Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-0302 State: PUBLISHED Published: 2010-03-05T19:00:00 Last Updated: 2024-08-07T00:45:11.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS before 1.4.4, when kqueue or epoll is used, allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information. NOTE: this vulnerability exists because of an i
. NOTE: some of these details are obtained from third party information. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-3553. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html - http://www.ubuntu.com/usn/USN-906-1 - https://bugzilla.redhat.com/show_bug.cgi?id=557775 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11216 - http://www.vupen.com/english/advisories/2010/1481 - http://cups.org/articles.php?L596 - http://www.securitytracker.com/id?1024124 - http://support.apple.com/kb/HT4188 - http://security.gentoo.org/glsa/glsa-201207-10.xml
ecuritytracker.com/id?1024124 - http://support.apple.com/kb/HT4188 - http://security.gentoo.org/glsa/glsa-201207-10.xml - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037174.html - http://secunia.com/advisories/40220 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:073 - http://cups.org/str.php?L3490 - http://www.securityfocus.com/bid/38510 - http://secunia.com/advisories/38785 - https://rhn.redhat.com/errata/RHSA-2010-0129.html - http://secunia.com/advisories/38979 - http://secunia.com/advisories/38927
CVE ID: CVE-2010-0303 State: PUBLISHED Published: 2010-02-04T18:00:00 Last Updated: 2024-08-07T00:45:11.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: mystring.c in hybserv in IRCD-Hybrid (aka Hybrid2 IRC Services) 1.9.2 through 1.9.4 allows remote attackers to cause a denial of service (daemon crash) via a ":help \t" private message to the MemoServ service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38006 - http://security.debian.org/pool/updates/main/h/hybserv/hybserv_1.9.2-4+lenny2.diff.gz - https://exchange.xforce.ibmcloud.com/vulnerabilities/55992 - http://marc.info/?l=oss-security&m=126476591925300&w=2 - http://sec
exchange.xforce.ibmcloud.com/vulnerabilities/55992 - http://marc.info/?l=oss-security&m=126476591925300&w=2 - http://secunia.com/advisories/38350 - http://www.debian.org/security/2010/dsa-1982 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550389 - http://secunia.com/advisories/38352
CVE ID: CVE-2010-0304 State: PUBLISHED Published: 2010-02-03T18:00:00 Last Updated: 2024-08-07T00:45:11.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a denial of service (crash) via a malformed packet, as demonstrated using a stack-based buffer overflow to the dissect_getaddrsbyname_request function. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2010/dsa-1983 - http://www.wireshark.org/security/wnpa-sec-2010-02.html - http://www.openwall.com/lists/oss-security/2010/01/29/4 - http://www.m
ww.wireshark.org/security/wnpa-sec-2010-02.html - http://www.openwall.com/lists/oss-security/2010/01/29/4 - http://www.metasploit.com/modules/exploit/multi/misc/wireshark_lwres_getaddrbyname - http://secunia.com/advisories/38348 - http://secunia.com/advisories/38829 - http://www.securityfocus.com/bid/37985 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9933 - http://osvdb.org/61987 - http://secunia.com/advisories/38257 - http://www.vupen.com/english/advisories/2010/0239 - http://anonsvn.wireshark.org/viewvc/trunk-1.2/epan/dissectors/packet-lwres.c?view=diff&r1=31596&r2=28492&diff_format=h - http://www.securitytracker.com/id?1023516 - http://www.mandr
/packet-lwres.c?view=diff&r1=31596&r2=28492&diff_format=h - http://www.securitytracker.com/id?1023516 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:031 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55951 - http://www.wireshark.org/security/wnpa-sec-2010-01.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8490 - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036415.html
CVE ID: CVE-2010-0305 State: PUBLISHED Published: 2010-02-03T19:00:00 Last Updated: 2024-08-07T00:45:11.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: ejabberd_c2s.erl in ejabberd before 2.1.3 allows remote attackers to cause a denial of service (daemon crash) via a large number of c2s (aka client2server) messages that trigger a queue overload. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/01/29/1 - http://secunia.com/advisories/38337 - http://www.openwall.com/lists/oss-security/2010/01/29/5 - http://www.osvdb.org/62066 - http://www.vupen.com/english/advisories/2010/0894 - https://exchange.xforce.ibmcloud.com
- http://www.osvdb.org/62066 - http://www.vupen.com/english/advisories/2010/0894 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56025 - http://www.debian.org/security/2010/dsa-2033 - https://support.process-one.net/browse/EJAB-1173 - http://www.securityfocus.com/bid/38003 - http://secunia.com/advisories/39423
CVE ID: CVE-2010-0306 State: PUBLISHED Published: 2010-02-12T19:00:00 Last Updated: 2024-08-07T00:45:11.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) to restrict instruction execution, which allows guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, and replacing an instruction in between emulator entry and instruction fetch, a related issue to CVE-2010-0298. Additional Analyst Notes: - CVE Program Containe
emulator entry and instruction fetch, a related issue to CVE-2010-0298. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=560654 - http://www.securityfocus.com/bid/38158 - https://rhn.redhat.com/errata/RHSA-2010-0088.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10953 - http://www.debian.org/security/2010/dsa-1996 - https://rhn.redhat.com/errata/RHSA-2010-0095.html - http://secunia.com/advisories/38499 - http://secunia.com/advisories/38492
CVE ID: CVE-2010-0307 State: PUBLISHED Published: 2010-02-17T18:00:00 Last Updated: 2024-08-07T00:45:12.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: The load_elf_binary function in fs/binfmt_elf.c in the Linux kernel before 2.6.32.8 on the x86_64 platform does not ensure that the ELF interpreter is available before a call to the SET_PERSONALITY macro, which allows local users to cause a denial of service (system crash) via a 32-bit application that attempts to execute a 64-bit application and then triggers a segmentation fault, as demonstrated by amd64_killer, related to the flush_old_exec function. Additional Analyst Notes: - CVE Program Container: References: - https://o
ller, related to the flush_old_exec function. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10870 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=221af7f87b97431e3ee21ce4b0e77d5411cf1549 - http://www.openwall.com/lists/oss-security/2010/02/01/5 - http://www.ubuntu.com/usn/USN-914-1 - https://bugzilla.redhat.com/show_bug.cgi?id=560547 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.8 - http://www.vupen.com/english/advisories/2010/0638 - http://www.openwall.com/lists/oss-security/2010/02/04/1 - http://www.redhat.com/support/errata/RHSA-2010-
es/2010/0638 - http://www.openwall.com/lists/oss-security/2010/02/04/1 - http://www.redhat.com/support/errata/RHSA-2010-0771.html - https://rhn.redhat.com/errata/RHSA-2010-0146.html - http://secunia.com/advisories/38779 - http://secunia.com/advisories/39649 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html - http://secunia.com/advisories/38922 - http://marc.info/?t=126466700200002&r=1&w=2 - http://www.debian.org/security/2010/dsa-1996 - http://www.globalsecuritymag.com/Vigil-nce-Linux-kernel-denial-of%2C20100202%2C15754.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035159.html - http://secunia.com/advisories/43315 - http://marc.info
roject.org/pipermail/package-announce/2010-February/035159.html - http://secunia.com/advisories/43315 - http://marc.info/?l=linux-mm&m=126466407724382&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:066 - http://www.redhat.com/support/errata/RHSA-2010-0398.html - http://www.openwall.com/lists/oss-security/2010/02/04/9 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://www.openwall.com/lists/oss-security/2010/02/01/1 - http://support.avaya.com/css/P8/documents/100088287 - http://www.securityfocus.com/archive/1/516397/100/0/threaded - http://www.securityfocus.com/bid/38027 - http://secunia.com/advisories/38492
CVE ID: CVE-2010-0308 State: PUBLISHED Published: 2010-02-03T18:00:00 Last Updated: 2024-08-07T00:45:11.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denial of service (assertion failure) via a crafted DNS packet that only contains a header. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38451 - http://secunia.com/advisories/38455 - http://osvdb.org/62044 - http://www.securityfocus.com/bid/37522 - http://www.squid-cache.org/Versions/v3/3.1/changesets/squid-3.1-9853.patch - http://www.squid-cache.org/Versions/v2/HEA
http://www.squid-cache.org/Versions/v3/3.1/changesets/squid-3.1-9853.patch - http://www.squid-cache.org/Versions/v2/HEAD/changesets/12597.patch - https://exchange.xforce.ibmcloud.com/vulnerabilities/56001 - http://events.ccc.de/congress/2009/Fahrplan/attachments/1483_26c3_ipv4_fuckups.pdf - http://www.squid-cache.org/Advisories/SQUID-2010_1.txt - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11270 - http://www.squid-cache.org/Versions/v3/3.0/changesets/squid-3.0-9163.patch - http://www.securitytracker.com/id?1023520 - http://www.vupen.com/english/advisories/2010/0260
CVE ID: CVE-2010-0309 State: PUBLISHED Published: 2010-02-12T19:00:00 Last Updated: 2024-08-07T00:45:12.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly use the pit_state data structure, which allows guest OS users to cause a denial of service (host OS crash or hang) by attempting to read the /dev/port file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38158 - http://www.ubuntu.com/usn/USN-914-1 - http://www.vupen.com/english/advisories/2010/0638 - https://rhn.redhat.com/errata/RHSA-2010-0088.html - http://s
914-1 - http://www.vupen.com/english/advisories/2010/0638 - https://rhn.redhat.com/errata/RHSA-2010-0088.html - http://secunia.com/advisories/38922 - http://www.openwall.com/lists/oss-security/2010/02/02/4 - http://www.debian.org/security/2010/dsa-1996 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11095 - https://bugzilla.redhat.com/show_bug.cgi?id=560887 - http://www.openwall.com/lists/oss-security/2010/02/02/1 - http://www.mail-archive.com/kvm%40vger.kernel.org/msg28002.html - https://rhn.redhat.com/errata/RHSA-2010-0095.html - http://secunia.com/advisories/38492
CVE ID: CVE-2010-0310 State: PUBLISHED Published: 2010-01-14T19:00:00 Last Updated: 2024-08-07T00:45:11.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trusted Extensions in Sun Solaris 10 allows local users to gain privileges via vectors related to omission of unspecified libraries from software updates. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-275410-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8444 - http://secunia.com/advisories/38129 - http://securitytracker.com/id?1023448 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-143502-01-1 - h
38129 - http://securitytracker.com/id?1023448 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-143502-01-1 - http://www.securityfocus.com/bid/37754
CVE ID: CVE-2010-0311 State: PUBLISHED Published: 2010-01-14T19:00:00 Last Updated: 2024-08-07T00:45:11.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun Java System Identity Manager (aka IdM) 8.1.0.5 and 8.1.0.6, when Sun Java System Access Manager, OpenSSO Enterprise 8.0, or IBM Tivoli Access Manager is used, allows remote attackers to obtain administrative access via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37755 - http://securitytracker.com/id?1023447 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55572 - http://sunsolve.sun.com/search/document.do?assetkey=1-66
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55572 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-275010-1 - http://secunia.com/advisories/38130 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-141642-08-1 - http://www.vupen.com/english/advisories/2010/0108 - http://osvdb.org/61658
CVE ID: CVE-2010-0312 State: PUBLISHED Published: 2010-01-14T19:00:00Z Last Updated: 2024-09-16T16:42:43.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_extendedOp function in ibmslapd in IBM Tivoli Directory Server (TDS) 6.2 on Linux allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted SecureWay 3.2 Event Registration Request (aka a 1.3.18.0.2.12.1 request). Additional Analyst Notes: - CVE Program Container: References: - http://intevydis.blogspot.com/2010/01/tivoli-directory-server-62-doextendedop.html - http://securitytracker.com/id?1023433
CVE ID: CVE-2010-0313 State: PUBLISHED Published: 2010-01-14T19:00:00 Last Updated: 2024-08-07T00:45:12.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: The core_get_proxyauth_dn function in ns-slapd in Sun Java System Directory Server Enterprise Edition 7.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted LDAP Search Request message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/55511 - http://intevydis.blogspot.com/2010/01/sun-directory-server-70.html - http://securitytracker.com/id?1023431 - http://www.vupen.com/english/advisories/2010/0085 -
n-directory-server-70.html - http://securitytracker.com/id?1023431 - http://www.vupen.com/english/advisories/2010/0085 - http://www.securityfocus.com/bid/37699 - http://secunia.com/advisories/37978
CVE ID: CVE-2010-0314 State: PUBLISHED Published: 2010-01-14T19:00:00 Last Updated: 2024-08-07T00:45:12.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's URL in the HREF attribute of a stylesheet LINK element, and then reading the document.styleSheets[0].href property value. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 - http://www.vupen.com/english/advisories/2010/2722 - http://www.ubuntu.com/usn/USN-1006-1 - http://secunia.com/advisories/41856 - http
pen.com/english/advisories/2010/2722 - http://www.ubuntu.com/usn/USN-1006-1 - http://secunia.com/advisories/41856 - http://nomoreroot.blogspot.com/2010/01/little-bug-in-safari-and-google-chrome.html - http://www.vupen.com/english/advisories/2011/0552
CVE ID: CVE-2010-0315 State: PUBLISHED Published: 2010-01-14T19:00:00 Last Updated: 2024-08-07T00:45:12.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit before r53607, as used in Google Chrome before 4.0.249.89, allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's URL in the HREF attribute of a stylesheet LINK element, and then reading the document.styleSheets[0].href property value, related to an IFRAME element. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38177 - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisori
: - http://www.securityfocus.com/bid/38177 - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2011/0212 - http://nomoreroot.blogspot.com/2010/01/little-bug-in-safari-and-google-chrome.html - http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs - https://exchange.xforce.ibmcloud.com/vulnerabilities/56215 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55683 - http://securitytracker.com/id?1023583 - http://www.vupen.com/english/advisories/2010/0361 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://trac.webkit.org/changeset/53607 - http://code.google.com/p/chromium/issues/detail?id=32309
11-01/msg00006.html - http://trac.webkit.org/changeset/53607 - http://code.google.com/p/chromium/issues/detail?id=32309 - http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14452 - https://bugs.webkit.org/show_bug.cgi?id=33683 - http://secunia.com/advisories/38545
CVE ID: CVE-2010-0316 State: PUBLISHED Published: 2010-01-15T17:00:00Z Last Updated: 2024-09-16T19:55:44.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Google SketchUp before 7.1 M2 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via a crafted SKP file. Additional Analyst Notes: - CVE Program Container: References: - http://sketchup.google.com/support/bin/answer.py?hl=en&answer=141303 - http://secunia.com/advisories/38187 - http://www.vupen.com/english/advisories/2010/0133
CVE ID: CVE-2010-0317 State: PUBLISHED Published: 2010-01-15T18:00:00 Last Updated: 2024-08-07T00:45:12.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell Netware 6.5 SP8 allows remote attackers to cause a denial of service (NULL pointer dereference, memory consumption, ABEND, and crash) via a large number of malformed or AFP requests that are not properly handled by (1) the CIFS functionality in CIFS.nlm Semantic Agent (Build 163 MP) 3.27 or (2) the AFP functionality in AFPTCP.nlm Build 163 SP 3.27. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisorie
rty information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0041 - http://www.securitytracker.com/id?1023400 - http://protekresearch.blogspot.com/2010/01/prl-cifsnlm-memory-consumption-denial.html - http://www.securityfocus.com/bid/37616 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55389 - http://www.exploit-db.com/exploits/11009 - http://secunia.com/advisories/38114 - http://www.securityfocus.com/archive/1/508731/100/0/threaded
CVE ID: CVE-2010-0318 State: PUBLISHED Published: 2010-01-15T18:00:00 Last Updated: 2024-08-07T00:45:12.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: The replay functionality for ZFS Intent Log (ZIL) in FreeBSD 7.1, 7.2, and 8.0, when creating files during replay of a setattr transaction, uses 7777 permissions instead of the original permissions, which might allow local users to read or modify unauthorized files in opportunistic circumstances after a system crash or power failure. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38124 - http://www.securityfocus.com/bid/37657 - http://www.securitytracker.com/id?1023407 - http://s
nia.com/advisories/38124 - http://www.securityfocus.com/bid/37657 - http://www.securitytracker.com/id?1023407 - http://security.FreeBSD.org/advisories/FreeBSD-SA-10:03.zfs.asc
CVE ID: CVE-2010-0319 State: PUBLISHED Published: 2010-01-15T19:00:00 Last Updated: 2024-08-07T00:45:12.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Docmint 1.0 and 2.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/55549 - http://packetstormsecurity.org/1001-exploits/docmintcms-xss.txt - http://www.securityfocus.com/bid/37721 - http://www.exploit-db.com/exploits/11119 - http://secunia.com/advi
ms-xss.txt - http://www.securityfocus.com/bid/37721 - http://www.exploit-db.com/exploits/11119 - http://secunia.com/advisories/38149
CVE ID: CVE-2010-0320 State: PUBLISHED Published: 2010-01-15T19:00:00 Last Updated: 2024-08-07T00:45:12.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in submitlink.php in Glitter Central Script allows remote attackers to inject arbitrary web script or HTML via the catid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11108 - http://packetstormsecurity.org/1001-exploits/glittercentral-xss.txt - http://secunia.com/advisories/38146 - http://www.osvdb.org/61632 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55537
CVE ID: CVE-2010-0321 State: PUBLISHED Published: 2010-01-15T19:00:00 Last Updated: 2024-08-07T00:45:12.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in jobs/index.php in Jamit Job Board 3.0 allows remote attackers to inject arbitrary web script or HTML via the post_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11073 - http://www.securityfocus.com/bid/37701 - http://secunia.com/advisories/32797 - http://packetstormsecurity.org/1001-exploits/jamitjobboard-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/55500
CVE ID: CVE-2010-0322 State: PUBLISHED Published: 2010-01-15T19:00:00Z Last Updated: 2024-09-17T00:42:17.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the init function in MK-AnydropdownMenu (mk_anydropdownmenu) extension 0.3.28 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/mk_anydropdownmenu/0.4.0/ - http://typo3.org/extensions/repository/view/mk_anydropdownmenu/0.4.0/info/ChangeLog/ - http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/