Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
en.com/english/advisories/2011/0212 - http://secunia.com/advisories/43364 - http://www.vupen.com/english/advisories/2011/0413 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://www.vupen.com/english/advisories/2011/0122 - http://www.securityfocus.com/bid/40363 - https://bugzilla.redhat.com/show_bug.cgi?id=541698 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/42888 - http://www.redhat.com/support/errata/RHSA-2011-0027.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:215 - http://bugs.python.org/issue8678 - http://www.redhat.com/support/errata/RHSA-2011-0260.html
CVE ID: CVE-2010-1450 State: PUBLISHED Published: 2010-05-27T19:00:00 Last Updated: 2024-08-07T01:21:19.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an image file containing crafted data that triggers improper processing within the (1) longimagedata or (2) expandrow function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://support.apple.com/kb/HT4435 - http://www.vupen.com/english/advisories/2011/0212 - http://secunia.com/advisories/43364 - http://www.vupen.com/english/advisori
www.vupen.com/english/advisories/2011/0212 - http://secunia.com/advisories/43364 - http://www.vupen.com/english/advisories/2011/0413 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://www.vupen.com/english/advisories/2011/0122 - https://bugzilla.redhat.com/show_bug.cgi?id=541698 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/42888 - http://www.securityfocus.com/bid/40365 - http://www.redhat.com/support/errata/RHSA-2011-0027.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:215 - http://bugs.python.org/issue8678 - http://www.redhat.com/support/errata/RHSA-2011-0260.html
CVE ID: CVE-2010-1451 State: PUBLISHED Published: 2010-05-07T18:23:00 Last Updated: 2024-08-07T01:21:19.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TSB I-TLB load implementation in arch/sparc/kernel/tsb.S in the Linux kernel before 2.6.33 on the SPARC platform does not properly obtain the value of a certain _PAGE_EXEC_4U bit and consequently does not properly implement a non-executable stack, which makes it easier for context-dependent attackers to exploit stack-based buffer overflows via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/02/24/1 - http://marc.info/?l=linux-sparc&m=12
Container: References: - http://www.openwall.com/lists/oss-security/2010/02/24/1 - http://marc.info/?l=linux-sparc&m=126662196902830&w=2 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.33 - http://www.openwall.com/lists/oss-security/2010/05/05/2 - http://marc.info/?l=linux-sparc&m=126662159602378&w=2 - http://www.debian.org/security/2010/dsa-2053 - http://secunia.com/advisories/39830
CVE ID: CVE-2010-1452 State: PUBLISHED Published: 2010-07-28T19:32:00 Last Updated: 2024-08-07T01:21:19.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow remote attackers to cause a denial of service (process crash) via a request that lacks a path. Additional Analyst Notes: - CVE Program Container: References: - https://issues.apache.org/bugzilla/show_bug.cgi?id=49246 - http://www.vupen.com/english/advisories/2011/0291 - http://www.vupen.com/english/advisories/2010/3064 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12341 - http://lists.apple.c
64 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12341 - http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html - http://www.redhat.com/support/errata/RHSA-2010-0659.html - http://marc.info/?l=apache-announce&m=128009718610929&w=2 - http://marc.info/?l=bugtraq&m=133355494609819&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11683 - http://marc.info/?l=bugtraq&m=129190899612998&w=2 - http://marc.info/?l=bugtraq&m=133355494609819&w=2 - http://httpd.apache.org/security/vulnerabilities_22.html - http://blogs.sun.com/security/entry/cve_2010_1452_mod_dav - http://www.redhat.com/support/errata
lnerabilities_22.html - http://blogs.sun.com/security/entry/cve_2010_1452_mod_dav - http://www.redhat.com/support/errata/RHSA-2011-0897.html - http://www.redhat.com/support/errata/RHSA-2011-0896.html - http://secunia.com/advisories/42367 - http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00008.html - http://marc.info/?l=bugtraq&m=129190899612998&w=2 - http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00009.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.467395 - http://ubuntu.com/usn/usn-1021-1 - http://www.vupen.com/english/advisories/2010/2218 - http://support.apple.com/kb/HT4581 - https://lists.apache.org/thread
http://www.vupen.com/english/advisories/2010/2218 - http://support.apple.com/kb/HT4581 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.a
org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af4
66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r688df6f16f141e966a0a47f817e559312b3da27886f59116a94b273d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re2e23465bbdb17ffe109d21b4f192e6b58221cd7aa8797d530b4cd75%40%3Ccvs.httpd.apache.org%3E - https://lis
che.org/thread.html/re2e23465bbdb17ffe109d21b4f192e6b58221cd7aa8797d530b4cd75%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257
5%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2010-1453 State: PUBLISHED Published: 2010-05-07T17:43:00Z Last Updated: 2024-09-16T18:44:21.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Login form in Piwik 0.1.6 through 0.5.5 allows remote attackers to inject arbitrary web script or HTML via the form_url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://piwik.org/blog/2010/04/piwik-0-6-security-advisory/ - http://www.openwall.com/lists/oss-security/2010/05/05/3 - http://www.vupen.com/english/advisories/2010/1079 - http://www.openwall.com/lists/oss-security/2010/05/05/4 - http://secunia.com/advisories/39666
CVE ID: CVE-2010-1454 State: PUBLISHED Published: 2010-05-19T18:13:00 Last Updated: 2024-08-07T01:21:19.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: com.springsource.tcserver.serviceability.rmi.JmxSocketListener in VMware SpringSource tc Server Runtime 6.0.19 and 6.0.20 before 6.0.20.D, and 6.0.25.A before 6.0.25.A-SR01, does not properly enforce the requirement for an encrypted (aka s2enc) password, which allows remote attackers to obtain JMX interface access via a blank password. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/58684 - http://secunia.com/advisories/39778 - http://www.springsource.com/se
xchange.xforce.ibmcloud.com/vulnerabilities/58684 - http://secunia.com/advisories/39778 - http://www.springsource.com/security/cve-2010-1454 - http://www.securityfocus.com/archive/1/511307/100/0/threaded - http://www.securityfocus.com/bid/40205
CVE ID: CVE-2010-1455 State: PUBLISHED Published: 2010-05-11T23:00:00 Last Updated: 2024-08-07T01:21:19.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1.2.0 through 1.2.7 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed packet trace file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html - http://secunia.com/advisories/43068 - http://www.securityfocus.com/bid/39950 - http://www.vupen.com/english/advisories/2011/0212 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4646 -
d/39950 - http://www.vupen.com/english/advisories/2011/0212 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4646 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4644 - http://secunia.com/advisories/39661 - http://www.wireshark.org/security/wnpa-sec-2010-03.html - http://www.wireshark.org/security/wnpa-sec-2010-04.html - http://www.vupen.com/english/advisories/2010/1081 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:099 - http://secunia.com/advisories/42877 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://www.vupen.com/english/advisories/2011/0076 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58362 - http://www.openwall.
pen.com/english/advisories/2011/0076 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58362 - http://www.openwall.com/lists/oss-security/2010/05/07/7 - http://www.osvdb.org/64363 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7331
CVE ID: CVE-2010-1456 State: REJECTED Published: 2010-05-19T21:00:00Z Last Updated: 2024-09-17T01:56:49.511Z Description: No description available.
CVE ID: CVE-2010-1457 State: PUBLISHED Published: 2010-05-12T01:00:00Z Last Updated: 2024-08-07T01:21:19.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tools/gdomap.c in gdomap in GNUstep Base before 1.20.0 allows local users to read arbitrary files via a (1) -c or (2) -a option, which prints file contents in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39746 - http://www.openwall.com/lists/oss-security/2010/05/07/6 - http://savannah.gnu.org/bugs/?29755 - http://thread.gmane.org/gmane.comp.lib.gnustep.bugs/12336 - http://ftpmain.gnustep.org/pub/gnustep/core/gnustep-base-1.20.0.tar.gz - http://www.securityfoc
lib.gnustep.bugs/12336 - http://ftpmain.gnustep.org/pub/gnustep/core/gnustep-base-1.20.0.tar.gz - http://www.securityfocus.com/bid/40005 - https://bugs.launchpad.net/ubuntu/+source/gnustep-base/+bug/573108
CVE ID: CVE-2010-1458 State: PUBLISHED Published: 2010-04-20T16:00:00 Last Updated: 2024-08-07T01:28:40.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Create and Extract Zips TweakFS Zip Utility 1.0 for Flight Simulator X (FSX) allows remote attackers to execute arbitrary code via a long filename in a ZIP archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/63899 - http://secunia.com/advisories/39519 - http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-026-tweakfs-zip-utility-version-1-0-stack-bof/ - http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0242.html - https:/
s-zip-utility-version-1-0-stack-bof/ - http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0242.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/57912 - http://www.corelan.be:8800/advisories.php?id=CORELAN-10-026 - http://www.securityfocus.com/bid/39565
CVE ID: CVE-2010-1459 State: PUBLISHED Published: 2010-05-27T18:32:00 Last Updated: 2024-08-07T01:28:40.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of ASP.NET in Mono before 2.6.4 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by the __VIEWSTATE parameter to 2.0/menu/menu1.aspx in the XSP sample project. Additional Analyst Notes: - CVE Program Container: References: - http://www.mono-project.com/Vulnerabilities#ASP.NET_View_State_Cross-Site_Scripting - http://www.communities.hp.com/securitysoftware/blogs/spilabs/archive/2010/04/29/asp-net-cross
ate_Cross-Site_Scripting - http://www.communities.hp.com/securitysoftware/blogs/spilabs/archive/2010/04/29/asp-net-cross-site-scripting-followup-mono.aspx - http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html - http://www.securityfocus.com/bid/40351 - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
CVE ID: CVE-2010-1460 State: PUBLISHED Published: 2010-04-16T18:00:00 Last Updated: 2024-08-07T01:28:40.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IBM BladeCenter with Advanced Management Module (AMM) firmware before bpet50g does not properly perform interrupt sharing for USB and iSCSI, which allows remote attackers to cause a denial of service (management module reboot) via TCP packets with malformed application data. Additional Analyst Notes: - CVE Program Container: References: - http://www-947.ibm.com/systems/support/supportsite.wss/docdisplay?lndocid=MIGR-5083945&brandind=5000020 - http://www.securityfocus.com/bid/39499 - http://dsecrg.com/pages/vul/show.php?id=
ndocid=MIGR-5083945&brandind=5000020 - http://www.securityfocus.com/bid/39499 - http://dsecrg.com/pages/vul/show.php?id=149 - http://www.securityfocus.com/archive/1/510744/100/0/threaded
CVE ID: CVE-2010-1461 State: PUBLISHED Published: 2010-04-16T19:00:00 Last Updated: 2024-08-07T01:28:40.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Photo Battle (com_photobattle) component 1.0.1 for Joomla! allows remote attackers to read arbitrary files via the view parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/63800 - http://www.securityfocus.com/bid/39504 - http://www.exploit-db.com/exploits/12232 - http://secunia.com/advisories/39469
CVE ID: CVE-2010-1462 State: PUBLISHED Published: 2010-04-16T19:00:00 Last Updated: 2024-08-07T01:28:40.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in WebAsyst Shop-Script FREE has unknown impact and attack vectors via the sub parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/510741/100/0/threaded - http://www.vupen.com/english/advisories/2010/0882 - http://www.vupen.com/english/research-web.php
CVE ID: CVE-2010-1463 State: PUBLISHED Published: 2010-04-16T19:00:00 Last Updated: 2024-08-07T01:28:40.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in WebAsyst Shop-Script FREE allow attackers to execute arbitrary SQL commands via the (1) add2cart, (2) c_id, (3) categoryID, (4) list_price, (5) name, (6) new_offer, (7) price, (8) product_code, (9) productID, (10) rating, and (11) save_product parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/510741/100/0/threaded - http://www.vupen.com/english/advisories/2010/0882 - http://www.vupen.com/english/research-web.php
CVE ID: CVE-2010-1464 State: PUBLISHED Published: 2010-04-16T19:00:00 Last Updated: 2024-08-07T01:28:40.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WebAsyst Shop-Script FREE allow remote attackers to inject arbitrary web script or HTML via the (1) currency_id_left, (2) currency_id_right, (3) darkcolor, (4) lightcolor, (5) middlecolor, and (6) w parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/510741/100/0/threaded - http://www.vupen.com/english/advisories/2010/0882 - http://www.vupen.com/english/research-web.php
CVE ID: CVE-2010-1465 State: PUBLISHED Published: 2010-04-16T19:00:00 Last Updated: 2024-08-07T01:28:40.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Trellian FTP client 3.01, including 3.1.3.1789, allows remote attackers to execute arbitrary code via a long PASV response. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39370 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57778 - http://www.exploit-db.com/exploits/12152
CVE ID: CVE-2010-1466 State: PUBLISHED Published: 2010-04-16T19:00:00 Last Updated: 2024-08-07T01:28:40.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in scr/soustab.php in openUrgence Vaccin 1.03 allows remote attackers to read arbitrary files via the dsn[phptype] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39400 - http://www.securityfocus.com/bid/39412 - http://www.exploit-db.com/exploits/12193 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57816
CVE ID: CVE-2010-1467 State: PUBLISHED Published: 2010-04-16T19:00:00 Last Updated: 2024-08-07T01:28:40.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in openUrgence Vaccin 1.03 allow remote attackers to execute arbitrary PHP code via a URL in the path_om parameter to (1) collectivite.class.php, (2) injection.class.php, (3) utilisateur.class.php, (4) droit.class.php, (5) laboratoire.class.php, (6) vaccin.class.php, (7) effetsecondaire.class.php, (8) medecin.class.php, (9) individu.class.php, and (10) profil.class.php in gen/obj/. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/3
.class.php in gen/obj/. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39400 - http://www.securityfocus.com/bid/39412 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57815 - http://www.exploit-db.com/exploits/12193
CVE ID: CVE-2010-1468 State: PUBLISHED Published: 2010-04-19T19:04:00 Last Updated: 2024-08-07T01:28:40.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Multi-Venue Restaurant Menu Manager (aka MVRMM or com_mv_restaurantmenumanager) component 1.5.2 Stable Update 3 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the mid parameter in a menu_display action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1004-exploits/joomlamvrmm-sql.txt - http://www.exploit-db.com/exploits/12159 - http://www.securityfocus.com/bid/39382 - http://secunia.com/advisor
sql.txt - http://www.exploit-db.com/exploits/12159 - http://www.securityfocus.com/bid/39382 - http://secunia.com/advisories/39217 - http://www.xenuser.org/documents/security/joomla_com_MVRMM_sql.txt
CVE ID: CVE-2010-1469 State: PUBLISHED Published: 2010-04-19T19:04:00 Last Updated: 2024-08-07T01:28:40.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Ternaria Informatica JProject Manager (com_jprojectmanager) component 1.0 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1004-exploits/joomlajprojectmanager-lfi.txt - http://www.exploit-db.com/exploits/12146 - http://www.securityfocus.com/bid/39383 - http://secunia.com/advisori
fi.txt - http://www.exploit-db.com/exploits/12146 - http://www.securityfocus.com/bid/39383 - http://secunia.com/advisories/39282
CVE ID: CVE-2010-1470 State: PUBLISHED Published: 2010-04-19T19:04:00 Last Updated: 2024-08-07T01:28:41.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Web TV (com_webtv) component 1.0 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0858 - http://secunia.com/advisories/39405 - http://packetstormsecurity.org/1004-exploits/joomlawebtv-lfi.txt - http://www.exploit-db.com/exploits/12166
CVE ID: CVE-2010-1471 State: PUBLISHED Published: 2010-04-19T19:04:00 Last Updated: 2024-08-07T01:28:41.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the AddressBook (com_addressbook) component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/12170 - http://packetstormsecurity.org/1004-exploits/joomlaaddressbook-lfi.txt - http://www.vupen.com/english/advisories/2010/0862 - http://secunia.com/advisories/39412
CVE ID: CVE-2010-1472 State: PUBLISHED Published: 2010-04-19T19:04:00 Last Updated: 2024-08-07T01:28:40.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Daily Horoscope (com_horoscope) component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0859 - http://www.exploit-db.com/exploits/12167 - http://secunia.com/advisories/39406 - http://packetstormsecurity.org/1004-exploits/joomlahoroscope-lfi.txt