Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-2034 State: PUBLISHED Published: 2010-05-25T14:00:00Z Last Updated: 2024-09-16T17:28:05.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Percha Image Attach (com_perchaimageattach) component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1005-exploits/joomlaperchaia-lfi.txt - http://www.securityfocus.com/bid/40244
CVE ID: CVE-2010-2035 State: PUBLISHED Published: 2010-05-25T14:00:00Z Last Updated: 2024-09-16T20:38:09.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Percha Gallery (com_perchagallery) component 1.6 Beta for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1005-exploits/joomlaperchagl-lfi.txt - http://www.securityfocus.com/bid/40244
CVE ID: CVE-2010-2036 State: PUBLISHED Published: 2010-05-25T14:00:00Z Last Updated: 2024-09-17T00:06:22.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Percha Fields Attach (com_perchafieldsattach) component 1.x for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1005-exploits/joomlaperchafa-lfi.txt - http://www.securityfocus.com/bid/40244
CVE ID: CVE-2010-2037 State: PUBLISHED Published: 2010-05-25T14:00:00Z Last Updated: 2024-09-17T03:37:23.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Percha Downloads Attach (com_perchadownloadsattach) component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1005-exploits/joomlaperchada-lfi.txt - http://www.securityfocus.com/bid/40244
CVE ID: CVE-2010-2038 State: PUBLISHED Published: 2010-05-25T14:00:00 Last Updated: 2024-08-07T02:17:14.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in include/tool/editing_files.php in gpEasy CMS 1.6.2 allows remote authenticated users, with Edit privileges, to inject arbitrary web script or HTML via the gpcontent parameter to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1005-exploits/gpeasycms-xss.txt - http://www.htbridge.ch/advisory/xss_vulnerability_in_gpeasy_cms.html - http://www.securityfocus.co
s/gpeasycms-xss.txt - http://www.htbridge.ch/advisory/xss_vulnerability_in_gpeasy_cms.html - http://www.securityfocus.com/archive/1/511388/100/0/threaded - http://www.securityfocus.com/bid/40330 - http://secunia.com/advisories/39643
CVE ID: CVE-2010-2039 State: PUBLISHED Published: 2010-05-25T14:00:00 Last Updated: 2024-08-07T02:17:13.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in gpEasy CMS 1.6.2, 1.6.1, and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative users via an Admin_Users action to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/58214 - http://www.vupen.com/english/advisories/2010/1030 - http://packetstormsecurity.org/100
cloud.com/vulnerabilities/58214 - http://www.vupen.com/english/advisories/2010/1030 - http://packetstormsecurity.org/1004-exploits/gpeasy-xsrf.txt - http://secunia.com/advisories/39643 - http://www.exploit-db.com/exploits/12441 - http://www.osvdb.org/64130
CVE ID: CVE-2010-2040 State: PUBLISHED Published: 2010-05-25T14:00:00 Last Updated: 2024-08-07T02:17:13.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in V-EVA Shopzilla Affiliate Script PHP allows remote attackers to inject arbitrary web script or HTML via the s parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/58749 - http://www.packetstormsecurity.org/1005-exploits/shopzillaas-xss.txt - http://www.securityfocus.com/bid/40246 - http://osvdb.org/64746 - http://secunia.com/advisories/39877
CVE ID: CVE-2010-2041 State: PUBLISHED Published: 2010-05-25T14:00:00 Last Updated: 2024-08-07T02:17:13.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP-Calendar before 2.0 Beta7 allow remote attackers to inject arbitrary web script or HTML via the (1) description and (2) lastaction parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/58861 - http://www.vupen.com/english/advisories/2010/1202 - http://www.securityfocus.com/archive/1/511395/100/0/threaded - http://www.securityfocus.com/bid/40334 - http://packetstormsecurity.org/1005
focus.com/archive/1/511395/100/0/threaded - http://www.securityfocus.com/bid/40334 - http://packetstormsecurity.org/1005-advisories/phpcalendar-xss.txt - http://secunia.com/advisories/33899 - http://php-calendar.blogspot.com/2010/05/php-calendar-20-beta7.html
CVE ID: CVE-2010-2042 State: PUBLISHED Published: 2010-05-25T14:00:00 Last Updated: 2024-08-07T02:17:13.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in ECShop 2.7.2 allows remote attackers to execute arbitrary SQL commands via the encode parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1005-exploits/ecshopsearch-sql.txt - http://secunia.com/advisories/39930 - http://www.securityfocus.com/bid/40338 - http://www.exploit-db.com/exploits/12702
CVE ID: CVE-2010-2043 State: PUBLISHED Published: 2010-05-25T14:00:00 Last Updated: 2024-08-07T02:17:14.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Home.aspx in DataTrack System 3.5 and 3.5.8019.4 allows remote attackers to inject arbitrary web script or HTML via the Work_Order_Summary parameter (aka the request summary). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39868 - http://cross-site-scripting.blogspot.com/2010/05/datatrack-system-35-persistent-xss.html - http://www.securityfocus.com/bid/40249 - https:
scripting.blogspot.com/2010/05/datatrack-system-35-persistent-xss.html - http://www.securityfocus.com/bid/40249 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58732 - http://osvdb.org/64727 - http://packetstormsecurity.org/1005-exploits/datatrackserver35-xss.txt
CVE ID: CVE-2010-2044 State: PUBLISHED Published: 2010-05-25T18:00:00 Last Updated: 2024-08-07T02:17:13.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Konsultasi (com_konsultasi) component 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the sid parameter in a detail action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/64637 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58584 - http://packetstormsecurity.org/1005-exploits/joomlakonsultasi-sql.txt - http://www.securityfocus.com/bid/40160 - http://www.exploit-db.com/exploits/12590 - http://secunia.com/ad
tasi-sql.txt - http://www.securityfocus.com/bid/40160 - http://www.exploit-db.com/exploits/12590 - http://secunia.com/advisories/39816
CVE ID: CVE-2010-2045 State: PUBLISHED Published: 2010-05-25T18:00:00 Last Updated: 2024-08-07T02:17:14.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Dione Form Wizard (aka FDione or com_dioneformwizard) component 1.0.2 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1005-exploits/joomlafdione-lfi.txt - http://www.exploit-db.com/exploits/12595 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58574 - http://www.securityfocus.com/bid/40166 - http://
ts/12595 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58574 - http://www.securityfocus.com/bid/40166 - http://secunia.com/advisories/39755 - http://osvdb.org/64633
CVE ID: CVE-2010-2046 State: PUBLISHED Published: 2010-05-25T18:00:00Z Last Updated: 2024-09-17T03:18:14.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the ActiveHelper LiveHelp (com_activehelper_livehelp) component 2.0.3 for Joomla! allow remote attackers to inject arbitrary web script or HTML via (1) the DOMAINID parameter to server/cookies.php or (2) the SERVER parameter to server/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.xenuser.org/2010/05/19/joomla-component-activehelper-livehelp-xss-vulnerabilities/ - http://www.securityfocus.com/bid/40278 - http://packetstormsecurity.o
onent-activehelper-livehelp-xss-vulnerabilities/ - http://www.securityfocus.com/bid/40278 - http://packetstormsecurity.org/1005-exploits/joomlaactivehelper-xss.txt - http://xenuser.org/documents/security/joomla_com_activehelper_livehelp_xss.txt - http://secunia.com/advisories/39870
CVE ID: CVE-2010-2047 State: PUBLISHED Published: 2010-05-25T18:00:00 Last Updated: 2024-08-07T02:17:13.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in JE CMS 1.0.0 and 1.1 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a viewcategory action. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/58646 - http://secunia.com/advisories/39851 - http://www.exploit-db.com/exploits/12641 - http://osvdb.org/64716 - http://www.securityfocus.com/bid/40231
CVE ID: CVE-2010-2048 State: PUBLISHED Published: 2010-05-25T18:00:00 Last Updated: 2024-08-07T02:17:13.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Heartbeat module 6.x before 6.x-4.9 for Drupal allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/58702 - http://drupal.org/node/803570 - http://drupal.org/node/802508 - http://secunia.com/advisories/39893 - http://www.securityfocus.com/bid/40268
CVE ID: CVE-2010-2049 State: PUBLISHED Published: 2010-05-25T18:00:00Z Last Updated: 2024-09-16T17:59:23.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in jsp/audit/reports/ExportReport.jsp in ManageEngine ADAudit Plus 4.0.0 build 4043 allows remote attackers to inject arbitrary web script or HTML via the reportList parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39876 - http://osvdb.org/64726 - http://www.securityfocus.com/bid/40253
CVE ID: CVE-2010-2050 State: PUBLISHED Published: 2010-05-25T18:00:00 Last Updated: 2024-08-07T02:17:13.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Moron Solutions MS Comment (com_mscomment) component 0.8.0b for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40185 - http://www.vupen.com/english/advisories/2010/1159 - http://packetstormsecurity.org/1005-exploits/joomlamscomment-lfi.txt - http://www.exploit-db.com/exploits/12611 - https://exchange.xforce.ibmcloud.com/v
005-exploits/joomlamscomment-lfi.txt - http://www.exploit-db.com/exploits/12611 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58619
CVE ID: CVE-2010-2051 State: PUBLISHED Published: 2010-05-25T18:00:00 Last Updated: 2024-08-07T02:17:13.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in article.php in Debliteck DBCart allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1005-exploits/dbcart-sql.txt - http://www.exploit-db.com/exploits/12661 - http://secunia.com/advisories/39867
CVE ID: CVE-2010-2052 State: REJECTED Published: 2010-06-07T16:00:00Z Last Updated: 2024-09-17T01:31:11.681Z Description: No description available.
CVE ID: CVE-2010-2053 State: PUBLISHED Published: 2010-06-07T13:38:00 Last Updated: 2024-08-07T02:17:13.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: emesenelib/ProfileManager.py in emesene before 1.6.2 allows local users to overwrite arbitrary files via a symlink attack on the emsnpic temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042699.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042725.html - http://secunia.com/advisories/39945 - http://marc.info/?l=oss-security&m=127514641525366&w=2 - http://secunia.com/advisories/40115 - https://exchange.
39945 - http://marc.info/?l=oss-security&m=127514641525366&w=2 - http://secunia.com/advisories/40115 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59045 - http://www.securityfocus.com/bid/40455 - http://www.vupen.com/english/advisories/2010/1423 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042683.html - http://osvdb.org/65018 - http://forum.emesene.org/index.php?topic=3441.0 - http://www.emesene.org/
CVE ID: CVE-2010-2054 State: PUBLISHED Published: 2010-06-14T19:00:00Z Last Updated: 2024-08-07T02:17:13.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in httpAdapter.c in httpAdapter in SBLIM SFCB 1.3.4 through 1.3.7, when the configuration sets httpMaxContentLength to a zero value, allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via a large integer in the Content-Length HTTP header, aka bug #3001915. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40018 - http://www.vupen.com/
tional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40018 - http://www.vupen.com/english/advisories/2010/1312 - http://sblim.cvs.sourceforge.net/viewvc/sblim/sfcb/httpAdapter.c?r1=1.85&r2=1.86 - http://sourceforge.net/tracker/index.php?func=detail&aid=3001915&group_id=128809&atid=712784 - http://marc.info/?l=bugtraq&m=127549079109192&w=2
CVE ID: CVE-2010-2055 State: PUBLISHED Published: 2010-07-22T01:00:00 Last Updated: 2024-08-07T02:17:14.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support for the -P- option to the gs program, as demonstrated using gs_init.ps, a different vulnerability than CVE-2010-4820. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/66247 - http://secunia.com/advisories/40532 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583183 - http://bugs.d
rg/66247 - http://secunia.com/advisories/40532 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583183 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583316 - http://www.securityfocus.com/archive/1/511476 - https://rhn.redhat.com/errata/RHSA-2012-0095.html - https://bugzilla.redhat.com/show_bug.cgi?id=599564 - http://security.gentoo.org/glsa/glsa-201412-17.xml - http://www.vupen.com/english/advisories/2010/1757 - http://savannah.gnu.org/forum/forum.php?forum_id=6368 - http://www.securityfocus.com/archive/1/511474 - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043948.html - http://www.securityfocus.com/archive/1/511433 - http://bugs.ghostscript.com/show_bug.cgi?id
unce/2010-July/043948.html - http://www.securityfocus.com/archive/1/511433 - http://bugs.ghostscript.com/show_bug.cgi?id=691350 - http://secunia.com/advisories/40452 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - https://bugzilla.novell.com/show_bug.cgi?id=608071 - http://secunia.com/advisories/40475 - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043913.html - http://www.securityfocus.com/archive/1/511472 - http://bugs.ghostscript.com/show_bug.cgi?id=691339
CVE ID: CVE-2010-2056 State: PUBLISHED Published: 2010-07-22T01:00:00Z Last Updated: 2024-08-07T02:17:13.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU gv before 3.7.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40532 - https://bugzilla.redhat.com/show_bug.cgi?id=599621 - http://www.vupen.com/english/advisories/2010/1757 - http://savannah.gnu.org/forum/forum.php?forum_id=6368 - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043948.html - http://secunia.com/advisories/40475 - http://lists.fedoraproject.org/piperm
ail/package-announce/2010-July/043948.html - http://secunia.com/advisories/40475 - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043913.html - http://www.osvdb.org/66249
CVE ID: CVE-2010-2057 State: PUBLISHED Published: 2010-10-20T17:00:00Z Last Updated: 2024-08-07T02:17:14.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: shared/util/StateUtils.java in Apache MyFaces 1.1.x before 1.1.8, 1.2.x before 1.2.9, and 2.0.x before 2.0.1 uses an encrypted View State without a Message Authentication Code (MAC), which makes it easier for remote attackers to perform successful modifications of the View State via a padding oracle attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=623799 - https://issues.apache.org/jira/browse/MYFACES-2749 - http://svn.apache.org/viewvc/myfaces/shared/trunk/c
cgi?id=623799 - https://issues.apache.org/jira/browse/MYFACES-2749 - http://svn.apache.org/viewvc/myfaces/shared/trunk/core/src/main/java/org/apache/myfaces/shared/util/StateUtils.java?r1=943327&r2=951801
CVE ID: CVE-2010-2058 State: PUBLISHED Published: 2010-06-07T13:38:00 Last Updated: 2024-08-07T02:17:13.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: setup.py in Prewikka 0.9.14 installs prewikka.conf with world-readable permissions, which allows local users to obtain the SQL database password. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201101-07.xml - https://dev.prelude-technologies.com/projects/prewikka/repository/revisions/17e38c310410be1b7811152172cda4438936063d - https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00771.html - http://www.openwall.com/lists/oss-security/2010/06/01/13 - https:/
es/fedora-package-announce/2009-April/msg00771.html - http://www.openwall.com/lists/oss-security/2010/06/01/13 - https://dev.prelude-technologies.com/projects/prewikka/repository/revisions/17e38c310410be1b7811152172cda4438936063d/diff/setup.py - https://bugs.gentoo.org/show_bug.cgi?id=270056 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59223 - http://secunia.com/advisories/42820
CVE ID: CVE-2010-2059 State: PUBLISHED Published: 2010-06-08T18:00:00 Last Updated: 2024-08-07T02:17:14.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/fsm.c in RPM 4.8.0 and unspecified 4.7.x and 4.6.x versions, and RPM before 4.4.3, does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade, which might allow local users to gain privileges by creating a hard link to a vulnerable (1) setuid or (2) setgid file. Additional Analyst Notes: - CVE Program Container: References: - http://distrib-coffee.ipsl.jussieu.fr/pub/mirrors/rpm/files/rpm/rpm-4.4/rpm-4.4.3.tar.gz - http://www.redhat.com/support/errata/RHSA-2010-0679.
psl.jussieu.fr/pub/mirrors/rpm/files/rpm/rpm-4.4/rpm-4.4.3.tar.gz - http://www.redhat.com/support/errata/RHSA-2010-0679.html - http://lists.vmware.com/pipermail/security-announce/2011/000126.html - http://rpm.org/gitweb?p=rpm.git%3Ba=commit%3Bh=ca2d6b2b484f1501eafdde02e1688409340d2383 - http://www.vupen.com/english/advisories/2011/0606 - http://www.osvdb.org/65143 - http://www.securityfocus.com/archive/1/516909/100/0/threaded - http://secunia.com/advisories/40028 - http://marc.info/?l=oss-security&m=127559059928131&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:180 - http://www.openwall.com/lists/oss-security/2010/06/02/2 - http://lists.opensuse.org/opensuse-security-annou
A-2010:180 - http://www.openwall.com/lists/oss-security/2010/06/02/2 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - https://bugzilla.redhat.com/show_bug.cgi?id=598775 - http://www.openwall.com/lists/oss-security/2010/06/02/3 - http://www.openwall.com/lists/oss-security/2010/06/03/5 - http://www.openwall.com/lists/oss-security/2010/06/04/1 - http://www.vmware.com/security/advisories/VMSA-2011-0004.html - https://bugzilla.redhat.com/show_bug.cgi?id=125517
CVE ID: CVE-2010-2060 State: PUBLISHED Published: 2010-06-07T20:00:00 Last Updated: 2024-08-07T02:17:14.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: The put command functionality in beanstalkd 1.4.5 and earlier allows remote attackers to execute arbitrary Beanstalk commands via the body in a job that is too big, which is not properly handled by the dispatch_cmd function in prot.c. Additional Analyst Notes: - CVE Program Container: References: - http://kr.github.com/beanstalkd/2010/05/23/1.4.6-release-notes.html - http://github.com/kr/beanstalkd/commit/2e8e8c6387ecdf5923dfc4d7718d18eba1b0873d - https://exchange.xforce.ibmcloud.com/vulnerabilities/59107 - http://secunia.com/
e8c6387ecdf5923dfc4d7718d18eba1b0873d - https://exchange.xforce.ibmcloud.com/vulnerabilities/59107 - http://secunia.com/advisories/40032 - http://osvdb.org/65113 - http://www.securityfocus.com/bid/40516
CVE ID: CVE-2010-2061 State: PUBLISHED Published: 2019-10-29T21:01:22 Last Updated: 2024-08-07T02:17:13.585Z Vendors: rpcbind Products: rpcbind Problem Types: Other Description: rpcbind 0.2.0 does not properly validate (1) /tmp/portmap.xdr and (2) /tmp/rpcbind.xdr, which can be created by an attacker before the daemon is started. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-2061 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-2061 - https://access.redhat.com/security/cve/cve-2010-2061 - https://www.openwall.com/lists/oss-security/2010/06/08/3 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583435#5