Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-2671 State: PUBLISHED Published: 2010-07-08T22:00:00Z Last Updated: 2024-09-16T22:25:42.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in advancedsearch.php in eZ Publish 3.7.0 through 4.2.0 allows remote attackers to inject arbitrary web script or HTML via the subTreeItem parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.siberas.de/advisories/advisories_2010.html - http://osvdb.org/63239 - http://ez.no/de/content/download/321443/3196351/version/1/file/combined_patch_42.diff - http://ez.no/de/content/download/321164/3192243/version/1/file/16396.diff - http://secunia.com/advisories/
tch_42.diff - http://ez.no/de/content/download/321164/3192243/version/1/file/16396.diff - http://secunia.com/advisories/39101 - http://www.securityfocus.com/bid/38985 - http://ez.no/de/developer/security/security_advisories/ez_publish_4_2/ezsa_2010_001_remote_vulnerability_in_ez_search
CVE ID: CVE-2010-2672 State: PUBLISHED Published: 2010-07-08T22:00:00Z Last Updated: 2024-09-16T20:22:49.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in eZ Publish 3.7.0 through 4.2.0 allow remote attackers to execute arbitrary SQL commands via the (1) SectionID and (2) SearchTimestamp parameters to the search feature and the (3) SearchContentClassAttributeID parameter to the advancedsearch feature. Additional Analyst Notes: - CVE Program Container: References: - http://www.siberas.de/advisories/advisories_2010.html - http://ez.no/de/content/download/321165/3192248/version/1/file/16397.diff - http://osvdb.org/63237 - http://secunia.co
- http://ez.no/de/content/download/321165/3192248/version/1/file/16397.diff - http://osvdb.org/63237 - http://secunia.com/advisories/39101 - http://www.securityfocus.com/bid/38985 - http://ez.no/de/content/download/321166/3192253/version/1/file/16398.diff - http://ez.no/de/developer/security/security_advisories/ez_publish_4_2/ezsa_2010_001_remote_vulnerability_in_ez_search - http://osvdb.org/63238
CVE ID: CVE-2010-2673 State: PUBLISHED Published: 2010-07-08T22:00:00Z Last Updated: 2024-09-17T03:07:56.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in profile_view.php in Devana 1.6.6 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11922 - http://secunia.com/advisories/39121 - http://packetstormsecurity.org/1003-exploits/devana-sql.txt - http://osvdb.org/63278
CVE ID: CVE-2010-2674 State: PUBLISHED Published: 2010-07-08T22:00:00 Last Updated: 2024-08-07T02:39:37.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in TSOKA:CMS 1.1, 1.9, and 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in an articolo action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57246 - http://secunia.com/advisories/39120 - http://packetstormsecurity.org/1003-exploits/tsokacms-sqlxss.txt - http://www.exploit-db.com/exploits/11923 - http://osvdb.org/63277
CVE ID: CVE-2010-2675 State: PUBLISHED Published: 2010-07-08T22:00:00Z Last Updated: 2024-09-17T02:42:45.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in TSOKA:CMS 1.1, 1.9, and 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter in an articolo action. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1003-exploits/tsokacms-sqlxss.txt - http://www.exploit-db.com/exploits/11923
CVE ID: CVE-2010-2676 State: PUBLISHED Published: 2010-07-08T22:00:00 Last Updated: 2024-08-07T02:39:37.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in index.php in Open Web Analytics (OWA) 1.2.3 might allow remote attackers to read arbitrary files via directory traversal sequences in the (1) owa_action and (2) owa_do parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11903 - http://packetstormsecurity.org/1003-exploits/owa123-lfirfi.txt - http://www.ITSecTeam.com/en/vulnerabilities/vulnerability26.htm - http://www.openwebanalytics.com/?p=87 - https://exchange.xforce.i
ITSecTeam.com/en/vulnerabilities/vulnerability26.htm - http://www.openwebanalytics.com/?p=87 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57240
CVE ID: CVE-2010-2677 State: PUBLISHED Published: 2010-07-08T22:00:00 Last Updated: 2024-08-07T02:39:38.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in mw_plugin.php in Open Web Analytics (OWA) 1.2.3, when magic_quotes_gpc is disabled and register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the IP parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwebanalytics.com/?p=87 - http://www.exploit-db.com/exploits/11903 - http://packetstormsecurity.org/1003-exploits/owa123-lfirfi.txt - http
?p=87 - http://www.exploit-db.com/exploits/11903 - http://packetstormsecurity.org/1003-exploits/owa123-lfirfi.txt - http://secunia.com/advisories/39153 - http://www.ITSecTeam.com/en/vulnerabilities/vulnerability26.htm - http://osvdb.org/63288 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57241
CVE ID: CVE-2010-2678 State: PUBLISHED Published: 2010-07-08T22:00:00 Last Updated: 2024-08-07T02:39:37.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in xmap (com_xmap) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39035 - http://www.securityfocus.com/archive/1/510374/100/0/threaded
CVE ID: CVE-2010-2679 State: PUBLISHED Published: 2010-07-08T22:00:00 Last Updated: 2024-08-07T02:39:37.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Weblinks (com_weblinks) component in Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1003-exploits/joomlaweblinks-sql.txt - http://www.securityfocus.com/archive/1/510364/100/0/threaded - http://www.securityfocus.com/bid/39032
CVE ID: CVE-2010-2680 State: PUBLISHED Published: 2010-07-09T19:00:00 Last Updated: 2024-08-07T02:39:37.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the JExtensions JE Section/Property Finder (jesectionfinder) component for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the view parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41163 - http://www.exploit-db.com/exploits/14064 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59796 - http://packetstormsecurity.org/1006-exploits/joomlajesectionfin
s://exchange.xforce.ibmcloud.com/vulnerabilities/59796 - http://packetstormsecurity.org/1006-exploits/joomlajesectionfinder-lfi.txt
CVE ID: CVE-2010-2681 State: PUBLISHED Published: 2010-07-09T19:00:00Z Last Updated: 2024-09-16T22:31:27.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in the SEF404x (com_sef) component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig.absolute.path parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14055 - http://www.vupen.com/english/advisories/2010/1619 - http://www.securityfocus.com/bid/41166
CVE ID: CVE-2010-2682 State: PUBLISHED Published: 2010-07-09T19:00:00 Last Updated: 2024-08-07T02:39:38.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Realtyna Translator (com_realtyna) component 1.0.15 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1004-exploits/joomlarealtyna-lfi.txt - http://www.exploit-db.com/exploits/14017 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57647 - http://www.securityfocus.com/bid/393
b.com/exploits/14017 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57647 - http://www.securityfocus.com/bid/39337
CVE ID: CVE-2010-2683 State: PUBLISHED Published: 2010-07-09T19:00:00Z Last Updated: 2024-09-17T01:06:24.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in result.php in Customer Paradigm PageDirector CMS allows remote attackers to execute arbitrary SQL commands via the sub_catid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/65832 - http://www.securityfocus.com/bid/41196 - http://secunia.com/advisories/40367 - http://www.exploit-db.com/exploits/14112 - http://packetstormsecurity.org/1006-exploits/pagedirector-sql.txt
CVE ID: CVE-2010-2684 State: PUBLISHED Published: 2010-07-09T19:00:00 Last Updated: 2024-08-07T02:39:37.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Customer Paradigm PageDirector CMS allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41184 - http://packetstormsecurity.org/1006-exploits/pagedirector-sqladdadmin.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/59844 - http://www.vupen.com/english/advisories/2010/1633 - http://osvdb.org/65830 - http://secunia.com/advisories/40367 - http://www.expl
.vupen.com/english/advisories/2010/1633 - http://osvdb.org/65830 - http://secunia.com/advisories/40367 - http://www.exploit-db.com/exploits/14089
CVE ID: CVE-2010-2685 State: PUBLISHED Published: 2010-07-09T19:00:00 Last Updated: 2024-08-07T02:39:38.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: siteadmin/adduser.php in Customer Paradigm PageDirector CMS does not properly restrict access, which allows remote attackers to bypass intended restrictions and add administrative users via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/65831 - http://packetstormsecurity.org/1006-exploits/pagedirector-sqladdadmin.txt - http://www.vupen.com/english/advisories/2010/1633 - http://secunia.com/advisories/40367 - http://www.exploit-db.com/exploits/14089
CVE ID: CVE-2010-2686 State: PUBLISHED Published: 2010-07-09T19:00:00 Last Updated: 2024-08-07T02:39:37.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in clientes.asp in the TopManage OLK module 1.91.30 for SAP allow remote attackers to execute arbitrary SQL commands via the (1) PriceFrom, (2) PriceTo, and (3) InvFrom parameters, as reachable from olk/c_p/searchCart.asp, and other unspecified vectors when performing an advanced search. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41208 - http://www.securityfocus.co
alyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41208 - http://www.securityfocus.com/archive/1/512084/100/0/threaded - http://secunia.com/advisories/40424 - http://www.securityfocus.com/archive/1/512135
CVE ID: CVE-2010-2687 State: PUBLISHED Published: 2010-07-09T19:00:00 Last Updated: 2024-08-07T02:39:37.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in printdetail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrary SQL commands via the Id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41059 - http://www.exploit-db.com/exploits/13995 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59671 - http://packetstormsecurity.org/1006-exploits/boatclassifieds-sql.txt - http://secunia.com/advisories/40263 - http://www.osvdb.org/65685
CVE ID: CVE-2010-2688 State: PUBLISHED Published: 2010-07-09T19:00:00 Last Updated: 2024-08-07T02:39:38.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in detail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrary SQL commands via the ID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/13990 - http://www.vupen.com/english/advisories/2010/1576 - http://packetstormsecurity.org/1006-exploits/boatclassdetail-sql.txt - http://www.osvdb.org/65686 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59671 - http://secunia.com/advisories/40263 - http://www.securityfo
https://exchange.xforce.ibmcloud.com/vulnerabilities/59671 - http://secunia.com/advisories/40263 - http://www.securityfocus.com/bid/41046
CVE ID: CVE-2010-2689 State: PUBLISHED Published: 2010-07-09T19:00:00Z Last Updated: 2024-09-16T18:13:16.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in cont_form.php in Internet DM WebDM CMS allows remote attackers to execute arbitrary SQL commands via the cf_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14123 - http://www.securityfocus.com/bid/41246 - http://packetstormsecurity.org/1006-exploits/webdm-sql.txt
CVE ID: CVE-2010-2690 State: PUBLISHED Published: 2010-07-09T19:00:00Z Last Updated: 2024-09-17T03:32:35.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JOOFORGE Gamesbox (com_gamesbox) component 1.0.2, and possibly earlier, for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a consoles action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14126 - http://www.securityfocus.com/bid/41257
CVE ID: CVE-2010-2691 State: PUBLISHED Published: 2010-07-09T19:00:00 Last Updated: 2024-08-07T02:39:38.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in 2daybiz Custom T-Shirt Design Script allow remote attackers to execute arbitrary SQL commands via the (1) sbid parameter to products_details.php, (2) pid parameter to products/products.php, and (3) designid parameter to designview.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.packetstormsecurity.com/1006-exploits/2daybiztshirt-sql.txt - http://osvdb.org/65825 - http://www.exploit-db.com/exploits/14048 - http://secunia.com/advisories/40362 - http://www
t - http://osvdb.org/65825 - http://www.exploit-db.com/exploits/14048 - http://secunia.com/advisories/40362 - http://www.securityfocus.com/bid/41154 - http://osvdb.org/65826 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59790 - http://www.vupen.com/english/advisories/2010/1608 - http://osvdb.org/65824
CVE ID: CVE-2010-2692 State: PUBLISHED Published: 2010-07-09T19:00:00 Last Updated: 2024-08-07T02:39:38.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in 2daybiz Custom T-Shirt Design Script allows remote attackers to inject arbitrary web script or HTML via a review comment. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/65827 - http://www.packetstormsecurity.com/1006-exploits/2daybiztshirt-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/59791 - http://secunia.com/advisories/40362
CVE ID: CVE-2010-2693 State: PUBLISHED Published: 2010-07-13T20:00:00Z Last Updated: 2024-09-16T17:38:08.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeBSD 7.1 through 8.1-PRERELEASE does not copy the read-only flag when creating a duplicate mbuf buffer reference, which allows local users to cause a denial of service (system file corruption) and gain privileges via the sendfile system call. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1787 - http://security.freebsd.org/advisories/FreeBSD-SA-10:07.mbuf.asc - http://www.securitytracker.com/id?1024182 - http://secunia.com/advisories/40567 - http://www.security
A-10:07.mbuf.asc - http://www.securitytracker.com/id?1024182 - http://secunia.com/advisories/40567 - http://www.securityfocus.com/bid/41577
CVE ID: CVE-2010-2694 State: PUBLISHED Published: 2010-07-12T17:00:00Z Last Updated: 2024-09-16T19:14:35.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the redSHOP Component (com_redshop) 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the pid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40535 - http://www.vupen.com/english/advisories/2010/1776 - http://www.securityfocus.com/bid/41533 - http://www.exploit-db.com/exploits/14312
CVE ID: CVE-2010-2695 State: PUBLISHED Published: 2010-07-12T17:00:00 Last Updated: 2024-08-07T02:39:38.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the SFTP/SSH2 virtual server in Xlight FTP Server 3.5.0, 3.5.5, and possibly other versions before 3.6 allows remote authenticated users to read, overwrite, or delete arbitrary files via .. (dot dot) sequences in the (1) ls, (2) rm, (3) rename, and other unspecified commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/512192/100/0/threaded - http://www.xlightftpd.com/whatsnew.htm - https://exchange.xforce.ibmcloud.com/vulnerabilit
ive/1/512192/100/0/threaded - http://www.xlightftpd.com/whatsnew.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/60151 - http://osvdb.org/66037 - http://secunia.com/advisories/40473
CVE ID: CVE-2010-2696 State: PUBLISHED Published: 2010-07-12T17:00:00 Last Updated: 2024-08-07T02:39:37.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in gallery/index.php in Sijio Community Software allows remote attackers to execute arbitrary SQL commands via the parent parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/66155 - http://www.exploit-db.com/exploits/14260 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60177 - http://www.vupen.com/english/advisories/2010/1766
CVE ID: CVE-2010-2697 State: PUBLISHED Published: 2010-07-12T17:00:00 Last Updated: 2024-08-07T02:39:38.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Sijio Community Software allows remote authenticated users to inject arbitrary web script or HTML via the title parameter when adding a new blog, related to edit_blog/index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14260 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60176 - http://osvdb.org/66154 - http://www.vupen.com/english/advisories/2010/
hange.xforce.ibmcloud.com/vulnerabilities/60176 - http://osvdb.org/66154 - http://www.vupen.com/english/advisories/2010/1766 - http://secunia.com/advisories/40492
CVE ID: CVE-2010-2698 State: PUBLISHED Published: 2010-07-12T17:00:00 Last Updated: 2024-08-07T02:39:37.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Sijio Community Software allow remote authenticated users to inject arbitrary web script or HTML via the title parameter when (1) editing a new blog, (2) adding an album, or (3) editing an album. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14260 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60176
ner: References: - http://www.exploit-db.com/exploits/14260 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60176 - http://osvdb.org/66154 - http://secunia.com/advisories/40492
CVE ID: CVE-2010-2699 State: PUBLISHED Published: 2010-07-12T17:00:00Z Last Updated: 2024-09-16T23:21:55.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Edge PHP Clickbank Affiliate Marketplace Script (CBQuick) allows remote attackers to execute arbitrary SQL commands via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14322 - http://www.securityfocus.com/bid/41538 - http://www.vupen.com/english/advisories/2010/1779
CVE ID: CVE-2010-2700 State: PUBLISHED Published: 2010-07-12T17:00:00Z Last Updated: 2024-09-16T17:29:03.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Edge PHP Clickbank Affiliate Marketplace Script (CBQuick) allows remote attackers to inject arbitrary web script or HTML via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14322 - http://www.securityfocus.com/bid/41538
CVE ID: CVE-2010-2701 State: PUBLISHED Published: 2010-07-12T17:00:00 Last Updated: 2024-08-07T02:39:37.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the FathFTP ActiveX control 1.7 allow remote attackers to execute arbitrary code via (1) the GetFromURL member or (2) a long argument to the RasIsConnected method. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14269 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60200
CVE ID: CVE-2010-2702 State: PUBLISHED Published: 2010-07-12T17:00:00 Last Updated: 2024-08-07T02:39:37.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the UGameEngine::UpdateConnectingMessage function in the Unreal engine 1, 2, and 2.5, as used in multiple games including Unreal Tournament 2004, Unreal tournament 2003, Postal 2, Raven Shield, and SWAT4, when downloads are enabled, allows remote attackers to execute arbitrary code via a long LEVEL field in a WELCOME response to a download request. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/66039 - http://secunia.com/advisories/40466 - http://aluigi.altervista.org/adv/u
ntainer: References: - http://osvdb.org/66039 - http://secunia.com/advisories/40466 - http://aluigi.altervista.org/adv/unrealcbof-adv.txt - http://aluigi.org/poc/unrealcbof.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/60142
CVE ID: CVE-2010-2703 State: PUBLISHED Published: 2010-07-27T22:00:00 Last Updated: 2024-08-07T02:39:38.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the execvp_nc function in the ov.dll module in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53, when running on Windows, allows remote attackers to execute arbitrary code via a long HTTP request to webappmon.exe. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1866 - http://www.exploit-db.com/exploits/14916 - http://osvdb.org/66514 - http://www.securityfocus.com/bid/41829 - http://www.securityfocus.com/archive/1/512544/100/0/th