtained from third party information.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.iptechinside.com/labs/news/show/6'}, {'name': '38203', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38203'}, {'name': '38623', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38623'}, {'name': '62332', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/62332'}]
CVE State: PUBLISHED
Explain CVE-2010-0693
SQL injection vulnerability in products.php in CommodityRentals Trade Manager Script allows remote attackers to execute arbitrary SQL commands via the cid parameter.
Affected Products: n/a
References: [{'name': '62294', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/62294'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1002-exploits/trademanager-sql.txt'}, {'name': 'trade-manager-products-sql-injection(56223)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/56223'}, {'name': '38556', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/38556'}, {'name': '11412', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11412'}]
CVE State: PUBLISHED
Explain CVE-2010-0694
SQL injection vulnerability in the PerchaGallery (com_perchagallery) component before 1.5b for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an editunidad action to index.php.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://docs.joomla.org/Vulnerable_Extensions_List#New_format_Feed_Starts_Here'}, {'name': 'perchagallery-index-sql-injection(55447)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/55447'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1001-exploits/joomlaperchagallery-sql.txt'}, {'name': '37642', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/37642'}, {'name': '11024', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/11024'}]
CVE State: PUBLISHED