Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-2489 State: PUBLISHED Published: 2010-07-09T19:00:00 Last Updated: 2024-08-07T02:32:16.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Ruby 1.9.x before 1.9.1-p429 on Windows might allow local users to gain privileges via a crafted ARGF.inplace_mode value that is not properly handled when constructing the filenames of the backup files. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/66040 - http://www.openwall.com/lists/oss-security/2010/07/02/10 - http://secunia.com/advisories/40442 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60135 - http://www.openwall.com/lists/oss-security/2010/07/02/1 -
https://exchange.xforce.ibmcloud.com/vulnerabilities/60135 - http://www.openwall.com/lists/oss-security/2010/07/02/1 - http://svn.ruby-lang.org/repos/ruby/tags/v1_9_1_429/ChangeLog - http://www.securityfocus.com/bid/41321 - http://osdir.com/ml/ruby-talk/2010-07/msg00095.html - http://svn.ruby-lang.org/repos/ruby/tags/v1_9_2_rc1/ChangeLog - http://www.ruby-lang.org/en/news/2010/07/02/ruby-1-9-1-p429-is-released/
CVE ID: CVE-2010-2490 State: PUBLISHED Published: 2019-10-31T15:23:28 Last Updated: 2024-08-07T02:32:16.835Z Vendors: n/a Products: n/a Problem Types: DoS via malformed client query Description: Mumble: murmur-server has DoS due to malformed client query Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-2490 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-2490 - https://access.redhat.com/security/cve/cve-2010-2490
CVE ID: CVE-2010-2491 State: PUBLISHED Published: 2010-09-24T18:00:00Z Last Updated: 2024-08-07T02:32:16.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cgi/client.py in Roundup before 1.4.14 allows remote attackers to inject arbitrary web script or HTML via the template argument to the /issue program. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048221.html - http://sourceforge.net/mailarchive/message.php?msg_name=AANLkTimIYtyRzTAReGmTSCEqPYBvwkkxrP6YKrdVm_nU%40mail.gmail.com - http://bugs.gentoo.org/show_bug.cgi?id=326395 - http://secunia.
IYtyRzTAReGmTSCEqPYBvwkkxrP6YKrdVm_nU%40mail.gmail.com - http://bugs.gentoo.org/show_bug.cgi?id=326395 - http://secunia.com/advisories/41585 - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048061.html - http://issues.roundup-tracker.org/issue2550654 - https://bugzilla.redhat.com/show_bug.cgi?id=610861 - http://www.openwall.com/lists/oss-security/2010/07/02/3 - http://secunia.com/advisories/40433 - http://www.securityfocus.com/bid/41326 - http://www.openwall.com/lists/oss-security/2010/07/02/12 - http://roundup.svn.sourceforge.net/viewvc/roundup/roundup/trunk/roundup/cgi/client.py?r1=4486&r2=4485&pathrev=4486 - http://roundup.svn.sourceforge.net/viewvc/roundup?view=
undup/trunk/roundup/cgi/client.py?r1=4486&r2=4485&pathrev=4486 - http://roundup.svn.sourceforge.net/viewvc/roundup?view=revision&revision=4486 - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048018.html
CVE ID: CVE-2010-2492 State: PUBLISHED Published: 2010-09-08T19:00:00 Last Updated: 2024-08-07T02:32:16.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ecryptfs_uid_hash macro in fs/ecryptfs/messaging.c in the eCryptfs subsystem in the Linux kernel before 2.6.35 might allow local users to gain privileges or cause a denial of service (system crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0723.html - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:1
102/100/0/threaded - http://secunia.com/advisories/46397 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 - http://www.redhat.com/support/errata/RHSA-2011-0007.html - https://bugzilla.redhat.com/show_bug.cgi?id=611385 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a6f80fb7b5986fda663d94079d3bba0937a6b6ff - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://support.avaya.com/css/P8/documents/100113326 - http://secunia.com/advisories/42890 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:172
CVE ID: CVE-2010-2493 State: PUBLISHED Published: 2010-08-09T20:00:00Z Last Updated: 2024-08-07T02:32:16.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the deployment descriptor (aka web.xml) in picketlink-sts.war in (1) the security_saml quickstart, (2) the webservice_proxy_security quickstart, (3) the web-console application, (4) the http-invoker application, (5) the gpd-deployer application, (6) the jbpm-console application, (7) the contract application, and (8) the uddi-console application in JBoss Enterprise SOA Platform before 5.0.2 contains GET and POST http-method elements, which allows remote attackers to bypass intended access restricti
fore 5.0.2 contains GET and POST http-method elements, which allows remote attackers to bypass intended access restrictions via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=614774 - https://jira.jboss.org/browse/SOA-2105 - http://secunia.com/advisories/40681 - http://www.redhat.com/docs/en-US/JBoss_SOA_Platform/5.0.2/html/5.0.2_Release_Notes/index.html
CVE ID: CVE-2010-2494 State: PUBLISHED Published: 2010-07-08T18:00:00 Last Updated: 2024-08-07T02:32:16.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service (heap memory corruption and application crash) via an e-mail message with invalid base64 data that begins with an = (equals) character. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046558.html - http://marc.info/?l=oss-security&m=127840569013531&w=2 - http://secunia
rmail/package-announce/2010-August/046558.html - http://marc.info/?l=oss-security&m=127840569013531&w=2 - http://secunia.com/advisories/40427 - http://bogofilter.sourceforge.net/security/bogofilter-SA-2010-01 - http://secunia.com/advisories/41239 - http://bogofilter.svn.sourceforge.net/viewvc/bogofilter/trunk/bogofilter/doc/bogofilter-SA-2010-01?revision=6909&pathrev=6909 - http://www.osvdb.org/66002 - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00015.html - http://marc.info/?l=oss-security&m=127844323105405&w=2 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00021.html - http:/
oss-security&m=127844323105405&w=2 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00021.html - http://bogofilter.svn.sourceforge.net/viewvc/bogofilter/trunk/bogofilter/src/base64.c?view=patch&r1=6906&r2=6903 - http://www.vupen.com/english/advisories/2010/2233 - http://www.securityfocus.com/bid/41339 - https://bugzilla.redhat.com/show_bug.cgi?id=611551 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046590.html - http://marc.info/?l=oss-security&m=127814747231102&w=2 - http://www.ubuntu.com/usn/USN-980-1 - http://marc.info/?l=oss-security&m=127831760712436&w=2
CVE ID: CVE-2010-2495 State: PUBLISHED Published: 2010-09-08T19:00:00 Last Updated: 2024-08-07T02:32:16.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pppol2tp_xmit function in drivers/net/pppol2tp.c in the L2TP implementation in the Linux kernel before 2.6.34 does not properly validate certain values associated with an interface, which allows attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via vectors related to a routing change. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/06/23/3 - http://www.ubuntu.com/usn/USN-1000-1 - http://www.op
rences: - http://www.openwall.com/lists/oss-security/2010/06/23/3 - http://www.ubuntu.com/usn/USN-1000-1 - http://www.openwall.com/lists/oss-security/2010/07/04/3 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00000.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3feec9095d12e311b7d4eb7fe7e5dfa75d4a72a5 - https://bugzilla.redhat.com/show_bug.cgi?id=607054 - http://www.openwall.com/lists/oss-security/2010/07/06/11 - http://www.openwall.com/lists/oss-security/2010/07/04/2 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34
CVE ID: CVE-2010-2496 State: PUBLISHED Published: 2021-10-18T12:12:42 Last Updated: 2024-08-07T02:32:16.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the HA stack and potentially influence its operations. This is fixed in cluster-glue 1.0.6 and newer, and pacemaker 1.1.3 and newer. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2010-2496
CVE ID: CVE-2010-2497 State: PUBLISHED Published: 2010-08-19T17:43:00 Last Updated: 2024-08-07T02:32:16.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in glyph handling in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file. Additional Analyst Notes: - CVE Program Container: References: - https://savannah.nongnu.org/bugs/?30082 - http://support.apple.com/kb/HT4435 - http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://marc.info/?l=oss-security&m=1279093269093
://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://marc.info/?l=oss-security&m=127909326909362&w=2 - http://www.debian.org/security/2010/dsa-2070 - http://marc.info/?l=oss-security&m=127905701201340&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:137 - https://bugzilla.redhat.com/show_bug.cgi?id=613154 - https://savannah.nongnu.org/bugs/?30083 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=7d3d2cc4fef72c6be9c454b3809c387e12b44cfc - http://secunia.com/advisories/48951
CVE ID: CVE-2010-2498 State: PUBLISHED Published: 2010-08-19T17:43:00 Last Updated: 2024-08-07T02:32:16.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: The psh_glyph_find_strong_points function in pshinter/pshalgo.c in FreeType before 2.4.0 does not properly implement hinting masks, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a crafted font file that triggers an invalid free operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-963-1 - http://support.apple.com/kb/HT4435 - https://bugzilla.redhat.com/show_bug.cgi?id=613160 - h
w.ubuntu.com/usn/USN-963-1 - http://support.apple.com/kb/HT4435 - https://bugzilla.redhat.com/show_bug.cgi?id=613160 - https://savannah.nongnu.org/bugs/?30106 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=8d22746c9e5af80ff4304aef440986403a5072e2 - http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://marc.info/?l=oss-security&m=127909326909362&w=2 - http://www.debian.org/security/2010/dsa-2070 - http://marc.info/?l=oss-security&m=127905701201340&w=2 - http://securitytracker.com/id?1024266 - http://www.redhat.com/support/errata/RHSA-2010-0578.html - http://www.mandriva.com
tp://securitytracker.com/id?1024266 - http://www.redhat.com/support/errata/RHSA-2010-0578.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:137 - http://secunia.com/advisories/48951
CVE ID: CVE-2010-2499 State: PUBLISHED Published: 2010-08-19T17:43:00 Last Updated: 2024-08-07T02:32:16.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted LaserWriter PS font file with an embedded PFB fragment. Additional Analyst Notes: - CVE Program Container: References: - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=c69891a1345640096fbf396e8dd567fe879ce233 - https://savannah.nongnu.org/bugs/?30248 - http://www.ubuntu.com/usn/USN-963-1 - ht
1a1345640096fbf396e8dd567fe879ce233 - https://savannah.nongnu.org/bugs/?30248 - http://www.ubuntu.com/usn/USN-963-1 - http://support.apple.com/kb/HT4435 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=f29f741efbba0a5ce2f16464f648fb8d026ed4c8 - http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://marc.info/?l=oss-security&m=127909326909362&w=2 - http://www.debian.org/security/2010/dsa-2070 - http://marc.info/?l=oss-security&m=127905701201340&w=2 - http://securitytracker.com/id?1024266 - https://savannah.nongnu.org/bugs/?30249 - http://www.redhat.com/support/errata/RHSA-2010
ecuritytracker.com/id?1024266 - https://savannah.nongnu.org/bugs/?30249 - http://www.redhat.com/support/errata/RHSA-2010-0578.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:137 - https://bugzilla.redhat.com/show_bug.cgi?id=613162 - http://secunia.com/advisories/48951
CVE ID: CVE-2010-2500 State: PUBLISHED Published: 2010-08-19T17:43:00 Last Updated: 2024-08-07T02:32:16.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the gray_render_span function in smooth/ftgrays.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file. Additional Analyst Notes: - CVE Program Container: References: - https://savannah.nongnu.org/bugs/?30263 - http://www.ubuntu.com/usn/USN-963-1 - http://support.apple.com/kb/HT4435 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=6305b869d86ff415a33576df6d43729673c66eee - http://lists
tp://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=6305b869d86ff415a33576df6d43729673c66eee - http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://marc.info/?l=oss-security&m=127909326909362&w=2 - http://www.debian.org/security/2010/dsa-2070 - http://marc.info/?l=oss-security&m=127905701201340&w=2 - http://securitytracker.com/id?1024266 - http://www.redhat.com/support/errata/RHSA-2010-0578.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:137 - http://www.redhat.com/support/errata/RHSA-2010-0577.html - http://secunia.com/advisories/48951 - https://bugzilla.redhat
http://www.redhat.com/support/errata/RHSA-2010-0577.html - http://secunia.com/advisories/48951 - https://bugzilla.redhat.com/show_bug.cgi?id=613167
CVE ID: CVE-2010-2502 State: PUBLISHED Published: 2010-06-28T18:06:00Z Last Updated: 2024-09-17T03:58:51.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allow (1) remote attackers to read arbitrary files, aka SPL-31194; (2) remote authenticated users to modify arbitrary files, aka SPL-31063; or (3) have an unknown impact via redirects, aka SPL-31067. Additional Analyst Notes: - CVE Program Container: References: - http://www.splunk.com/view/SP-CAAAFGD
CVE ID: CVE-2010-2503 State: PUBLISHED Published: 2010-06-28T18:06:00Z Last Updated: 2024-09-16T17:48:52.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allow remote attackers to inject arbitrary web script or HTML via (1) redirects, aka SPL-31067; (2) unspecified "user->user or user->admin" vectors, aka SPL-31084; or (3) unspecified "user input," aka SPL-31085. Additional Analyst Notes: - CVE Program Container: References: - http://www.splunk.com/view/SP-CAAAFGD
CVE ID: CVE-2010-2504 State: PUBLISHED Published: 2010-06-28T18:06:00Z Last Updated: 2024-09-16T19:25:20.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allows remote authenticated users to obtain sensitive information via HTTP header injection, aka SPL-31066. Additional Analyst Notes: - CVE Program Container: References: - http://www.splunk.com/view/SP-CAAAFGD
CVE ID: CVE-2010-2505 State: PUBLISHED Published: 2010-06-28T18:06:00Z Last Updated: 2024-09-16T18:45:25.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Soft SaschArt SasCAM Webcam Server 2.6.5, 2.7, and earlier allows remote attackers to cause a denial of service (crash) via a large number of requests with a long line, as demonstrated using a long GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/13888 - http://secunia.com/advisories/40214 - http://www.osvdb.org/65544
CVE ID: CVE-2010-2506 State: PUBLISHED Published: 2010-06-28T18:06:00 Last Updated: 2024-08-07T02:32:16.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in debug.cgi in Linksys WAP54Gv3 firmware 3.05.03 and 3.04.03 allows remote attackers to inject arbitrary web script or HTML via the data1 parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/59699 - http://www.securityfocus.com/archive/1/511952/100/0/threaded
CVE ID: CVE-2010-2507 State: PUBLISHED Published: 2010-06-28T20:00:00 Last Updated: 2024-08-07T02:32:16.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Picasa2Gallery (com_picasa2gallery) component 1.2.8 and earlier for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/13981 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59669 - http://secunia.com/advisories/40297 - http://osvdb.org/65674 - http://www.securityfocus.com/bi
m/vulnerabilities/59669 - http://secunia.com/advisories/40297 - http://osvdb.org/65674 - http://www.securityfocus.com/bid/41031 - http://packetstormsecurity.org/1006-exploits/joomlapicasa2gallery-lfi.txt
CVE ID: CVE-2010-2508 State: PUBLISHED Published: 2010-06-28T20:00:00Z Last Updated: 2024-09-16T18:38:23.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in user-profile.php in 2daybiz Video Community Portal Script allows remote attackers to execute arbitrary SQL commands via the userid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41114 - http://secunia.com/advisories/40280 - http://www.exploit-db.com/exploits/14018
CVE ID: CVE-2010-2509 State: PUBLISHED Published: 2010-06-28T20:00:00Z Last Updated: 2024-09-17T03:27:45.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in 2daybiz Web Template Software allow remote attackers to inject arbitrary web script or HTML via the (1) keyword parameter to category.php and the (2) password parameter to memberlogin.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40348 - http://www.exploit-db.com/exploits/14020
CVE ID: CVE-2010-2510 State: PUBLISHED Published: 2010-06-28T20:00:00Z Last Updated: 2024-09-16T22:35:14.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in customize.php in 2daybiz Web Template Software allows remote attackers to execute arbitrary SQL commands via the tid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40348 - http://www.exploit-db.com/exploits/14020
CVE ID: CVE-2010-2511 State: PUBLISHED Published: 2010-06-28T20:00:00Z Last Updated: 2024-09-16T19:14:42.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewnews.php in 2daybiz Multi Level Marketing (MLM) Software allows remote attackers to execute arbitrary SQL commands via the nwsid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14005 - http://secunia.com/advisories/40340 - http://www.securityfocus.com/bid/41097
CVE ID: CVE-2010-2512 State: PUBLISHED Published: 2010-06-28T20:00:00Z Last Updated: 2024-09-16T20:57:35.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in customprofile.php in 2daybiz Matrimonial Script allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41109 - http://www.osvdb.org/65712 - http://secunia.com/advisories/40338 - http://www.exploit-db.com/exploits/14008
CVE ID: CVE-2010-2513 State: PUBLISHED Published: 2010-06-28T20:00:00Z Last Updated: 2024-09-16T18:03:14.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JE Ajax Event Calendar (com_jeajaxeventcalendar) component 1.0.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41058 - http://packetstormsecurity.org/1006-exploits/joomlajeajax-sql.txt - http://www.exploit-db.com/exploits/13997
CVE ID: CVE-2010-2514 State: PUBLISHED Published: 2010-06-28T20:00:00Z Last Updated: 2024-09-16T17:22:37.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the JFaq (com_jfaq) component 1.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the question parameter in an add2 action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/65694 - http://www.securityfocus.com/bid/41029 - http://secunia.com/advisories/40219 - http://packetstormsecurity.org/1006-exploits/joomlajfaq-sqlxss.txt
CVE ID: CVE-2010-2515 State: PUBLISHED Published: 2010-06-28T20:00:00Z Last Updated: 2024-09-16T23:51:41.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in the JFaq (com_jfaq) component 1.2 for Joomla!, when magic_quotes_gpc is disabled, allow (1) remote attackers to execute arbitrary SQL commands via the id parameter, and (2) remote authenticated users with "Public Front-end" permissions to execute arbitrary SQL commands via the titlu parameter (title field). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bi
hird party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41029 - http://osvdb.org/65695 - http://secunia.com/advisories/40219 - http://packetstormsecurity.org/1006-exploits/joomlajfaq-sqlxss.txt