Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-0938 State: PUBLISHED Published: 2010-03-08T15:00:00 Last Updated: 2024-08-07T01:06:52.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in todooforum.php in Todoo Forum 2.0 allows remote attackers to inject arbitrary web script or HTML via the id_forum parameter in a post action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38060 - http://packetstormsecurity.org/1001-exploits/todooforum-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/55502 - http://www.exploit-db.com/exploits/11099
CVE ID: CVE-2010-0939 State: PUBLISHED Published: 2010-03-08T15:00:00 Last Updated: 2024-08-07T01:06:52.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Visialis ABB Forum 1.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for fpdb/abb.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/55505 - http://www.exploit-db.com/exploits/11096 - http://packetstormsecurity.org/1001-exploits/abbforums-dislclose.txt
CVE ID: CVE-2010-0940 State: PUBLISHED Published: 2010-03-08T15:00:00 Last Updated: 2024-08-07T01:06:52.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in guestbook.php in Simple PHP Guestbook 1.0 allows remote attackers to inject arbitrary web script or HTML via the action parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/55522 - http://secunia.com/advisories/38053 - http://www.exploit-db.com/exploits/11077 - http://osvdb.org/61614 - http://packetstormsecurity.org/1001-exploits/simplephpgb-xss.txt
CVE ID: CVE-2010-0941 State: PUBLISHED Published: 2010-03-08T15:00:00 Last Updated: 2024-08-07T01:06:52.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in eTek Systems Hit Counter 2.0 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php, (2) inc/login.php, (3) admin/index.php, and (4) admin/forgot.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1001-exploits/hitcounter-xss.txt - http://secunia.com/advisories/38052 - http://www.osvdb.org/61442 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55285 - http://www.osvdb.org/6144
52 - http://www.osvdb.org/61442 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55285 - http://www.osvdb.org/61444 - http://www.osvdb.org/61443 - http://www.exploit-db.com/exploits/10887
CVE ID: CVE-2010-0942 State: PUBLISHED Published: 2010-03-08T15:00:00 Last Updated: 2024-08-07T01:06:52.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the jVideoDirect (com_jvideodirect) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/55513 - http://www.securityfocus.com/bid/37694 - http://www.exploit-db.com/exploits/11089 - http://packetstormsecurity.org/1001-exploits/joomlajvideodirect-traversal.txt
CVE ID: CVE-2010-0943 State: PUBLISHED Published: 2010-03-08T15:00:00 Last Updated: 2024-08-07T01:06:52.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the JA Showcase (com_jashowcase) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter in a jashowcase action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11090 - http://secunia.com/advisories/33486 - http://www.securityfocus.com/bid/37692 - http://packetstormsecurity.org/1001-exploits/joomlajashowcase-traversal.txt - https://exchange.xforce.ibmcloud.com/vulner
ttp://packetstormsecurity.org/1001-exploits/joomlajashowcase-traversal.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/55512
CVE ID: CVE-2010-0944 State: PUBLISHED Published: 2010-03-08T15:00:00 Last Updated: 2024-08-07T01:06:52.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the JCollection (com_jcollection) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11088 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55514 - http://packetstormsecurity.org/1001-exploits/joomlajcollection-traversal.txt - http://www.securityfocus.com/bid/37691
CVE ID: CVE-2010-0945 State: PUBLISHED Published: 2010-03-08T15:00:00 Last Updated: 2024-08-07T01:06:52.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the HotBrackets Tournament Brackets (com_hotbrackets) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/54986 - http://www.packetstormsecurity.org/0912-exploits/joomlahotbrackets-sql.txt - http://www.vupen.com/english/advisories/2010/0021 - http://www.securityfocus.com/bid/37439 - http://www.exploit-db.com/exploits/1
w.vupen.com/english/advisories/2010/0021 - http://www.securityfocus.com/bid/37439 - http://www.exploit-db.com/exploits/10953
CVE ID: CVE-2010-0946 State: PUBLISHED Published: 2010-03-08T15:00:00 Last Updated: 2024-08-07T01:06:52.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Keep It Simple Stupid (KISS) Software Advertiser (com_ksadvertiser) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the pid parameter in a showcats action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37682 - http://explo.it/exploits/11068 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55526
CVE ID: CVE-2010-0947 State: PUBLISHED Published: 2010-03-09T20:00:00 Last Updated: 2024-08-07T01:06:52.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in post.aspx in Max Network Technology BBSMAX 3.0, 4.1, and 4.2 allows remote attackers to inject arbitrary web script or HTML via the action parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/509905/100/0/threaded - http://packetstormsecurity.org/1003-exploits/bbsmax-xss.txt - http://www.securityfocus.com/bid/38592
CVE ID: CVE-2010-0948 State: PUBLISHED Published: 2010-03-09T20:00:00 Last Updated: 2024-08-07T01:06:52.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in profil.php in Bigforum 4.5, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56723 - http://secunia.com/advisories/38872 - http://www.securityfocus.com/bid/38597 - http://osvdb.org/62778 - http://www.exploit-db.com/exploits/11646 - http://packetstormsecurity.org/1003-exploits/bigforum-sql.txt
CVE ID: CVE-2010-0949 State: PUBLISHED Published: 2010-03-09T20:00:00 Last Updated: 2024-08-07T01:06:52.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Natychmiast CMS allow remote attackers to inject arbitrary web script or HTML via the id_str parameter to (1) index.php and (2) a_index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/509890/100/0/threaded - http://www.packetstormsecurity.com/1003-exploits/natychmiast-sqlxss.txt - http://www.securityfocus.com/bid/38561 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56724
CVE ID: CVE-2010-0950 State: PUBLISHED Published: 2010-03-09T20:00:00 Last Updated: 2024-08-07T01:06:52.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Natychmiast CMS allow remote attackers to execute arbitrary SQL commands via the id_str parameter to (1) index.php and (2) a_index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/509890/100/0/threaded - http://www.packetstormsecurity.com/1003-exploits/natychmiast-sqlxss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/56725 - http://www.securityfocus.com/bid/38561
CVE ID: CVE-2010-0951 State: PUBLISHED Published: 2010-03-09T20:00:00 Last Updated: 2024-08-07T01:06:52.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in go_target.php in dev4u CMS allows remote attackers to execute arbitrary SQL commands via the kontent_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11643 - http://www.securityfocus.com/bid/38577 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56722 - http://packetstormsecurity.org/1003-exploits/dev4u-sql.txt
CVE ID: CVE-2010-0952 State: PUBLISHED Published: 2010-03-09T20:00:00 Last Updated: 2024-08-07T01:06:52.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in OneCMS 2.5, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter in an elite action. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1003-exploits/onecmsv25-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/56700 - http://www.securityfocus.com/bid/38557 - http://www.exploit-db.com/exploits/11635 - http://secunia.com/advisories/30378
CVE ID: CVE-2010-0953 State: PUBLISHED Published: 2010-03-09T20:00:00 Last Updated: 2024-08-07T01:06:52.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in mod.php in phpCOIN 1.2.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the mod parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11641 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56721 - http://www.securityfocus.com/bid/38576
CVE ID: CVE-2010-0954 State: PUBLISHED Published: 2010-03-09T20:00:00 Last Updated: 2024-08-07T01:06:52.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search_result.asp in Pre Projects Pre E-Learning Portal allows remote attackers to execute arbitrary SQL commands via the course_ID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38582 - http://osvdb.org/62774 - http://evilc0de.blogspot.com/2010/03/pre-e-learning-portal-sql-injection.html - http://www.packetstormsecurity.com/1003-exploits/preelearningportal-sql.txt - http://secunia.com/advisories/38891 - https://exchange.xforce.ibmclou
ity.com/1003-exploits/preelearningportal-sql.txt - http://secunia.com/advisories/38891 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56729
CVE ID: CVE-2010-0955 State: PUBLISHED Published: 2010-03-09T20:00:00 Last Updated: 2024-08-07T01:06:52.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Bild Flirt Community 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1003-exploits/bildflirt-sql.txt - http://osvdb.org/62780 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56727 - http://4004securityproject.wordpress.com/2010/03/07/bild-flirt-system-v2-0-index-php-id-sql-injection/ - http://www.securityfocus.com/bid/38585 - http://www.exploit-db
3/07/bild-flirt-system-v2-0-index-php-id-sql-injection/ - http://www.securityfocus.com/bid/38585 - http://www.exploit-db.com/exploits/11648 - http://secunia.com/advisories/38870
CVE ID: CVE-2010-0956 State: PUBLISHED Published: 2010-03-09T20:00:00Z Last Updated: 2024-09-17T04:08:59.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in OpenCart 1.3.2 allows remote attackers to execute arbitrary SQL commands via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38605 - http://packetstormsecurity.org/1003-exploits/opencart-sql.txt
CVE ID: CVE-2010-0957 State: PUBLISHED Published: 2010-03-09T20:00:00 Last Updated: 2024-08-07T01:06:52.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in content.php in Saskia's Shopsystem beta1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38574 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56358 - http://packetstormsecurity.org/1002-exploits/saskiashopsystem-lfi.txt - http://www.exploit-db.com/exploits/11433
CVE ID: CVE-2010-0958 State: PUBLISHED Published: 2010-03-09T20:00:00 Last Updated: 2024-08-07T01:06:52.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in modules/hayoo/index.php in Tribisur 2.1, 2.0, and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary files via directory traversal sequences in the theme parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1003-exploits/tribisur-lfi.txt - http://secunia.com/advisories/28362 - http://www.exploit-db.com/exploits/11655 -
ty.org/1003-exploits/tribisur-lfi.txt - http://secunia.com/advisories/28362 - http://www.exploit-db.com/exploits/11655 - http://www.securityfocus.com/bid/38596
CVE ID: CVE-2010-0959 State: PUBLISHED Published: 2010-03-10T22:00:00 Last Updated: 2024-08-07T01:06:52.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebEditor/Authentication/LoginPage.aspx in IBM ENOVIA SmarTeam 5 allows remote attackers to inject arbitrary web script or HTML via the errMsg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/509975/100/0/threaded - http://osvdb.org/62901 - http://www.securityfocus.com/bid/38612
CVE ID: CVE-2010-0960 State: PUBLISHED Published: 2010-03-10T22:00:00 Last Updated: 2024-08-07T01:06:52.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in qosmod in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1023695 - http://www.ibm.com/support/docview.wss?uid=isg1IZ68231 - http://www.ibm.com/support/docview.wss?uid=isg1IZ71870 - http://www.ibm.com/support/docview.wss?uid=isg1IZ71627 - http://www.vupen.com/english/advisories/2010/0557 - http://www.ibm.com/support/docview.wss?uid=isg1IZ71555 - http://a
- http://www.vupen.com/english/advisories/2010/0557 - http://www.ibm.com/support/docview.wss?uid=isg1IZ71555 - http://aix.software.ibm.com/aix/efixes/security/qosmod_advisory.asc - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6822
CVE ID: CVE-2010-0961 State: PUBLISHED Published: 2010-03-10T22:00:00 Last Updated: 2024-08-07T01:06:52.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in qoslist in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://aix.software.ibm.com/aix/efixes/security/qoslist_advisory.asc - http://securitytracker.com/id?1023694 - http://www.vupen.com/english/advisories/2010/0556 - http://www.ibm.com/support/docview.wss?uid=isg1IZ71590 - http://www.ibm.com/support/docview.wss?uid=isg1IZ71554 - http://www.ibm.com/support/docview.wss?uid=isg1IZ6
sg1IZ71590 - http://www.ibm.com/support/docview.wss?uid=isg1IZ71554 - http://www.ibm.com/support/docview.wss?uid=isg1IZ68194 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12051 - http://www.ibm.com/support/docview.wss?uid=isg1IZ71869
CVE ID: CVE-2010-0962 State: PUBLISHED Published: 2010-03-10T22:00:00 Last Updated: 2024-08-07T01:06:52.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FTP proxy server in Apple AirPort Express, AirPort Extreme, and Time Capsule with firmware 7.5 does not restrict the IP address and port specified in a PORT command from a client, which allows remote attackers to leverage intranet FTP servers for arbitrary TCP forwarding via a crafted PORT command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56701 - http://www.securityfocus.com/archive/1/509867/100/0/threaded - http://www.securityfocus.com/bid/38543
abilities/56701 - http://www.securityfocus.com/archive/1/509867/100/0/threaded - http://www.securityfocus.com/bid/38543 - http://seclists.org/fulldisclosure/2010/Mar/106 - http://www.securityfocus.com/archive/1/509974/100/0/threaded
CVE ID: CVE-2010-0963 State: PUBLISHED Published: 2010-03-16T18:26:00Z Last Updated: 2024-09-16T17:03:09.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in dl Download Ticket Service before 0.7 allows remote attackers to inject arbitrary web script or HTML via the t parameter, related to an invalid ticket ID. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38898 - http://www.securityfocus.com/bid/38700 - http://freshmeat.net/projects/dl-ticket-service - http://osvdb.org/62884 - http://article.gmane.org/gman
com/bid/38700 - http://freshmeat.net/projects/dl-ticket-service - http://osvdb.org/62884 - http://article.gmane.org/gmane.comp.web.dl-ticket-service.general/33
CVE ID: CVE-2010-0964 State: PUBLISHED Published: 2010-03-16T18:26:00 Last Updated: 2024-08-07T01:06:52.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in start.php in Eros Webkatalog allows remote attackers to execute arbitrary SQL commands via the id parameter in a rubrik action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38900 - http://www.exploit-db.com/exploits/11689 - http://packetstormsecurity.org/1003-exploits/eroserotikwebkat-sql.txt - http://osvdb.org/62902 - http://4004securityproject.wordpress.com/2010/03/11/eros-erotik-webkatalog-start-php-rubrikidsql-injection/ - https://exchange.xfo
4securityproject.wordpress.com/2010/03/11/eros-erotik-webkatalog-start-php-rubrikidsql-injection/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/56851
CVE ID: CVE-2010-0965 State: PUBLISHED Published: 2010-03-16T18:26:00 Last Updated: 2024-08-07T01:06:52.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jevci Siparis Formu Scripti stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for siparis.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56794 - http://secunia.com/advisories/38893 - http://packetstormsecurity.org/1003-exploits/jevci-disclose.txt - http://osvdb.org/62843
CVE ID: CVE-2010-0966 State: PUBLISHED Published: 2010-03-16T18:26:00 Last Updated: 2024-08-07T01:06:52.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in inc/config.php in deV!L`z Clanportal (DZCP) 1.5.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the basePath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38902 - http://www.exploit-db.com/exploits/11735 - http://www.vupen.com/english/advisories/2010/0615
CVE ID: CVE-2010-0967 State: PUBLISHED Published: 2010-03-16T18:26:00 Last Updated: 2024-08-07T01:06:52.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Geekhelps ADMP 1.01, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the style parameter to (1) colorvoid/footer.php, (2) default-green/footer.php, (3) default-orange/footer.php, and (4) default/footer.php in themes/. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/62918 - http://www.ex
rty information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/62918 - http://www.exploit-db.com/exploits/11721 - http://osvdb.org/62915 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56857 - http://www.vupen.com/english/advisories/2010/0612 - http://secunia.com/advisories/38949 - http://osvdb.org/62917 - http://osvdb.org/62916
CVE ID: CVE-2010-0968 State: PUBLISHED Published: 2010-03-16T18:26:00 Last Updated: 2024-08-07T01:06:52.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in bannershow.php in Geekhelps ADMP 1.01 allows remote attackers to execute arbitrary SQL commands via the click parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11721 - http://www.vupen.com/english/advisories/2010/0612
CVE ID: CVE-2010-0969 State: PUBLISHED Published: 2010-03-16T18:26:00 Last Updated: 2024-08-07T01:06:52.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unbound before 1.4.3 does not properly align structures on 64-bit platforms, which allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/62903 - http://www.openwall.com/lists/oss-security/2010/03/12/3 - http://secunia.com/advisories/38888 - http://www.unbound.net/pipermail/unbound-users/2010-March/001057.html - http://marc.info/?l=oss-security&m=126876222231747&w=2 - http://bugs.gentoo.org/show_bug.cgi?id=30
0-March/001057.html - http://marc.info/?l=oss-security&m=126876222231747&w=2 - http://bugs.gentoo.org/show_bug.cgi?id=309117 - http://www.securityfocus.com/bid/38701
CVE ID: CVE-2010-0970 State: PUBLISHED Published: 2010-03-16T18:26:00 Last Updated: 2024-08-07T01:06:52.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in phpmylogon.php in PhpMyLogon 2 allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56868 - http://www.vupen.com/english/advisories/2010/0614 - http://www.exploit-db.com/exploits/11737