Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-5279 State: PUBLISHED Published: 2012-10-08T10:00:00Z Last Updated: 2024-09-17T02:05:59.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: article.php in Virtual War (aka VWar) 1.6.1 R2 allows remote attackers to cause a denial of service (memory consumption) via a large integer in the ratearticleselect parameter. Additional Analyst Notes: - CVE Program Container: References: - http://dmcdonald.net/vwar.txt - http://seclists.org/fulldisclosure/2010/Aug/235
CVE ID: CVE-2010-5280 State: PUBLISHED Published: 2012-11-26T23:00:00 Last Updated: 2024-08-07T04:17:10.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Community Builder Enhanced (CBE) (com_cbe) component 1.4.8, 1.4.9, and 1.4.10 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the tabname parameter in a userProfile action to index.php. NOTE: this can be leveraged to execute arbitrary code by using the file upload feature. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43873 - http://secunia.com/advisories/41741 - http://packetstorm
ntainer: References: - http://www.securityfocus.com/bid/43873 - http://secunia.com/advisories/41741 - http://packetstormsecurity.org/1010-exploits/joomlacbe-lfi.txt - http://www.securityfocus.com/archive/1/514183/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/62376 - http://www.exploit-db.com/exploits/15222 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62375
CVE ID: CVE-2010-5281 State: PUBLISHED Published: 2012-11-26T23:00:00 Last Updated: 2024-08-07T04:17:10.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ibrowser.php in the CMScout 2.09 IBrowser TinyMCE Plugin 1.4.1, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.johnleitch.net/Vulnerabilities/CMScout.2.09.IBrowser.TinyMCE.Plugin.Local.File.Inclusion/33 - http://packetstormsecurity.org/1009-exploits/cmscout209-lfi.txt -
2.09.IBrowser.TinyMCE.Plugin.Local.File.Inclusion/33 - http://packetstormsecurity.org/1009-exploits/cmscout209-lfi.txt - http://www.osvdb.org/68247 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62066 - http://secunia.com/advisories/41634
CVE ID: CVE-2010-5282 State: PUBLISHED Published: 2012-11-26T23:00:00 Last Updated: 2024-08-07T04:17:10.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in OpenText ECM (formerly Livelink ECM) 9.7.1 allow remote attackers to inject arbitrary web script or HTML via the (1) viewType and (2) sort parameters in a browse action to livelink/livelink; and the (3) nodeid, (4) setctx, and (5) support parameters to livelinkdav/nodes/OOB_DAVWindow.html. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41553 - http://packetstormsecurity.org/1009-exploits/opentext-xsrfxss.txt - http://archives
ttp://secunia.com/advisories/41553 - http://packetstormsecurity.org/1009-exploits/opentext-xsrfxss.txt - http://archives.neohapsis.com/archives/fulldisclosure/2010-09/0359.html - http://www.osvdb.org/68256 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62056 - http://www.osvdb.org/68257
CVE ID: CVE-2010-5283 State: PUBLISHED Published: 2012-11-26T23:00:00 Last Updated: 2024-08-07T04:17:10.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in OpenText ECM (formerly Livelink ECM) 9.7.1 allows remote attackers to hijack the authentication of administrators for requests that change folder and resource permissions. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/68255 - http://secunia.com/advisories/41553 - http://packetstormsecurity.org/1009-exploits/opentext-xsrfxss.txt - http://archives.neohapsis.com/archives/fulldisclosure/2010-09/0359.html - https://exchange.xforce.ibmcloud.co
fxss.txt - http://archives.neohapsis.com/archives/fulldisclosure/2010-09/0359.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/62057
CVE ID: CVE-2010-5284 State: PUBLISHED Published: 2012-11-26T23:00:00 Last Updated: 2024-08-07T04:17:10.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) User parameter in the edit user profile feature to manageuser.php, (2) y parameter in a newcal action to manageajax.php, and the (3) pic parameter to thumb.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44050 - http://www.exploit-db.com/exploits/15240 - http://packetstormsecurity.org/1010-exploits/collabtive-xssxsrf.txt - http:/
http://www.exploit-db.com/exploits/15240 - http://packetstormsecurity.org/1010-exploits/collabtive-xssxsrf.txt - http://secunia.com/advisories/41805 - http://www.anatoliasecurity.com/adv/as-adv-2010-003.txt
CVE ID: CVE-2010-5285 State: PUBLISHED Published: 2012-11-26T23:00:00 Last Updated: 2024-08-07T04:17:10.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in admin.php in Collabtive 0.6.5 allows remote attackers to hijack the authentication of administrators for requests that add administrative users via the edituser action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44050 - http://www.exploit-db.com/exploits/15240 - http://packetstormsecurity.org/1010-exploits/collabtive-xssxsrf.txt - http://secunia.com/advisories/41805 - http://www.anatoliasecurity.com/adv/as-adv-2010-003.txt
CVE ID: CVE-2010-5286 State: PUBLISHED Published: 2012-11-26T23:00:00Z Last Updated: 2024-09-16T20:48:13.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Jstore (com_jstore) component for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44053 - http://packetstormsecurity.org/1010-exploits/joomlajstore-lfi.txt
CVE ID: CVE-2010-5287 State: PUBLISHED Published: 2013-01-31T02:00:00 Last Updated: 2024-08-07T04:17:10.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.php in Cornerstone Technologies webConductor allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18319 - http://www.exploit-db.com/exploits/13980 - http://www.securityfocus.com/bid/41042 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59668
CVE ID: CVE-2010-5288 State: PUBLISHED Published: 2013-06-28T23:00:00Z Last Updated: 2024-09-17T04:05:03.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the lsConnectionCached function in editcp in EDItran Communications Platform 4.1 R7 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted packet to TCP port 7777. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40395 - http://www.digitalsec.net/stuff/explt+advs/editcpv4.1R7_bof.txt
CVE ID: CVE-2010-5289 State: PUBLISHED Published: 2013-08-25T01:00:00Z Last Updated: 2024-09-16T19:36:45.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Authenticate method in the INCREDISPOOLERLib.Pop ActiveX control in ImSpoolU.dll in IncrediMail 2.0 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long string in the first argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/12030/
CVE ID: CVE-2010-5290 State: PUBLISHED Published: 2013-09-20T16:00:00 Last Updated: 2024-08-07T04:17:10.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: The authentication process in Adobe ColdFusion before 10 does not require knowledge of the cleartext password if the password hash is known, which makes it easier for context-dependent attackers to obtain administrative privileges by leveraging read access to the configuration file, a different vulnerability than CVE-2010-2861. Additional Analyst Notes: - CVE Program Container: References: - http://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/ - http://osvdb.org/97553 - https://exchange.xforce.ibmcl
izen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/ - http://osvdb.org/97553 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87740 - http://qualys.immunityinc.com/home/exploitpack/CANVAS/CF_directory_traversal
CVE ID: CVE-2010-5291 State: PUBLISHED Published: 2014-01-10T16:00:00Z Last Updated: 2024-09-17T04:19:41.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Amberdms Billing System (ABS) before 1.4.1 does not properly implement blacklisting after detection of invalid login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach. Additional Analyst Notes: - CVE Program Container: References: - https://projects.jethrocarr.com/p/oss-amberdms-bs/source/tree/f23f1121bd137bf798c8d3f01d35fa297a285331/help/docs/RELEASE_NOTES - https://raw.github.com/jethrocarr/amberdms-bs/master/help/docs/CHANGELOG
CVE ID: CVE-2010-5292 State: PUBLISHED Published: 2014-01-10T16:00:00Z Last Updated: 2024-09-16T17:58:58.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Amberdms Billing System (ABS) before 1.4.1, when a multi-instance installation is configured, might allow local users to obtain sensitive information by reading the cache in between runs of the include/cron/services_usage.php cron job. Additional Analyst Notes: - CVE Program Container: References: - https://projects.jethrocarr.com/p/oss-amberdms-bs/source/tree/f23f1121bd137bf798c8d3f01d35fa297a285331/help/docs/RELEASE_NOTES - https://raw.github.com/jethrocarr/amberdms-bs/master/help/docs/CHANGELOG
CVE ID: CVE-2010-5293 State: PUBLISHED Published: 2014-01-21T01:00:00Z Last Updated: 2024-09-16T16:23:45.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-includes/comment.php in WordPress before 3.0.2 does not properly whitelist trackbacks and pingbacks in the blogroll, which allows remote attackers to bypass intended spam restrictions via a crafted URL, as demonstrated by a URL that triggers a substring match. Additional Analyst Notes: - CVE Program Container: References: - https://core.trac.wordpress.org/ticket/13887 - https://core.trac.wordpress.org/changeset/16637 - http://codex.wordpress.org/Version_3.0.2
CVE ID: CVE-2010-5294 State: PUBLISHED Published: 2014-01-21T01:00:00Z Last Updated: 2024-09-17T04:25:11.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the request_filesystem_credentials function in wp-admin/includes/file.php in WordPress before 3.0.2 allow remote servers to inject arbitrary web script or HTML by providing a crafted error message for a (1) FTP or (2) SSH connection attempt. Additional Analyst Notes: - CVE Program Container: References: - https://core.trac.wordpress.org/changeset/16367 - http://codex.wordpress.org/Version_3.0.2
CVE ID: CVE-2010-5295 State: PUBLISHED Published: 2014-01-21T01:00:00Z Last Updated: 2024-09-16T22:24:54.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in wp-admin/plugins.php in WordPress before 3.0.2 might allow remote attackers to inject arbitrary web script or HTML via a plugin's author field, which is not properly handled during a Delete Plugin action. Additional Analyst Notes: - CVE Program Container: References: - https://core.trac.wordpress.org/changeset/16373 - http://codex.wordpress.org/Version_3.0.2
CVE ID: CVE-2010-5296 State: PUBLISHED Published: 2014-01-21T01:00:00Z Last Updated: 2024-09-17T00:10:47.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-includes/capabilities.php in WordPress before 3.0.2, when a Multisite configuration is used, does not require the Super Admin role for the delete_users capability, which allows remote authenticated administrators to bypass intended access restrictions via a delete action. Additional Analyst Notes: - CVE Program Container: References: - http://codex.wordpress.org/Version_3.0.2 - https://core.trac.wordpress.org/changeset/15562
CVE ID: CVE-2010-5297 State: PUBLISHED Published: 2014-01-21T01:00:00Z Last Updated: 2024-09-17T01:06:42.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress before 3.0.1, when a Multisite installation is used, permanently retains the "site administrators can add users" option once changed, which might allow remote authenticated administrators to bypass intended access restrictions in opportunistic circumstances via an add action after a temporary change. Additional Analyst Notes: - CVE Program Container: References: - http://codex.wordpress.org/Changelog/3.0.1 - http://core.trac.wordpress.org/query?status=closed&group=resolution&order=priority&milestone=3.0.1&resolution
og/3.0.1 - http://core.trac.wordpress.org/query?status=closed&group=resolution&order=priority&milestone=3.0.1&resolution=fixed - https://core.trac.wordpress.org/ticket/14119 - https://core.trac.wordpress.org/changeset/15342
CVE ID: CVE-2010-5298 State: PUBLISHED Published: 2014-04-14T16:00:00 Last Updated: 2024-08-07T04:17:10.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allows remote attackers to inject data across sessions or cause a denial of service (use-after-free and parsing error) via an SSL connection in a multithreaded environment. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59342 - http://secunia.com/advisories/59669 - http://www.securityfocus.com/bid/66801 - http://marc.info/?l=bugtraq&m=140544599631400&w=2
ecunia.com/advisories/59669 - http://www.securityfocus.com/bid/66801 - http://marc.info/?l=bugtraq&m=140544599631400&w=2 - http://www.vmware.com/security/advisories/VMSA-2014-0012.html - http://www-01.ibm.com/support/docview.wss?uid=swg21676655 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946 - http://www-01.ibm.com/support/docview.wss?uid=swg21676879 - http://www-01.ibm.com/support/docview.wss?uid=swg21677828 - http://marc.info/?l=bugtraq&m=140621259019789&w=2 - http://secunia.com/advisories/59300 - http://security.gentoo.org/glsa/glsa-201407-05.xml - https://rt.openssl.org/Ticket/Display.html?id=3265&user=guest&pass=guest - http://www.ibm.com/suppo
glsa-201407-05.xml - https://rt.openssl.org/Ticket/Display.html?id=3265&user=guest&pass=guest - http://www.ibm.com/support/docview.wss?uid=swg24037783 - http://www-01.ibm.com/support/docview.wss?uid=swg21677695 - http://www-01.ibm.com/support/docview.wss?uid=swg21676529 - http://www.securityfocus.com/archive/1/534161/100/0/threaded - http://www-01.ibm.com/support/docview.wss?uid=swg21676889 - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html - http://www.mandriva.com/security/advisories?name=MDVSA-2014:090 - http://secunia.com/advisories/59440 - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://secunia.com/advisories/59655 - ht
0 - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://secunia.com/advisories/59655 - http://www-01.ibm.com/support/docview.wss?uid=swg21677836 - http://secunia.com/advisories/59437 - http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754 - http://www.vmware.com/security/advisories/VMSA-2014-0006.html - http://www.fortiguard.com/advisory/FG-IR-14-018/ - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html - http://www.ibm.com/support/docview.wss?uid=swg21676356 - http://marc.info/?l=bugtraq&m=140389274407904&w=2 - http://support.citrix.com/article/CTX140876 - http://svnweb.freebsd.org/ports/head/security/openssl/files
74407904&w=2 - http://support.citrix.com/article/CTX140876 - http://svnweb.freebsd.org/ports/head/security/openssl/files/patch-ssl-s3_pkt.c?revision=351191&view=markup - http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757 - http://advisories.mageia.org/MGASA-2014-0187.html - http://secunia.com/advisories/58939 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl - http://kb.juniper.net/InfoCenter/index?page=content&id=KB29195 - https://kc.mcafee.com/corporate/index?page=content&id=SB10075 - http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html - http://www-01.ibm.com/support/docview.wss?uid=swg21676419 -
e.com/technetwork/topics/security/cpujul2014-1972956.html - http://www-01.ibm.com/support/docview.wss?uid=swg21676419 - http://secunia.com/advisories/59438 - http://marc.info/?l=bugtraq&m=141658880509699&w=2 - http://www.openssl.org/news/secadv_20140605.txt - http://seclists.org/fulldisclosure/2014/Dec/23 - http://secunia.com/advisories/59301 - https://kb.bluecoat.com/index?page=content&id=SA80 - http://marc.info/?l=bugtraq&m=140904544427729&w=2 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629 - http://www-01.ibm.com/support/docview.wss?uid=swg21678167 - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html - http://marc.info/?l=bugtraq&m=14075231
tp://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html - http://marc.info/?l=bugtraq&m=140752315422991&w=2 - http://marc.info/?l=bugtraq&m=140389355508263&w=2 - http://marc.info/?l=bugtraq&m=140448122410568&w=2 - http://secunia.com/advisories/59666 - http://marc.info/?l=bugtraq&m=140431828824371&w=2 - http://secunia.com/advisories/59413 - http://www.openbsd.org/errata55.html#004_openssl - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html - http://ftp.openbsd.org/pub/OpenBSD/patches/5.5/common/004_openssl.patch.sig - http://secunia.com/advisories/59721 - http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756 - http://www-01
cunia.com/advisories/59721 - http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756 - http://www-01.ibm.com/support/docview.wss?uid=swg21676062 - http://secunia.com/advisories/58713 - http://www-01.ibm.com/support/docview.wss?uid=swg21673137 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 - http://www-01.ibm.com/support/docview.wss?uid=swg21676035 - http://secunia.com/advisories/59450 - http://secunia.com/advisories/59287 - http://www-01.ibm.com/support/docview.wss?uid=swg21683332 - http://secunia.com/advisories/58977 - https://www.novell.com/support/kb/doc.php?id=7015271 - http://www.tedunangst.com/flak/post/analysis-of-openssl-freelist-reuse - https:/
ell.com/support/kb/doc.php?id=7015271 - http://www.tedunangst.com/flak/post/analysis-of-openssl-freelist-reuse - https://rt.openssl.org/Ticket/Display.html?id=2167&user=guest&pass=guest - http://www.blackberry.com/btsc/KB36051 - http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755 - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm - http://www-01.ibm.com/support/docview.wss?uid=swg21677527 - http://secunia.com/advisories/58337 - http://secunia.com/advisories/59162 - http://secunia.com/advisories/59490 - http://openwall.com/lists/oss-security/2014/04/13/1
CVE ID: CVE-2010-5299 State: PUBLISHED Published: 2014-05-23T00:00:00Z Last Updated: 2024-09-16T23:45:26.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in MicroP 0.1.1.1600 allows remote attackers to execute arbitrary code via a crafted .mppl file. NOTE: it has been reported that the overflow is in the lpFileName parameter of the CreateFileA function, but the overflow is probably caused by a separate, unnamed function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/microp_mppl.rb - http://osvdb.org/show/osvdb/73627 - http://www.exploit-
blob/master/modules/exploits/windows/fileformat/microp_mppl.rb - http://osvdb.org/show/osvdb/73627 - http://www.exploit-db.com/exploits/14720 - http://www.exploit-db.com/exploits/17502 - http://packetstormsecurity.com/files/125723/MicroP-0.1.1.1600-Buffer-Overflow.html - http://www.exploit-db.com/exploits/32261
CVE ID: CVE-2010-5300 State: PUBLISHED Published: 2014-06-11T14:00:00Z Last Updated: 2024-09-16T19:57:25.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Jzip 1.3 through 2.0.0.132900 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long file name in a zip archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/32899 - http://seclists.org/fulldisclosure/2010/Apr/79 - http://packetstormsecurity.com/files/126216/Jzip-2.0.0.132900-Buffer-Overflow.html - http://osvdb.org/show/osvdb/65041 - https://www.corelan.be/index.php/forum/security-advisori
2900-Buffer-Overflow.html - http://osvdb.org/show/osvdb/65041 - https://www.corelan.be/index.php/forum/security-advisories-archive-2010/corelan-10-021-jzip-zip-seh-bof
CVE ID: CVE-2010-5301 State: PUBLISHED Published: 2014-06-13T14:00:00 Last Updated: 2024-08-07T04:17:10.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a HEAD request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45579 - http://www.exploit-db.com/exploits/15834 - http://osvdb.org/show/osvdb/70808
CVE ID: CVE-2010-5302 State: PUBLISHED Published: 2014-08-21T23:00:00Z Last Updated: 2024-09-16T20:31:20.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in timthumb.php in TimThumb before 1.15 as of 20100908 (r88), as used in multiple products, allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/timthumb/source/detail?r=88 - http://www.osvdb.org/71878
CVE ID: CVE-2010-5303 State: PUBLISHED Published: 2014-08-21T23:00:00Z Last Updated: 2024-09-17T02:00:39.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the displayError function in timthumb.php in TimThumb before 1.15 (r85), as used in multiple products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to $errorString. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/timthumb/source/detail?r=88
CVE ID: CVE-2010-5304 State: PUBLISHED Published: 2020-02-05T19:35:35 Last Updated: 2024-08-07T04:17:10.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled certain ClientCutText message. A remote attacker could use this flaw to crash the VNC server by sending a specially crafted ClientCutText message from a VNC client. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140219.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139814.html - http://lists.fedoraproject.org/pipermail/pack