Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-0971 State: PUBLISHED Published: 2010-03-16T18:26:00 Last Updated: 2024-08-07T01:06:52.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.6.4 allow remote authenticated users, with Instructor privileges, to inject arbitrary web script or HTML via the (1) Question and (2) Choice fields in tools/polls/add.php, the (3) Type and (4) Title fields in tools/groups/create_manual.php, and the (5) Title field in assignments/add_assignment.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/62905 - http://
ird party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/62905 - http://www.securityfocus.com/bid/38656 - http://www.exploit-db.com/exploits/11685 - http://secunia.com/advisories/38906 - http://osvdb.org/62904 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56852 - http://packetstormsecurity.org/1003-exploits/atutor-xss.txt - http://osvdb.org/62906
CVE ID: CVE-2010-0972 State: PUBLISHED Published: 2010-03-16T18:26:00 Last Updated: 2024-08-07T01:06:52.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the GCalendar (com_gcalendar) component 2.1.5 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38925 - http://www.exploit-db.com/exploits/11738 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56863
CVE ID: CVE-2010-0973 State: PUBLISHED Published: 2010-03-16T18:26:00 Last Updated: 2024-08-07T01:06:52.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in phppool media Domain Verkaus and Auktions Portal allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0616 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56872 - http://4004securityproject.wordpress.com/2010/03/14/phppool-media-domain-verkaufs-und-auktions-portal-index-php-sql-injection/ - http://secunia.com/advisories/38939 - http://www.exp
edia-domain-verkaufs-und-auktions-portal-index-php-sql-injection/ - http://secunia.com/advisories/38939 - http://www.exploit-db.com/exploits/11733
CVE ID: CVE-2010-0974 State: PUBLISHED Published: 2010-03-16T18:26:00 Last Updated: 2024-08-07T01:06:52.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PHPCityPortal allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) video_show.php, (2) spotlight_detail.php, (3) real_estate_details.php, and (4) auto_details.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56811 - http://www.securityfocus.com/bid/38649 - http://www.packetstormsecurity.com/1003-exploits/phpcityportal-sqlrfi.txt - http://www.exploit-db.com/exploits/11678
CVE ID: CVE-2010-0975 State: PUBLISHED Published: 2010-03-16T18:26:00 Last Updated: 2024-08-07T01:06:52.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in external.php in PHPCityPortal allows remote attackers to execute arbitrary PHP code via a URL in the url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56812 - http://www.exploit-db.com/exploits/11678 - http://packetstormsecurity.org/1003-exploits/phpcityportal-sqlrfi.txt
CVE ID: CVE-2010-0976 State: PUBLISHED Published: 2010-03-16T19:00:00 Last Updated: 2024-08-07T01:06:52.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Acidcat CMS 3.5.x does not prevent access to install.asp after installation finishes, which might allow remote attackers to restart the installation process and have unspecified other impact via requests to install.asp and other install_*.asp scripts. NOTE: the final installation screen states "Important: you must now delete all files beginning with 'install' from the root directory." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/55331 - http://packetstorm
: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/55331 - http://packetstormsecurity.org/1001-exploits/acidcatcms-disclose.txt - http://www.exploit-db.com/exploits/10972
CVE ID: CVE-2010-0977 State: PUBLISHED Published: 2010-03-16T19:00:00 Last Updated: 2024-08-07T01:06:52.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: PD PORTAL 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/db.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/10995 - http://osvdb.org/61468 - http://secunia.com/advisories/38109 - http://packetstormsecurity.org/1001-exploits/pdportal-disclose.txt
CVE ID: CVE-2010-0978 State: PUBLISHED Published: 2010-03-16T19:00:00 Last Updated: 2024-08-07T01:06:52.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: KMSoft Guestbook (aka GBook) 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/db.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38076 - http://packetstormsecurity.org/1001-exploits/kmsoftgb-disclose.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/55376 - http://osvdb.org/61487 - http://www.exploit-db.com/exploits/11005
CVE ID: CVE-2010-0979 State: PUBLISHED Published: 2010-03-16T19:00:00Z Last Updated: 2024-09-16T16:49:07.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in display.php in Obsession-Design Image-Gallery (ODIG) 1.1 allows remote attackers to inject arbitrary web script or HTML via the folder parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38107 - http://packetstormsecurity.org/1001-exploits/odig-xss.txt - http://www.vupen.com/english/advisories/2010/0048
CVE ID: CVE-2010-0980 State: PUBLISHED Published: 2010-03-16T19:00:00 Last Updated: 2024-08-07T01:06:52.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in player.php in Left 4 Dead (L4D) Stats 1.1 allows remote attackers to execute arbitrary SQL commands via the steamid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://greyhathackers.wordpress.com/2010/01/02/left-4-dead-stats-1-1-sql-injection-vulnerability/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/55299 - http://secunia.com/advisories/38008 - http://osvdb.org/61472 - http://www.exploit-db.com/exploits/10930 - http://packetstormsecurity.org/1001-exploi
s/38008 - http://osvdb.org/61472 - http://www.exploit-db.com/exploits/10930 - http://packetstormsecurity.org/1001-exploits/left4deadstats-sql.txt
CVE ID: CVE-2010-0981 State: PUBLISHED Published: 2010-03-16T19:00:00 Last Updated: 2024-08-07T01:06:52.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the TPJobs (com_tpjobs) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id_c[] parameter in a resadvsearch action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37591 - http://packetstormsecurity.org/0912-exploits/joomlatpjobs-sql.txt - http://www.vupen.com/english/advisories/2010/0023 - http://www.exploit-db.com/exploits/10950 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55350 - htt
/2010/0023 - http://www.exploit-db.com/exploits/10950 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55350 - http://osvdb.org/61477 - http://secunia.com/advisories/38001
CVE ID: CVE-2010-0982 State: PUBLISHED Published: 2010-03-16T19:00:00Z Last Updated: 2024-09-17T02:06:27.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the CARTwebERP (com_cartweberp) component 1.56.75 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37581 - http://secunia.com/advisories/37917 - http://packetstormsecurity.org/1001-exploits/joomlacartweberp-lfi.txt - http://osvdb.org/61447
CVE ID: CVE-2010-0983 State: PUBLISHED Published: 2010-03-16T19:00:00 Last Updated: 2024-08-07T01:06:52.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/mail.inc.php in Rezervi 3.0.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the root parameter, a different vector than CVE-2007-2156. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/55341 - http://www.securityfocus.com/bid/37589 - http://www.exploit-db.com/exploits/10967 - http://packetstormsecurity.org/1001-exploits/rezervi-rfi.txt - http:
/37589 - http://www.exploit-db.com/exploits/10967 - http://packetstormsecurity.org/1001-exploits/rezervi-rfi.txt - http://www.vupen.com/english/advisories/2010/0016 - http://secunia.com/advisories/38118 - http://osvdb.org/61450
CVE ID: CVE-2010-0984 State: PUBLISHED Published: 2010-03-16T19:00:00 Last Updated: 2024-08-07T01:06:52.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for databases/acidcat_3.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/55329 - http://osvdb.org/61436 - http://packetstormsecurity.org/1001-exploits/acidcatcms-disclose.txt - http://secunia.com/advisories/38084 - http://www.exploit-db.com/exploits
ity.org/1001-exploits/acidcatcms-disclose.txt - http://secunia.com/advisories/38084 - http://www.exploit-db.com/exploits/10972
CVE ID: CVE-2010-0985 State: PUBLISHED Published: 2010-03-16T19:00:00 Last Updated: 2024-08-07T01:06:52.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Abbreviations Manager (com_abbrev) component 1.1 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/37834 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55348 - http://osvdb.org/61458 - http://www.exploit-db.com/exploits/10948
//exchange.xforce.ibmcloud.com/vulnerabilities/55348 - http://osvdb.org/61458 - http://www.exploit-db.com/exploits/10948 - http://www.securityfocus.com/bid/37560
CVE ID: CVE-2010-0986 State: PUBLISHED Published: 2010-05-13T17:00:00 Last Updated: 2024-08-07T01:06:52.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 11.5.7.609 does not properly process asset entries, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted Shockwave file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38751 - http://www.adobe.com/support/security/bulletins/apsb10-12.html - http://secunia.com/secunia_research/2010-34/ - http://www.vupen.com/english/advisories/2010/1128 - http://www.securityfocus.com/archive/1/
/secunia_research/2010-34/ - http://www.vupen.com/english/advisories/2010/1128 - http://www.securityfocus.com/archive/1/511264/100/0/threaded - http://www.securityfocus.com/bid/40086 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6967
CVE ID: CVE-2010-0987 State: PUBLISHED Published: 2010-05-13T17:00:00 Last Updated: 2024-08-07T01:06:52.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via crafted embedded fonts in a Shockwave file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38751 - http://www.adobe.com/support/security/bulletins/apsb10-12.html - http://secunia.com/secunia_research/2010-50/ - http://www.vupen.com/english/advisories/2010/1128 - http://www.securityfocus.com/archive/1/511265/100/0/threaded - http://www.securityfocus.com
glish/advisories/2010/1128 - http://www.securityfocus.com/archive/1/511265/100/0/threaded - http://www.securityfocus.com/bid/40093 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7052
CVE ID: CVE-2010-0988 State: PUBLISHED Published: 2010-03-26T18:00:00 Last Updated: 2024-08-07T01:06:52.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Pulse CMS before 1.2.3 allow (1) remote attackers to write to arbitrary files and execute arbitrary PHP code via vectors related to improper handling of login failures by includes/login.php; and allow remote authenticated users to write to arbitrary files and execute arbitrary PHP code via vectors involving the (2) filename and (3) block parameters to view.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/510300/100/0/threaded -
al Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/510300/100/0/threaded - http://secunia.com/secunia_research/2010-45/ - http://secunia.com/secunia_research/2010-51/ - http://www.osvdb.org/63168 - http://www.securityfocus.com/bid/38956 - http://www.osvdb.org/63166 - http://www.securityfocus.com/archive/1/510299/100/0/threaded - http://secunia.com/advisories/39011
CVE ID: CVE-2010-0989 State: PUBLISHED Published: 2010-03-26T18:00:00 Last Updated: 2024-08-07T01:06:52.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in delete.php in Pulse CMS before 1.2.3 allows remote authenticated users to delete arbitrary files via directory traversal sequences in the f parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/63167 - http://www.securityfocus.com/archive/1/510307/100/0/threaded - http://secunia.com/secunia_research/2010-48/ - http://www.securityfocus.com/bid/38947 - http://secunia.com/advisories/39011
CVE ID: CVE-2010-0990 State: PUBLISHED Published: 2010-06-14T18:00:00 Last Updated: 2024-08-07T01:06:52.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Creative Software AutoUpdate Engine ActiveX Control 2.0.12.0, as used in Creative Software AutoUpdate 1.40.01, allows remote attackers to execute arbitrary code via vectors related to the BrowseFolder method. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38970 - http://www.securityfocus.com/bid/40768 - http://www.securityfocus.com/archive/1/511795/100/0/threaded - http://secunia.com/secunia_research/2010-52/
CVE ID: CVE-2010-0991 State: PUBLISHED Published: 2010-04-22T14:00:00 Last Updated: 2024-08-07T01:06:52.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in imlib2 1.4.3 allow context-dependent attackers to execute arbitrary code via a crafted (1) ARGB, (2) XPM, or (3) BMP file, related to the IMAGE_DIMENSIONS_OK macro in lib/image.h. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39354 - http://www.securityfocus.com/archive/1/510866/100/0/threaded - http://www.vupen.com/english/advisories/2010/0959 - http://secunia.com/secunia_research/2010-54/
CVE ID: CVE-2010-0992 State: PUBLISHED Published: 2010-04-09T17:00:00 Last Updated: 2024-08-07T01:06:52.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allow remote attackers to hijack the authentication of users for requests that (1) upload image files, (2) delete image files, or (3) create blocks. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2010-46/ - http://secunia.com/advisories/39046 - http://www.securityfocus.com/archive/1/510619/100/0/threaded - http://pulsecms.com/blog.php
CVE ID: CVE-2010-0993 State: PUBLISHED Published: 2010-04-09T17:00:00 Last Updated: 2024-08-07T01:06:52.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39046 - http://secunia.com/secunia_research/2010-47/ - http://www.securityfocus.com/archive/1/510617/100/0/threaded - http://pulsecms.c
secunia.com/secunia_research/2010-47/ - http://www.securityfocus.com/archive/1/510617/100/0/threaded - http://pulsecms.com/blog.php
CVE ID: CVE-2010-0994 State: PUBLISHED Published: 2010-04-15T20:00:00 Last Updated: 2024-08-07T01:06:52.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in src/vl/vlDAT.cpp in Visualization Library 2009.08.812 allow user-assisted remote attackers to execute arbitrary code via a crafted DAT file, related to the (1) vl::loadDAT and (2) vl::isDAT functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/510710/100/0/threaded - http://secunia.com/advisories/38162 - http://www.securityfocus.com/bid/39471 - http://secunia.com/secunia_research/2010-02/
CVE ID: CVE-2010-0995 State: PUBLISHED Published: 2010-05-05T14:00:00 Last Updated: 2024-08-07T01:06:52.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Internet Download Manager (IDM) before 5.19 allows remote attackers to execute arbitrary code via a crafted FTP URI that causes unspecified "test sequences" to be sent from client to server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39822 - http://www.internetdownloadmanager.com/news.html - http://secunia.com/advisories/39446 - http://secunia.com/secunia_research/2010-62/ - http://www.securityfocus.com/archive/1/511060/100/0/threaded
CVE ID: CVE-2010-0996 State: PUBLISHED Published: 2010-04-20T16:00:00 Last Updated: 2024-08-07T01:06:52.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in e107 before 0.7.20 allows remote authenticated users to execute arbitrary code by uploading a .php.filetypesphp file. NOTE: the vendor disputes the significance of this issue, noting that "an odd set of preferences and a missing file" are required. Additional Analyst Notes: - CVE Program Container: References: - http://e107.org/svn_changelog.php?version=0.7.20 - http://www.vupen.com/english/advisories/2010/0919 - http://www.securityfocus.com/bid/39540 - https://exchange.xforce.ibmcloud
//www.vupen.com/english/advisories/2010/0919 - http://www.securityfocus.com/bid/39540 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57932 - http://secunia.com/secunia_research/2010-44/ - http://e107.org/comment.php?comment.news.864 - http://secunia.com/advisories/39013 - http://www.securityfocus.com/archive/1/510805/100/0/threaded
CVE ID: CVE-2010-0997 State: PUBLISHED Published: 2010-04-20T16:00:00 Last Updated: 2024-08-07T01:06:52.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in 107_plugins/content/content_manager.php in the Content Management plugin in e107 before 0.7.20, when the personal content manager is enabled, allows user-assisted remote authenticated users to inject arbitrary web script or HTML via the content_heading parameter. Additional Analyst Notes: - CVE Program Container: References: - http://e107.org/svn_changelog.php?version=0.7.20 - http://www.vupen.com/english/advisories/2010/0919 - http://secunia.com/secunia_research/2010-43/ - http://ww
on=0.7.20 - http://www.vupen.com/english/advisories/2010/0919 - http://secunia.com/secunia_research/2010-43/ - http://www.securityfocus.com/bid/39539 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57933 - http://e107.org/comment.php?comment.news.864 - http://www.securityfocus.com/archive/1/510809/100/0/threaded - http://secunia.com/advisories/39013
CVE ID: CVE-2010-0998 State: PUBLISHED Published: 2010-05-17T20:42:00 Last Updated: 2024-08-07T01:06:52.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Free Download Manager (FDM) before 3.0.852 allow remote attackers to execute arbitrary code via vectors involving (1) the folders feature in Site Explorer, (2) the websites feature in Site Explorer, (3) an FTP URI, or (4) a redirect. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/58626 - http://www.securityfocus.com/bid/40146 - http://osvdb.org/64671 - http://www.securityfocus.com/archive/1/511282/100/0/threaded - ht
securityfocus.com/bid/40146 - http://osvdb.org/64671 - http://www.securityfocus.com/archive/1/511282/100/0/threaded - http://secunia.com/advisories/39447 - http://osvdb.org/64672 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7006 - http://secunia.com/secunia_research/2010-68/ - http://osvdb.org/64674 - http://osvdb.org/64673
CVE ID: CVE-2010-0999 State: PUBLISHED Published: 2010-05-17T20:42:00 Last Updated: 2024-08-07T01:06:52.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Free Download Manager (FDM) before 3.0.852 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/58627 - http://secunia.com/secunia_research/2010-67/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7284 - http://www.securityfocus.com/bid/40152 -
security.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7284 - http://www.securityfocus.com/bid/40152 - http://www.securityfocus.com/archive/1/511284/100/0/threaded - http://osvdb.org/64670
CVE ID: CVE-2010-10001 State: PUBLISHED Published: 2022-03-28T20:45:50.000Z Last Updated: 2025-04-15T14:45:09.752Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Shemes Products: GrabIt Problem Types: CWE-404 Description: A vulnerability, which was classified as problematic, was found in Shemes GrabIt up to 1.7.2 Beta 4. This affects the component NZB Date Parser. The manipulation of the argument date with the input 1000000000000000 as part of a NZB File leads to a denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vuln
oit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.4143 - https://www.scip.ch/publikationen/advisories/scip_advisory-4143_shemes_grabbit_malicious_nzb_date_denial_of_service.txt - http://seclists.org/bugtraq/2010/Jul/60