Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tps://exchange.xforce.ibmcloud.com/vulnerabilities/64604 - http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf - http://www.securityfocus.com/bid/45767 - http://secunia.com/advisories/42931
CVE ID: CVE-2010-4679 State: PUBLISHED Published: 2011-01-07T11:00:00 Last Updated: 2024-08-07T03:51:18.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) do not properly handle Online Certificate Status Protocol (OCSP) connection failures, which allows remote OCSP responders to cause a denial of service (TCP socket exhaustion) by rejecting connection attempts, aka Bug ID CSCsz36816. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024963 - http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf - http://www.securityfocu
.com/id?1024963 - http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf - http://www.securityfocus.com/bid/45767 - http://secunia.com/advisories/42931 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64605
CVE ID: CVE-2010-4680 State: PUBLISHED Published: 2011-01-07T11:00:00 Last Updated: 2024-08-07T03:51:17.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebVPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) permits the viewing of CIFS shares even when CIFS file browsing has been disabled, which allows remote authenticated users to bypass intended access restrictions via CIFS requests, aka Bug ID CSCsz80777. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024963 - http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf - http://www.securityfoc
r.com/id?1024963 - http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf - http://www.securityfocus.com/bid/45767 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64606 - http://secunia.com/advisories/42931
CVE ID: CVE-2010-4681 State: PUBLISHED Published: 2011-01-07T11:00:00 Last Updated: 2024-08-07T03:51:17.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to bypass SMTP inspection via vectors involving a prepended space character, aka Bug ID CSCte14901. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024963 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64607 - http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf - http://www.securityfocus.com/bid/45767 -
http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf - http://www.securityfocus.com/bid/45767 - http://secunia.com/advisories/42931
CVE ID: CVE-2010-4682 State: PUBLISHED Published: 2011-01-07T11:00:00 Last Updated: 2024-08-07T03:51:18.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to cause a denial of service (memory consumption) by making multiple incorrect LDAP authentication attempts, aka Bug ID CSCtf29867. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024963 - http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf - http://www.securityfocus.com/bid/45767 - http://secunia.com/advisories/42931 - https
a/asa82/release/notes/asarn82.pdf - http://www.securityfocus.com/bid/45767 - http://secunia.com/advisories/42931 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64608
CVE ID: CVE-2010-4683 State: PUBLISHED Published: 2011-01-07T18:00:00 Last Updated: 2024-08-07T03:51:18.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Cisco IOS before 15.0(1)XA5 might allow remote attackers to cause a denial of service (memory consumption) by sending a crafted SIP REGISTER message over UDP, aka Bug ID CSCtg41733. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64588 - http://www.securityfocus.com/bid/45786 - http://www.cisco.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdf
CVE ID: CVE-2010-4684 State: PUBLISHED Published: 2011-01-07T18:00:00 Last Updated: 2024-08-07T03:51:18.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS before 15.0(1)XA1, when certain TFTP debugging is enabled, allows remote attackers to cause a denial of service (device crash) via a TFTP copy over IPv6, aka Bug ID CSCtb28877. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64587 - http://www.cisco.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdf - http://www.securityfocus.com/bid/45769
CVE ID: CVE-2010-4685 State: PUBLISHED Published: 2011-01-07T18:00:00 Last Updated: 2024-08-07T03:51:18.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS before 15.0(1)XA1 does not clear the public key cache upon a change to a certificate map, which allows remote authenticated users to bypass a certificate ban by connecting with a banned certificate that had previously been valid, aka Bug ID CSCta79031. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64586 - http://www.cisco.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdf - http://www.securityfocus.com/bid/45769
CVE ID: CVE-2010-4686 State: PUBLISHED Published: 2011-01-07T18:00:00 Last Updated: 2024-08-07T03:51:18.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: CallManager Express (CME) on Cisco IOS before 15.0(1)XA1 does not properly handle SIP TRUNK traffic that contains rate bursts and a "peculiar" request size, which allows remote attackers to cause a denial of service (memory consumption) by sending this traffic over a long duration, aka Bug ID CSCtb47950. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64585 - http://www.cisco.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdf - http://www.securityfocus.com/b
erabilities/64585 - http://www.cisco.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdf - http://www.securityfocus.com/bid/45769
CVE ID: CVE-2010-4687 State: PUBLISHED Published: 2011-01-07T18:00:00 Last Updated: 2024-08-07T03:51:18.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: STCAPP (aka the SCCP telephony control application) on Cisco IOS before 15.0(1)XA1 does not properly handle multiple calls to a shared line, which allows remote attackers to cause a denial of service (port hang) by simultaneously ending two calls that were controlled by CallManager Express (CME), aka Bug ID CSCtd42552. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64584 - http://www.cisco.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdf - http://www.secu
mcloud.com/vulnerabilities/64584 - http://www.cisco.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdf - http://www.securityfocus.com/bid/45769
CVE ID: CVE-2010-4688 State: PUBLISHED Published: 2011-01-07T22:00:00 Last Updated: 2024-08-07T03:55:34.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) allows remote attackers to cause a denial of service (device crash) by making many SIP calls, aka Bug ID CSCte20030. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024963 - http://www.securityfocus.com/bid/45768 - http://www.cisco.com/en/US/docs/security/asa/asa83/release/notes/asarn83.pdf - https://exchange.xforce.ibmcloud.com/v
- http://www.cisco.com/en/US/docs/security/asa/asa83/release/notes/asarn83.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/64576 - http://secunia.com/advisories/42931
CVE ID: CVE-2010-4689 State: PUBLISHED Published: 2011-01-07T22:00:00 Last Updated: 2024-08-07T03:55:34.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) do not properly preserve ACL behavior after a migration, which allows remote attackers to bypass intended access restrictions via an unspecified type of network traffic that had previously been denied, aka Bug ID CSCte46460. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64575 - http://www.securitytracker.com/id?1024963 - http://www.securityfocus.com/bid/45768 - http://
com/vulnerabilities/64575 - http://www.securitytracker.com/id?1024963 - http://www.securityfocus.com/bid/45768 - http://www.cisco.com/en/US/docs/security/asa/asa83/release/notes/asarn83.pdf
CVE ID: CVE-2010-4690 State: PUBLISHED Published: 2011-01-07T22:00:00 Last Updated: 2024-08-07T03:55:34.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mobile User Security (MUS) service on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) does not properly authenticate HTTP requests from a Web Security appliance (WSA), which might allow remote attackers to obtain sensitive information via a HEAD request, aka Bug ID CSCte53635. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024963 - http://www.securityfocus.com/bid/45768 - http://www.cisco.com/en/US/docs/security/asa/asa83/release/
er.com/id?1024963 - http://www.securityfocus.com/bid/45768 - http://www.cisco.com/en/US/docs/security/asa/asa83/release/notes/asarn83.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/64574 - http://secunia.com/advisories/42931
CVE ID: CVE-2010-4691 State: PUBLISHED Published: 2011-01-07T22:00:00 Last Updated: 2024-08-07T03:55:34.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) allows remote attackers to cause a denial of service (device crash) via multicast traffic, aka Bug IDs CSCtg61810 and CSCtg69742. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64573 - http://www.securitytracker.com/id?1024963 - http://www.securityfocus.com/bid/45768 - http://www.cisco.com/en/US/docs/security/asa/asa83/release/notes/asarn83.
963 - http://www.securityfocus.com/bid/45768 - http://www.cisco.com/en/US/docs/security/asa/asa83/release/notes/asarn83.pdf - http://secunia.com/advisories/42931
CVE ID: CVE-2010-4692 State: PUBLISHED Published: 2011-01-07T22:00:00 Last Updated: 2024-08-07T03:55:34.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) allows remote attackers to cause a denial of service (device crash) via a large number of LAN-to-LAN (aka L2L) IPsec sessions, aka Bug ID CSCth36592. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024963 - http://www.securityfocus.com/bid/45768 - http://www.cisco.com/en/US/docs/security/asa/asa83/release/notes/asarn83.pdf - http://secunia.com/advisories/42931
768 - http://www.cisco.com/en/US/docs/security/asa/asa83/release/notes/asarn83.pdf - http://secunia.com/advisories/42931 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64572
CVE ID: CVE-2010-4693 State: PUBLISHED Published: 2011-01-11T01:00:00 Last Updated: 2024-08-07T03:55:34.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Coppermine Photo Gallery 1.5.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) h and (2) t parameters to help.php, or (3) picfile_XXX parameter to searchnew.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45600 - http://secunia.com/advisories/42751 - http://www.osvdb.org/70173 - http://www.securityfocus.com/archive/1/515479/100/0/threaded - http://www.osvdb.org/70174 - https://exc
svdb.org/70173 - http://www.securityfocus.com/archive/1/515479/100/0/threaded - http://www.osvdb.org/70174 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64344 - http://www.waraxe.us/advisory-79.html
CVE ID: CVE-2010-4694 State: PUBLISHED Published: 2011-01-14T17:00:00 Last Updated: 2024-08-07T03:55:34.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in gif2png.c in gif2png 2.5.3 and earlier might allow context-dependent attackers to cause a denial of service (application crash) or have unspecified other impact via a GIF file that contains many images, leading to long extensions such as .p100 for PNG output files, as demonstrated by a CGI program that launches gif2png, a different vulnerability than CVE-2009-5018. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201203-15.xml - https://bugzilla.redhat.com
- CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201203-15.xml - https://bugzilla.redhat.com/show_bug.cgi?id=547515 - http://openwall.com/lists/oss-security/2010/11/22/12 - http://www.vupen.com/english/advisories/2011/0023 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:009 - http://openwall.com/lists/oss-security/2010/11/22/3 - http://secunia.com/advisories/42796 - http://bugs.gentoo.org/show_bug.cgi?id=346501 - http://cvs.fedoraproject.org/viewvc/rpms/gif2png/devel/gif2png-overflow.patch?root=extras&view=log - https://exchange.xforce.ibmcloud.com/vulnerabilities/64754 - http://www.vupen.com/english/advisories/2010/3036 - http://cvs.fedoraproject.or
rce.ibmcloud.com/vulnerabilities/64754 - http://www.vupen.com/english/advisories/2010/3036 - http://cvs.fedoraproject.org/viewvc/rpms/gif2png/devel/gif2png-overflow.patch?revision=HEAD&root=extras&view=markup - http://openwall.com/lists/oss-security/2010/11/21/1 - http://www.vupen.com/english/advisories/2011/0107 - http://security.gentoo.org/glsa/glsa-201101-01.xml - http://www.securityfocus.com/bid/45815 - http://openwall.com/lists/oss-security/2010/11/22/1 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550978 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051229.html
CVE ID: CVE-2010-4695 State: PUBLISHED Published: 2011-01-14T17:00:00 Last Updated: 2024-08-07T03:55:34.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain Fedora patch for gif2png.c in gif2png 2.5.1 and 2.5.2, as distributed in gif2png-2.5.1-1200.fc12 on Fedora 12 and gif2png_2.5.2-1 on Debian GNU/Linux, truncates a GIF pathname specified on the command line, which might allow remote attackers to create PNG files in unintended directories via a crafted command-line argument, as demonstrated by a CGI program that launches gif2png, a different vulnerability than CVE-2009-5018. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/gls
lity than CVE-2009-5018. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201203-15.xml - http://cvs.fedoraproject.org/viewvc/rpms/gif2png/devel/gif2png-overflow.patch?root=extras&r1=1.1&r2=1.2 - https://bugzilla.redhat.com/show_bug.cgi?id=547515 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64819 - http://cvs.fedoraproject.org/viewvc/rpms/gif2png/devel/gif2png-overflow.patch?root=extras&view=log - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550978 - http://www.securityfocus.com/bid/45920 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051229.html
CVE ID: CVE-2010-4696 State: PUBLISHED Published: 2011-01-18T17:00:00Z Last Updated: 2024-09-17T03:02:29.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL commands via the (1) filter_order or (2) filter_order_Dir parameter in a com_contact action to index.php, a different vulnerability than CVE-2010-4166. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2010/11/12/5 - http://developer.joomla.org
- CVE Program Container: References: - http://openwall.com/lists/oss-security/2010/11/12/5 - http://developer.joomla.org/security/news/9-security/10-core-security/323-20101101-core-sqli-info-disclosurevulnerabilities.html - http://secunia.com/advisories/42133 - http://openwall.com/lists/oss-security/2010/11/12/6
CVE ID: CVE-2010-4697 State: PUBLISHED Published: 2011-01-18T19:00:00 Last Updated: 2024-08-07T03:55:34.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the Zend engine in PHP before 5.2.15 and 5.3.x before 5.3.4 might allow context-dependent attackers to cause a denial of service (heap memory corruption) or have unspecified other impact via vectors related to use of __set, __get, __isset, and __unset methods on objects accessed by a reference. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.php.net/52879 - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://www.php.net/ChangeLog-5.php - http://marc.info/?l=bu
/52879 - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://www.php.net/ChangeLog-5.php - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12528 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65310 - http://www.securityfocus.com/bid/45952
CVE ID: CVE-2010-4698 State: PUBLISHED Published: 2011-01-18T19:00:00 Last Updated: 2024-08-07T03:55:35.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the GD extension in PHP before 5.2.15 and 5.3.x before 5.3.4 allows context-dependent attackers to cause a denial of service (application crash) via a large number of anti-aliasing steps in an argument to the imagepstext function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45338 - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11939 - http://seclists.o
7&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11939 - http://seclists.org/fulldisclosure/2010/Dec/180 - http://www.php.net/ChangeLog-5.php - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://bugs.php.net/53492
CVE ID: CVE-2010-4699 State: PUBLISHED Published: 2011-01-18T19:00:00 Last Updated: 2024-08-07T03:55:34.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iconv_mime_decode_headers function in the Iconv extension in PHP before 5.3.4 does not properly handle encodings that are unrecognized by the iconv and mbstring (aka Multibyte String) implementations, which allows remote attackers to trigger an incomplete output array, and possibly bypass spam detection or have unspecified other impact, via a crafted Subject header in an e-mail message, as demonstrated by the ks_c_5601-1987 character set. Additional Analyst Notes: - CVE Program Container: References: - http://coding.derkei
the ks_c_5601-1987 character set. Additional Analyst Notes: - CVE Program Container: References: - http://coding.derkeiler.com/Archive/PHP/php.general/2007-04/msg00605.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12393 - http://www.php.net/ChangeLog-5.php - http://bugs.php.net/52941 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64963
CVE ID: CVE-2010-4700 State: PUBLISHED Published: 2011-01-18T19:00:00 Last Updated: 2024-08-07T03:55:34.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: The set_magic_quotes_runtime function in PHP 5.3.2 and 5.3.3, when the MySQLi extension is used, does not properly interact with use of the mysqli_fetch_assoc function, which might make it easier for context-dependent attackers to conduct SQL injection attacks via crafted input that had been properly handled in earlier PHP versions. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12620 - http://www.php.net/ChangeLog-5.php -
.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12620 - http://www.php.net/ChangeLog-5.php - http://www.securityfocus.com/bid/46056 - http://bugs.php.net/52221 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64964
CVE ID: CVE-2010-4701 State: PUBLISHED Published: 2011-01-20T18:00:00 Last Updated: 2024-08-07T03:55:34.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft Windows Fax Services Cover Page Editor 5.2 r2 in Windows XP Professional SP3, Server 2003 R2 Enterprise Edition SP2, and Windows 7 Professional allows remote attackers to execute arbitrary code via a long record in a Fax Cover Page (.cov) file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - htt
itional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - http://secunia.com/advisories/42747 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12689 - http://www.securitytracker.com/id?1024925 - http://retrogod.altervista.org/9sg_cov_bof.html - http://www.exploit-db.com/exploits/15839
CVE ID: CVE-2010-4702 State: PUBLISHED Published: 2011-01-20T18:00:00 Last Updated: 2024-08-07T03:55:34.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in JRadio (com_jradio) component before 1.5.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.fxwebdesign.nl/index.php?option=com_content&view=article&id=20&Itemid=56 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64862 - http://www.securityfocus.com/bid/46040 - http://secunia.com/advisories/42600
CVE ID: CVE-2010-4703 State: PUBLISHED Published: 2011-01-20T18:00:00Z Last Updated: 2024-09-17T02:52:16.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in HotWebScripts HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PageId parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/36747 - http://www.securityfocus.com/archive/1/515476 - http://www.securityfocus.com/bid/45567
CVE ID: CVE-2010-4704 State: PUBLISHED Published: 2011-01-22T21:00:00 Last Updated: 2024-08-07T03:55:34.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: libavcodec/vorbis_dec.c in the Vorbis decoder in FFmpeg 0.6.1 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted .ogg file, related to the vorbis_floor0_decode function. NOTE: this might overlap CVE-2011-0480. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:088 - http://www.debian.org/security/2011/dsa-2306 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:061 - https://roundup.ffmpeg.org/iss