Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
p://blog.nelhage.com/2010/12/cve-2010-4258-from-dos-to-privesc/ - http://openwall.com/lists/oss-security/2010/12/09/4 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.html - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html - http://secunia.com/advisories/42932 - http://archives.neohapsis.com/archives/fulldisclosure/2010-12/0086.html - http://www.vupen.com/english/advisories/2011/0124 - http://marc.info/?l=linux-kernel&m=129117048916957&w=2 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://www.vupen.com/english/advisories/2010/3321 - http://openwall.com/lists/oss-security/2010/12/08/9 - http://www.vu
http://www.vupen.com/english/advisories/2010/3321 - http://openwall.com/lists/oss-security/2010/12/08/9 - http://www.vupen.com/english/advisories/2011/0298 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2 - http://openwall.com/lists/oss-security/2010/12/09/14 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00007.html - http://code.google.com/p/chromium-os/issues/detail?id=10234 - http://www.vupen.com/english/advisories/2011/0375 - https://lkml.org/lkml/2010/12/1/543 - http://googlechromereleases.blogspot.com/2011/01/chrome-os-beta-channel-update.html - http://www.vupen.com/english/advisories/2011/0012 - http://lists.opensuse.org/opensuse-security-announce/2
update.html - http://www.vupen.com/english/advisories/2011/0012 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html - http://openwall.com/lists/oss-security/2010/12/02/4 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:029 - http://secunia.com/advisories/42745 - http://openwall.com/lists/oss-security/2010/12/02/7 - http://openwall.com/lists/oss-security/2010/12/08/5 - http://secunia.com/advisories/43291 - http://www.vupen.com/english/advisories/2011/0213 - https://bugzilla.redhat.com/show_bug.cgi?id=659567 - http://openwall.com/lists/oss-security/2010/12/08/4
CVE ID: CVE-2010-4259 State: PUBLISHED Published: 2010-12-07T01:00:00 Last Updated: 2024-08-07T03:34:37.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in FontForge 20100501 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long CHARSET_REGISTRY header in a BDF font file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45162 - http://openwall.com/lists/oss-security/2010/12/02/8 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=605537 - http://www.debian.org/security/2011/dsa-2253 - http://lists.fedoraproject.org/pipermail/package-annou
t.cgi?bug=605537 - http://www.debian.org/security/2011/dsa-2253 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052219.html - http://secunia.com/advisories/42577 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052201.html - http://openwall.com/lists/oss-security/2010/12/02/5 - https://bugzilla.redhat.com/show_bug.cgi?id=659359 - http://www.exploit-db.com/exploits/15732 - http://www.vupen.com/english/advisories/2010/3200
CVE ID: CVE-2010-4260 State: PUBLISHED Published: 2010-12-07T01:00:00 Last Updated: 2024-08-07T03:34:37.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in pdf.c in libclamav in ClamAV before 0.96.5 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document, aka (1) "bb #2358" and (2) "bb #2396." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42555 - http://www.vupen.com/english/advisories/2010/3137 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052401.html - https://bugzilla.redhat.com/show_b
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052401.html - https://bugzilla.redhat.com/show_bug.cgi?id=659861 - http://www.ubuntu.com/usn/USN-1031-1 - http://www.vupen.com/english/advisories/2010/3185 - http://www.securitytracker.com/id?1024818 - http://openwall.com/lists/oss-security/2010/12/03/1 - http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html - http://secunia.com/advisories/42523 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051905.html - http://secunia.com/advisories/42426 - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2358 - http://secunia.com/advisories/42720 - http://openwall.com/lists/oss-security/20
amav.net/bugzilla/show_bug.cgi?id=2358 - http://secunia.com/advisories/42720 - http://openwall.com/lists/oss-security/2010/12/03/6 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:249 - http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob_plain%3Bf=ChangeLog%3Bhb=master - http://www.securityfocus.com/bid/45152 - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html - http://xorl.wordpress.com/2010/12/06/cve-2010-4260-clamav-multiple-pdf-vulnerabilities/ - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2396 - http://www.vupen.com/english/advisories/2010/3135 - http://openwall.com/lists/oss-security/2010/12/03/3 - http://support.apple.com/kb/HT4581
CVE ID: CVE-2010-4261 State: PUBLISHED Published: 2010-12-07T01:00:00 Last Updated: 2024-08-07T03:34:37.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the icon_cb function in pe_icons.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42555 - http://www.vupen.com/english/advisories/2010/3137 - http://lists.fedoraproject.org/pipermail/package-announce/2
/42555 - http://www.vupen.com/english/advisories/2010/3137 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052401.html - https://bugzilla.redhat.com/show_bug.cgi?id=659861 - http://www.ubuntu.com/usn/USN-1031-1 - http://www.vupen.com/english/advisories/2010/3185 - http://www.securitytracker.com/id?1024818 - http://openwall.com/lists/oss-security/2010/12/03/1 - http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html - http://xorl.wordpress.com/2010/12/05/cve-2010-4261-clamav-icon_cb-off-by-one/ - http://secunia.com/advisories/42523 - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2344 - http://lists.fedoraproject.org/pipermail/package-announce/2010
- https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2344 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051905.html - http://secunia.com/advisories/42426 - http://secunia.com/advisories/42720 - http://openwall.com/lists/oss-security/2010/12/03/6 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:249 - http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob_plain%3Bf=ChangeLog%3Bhb=master - http://www.securityfocus.com/bid/45152 - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html - http://www.vupen.com/english/advisories/2010/3135 - http://openwall.com/lists/oss-security/2010/12/03/3 - http://support.apple.com/kb/HT4581
CVE ID: CVE-2010-4262 State: PUBLISHED Published: 2010-12-17T18:00:00 Last Updated: 2024-08-07T03:43:13.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Xfig 3.2.4 and 3.2.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a FIG image with a crafted color definition. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/12/06/8 - http://www.vupen.com/english/advisories/2010/3232 - http://secunia.com/advisories/42579 - https://bugzilla.redhat.com/show_bug.cgi?id=659676 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:010 - ht
ttps://bugzilla.redhat.com/show_bug.cgi?id=659676 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:010 - http://www.securityfocus.com/bid/45177 - http://www.vupen.com/english/advisories/2011/0108 - https://bugzilla.redhat.com/show_bug.cgi?id=657981 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052247.html - http://www.openwall.com/lists/oss-security/2010/12/03/2
CVE ID: CVE-2010-4263 State: PUBLISHED Published: 2011-01-18T17:00:00 Last Updated: 2024-08-07T03:43:13.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: The igb_receive_skb function in drivers/net/igb/igb_main.c in the Intel Gigabit Ethernet (aka igb) subsystem in the Linux kernel before 2.6.34, when Single Root I/O Virtualization (SR-IOV) and promiscuous mode are enabled but no VLANs are registered, allows remote attackers to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact via a VLAN tagged frame. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/520102/100/0/thread
itional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2011-0017.html - http://secunia.com/advisories/46397 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=31b24b955c3ebbb6f3008a6374e61cf7c05a193c - http://www.redhat.com/support/errata/RHSA-2011-0007.html - http://www.securityfocus.com/bid/45208 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34 - http://secunia.com/advisories/42884 - http://secunia.com/advisories/42890 - https://bugzilla.redhat.com/show_bug.cgi?id=660188 -
ecunia.com/advisories/42884 - http://secunia.com/advisories/42890 - https://bugzilla.redhat.com/show_bug.cgi?id=660188 - https://bugzilla.kernel.org/show_bug.cgi?id=15582 - http://openwall.com/lists/oss-security/2010/12/06/3 - http://openwall.com/lists/oss-security/2010/12/06/9
CVE ID: CVE-2010-4264 State: PUBLISHED Published: 2021-06-22T13:24:04 Last Updated: 2024-08-07T03:43:13.315Z Vendors: n/a Products: vanilla forums Problem Types: CWE-79 Description: It was found in vanilla forums before 2.0.10 a cross-site scripting vulnerability where a filename could contain arbitrary code to execute on the client side. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/vanilla/vanilla/commit/4535a059e4e24ca11a2ef0b4d754f262398bcece - https://seclists.org/oss-sec/2010/q4/282
CVE ID: CVE-2010-4265 State: PUBLISHED Published: 2010-12-30T20:00:00Z Last Updated: 2024-08-07T03:43:13.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 through 4.3.0.CP09 allows remote attackers to cause a denial of service (daemon outage) by establishing a bisocket control connection TCP session, and then not sending any application data, related to a missing CVE-2010-3862 patch. NOTE: this can be considered a duplicate of CVE-20
nding any application data, related to a missing CVE-2010-3862 patch. NOTE: this can be considered a duplicate of CVE-2010-3862 because a missing patch should not be assigned a separate CVE identifier. Additional Analyst Notes: - CVE Program Container: References: - https://issues.jboss.org/browse/JBPAPP-5253 - http://securitytracker.com/id?1024840 - https://issues.jboss.org/browse/JBREM-1261 - http://www.redhat.com/support/errata/RHSA-2010-0965.html - http://www.redhat.com/support/errata/RHSA-2010-0964.html - https://bugzilla.redhat.com/show_bug.cgi?id=660623
CVE ID: CVE-2010-4266 State: PUBLISHED Published: 2021-06-22T13:38:24 Last Updated: 2024-08-07T03:43:13.298Z Vendors: n/a Products: vanilla forums Problem Types: CWE-601 Description: It was found in vanilla forums before 2.0.10 a potential linkbait vulnerability in dispatcher. Additional Analyst Notes: - CVE Program Container: References: - https://open.vanillaforums.com/discussion/13119/vanilla-2.0.10-released/p1
CVE ID: CVE-2010-4267 State: PUBLISHED Published: 2011-01-20T18:00:00 Last Updated: 2024-08-07T03:43:13.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing (HPLIP) 1.6.7, 3.9.8, 3.10.9, and probably other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SNMP response with a large length value. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42956 - http://secunia.com/advisories/43068 - http://osvdb.org/70498 - http://secunia.com/advisories/4310
com/advisories/42956 - http://secunia.com/advisories/43068 - http://osvdb.org/70498 - http://secunia.com/advisories/43102 - http://www.vupen.com/english/advisories/2011/0136 - http://www.vupen.com/english/advisories/2011/0212 - http://www.securityfocus.com/bid/45833 - http://secunia.com/advisories/43022 - http://www.vupen.com/english/advisories/2011/0228 - https://bugzilla.redhat.com/attachment.cgi?id=468455&action=diff - http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html - http://www.vupen.com/english/advisories/2011/0211 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-Janua
/opensuse-security-announce/2011-01/msg00006.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053474.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:013 - http://www.redhat.com/support/errata/RHSA-2011-0154.html - http://www.vupen.com/english/advisories/2011/0243 - http://www.ubuntu.com/usn/USN-1051-1 - http://secunia.com/advisories/43083 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64738 - http://www.vupen.com/english/advisories/2011/0160 - http://www.debian.org/security/2011/dsa-2152 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053472.html - http://security.gentoo.org/glsa/glsa-201203-17.xml - http://www.
g/pipermail/package-announce/2011-January/053472.html - http://security.gentoo.org/glsa/glsa-201203-17.xml - http://www.securitytracker.com/id?1024967 - http://secunia.com/advisories/42939 - http://secunia.com/advisories/48441 - https://bugzilla.redhat.com/show_bug.cgi?id=662740
CVE ID: CVE-2010-4268 State: PUBLISHED Published: 2010-11-16T23:00:00 Last Updated: 2024-08-07T03:43:14.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Pulse Infotech Flip Wall (com_flipwall) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15366 - http://www.securityfocus.com/bid/44573 - http://secunia.com/advisories/42073 - http://packetstormsecurity.org/1011-exploits/joomlaflipwall-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/62914 - http://www.osvdb.
rg/1011-exploits/joomlaflipwall-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/62914 - http://www.osvdb.org/68955
CVE ID: CVE-2010-4269 State: PUBLISHED Published: 2010-11-16T23:00:00 Last Updated: 2024-08-07T03:43:14.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in managechat.php in Collabtive 0.65 allows remote attackers to execute arbitrary SQL commands via the chatstart[USERTOID] cookie in a pull action. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1011-exploits/collabtive065-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/62930 - http://www.exploit-db.com/exploits/15381
CVE ID: CVE-2010-4270 State: PUBLISHED Published: 2010-11-16T23:00:00Z Last Updated: 2024-09-16T20:43:14.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the nBill (com_netinvoice) component before 2.0.9 standard edition, 2.0.10 lite edition, and 1.2_10 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors related to (1) administrator/components/com_nbill/admin.nbill.php, (2) components/com_nbill/nbill.php, (3) administrator/components/com_netinvoice/admin.netinvoice.php, or (4) components/com_netinvoice/netinvoice.php, as exploited in the wild in November 2010. Additional Analy
nvoice.php, or (4) components/com_netinvoice/netinvoice.php, as exploited in the wild in November 2010. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42186 - http://www.nbill.co.uk/forum-smf/index.php/topic%2C2158.0.html - http://www.nbill.co.uk/newsflash/security-patch-for-all-versions-of-nbill.html - http://www.securityfocus.com/bid/44719 - http://osvdb.org/69066
CVE ID: CVE-2010-4271 State: PUBLISHED Published: 2010-11-16T23:00:00Z Last Updated: 2024-09-17T02:57:50.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ImpressCMS before 1.2.3 RC2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42160 - http://osvdb.org/69082 - http://www.impresscms.org/content.php?page=ImpressCMS_1.2.3 - http://www.securityfocus.com/bid/44745
CVE ID: CVE-2010-4272 State: PUBLISHED Published: 2010-11-16T23:00:00 Last Updated: 2024-08-07T03:43:13.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Pulse Infotech Sponsor Wall (com_sponsorwall) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/68956 - http://secunia.com/advisories/42072 - http://www.securityfocus.com/bid/44571 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62915 - http://packetstormsecurity.org/1011-exploits/joomlasponsorwall-sql.txt - http://www.exploit-db.
/vulnerabilities/62915 - http://packetstormsecurity.org/1011-exploits/joomlasponsorwall-sql.txt - http://www.exploit-db.com/exploits/15367
CVE ID: CVE-2010-4273 State: PUBLISHED Published: 2010-11-16T23:00:00 Last Updated: 2024-08-07T03:43:14.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in imoveis.php in DescargarVista ACC IMoveis 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1010-exploits/accimoveis-sql.txt - http://www.securityfocus.com/bid/44481 - http://www.exploit-db.com/exploits/15338 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62843
CVE ID: CVE-2010-4274 State: PUBLISHED Published: 2010-11-16T23:00:00 Last Updated: 2024-08-07T03:43:13.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: reset_diragent_keys in the Common agent in IBM Systems Director 6.2.0 has 754 permissions, which allows local users to gain privileges by leveraging system group membership. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42239 - http://www-01.ibm.com/support/docview.wss?uid=isg1IC71821 - http://www.vupen.com/english/advisories/2010/2978 - http://securitytracker.com/id?1024736 - http://www.securityfocus.com/bid/44839 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63238
CVE ID: CVE-2010-4275 State: PUBLISHED Published: 2010-12-22T01:00:00 Last Updated: 2024-08-07T03:43:14.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Radius Manager 3.8.0 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) name or (2) descr parameter in an (a) update_usergroup or a (b) store_nas action to admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64199 - http://www.exploit-db.com/exploits/15766 - http://www.securityfocus.com/bid/45481 - http://secunia.com/advisories/42364
CVE ID: CVE-2010-4276 State: PUBLISHED Published: 2010-12-30T18:00:00 Last Updated: 2024-08-07T03:43:13.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the lz_tracking_set_sessid function in templates/jscript/jstrack.tpl in LiveZilla 3.2.0.2 allows remote attackers to inject arbitrary web script or HTML via the livezilla parameter in a track action to server.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/3331 - http://www.conviso.com.br/livezilla-cross-site-scripting-vulnerability-cve-2010-4276/ - http://seclists.org/fulldisclosure/2010/Dec/650 - http://secunia.com/
ross-site-scripting-vulnerability-cve-2010-4276/ - http://seclists.org/fulldisclosure/2010/Dec/650 - http://secunia.com/advisories/42748 - http://www.securityfocus.com/bid/45586
CVE ID: CVE-2010-4277 State: PUBLISHED Published: 2010-12-22T20:00:00 Last Updated: 2024-08-07T03:43:13.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in lembedded-video.php in the Embedded Video plugin 4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the content parameter to wp-admin/post.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45486 - http://www.securityfocus.com/archive/1/515345/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/64214
CVE ID: CVE-2010-4278 State: PUBLISHED Published: 2010-12-02T17:00:00 Last Updated: 2024-08-07T03:43:13.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: operation/agentes/networkmap.php in Pandora FMS before 3.1.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the layout parameter in an operation/agentes/networkmap action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42347 - http://www.securityfocus.com/archive/1/514939/100/0/threaded - http://osvdb.org/69550 - http://www.exploit-db.com/exploits/15640 - http://sourceforge.net/projects/pandora/files/Pandora%20FMS%203.1/Fi
/69550 - http://www.exploit-db.com/exploits/15640 - http://sourceforge.net/projects/pandora/files/Pandora%20FMS%203.1/Final%20version%20%28Stable%29/pandorafms_console-3.1_security_patch_13Oct2010.tar.gz/download - http://www.securityfocus.com/bid/45112 - http://seclists.org/fulldisclosure/2010/Nov/326
CVE ID: CVE-2010-4279 State: PUBLISHED Published: 2010-12-02T17:00:00 Last Updated: 2024-08-07T03:43:13.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Pandora FMS 3.1 and earlier specifies an empty string for the loginhash_pwd field, which allows remote attackers to bypass authentication by sending a request to index.php with "admin" in the loginhash_user parameter, in conjunction with the md5 hash of "admin" in the loginhash_data parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42347 - http://www.securityfocus.com/archive/1/514939/100/0/threaded - http://sourceforge.net/projects/pandora/fi
sories/42347 - http://www.securityfocus.com/archive/1/514939/100/0/threaded - http://sourceforge.net/projects/pandora/files/Pandora%20FMS%203.1/Final%20version%20%28Stable%29/pandorafms_console-3.1_security_patch_13Oct2010.tar.gz/download - https://www.exploit-db.com/exploits/35731/ - http://packetstormsecurity.com/files/129830/Pandora-3.1-Auth-Bypass-Arbitrary-File-Upload.html - http://www.securityfocus.com/bid/45112 - http://www.exploit-db.com/exploits/15639 - http://seclists.org/fulldisclosure/2010/Nov/326 - http://osvdb.org/69549