Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
www.vupen.com/english/advisories/2011/0212 - http://securitytracker.com/id?1023506 - http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs - http://code.google.com/p/chromium/issues/detail?id=30660 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://flock.com/security/ - https://bugs.webkit.org/show_bug.cgi?id=32647 - http://trac.webkit.org/changeset/52401 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14482
CVE ID: CVE-2010-0662 State: PUBLISHED Published: 2010-02-18T17:19:00 Last Updated: 2024-08-07T00:59:38.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ParamTraits<SkBitmap>::Read function in common/common_param_traits.cc in Google Chrome before 4.0.249.78 does not use the correct variables in calculations designed to prevent integer overflows, which allows attackers to leverage renderer access to cause a denial of service or possibly have unspecified other impact via bitmap data, related to deserialization. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html - http://securitytrack
ner: References: - http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html - http://securitytracker.com/id?1023506 - http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs - https://exchange.xforce.ibmcloud.com/vulnerabilities/56627 - http://code.google.com/p/chromium/issues/detail?id=31307 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14457
CVE ID: CVE-2010-0663 State: PUBLISHED Published: 2010-02-18T17:19:00 Last Updated: 2024-08-07T00:59:38.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ParamTraits<SkBitmap>::Read function in common/common_param_traits.cc in Google Chrome before 4.0.249.78 does not initialize the memory locations that will hold bitmap data, which might allow remote attackers to obtain potentially sensitive information from process memory by providing insufficient data, related to use of a (1) thumbnail database or (2) HTML canvas. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14002 -
Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14002 - http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html - http://securitytracker.com/id?1023506 - http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs - http://code.google.com/p/chromium/issues/detail?id=31307
CVE ID: CVE-2010-0664 State: PUBLISHED Published: 2010-02-18T17:19:00 Last Updated: 2024-08-07T00:59:38.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack consumption vulnerability in the ChildProcessSecurityPolicy::CanRequestURL function in browser/child_process_security_policy.cc in Google Chrome before 4.0.249.78 allows remote attackers to cause a denial of service (memory consumption and application crash) via a URL that specifies multiple protocols, as demonstrated by a URL that begins with many repetitions of the view-source: substring. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2010/01/stable-channel-upd
nalyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html - http://code.google.com/p/chromium/issues/detail?id=31517 - http://securitytracker.com/id?1023506 - http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14097 - http://twitter.com/akirsanov/statuses/7370288490 - http://exchange.kg/other/chrome3_0day-denial_of_service_crash.html
CVE ID: CVE-2010-0665 State: PUBLISHED Published: 2010-02-19T17:00:00 Last Updated: 2024-08-07T00:59:38.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: JAG (Just Another Guestbook) 1.14 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request for jag/database.sql. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56228 - http://www.exploit-db.com/exploits/11406
CVE ID: CVE-2010-0666 State: PUBLISHED Published: 2010-02-19T17:00:00Z Last Updated: 2024-09-17T03:12:27.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in eMBox in Novell eDirectory 8.8 SP5 Patch 2 and earlier allows remote attackers to cause a denial of service (crash) via unknown a crafted SOAP request, a different issue than CVE-2008-0926. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=3426981 - http://www.securitytracker.com/id?1023558 - http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5067743&sliceId=&docTypeI
.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5067743&sliceId=&docTypeID=DT_SUSESDB_PSDB_1_1&dialogID=122457794&stateId=0%200%20122459671 - http://www.vupen.com/english/advisories/2010/0334
CVE ID: CVE-2010-0667 State: PUBLISHED Published: 2010-02-26T19:00:00Z Last Updated: 2024-09-17T03:07:34.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the GATEWAY_INTERFACE environment variable is set, which allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/02/15/2 - http://moinmo.in/SecurityFixes - http://hg.moinmo.in/moin/1.9/rev/04afdde50094 - http://moinmo.in/MoinMoinChat/Logs/moin-dev/2010-01-18 - http://marc.info/?l=oss-s
moinmo.in/moin/1.9/rev/04afdde50094 - http://moinmo.in/MoinMoinChat/Logs/moin-dev/2010-01-18 - http://marc.info/?l=oss-security&m=126676896601156&w=2 - http://www.openwall.com/lists/oss-security/2010/01/21/6 - http://hg.moinmo.in/moin/1.9/rev/9d8e7ce3c3a2 - http://hg.moinmo.in/moin/1.9/raw-file/1.9.1/docs/CHANGES - http://marc.info/?l=oss-security&m=126625972814888&w=2 - http://secunia.com/advisories/38242
CVE ID: CVE-2010-0668 State: PUBLISHED Published: 2010-02-26T19:00:00 Last Updated: 2024-08-07T00:59:38.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors, related to configurations that have a non-empty superuser list, the xmlrpc action enabled, the SyncPages action enabled, or OpenID configured. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56002 - http://www.openwall.com/lists/oss-security/2010/02/15/2 - http://www.securityfocus.com/bid/38023 - http://moinmo.in/Securi
tp://www.openwall.com/lists/oss-security/2010/02/15/2 - http://www.securityfocus.com/bid/38023 - http://moinmo.in/SecurityFixes - http://hg.moinmo.in/moin/1.8/raw-file/1.8.7/docs/CHANGES - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=569975 - https://bugzilla.redhat.com/show_bug.cgi?id=565604 - http://www.osvdb.org/62043 - http://marc.info/?l=oss-security&m=126676896601156&w=2 - http://moinmo.in/MoinMoinRelease1.8 - http://secunia.com/advisories/38709 - http://marc.info/?l=oss-security&m=126625972814888&w=2 - http://www.debian.org/security/2010/dsa-2014 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035438.html - http://secunia.com/advisories/38444 - http://sec
edoraproject.org/pipermail/package-announce/2010-February/035438.html - http://secunia.com/advisories/38444 - http://secunia.com/advisories/38903 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035374.html - http://www.vupen.com/english/advisories/2010/0600 - http://www.vupen.com/english/advisories/2010/0266
CVE ID: CVE-2010-0669 State: PUBLISHED Published: 2010-02-26T19:00:00 Last Updated: 2024-08-07T00:59:38.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: MoinMoin before 1.8.7 and 1.9.x before 1.9.2 does not properly sanitize user profiles, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/02/15/2 - http://www.securityfocus.com/bid/38023 - http://moinmo.in/SecurityFixes - http://hg.moinmo.in/moin/1.8/raw-file/1.8.7/docs/CHANGES - http://moinmo.in/MoinMoinRelease1.8 - http://www.debian.org/security/2010/dsa-2014 - http://www.openwall.com/lists/oss-security/2010/02/21/2
nMoinRelease1.8 - http://www.debian.org/security/2010/dsa-2014 - http://www.openwall.com/lists/oss-security/2010/02/21/2 - http://secunia.com/advisories/38444 - http://secunia.com/advisories/38903 - http://www.openwall.com/lists/oss-security/2010/02/15/4 - http://www.vupen.com/english/advisories/2010/0600
CVE ID: CVE-2010-0670 State: PUBLISHED Published: 2010-02-22T19:00:00 Last Updated: 2024-08-07T00:59:38.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the IP-Tech JQuarks (com_jquarks) Component before 0.2.4 for Joomla! allows attackers to obtain the installation path for Joomla! via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56523 - http://www.iptechinside.com/labs/news/show/6
CVE ID: CVE-2010-0671 State: PUBLISHED Published: 2010-02-22T20:00:00 Last Updated: 2024-08-07T00:59:38.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in KR MEDIA Pogodny CMS allows remote attackers to execute arbitrary SQL commands via the id parameter in a niusy action. Additional Analyst Notes: - CVE Program Container: References: - http://ariko-security.com/feb2010/ad439.html - http://www.osvdb.org/62343 - http://secunia.com/advisories/38571 - http://www.securityfocus.com/bid/38253 - http://packetstormsecurity.org/1002-exploits/pogodnycms-sql.txt - http://www.exploit-db.com/exploits/11473 - http://www.securityfocus.com/archive/1/5
g/1002-exploits/pogodnycms-sql.txt - http://www.exploit-db.com/exploits/11473 - http://www.securityfocus.com/archive/1/509554/100/0/threaded
CVE ID: CVE-2010-0672 State: PUBLISHED Published: 2010-02-22T20:00:00 Last Updated: 2024-08-07T00:59:38.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in WSN Guest 1.02 allows remote attackers to execute arbitrary SQL commands via the orderlinks parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56256 - http://www.securityfocus.com/bid/38236 - http://www.exploit-db.com/exploits/11436 - http://packetstormsecurity.org/1002-exploits/wsnguest102-sql.txt
CVE ID: CVE-2010-0673 State: PUBLISHED Published: 2010-02-22T20:00:00 Last Updated: 2024-08-07T00:59:38.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in cplphoto.php in the Copperleaf Photolog plugin 0.16, and possibly earlier, for WordPress allows remote attackers to execute arbitrary SQL commands via the postid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/62346 - http://www.exploit-db.com/exploits/11458 - http://packetstormsecurity.org/1002-exploits/wpcopperleaf-sql.txt - http://secunia.com/advisories/38579 - http://www.securityfocus.com/bid/38239
CVE ID: CVE-2010-0674 State: PUBLISHED Published: 2010-02-22T20:00:00 Last Updated: 2024-08-07T00:59:38.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: StatCounteX 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for path/stats.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1002-exploits/statcountex-disclose.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/56264 - http://www.exploit-db.com/exploits/11434
CVE ID: CVE-2010-0675 State: PUBLISHED Published: 2010-02-22T20:00:00Z Last Updated: 2024-09-17T03:34:15.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in BGSvetionik BGS CMS 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1002-exploits/bgscms-xss.txt - http://www.securityfocus.com/bid/38264 - http://secunia.com/advisories/38597 - http://osvdb.org/62363
CVE ID: CVE-2010-0676 State: PUBLISHED Published: 2010-02-22T20:00:00Z Last Updated: 2024-09-16T18:19:33.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in the RWCards (com_rwcards) component 3.0.18 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1002-exploits/joomlarwcards-lfi.txt - http://www.securityfocus.com/bid/38267 - http://secunia.com/advisories/38638
CVE ID: CVE-2010-0677 State: PUBLISHED Published: 2010-02-22T21:00:00 Last Updated: 2024-08-07T00:59:38.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Katalog Stron Hurricane 1.3.5, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the get parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/62339 - http://www.exploit-db.com/exploits/11452 - http://packetstormsecurity.org/1002-exploits/katalog-rfisql.txt - http://secunia.com/advisories/38581
CVE ID: CVE-2010-0678 State: PUBLISHED Published: 2010-02-22T21:00:00 Last Updated: 2024-08-07T00:59:38.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/moderation.php in Katalog Stron Hurricane 1.3.5, and possibly earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the includes_directory parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11452 - http://packetstormsecurity.org/1002-exploits/katalog-rfisql.txt - http://secunia.com/advisories/38581 - http://osvdb.org/62340
CVE ID: CVE-2010-0679 State: PUBLISHED Published: 2010-02-22T21:00:00 Last Updated: 2024-08-07T00:59:38.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the HyleosChemView.HLChemView ActiveX control (HyleosChemView.ocx) in Hyleos ChemView 1.9.5.1 allow remote attackers to execute arbitrary code via a large number of white space characters in the filename argument to the (1) SaveasMolFile and (2) ReadMolFile methods. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1002-exploits/hyleoschemview-heap.rb.txt - http://secunia.com/advisories/38523 - http://www.security-assessment.com/files/adviso
loits/hyleoschemview-heap.rb.txt - http://secunia.com/advisories/38523 - http://www.security-assessment.com/files/advisories/2010-02-11_ChemviewX_Activex.pdf - http://www.securityfocus.com/bid/38225 - http://osvdb.org/62276 - http://packetstormsecurity.org/1002-advisories/chemviewx-overflow.txt - http://www.exploit-db.com/exploits/11422
CVE ID: CVE-2010-0680 State: PUBLISHED Published: 2010-02-22T21:00:00 Last Updated: 2024-08-07T00:59:38.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in ZeusCMS 0.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38237 - http://www.exploit-db.com/exploits/11437
CVE ID: CVE-2010-0681 State: PUBLISHED Published: 2010-02-22T21:00:00 Last Updated: 2024-08-07T00:59:38.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZeusCMS 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request for admin/backup.sql. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11437
CVE ID: CVE-2010-0682 State: PUBLISHED Published: 2010-02-23T20:00:00 Last Updated: 2024-08-07T00:59:38.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other authors via a direct request with a modified p parameter. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052932.html - http://tmacuk.co.uk/?p=180 - http://wordpress.org/development/2010/02/wordpress-2-9-2/ - http://secunia.com/advisories/42871 - http://hakre.wordpress.com/2010/02/16/the-short-memory-of-wordpress-org-security/ - https://core.trac.wor
sories/42871 - http://hakre.wordpress.com/2010/02/16/the-short-memory-of-wordpress-org-security/ - https://core.trac.wordpress.org/ticket/11236 - http://secunia.com/advisories/38592 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052917.html - http://www.osvdb.org/62330
CVE ID: CVE-2010-0683 State: PUBLISHED Published: 2010-02-25T19:00:00Z Last Updated: 2024-09-16T16:23:30.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in TIBRepoServer5.jar in TIBCO Administrator 5.4.0 through 5.6.0, when JMS transport is used, allows remote authenticated users to execute arbitrary code on all domain nodes via vectors related to leveraging administrative credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0463 - http://secunia.com/advisories/38732 - http://www.securityfocus.com/bid/38396 - http://www.tibco.com/multimedia/security_advisory_administrator_tcm8-1068
732 - http://www.securityfocus.com/bid/38396 - http://www.tibco.com/multimedia/security_advisory_administrator_tcm8-10685.txt - http://www.tibco.com/services/support/advisories/adminstrator-advisory_20100223.jsp
CVE ID: CVE-2010-0684 State: PUBLISHED Published: 2010-04-05T16:00:00 Last Updated: 2024-08-07T00:59:38.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script or HTML via the JMSDestination parameter in a queue action. Additional Analyst Notes: - CVE Program Container: References: - https://issues.apache.org/activemq/browse/AMQ-2613 - http://www.securityfocus.com/archive/1/510419/100/0/threaded - http://securitytracker.com/id?1023778 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57397 - http://activemq.apache.o
//securitytracker.com/id?1023778 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57397 - http://activemq.apache.org/activemq-531-release.html - http://www.securityfocus.com/bid/39119 - http://secunia.com/advisories/39223 - https://issues.apache.org/activemq/browse/AMQ-2625 - http://www.rajatswarup.com/CVE-2010-0684.txt
CVE ID: CVE-2010-0685 State: PUBLISHED Published: 2010-02-23T20:00:00 Last Updated: 2024-08-07T00:59:38.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: The design of the dialplan functionality in Asterisk Open Source 1.2.x, 1.4.x, and 1.6.x; and Asterisk Business Edition B.x.x and C.x.x, when using the ${EXTEN} channel variable and wildcard pattern matches, allows context-dependent attackers to inject strings into the dialplan using metacharacters that are injected when the variable is expanded, as demonstrated using the Dial application to process a crafted SIP INVITE message that adds an unintended outgoing channel leg. NOTE: it could be argued that this is not a vulnerabil
SIP INVITE message that adds an unintended outgoing channel leg. NOTE: it could be argued that this is not a vulnerability in Asterisk, but a class of vulnerabilities that can occur in any program that uses this feature without the associated filtering functionality that is already available. Additional Analyst Notes: - CVE Program Container: References: - http://svn.asterisk.org/svn/asterisk/branches/1.2/README-SERIOUSLY.bestpractices.txt - http://secunia.com/advisories/39096 - http://www.securitytracker.com/id?1023637 - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037679.html - http://www.securityfocus.com/archive/1/509608/100/0/threaded - http://secunia.com/adviso
nounce/2010-March/037679.html - http://www.securityfocus.com/archive/1/509608/100/0/threaded - http://secunia.com/advisories/38641 - http://downloads.digium.com/pub/security/AST-2010-002.html - http://www.vupen.com/english/advisories/2010/0439 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56397
CVE ID: CVE-2010-0686 State: PUBLISHED Published: 2010-04-01T19:00:00 Last Updated: 2024-08-07T00:59:38.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebAccess in VMware VirtualCenter 2.0.2 and 2.5, VMware Server 2.0, and VMware ESX 3.0.3 and 3.5 allows remote attackers to leverage proxy-server functionality to spoof the origin of requests via unspecified vectors, related to a "URL forwarding vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39037 - http://lists.vmware.com/pipermail/security-announce/2010/000086.html - http://www.vmware.com/security/advisories/VMSA-2010-0005.html - http://www.securitytracker.co
nnounce/2010/000086.html - http://www.vmware.com/security/advisories/VMSA-2010-0005.html - http://www.securitytracker.com/id?1023769
CVE ID: CVE-2010-0688 State: PUBLISHED Published: 2010-03-19T20:00:00 Last Updated: 2024-08-07T00:59:38.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Orbital Viewer 1.04 allows user-assisted remote attackers to execute arbitrary code via a crafted (1) .orb or (2) .ov file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38720 - http://www.securityfocus.com/bid/40985 - http://www.osvdb.org/62580 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59560 - http://www.exploit-db.com/exploits/13940 - http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-011-orbital-viewer-orb-buf
om/exploits/13940 - http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-011-orbital-viewer-orb-buffer-overflow/ - http://www.vupen.com/english/advisories/2010/0478 - http://www.securityfocus.com/bid/38436
CVE ID: CVE-2010-0689 State: PUBLISHED Published: 2010-02-26T19:00:00 Last Updated: 2024-08-07T00:59:38.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ExecuteExe method in the DVBSExeCall Control ActiveX control 1.0.0.1 in DVBSExeCall.ocx in DATEV Base System (aka Grundpaket Basis) allows remote attackers to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sotiriu.de/demos/videos/nso-2010-003.html - http://www.securityfocus.com/bid/38415 - http://osvdb.org/62564 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56530 - http://www.vupen.com/english/advisories/2010/0474 - http://www.securityfoc
e.xforce.ibmcloud.com/vulnerabilities/56530 - http://www.vupen.com/english/advisories/2010/0474 - http://www.securityfocus.com/archive/1/509743/100/0/threaded - http://sotiriu.de/adv/NSOADV-2010-003.txt - http://www.datev.de/info-db/1080162 - http://secunia.com/advisories/38716