Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ecurity/2011/dsa-2306 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:061 - https://roundup.ffmpeg.org/issue2322 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:062 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:112 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:114 - http://secunia.com/advisories/43323 - http://www.ubuntu.com/usn/usn-1104-1/ - http://www.mandriva.com/security/advisories?name=MDVSA-2011:089 - http://ffmpeg.mplayerhq.hu/ - http://git.ffmpeg.org/?p=ffmpeg.git%3Ba=commit%3Bh=3dde66752d59dfdd0f3727efd66e7202b3c75078 - http://www.debian.org/security/2011/dsa-2165 - http://www.vupen.com/english/advisories/2011/1241 - http:/
7202b3c75078 - http://www.debian.org/security/2011/dsa-2165 - http://www.vupen.com/english/advisories/2011/1241 - http://www.securityfocus.com/bid/46294 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:060
CVE ID: CVE-2010-4705 State: PUBLISHED Published: 2011-01-22T21:00:00 Last Updated: 2024-08-07T03:55:35.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the vorbis_residue_decode_internal function in libavcodec/vorbis_dec.c in the Vorbis decoder in FFmpeg, possibly 0.6, has unspecified impact and remote attack vectors, related to the sizes of certain integer data types. NOTE: this might overlap CVE-2011-0480. Additional Analyst Notes: - CVE Program Container: References: - http://git.ffmpeg.org/?p=ffmpeg.git%3Ba=commit%3Bh=366d919016a679d3955f6fe5278fa7ce4f47b81e - http://secunia.com/advisories/43323 - http://www.debian.org/security/2011/dsa-2165 - http://w
955f6fe5278fa7ce4f47b81e - http://secunia.com/advisories/43323 - http://www.debian.org/security/2011/dsa-2165 - http://www.securityfocus.com/bid/46294
CVE ID: CVE-2010-4706 State: PUBLISHED Published: 2011-01-24T18:00:00 Last Updated: 2024-08-07T03:55:35.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pam_sm_close_session function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) 1.1.2 and earlier does not properly handle a failure to determine a certain target uid, which might allow local users to delete unintended files by executing a program that relies on the pam_xauth PAM check. Additional Analyst Notes: - CVE Program Container: References: - http://git.altlinux.org/people/ldv/packages/?p=pam.git%3Ba=commit%3Bh=Linux-PAM-1_1_2-3-g05dafc06cd3dfeb7c4b24942e4e1ae33ff75a123 - http://security.gentoo.org/glsa
/?p=pam.git%3Ba=commit%3Bh=Linux-PAM-1_1_2-3-g05dafc06cd3dfeb7c4b24942e4e1ae33ff75a123 - http://security.gentoo.org/glsa/glsa-201206-31.xml - http://openwall.com/lists/oss-security/2010/10/03/1 - http://www.securityfocus.com/bid/46045 - http://secunia.com/advisories/49711 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65035
CVE ID: CVE-2010-4707 State: PUBLISHED Published: 2011-01-24T18:00:00 Last Updated: 2024-08-07T03:55:34.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: The check_acl function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) 1.1.2 and earlier does not verify that a certain ACL file is a regular file, which might allow local users to cause a denial of service (resource consumption) via a special file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65036 - http://security.gentoo.org/glsa/glsa-201206-31.xml - http://openwall.com/lists/oss-security/2010/10/03/1 - http://git.altlinux.org/people/ldv/
.org/glsa/glsa-201206-31.xml - http://openwall.com/lists/oss-security/2010/10/03/1 - http://git.altlinux.org/people/ldv/packages/?p=pam.git%3Ba=commit%3Bh=Linux-PAM-1_1_2-2-gffe7058c70253d574b1963c7c93002bd410fddc9 - http://www.securityfocus.com/bid/46045 - http://secunia.com/advisories/49711
CVE ID: CVE-2010-4708 State: PUBLISHED Published: 2011-01-24T18:00:00 Last Updated: 2024-08-07T03:55:34.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pam_env module in Linux-PAM (aka pam) 1.1.2 and earlier reads the .pam_environment file in a user's home directory, which might allow local users to run programs with an unintended environment by executing a program that relies on the pam_env PAM check. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65037 - http://security.gentoo.org/glsa/glsa-201206-31.xml - https://bugzilla.redhat.com/show_bug.cgi?id=641335 - http://pam.cvs.sourceforge.net/viewvc/pam/
lsa/glsa-201206-31.xml - https://bugzilla.redhat.com/show_bug.cgi?id=641335 - http://pam.cvs.sourceforge.net/viewvc/pam/Linux-PAM/modules/pam_env/pam_env.8.xml?r1=1.7&r2=1.8 - http://secunia.com/advisories/49711 - http://openwall.com/lists/oss-security/2010/09/27/7 - http://pam.cvs.sourceforge.net/viewvc/pam/Linux-PAM/modules/pam_env/pam_env.c?r1=1.22&r2=1.23 - http://www.securityfocus.com/bid/46046
CVE ID: CVE-2010-4709 State: PUBLISHED Published: 2011-01-28T15:00:00 Last Updated: 2024-08-07T03:55:34.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Automated Solutions Modbus/TCP Master OPC Server before 3.0.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a MODBUS response packet with a crafted length field. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64944 - http://www.securityfocus.com/bid/45974 - http://www.kb.cert.org/vuls/id/768840 - http://www.vupen.com/english/advisories/2011/0209 - http://secunia.com/advisor
- http://www.kb.cert.org/vuls/id/768840 - http://www.vupen.com/english/advisories/2011/0209 - http://secunia.com/advisories/43029 - http://www.exploit-db.com/exploits/16040 - http://automatedsolutions.com/pub/asmbtcpopc/readme.htm - http://www.us-cert.gov/control_systems/pdf/ICSA-10-322-02A.pdf
CVE ID: CVE-2010-4710 State: PUBLISHED Published: 2011-01-28T20:29:00 Last Updated: 2024-08-07T03:55:35.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the addItem method in the Menu widget in YUI before 2.9.0 allows remote attackers to inject arbitrary web script or HTML via a field that is added to a menu, related to documentation that specifies this field as a text field rather than an HTML field, a similar issue to CVE-2010-4569 and CVE-2010-4570. Additional Analyst Notes: - CVE Program Container: References: - http://yuilibrary.com/projects/yui2/ticket/2529231 - http://yuilibrary.com/projects/yui2/ticket/2529228 - https://excha
http://yuilibrary.com/projects/yui2/ticket/2529231 - http://yuilibrary.com/projects/yui2/ticket/2529228 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65180 - http://yuilibrary.com/forum/viewtopic.php?p=12923
CVE ID: CVE-2010-4711 State: PUBLISHED Published: 2011-01-31T19:00:00Z Last Updated: 2024-09-17T04:28:44.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allows remote attackers to execute arbitrary code via a large parameter in a LIST command. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-10-242/ - http://www.novell.com/support/viewContent.do?externalId=7007151&sliceId=1 - http://www.facebook.com/note.php?note_id=477865030928 - https://bugzilla.novell.com/show_bug.cgi?id=647519
CVE ID: CVE-2010-4712 State: PUBLISHED Published: 2011-01-31T19:00:00Z Last Updated: 2024-09-16T18:38:49.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via a Content-Type header containing (1) multiple items separated by ; (semicolon) characters or (2) crafted string data. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-10-238/ - https://bugzilla.novell.com/show_bug.cgi?id=642336 - http://www.novell.com/support/viewContent.do?externalId=7007153&slice
tps://bugzilla.novell.com/show_bug.cgi?id=642336 - http://www.novell.com/support/viewContent.do?externalId=7007153&sliceId=1 - http://www.novell.com/support/viewContent.do?externalId=7007152&sliceId=1 - http://zerodayinitiative.com/advisories/ZDI-10-237/ - https://bugzilla.novell.com/show_bug.cgi?id=647757 - http://www.facebook.com/note.php?note_id=477865030928
CVE ID: CVE-2010-4713 State: PUBLISHED Published: 2011-01-31T19:00:00Z Last Updated: 2024-09-16T23:06:37.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allows remote attackers to execute arbitrary code via a signed integer value in the Content-Type header. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=642338 - http://www.novell.com/support/viewContent.do?externalId=7007154&sliceId=1 - http://zerodayinitiative.com/advisories/ZDI-10-241/ - http://www.facebook.com/note.php?note_id=477865030928
CVE ID: CVE-2010-4714 State: PUBLISHED Published: 2011-01-31T19:00:00Z Last Updated: 2024-09-16T22:08:29.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via a long HTTP Host header to (1) gwpoa.exe in the Post Office Agent, (2) gwmta.exe in the Message Transfer Agent, (3) gwia.exe in the Internet Agent, (4) the WebAccess Agent, or (5) the Monitor Agent. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=7007159&sliceId=1 - http://zerodayinitiative.com/advisories/ZDI-10-247/ - http://www.f
support/viewContent.do?externalId=7007159&sliceId=1 - http://zerodayinitiative.com/advisories/ZDI-10-247/ - http://www.facebook.com/note.php?note_id=477865030928 - https://bugzilla.novell.com/show_bug.cgi?id=627942
CVE ID: CVE-2010-4715 State: PUBLISHED Published: 2011-01-31T19:00:00Z Last Updated: 2024-09-17T03:28:51.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in the (1) WebAccess Agent and (2) Document Viewer Agent components in Novell GroupWise before 8.02HP allow remote attackers to read arbitrary files via unspecified vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40820 - https://bugzilla.novell.com/show_bug.cgi?id=638646 - http://www.novell.com/support/viewContent.do?externalId=7007156&sliceId=1 - https://b
ovell.com/show_bug.cgi?id=638646 - http://www.novell.com/support/viewContent.do?externalId=7007156&sliceId=1 - https://bugzilla.novell.com/show_bug.cgi?id=638644 - http://www.facebook.com/note.php?note_id=477865030928
CVE ID: CVE-2010-4716 State: PUBLISHED Published: 2011-01-31T19:00:00Z Last Updated: 2024-09-17T03:02:29.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the WebPublisher component in Novell GroupWise before 8.02HP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=651159 - http://www.novell.com/support/viewContent.do?externalId=7007158&sliceId=1 - http://www.facebook.com/note.php?note_id=477865030928
CVE ID: CVE-2010-4717 State: PUBLISHED Published: 2011-01-31T19:00:00Z Last Updated: 2024-09-16T23:35:44.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via a long (1) LIST or (2) LSUB command. Additional Analyst Notes: - CVE Program Container: References: - http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=19&Itemid=19 - http://www.novell.com/support/viewContent.do?externalId=7007157&sliceId=1 - http://www.facebook.com/note.php?note_id=477865030928 - https://bugzill
rt/viewContent.do?externalId=7007157&sliceId=1 - http://www.facebook.com/note.php?note_id=477865030928 - https://bugzilla.novell.com/show_bug.cgi?id=635294
CVE ID: CVE-2010-4718 State: PUBLISHED Published: 2011-02-01T22:00:00Z Last Updated: 2024-09-16T23:35:41.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Lyftenbloggie (com_lyftenbloggie) component 1.1.0 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) tag and (2) category parameters to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/view/96761/joomlalyftenbloggie-xss.txt - http://www.securityfocus.com/bid/45468 - http://secunia.com/advisories/42677
CVE ID: CVE-2010-4719 State: PUBLISHED Published: 2011-02-01T22:00:00 Last Updated: 2024-08-07T03:55:35.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in JRadio (com_jradio) component before 1.5.1 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.fxwebdesign.nl/index.php?option=com_content&view=article&id=20&Itemid=56 - http://packetstormsecurity.org/files/view/96751/joomlajradio-lfi.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/64143 - http://www.securityfocus.com/bid/
51/joomlajradio-lfi.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/64143 - http://www.securityfocus.com/bid/45440 - http://secunia.com/advisories/42600 - http://www.exploit-db.com/exploits/15749
CVE ID: CVE-2010-4720 State: PUBLISHED Published: 2011-02-01T22:00:00Z Last Updated: 2024-09-16T16:32:36.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JExtensions JE Auto (com_jeauto) component before 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to the view item page. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/69791 - http://www.securityfocus.com/bid/45366 - http://secunia.com/advisories/42616 - http://www.joomlaextensions.co.in/extensions/components/je-auto.html
CVE ID: CVE-2010-4721 State: PUBLISHED Published: 2011-02-01T22:00:00Z Last Updated: 2024-09-17T04:25:21.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php in Immo Makler allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/69950 - http://www.exploit-db.com/exploits/15754 - http://secunia.com/advisories/42676
CVE ID: CVE-2010-4722 State: PUBLISHED Published: 2011-02-03T16:00:00Z Last Updated: 2024-09-16T20:52:41.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the fetch plugin in Smarty before 3.0.2 has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://smarty-php.googlecode.com/svn/trunk/distribution/change_log.txt
CVE ID: CVE-2010-4723 State: PUBLISHED Published: 2011-02-03T16:00:00Z Last Updated: 2024-09-16T20:47:30.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: Smarty before 3.0.0, when security is enabled, does not prevent access to the (1) dynamic and (2) private object members of an assigned object, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://smarty-php.googlecode.com/svn/trunk/distribution/change_log.txt
CVE ID: CVE-2010-4724 State: PUBLISHED Published: 2011-02-03T16:00:00Z Last Updated: 2024-09-17T02:11:11.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the parser implementation in Smarty before 3.0.0 RC3 have unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://smarty-php.googlecode.com/svn/trunk/distribution/change_log.txt
CVE ID: CVE-2010-4725 State: PUBLISHED Published: 2011-02-03T16:00:00Z Last Updated: 2024-09-16T22:10:28.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Smarty before 3.0.0 RC3 does not properly handle an on value of the asp_tags option in the php.ini file, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://smarty-php.googlecode.com/svn/trunk/distribution/change_log.txt
CVE ID: CVE-2010-4726 State: PUBLISHED Published: 2011-02-03T16:00:00Z Last Updated: 2024-09-17T04:00:03.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the math plugin in Smarty before 3.0.0 RC1 has unknown impact and remote attack vectors. NOTE: this might overlap CVE-2009-1669. Additional Analyst Notes: - CVE Program Container: References: - http://smarty-php.googlecode.com/svn/trunk/distribution/change_log.txt
CVE ID: CVE-2010-4727 State: PUBLISHED Published: 2011-02-03T16:00:00Z Last Updated: 2024-09-16T17:39:15.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Smarty before 3.0.0 beta 7 does not properly handle the <?php and ?> tags, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://smarty-php.googlecode.com/svn/trunk/distribution/change_log.txt
CVE ID: CVE-2010-4728 State: PUBLISHED Published: 2011-02-08T21:00:00Z Last Updated: 2024-09-17T03:43:12.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zikula before 1.3.1 uses the rand and srand PHP functions for random number generation, which makes it easier for remote attackers to defeat protection mechanisms based on randomization by predicting a return value, as demonstrated by the authid protection mechanism. Additional Analyst Notes: - CVE Program Container: References: - http://code.zikula.org/core/ticket/2009
CVE ID: CVE-2010-4729 State: PUBLISHED Published: 2011-02-08T21:00:00Z Last Updated: 2024-09-16T19:25:01.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zikula before 1.2.3 does not use the authid protection mechanism for (1) the lostpassword form and (2) mailpasswd processing, which makes it easier for remote attackers to generate a flood of password requests and possibly conduct cross-site request forgery (CSRF) attacks via multiple form submissions. Additional Analyst Notes: - CVE Program Container: References: - http://code.zikula.org/core/ticket/1979 - http://code.zikula.org/core12/browser/tags/Zikula-1.2.5/src/docs/CHANGELOG
CVE ID: CVE-2010-4730 State: PUBLISHED Published: 2011-02-14T23:00:00Z Last Updated: 2024-09-16T17:08:09.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to read arbitrary files via a .. (dot dot) in the page parameter, a different vulnerability than CVE-2009-4463. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/114560 - http://www.us-cert.gov/control_systems/pdf/ICSA-10
gram Container: References: - http://www.kb.cert.org/vuls/id/114560 - http://www.us-cert.gov/control_systems/pdf/ICSA-10-316-01A.pdf - http://archives.neohapsis.com/archives/bugtraq/2010-10/0002.html
CVE ID: CVE-2010-4731 State: PUBLISHED Published: 2011-02-14T23:00:00Z Last Updated: 2024-09-16T16:18:18.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to read arbitrary files via a full pathname in the file parameter, a different vulnerability than CVE-2009-4463. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/114560 - http://www.us-cert.gov/control_systems/pdf/IC
E Program Container: References: - http://www.kb.cert.org/vuls/id/114560 - http://www.us-cert.gov/control_systems/pdf/ICSA-10-316-01A.pdf - http://archives.neohapsis.com/archives/bugtraq/2010-10/0002.html
CVE ID: CVE-2010-4732 State: PUBLISHED Published: 2011-02-14T23:00:00Z Last Updated: 2024-09-16T17:33:26.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to execute arbitrary code by using a config.html 2.conf action to replace the logo page's GIF image file with a file containing this code, a different vulnerability than CVE-2009-4463. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/114560 - http://www.us-
Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/114560 - http://www.us-cert.gov/control_systems/pdf/ICSA-10-316-01A.pdf - http://archives.neohapsis.com/archives/bugtraq/2010-10/0002.html
CVE ID: CVE-2010-4733 State: PUBLISHED Published: 2011-02-14T23:00:00Z Last Updated: 2024-09-17T01:11:56.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms have a default username and password, which makes it easier for remote attackers to obtain superadmin access via the web interface, a different vulnerability than CVE-2009-4463. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-10-316-01A.pdf - http://archives.neohapsis.com/archives/bugtraq/2010-10/0002
://www.us-cert.gov/control_systems/pdf/ICSA-10-316-01A.pdf - http://archives.neohapsis.com/archives/bugtraq/2010-10/0002.html
CVE ID: CVE-2010-4734 State: PUBLISHED Published: 2011-02-16T01:00:00 Last Updated: 2024-08-07T03:55:35.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the comment feature in Skeletonz CMS 1.0, when the Blog plugin is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Website, and (3) Email parameters. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45081 - http://www.osvdb.org/69514 - http://securityreason.com/securityalert/8081 - http://packetstormsecurity.org
m/bid/45081 - http://www.osvdb.org/69514 - http://securityreason.com/securityalert/8081 - http://packetstormsecurity.org/files/view/96151/skeletonzcms-xss.txt - http://secunia.com/advisories/42385 - http://www.exploit-db.com/exploits/15625
CVE ID: CVE-2010-4735 State: PUBLISHED Published: 2011-02-16T01:00:00Z Last Updated: 2024-09-16T18:39:58.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in shoppingcart.asp in Ecommercemax Solutions Digital-goods seller (DGS) 1.5 allows remote attackers to execute arbitrary SQL commands via the d parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/69630 - http://www.securityfocus.com/bid/45204 - http://www.exploit-db.com/exploits/15687 - http://secunia.com/advisories/42466