Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-4108 State: PUBLISHED Published: 2010-12-08T17:00:00 Last Updated: 2024-08-07T03:34:37.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP HP-UX B.11.11, B.11.23, and B.11.31 does not properly support threaded processes, which allows remote authenticated users to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11945 - http://secunia.com/advisories/42499 - http://www.vupen.com/english/advisories/2010/3130 - http://www.securityfocus.com/bid/45219 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?
ries/2010/3130 - http://www.securityfocus.com/bid/45219 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02586517 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02586517
CVE ID: CVE-2010-4109 State: PUBLISHED Published: 2010-12-08T17:00:00 Last Updated: 2024-08-07T03:34:37.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Contacts Application in HP Palm webOS before 2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted vCard file. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02639302 - http://www.vupen.com/english/advisories/2010/3131 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02639302 - http://www.securitytracker.com/id?1024827
CVE ID: CVE-2010-4110 State: PUBLISHED Published: 2010-12-22T20:00:00 Last Updated: 2024-08-07T03:34:36.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform on Integrity servers allows local users to gain privileges or cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=129243663611240&w=2 - http://secunia.com/advisories/42610 - http://www.securitytracker.com/id?1024892 - http://www.securityfocus.com/bid/45416 - http://marc.info/?l=bugtraq&m=129243663611240&w=2 - http://www.vupen.com/english/advisories/2010/
yfocus.com/bid/45416 - http://marc.info/?l=bugtraq&m=129243663611240&w=2 - http://www.vupen.com/english/advisories/2010/3247
CVE ID: CVE-2010-4111 State: PUBLISHED Published: 2010-12-22T20:00:00 Last Updated: 2024-08-07T03:34:37.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.1.3712 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=129245189832672&w=2 - http://www.securitytracker.com/id?1024897 - http://marc.info/?l=bugtraq&m=129245189832672&w=2
CVE ID: CVE-2010-4112 State: PUBLISHED Published: 2010-12-22T20:00:00 Last Updated: 2024-08-07T03:34:36.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Insight Management Agents before 8.6 allows remote attackers to obtain sensitive information via an unspecified request that triggers disclosure of the full path. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=129244833127572&w=2 - http://www.securitytracker.com/id?1024898 - http://www.securityfocus.com/bid/45423 - http://marc.info/?l=bugtraq&m=129244833127572&w=2 - http://secunia.com/advisories/42603 - http://www.vupen.com/english/advisories/2010/3248
CVE ID: CVE-2010-4113 State: PUBLISHED Published: 2010-12-22T20:00:00 Last Updated: 2024-08-07T03:34:37.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in HP Power Manager (HPPM) before 4.3.2 allows remote attackers to execute arbitrary code via a long Login variable to the management web server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024902 - http://marc.info/?l=bugtraq&m=129251322532373&w=2 - http://www.zerodayinitiative.com/advisories/ZDI-10-292/ - http://marc.info/?l=bugtraq&m=129251322532373&w=2 - http://secunia.com/advisories/42644
CVE ID: CVE-2010-4114 State: PUBLISHED Published: 2010-12-22T20:00:00 Last Updated: 2024-08-07T03:34:37.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP Discovery & Dependency Mapping Inventory (DDMI) 2.5x, 7.5x, and 7.6x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024903 - http://www.securityfocus.com/archive/1/515286 - http://www.securityfocus.com/archive/1/515286 - http://secunia.com/advisories/42637
CVE ID: CVE-2010-4115 State: PUBLISHED Published: 2010-12-17T18:00:00 Last Updated: 2024-08-07T03:34:37.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP StorageWorks Modular Smart Array P2000 G3 firmware TS100R011, TS100R025, TS100P002, TS200R005, TS201R014, and TS201R015 installs an undocumented admin account with a default "!admin" password, which allows remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2010-12/0104.html - http://www.securitytracker.com/id?1024904 - http://marc.info/?l=bugtraq&m=129251637904727&w=2 - http://www.vupen.com/english/advisories/2010/3250 - https:
1024904 - http://marc.info/?l=bugtraq&m=129251637904727&w=2 - http://www.vupen.com/english/advisories/2010/3250 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64125 - http://www.securityfocus.com/archive/1/515262/100/0/threaded - http://secunia.com/advisories/42583 - http://marc.info/?l=bugtraq&m=129251637904727&w=2 - http://www.securityfocus.com/archive/1/515196/100/0/threaded - http://www.securityfocus.com/bid/45386 - http://www.securityfocus.com/archive/1/515251/100/0/threaded
CVE ID: CVE-2010-4116 State: PUBLISHED Published: 2010-12-22T00:00:00 Last Updated: 2024-08-07T03:34:37.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP StorageWorks Storage Mirroring 5.x before 5.2.2.1771.2 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02660122 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02660122 - http://www.securitytracker.com/id?1024916 - http://secunia.com/advisories/42696
CVE ID: CVE-2010-4117 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-4118 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-4119 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-4120 State: PUBLISHED Published: 2010-10-28T20:00:00 Last Updated: 2024-08-07T03:34:37.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0 before 6.1.0-TIV-TAM-FP0006 allow remote attackers to inject arbitrary web script or HTML via (1) the parm1 parameter to ivt/ivtserver, or the method parameter to (2) acl, (3) domain, (4) group, (5) gso, (6) gsogroup, (7) os, (8) pop, (9) rule, (10) user, or (11) webseal in ibm/wpm/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/68892 - http://osvdb.org/68891 - http://osvd
onal Analyst Notes: - CVE Program Container: References: - http://osvdb.org/68892 - http://osvdb.org/68891 - http://osvdb.org/68885 - http://www.vupen.com/english/advisories/2010/2774 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ84918 - http://osvdb.org/68890 - http://osvdb.org/68884 - http://osvdb.org/68893 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62750 - http://www.securityfocus.com/bid/44382 - http://osvdb.org/68886 - http://securitytracker.com/id?1024633 - http://osvdb.org/68889 - http://osvdb.org/68888 - http://osvdb.org/68894 - http://osvdb.org/68887 - http://secunia.com/advisories/41974
CVE ID: CVE-2010-4121 State: PUBLISHED Published: 2010-10-28T20:00:00Z Last Updated: 2024-09-17T03:42:49.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCP-to-ODBC gateway in IBM Tivoli Provisioning Manager for OS Deployment 7.1.1.3 does not require authentication for SQL statements, which allows remote attackers to modify, create, or read database records via a session on TCP port 2020. NOTE: the vendor disputes this issue, stating that the "default Microsoft Access database is not password protected because it is intended to be used for evaluation purposes only. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories
poses only. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-10-194 - http://publib.boulder.ibm.com/infocenter/tivihelp/v3r1/index.jsp?topic=%2Fcom.ibm.tivoli.tpm.osd.doc%2Finstall%2Ftosd_setmsacessdbpwd.html - http://securitytracker.com/id?1024539
CVE ID: CVE-2010-4122 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-4123 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-4124 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-4125 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-4126 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-4127 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-4128 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-4129 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-4130 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-4131 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-4132 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-4133 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-4134 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-4135 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-4136 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-4137 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-4138 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-4139 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-4140 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-4141 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-4142 State: PUBLISHED Published: 2010-11-01T18:00:00Z Last Updated: 2024-09-16T22:08:27.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) SCPC_INITIALIZE, (2) SCPC_INITIALIZE_RF, or (3) SCPC_TXTEVENT packet. NOTE: it was later reported that 1.06 is also affected by one of these requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15259 - http://www.securityfocus.com/bid/44150 - http://aluigi.org/adv/realwin_1-ad
- http://www.exploit-db.com/exploits/15259 - http://www.securityfocus.com/bid/44150 - http://aluigi.org/adv/realwin_1-adv.txt - http://www.exploit-db.com/exploits/15337 - http://secunia.com/advisories/41849
CVE ID: CVE-2010-4143 State: PUBLISHED Published: 2010-11-01T23:00:00Z Last Updated: 2024-09-16T16:18:26.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in chart.php in phpCheckZ 1.1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15284
CVE ID: CVE-2010-4144 State: PUBLISHED Published: 2010-11-01T23:00:00 Last Updated: 2024-08-07T03:34:37.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in radyo.asp in Kisisel Radyo Script allows remote attackers to execute arbitrary SQL commands via the Id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1010-exploits/kisiselradyoscript-disclose.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/62600 - http://www.securityfocus.com/bid/44155 - http://secunia.com/advisories/41816 - http://www.exploit-db.com/exploits/15270
CVE ID: CVE-2010-4145 State: PUBLISHED Published: 2010-11-01T23:00:00Z Last Updated: 2024-09-17T02:06:58.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kisisel Radyo Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for sevvo/eco23.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1010-exploits/kisiselradyoscript-disclose.txt - http://secunia.com/advisories/41816 - http://www.exploit-db.com/exploits/15270
CVE ID: CVE-2010-4146 State: PUBLISHED Published: 2010-11-01T23:00:00 Last Updated: 2024-08-07T03:34:37.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Attachmate Reflection for the Web 2008 R2 (builds 10.1.569 and earlier), 2008 R1, and 9.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://support.attachmate.com/techdocs/1704.html - http://www.securityfocus.com/bid/44123 - http://osvdb.org/68637 - http://secunia.com/advisories/41869 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62564
CVE ID: CVE-2010-4147 State: PUBLISHED Published: 2010-11-01T23:00:00 Last Updated: 2024-08-07T03:34:37.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Pentasoft Avactis Shopping Cart 1.9.1 build 8356 free edition and earlier allow remote attackers to execute arbitrary SQL commands via the User-Agent header to (1) index.php and (2) product-list.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/68647 - http://secunia.com/advisories/41764 - http://www.securityfocus.com/bid/44104 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62559 - http://www.avactis.com/forums/index.php?showtopic=5317 -
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62559 - http://www.avactis.com/forums/index.php?showtopic=5317 - http://holisticinfosec.org/content/view/159/45/ - http://www.osvdb.org/68646
CVE ID: CVE-2010-4148 State: PUBLISHED Published: 2010-11-01T23:00:00 Last Updated: 2024-08-07T03:34:37.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in AnyConnect 1.2.3.0, and possibly earlier, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/68666 - http://www.htbridge.ch/advisory/directory_traversal_vulnerability_in_anyconnect.html - http://packetstormsecurity.org/1010-exploits/anyconnect-traversal.txt - http://marc.info/?l=bugtraq&m=128699692209082&w=2 - http://www.securityfocus.com/bid/44076 - http://se
t-traversal.txt - http://marc.info/?l=bugtraq&m=128699692209082&w=2 - http://www.securityfocus.com/bid/44076 - http://secunia.com/advisories/41802 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62563
CVE ID: CVE-2010-4149 State: PUBLISHED Published: 2010-11-01T23:00:00 Last Updated: 2024-08-07T03:34:37.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in FreshWebMaster Fresh FTP 5.36, 5.37, and possibly earlier, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.htbridge.ch/advisory/directory_traversal_vulnerability_in_freshftp.html - http://packetstormsecurity.org/1010-exploits/freshftp-traversal.txt - http://www.securityfocus.com/bid/44072 - http:/
- http://packetstormsecurity.org/1010-exploits/freshftp-traversal.txt - http://www.securityfocus.com/bid/44072 - http://www.securityfocus.com/archive/1/514259/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/62555 - http://secunia.com/advisories/41798 - http://www.osvdb.org/68667
CVE ID: CVE-2010-4150 State: PUBLISHED Published: 2010-12-07T21:00:00 Last Updated: 2024-08-07T03:34:37.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the imap_do_open function in the IMAP extension (ext/imap/php_imap.c) in PHP 5.2 before 5.2.15 and 5.3 before 5.3.4 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052836.html - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://www.php.net/releases/5_3_4.php - https://oval.cisecu
6.html - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://www.php.net/releases/5_3_4.php - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12489 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63390 - http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html - http://www.vupen.com/english/advisories/2010/3027 - http://www.vupen.com/english/advisories/2011/0021 - http://www.php.net/ChangeLog-5.php - http://www.securityfocus.com/bid/44980 - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.490619 - http://www.mandriva.com/security/ad
re.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.490619 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:239 - http://www.vupen.com/english/advisories/2010/3313 - http://www.php.net/archive/2010.php#id2010-12-10-1 - http://svn.php.net/viewvc?view=revision&revision=305032 - http://www.php.net/releases/5_2_15.php - https://bugzilla.redhat.com/show_bug.cgi?id=656917 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052845.html - http://www.vupen.com/english/advisories/2011/0020 - http://secunia.com/advisories/42729 - http://www.securitytracker.com/id?1024761 - http://support.apple.com/kb/HT4581
CVE ID: CVE-2010-4151 State: PUBLISHED Published: 2010-11-03T19:00:00 Last Updated: 2024-08-07T03:34:37.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the xthedateformat parameter in a register action, a different vector than CVE-2005-2989, CVE-2006-2503, and CVE-2009-1033. Additional Analyst Notes: - CVE Program Container: References: - http://www.htbridge.ch/advisory/sql_injection_in_deluxebb.html - http://secunia.com/advisories/41918 - http://www.deluxebb.com/community/topic.php?tid=993 - http://www
n_deluxebb.html - http://secunia.com/advisories/41918 - http://www.deluxebb.com/community/topic.php?tid=993 - http://www.securityfocus.com/archive/1/514374/100/0/threaded - http://www.securityfocus.com/bid/44259 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62660 - http://packetstormsecurity.org/1010-exploits/deluxebb13x-sql.txt
CVE ID: CVE-2010-4152 State: PUBLISHED Published: 2010-11-03T19:00:00 Last Updated: 2024-08-07T03:34:37.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in catalog/index.shtml in 4site CMS 2.6, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the i and th vectors are already covered by CVE-2009-0646. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/514376/100/0/threaded - http://www.htbridge.ch/advisory/sql_injection_in_4site_cms.html - http://secunia.com/advisories/33733 - http://www.securityfocus.com/bid/44258
CVE ID: CVE-2010-4153 State: PUBLISHED Published: 2010-11-03T19:00:00 Last Updated: 2024-08-07T03:34:37.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in CrossFTP Pro 1.65a, and probably earlier, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44070 - http://www.htbridge.ch/advisory/directory_traversal_vulnerability_in_crossftp_pro.html - http://secunia.com/advisories/41852 - http://www.osvdb.org/68700 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62549
CVE ID: CVE-2010-4154 State: PUBLISHED Published: 2010-11-03T19:00:00 Last Updated: 2024-08-07T03:34:37.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Rhino Software, Inc. FTP Voyager 15.2.0.11, and possibly earlier, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43869 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62392 - http://www.osvdb.org/68607 - http://packetstormsecurity.org/1010-exploits/ftpvoyager-traversal.txt - http://www.htbridge.ch/advisory/directory_traversal_vulnerabili
ormsecurity.org/1010-exploits/ftpvoyager-traversal.txt - http://www.htbridge.ch/advisory/directory_traversal_vulnerability_in_ftp_voyager.html - http://marc.info/?l=bugtraq&m=128654931101920&w=2 - http://secunia.com/advisories/41719