Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tp://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2011/0212 - http://www.wireshark.org/security/wnpa-sec-2010-06.html - http://www.openwall.com/lists/oss-security/2010/06/11/1 - http://secunia.com/advisories/42877 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://www.vupen.com/english/advisories/2011/0076 - http://secunia.com/advisories/40112 - http://www.securityfocus.com/bid/40728 - http://www.vupen.com/english/advisories/2010/1418 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:113 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11792
CVE ID: CVE-2010-2287 State: PUBLISHED Published: 2010-06-15T01:00:00 Last Updated: 2024-08-07T02:25:07.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.8 through 1.0.13 and 1.2.0 through 1.2.8 has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html - http://www.wireshark.org/security/wnpa-sec-2010-05.html - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2011/0212 - http://www.wireshark.org/security/wnpa-sec-2010-06.html -
es/43068 - http://www.vupen.com/english/advisories/2011/0212 - http://www.wireshark.org/security/wnpa-sec-2010-06.html - http://www.openwall.com/lists/oss-security/2010/06/11/1 - http://secunia.com/advisories/42877 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11836 - http://www.vupen.com/english/advisories/2011/0076 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:144 - http://secunia.com/advisories/40112 - http://www.securityfocus.com/bid/40728 - http://www.vupen.com/english/advisories/2010/1418 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:11
728 - http://www.vupen.com/english/advisories/2010/1418 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:113
CVE ID: CVE-2010-2288 State: PUBLISHED Published: 2010-06-15T01:00:00 Last Updated: 2024-08-07T02:25:07.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in dana/nc/ncrun.cgi in Juniper Networks IVE 6.5R1 (Build 14599) and 6.5R2 (Build 14951) allows remote attackers to inject arbitrary web script or HTML via the DSSignInURL cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2010-05-751&viewMode=view - http://www.securityfocus.com/archive/1/511775/100/0/threaded - http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-17 - h
yfocus.com/archive/1/511775/100/0/threaded - http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-17 - http://www.securitytracker.com/id?1024090 - http://osvdb.org/65288
CVE ID: CVE-2010-2289 State: PUBLISHED Published: 2010-06-15T01:00:00 Last Updated: 2024-08-07T02:25:07.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in dana/home/homepage.cgi in Juniper Networks IVE 6.5R1 (Build 14599) and 6.5R2 (Build 14951) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the Location parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1420 - http://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2010-05-751&viewMode=view - http://osvdb.org/65289 - http://www.securityfocus.com/
p?actionBtn=Search&txtAlertNumber=PSN-2010-05-751&viewMode=view - http://osvdb.org/65289 - http://www.securityfocus.com/archive/1/511775/100/0/threaded - http://secunia.com/advisories/40117 - http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-17 - http://www.securityfocus.com/bid/40729 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59284
CVE ID: CVE-2010-2290 State: PUBLISHED Published: 2010-06-15T01:00:00 Last Updated: 2024-08-07T02:25:07.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cgi-bin/cgix/help in McAfee Unified Threat Management (UTM) Firewall (formerly SnapGear) firmware 3.0.0 through 4.0.6 allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://ngenuity-is.com/advisories/2010/jun/9/mcafee-utm-firewall-help-cross-site-scripting/ - https://kc.mcafee.com/corporate/index?page=content&id=SB10010 - http://www.vupen.com/english/advisories/2010/1413 - http://s
s://kc.mcafee.com/corporate/index?page=content&id=SB10010 - http://www.vupen.com/english/advisories/2010/1413 - http://secunia.com/advisories/40089 - http://secunia.com/advisories/40138 - http://www.securitytracker.com/id?1024091 - http://www.securityfocus.com/archive/1/511771/100/0/threaded
CVE ID: CVE-2010-2291 State: PUBLISHED Published: 2010-06-15T01:00:00 Last Updated: 2024-08-07T02:25:07.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the web interface in snom VoIP Phone firmware 8 before 8.2.35 allows remote attackers to bypass intended restrictions and modify user credentials via unknown vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/65383 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59342 - http://www.securityfocus.com/bid/40771 - http://secunia.com/advisories/37635 - http://wiki.snom.com/Firmware/V8/Re
342 - http://www.securityfocus.com/bid/40771 - http://secunia.com/advisories/37635 - http://wiki.snom.com/Firmware/V8/Release_Notes/8.2.35
CVE ID: CVE-2010-2292 State: PUBLISHED Published: 2010-06-15T01:00:00 Last Updated: 2024-08-07T02:25:07.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Ping tools web interface in Dlink Di-604 router allows remote attackers to inject arbitrary web script or HTML via the IP field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/511751/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/59364 - http://www.securityfocus.com/bid/40691
CVE ID: CVE-2010-2293 State: PUBLISHED Published: 2010-06-15T01:00:00 Last Updated: 2024-08-07T02:25:07.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ping tools web interface in Dlink Di-604 router allows remote authenticated users to cause a denial of service via a large "ip textfield" size. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/511751/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/59366 - http://www.securityfocus.com/bid/40691
CVE ID: CVE-2010-2294 State: PUBLISHED Published: 2010-06-15T01:00:00 Last Updated: 2024-08-07T02:25:07.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Plume CMS 1.2.4 and possibly earlier allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/59308 - http://secunia.com/advisories/40133 - http://www.vupen.com/english/advisories/2010/1430 - http://www.securityfocus.com/archive/1/511761/100/0/threaded
CVE ID: CVE-2010-2295 State: PUBLISHED Published: 2010-06-15T17:48:00 Last Updated: 2024-08-07T02:25:07.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: page/EventHandler.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 does not properly handle a change of the focused frame during the dispatching of keydown, which allows user-assisted remote attackers to redirect keystrokes via a crafted HTML document, aka rdar problem 7018610. NOTE: this might overlap CVE-2010-1422. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.webkit.org/show_bug.cgi?id=26824 - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2011/0212 -
it.org/show_bug.cgi?id=26824 - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2011/0212 - http://secunia.com/advisories/40072 - https://bugzilla.mozilla.org/show_bug.cgi?id=552255 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12003 - http://code.google.com/p/chromium/issues/detail?id=15766 - http://src.chromium.org/viewvc/chrome/branches/WebKit/375/WebCore/page/EventHandler.cpp?r1=48067&r2=48066 - http://googlechromereleases.blogspot.com/2010/06/stable-channel-update.html
CVE ID: CVE-2010-2296 State: PUBLISHED Published: 2010-06-15T17:48:00 Last Updated: 2024-08-07T02:25:07.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: The implementation of unspecified DOM methods in Google Chrome before 5.0.375.70 allows remote attackers to bypass the Same Origin Policy via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40072 - http://code.google.com/p/chromium/issues/detail?id=39985 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12080 - http://googlechromereleases.blogspot.com/2010/06/stable-channel-update.html
CVE ID: CVE-2010-2297 State: PUBLISHED Published: 2010-06-15T17:48:00 Last Updated: 2024-08-07T02:25:07.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: rendering/FixedTableLayout.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an HTML document that has a large colspan attribute within a table. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2011/0212 - http://secunia.com/advisories/40072 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.ht
11/0212 - http://secunia.com/advisories/40072 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://code.google.com/p/chromium/issues/detail?id=42723 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11434 - http://googlechromereleases.blogspot.com/2010/06/stable-channel-update.html
CVE ID: CVE-2010-2298 State: PUBLISHED Published: 2010-06-15T17:48:00 Last Updated: 2024-08-07T02:25:07.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: browser/renderer_host/database_dispatcher_host.cc in Google Chrome before 5.0.375.70 on Linux does not properly handle ViewHostMsg_DatabaseOpenFile messages in chroot-based sandboxing, which allows remote attackers to bypass intended sandbox restrictions via vectors involving fchdir and chdir calls. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40072 - http://code.google.com/p/chromium/issues/detail?id=43304 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.m
ode.google.com/p/chromium/issues/detail?id=43304 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14154 - http://googlechromereleases.blogspot.com/2010/06/stable-channel-update.html
CVE ID: CVE-2010-2299 State: PUBLISHED Published: 2010-06-15T17:48:00 Last Updated: 2024-08-07T02:25:07.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Clipboard::DispatchObject function in app/clipboard/clipboard.cc in Google Chrome before 5.0.375.70 does not properly handle CBF_SMBITMAP objects in a ViewHostMsg_ClipboardWriteObjectsAsync message, which might allow remote attackers to execute arbitrary code via vectors involving crafted data from the renderer process, related to a "Type Confusion" issue. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12099 - http://se
: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12099 - http://secunia.com/advisories/40072 - http://code.google.com/p/chromium/issues/detail?id=43307 - http://googlechromereleases.blogspot.com/2010/06/stable-channel-update.html
CVE ID: CVE-2010-2300 State: PUBLISHED Published: 2010-06-15T17:48:00 Last Updated: 2024-08-07T02:25:07.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the Element::normalizeAttributes function in dom/Element.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to handlers for DOM mutation events, aka rdar problem 7948784. NOTE: this might overlap CVE-2010-1759. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2011/0212 - http:/
ontainer: References: - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2011/0212 - http://secunia.com/advisories/40072 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11357 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://code.google.com/p/chromium/issues/detail?id=43315 - http://googlechromereleases.blogspot.com/2010/06/stable-channel-update.html
CVE ID: CVE-2010-2301 State: PUBLISHED Published: 2010-06-15T17:48:00 Last Updated: 2024-08-07T02:25:07.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in editing/markup.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to inject arbitrary web script or HTML via vectors related to the node.innerHTML property of a TEXTAREA element. NOTE: this might overlap CVE-2010-1762. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://code.google.com/p/chromium/issues/detail?id=43902 - http://www.vupen.com/english/advisories/2011/0212 - http://secunia.com/adv
oogle.com/p/chromium/issues/detail?id=43902 - http://www.vupen.com/english/advisories/2011/0212 - http://secunia.com/advisories/40072 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - https://bugs.webkit.org/show_bug.cgi?id=38922 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11861 - http://googlechromereleases.blogspot.com/2010/06/stable-channel-update.html
CVE ID: CVE-2010-2302 State: PUBLISHED Published: 2010-06-15T17:48:00 Last Updated: 2024-08-07T02:32:15.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors involving remote fonts in conjunction with shadow DOM trees, aka rdar problem 8007953. NOTE: this might overlap CVE-2010-1771. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2011/0212 - http://code.google.com/p/chromium/issues/deta
com/advisories/43068 - http://www.vupen.com/english/advisories/2011/0212 - http://code.google.com/p/chromium/issues/detail?id=44740 - http://secunia.com/advisories/40072 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11948 - http://googlechromereleases.blogspot.com/2010/06/stable-channel-update.html
CVE ID: CVE-2010-2303 State: REJECTED Published: 2010-06-15T17:48:00 Last Updated: 2010-09-28T09:00:00 Description: No description available.
CVE ID: CVE-2010-2304 State: REJECTED Published: 2010-06-15T17:48:00 Last Updated: 2010-09-28T09:00:00 Description: No description available.
CVE ID: CVE-2010-2305 State: PUBLISHED Published: 2010-06-16T20:00:00 Last Updated: 2024-08-07T02:32:15.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in an ActiveX control in SSHelper.dll for Symantec Sygate Personal Firewall 5.6 build 2808 allows remote attackers to execute arbitrary code via a long third argument to the SetRegString method. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/13834 - http://osvdb.org/65539 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59408 - http://www.corelan.be:8800/index.php/forum/security-advisories/10-050-sygate-personal-firewall-5-6-build-2808-activex/
CVE ID: CVE-2010-2306 State: PUBLISHED Published: 2010-06-16T20:00:00 Last Updated: 2024-08-07T02:32:15.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default installation of Sourcefire 3D Sensor 1000, 2000, and 9900; and Defense Center 1000; uses the same static, private SSL keys for multiple devices and installations, which allows remote attackers to decrypt SSL traffic via a man-in-the-middle (MITM) attack. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/65470 - https://support.sourcefire.com/notices/notice/1437 - http://secunia.com/advisories/40143 - http://www.securitytracker.com/id?1024092 - http://www.zerodayinitiative.com/advisor
tp://secunia.com/advisories/40143 - http://www.securitytracker.com/id?1024092 - http://www.zerodayinitiative.com/advisories/ZDI-10-107/ - http://www.vupen.com/english/advisories/2010/1438 - http://www.securityfocus.com/archive/1/511792/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/59380
CVE ID: CVE-2010-2307 State: PUBLISHED Published: 2010-06-16T20:00:00 Last Updated: 2024-08-07T02:32:15.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in the web server for Motorola SURFBoard cable modem SBV6120E running firmware SBV6X2X-1.0.0.5-SCM-02-SHPC allow remote attackers to read arbitrary files via (1) "//" (multiple leading slash), (2) ../ (dot dot) sequences, and encoded dot dot sequences in a URL request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/59113 - http://www.securityfocus.com/bid/40550 - http://www.exploit-db.com/exploits/12865 - http://
.com/vulnerabilities/59113 - http://www.securityfocus.com/bid/40550 - http://www.exploit-db.com/exploits/12865 - http://secunia.com/advisories/40054 - http://www.osvdb.org/65249
CVE ID: CVE-2010-2308 State: PUBLISHED Published: 2010-06-16T20:00:00 Last Updated: 2024-08-07T02:32:15.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the filter driver (savonaccessfilter.sys) in Sophos Anti-Virus before 7.6.20 allows local users to gain privileges via crafted arguments to the NtQueryAttributesFile function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40085 - http://dvlabs.tippingpoint.com/advisory/TPTI-10-03 - http://www.sophos.com/support/knowledgebase/article/111126.html - http://www.securityfocus.com/archive/1/511773/100/0/threaded - http://www.securitytracker.com/id?1024089
/111126.html - http://www.securityfocus.com/archive/1/511773/100/0/threaded - http://www.securitytracker.com/id?1024089 - http://www.vupen.com/english/advisories/2010/1412
CVE ID: CVE-2010-2309 State: PUBLISHED Published: 2010-06-16T20:00:00 Last Updated: 2024-08-07T02:32:15.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the web server for EvoLogical EvoCam 3.6.6 and 3.6.7 allows remote attackers to execute arbitrary code via a long GET request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39988 - http://www.securityfocus.com/bid/40489 - http://www.exploit-db.com/exploits/13735
CVE ID: CVE-2010-2310 State: PUBLISHED Published: 2010-06-16T20:00:00 Last Updated: 2024-08-07T02:32:15.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: SolarWinds TFTP Server 10.4.0.13 allows remote attackers to cause a denial of service (crash) via a long write request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/59419 - http://www.exploit-db.com/exploits/13836 - http://osvdb.org/65540 - http://www.securityfocus.com/bid/40824
CVE ID: CVE-2010-2311 State: PUBLISHED Published: 2010-06-16T20:00:00 Last Updated: 2024-08-07T02:32:16.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Power Tab Editor 1.7 build 80 allows user-assisted remote attackers to execute arbitrary code via a .ptb file with a long font name. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40216 - http://osvdb.org/65482 - http://www.exploit-db.com/exploits/13820 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59377 - http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-049-power-tab-editor-v1-7-build-80-buffer-overflow/
CVE ID: CVE-2010-2312 State: PUBLISHED Published: 2010-06-16T20:00:00 Last Updated: 2024-08-07T02:32:15.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in HauntmAx Haunted House Directory Listing CMS allows remote attackers to execute arbitrary SQL commands via the state parameter in a listings action. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/13784 - http://osvdb.org/65431 - http://secunia.com/advisories/40162
CVE ID: CVE-2010-2313 State: PUBLISHED Published: 2010-06-17T16:00:00 Last Updated: 2024-08-07T02:32:16.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Anodyne Productions SIMM Management System (SMS) 2.6.10, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/59063 - http://www.vupen.com/english/advisories/2010/1330 - http://www.securityfocus.com/bid/40543
d.com/vulnerabilities/59063 - http://www.vupen.com/english/advisories/2010/1330 - http://www.securityfocus.com/bid/40543 - http://www.exploit-db.com/exploits/12848/ - http://secunia.com/advisories/40009 - http://packetstormsecurity.org/1006-exploits/simm-lfi.txt - http://osvdb.org/65084
CVE ID: CVE-2010-2314 State: PUBLISHED Published: 2010-06-17T16:00:00Z Last Updated: 2024-09-16T23:22:07.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in nucleus/plugins/NP_Twitter.php in the NP_Twitter Plugin 0.8 and 0.9 for Nucleus, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the DIR_PLUGINS parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/12790/ - http://www.securityfocus.com/bid/40453 - http://www.vupen.com/english/advisories/2010/1284 - http:/
om/exploits/12790/ - http://www.securityfocus.com/bid/40453 - http://www.vupen.com/english/advisories/2010/1284 - http://www.osvdb.org/65007 - http://secunia.com/advisories/39997 - http://packetstormsecurity.org/1005-exploits/nucleustwitter-rfi.txt