Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ictim’s machine when the file is listed or downloaded. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/leapftp_list_reply.rb - https://www.exploit-db.com/exploits/16704 - https://web.archive.org/web/20111016194057/https://www.corelan.be/index.php/2010/10/12/death-of-an-ftp-client/ - https://web.archive.org/web/20111013232627/http://www.leapware.com/ - https://www.vulncheck.com/advisories/leapftp-stack-buffer-overflow
CVE ID: CVE-2010-20059 State: PUBLISHED Published: 2025-08-20T15:35:08.532Z Last Updated: 2025-11-20T02:01:07.820Z Vendors: iXsystems Products: FreeNAS Problem Types: CWE-78 Description: FreeNAS 0.7.2 prior to revision 5543 includes an unauthenticated command‐execution backdoor in its web interface. The exec_raw.php script exposes a cmd parameter that is passed directly to the underlying shell without sanitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/16313 - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/freenas_exec_raw.rb - https://sourceforge.net/projects/freenas/ - https://git
amework/master/modules/exploits/multi/http/freenas_exec_raw.rb - https://sourceforge.net/projects/freenas/ - https://github.com/freenas - https://www.truenas.com/freenas/ - https://www.tenable.com/plugins/nnm/5714 - https://web.archive.org/web/20101218143110/http://sourceforge.net/projects/freenas/files//stable/0.7.2/NOTES%200.7.2.5543.txt/view - https://www.vulncheck.com/advisories/freenas-arbitrary-command-execution
CVE ID: CVE-2010-20103 State: PUBLISHED Published: 2025-08-20T15:38:46.697Z Last Updated: 2025-11-20T02:01:08.297Z Vendors: ProFTPD Project Products: ProFTPD (Professional FTP Daemon) Problem Types: CWE-912 Description: A malicious backdoor was embedded in the official ProFTPD 1.3.3c source tarball distributed between November 28 and December 2, 2010. The backdoor implements a hidden FTP command trigger that, when invoked, causes the server to execute arbitrary shell commands with root privileges. This allows remote, unauthenticated attackers to run any OS command on the FTP server host. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://web.archive.org/web/201111072121
P server host. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://web.archive.org/web/20111107212129/http://rsync.proftpd.org/ - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/ftp/proftpd_133c_backdoor.rb - https://www.exploit-db.com/exploits/15662 - https://www.exploit-db.com/exploits/16921 - https://advisories.checkpoint.com/defense/advisories/public/2011/cpai-2010-151.html/ - https://github.com/proftpd/proftpd - http://www.proftpd.org/ - https://www.vulncheck.com/advisories/proftpd-backdoor-command-execution
CVE ID: CVE-2010-20107 State: PUBLISHED Published: 2025-08-21T20:11:09.838Z Last Updated: 2025-08-22T15:31:10.335Z Vendors: Liuxz Software Products: FTP Synchronizer Professional Problem Types: CWE-121 Description: A stack-based buffer overflow exists in FTP Synchronizer Professional <= v4.0.73.274. When the client connects to an FTP server and issues a LIST command—typically during sync preview or profile creation—the server’s response containing an overly long filename triggers a buffer overflow. This results in the corruption of the Structured Exception Handler (SEH), potentially allowing remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.g
tentially allowing remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/ftpsynch_list_reply.rb - https://www.exploit-db.com/exploits/16720 - https://web.archive.org/web/20111016194057/https://www.corelan.be/index.php/2010/10/12/death-of-an-ftp-client/ - https://www.ftpsynchronizer.com/ - https://web.archive.org/web/20111016235434/http://www.ftpsynchronizer.com/ - https://www.vulncheck.com/advisories/ftp-synchronizer-professional-stack-buffer-overflow
CVE ID: CVE-2010-20108 State: PUBLISHED Published: 2025-08-21T20:11:33.405Z Last Updated: 2025-08-22T15:30:13.565Z Vendors: FTPPad Products: FTPPad FTP Client Problem Types: CWE-121 Description: FTPPad <= 1.2.0 contains a stack-based buffer overflow vulnerability in its FTP directory listing parser. When the client connects to an FTP server and receives a crafted response to a LIST command containing an excessively long directory and filename, the application fails to properly validate input length. This results in a buffer overflow that overwrites the saved Extended Instruction Pointer (EIP), allowing remote attackers to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichm
ction Pointer (EIP), allowing remote attackers to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/ftppad_list_reply.rb - https://www.exploit-db.com/exploits/16726 - https://web.archive.org/web/20111016194057/https://www.corelan.be/index.php/2010/10/12/death-of-an-ftp-client/ - https://www.chip.de/downloads/FTPPad_12993921.html - https://www.vulncheck.com/advisories/ftppad-stack-buffer-overflow
CVE ID: CVE-2010-20109 State: PUBLISHED Published: 2025-08-21T20:09:03.535Z Last Updated: 2025-11-20T02:01:08.739Z Vendors: Barracuda Networks Products: Spam & Virus Firewall, SSL VPN, Web Application Firewall Problem Types: CWE-22 Description: Barracuda products, confirmed in Spam & Virus Firewall, SSL VPN, and Web Application Firewall versions prior to October 2010, contain a path traversal vulnerability in the view_help.cgi endpoint. The locale parameter fails to properly sanitize user input, allowing attackers to inject traversal sequences and null-byte terminators to access arbitrary files on the underlying system. By exploiting this flaw, unauthenticated remote attackers can retrieve s
ccess arbitrary files on the underlying system. By exploiting this flaw, unauthenticated remote attackers can retrieve sensitive configuration files such as /mail/snapshot/config.snapshot, potentially exposing credentials, internal settings, and other critical data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/15130 - https://web.archive.org/web/20101004131244/http://secunia.com/advisories/41609/ - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/barracuda_directory_traversal.rb - https://www.vulncheck.com/advisories/barracuda-multiple-products-locale-path-traversal
CVE ID: CVE-2010-20111 State: PUBLISHED Published: 2025-08-21T20:09:54.998Z Last Updated: 2025-08-22T14:11:53.514Z Vendors: Digital Music Pad Products: Digital Music Pad Problem Types: CWE-121 Description: Digital Music Pad v8.2.3.3.4 contains a stack-based buffer overflow vulnerability in its playlist file parser. When opening a .pls file containing an excessively long string in the File1 field, the application fails to properly validate input length, resulting in corruption of the Structured Exception Handler (SEH) on the stack. This flaw may allow an attacker to control execution flow when the file is opened, potentially leading to arbitrary code execution. Additional Analyst Notes: - CIS
execution flow when the file is opened, potentially leading to arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://web.archive.org/web/20100923154433/http://secunia.com:80/advisories/41519 - https://www.exploit-db.com/exploits/15134 - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/digital_music_pad_pls.rb - https://www.topshareware.com/Digital-Music-Pad-download-79446.htm - https://www.vulncheck.com/advisories/digital-music-pad-stack-buffer-overflow
CVE ID: CVE-2010-20112 State: PUBLISHED Published: 2025-08-21T20:08:12.350Z Last Updated: 2025-08-22T15:35:56.587Z Vendors: Amlib Products: Amlibweb Library Management System Problem Types: CWE-121 Description: Amlib’s NetOpacs webquery.dll contains a stack-based buffer overflow vulnerability triggered by improper handling of HTTP GET parameters. Specifically, the application fails to enforce bounds on input supplied to the app parameter, allowing excessive data to overwrite memory structures including the Structured Exception Handler (SEH). Additionally, malformed parameter names followed by an equals sign may result in unintended control flow behavior. This vulnerability is exposed through
r names followed by an equals sign may result in unintended control flow behavior. This vulnerability is exposed through IIS and affects legacy Windows deployments Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/amlibweb_webquerydll_app.rb - https://www.exploit-db.com/exploits/16793 - https://www.fortiguard.com/encyclopedia/ips/24002 - https://advisories.checkpoint.com/defense/advisories/public/2013/cpai-2013-1344.html - https://www.amlib.co.uk/product/product.aspx?menuId=top_products - https://www.vulncheck.com/advisories/amlibweb-netopacs-stack-buffer-overflow
CVE ID: CVE-2010-20113 State: PUBLISHED Published: 2025-08-21T20:10:42.037Z Last Updated: 2025-11-20T02:01:08.915Z Vendors: KMiNT21 Software Products: EasyFTP Server Problem Types: CWE-121 Description: EasyFTP Server 1.7.0.11 and earlier contains a stack-based buffer overflow vulnerability in its HTTP interface. When processing a GET request to list.html, the server fails to properly validate the length of the path parameter. Supplying an excessively long value causes a buffer overflow on the stack, potentially corrupting control flow structures. The vulnerability is exposed through the embedded web server and does not require authentication due to default anonymous access. The issue was res
d through the embedded web server and does not require authentication due to default anonymous access. The issue was resolved in version 1.7.0.12, after which the product was renamed to UplusFtp. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/easyftp_list.rb - https://www.exploit-db.com/exploits/11500 - https://www.vulncheck.com/advisories/easyftp-server-list-html-stack-buffer-overflow
CVE ID: CVE-2010-20114 State: PUBLISHED Published: 2025-08-21T20:14:47.050Z Last Updated: 2025-08-21T21:08:00.970Z Vendors: VariCAD Products: VariCAD EN Problem Types: CWE-121 Description: VariCAD EN up to and including version 2010-2.05 is vulnerable to a stack-based buffer overflow when parsing .dwb drawing files. The application fails to properly validate the length of input data embedded in the file, allowing a crafted .dwb file to overwrite critical memory structures. This flaw can be exploited locally by convincing a user to open a malicious file, resulting in arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/ra
ry code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/varicad_dwb.rb - https://www.exploit-db.com/exploits/11789 - https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=26522 - https://www.seebug.org/vuldb/ssvid-71154 - https://www.varicad.com/en/home/ - https://www.fortiguard.com/encyclopedia/ips/18735 - https://www.vulncheck.com/advisories/varicad-en-dwb-file-stack-buffer-overflow
CVE ID: CVE-2010-20115 State: PUBLISHED Published: 2025-08-21T20:15:15.812Z Last Updated: 2025-08-21T20:53:36.121Z Vendors: Arcane Software Products: Vermillion FTP Daemon Problem Types: CWE-787, CWE-704 Description: Arcane Software’s Vermillion FTP Daemon (vftpd) versions up to and including 1.31 contains a memory corruption vulnerability triggered by a malformed FTP PORT command. The flaw arises from an out-of-bounds array access during input parsing, allowing an attacker to manipulate stack memory and potentially execute arbitrary code. Exploitation requires direct access to the FTP service and is constrained by a single execution attempt if the daemon is installed as a Windows service. A
s to the FTP service and is constrained by a single execution attempt if the daemon is installed as a Windows service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/vermillion_ftpd_port.rb - https://www.exploit-db.com/exploits/11293 - https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=23681 - https://www.juniper.net/us/en/threatlabs/ips-signatures/detail.FTP:EXPLOIT:VERMILLION-PORT-OF.html - https://web.archive.org/web/20100416140657/http://www.global-evolution.info/news/files/vftpd/vftpd.txt - https://web.archive.org/web/20100213162028/http://www.so
7/http://www.global-evolution.info/news/files/vftpd/vftpd.txt - https://web.archive.org/web/20100213162028/http://www.softsea.com/review/Vermillion-FTP-Daemon.html - https://www.vulncheck.com/advisories/vermillion-ftp-daemon-port-command-memory-corruption
CVE ID: CVE-2010-20119 State: PUBLISHED Published: 2025-08-21T20:09:27.037Z Last Updated: 2025-08-22T14:13:20.712Z Vendors: CommuniCrypt Software Products: CommuniCrypt Mail Problem Types: CWE-121 Description: CommuniCrypt Mail versions up to and including 1.16 contains a stack-based buffer overflow vulnerability in its ANSMTP.dll and AOSMTP.dll ActiveX controls, specifically within the AddAttachments() method. This method fails to properly validate the length of input strings, allowing data to exceed the bounds of a fixed-size stack buffer. When invoked with an overly long string, the control can corrupt adjacent memory structures, including exception handlers, leading to potential control
string, the control can corrupt adjacent memory structures, including exception handlers, leading to potential control flow disruption. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/browser/communicrypt_mail_activex.rb - https://www.exploit-db.com/exploits/12663 - https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=24374 - https://softwarelode.com/4185/details-communicrypt-mail.html - https://www.fortiguard.com/encyclopedia/ips/23099 - https://www.vulncheck.com/advisories/communicrypt-mail-activex-control-buffer-overflow
CVE ID: CVE-2010-20120 State: PUBLISHED Published: 2025-08-21T20:12:54.367Z Last Updated: 2025-11-22T12:41:16.783Z Vendors: Maplesoft Products: Maple Problem Types: CWE-94 Description: Maple versions up to and including 13's Maplet framework allows embedded commands to be executed automatically when a .maplet file is opened. This behavior bypasses standard security restrictions that normally prevent code execution in regular Maple worksheets. The vulnerability enables attackers to craft malicious .maplet files that execute arbitrary code without user interaction. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.maplesoft.com/products/maple/ - https://www.exploit-d
Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.maplesoft.com/products/maple/ - https://www.exploit-db.com/exploits/16308 - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/fileformat/maple_maplet.rb - https://www.juniper.net/us/en/threatlabs/ips-signatures/detail.HTTP:MISC:MAPLE-MAPLET-CMD-EXEC.html - https://www.vulncheck.com/advisories/maple-maplet-file-creation-command-execution
CVE ID: CVE-2010-20121 State: PUBLISHED Published: 2025-08-21T20:10:20.597Z Last Updated: 2025-11-20T02:01:09.082Z Vendors: KMiNT21 Software Products: EasyFTP Server Problem Types: CWE-121 Description: EasyFTP Server versions up to 1.7.0.11 contain a stack-based buffer overflow vulnerability in the FTP command parser. When processing the CWD (Change Working Directory) command, the server fails to properly validate the length of the input string, allowing attackers to overwrite memory on the stack. This flaw enables remote code execution without authentication, as EasyFTP allows anonymous access by default. The vulnerability was resolved in version 1.7.0.12, after which the product was rename
lows anonymous access by default. The vulnerability was resolved in version 1.7.0.12, after which the product was renamed “UplusFtp.” Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://seclists.org/bugtraq/2010/Feb/202 - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/easyftp_cwd_fixret.rb - https://paulmakowski.wordpress.com/2010/02/28/increasing-payload-size-w-return-address-overwrite/ - https://www.exploit-db.com/exploits/12312 - https://www.exploit-db.com/exploits/16737 - https://www.exploit-db.com/exploits/11668 - https://www.exploit-db.com/exploits/14402 - https://www.vulncheck.com/advisories/easyftp-server-cwd-com
exploits/11668 - https://www.exploit-db.com/exploits/14402 - https://www.vulncheck.com/advisories/easyftp-server-cwd-command-stack-buffer-overflow
CVE ID: CVE-2010-20122 State: PUBLISHED Published: 2025-08-21T20:16:17.595Z Last Updated: 2025-11-20T02:01:09.259Z Vendors: NetSarang Computer, Inc. Products: Xftp FTP Client Problem Types: CWE-121 Description: Xftp FTP Client version up to and including 3.0 (build 0238) contain a stack-based buffer overflow vulnerability triggered by a maliciously crafted PWD response from an FTP server. When the client connects to a server and receives an overly long directory string in response to the PWD command, the client fails to properly validate the length of the input before copying it into a fixed-size buffer. This results in memory corruption and allows remote attackers to execute arbitrary code
ng it into a fixed-size buffer. This results in memory corruption and allows remote attackers to execute arbitrary code on the client system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/xftp_client_pwd.rb - https://www.exploit-db.com/exploits/12332 - https://www.exploit-db.com/exploits/16739 - https://web.archive.org/web/20090312072219/http://www.netsarang.com/download/down_xft3.html - https://www.vulncheck.com/advisories/xftp-ftp-client-pwd-response-buffer-overflow
CVE ID: CVE-2010-20123 State: PUBLISHED Published: 2025-08-21T20:14:21.267Z Last Updated: 2025-11-20T02:01:09.455Z Vendors: Steinberg Products: MyMP3Player Problem Types: CWE-121 Description: Steinberg MyMP3Player version 3.0 (build 3.0.0.67) is vulnerable to a stack-based buffer overflow when parsing .m3u playlist files. The application fails to properly validate the length of input data within the playlist, allowing a specially crafted file to overwrite critical memory structures and execute arbitrary code. This vulnerability can be exploited locally by convincing a user to open a malicious .m3u file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.c
to open a malicious .m3u file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/11791 - https://www.exploit-db.com/exploits/16633 - https://www.exploit-db.com/exploits/14581 - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/mymp3player_m3u.rb - https://www.fortiguard.com/encyclopedia/ips/20813/steinberg-mymp3player-buffer-overflow - https://www.chip.de/downloads/myMP3-Player_13008621.html - https://www.vulncheck.com/advisories/steinburg-mymp3player-buffer-overflow
CVE ID: CVE-2010-2000 State: PUBLISHED Published: 2010-05-20T17:00:00Z Last Updated: 2024-09-16T18:19:47.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Bibliography (Biblio) module 5.x through 5.x-1.17 and 6.x through 6.x-1.9 for Drupal allows remote authenticated users, with "administer biblio" privileges, to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-1358. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/797192 - http://drupal.org/node/796502 - http://drupal.org/node/796498 - http://www.securityfocus.com/bid/40127 - http://secunia
http://drupal.org/node/796502 - http://drupal.org/node/796498 - http://www.securityfocus.com/bid/40127 - http://secunia.com/advisories/39810
CVE ID: CVE-2010-2001 State: PUBLISHED Published: 2010-05-20T17:00:00Z Last Updated: 2024-09-16T19:04:06.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the CiviRegister module before 6.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via the URI. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/797352 - http://drupal.org/node/797342 - http://secunia.com/advisories/39806 - http://www.securityfocus.com/bid/40130
CVE ID: CVE-2010-2002 State: PUBLISHED Published: 2010-05-20T17:00:00Z Last Updated: 2024-09-17T01:36:07.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Wordfilter module 5.x before 5.x-1.1 and 6.x before 6.x-1.1 for Drupal allows remote authenticated users, with "administer words filtered" privileges, to inject arbitrary web script or HTML via the word list. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/796618 - http://drupal.org/node/797208 - http://drupal.org/node/796620 - http://secunia.com/advisories/39811 - http://www.securityfocus.com/bid/40119
CVE ID: CVE-2010-2003 State: PUBLISHED Published: 2010-05-20T17:00:00 Last Updated: 2024-08-07T02:17:14.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in misc/get_admin.php in Advanced Poll 2.08 allows remote attackers to inject arbitrary web script or HTML via the mysql_host parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/64524 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58503 - http://www.securityfocus.com/bid/40045 - http://www.securityfocus.com/archive/1/511210/100/0/threaded - http://www.htbridge.ch/advisory/xss_vulnerability_in_advanced_poll.html - http://packetstormsecurit
210/100/0/threaded - http://www.htbridge.ch/advisory/xss_vulnerability_in_advanced_poll.html - http://packetstormsecurity.org/1005-exploits/advancedpoll208-xss.txt - http://secunia.com/advisories/39768
CVE ID: CVE-2010-2004 State: PUBLISHED Published: 2010-05-20T21:00:00 Last Updated: 2024-08-07T02:17:14.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in BS.Global BS.Player 2.51 Build 1022 Free, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via the Skin parameter in the Options section of a skins file (.bsi), a different vulnerability than CVE-2009-1068. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0148 - http://www.mertsarica.com/?p=511 - http://secunia.com/advisories/38221 - http://www.mertsarica.com/codes/bsplayer_seh_overwrite.py -
rtsarica.com/?p=511 - http://secunia.com/advisories/38221 - http://www.mertsarica.com/codes/bsplayer_seh_overwrite.py - https://exchange.xforce.ibmcloud.com/vulnerabilities/55708 - http://www.securityfocus.com/bid/37831 - http://www.exploit-db.com/exploits/11154