Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-2315 State: PUBLISHED Published: 2010-06-17T16:00:00 Last Updated: 2024-08-07T02:32:15.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in picturelib.php in SmartISoft phpBazar 2.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/59127 - http://www.securityfocus.com/bid/40546 - http://www.exploit-db.com/exploits/12855/
CVE ID: CVE-2010-2316 State: PUBLISHED Published: 2010-06-17T16:00:00Z Last Updated: 2024-09-16T20:51:45.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in default.asp in WmsCms 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) search, (2) sbr, (3) p, and (4) sbl parameters, different vectors than CVE-2007-3137. Additional Analyst Notes: - CVE Program Container: References: - http://www.ariko-security.com/june2010/audyt_bezpieczenstwa_692.html - http://www.vupen.com/english/advisories/2010/1361 - http://www.securityfocus.com/bid/40593 - http://www.exploit-db.com/exploits/13739
CVE ID: CVE-2010-2317 State: PUBLISHED Published: 2010-06-17T16:00:00Z Last Updated: 2024-09-17T03:22:50.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in WmsCms 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) search, (2) sbr, (3) pid, (4) sbl, and (5) FilePath parameters to default.asp; and the (6) sbr, (7) pr, and (8) psPrice parameters to printpage.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.ariko-security.com/june2010/audyt_bezpieczenstwa_692.html - http://www.exploit-db.com/exploits/13739/ - http://www.vupen.com/english/advisories/2010/1361 - http://www.secur
.html - http://www.exploit-db.com/exploits/13739/ - http://www.vupen.com/english/advisories/2010/1361 - http://www.securityfocus.com/bid/40591
CVE ID: CVE-2010-2318 State: PUBLISHED Published: 2010-06-17T16:00:00Z Last Updated: 2024-09-16T22:51:18.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cms_data.php in PHPCityPortal 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1001-exploits/phpcityportal-xss.txt - http://www.securityfocus.com/bid/40532
CVE ID: CVE-2010-2319 State: PUBLISHED Published: 2010-06-17T16:00:00Z Last Updated: 2024-09-16T22:51:04.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in IDevSpot TextAds 2.08 allows remote attackers to execute arbitrary SQL commands via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/13749/ - http://www.securityfocus.com/bid/40592 - http://www.vupen.com/english/advisories/2010/1357
CVE ID: CVE-2010-2320 State: PUBLISHED Published: 2010-08-02T19:00:00 Last Updated: 2024-08-07T02:32:16.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: bozotic HTTP server (aka bozohttpd) before 20100621 allows remote attackers to list the contents of home directories, and determine the existence of user accounts, via multiple requests for URIs beginning with /~ sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www.eterna.com.au/bozohttpd/CHANGES - http://secunia.com/advisories/40737 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60812 - http://security-tracker.debian.org/tracker/CVE-2010-2320 - https://bugs.launchpad.net/ubuntu/+sourc
nerabilities/60812 - http://security-tracker.debian.org/tracker/CVE-2010-2320 - https://bugs.launchpad.net/ubuntu/+source/bozohttpd/+bug/582473 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590298
CVE ID: CVE-2010-2321 State: PUBLISHED Published: 2010-06-18T16:00:00 Last Updated: 2024-08-07T02:32:16.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe InDesign CS3 10.0 allows user-assisted remote attackers to execute arbitrary code via a crafted .indd file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/59132 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4941.php - http://www.osvdb.org/65140 - http://secunia.com/advisories/40050 - http://www.exploit-db.com/exploits/13817 - http://www.securityfocus.com/bid/40565 - http://www.vupen.com/english/advisories/2010/1347
CVE ID: CVE-2010-2322 State: PUBLISHED Published: 2010-06-18T18:00:00 Last Updated: 2024-08-07T02:32:16.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201209-21.xml - https://bugzilla.redhat.com/show_bug.cgi?id=594497 - http://marc.info/?l=oss-security&m=
o.org/glsa/glsa-201209-21.xml - https://bugzilla.redhat.com/show_bug.cgi?id=594497 - http://marc.info/?l=oss-security&m=127602564508766&w=2 - http://www.redhat.com/support/errata/RHSA-2011-0025.html - https://bugzilla.redhat.com/show_bug.cgi?id=601823 - http://www.securityfocus.com/bid/41009 - http://www.vupen.com/english/advisories/2011/0121 - http://packages.debian.org/changelogs/pool/main/f/fastjar/fastjar_0.98-3/changelog - http://secunia.com/advisories/42892 - http://secunia.com/advisories/50786 - https://launchpad.net/bugs/540575 - http://www.osvdb.org/65467
CVE ID: CVE-2010-2323 State: PUBLISHED Published: 2010-06-18T18:00:00Z Last Updated: 2024-09-16T17:07:59.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS might allow attackers to obtain sensitive information by reading the default_create.log file that is associated with profile creation by the BBOWWPFx job and the zPMT. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1411 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM15830 - http://secunia.com/advisories/40096 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM10454
CVE ID: CVE-2010-2324 State: PUBLISHED Published: 2010-06-18T18:00:00Z Last Updated: 2024-09-17T00:17:33.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS allows attackers to perform unspecified "link injection" actions via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1411 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM15829 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM09250 - http://secunia.com/advisories/40096
CVE ID: CVE-2010-2325 State: PUBLISHED Published: 2010-06-18T18:00:00Z Last Updated: 2024-09-16T20:16:47.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related in part to "URL injection." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1411 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM15830 - http://secunia.com/advisories/40096 - http://www-01.ibm.com/support/docview.wss?uid=swg1P
/docview.wss?uid=swg1PM15830 - http://secunia.com/advisories/40096 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM11778
CVE ID: CVE-2010-2326 State: PUBLISHED Published: 2010-06-18T18:00:00Z Last Updated: 2024-09-17T03:33:14.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11, when addNode -trace is used during node federation, allows attackers to obtain sensitive information about CIMMetadataCollectorImpl trace actions by reading the addNode.log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1411 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM10684 - http://www.osvdb.org/65438 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM15830 - http://secunia.com/advisor
84 - http://www.osvdb.org/65438 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM15830 - http://secunia.com/advisories/40096 - http://www.securityfocus.com/bid/40699
CVE ID: CVE-2010-2327 State: PUBLISHED Published: 2010-06-18T18:00:00Z Last Updated: 2024-09-16T16:27:42.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_ibm_ssl in IBM HTTP Server 6.0 before 6.0.2.43, 6.1 before 6.1.0.33, and 7.0 before 7.0.0.11, as used in IBM WebSphere Application Server (WAS) on z/OS, does not properly handle a large HTTP request body in uploading over SSL, which might allow remote attackers to cause a denial of service (daemon fail) via an upload. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1411 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM10270 - http://www.osvdb.org/65439 - h
nglish/advisories/2010/1411 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM10270 - http://www.osvdb.org/65439 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM15830 - http://secunia.com/advisories/40096
CVE ID: CVE-2010-2328 State: PUBLISHED Published: 2010-06-18T18:00:00Z Last Updated: 2024-09-16T21:08:04.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP Channel in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 allows remote attackers to cause a denial of service (NullPointerException) via a large amount of chunked data that uses gzip compression. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM15829 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM08894
CVE ID: CVE-2010-2329 State: PUBLISHED Published: 2010-06-18T20:00:00 Last Updated: 2024-08-07T02:32:16.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Rosoft Audio Converter 4.4.4 allows remote attackers to execute arbitrary code via a long playlist entry in a .m3u file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/65542 - http://packetstormsecurity.org/1006-exploits/rosoft444-overflow.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/59483 - http://secunia.com/advisories/40195 - http://www.securityfocus.com/bid/40878 - http://www.exploit-db.com/exploits/13895
CVE ID: CVE-2010-2330 State: PUBLISHED Published: 2010-06-18T20:00:00 Last Updated: 2024-08-07T02:32:16.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in iSharer File Sharing Wizard 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Content-Length header. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/59434 - http://www.securityfocus.com/bid/40866 - http://osvdb.org/65570 - http://www.exploit-db.com/exploits/13876 - http://secunia.com/advisories/40197 - http://www.s3cur1ty.de/filesharingwizard-advisory-poc-eax - htt
m/exploits/13876 - http://secunia.com/advisories/40197 - http://www.s3cur1ty.de/filesharingwizard-advisory-poc-eax - http://www.vupen.com/english/advisories/2010/1487
CVE ID: CVE-2010-2331 State: PUBLISHED Published: 2010-06-18T20:00:00Z Last Updated: 2024-09-17T03:07:59.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in iSharer File Sharing Wizard 1.5.0 allows remote attackers to execute arbitrary code via a long HEAD request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40928 - http://www.exploit-db.com/exploits/13903 - http://secunia.com/advisories/40197
CVE ID: CVE-2010-2332 State: PUBLISHED Published: 2010-06-18T20:00:00 Last Updated: 2024-08-07T02:32:16.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Impact Financials, Inc. Impact PDF Reader 2.0, 1.2, and other versions for iPhone and iPod touch allows remote attackers to cause a denial of service (server crash) via a "..." body in a POST request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/59433 - http://www.securityfocus.com/bid/40858 - http://www.exploit-db.com/exploits/13871
CVE ID: CVE-2010-2333 State: PUBLISHED Published: 2010-06-18T20:00:00 Last Updated: 2024-08-07T02:32:16.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: LiteSpeed Technologies LiteSpeed Web Server 4.0.x before 4.0.15 allows remote attackers to read the source code of scripts via an HTTP request with a null byte followed by a .txt file extension. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/13850 - http://www.litespeedtech.com/latest/litespeed-web-server-4.0.15-released.html - http://osvdb.org/65476 - http://secunia.com/advisories/40128 - http://www.litespeedtech.com/support/forum/showthread.php?t=4078 - http://seclists.org
://secunia.com/advisories/40128 - http://www.litespeedtech.com/support/forum/showthread.php?t=4078 - http://seclists.org/fulldisclosure/2010/Jun/288 - http://www.securityfocus.com/bid/40815
CVE ID: CVE-2010-2334 State: PUBLISHED Published: 2010-06-18T20:00:00Z Last Updated: 2024-09-16T23:16:21.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in themes/default/download.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remote attackers to read arbitrary files via a .. (dot dot) in the download parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/13856 - http://secunia.com/advisories/40150 - http://osvdb.org/65479 - http://www.yamamah.org/home/?page=39
CVE ID: CVE-2010-2335 State: PUBLISHED Published: 2010-06-18T20:00:00Z Last Updated: 2024-09-16T18:55:50.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remote attackers to execute arbitrary SQL commands via the news parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/13845 - http://www.yamamah.org/home/?page=39
CVE ID: CVE-2010-2336 State: PUBLISHED Published: 2010-06-18T20:00:00Z Last Updated: 2024-09-16T17:52:45.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in Yamamah Photo Gallery 1.00 allows remote attackers to obtain the source code of executable files within the web document root via the download parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/13845 - http://www.yamamah.org/home/?page=39
CVE ID: CVE-2010-2337 State: PUBLISHED Published: 2010-07-27T22:00:00 Last Updated: 2024-08-07T02:32:16.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in RSA Federated Identity Manager 4.0 before 4.0.25 and 4.1 before 4.1.26 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024239 - http://archives.neohapsis.com/archives/bugtraq/2010-07/0187.html - http://secunia.com/advisories/40704 - http://www.securityfocus.com/bid/41850 - https://knowledge.rsasecurity.com/scolcms/set.aspx?id=8692 -
advisories/40704 - http://www.securityfocus.com/bid/41850 - https://knowledge.rsasecurity.com/scolcms/set.aspx?id=8692 - http://osvdb.org/66504 - http://www.vupen.com/english/advisories/2010/1880 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60564
CVE ID: CVE-2010-2338 State: PUBLISHED Published: 2010-06-18T21:00:00 Last Updated: 2024-08-07T02:32:16.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in redir.asp in VU Web Visitor Analyst allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40176 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59396 - http://www.exploit-db.com/exploits/13842 - http://www.vupen.com/english/advisories/2010/1460 - http://packetstorms
396 - http://www.exploit-db.com/exploits/13842 - http://www.vupen.com/english/advisories/2010/1460 - http://packetstormsecurity.org/1006-exploits/vuwebvisitoranalyst-sql.txt - http://osvdb.org/65483
CVE ID: CVE-2010-2339 State: PUBLISHED Published: 2010-06-18T21:00:00 Last Updated: 2024-08-07T02:32:16.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/pages.php in Subdreamer CMS 3.x.x allows remote attackers to execute arbitrary SQL commands via the categoryids[] parameter in an update_pages action. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1476 - http://www.securityfocus.com/bid/40849 - http://www.securityfocus.com/archive/1/511818 - http://packetstormsecurity.org/1006-advisories/major_rls73.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/59441 - http://www.m
security.org/1006-advisories/major_rls73.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/59441 - http://www.majorsecurity.net/subdreamer_cms_sql_injection.php
CVE ID: CVE-2010-2340 State: PUBLISHED Published: 2010-06-18T21:00:00Z Last Updated: 2024-09-16T23:01:00.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in members.php in Arab Portal 2.2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the by parameter in the msearch action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40142 - http://www.securityfocus.com/bid/40735 - http://packetstormsecurity.org/1006-exploits/arabportal22x-sql.txt - http://osvdb.org/65370
CVE ID: CVE-2010-2341 State: PUBLISHED Published: 2010-06-18T21:00:00 Last Updated: 2024-08-07T02:32:16.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in system/application/views/public/commentform.php in EZPX Photoblog 1.2 beta allows remote attackers to execute arbitrary PHP code via a URL in the tpl_base_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/13890 - http://www.vupen.com/english/advisories/2010/1497 - http://packetstormsecurity.org/1006-exploits/ezpxphotoblog-rfi.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/59474 - http://www.securityfocus.com/
loits/ezpxphotoblog-rfi.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/59474 - http://www.securityfocus.com/bid/40881
CVE ID: CVE-2010-2342 State: PUBLISHED Published: 2010-06-21T15:00:00Z Last Updated: 2024-09-17T03:07:50.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in onlinenotebookmanager.asp in DMXReady Online Notebook Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40692 - http://www.exploit-db.com/exploits/13793
CVE ID: CVE-2010-2343 State: PUBLISHED Published: 2010-06-21T15:00:00 Last Updated: 2024-08-07T02:32:16.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in D.R. Software Audio Converter 8.1, 2007, and 8.05 allows remote attackers to execute arbitrary code via a crafted pls playlist file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/59206 - http://secunia.com/advisories/40081 - http://www.exploit-db.com/exploits/13760 - http://osvdb.org/65256 - http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-048-d-r-software-multiple-products/ - http://www.vupen.com/eng
an.be:8800/index.php/forum/security-advisories/corelan-10-048-d-r-software-multiple-products/ - http://www.vupen.com/english/advisories/2010/1387 - http://www.securityfocus.com/bid/40618 - http://www.securityfocus.com/bid/40631 - http://www.exploit-db.com/exploits/13763
CVE ID: CVE-2010-2344 State: PUBLISHED Published: 2010-06-21T15:00:00 Last Updated: 2024-08-07T02:32:16.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in odCMS 1.06, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the Page parameter to (1) _main/index.php, (2) _members/index.php, (3) _forum/index.php, (4) _docs/index.php, and (5) _announcements/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39942 - http://www.osvdb.org/65259 - http://www.osvdb.org/65258 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59247 - http://www.
.osvdb.org/65259 - http://www.osvdb.org/65258 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59247 - http://www.osvdb.org/65260 - http://www.securityfocus.com/bid/40678 - http://www.osvdb.org/65262 - http://holisticinfosec.org/content/view/146/45/ - http://www.osvdb.org/65261
CVE ID: CVE-2010-2345 State: PUBLISHED Published: 2010-06-21T15:00:00 Last Updated: 2024-08-07T02:32:16.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in odCMS 1.06, and possibly earlier, allows remote attackers to hijack the authentication of administrators for requests that change the administrative password, and other unspecified requests. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39942 - http://www.osvdb.org/65263 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59248 - http://holisticinfosec.org/content/view/146/45/
CVE ID: CVE-2010-2347 State: PUBLISHED Published: 2010-06-21T19:00:00 Last Updated: 2024-08-07T02:32:16.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Telnet interface in the SAP J2EE Engine Core (SAP-JEECOR) 6.40 through 7.02, and Server Core (SERVERCORE) 7.10 through 7.30 allows remote authenticated users to bypass a security check and conduct SMB relay attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2010-005 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59502 - http://archives.neohapsis.com/archives/fulldisclosure/2010-06/0371.html - https://service.sa
com/vulnerabilities/59502 - http://archives.neohapsis.com/archives/fulldisclosure/2010-06/0371.html - https://service.sap.com/sap/support/notes/1425847 - http://www.securityfocus.com/archive/1/511855/100/0/threaded - http://secunia.com/advisories/40223 - http://www.securityfocus.com/bid/40916 - http://www.securitytracker.com/id?1024114
CVE ID: CVE-2010-2348 State: PUBLISHED Published: 2010-06-21T19:00:00 Last Updated: 2024-08-07T02:32:16.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Batch Audio Converter Lite Edition 1.0.0.0 and earlier allows remote attackers to execute arbitrary code via a long line in a .WAV file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40254 - http://www.securityfocus.com/bid/40940 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59526 - http://www.exploit-db.com/exploits/13909