Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-2585 State: PUBLISHED Published: 2010-10-26T18:00:00Z Last Updated: 2024-09-16T20:28:02.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the RealPage Module Upload ActiveX control in Realpage.dll 1.0.0.9 in RealPage Module ActiveX Controls allow remote attackers to execute arbitrary code via a long (1) DestURL or (2) SourceFile property value. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41392 - http://www.osvdb.org/68814 - http://www.securityfocus.com/bid/44302 - http://secunia.com/secunia_research/2010-119/
CVE ID: CVE-2010-2586 State: PUBLISHED Published: 2010-12-02T16:00:00 Last Updated: 2024-08-07T02:39:37.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in in_nsv.dll in the in_nsv plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted Table of Contents (TOC) in a (1) NSV stream or (2) NSV file that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42004 - http://forums.winamp.com/showthread.php?threadid=159785 - http://forums.winamp.com/showthread.php?t=324322 - http://www.securityfocus.com/archive/1/514962/100/0/threaded - http://
ttp://forums.winamp.com/showthread.php?t=324322 - http://www.securityfocus.com/archive/1/514962/100/0/threaded - http://secunia.com/secunia_research/2010-127/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12587
CVE ID: CVE-2010-2587 State: PUBLISHED Published: 2011-02-10T15:00:00 Last Updated: 2024-08-07T02:39:37.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2588 and CVE-2010-4188. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65243 - http://www.vupen.com/english/advisories/2011/0335 - http://www.securityfocus.com/bid/46316 - http://www.adobe.com/support/security/bulletins/apsb11-01.html - h
/2011/0335 - http://www.securityfocus.com/bid/46316 - http://www.adobe.com/support/security/bulletins/apsb11-01.html - http://www.securitytracker.com/id?1025056
CVE ID: CVE-2010-2588 State: PUBLISHED Published: 2011-02-10T15:00:00 Last Updated: 2024-08-07T02:39:37.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2587 and CVE-2010-4188. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46318 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65244 - http://www.vupen.com/english/advisories/2011/0335 - http://www.adobe.com/support/security/bulletins/apsb11-01.html - h
- http://www.vupen.com/english/advisories/2011/0335 - http://www.adobe.com/support/security/bulletins/apsb11-01.html - http://www.securitytracker.com/id?1025056
CVE ID: CVE-2010-2589 State: PUBLISHED Published: 2011-02-10T15:00:00 Last Updated: 2024-08-07T02:39:37.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0335 - http://www.adobe.com/support/security/bulletins/apsb11-01.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/65245 - http://www.securityfocus.com/bid/46329 - http://www.securitytracker.com/id?1025056
CVE ID: CVE-2010-2590 State: PUBLISHED Published: 2010-12-22T01:00:00 Last Updated: 2024-08-07T02:39:37.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the CrystalReports12.CrystalPrintControl.1 ActiveX control in PrintControl.dll 12.3.2.753 in SAP Crystal Reports 2008 SP3 Fix Pack 3.2 allows remote attackers to execute arbitrary code via a long ServerResourceVersion property value. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/1539269 - http://www.exploit-db.com/exploits/15733 - http://www.securityfocus.com/bid/45387 - http://www.securityfocus.com/archive/1/515369/100/0/threaded - http
its/15733 - http://www.securityfocus.com/bid/45387 - http://www.securityfocus.com/archive/1/515369/100/0/threaded - http://pocoftheday.blogspot.com/2010/12/crystal-reports-viewer-1200549-activex.html - http://secunia.com/secunia_research/2010-135/ - http://secunia.com/advisories/42305 - http://www.osvdb.org/69917 - http://www.securitytracker.com/id?1024915
CVE ID: CVE-2010-2594 State: PUBLISHED Published: 2010-07-01T18:00:00Z Last Updated: 2024-09-16T22:02:22.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent 3.1.7 and earlier on Windows, Snare Agent 1.5.0 and earlier on Linux and AIX, Snare Agent 1.4 and earlier on IRIX, Snare Epilog 1.5.3 and earlier on Windows, and Snare Epilog 1.2 and earlier on UNIX allow remote attackers to hijack the authentication of administrators for requests that (1) change the password or (2) change the listening port. Additional Analyst
cation of administrators for requests that (1) change the password or (2) change the listening port. Additional Analyst Notes: - CVE Program Container: References: - http://holisticinfosec.org/content/view/144/45/ - http://www.securityfocus.com/bid/41226 - http://secunia.com/advisories/39562 - http://www.kb.cert.org/vuls/id/173009
CVE ID: CVE-2010-2595 State: PUBLISHED Published: 2010-07-01T18:00:00 Last Updated: 2024-08-07T02:39:37.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TIFFYCbCrtoRGB function in LibTIFF 3.9.0 and 3.9.2, as used in ImageMagick, does not properly handle invalid ReferenceBlackWhite values, which allows remote attackers to cause a denial of service (application crash) via a crafted TIFF image that triggers an array index error, related to "downsampled OJPEG input." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40527 - http://marc.info/?l=oss-security&m=127731610612908&w=2 - http://www.debian.org/security/2012/dsa-2552 - http:/
s/40527 - http://marc.info/?l=oss-security&m=127731610612908&w=2 - http://www.debian.org/security/2012/dsa-2552 - http://blackberry.com/btsc/KB27244 - http://www.vupen.com/english/advisories/2010/1761 - http://security.gentoo.org/glsa/glsa-201209-02.xml - http://bugzilla.maptools.org/show_bug.cgi?id=2208 - http://www.redhat.com/support/errata/RHSA-2010-0519.html - http://secunia.com/advisories/40422 - http://secunia.com/advisories/50726 - https://bugzilla.redhat.com/show_bug.cgi?id=583081
CVE ID: CVE-2010-2596 State: PUBLISHED Published: 2010-07-01T18:00:00 Last Updated: 2024-08-07T02:39:37.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OJPEGPostDecode function in tif_ojpeg.c in LibTIFF 3.9.0 and 3.9.2, as used in tiff2ps, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted TIFF image, related to "downsampled OJPEG input." Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=oss-security&m=127731610612908&w=2 - http://bugzilla.maptools.org/show_bug.cgi?id=2209 - http://security.gentoo.org/glsa/glsa-201209-02.xml - http://secunia.com/advisories/40422 - http://secunia.co
i?id=2209 - http://security.gentoo.org/glsa/glsa-201209-02.xml - http://secunia.com/advisories/40422 - http://secunia.com/advisories/50726 - https://bugzilla.redhat.com/show_bug.cgi?id=583081
CVE ID: CVE-2010-2597 State: PUBLISHED Published: 2010-07-01T18:00:00 Last Updated: 2024-08-07T02:39:37.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TIFFVStripSize function in tif_strip.c in LibTIFF 3.9.0 and 3.9.2 makes incorrect calls to the TIFFGetField function, which allows remote attackers to cause a denial of service (application crash) via a crafted TIFF image, related to "downsampled OJPEG input" and possibly related to a compiler optimization that triggers a divide-by-zero error. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=603703 - http://secunia.com/advisories/40527 - http://bugzilla.maptools.o
- https://bugzilla.redhat.com/show_bug.cgi?id=603703 - http://secunia.com/advisories/40527 - http://bugzilla.maptools.org/show_bug.cgi?id=2215 - http://www.debian.org/security/2012/dsa-2552 - https://bugs.launchpad.net/bugs/593067 - http://www.vupen.com/english/advisories/2010/1761 - http://security.gentoo.org/glsa/glsa-201209-02.xml - http://www.redhat.com/support/errata/RHSA-2010-0519.html - http://secunia.com/advisories/40422 - http://secunia.com/advisories/50726 - https://bugzilla.redhat.com/show_bug.cgi?id=583081
CVE ID: CVE-2010-2598 State: PUBLISHED Published: 2010-07-01T18:00:00 Last Updated: 2024-08-07T02:39:37.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibTIFF in Red Hat Enterprise Linux (RHEL) 3 on x86_64 platforms, as used in tiff2rgba, attempts to process image data even when the required compression functionality is not configured, which allows remote attackers to cause a denial of service via a crafted TIFF image, related to "downsampled OJPEG input." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1761 - http://www.redhat.com/support/errata/RHSA-2010-0520.html - http://secunia.com/advisories/40536 - https://
es/2010/1761 - http://www.redhat.com/support/errata/RHSA-2010-0520.html - http://secunia.com/advisories/40536 - https://bugzilla.redhat.com/show_bug.cgi?id=583081
CVE ID: CVE-2010-2599 State: PUBLISHED Published: 2011-01-12T23:00:00 Last Updated: 2024-08-07T02:39:37.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Research In Motion (RIM) BlackBerry Device Software before 6.0.0 allows remote attackers to cause a denial of service (browser hang) via a crafted web page. Additional Analyst Notes: - CVE Program Container: References: - http://www.blackberry.com/btsc/KB24841 - http://www.securitytracker.com/id?1024952 - http://www.securityfocus.com/bid/45754 - http://blog.tehtri-security.com/2011/01/blackhat-dc-2011-inglourious-hackerds.html - http://osvdb.org/70404 - http://www.securityfocus.com/archive/1/515860
1/01/blackhat-dc-2011-inglourious-hackerds.html - http://osvdb.org/70404 - http://www.securityfocus.com/archive/1/515860/100/0/threaded - http://www.vupen.com/english/advisories/2011/0082 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64622
CVE ID: CVE-2010-2600 State: PUBLISHED Published: 2010-09-15T17:26:00 Last Updated: 2024-08-07T02:39:37.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in BlackBerry Desktop Software before 6.0.0.47 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL that is located in the same folder as a file that is processed by Blackberry. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41398 - http://www.blackberry.com/btsc/KB24242 - http://secunia.com/advisories/41346 - http://www.securitytracker.com/id?1024425 - https://ova
ckberry.com/btsc/KB24242 - http://secunia.com/advisories/41346 - http://www.securitytracker.com/id?1024425 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6843 - http://www.securityfocus.com/bid/43139
CVE ID: CVE-2010-2601 State: PUBLISHED Published: 2010-10-14T17:00:00Z Last Updated: 2024-09-16T22:30:05.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.7 and earlier and 5.0.0 through 5.0.2, and BlackBerry Professional Software 4.1.4 and earlier, allow user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - http://blackberry.com/btsc/KB24547
CVE ID: CVE-2010-2602 State: PUBLISHED Published: 2010-12-17T18:00:00 Last Updated: 2024-08-07T02:39:37.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Enterprise Server 5.0.0 through 5.0.2, 4.1.6, and 4.1.7 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45392 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64066 - http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=
force.ibmcloud.com/vulnerabilities/64066 - http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB24761 - http://www.vupen.com/english/advisories/2010/3237 - http://www.securitytracker.com/id?1024891 - http://secunia.com/advisories/35632
CVE ID: CVE-2010-2603 State: PUBLISHED Published: 2010-12-17T18:00:00 Last Updated: 2024-08-07T02:39:37.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: RIM BlackBerry Desktop Software 4.7 through 6.0 for PC, and 1.0 for Mac, uses a weak password to encrypt a database backup file, which makes it easier for local users to decrypt the file via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42661 - http://secunia.com/advisories/42657 - http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB24764 - http://www.securitytracker.com/id?1024908 - http://www.securityfocus.com/bid/45434
CVE ID: CVE-2010-2604 State: PUBLISHED Published: 2011-01-12T23:00:00 Last Updated: 2024-08-07T02:39:37.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the PDF Distiller in the BlackBerry Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server 4.1.3 through 5.0.2, and Enterprise Server Express 5.0.1 and 5.0.2, allow remote attackers to execute arbitrary code via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0081 - http://www.blackberry.com/btsc/KB25382 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64621 - http://secunia.com/ad
p://www.blackberry.com/btsc/KB25382 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64621 - http://secunia.com/advisories/42882 - http://www.securitytracker.com/id?1024953 - http://www.securityfocus.com/bid/45753 - http://osvdb.org/70393
CVE ID: CVE-2010-2609 State: PUBLISHED Published: 2010-07-01T21:00:00 Last Updated: 2024-08-07T02:39:36.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in show_search_result.php in 2daybiz Job Search Engine Script allows remote attackers to execute arbitrary SQL commands via the keyword parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41018 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59628 - http://www.exploit-db.com/exploits/13978 - http://www.osvdb.org/65665 - http://secunia.com/advisories/40290 - http://packetstormsecurity.org/1006-exploits/jobsearchengine-sql.txt - http://ww
- http://secunia.com/advisories/40290 - http://packetstormsecurity.org/1006-exploits/jobsearchengine-sql.txt - http://www.vupen.com/english/advisories/2010/1581
CVE ID: CVE-2010-2610 State: PUBLISHED Published: 2010-07-01T21:00:00 Last Updated: 2024-08-07T02:39:37.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in 2daybiz Job Site Script allow remote attackers to execute arbitrary SQL commands via the (1) jid parameter to view_current_job.php, (2) job_iid parameter to show_search_more.php, and (3) left_cat parameter to show_search_result.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14025 - http://osvdb.org/65714 - http://osvdb.org/65715 - http://osvdb.org/65716 - http://secunia.com/advisories/40301 - https://exchange.xforce.ibmcloud.com
://osvdb.org/65715 - http://osvdb.org/65716 - http://secunia.com/advisories/40301 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59733 - http://www.securityfocus.com/bid/41123
CVE ID: CVE-2010-2611 State: PUBLISHED Published: 2010-07-01T21:00:00 Last Updated: 2024-08-07T02:39:37.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in show_search_result.php in i-netsolution Job Search Engine allows remote attackers to execute arbitrary SQL commands via the keyword parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1625 - http://packetstormsecurity.org/1006-exploits/inetsolutionjobsearch-sql.txt - http://www.exploit-db.com/exploits/14079 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59777
CVE ID: CVE-2010-2612 State: PUBLISHED Published: 2010-07-01T21:00:00Z Last Updated: 2024-09-17T03:18:40.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the HP OpenVMS Auditing feature in OpenVMS ALPHA 7.3-2, 8.2, and 8.3; and OpenVMS for Integrity Servers 8.3 AND 8.3-1H1; allows local users to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.itrc.hp.com/openvms_patches/alpha/V8.2/VMS82A_SYS_MUP-V1700.txt - ftp://ftp.itrc.hp.com/openvms_patches/alpha/V7.3-2/VMS732_SYS_MUP-V1900.txt - http://secunia.com/advisories/40361 - ftp://ftp.itrc.hp.com/openvms_patches/i64/V8.3/VMS83
-2/VMS732_SYS_MUP-V1900.txt - http://secunia.com/advisories/40361 - ftp://ftp.itrc.hp.com/openvms_patches/i64/V8.3/VMS83I_SYS_MUP-V1400.txt - ftp://ftp.itrc.hp.com/openvms_patches/alpha/V8.3/VMS83A_SYS_MUP-V1700.txt - http://www.securityfocus.com/bid/41186 - ftp://ftp.itrc.hp.com/openvms_patches/i64/V8.3-1H1/VMS831H1I_SYS_MUP-V1100.txt - http://www.vupen.com/english/advisories/2010/1614
CVE ID: CVE-2010-2613 State: PUBLISHED Published: 2010-07-01T21:00:00 Last Updated: 2024-08-07T02:39:37.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the JExtensions JE Awd Song (com_awd_song) component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the song review field, which is not properly handled in a view action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41165 - http://www.exploit-db.com/exploits/14059 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59807 - http://packetstormsecurity.org/1006-exploits/joomlaawdsong-xss
ps://exchange.xforce.ibmcloud.com/vulnerabilities/59807 - http://packetstormsecurity.org/1006-exploits/joomlaawdsong-xss.txt
CVE ID: CVE-2010-2614 State: PUBLISHED Published: 2010-07-01T21:00:00 Last Updated: 2024-08-07T02:39:37.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/admin.php in Grafik CMS 1.1.2, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit_page action. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1629 - http://www.htbridge.ch/advisory/sql_injection_vulnerability_in_grafik_cms.html - http://www.securityfocus.com/archive/1/512071/100/0/threaded
CVE ID: CVE-2010-2615 State: PUBLISHED Published: 2010-07-01T21:00:00 Last Updated: 2024-08-07T02:39:37.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in admin/admin.php in Grafik CMS 1.1.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) page_menu and (2) description parameters in an edit_page action. Additional Analyst Notes: - CVE Program Container: References: - http://www.htbridge.ch/advisory/xss_vulnerability_in_grafik_cms.html - http://www.vupen.com/english/advisories/2010/1629 - http://www.htbridge.ch/advisory/xss_vulnerability_in_grafik_cms_1.html - http://www.securit
glish/advisories/2010/1629 - http://www.htbridge.ch/advisory/xss_vulnerability_in_grafik_cms_1.html - http://www.securityfocus.com/archive/1/512072/100/0/threaded
CVE ID: CVE-2010-2616 State: PUBLISHED Published: 2010-07-01T21:00:00 Last Updated: 2024-08-07T02:39:37.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in bible.php in PHP Bible Search, probably 0.99, allows remote attackers to execute arbitrary SQL commands via the chapter parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41197 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59842 - http://www.packetstormsecurity.com/1006-exploits/phpbiblesearch-sqlxss.txt
CVE ID: CVE-2010-2617 State: PUBLISHED Published: 2010-07-01T21:00:00 Last Updated: 2024-08-07T02:39:38.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in bible.php in PHP Bible Search allows remote attackers to inject arbitrary web script or HTML via the chapter parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/59843 - http://www.securityfocus.com/bid/41197 - http://www.packetstormsecurity.com/1006-exploits/phpbiblesearch-sqlxss.txt
CVE ID: CVE-2010-2618 State: PUBLISHED Published: 2010-07-01T21:00:00 Last Updated: 2024-08-07T02:39:38.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in inc/smarty/libs/init.php in AdaptCMS 2.0.0 Beta, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter. NOTE: it was later reported that 2.0.1 is also affected. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1006-exploits/adaptcms200-rfi.txt - http://www.securityfocus.com/bid/41116 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59752 - http://www.exploit-db.co
/www.securityfocus.com/bid/41116 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59752 - http://www.exploit-db.com/exploits/15237 - http://www.exploit-db.com/exploits/14016
CVE ID: CVE-2010-2619 State: PUBLISHED Published: 2010-07-02T20:00:00Z Last Updated: 2024-09-17T01:21:13.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix XenServer 5.0 Update 2 and earlier, and 5.5 Update 1 and earlier, when using a pvops kernel, allows guest users to cause a denial of service in the host via unspecified vectors that trigger "incorrectly set flags." Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX125319 - http://secunia.com/advisories/40282 - http://www.securitytracker.com/id?1024157 - http://www.vupen.com/english/advisories/2010/1613
CVE ID: CVE-2010-2620 State: PUBLISHED Published: 2010-07-02T20:00:00Z Last Updated: 2024-09-16T20:02:34.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open&Compact FTP Server (Open-FTPD) 1.2 and earlier allows remote attackers to bypass authentication by sending (1) LIST, (2) RETR, (3) STOR, or other commands without performing the required login steps first. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40284 - http://www.exploit-db.com/exploits/13932