Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-2240 State: PUBLISHED Published: 2010-09-03T19:00:00 Last Updated: 2024-08-07T02:25:07.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_anonymous_page function in mm/memory.c in the Linux kernel before 2.6.27.52, 2.6.32.x before 2.6.32.19, 2.6.34.x before 2.6.34.4, and 2.6.35.x before 2.6.35.2 does not properly separate the stack and the heap, which allows context-dependent attackers to execute arbitrary code by writing to the bottom page of a shared memory segment, as demonstrated by a memory-exhaustion attack against the X.Org X server. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeL
er. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.52 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 - http://www.redhat.com/support/errata/RHSA-2010-0670.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34.4 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13247 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=320b2b8de12698082609ebbc1a17165727f4c893 - http://www.redhat.com/support/errata/RHSA-2010-0660.html - http://www.vmware.com/security/advisories/VMSA-2011-0007.html - https://bugzilla.redhat.com/show_b
RHSA-2010-0660.html - http://www.vmware.com/security/advisories/VMSA-2011-0007.html - https://bugzilla.redhat.com/show_bug.cgi?id=606611 - https://rhn.redhat.com/errata/RHSA-2010-0661.html - http://www.redhat.com/support/errata/RHSA-2010-0882.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35.2 - http://www.vmware.com/security/advisories/VMSA-2011-0009.html - http://www.debian.org/security/2010/dsa-2094 - http://www.invisiblethingslab.com/resources/misc-2010/xorg-large-memory-attacks.pdf - http://lists.vmware.com/pipermail/security-announce/2011/000133.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeL
tp://lists.vmware.com/pipermail/security-announce/2011/000133.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.19 - http://www.securityfocus.com/archive/1/517739/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDVSA-2010:172 - http://securitytracker.com/id?1024344
CVE ID: CVE-2010-2241 State: PUBLISHED Published: 2010-08-17T17:31:00Z Last Updated: 2024-08-07T02:25:07.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) setup-ds.pl and (2) setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local users to obtain sensitive information including passwords for Directory and Administration Server administrative accounts. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024281 - http://www.osvdb.org/66962 - https://bugzilla.redhat.com/show_bug.cgi?id=608032 - http://rhn.redhat.com/errata/RHSA-2010
http://www.osvdb.org/66962 - https://bugzilla.redhat.com/show_bug.cgi?id=608032 - http://rhn.redhat.com/errata/RHSA-2010-0590.html - http://secunia.com/advisories/40811
CVE ID: CVE-2010-2242 State: PUBLISHED Published: 2010-08-19T17:43:00 Last Updated: 2024-08-07T02:25:07.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2062 - http://libvirt.org/news.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044520.html - http://ubuntu
/libvirt.org/news.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044520.html - http://ubuntu.com/usn/usn-1008-2 - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044579.html - http://www.redhat.com/support/errata/RHSA-2010-0615.html - https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/591943 - http://ubuntu.com/usn/usn-1008-1 - https://bugzilla.redhat.com/show_bug.cgi?id=602455 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://ubuntu.com/usn/usn-1008-3 - http://www.vupen.com/english/advisories/2010/2763
CVE ID: CVE-2010-2243 State: PUBLISHED Published: 2019-11-07T16:43:17 Last Updated: 2024-08-07T02:25:07.472Z Vendors: linux-2.6 Products: linux-2.6 Problem Types: oops Description: A vulnerability exists in kernel/time/clocksource.c in the Linux kernel before 2.6.34 where on non-GENERIC_TIME systems (GENERIC_TIME=n), accessing /sys/devices/system/clocksource/clocksource0/current_clocksource results in an OOPS. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-2243 - https://access.redhat.com/security/cve/cve-2010-2243 - https://www.openwall.com/lists/oss-security/2010/06/25/1 - https://git.kernel.org/pub/scm/linux/kernel/git
e-2010-2243 - https://www.openwall.com/lists/oss-security/2010/06/25/1 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ad6759fbf35d104dbf573cd6f4c6784ad6823f7e
CVE ID: CVE-2010-2244 State: PUBLISHED Published: 2010-07-07T18:00:00 Last Updated: 2024-08-07T02:25:07.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AvahiDnsPacket function in avahi-core/socket.c in avahi-daemon in Avahi 0.6.16 and 0.6.25 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNS packet with an invalid checksum followed by a DNS packet with a valid checksum, a different vulnerability than CVE-2008-5081. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=oss-security&m=127748459505200&w=2 - http://www.openwall.com/lists/oss-security/2010/06/23/4 - http://lists.fedoraproject.org/pi
rity&m=127748459505200&w=2 - http://www.openwall.com/lists/oss-security/2010/06/23/4 - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043800.html - https://bugzilla.redhat.com/show_bug.cgi?id=607293 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:204 - http://www.securitytracker.com/id?1024200 - http://www.debian.org/security/2010/dsa-2086 - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043820.html
CVE ID: CVE-2010-2245 State: PUBLISHED Published: 2017-08-08T21:00:00 Last Updated: 2024-08-07T02:25:07.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML External Entity (XXE) vulnerability in Apache Wink 1.1.1 and earlier allows remote attackers to read arbitrary files or cause a denial of service via a crafted XML document. Additional Analyst Notes: - CVE Program Container: References: - https://svn.apache.org/repos/asf/wink/trunk/security/CVE-2010-2245.pdf - http://marc.info/?l=wink-user&m=127843482925387&w=2
CVE ID: CVE-2010-2246 State: PUBLISHED Published: 2011-05-26T18:00:00Z Last Updated: 2024-08-07T02:25:07.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: feh before 1.8, when the --wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands via shell metacharacters in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://derf.homelinux.org/git/feh/plain/ChangeLog - http://openwall.com/lists/oss-security/2010/06/28/4 - http://www.securityfocus.com/bid/41161 - http://openwall.com/lists/oss-security/2010/06/25/4
CVE ID: CVE-2010-2247 State: PUBLISHED Published: 2019-11-06T16:55:41 Last Updated: 2024-08-07T02:25:07.563Z Vendors: makepasswd Products: makepasswd Problem Types: insecure passwords generated with default settings Description: makepasswd 1.10 default settings generate insecure passwords Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-2247 - https://access.redhat.com/security/cve/cve-2010-2247 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JLAGK43ZTRNAMRO7JI2AW4BAZS35QSEE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/
RO7JI2AW4BAZS35QSEE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HLHAXN3XRR7RJ73SJTBSW3GZT4GLHI33/
CVE ID: CVE-2010-2248 State: PUBLISHED Published: 2010-09-07T16:30:00 Last Updated: 2024-08-07T02:25:07.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: fs/cifs/cifssmb.c in the CIFS implementation in the Linux kernel before 2.6.34-rc4 allows remote attackers to cause a denial of service (panic) via an SMB response packet with an invalid CountHigh value, as demonstrated by a response from an OS/2 server, related to the CIFSSMBWrite and CIFSSMBWrite2 functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0610.html - http://www.ubuntu.com/usn/USN-1000-1 - http://www.openwall.com/lists/oss-security/2010/06/28/1 -
a/RHSA-2010-0610.html - http://www.ubuntu.com/usn/USN-1000-1 - http://www.openwall.com/lists/oss-security/2010/06/28/1 - https://rhn.redhat.com/errata/RHSA-2010-0606.html - http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.34/ChangeLog-2.6.34-rc4 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 - http://www.securityfocus.com/bid/42242 - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html - http://www.openwall.com/lists/oss-security/2010/06/28/6 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 - http://secunia.com/advisories/43315 - https://bugzilla.redhat.com/show_bug.cgi?id=608583 - http://www.debian.org/security/2010/dsa-2094
om/advisories/43315 - https://bugzilla.redhat.com/show_bug.cgi?id=608583 - http://www.debian.org/security/2010/dsa-2094 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6513a81e9325d712f1bfb9a1d7b750134e49ff18 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://securitytracker.com/id?1024285 - http://www.securityfocus.com/archive/1/516397/100/0/threaded
CVE ID: CVE-2010-2249 State: PUBLISHED Published: 2010-06-30T18:00:00 Last Updated: 2024-08-07T02:25:07.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a PNG image containing malformed Physical Scale (aka sCAL) chunks. Additional Analyst Notes: - CVE Program Container: References: - http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commitdiff%3Bh=90cfcecc09febb8d6c8c1d37ea7bb7cf0f4b00f3#patch20 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:133 - http://www.vmware.com/se
d37ea7bb7cf0f4b00f3#patch20 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:133 - http://www.vmware.com/security/advisories/VMSA-2010-0014.html - http://www.securityfocus.com/bid/41174 - http://www.vupen.com/english/advisories/2010/1877 - http://www.vupen.com/english/advisories/2010/3045 - http://www.securitytracker.com/id?1024723 - http://support.apple.com/kb/HT4435 - http://www.vupen.com/english/advisories/2010/1837 - http://support.apple.com/kb/HT4457 - http://www.vupen.com/english/advisories/2010/1755 - http://www.vupen.com/english/advisories/2010/3046 - http://secunia.com/advisories/40472 - http://support.apple.com/kb/HT4566 - https://bugzilla.redhat.com/show_bug.cgi?id=60
ttp://secunia.com/advisories/40472 - http://support.apple.com/kb/HT4566 - https://bugzilla.redhat.com/show_bug.cgi?id=608644 - http://secunia.com/advisories/40302 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://secunia.com/advisories/40336 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59816 - http://secunia.com/advisories/41574 - http://www.ubuntu.com/usn/USN-960-1 - http://www.libpng.org/pub/png/libpng.html - http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html - http://secunia.com/advisories/42317 - http://lists.vmware.com/pipermail/security-announce/2010/000105.html - http://lists.fedoraproject.org/pipermail/package-announc
lists.vmware.com/pipermail/security-announce/2010/000105.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044283.html - http://www.debian.org/security/2010/dsa-2072 - http://secunia.com/advisories/40547 - http://secunia.com/advisories/42314 - http://www.vupen.com/english/advisories/2010/1637 - http://support.apple.com/kb/HT4554 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.613061 - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044397.html - http://s
m=slackware-security.613061 - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044397.html - http://support.apple.com/kb/HT4456 - http://www.vupen.com/english/advisories/2010/2491 - http://www.vupen.com/english/advisories/2010/1846 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html - http://www.vupen.com/english/advisories/2010/1612
CVE ID: CVE-2010-2250 State: PUBLISHED Published: 2019-11-07T17:49:32 Last Updated: 2024-08-07T02:25:07.559Z Vendors: drupal6 Products: drupal6 Problem Types: cross site scripting Description: Drupal 5.x and 6.x before 6.16 uses a user-supplied value in output during site installation which could allow an attacker to craft a URL and perform a cross-site scripting attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/02/12/8 - https://security-tracker.debian.org/tracker/CVE-2010-2250 - https://www.drupal.org/node/731710 - https://www.openwall.com/lists/oss-security/2010/06/28/8 - https://www.drupal.org/node/731710
CVE ID: CVE-2010-2251 State: PUBLISHED Published: 2010-07-06T14:00:00 Last Updated: 2024-08-07T02:25:07.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get1 command, as used by lftpget, in LFTP before 4.0.6 does not properly validate a server-provided filename before determining the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a Content-Disposition header that suggests a crafted filename, and possibly execute arbitrary code as a consequence of writing to a dotfile in a home directory. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=oss-security&m=127411372529485&w=2 - http:/
al Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=oss-security&m=127411372529485&w=2 - http://wiki.rpath.com/Advisories:rPSA-2010-0073 - https://bugzilla.redhat.com/show_bug.cgi?id=602836 - http://www.vupen.com/english/advisories/2010/1654 - http://marc.info/?l=oss-security&m=127611288927500&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043597.html - http://www.ocert.org/advisories/ocert-2010-001.html - https://bugzilla.redhat.com/show_bug.cgi?id=591580 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://secunia.com/advisories/40400 - http://www.debian.org/security/2010/dsa-2085 - http://www.securityfocu
0001.html - http://secunia.com/advisories/40400 - http://www.debian.org/security/2010/dsa-2085 - http://www.securityfocus.com/archive/1/514499/100/0/threaded - http://lftp.yar.ru/news.html - http://marc.info/?l=oss-security&m=127432968701342&w=2 - http://marc.info/?l=oss-security&m=127620248914170&w=2
CVE ID: CVE-2010-2252 State: PUBLISHED Published: 2010-07-06T14:00:00 Last Updated: 2024-08-07T02:25:07.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU Wget 1.12 and earlier uses a server-provided filename instead of the original URL to determine the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a 3xx redirect to a URL with a .wgetrc filename followed by a 3xx redirect to a URL with a crafted filename, and possibly execute arbitrary code as a consequence of writing to a dotfile in a home directory. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=oss-security&m=127411372529485
ory. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=oss-security&m=127411372529485&w=2 - https://bugzilla.redhat.com/show_bug.cgi?id=602797 - http://lists.gnu.org/archive/html/bug-wget/2010-05/msg00031.html - http://rhn.redhat.com/errata/RHSA-2014-0151.html - http://lists.gnu.org/archive/html/bug-wget/2010-05/msg00023.html - http://marc.info/?l=oss-security&m=127611288927500&w=2 - http://www.securityfocus.com/bid/65722 - http://www.ocert.org/advisories/ocert-2010-001.html - http://marc.info/?l=oss-security&m=127416905831994&w=2 - http://lists.gnu.org/archive/html/bug-wget/2010-05/msg00032.html - http://lists.gnu.org/archive/html/bug-wget/2010-05/msg00033
/lists.gnu.org/archive/html/bug-wget/2010-05/msg00032.html - http://lists.gnu.org/archive/html/bug-wget/2010-05/msg00033.html - https://bugzilla.redhat.com/show_bug.cgi?id=591580 - http://marc.info/?l=oss-security&m=127441275821210&w=2 - http://marc.info/?l=oss-security&m=127412569216380&w=2 - http://marc.info/?l=oss-security&m=127432968701342&w=2 - http://marc.info/?l=oss-security&m=127427572721591&w=2 - http://lists.gnu.org/archive/html/bug-wget/2010-05/msg00034.html - http://marc.info/?l=oss-security&m=127422615924593&w=2
CVE ID: CVE-2010-2253 State: PUBLISHED Published: 2010-07-06T14:00:00 Last Updated: 2024-08-07T02:25:07.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . (dot) character, which allows remote servers to create or overwrite files via (1) a 3xx redirect to a URL with a crafted filename or (2) a Content-Disposition header that suggests a crafted filename, and possibly execute arbitrary code as a consequence of writing to a dotfile in a home directory. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=602800 - http://marc.info
lyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=602800 - http://marc.info/?l=oss-security&m=127411372529485&w=2 - http://cpansearch.perl.org/src/GAAS/libwww-perl-5.836/Changes - http://marc.info/?l=oss-security&m=127611288927500&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050245.html - http://www.ocert.org/advisories/ocert-2010-001.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050232.html - https://bugzilla.redhat.com/show_bug.cgi?id=591580 - http://www.ubuntu.com/usn/USN-981-1 - http://www.vupen.com/english/advisories/2010/2872
CVE ID: CVE-2010-2254 State: PUBLISHED Published: 2010-06-09T20:00:00 Last Updated: 2024-08-07T02:25:07.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Shape5 Bridge of Hope template for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an article action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1001-exploits/joomlaboh-sql.txt - http://www.vupen.com/english/advisories/2010/0019 - http://www.exploit-db.com/exploits/10964 - http://www.securityfocus.com/bid/37602
CVE ID: CVE-2010-2255 State: PUBLISHED Published: 2010-06-09T20:00:00Z Last Updated: 2024-09-17T03:12:39.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the BF Survey Pro (com_bfsurvey_pro) component before 1.3.1, BF Survey Pro Free (com_bfsurvey_profree) component 1.2.6, and BF Survey Basic component before 1.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37585 - http://osvdb.org/61456 - http://secunia.com/advisories
Container: References: - http://www.securityfocus.com/bid/37585 - http://osvdb.org/61456 - http://secunia.com/advisories/37868 - http://packetstormsecurity.org/1001-exploits/joomlabfsurveypro-sql.txt - http://www.tamlyncreative.com.au/software/forum/index.php?topic=641.0
CVE ID: CVE-2010-2256 State: PUBLISHED Published: 2010-06-09T20:00:00 Last Updated: 2024-08-07T02:25:07.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Pay Per Minute Video Chat Script 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to admin/memberviewdetails.php and the (2) model parameter to videos.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38086 - http://www.exploit-db.com/exploits/10983 - http://packetstormsecurity.org/1001-exploits/ppmvcs-sqlxss.txt
CVE ID: CVE-2010-2257 State: PUBLISHED Published: 2010-06-09T20:00:00 Last Updated: 2024-08-07T02:25:07.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index_ie.php in Pay Per Minute Video Chat Script 2.0 and 2.1 allows remote attackers to execute arbitrary SQL commands via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/10983 - http://packetstormsecurity.org/1001-exploits/ppmvcs-sqlxss.txt
CVE ID: CVE-2010-2258 State: PUBLISHED Published: 2010-06-09T20:00:00Z Last Updated: 2024-09-16T22:45:46.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in signupconfirm.php in phpBannerExchange 1.2 Arabic allows remote attackers to inject arbitrary web script or HTML via the bannerurl parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38022 - http://osvdb.org/61446 - http://packetstormsecurity.org/1001-exploits/phpbannerexchange-xss.txt
CVE ID: CVE-2010-2259 State: PUBLISHED Published: 2010-06-09T20:00:00 Last Updated: 2024-08-07T02:25:07.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the BF Survey (com_bfsurvey) component for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/10946 - http://packetstormsecurity.org/1001-exploits/joomlabfsurvey-lfi.txt - http://osvdb.org/61438 - http://secunia.com/advisories/37866 - http://www.securityfocus.com/bid/37584 - http://www.tamlyncreative.com.au
/61438 - http://secunia.com/advisories/37866 - http://www.securityfocus.com/bid/37584 - http://www.tamlyncreative.com.au/software/forum/index.php?topic=641.0
CVE ID: CVE-2010-2260 State: PUBLISHED Published: 2010-06-09T20:00:00 Last Updated: 2024-08-07T02:25:07.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Gambit Design Bandwidth Meter, 0.72 and possibly 1.2, allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) view_by_name.php or (2) view_by_ip.php in admin/. NOTE: some sources report that the affected product is ShaPlus Bandwidth Meter, but this is incorrect. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/55307 - http://secunia.com/advisories/38012 - http://www.exploit-
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55307 - http://secunia.com/advisories/38012 - http://www.exploit-db.com/exploits/10926 - http://packetstormsecurity.org/1001-exploits/bandwidthmeter-xss.txt