Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2010-1449
Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large image that triggers a buffer overflow.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-3143.12.
Affected Products: n/a
References: [{'name': '43068', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43068'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4435'}, {'name': 'ADV-2011-0212', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0212'}, {'name': '43364', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43364'}, {'name': 'ADV-2011-0413', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0413'}, {'name': 'APPLE-SA-2010-11-10-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html'}, {'name': 'ADV-2011-0122', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0122'}, {'name': '40363', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40363'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=541698'}, {'name': 'SUSE-SR:2011:002', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html'}, {'name': '42888', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42888'}, {'name': 'RHSA-2011:0027', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0027.html'}, {'name': 'MDVSA-2010:215', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2010:215'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.python.org/issue8678'}, {'name': 'RHSA-2011:0260', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0260.html'}]
CVE State: PUBLISHED
Explain CVE-2010-1450
Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an image file containing crafted data that triggers improper processing within the (1) longimagedata or (2) expandrow function.
Affected Products: n/a
References: [{'name': '43068', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43068'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4435'}, {'name': 'ADV-2011-0212', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0212'}, {'name': '43364', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43364'}, {'name': 'ADV-2011-0413', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0413'}, {'name': 'APPLE-SA-2010-11-10-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html'}, {'name': 'ADV-2011-0122', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0122'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=541698'}, {'name': 'SUSE-SR:2011:002', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html'}, {'name': '42888', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42888'}, {'name': '40365', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40365'}, {'name': 'RHSA-2011:0027', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0027.html'}, {'name': 'MDVSA-2010:215', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2010:215'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.python.org/issue8678'}, {'name': 'RHSA-2011:0260', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0260.html'}]
CVE State: PUBLISHED
Explain CVE-2010-1451
The TSB I-TLB load implementation in arch/sparc/kernel/tsb.S in the Linux kernel before 2.6.33 on the SPARC platform does not properly obtain the value of a certain _PAGE_EXEC_4U bit and consequently does not properly implement a non-executable stack, which makes it easier for context-dependent attackers to exploit stack-based buffer overflows via a crafted application.
Affected Products: n/a
References: [{'name': '[oss-security] 20100224 kernel: execution possible in non-executable mappings in recent 2.6 kernels (SPARC only)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/02/24/1'}, {'name': '[linux-sparc] 20100219 Execution possible in non-executable mappings in recent 2.6 kernels', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=linux-sparc&m=126662196902830&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.33'}, {'name': '[oss-security] 20100505 Re: CVE Request [was Re: kernel: execution possible in non-executable mappings in recent 2.6 kernels (SPARC only)]', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/05/05/2'}, {'name': '[linux-sparc] 20100219 Re: Execution possible in non-executable mappings in recent 2.6 kernels', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=linux-sparc&m=126662159602378&w=2'}, {'name': 'DSA-2053', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2010/dsa-2053'}, {'name': '39830', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39830'}]
CVE State: PUBLISHED
Explain CVE-2010-1453
Cross-site scripting (XSS) vulnerability in the Login form in Piwik 0.1.6 through 0.5.5 allows remote attackers to inject arbitrary web script or HTML via the form_url parameter.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://piwik.org/blog/2010/04/piwik-0-6-security-advisory/'}, {'name': '[oss-security] 20100505 CVE Request - Piwik 0.5.5 - XSS vulnerability', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/05/05/3'}, {'name': 'ADV-2010-1079', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1079'}, {'name': '[oss-security] 20100505 Re: CVE Request - Piwik 0.5.5 - XSS vulnerability', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/05/05/4'}, {'name': '39666', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39666'}]
CVE State: PUBLISHED
Explain CVE-2010-1454
com.springsource.tcserver.serviceability.rmi.JmxSocketListener in VMware SpringSource tc Server Runtime 6.0.19 and 6.0.20 before 6.0.20.D, and 6.0.25.A before 6.0.25.A-SR01, does not properly enforce the requirement for an encrypted (aka s2enc) password, which allows remote attackers to obtain JMX interface access via a blank password.
Affected Products: n/a
References: [{'name': 'tcserver-listener-security-bypass(58684)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/58684'}, {'name': '39778', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39778'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.springsource.com/security/cve-2010-1454'}, {'name': '20100517 CVE-2010-1454: SpringSource tc Server unauthenticated remote access to JMX interface', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/511307/100/0/threaded'}, {'name': '40205', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40205'}]
CVE State: PUBLISHED
Explain CVE-2010-1455
The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1.2.0 through 1.2.7 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed packet trace file.
Affected Products: n/a
References: [{'name': 'SUSE-SR:2011:001', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html'}, {'name': '43068', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43068'}, {'name': '39950', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39950'}, {'name': 'ADV-2011-0212', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0212'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4646'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4644'}, {'name': '39661', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39661'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2010-03.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2010-04.html'}, {'name': 'ADV-2010-1081', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/1081'}, {'name': 'MDVSA-2010:099', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2010:099'}, {'name': '42877', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42877'}, {'name': 'SUSE-SR:2011:002', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html'}, {'name': 'ADV-2011-0076', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0076'}, {'name': 'wireshark-docsis-dos(58362)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/58362'}, {'name': '[oss-security] 20100507 Re: CVE Assignment (wireshark)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/05/07/7'}, {'name': '64363', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/64363'}, {'name': 'oval:org.mitre.oval:def:7331', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7331'}]
CVE State: PUBLISHED
Explain CVE-2010-1457
Tools/gdomap.c in gdomap in GNUstep Base before 1.20.0 allows local users to read arbitrary files via a (1) -c or (2) -a option, which prints file contents in an error message.
Affected Products: n/a
References: [{'name': '39746', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39746'}, {'name': '[oss-security] 20100507 CVE Assignment (gnustep)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/05/07/6'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://savannah.gnu.org/bugs/?29755'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://thread.gmane.org/gmane.comp.lib.gnustep.bugs/12336'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://ftpmain.gnustep.org/pub/gnustep/core/gnustep-base-1.20.0.tar.gz'}, {'name': '40005', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40005'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/ubuntu/+source/gnustep-base/+bug/573108'}]
CVE State: PUBLISHED
Explain CVE-2010-1458
Stack-based buffer overflow in Create and Extract Zips TweakFS Zip Utility 1.0 for Flight Simulator X (FSX) allows remote attackers to execute arbitrary code via a long filename in a ZIP archive.
Affected Products: n/a
References: [{'name': '63899', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/63899'}, {'name': '39519', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39519'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-026-tweakfs-zip-utility-version-1-0-stack-bof/'}, {'name': '20100419 [CORELAN-10-026] TweakFS Zip Stack BOF', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0242.html'}, {'name': 'tzu-zip-bo(57912)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57912'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.corelan.be:8800/advisories.php?id=CORELAN-10-026'}, {'name': '39565', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39565'}]
CVE State: PUBLISHED
Explain CVE-2010-1459
The default configuration of ASP.NET in Mono before 2.6.4 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by the __VIEWSTATE parameter to 2.0/menu/menu1.aspx in the XSP sample project.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mono-project.com/Vulnerabilities#ASP.NET_View_State_Cross-Site_Scripting'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.communities.hp.com/securitysoftware/blogs/spilabs/archive/2010/04/29/asp-net-cross-site-scripting-followup-mono.aspx'}, {'name': 'SUSE-SR:2010:013', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html'}, {'name': '40351', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/40351'}, {'name': 'SUSE-SR:2010:012', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html'}, {'name': 'SUSE-SR:2010:014', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2010-1460
The IBM BladeCenter with Advanced Management Module (AMM) firmware before bpet50g does not properly perform interrupt sharing for USB and iSCSI, which allows remote attackers to cause a denial of service (management module reboot) via TCP packets with malformed application data.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-947.ibm.com/systems/support/supportsite.wss/docdisplay?lndocid=MIGR-5083945&brandind=5000020'}, {'name': '39499', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39499'}, {'tags': ['x_refsource_MISC'], 'url': 'http://dsecrg.com/pages/vul/show.php?id=149'}, {'name': '20100415 [DSECRG-09-049] IBM BladeCenter Management Module - DoS vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/510744/100/0/threaded'}]
CVE State: PUBLISHED
Explain CVE-2010-1461
Directory traversal vulnerability in the Photo Battle (com_photobattle) component 1.0.1 for Joomla! allows remote attackers to read arbitrary files via the view parameter to index.php.
Affected Products: n/a
References: [{'name': '63800', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/63800'}, {'name': '39504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39504'}, {'name': '12232', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12232'}, {'name': '39469', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39469'}]
CVE State: PUBLISHED
Explain CVE-2010-1462
Directory traversal vulnerability in WebAsyst Shop-Script FREE has unknown impact and attack vectors via the sub parameter.
Affected Products: n/a
References: [{'name': '20100414 VUPEN Web Security Research - WebAsyst Shop-Script Multiple Input Validation Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/510741/100/0/threaded'}, {'name': 'ADV-2010-0882', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0882'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.vupen.com/english/research-web.php'}]
CVE State: PUBLISHED
Explain CVE-2010-1463
Multiple SQL injection vulnerabilities in WebAsyst Shop-Script FREE allow attackers to execute arbitrary SQL commands via the (1) add2cart, (2) c_id, (3) categoryID, (4) list_price, (5) name, (6) new_offer, (7) price, (8) product_code, (9) productID, (10) rating, and (11) save_product parameters.
Affected Products: n/a
References: [{'name': '20100414 VUPEN Web Security Research - WebAsyst Shop-Script Multiple Input Validation Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/510741/100/0/threaded'}, {'name': 'ADV-2010-0882', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0882'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.vupen.com/english/research-web.php'}]
CVE State: PUBLISHED
Explain CVE-2010-1464
Multiple cross-site scripting (XSS) vulnerabilities in WebAsyst Shop-Script FREE allow remote attackers to inject arbitrary web script or HTML via the (1) currency_id_left, (2) currency_id_right, (3) darkcolor, (4) lightcolor, (5) middlecolor, and (6) w parameters.
Affected Products: n/a
References: [{'name': '20100414 VUPEN Web Security Research - WebAsyst Shop-Script Multiple Input Validation Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/510741/100/0/threaded'}, {'name': 'ADV-2010-0882', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0882'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.vupen.com/english/research-web.php'}]
CVE State: PUBLISHED
Explain CVE-2010-1465
Stack-based buffer overflow in Trellian FTP client 3.01, including 3.1.3.1789, allows remote attackers to execute arbitrary code via a long PASV response.
Affected Products: n/a
References: [{'name': '39370', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39370'}, {'name': 'trellian-pasv-bo(57778)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57778'}, {'name': '12152', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12152'}]
CVE State: PUBLISHED
Explain CVE-2010-1466
Directory traversal vulnerability in scr/soustab.php in openUrgence Vaccin 1.03 allows remote attackers to read arbitrary files via the dsn[phptype] parameter.
Affected Products: n/a
References: [{'name': '39400', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39400'}, {'name': '39412', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39412'}, {'name': '12193', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12193'}, {'name': 'vaccin-soustab-file-include(57816)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57816'}]
CVE State: PUBLISHED
Explain CVE-2010-1467
Multiple PHP remote file inclusion vulnerabilities in openUrgence Vaccin 1.03 allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) collectivite.class.php, (2) injection.class.php, (3) utilisateur.class.php, (4) droit.class.php, (5) laboratoire.class.php, (6) vaccin.class.php, (7) effetsecondaire.class.php, (8) medecin.class.php, (9) individu.class.php, and (10) profil.class.php in gen/obj/.
Affected Products: n/a
References: [{'name': '39400', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39400'}, {'name': '39412', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39412'}, {'name': 'vaccin-pathom-file-include(57815)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57815'}, {'name': '12193', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12193'}]
CVE State: PUBLISHED
Explain CVE-2010-1468
SQL injection vulnerability in the Multi-Venue Restaurant Menu Manager (aka MVRMM or com_mv_restaurantmenumanager) component 1.5.2 Stable Update 3 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the mid parameter in a menu_display action to index.php.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/joomlamvrmm-sql.txt'}, {'name': '12159', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12159'}, {'name': '39382', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39382'}, {'name': '39217', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39217'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.xenuser.org/documents/security/joomla_com_MVRMM_sql.txt'}]
CVE State: PUBLISHED
Explain CVE-2010-1469
Directory traversal vulnerability in the Ternaria Informatica JProject Manager (com_jprojectmanager) component 1.0 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/joomlajprojectmanager-lfi.txt'}, {'name': '12146', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12146'}, {'name': '39383', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39383'}, {'name': '39282', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39282'}]
CVE State: PUBLISHED
Explain CVE-2010-1470
Directory traversal vulnerability in the Web TV (com_webtv) component 1.0 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.
Affected Products: n/a
References: [{'name': 'ADV-2010-0858', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0858'}, {'name': '39405', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39405'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/joomlawebtv-lfi.txt'}, {'name': '12166', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12166'}]
CVE State: PUBLISHED
Explain CVE-2010-1471
Directory traversal vulnerability in the AddressBook (com_addressbook) component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
Affected Products: n/a
References: [{'name': '12170', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12170'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/joomlaaddressbook-lfi.txt'}, {'name': 'ADV-2010-0862', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0862'}, {'name': '39412', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39412'}]
CVE State: PUBLISHED
Explain CVE-2010-1472
Directory traversal vulnerability in the Daily Horoscope (com_horoscope) component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
Affected Products: n/a
References: [{'name': 'ADV-2010-0859', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0859'}, {'name': '12167', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12167'}, {'name': '39406', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39406'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/joomlahoroscope-lfi.txt'}]
CVE State: PUBLISHED
Explain CVE-2010-1473
Directory traversal vulnerability in the Advertising (com_advertising) component 0.25 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/joomlaeasyadbanner-lfi.txt'}, {'name': '39410', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39410'}, {'name': '12171', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12171'}]
CVE State: PUBLISHED
Explain CVE-2010-1474
Directory traversal vulnerability in the Sweety Keeper (com_sweetykeeper) component 1.5.x for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.
Affected Products: n/a
References: [{'name': '39399', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39399'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/joomlasweetykeeper-lfi.txt'}, {'name': 'comsweetykeeper-controller-file-include(57662)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57662'}, {'name': '12182', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12182'}, {'name': '39388', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39388'}]
CVE State: PUBLISHED
Explain CVE-2010-1475
Directory traversal vulnerability in the Preventive & Reservation (com_preventive) component 1.0.5 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/joomlapr-lfi.txt'}, {'name': '12147', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12147'}, {'name': '39387', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39387'}, {'name': 'compreventive-controller-file-include(57652)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57652'}, {'name': '39285', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39285'}]
CVE State: PUBLISHED
Explain CVE-2010-1476
Directory traversal vulnerability in the AlphaUserPoints (com_alphauserpoints) component 1.5.5 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the view parameter to index.php.
Affected Products: n/a
References: [{'name': '12150', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12150'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.alphaplug.com/'}, {'name': '39250', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39250'}, {'name': '39393', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39393'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/joomlaalphauserpoints-lfi.txt'}]
CVE State: PUBLISHED
Explain CVE-2010-1477
SQL injection vulnerability in the SermonSpeaker (com_sermonspeaker) component before 3.2.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a latest_sermons action to index.php.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://joomlacode.org/gf/project/sermon_speaker/news/?action=NewsThreadView&id=2549'}, {'name': '12184', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12184'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://joomlacode.org/gf/project/sermon_speaker/forum/?action=ForumBrowse&forum_id=7897&_forum_action=ForumMessageBrowse&thread_id=15219'}, {'name': '39410', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39410'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/joomlasermonspeaker-sql.txt'}, {'name': '39385', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39385'}]
CVE State: PUBLISHED
Explain CVE-2010-1478
Directory traversal vulnerability in the Ternaria Informatica Jfeedback! (com_jfeedback) component 1.2 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.
Affected Products: n/a
References: [{'name': '39390', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39390'}, {'name': '12145', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12145'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/joomlajfeedback-lfi.txt'}, {'name': '39262', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39262'}]
CVE State: PUBLISHED
Explain CVE-2010-1479
SQL injection vulnerability in the RokModule (com_rokmodule) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the moduleid parameter in a raw action to index.php.
Affected Products: n/a
References: [{'name': '39255', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39255'}, {'name': '39378', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39378'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.rockettheme.com/extensions-downloads/free/rokmodule/1040-rokmodule-component/download'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.rockettheme.com/extensions-updates/673-rokmodule-security-update-released'}, {'name': '12148', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12148'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/joomlarokmodule-bsql.txt'}]
CVE State: PUBLISHED
Explain CVE-2010-1480
SQL injection vulnerability in the RokModule (com_rokmodule) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the module parameter to index.php.  NOTE: some of these details are obtained from third party information.
Affected Products: n/a
References: [{'name': '39255', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39255'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.rockettheme.com/extensions-updates/673-rokmodule-security-update-released'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.rockettheme.com/extensions-downloads/free/rokmodule/1040-rokmodule-component/download'}]
CVE State: PUBLISHED
Explain CVE-2010-1481
Cross-site scripting (XSS) vulnerability in the table feature in PmWiki 2.2.15 allows remote authenticated users to inject arbitrary web script or HTML via the width attribute.
Affected Products: n/a
References: [{'name': '39994', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39994'}, {'tags': ['x_refsource_MISC'], 'url': 'http://int21.de/cve/CVE-2010-1481-pmwiki-xss.html'}, {'name': '39698', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39698'}, {'name': '20100507 pmwiki: persistent cross site scripting (XSS), CVE-2010-1481', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/511177/100/0/threaded'}]
CVE State: PUBLISHED
Explain CVE-2010-1482
Cross-site scripting (XSS) vulnerability in admin/editprefs.php in the backend in CMS Made Simple (CMSMS) before 1.7.1 might allow remote attackers to inject arbitrary web script or HTML via the date_format_string parameter.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://blog.cmsmadesimple.org/2010/05/01/announcing-cms-made-simple-1-7-1-escade/'}, {'name': '39997', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39997'}, {'tags': ['x_refsource_MISC'], 'url': 'http://int21.de/cve/CVE-2010-1482-cmsmadesimple-xss-backend.html'}, {'name': '20100507 CMS Made Simple: backend cross site scripting (XSS), CVE-2010-1482', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/511178'}]
CVE State: PUBLISHED
Explain CVE-2010-1486
Multiple cross-site scripting (XSS) vulnerabilities in _invoice.asp in CactuShop before 6.155 allow remote attackers to inject arbitrary web script or HTML via the (1) billing address or (2) shipping address.
Affected Products: n/a
References: [{'name': '39587', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39587'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/content/cactushop-xss-persistent-vulnerability'}]
CVE State: PUBLISHED
Explain CVE-2010-1487
IBM Lotus Notes 7.0, 8.0, and 8.5 stores administrative credentials in cleartext in SURunAs.exe, which allows local users to obtain sensitive information by examining this file, aka SPR JSTN837SEG.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21427073'}, {'name': '39525', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39525'}, {'name': '39507', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39507'}, {'name': 'oval:org.mitre.oval:def:14725', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14725'}]
CVE State: PUBLISHED
Explain CVE-2010-1488
The proc_oom_score function in fs/proc/base.c in the Linux kernel before 2.6.34-rc4 uses inappropriate data structures during selection of a candidate for the OOM killer, which might allow local users to cause a denial of service via unspecified patterns of task creation.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=582068'}, {'name': '[oss-security] 20100414 Couple of kernel issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/04/14/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.34-rc4'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b95c35e76b29ba812e5dabdd91592e25ec640e93'}]
CVE State: PUBLISHED
Explain CVE-2010-1489
The XSS Filter in Microsoft Internet Explorer 8 does not properly perform neutering for the SCRIPT tag, which allows remote attackers to conduct cross-site scripting (XSS) attacks against web sites that have no inherent XSS vulnerabilities, a different issue than CVE-2009-4074.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://blogs.technet.com/msrc/archive/2010/04/19/guidance-on-internet-explorer-xss-filter.aspx'}, {'tags': ['x_refsource_MISC'], 'url': 'http://p42.us/ie8xss/Abusing_IE8s_XSS_Filters.pdf'}, {'tags': ['x_refsource_MISC'], 'url': 'http://p42.us/ie8xss/'}, {'name': 'oval:org.mitre.oval:def:12638', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12638'}]
CVE State: PUBLISHED
Explain CVE-2010-1490
Unspecified vulnerability in IBM Cognos 8 Business Intelligence before 8.4.1 FP1 has unknown impact and attack vectors.
Affected Products: n/a
References: [{'name': 'ibm-cognos-unspecified(57937)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57937'}, {'name': '39451', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39451'}, {'name': 'ADV-2010-0947', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0947'}, {'name': '39580', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39580'}, {'name': 'PM04649', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1PM04649'}]
CVE State: PUBLISHED
Explain CVE-2010-1491
Directory traversal vulnerability in the MMS Blog (com_mmsblog) component 2.3.0 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.
Affected Products: n/a
References: [{'name': '39607', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39607'}, {'name': '12318', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12318'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/joomlammsblog-lfi.txt'}, {'name': '39533', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39533'}]
CVE State: PUBLISHED
Explain CVE-2010-1492
Directory traversal vulnerability in help/frameRight.php in Elastix 1.6.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the id_nodo parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected Products: n/a
References: [{'name': '39610', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39610'}, {'name': '39164', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39164'}, {'name': '63936', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/63936'}]
CVE State: PUBLISHED
Explain CVE-2010-1493
SQL injection vulnerability in the AWDwall (com_awdwall) component before 1.5.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cbuser parameter in an awdwall action to index.php.
Affected Products: n/a
References: [{'name': '38194', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/38194'}, {'name': '39553', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39553'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.awdwall.com/index.php/awdwall-updates-logs-'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/joomlaawdwall-lfisql.txt'}, {'name': 'comawdwall-itemid-sql-injection(57694)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57694'}, {'name': '12113', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12113'}, {'name': '63942', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/63942'}]
CVE State: PUBLISHED
Explain CVE-2010-1494
Directory traversal vulnerability in the AWDwall (com_awdwall) component 1.5.4 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
Affected Products: n/a
References: [{'name': '39553', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39553'}, {'name': '39331', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39331'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/joomlaawdwall-lfisql.txt'}, {'name': '63943', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/63943'}, {'name': 'comawdwall-controller-file-include(57693)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57693'}, {'name': '12113', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12113'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.awdwall.com/index.php/awdwall-updates-logs-'}]
CVE State: PUBLISHED
Explain CVE-2010-1495
Directory traversal vulnerability in the Matamko (com_matamko) component 1.01 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
Affected Products: n/a
References: [{'name': '12286', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12286'}, {'name': '39523', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39523'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/joomlamatamko-lfi.txt'}, {'name': '63918', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/63918'}, {'name': '39550', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39550'}, {'name': 'ADV-2010-0929', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0929'}]
CVE State: PUBLISHED
Explain CVE-2010-1496
SQL injection vulnerability in the JoltCard (com_joltcard) component 1.2.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cardID parameter in a view action to index.php.
Affected Products: n/a
References: [{'name': '12269', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12269'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.xenuser.org/documents/security/joomla_com_joltcard_sqli.txt'}, {'name': '39541', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39541'}, {'name': 'joltcard-index-sql-injection(57910)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57910'}, {'name': '39520', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39520'}, {'name': '63913', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/63913'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/joomlajoltcard-sql.txt'}]
CVE State: PUBLISHED
Explain CVE-2010-1497
Cross-site scripting (XSS) vulnerability in download_proc.php in dl_stats before 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.xenuser.org/documents/security/dl_stats_multiple_vulnerabilities.txt'}, {'name': '39592', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39592'}, {'name': 'ADV-2010-0939', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0939'}, {'name': '63909', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/63909'}, {'name': '12280', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12280'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.xenuser.org/2010/04/18/dl_stats-multiple-vulnerabilities-sqli-xss-unprotected-admin-panel/'}, {'name': 'dlstats-id-xss(57918)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57918'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/dlstats-sqlxssadmin.txt'}, {'name': '39496', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39496'}]
CVE State: PUBLISHED
Explain CVE-2010-1498
Multiple SQL injection vulnerabilities in dl_stats before 2.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) download.php and (2) view_file.php.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.xenuser.org/documents/security/dl_stats_multiple_vulnerabilities.txt'}, {'name': '39592', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39592'}, {'name': 'ADV-2010-0939', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2010/0939'}, {'name': '63908', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/63908'}, {'name': '63907', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/63907'}, {'name': '12280', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12280'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.xenuser.org/2010/04/18/dl_stats-multiple-vulnerabilities-sqli-xss-unprotected-admin-panel/'}, {'name': 'dlstats-id-sql-injection(57917)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57917'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/dlstats-sqlxssadmin.txt'}, {'name': '39496', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39496'}]
CVE State: PUBLISHED
Explain CVE-2010-1499
SQL injection vulnerability in genre_artists.php in MusicBox 3.3 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected Products: n/a
References: [{'name': '39476', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39476'}, {'name': '12303', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/12303'}, {'name': '39581', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39581'}, {'name': '63927', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/63927'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/1004-exploits/musicbox33-sql.txt'}, {'name': 'musicbox-id-sql-injection(57979)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/57979'}]
CVE State: PUBLISHED
Explain CVE-2010-1500
Google Chrome before 4.1.249.1059 does not properly support forms, which has unknown impact and attack vectors, related to a "type confusion error."
Affected Products: n/a
References: [{'name': '39603', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39603'}, {'name': '39544', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39544'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2010/04/stable-update-security-fixes.html'}, {'name': 'oval:org.mitre.oval:def:11906', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11906'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.chromium.org/39443'}]
CVE State: PUBLISHED
Explain CVE-2010-1502
Unspecified vulnerability in Google Chrome before 4.1.249.1059 allows remote attackers to access local files via vectors related to "developer tools."
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:12041', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12041'}, {'name': '39603', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/39603'}, {'name': '39544', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/39544'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.chromium.org/40136'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2010/04/stable-update-security-fixes.html'}]
CVE State: PUBLISHED