Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
om/english/advisories/2010/2331 - http://www.kb.cert.org/vuls/id/491991 - http://www.redhat.com/support/errata/RHSA-2010-0743.html - http://www.adobe.com/support/security/bulletins/apsb10-21.html - http://www.us-cert.gov/cas/techalerts/TA10-279A.html - http://secunia.com/advisories/41340 - http://community.websense.com/blogs/securitylabs/archive/2010/09/10/brief-analysis-on-adobe-reader-sing-table-parsing-vulnerability-cve-2010-2883.aspx - https://exchange.xforce.ibmcloud.com/vulnerabilities/61635 - http://blog.metasploit.com/2010/09/return-of-unpublished-adobe.html - http://www.securityfocus.com/bid/43057 - http://www.turbolinux.co.jp/security/2011/TLSA-2011-2j.txt - http://lists.opensuse.o
//www.securityfocus.com/bid/43057 - http://www.turbolinux.co.jp/security/2011/TLSA-2011-2j.txt - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
CVE ID: CVE-2010-2884 State: PUBLISHED Published: 2010-09-15T17:26:00 Last Updated: 2024-08-07T02:46:48.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player 10.1.82.76 and earlier on Windows, Mac OS X, Linux, and Solaris and 10.1.92.10 on Android; authplay.dll in Adobe Reader and Acrobat 9.x before 9.4; and authplay.dll in Adobe Reader and Acrobat 8.x before 8.2.5 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in September 2010. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-263A
r 2010. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-263A.html - http://www.vupen.com/english/advisories/2011/0192 - http://support.apple.com/kb/HT4435 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00001.html - http://www.vupen.com/english/advisories/2011/0191 - http://secunia.com/advisories/43025 - http://secunia.com/advisories/43026 - http://security.gentoo.org/glsa/glsa-201101-09.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6852 - http://www.adobe.com/support/security/advisories/apsa10-03.html - http://lists.apple.com/archives/security-announce/2010//Nov/msg00
adobe.com/support/security/advisories/apsa10-03.html - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://security.gentoo.org/glsa/glsa-201101-08.xml - http://secunia.com/advisories/41526 - http://www.adobe.com/support/security/bulletins/apsb10-22.html - http://www.redhat.com/support/errata/RHSA-2010-0743.html - http://www.adobe.com/support/security/bulletins/apsb10-21.html - http://www.us-cert.gov/cas/techalerts/TA10-279A.html - http://secunia.com/advisories/41443 - http://secunia.com/advisories/41434 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61771 - http://www.kb.cert.org/vuls/id/275289 - http://www.vupen.com/english/advisories/2010/2348 - http:
ulnerabilities/61771 - http://www.kb.cert.org/vuls/id/275289 - http://www.vupen.com/english/advisories/2010/2348 - http://www.vupen.com/english/advisories/2010/2349 - http://www.redhat.com/support/errata/RHSA-2010-0706.html - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html - http://secunia.com/advisories/41435
CVE ID: CVE-2010-2885 State: PUBLISHED Published: 2010-10-26T18:00:00Z Last Updated: 2024-09-16T21:08:13.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allows remote attackers to inject arbitrary web script or HTML via vectors related to WebHelp generation with RoboHelp for Word. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2718 - http://secunia.com/advisories/41870 - http://www.adobe.com/support/security/bulletins/apsb10-23.html - http://securitytracker.com/id?1024611
CVE ID: CVE-2010-2886 State: PUBLISHED Published: 2010-10-26T18:00:00Z Last Updated: 2024-09-17T01:51:55.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2718 - http://secunia.com/advisories/41870 - http://www.adobe.com/support/security/bulletins/apsb10-23.html - http://securitytracker.com/id?1024611
CVE ID: CVE-2010-2887 State: PUBLISHED Published: 2010-10-06T16:00:00 Last Updated: 2024-08-07T02:46:48.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Adobe Reader and Acrobat 9.x before 9.4 on Linux allow attackers to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00001.html - http://www.vupen.com/english/advisories/2011/0191 - http://secunia.com/advisories/43025 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14416 - http://security.gentoo.org/glsa/glsa-201101-08.xml - http://
ory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14416 - http://security.gentoo.org/glsa/glsa-201101-08.xml - http://www.redhat.com/support/errata/RHSA-2010-0743.html - http://www.adobe.com/support/security/bulletins/apsb10-21.html - http://www.us-cert.gov/cas/techalerts/TA10-279A.html - http://www.securityfocus.com/bid/43740 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
CVE ID: CVE-2010-2888 State: PUBLISHED Published: 2010-10-06T16:00:00 Last Updated: 2024-08-07T02:46:48.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in an ActiveX control in Adobe Reader and Acrobat 8.x before 8.2.5 and 9.x before 9.4 on Windows allow attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7348 - http://www.adobe.com/support/security/bulletins/apsb10-21.html - http://www.us-cert.gov/cas/techalerts/TA10-279A.html
CVE ID: CVE-2010-2889 State: PUBLISHED Published: 2010-10-06T16:00:00 Last Updated: 2024-08-07T02:46:48.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to execute arbitrary code via a crafted font, a different vulnerability than CVE-2010-3626. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00001.html - http://www.vupen.com/english/advisories/2011/0191 - http://secunia.com/advisories/43025 - http://security.gentoo.org/glsa/glsa-201101-08.xml - http://www.redhat.com/
0191 - http://secunia.com/advisories/43025 - http://security.gentoo.org/glsa/glsa-201101-08.xml - http://www.redhat.com/support/errata/RHSA-2010-0743.html - http://www.adobe.com/support/security/bulletins/apsb10-21.html - http://www.us-cert.gov/cas/techalerts/TA10-279A.html - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7009
CVE ID: CVE-2010-2890 State: PUBLISHED Published: 2010-10-06T16:00:00 Last Updated: 2024-08-07T02:46:48.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-3619, CVE-2010-3621, CVE-2010-3622, CVE-2010-3628, CVE-2010-3632, and CVE-2010-3658. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00001.html - http://www.vupen.com/english/advisories/2011/0191 - http://sec
se.org/opensuse-security-announce/2010-10/msg00001.html - http://www.vupen.com/english/advisories/2011/0191 - http://secunia.com/advisories/43025 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6830 - http://security.gentoo.org/glsa/glsa-201101-08.xml - http://www.redhat.com/support/errata/RHSA-2010-0743.html - http://www.adobe.com/support/security/bulletins/apsb10-21.html - http://www.us-cert.gov/cas/techalerts/TA10-279A.html - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
CVE ID: CVE-2010-2891 State: PUBLISHED Published: 2010-10-27T22:00:00 Last Updated: 2024-08-07T02:46:48.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the smiGetNode function in lib/smi.c in libsmi 0.4.8 allows context-dependent attackers to execute arbitrary code via an Object Identifier (aka OID) represented as a numerical string containing many components separated by . (dot) characters. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html - http://secunia.com/advisories/43068 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:209 - http://www.vupen.com/eng
ecunia.com/advisories/43068 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:209 - http://www.vupen.com/english/advisories/2011/0212 - http://secunia.com/advisories/41841 - http://secunia.com/advisories/42902 - http://www.securityfocus.com/bid/44276 - http://www.debian.org/security/2011/dsa-2145 - http://www.vupen.com/english/advisories/2011/0111 - http://secunia.com/advisories/42877 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://www.securityfocus.com/archive/1/514382/100/0/threaded - http://www.vupen.com/english/advisories/2011/0076 - http://www.coresecurity.com/content/libsmi-smigetnode-buffer-overflow - http://security-tracker.debian.org
s/2011/0076 - http://www.coresecurity.com/content/libsmi-smigetnode-buffer-overflow - http://security-tracker.debian.org/tracker/CVE-2010-2891 - http://www.exploit-db.com/exploits/15293 - http://www.vupen.com/english/advisories/2010/2764 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62686
CVE ID: CVE-2010-2892 State: PUBLISHED Published: 2010-11-15T20:00:00 Last Updated: 2024-08-07T02:46:48.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: gsb/drivers.php in LANDesk Management Gateway 4.0 through 4.0-1.48 and 4.2 through 4.2-1.8 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the DRIVES parameter, as demonstrated by a cross-site request forgery (CSRF) attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/514728/100/0/threaded - http://securitytracker.com/id?1024728 - http://www.vupen.com/english/advisories/2010/2957 - http://secunia.com/advisories/42188
securitytracker.com/id?1024728 - http://www.vupen.com/english/advisories/2010/2957 - http://secunia.com/advisories/42188 - http://community.landesk.com/support/docs/DOC-21767 - http://www.coresecurity.com/content/landesk-os-command-injection-vulnerability - http://www.securityfocus.com/bid/44781 - http://www.exploit-db.com/exploits/15488
CVE ID: CVE-2010-2896 State: PUBLISHED Published: 2010-07-28T19:32:00Z Last Updated: 2024-09-16T22:45:58.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM FileNet Content Manager (CM) 4.0.0, 4.0.1, 4.5.0, and 4.5.1 before FP4 does not properly manage the InheritParentPermissions setting during an upgrade from 3.x, which might allow attackers to bypass intended folder permissions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1847 - http://www-01.ibm.com/support/docview.wss?uid=swg21441225 - http://secunia.com/advisories/40614
CVE ID: CVE-2010-2897 State: PUBLISHED Published: 2010-07-28T19:32:00 Last Updated: 2024-08-07T02:46:48.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 5.0.375.125 does not properly mitigate an unspecified flaw in the Windows kernel, which has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=48283 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11890 - http://secunia.com/advisories/40743 - http://googlechromereleases.blogspot.com/2010/07/stable-channel-update_26.html
CVE ID: CVE-2010-2898 State: PUBLISHED Published: 2010-07-28T19:32:00 Last Updated: 2024-08-07T02:46:48.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 5.0.375.125 does not properly mitigate an unspecified flaw in the GNU C Library, which has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12104 - http://secunia.com/advisories/40743 - http://googlechromereleases.blogspot.com/2010/07/stable-channel-update_26.html - http://code.google.com/p/chromium/issues/detail?id=48733
CVE ID: CVE-2010-2899 State: PUBLISHED Published: 2010-07-28T19:32:00 Last Updated: 2024-08-07T02:46:48.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the layout implementation in Google Chrome before 5.0.375.125 allows remote attackers to obtain sensitive information from process memory via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=42736 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12048 - http://secunia.com/advisories/40743 - http://googlechromereleases.blogspot.com/2010/07/stable-channel-update_26.html
CVE ID: CVE-2010-2900 State: PUBLISHED Published: 2010-07-28T19:32:00 Last Updated: 2024-08-07T02:46:48.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 5.0.375.125 does not properly handle a large canvas, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11818 - http://code.google.com/p/chromium/issues/detail?id=43813 - http://secunia.com/advisories/40743 - http://googlechromereleases.blogspot.com/2010/07/stable-channel-update_26.html
CVE ID: CVE-2010-2901 State: PUBLISHED Published: 2010-07-28T19:32:00 Last Updated: 2024-08-07T02:46:48.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rendering implementation in Google Chrome before 5.0.375.125 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=47866 - http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11997 - http://secunia.com/advisories/40743
al.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11997 - http://secunia.com/advisories/40743 - http://googlechromereleases.blogspot.com/2010/07/stable-channel-update_26.html - http://www.debian.org/security/2011/dsa-2188
CVE ID: CVE-2010-2902 State: PUBLISHED Published: 2010-07-28T19:32:00 Last Updated: 2024-08-07T02:46:48.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SVG implementation in Google Chrome before 5.0.375.125 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11896 - http://secunia.com/advisories/40743 - http://googlechromereleases.blogspot.com/2010/07/stable-channel-update_26.html - http://code.google.com/p/chromium/issues/detail?id=48284
CVE ID: CVE-2010-2903 State: PUBLISHED Published: 2010-07-28T19:32:00 Last Updated: 2024-08-07T02:46:48.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 5.0.375.125 performs unexpected truncation and improper eliding of hostnames, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=48597 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11920 - http://secunia.com/advisories/40743 - http://googlechromereleases.blogspot.com/2010/07/stable-channel-update_26.html
CVE ID: CVE-2010-2904 State: PUBLISHED Published: 2010-07-28T21:00:00 Last Updated: 2024-08-07T02:46:48.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the System Landscape Directory (SLD) component 6.4 through 7.02 in SAP NetWeaver allow remote attackers to inject arbitrary web script or HTML via the (1) action parameter to testsdic and the (2) helpstring parameter to paramhelp.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://dsecrg.com/pages/vul/show.php?id=168 - http://secunia.com/advisories/40712 - http://www.osvdb.org/66640 - http://packetstormsecurity.org/1007-advisories/DSECRG-09-068.txt
nia.com/advisories/40712 - http://www.osvdb.org/66640 - http://packetstormsecurity.org/1007-advisories/DSECRG-09-068.txt - http://www.osvdb.org/66639 - http://www.vupen.com/english/advisories/2010/1935 - https://service.sap.com/sap/support/notes/1416047 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60668
CVE ID: CVE-2010-2905 State: PUBLISHED Published: 2010-07-28T21:00:00 Last Updated: 2024-08-07T02:46:48.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in info.php in ScriptsFeed and BrotherScripts (BS) Scripts Directory allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41733 - http://secunia.com/advisories/40463 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60073 - http://www.exploit-db.com/exploits/14370
CVE ID: CVE-2010-2906 State: PUBLISHED Published: 2010-07-28T21:00:00 Last Updated: 2024-08-07T02:46:48.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in articlesdetails.php in ScriptsFeed and BrotherScripts (BS) Scripts Directory allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2010-2905. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40463 - http://www.exploit-db.com/exploits/14371 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60073
CVE ID: CVE-2010-2907 State: PUBLISHED Published: 2010-07-28T21:00:00 Last Updated: 2024-08-07T02:46:48.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Huru Helpdesk (com_huruhelpdesk) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid[0] parameter in a detail action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39366 - http://www.exploit-db.com/exploits/14449 - http://packetstormsecurity.org/1004-exploits/joomlahuruhelpdesk-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/60609
CVE ID: CVE-2010-2908 State: PUBLISHED Published: 2010-07-28T21:00:00 Last Updated: 2024-08-07T02:46:48.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Joomdle (com_joomdle) component 0.24 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the course_id parameter in a detail action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14466 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60623 - http://www.vupen.com/english/advisories/2010/1923 - http://packetstormsecurity.org/1007-exploits/joomlajoomdle-sql.txt
CVE ID: CVE-2010-2909 State: PUBLISHED Published: 2010-07-28T21:00:00 Last Updated: 2024-08-07T02:46:48.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ttvideo.php in the TTVideo (com_ttvideo) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter in a video action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.toughtomato.com/downloads/16-comttvideo-1-0-1/file - http://adv.salvatorefresta.net/TTVideo_1.0_Joomla_Component_SQL_Injection_Vulnerability-27072010.txt - http://www.exploit-db.com/exploits/14481 - http://www.securityfocus.com/archive/1/512685/1
_Vulnerability-27072010.txt - http://www.exploit-db.com/exploits/14481 - http://www.securityfocus.com/archive/1/512685/100/0/threaded - http://www.securityfocus.com/archive/1/512709/100/0/threaded - http://secunia.com/advisories/40716 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60662 - http://osvdb.org/66630
CVE ID: CVE-2010-2910 State: PUBLISHED Published: 2010-07-28T21:00:00 Last Updated: 2024-08-07T02:46:48.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Ozio Gallery (com_oziogallery) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/60618 - http://packetstormsecurity.org/1007-exploits/joomlaoziogallery-sql.txt - http://www.exploit-db.com/exploits/14462
CVE ID: CVE-2010-2911 State: PUBLISHED Published: 2010-07-28T21:00:00 Last Updated: 2024-08-07T02:46:48.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a viewnews action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41779 - http://www.exploit-db.com/exploits/14392 - http://packetstormsecurity.org/1007-exploits/kayakoesupport37002-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/60455 - http://www.vupen.com/english/advisories/2010/1843
CVE ID: CVE-2010-2912 State: PUBLISHED Published: 2010-07-28T21:00:00 Last Updated: 2024-08-07T02:46:48.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL commands via the _a parameter in a downloads action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/60457 - http://www.exploit-db.com/exploits/14404 - http://www.securityfocus.com/bid/41756 - http://packetstormsecurity.org/1007-exploits/kayakoesupport-sql.txt
CVE ID: CVE-2010-2913 State: PUBLISHED Published: 2010-07-29T18:00:00 Last Updated: 2024-08-07T02:46:48.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Citibank Citi Mobile app before 2.0.3 for iOS stores account data in a file, which allows local users to obtain sensitive information via vectors involving (1) the mobile device or (2) a synchronized computer. Additional Analyst Notes: - CVE Program Container: References: - http://news.cnet.com/8301-27080_3-20011664-245.html - http://securitytracker.com/id?1024249 - http://itunes.apple.com/us/app/citi-mobile-sm/id301724680 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60855