Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-0690 State: PUBLISHED Published: 2010-02-23T18:00:00 Last Updated: 2024-08-07T00:59:38.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in CommodityRentals Video Games Rentals allows remote attackers to execute arbitrary SQL commands via the pfid parameter in a catalog action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38555 - http://www.exploit-db.com/exploits/11409 - http://packetstormsecurity.org/1002-exploits/videogamesrental-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/56226 - http://osvdb.org/62295
CVE ID: CVE-2010-0691 State: PUBLISHED Published: 2010-02-23T18:00:00 Last Updated: 2024-08-07T00:59:38.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in druckansicht.php in JTL-Shop 2 allows remote attackers to execute arbitrary SQL commands via the s parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11445 - http://osvdb.org/62329 - http://secunia.com/advisories/38588
CVE ID: CVE-2010-0692 State: PUBLISHED Published: 2010-02-23T18:00:00Z Last Updated: 2024-09-16T19:14:51.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the IP-Tech JQuarks (com_jquarks) Component 0.2.3, and possibly earlier, for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.iptechinside.com/labs/news/show/6 - http://www.securityfocus.com/bid/38203 - http://secunia.com/advisories/38623 - http://www.osvdb.org/62332
CVE ID: CVE-2010-0693 State: PUBLISHED Published: 2010-02-23T18:00:00 Last Updated: 2024-08-07T00:59:38.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in products.php in CommodityRentals Trade Manager Script allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/62294 - http://packetstormsecurity.org/1002-exploits/trademanager-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/56223 - http://secunia.com/advisories/38556 - http://www.exploit-db.com/exploits/11412
CVE ID: CVE-2010-0694 State: PUBLISHED Published: 2010-02-23T18:00:00 Last Updated: 2024-08-07T00:59:38.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the PerchaGallery (com_perchagallery) component before 1.5b for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an editunidad action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://docs.joomla.org/Vulnerable_Extensions_List#New_format_Feed_Starts_Here - https://exchange.xforce.ibmcloud.com/vulnerabilities/55447 - http://packetstormsecurity.org/1001-exploits/joomlaperchagallery-sql.txt - http://www.securityfocus.com/bi
ities/55447 - http://packetstormsecurity.org/1001-exploits/joomlaperchagallery-sql.txt - http://www.securityfocus.com/bid/37642 - http://www.exploit-db.com/exploits/11024
CVE ID: CVE-2010-0695 State: PUBLISHED Published: 2010-02-23T18:00:00Z Last Updated: 2024-09-16T22:08:31.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in pages/index.php in BASIC-CMS allows remote attackers to inject arbitrary web script or HTML via the nav_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1002-exploits/basiccms-sqlxss.txt - http://www.securityfocus.com/bid/38235
CVE ID: CVE-2010-0696 State: PUBLISHED Published: 2010-02-23T18:00:00 Last Updated: 2024-08-07T00:59:38.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos (Jw_allVideos) plugin 3.0 through 3.2 for Joomla! allows remote attackers to read arbitrary files via a ./../.../ (modified dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/62331 - http://www.joomlaworks.gr/content/view/77/34/ - http://www.exploit-db.com/exploits/11447 - http://www.securityfocus.com/bid/38238 - http://secunia.com/advisories/38587
CVE ID: CVE-2010-0697 State: PUBLISHED Published: 2010-02-23T20:00:00 Last Updated: 2024-08-07T00:59:38.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the iTweak Upload module 6.x-1.x before 6.x-1.2 and 6.x-2.x before 6.x-2.3 for Drupal allows remote authenticated users, with create content and upload file permissions, to inject arbitrary web script or HTML via the file name of an uploaded file. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/711074 - http://drupal.org/node/711072 - http://www.securityfocus.com/bid/38292 - http://osvdb.org/62405 - http://secunia.com/advisories/38633 - https:/
711072 - http://www.securityfocus.com/bid/38292 - http://osvdb.org/62405 - http://secunia.com/advisories/38633 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56351 - http://drupal.org/node/717214
CVE ID: CVE-2010-0698 State: PUBLISHED Published: 2010-02-23T20:00:00 Last Updated: 2024-08-07T00:59:38.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in backoffice/login.asp in Dynamicsoft WSC CMS 2.2 allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11507 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56406 - http://secunia.com/advisories/38698 - http://www.securityfocus.com/bid/38335 - http://packetstormsecurity.org/1002-exploits/wsc
secunia.com/advisories/38698 - http://www.securityfocus.com/bid/38335 - http://packetstormsecurity.org/1002-exploits/wsccms-sql.txt
CVE ID: CVE-2010-0699 State: PUBLISHED Published: 2010-02-23T20:00:00Z Last Updated: 2024-09-16T19:35:25.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in VideoSearchScript Pro 3.5 allows remote attackers to inject arbitrary web script or HTML via the q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38701 - http://packetstormsecurity.org/1002-exploits/vss-xss.txt
CVE ID: CVE-2010-0700 State: PUBLISHED Published: 2010-02-23T20:00:00 Last Updated: 2024-08-07T00:59:38.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in WampServer 2.0i allows remote attackers to inject arbitrary web script or HTML via the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/62481 - http://zeroscience.mk/en/vulnerabilities/ZSL-2010-4926.php - http://zeroscience.mk/codes/wamp_xss.txt - http://www.securityfocus.com/bid/38357 - http://secunia.com/advisories/38706 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56417
CVE ID: CVE-2010-0701 State: PUBLISHED Published: 2010-02-23T20:00:00 Last Updated: 2024-08-07T00:59:38.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ForceChangePassword.jsp in Newgen Software OmniDocs allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11393 - http://www.securityfocus.com/bid/38304 - http://osvdb.org/62403 - http://secunia.com/advisories/38527 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56237 - http://packetstormsecurity.org/1002-exploits/omnidocs-sql.txt
CVE ID: CVE-2010-0702 State: PUBLISHED Published: 2010-02-23T20:00:00 Last Updated: 2024-08-07T00:59:39.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in cisco/services/PhonecDirectory.php in Fonality Trixbox 2.2.4 allows remote attackers to execute arbitrary SQL commands via the ID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11508 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56407 - http://packetstormsecurity.org/1002-exploits/tribox-sql.txt - http://www.securityfocus.com/bid/38323
CVE ID: CVE-2010-0703 State: PUBLISHED Published: 2010-02-23T20:00:00 Last Updated: 2024-08-07T00:59:38.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in wa/auth in PortWise SSL VPN 4.6 allows remote attackers to inject arbitrary web script or HTML via the reloadFrame parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38308 - http://secunia.com/advisories/38627 - http://www.securityfocus.com/archive/1/509584/100/0/threaded - http://packetstormsecurity.org/1002-exploits/PR09-04.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/56420 - http://www.procheckup.com/vulnerabi
-exploits/PR09-04.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/56420 - http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-04 - http://osvdb.org/62482
CVE ID: CVE-2010-0704 State: PUBLISHED Published: 2010-02-25T00:00:00Z Last Updated: 2024-09-16T19:30:15.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Portlet Palette in IBM WebSphere Portal 6.0.1.5 wp6015_008_01 allows remote attackers to inject arbitrary web script or HTML via the search field. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM05829 - http://secunia.com/advisories/38574
CVE ID: CVE-2010-0705 State: PUBLISHED Published: 2010-02-25T18:03:00 Last Updated: 2024-08-07T00:59:38.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly validate input to IOCTL 0xb2d60030, which allows local users to cause a denial of service (system crash) or execute arbitrary code to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38363 - http://osvdb.org/62510 - http://secunia.com/advisories/38689 - http://www.
s: - http://www.securityfocus.com/bid/38363 - http://osvdb.org/62510 - http://secunia.com/advisories/38689 - http://www.vupen.com/english/advisories/2010/0449 - http://forum.avast.com/index.php?topic=55484.0 - http://www.securityfocus.com/archive/1/509710/100/0/threaded - http://www.securitytracker.com/id?1023644 - http://secunia.com/advisories/38677 - http://www.trapkit.de/advisories/TKADV2010-003.txt
CVE ID: CVE-2010-0706 State: PUBLISHED Published: 2010-02-25T18:03:00 Last Updated: 2024-08-07T00:59:38.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the login/prompt component in Subex Nikira Fraud Management System allows remote attackers to inject arbitrary web script or HTML via the message parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38564 - http://www.packetstormsecurity.org/1002-exploits/nikara-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/56393 - http://www.securityfocus.com/bid/38311
CVE ID: CVE-2010-0707 State: PUBLISHED Published: 2010-02-25T18:03:00 Last Updated: 2024-08-07T00:59:38.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in add_user.php in Employee Timeclock Software 0.99 allows remote attackers to hijack the authentication of an administrator for requests that create new administrative users. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38662 - http://www.exploit-db.com/exploits/11516 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56410 - http://osvdb.org/62478
CVE ID: CVE-2010-0708 State: PUBLISHED Published: 2010-02-25T19:00:00 Last Updated: 2024-08-07T00:59:38.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in (1) ns-slapd and (2) slapd.exe in Sun Directory Server Enterprise Edition 7.0, Sun Java System Directory Server 5.2, and Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 allow remote attackers to cause a denial of service (daemon crash) via a crafted LDAP search request. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021788.1-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-275711
e.sun.com/search/document.do?assetkey=1-77-1021788.1-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-275711-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-143884-01-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56603
CVE ID: CVE-2010-0709 State: PUBLISHED Published: 2010-02-25T20:00:00 Last Updated: 2024-08-07T00:59:38.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Limny 2.0 allow remote attackers to (1) hijack the authentication of users or administrators for requests that change the email address or password via the user action to index.php, and (2) hijack the authentication of the administrator for requests that create a new user via the admin/modules/user/new action to limny/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11478 - https://exchange.xforce.ibmclou
Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11478 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56318 - http://www.limny.org/ - http://secunia.com/advisories/38616 - http://www.exploit-db.com/exploits/11477 - http://osvdb.org/62389
CVE ID: CVE-2010-0710 State: PUBLISHED Published: 2010-02-25T20:00:00Z Last Updated: 2024-09-16T20:16:54.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in ASPCode CMS 1.5.8, 2.0.0 Build 103, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the newsid parameter when the sec parameter is 26. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/62358 - http://secunia.com/advisories/38596
CVE ID: CVE-2010-0711 State: PUBLISHED Published: 2010-02-25T20:00:00Z Last Updated: 2024-09-16T22:41:33.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in default.asp in ASPCode CMS 1.5.8, 2.0.0 Build 103, and possibly other versions, allows remote attackers to hijack the authentication of an administrator for requests that (1) delete users via the delete action in the ma2 parameter or (2) create administrators via the update action in the ma2 parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/62357 - http://secunia.com/advisories/38596 - http://packetstormsecurity.org/1002-exploits/asp
ences: - http://osvdb.org/62357 - http://secunia.com/advisories/38596 - http://packetstormsecurity.org/1002-exploits/aspcodecms-xssxsrf.txt
CVE ID: CVE-2010-0712 State: PUBLISHED Published: 2010-02-26T17:03:00 Last Updated: 2024-08-07T00:59:38.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in zport/dmd/Events/getJSONEventsInfo in Zenoss 2.3.3, and other versions before 2.5, allow remote authenticated users to execute arbitrary SQL commands via the (1) severity, (2) state, (3) filter, (4) offset, and (5) count parameters. Additional Analyst Notes: - CVE Program Container: References: - http://dev.zenoss.org/trac/changeset/15257 - http://www.ngenuity.org/wordpress/2010/01/14/ngenuity-2010-001-zenoss-getjsoneventsinfo-sql-injection/ - http://osvdb.org/61804 - http://www.securi
dpress/2010/01/14/ngenuity-2010-001-zenoss-getjsoneventsinfo-sql-injection/ - http://osvdb.org/61804 - http://www.securityfocus.com/bid/37802 - http://www.zenoss.com/news/SQL-Injection-and-Cross-Site-Forgery-in-Zenoss-Core-Corrected.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/55670 - http://secunia.com/advisories/38195
CVE ID: CVE-2010-0713 State: PUBLISHED Published: 2010-02-26T17:03:00 Last Updated: 2024-08-07T00:59:38.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Zenoss 2.3.3, and other versions before 2.5, allow remote attackers to hijack the authentication of an administrator for (1) requests that reset user passwords via zport/dmd/ZenUsers/admin, and (2) requests that change user commands, which allows for remote execution of system commands via zport/dmd/userCommands/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37843 - http://www.ngenuity.org/wordpress/2010/01/14/nge
ogram Container: References: - http://www.securityfocus.com/bid/37843 - http://www.ngenuity.org/wordpress/2010/01/14/ngenuity-2010-002-zenoss-multiple-admin-csrf/ - http://osvdb.org/61805 - http://www.securityfocus.com/archive/1/508982/100/0/threaded - http://www.zenoss.com/news/SQL-Injection-and-Cross-Site-Forgery-in-Zenoss-Core-Corrected.html - http://secunia.com/advisories/38195
CVE ID: CVE-2010-0714 State: PUBLISHED Published: 2010-02-26T19:00:00 Last Updated: 2024-08-07T00:59:38.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0 through 5.1.0.5, 6.0.0.0 through 6.0.0.4, 6.0.1.0 through 6.0.1.7, 6.1.0.0 through 6.1.0.3, and 6.1.5.0; and IBM Lotus Quickr services 8.0, 8.0.0.2, 8.1, 8.1.1, and 8.1.1.1 for WebSphere Portal; allows remote attackers to inject arbitrary web script or HTML via the query string. Additional Analyst Notes: - CVE Program Container: References: - http://www.ha
web script or HTML via the query string. Additional Analyst Notes: - CVE Program Container: References: - http://www.hacktics.com/content/advisories/AdvIBM20100224.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/56508 - http://www.securitytracker.com/id?1023660 - http://www.securityfocus.com/archive/1/509744/100/0/threaded - http://www-01.ibm.com/support/docview.wss?uid=swg21421469 - http://www-1.ibm.com/support/docview.wss?uid=swg1PM03233 - http://www.securityfocus.com/bid/38412
CVE ID: CVE-2010-0715 State: PUBLISHED Published: 2010-02-26T19:00:00 Last Updated: 2024-08-07T00:59:38.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0 through 5.1.0.5, 6.0.0.0 through 6.0.0.4, 6.0.1.0 through 6.0.1.7, 6.1.0.0 through 6.1.0.3, and 6.1.5.0; and IBM Lotus Quickr services 8.0, 8.0.0.2, 8.1, 8.1.1, and 8.1.1.1 for WebSphere Portal; allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the query string. Additional Analyst Notes: - CVE Program Container: Reference
eb sites and conduct phishing attacks via the query string. Additional Analyst Notes: - CVE Program Container: References: - http://www.hacktics.com/content/advisories/AdvIBM20100224.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/56602 - http://www.securityfocus.com/archive/1/509744/100/0/threaded - http://www-01.ibm.com/support/docview.wss?uid=swg21421469
CVE ID: CVE-2010-0716 State: PUBLISHED Published: 2010-02-26T19:00:00 Last Updated: 2024-08-07T00:59:39.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: _layouts/Upload.aspx in the Documents module in Microsoft SharePoint before 2010 uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files (aka attachments), which allows remote authenticated users to leverage same-origin relationships and conduct cross-site scripting (XSS) attacks by uploading TXT files, a related issue to CVE-2008-5026. NOTE: the vendor disputes the significance of this issue, because cross-domain isolation can be implemented when needed. Additional
ndor disputes the significance of this issue, because cross-domain isolation can be implemented when needed. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56597 - http://www.hacktics.com/content/advisories/AdvMS20100222.html - http://www.securityfocus.com/archive/1/509683/100/0/threaded
CVE ID: CVE-2010-0717 State: PUBLISHED Published: 2010-02-26T19:00:00 Last Updated: 2024-08-07T00:59:38.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of cfg.packagepages_actions_excluded in MoinMoin before 1.8.7 does not prevent unsafe package actions, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56595 - http://www.openwall.com/lists/oss-security/2010/02/15/2 - http://hg.moinmo.in/moin/1.8/raw-file/1.8.7/docs/CHANGES - http://moinmo.in/MoinMoinRelease1.8 - http://www.debian.org/security/2010/dsa-2014 - http://secunia.com/advisor
HANGES - http://moinmo.in/MoinMoinRelease1.8 - http://www.debian.org/security/2010/dsa-2014 - http://secunia.com/advisories/38903 - http://www.vupen.com/english/advisories/2010/0600
CVE ID: CVE-2010-0718 State: PUBLISHED Published: 2010-02-26T19:00:00 Last Updated: 2024-08-07T00:59:38.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft Windows Media Player 9 and 11.0.5721.5145 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted .mpg file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11531 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56435
CVE ID: CVE-2010-0719 State: PUBLISHED Published: 2010-02-26T19:00:00 Last Updated: 2024-08-07T00:59:38.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified API in Microsoft Windows 2000, Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 does not validate arguments, which allows local users to cause a denial of service (system crash) via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56591 - http://securitytracker.com/id?1023656 - http://www.scmagazineus.com/malta-researchers-find-windows-bug-that-crashes-pcs/article/164439/ - http://osvdb.o
23656 - http://www.scmagazineus.com/malta-researchers-find-windows-bug-that-crashes-pcs/article/164439/ - http://osvdb.org/62660
CVE ID: CVE-2010-0720 State: PUBLISHED Published: 2010-02-26T20:00:00 Last Updated: 2024-08-07T00:59:38.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php in Erotik Auktionshaus allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1002-exploits/erotik-sql.txt - http://4004securityproject.wordpress.com/2009/10/21/erotik-auktionshaus-sql-injection-news-php/ - http://www.osvdb.org/62369 - http://secunia.com/advisories/38614 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56330 - http://www.exploit-db.com/exploits/1
com/advisories/38614 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56330 - http://www.exploit-db.com/exploits/11489