Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-2827 State: PUBLISHED Published: 2010-08-16T18:25:00 Last Updated: 2024-08-07T02:46:48.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 15.1(2)T allows remote attackers to cause a denial of service (resource consumption and TCP outage) via spoofed TCP packets, related to embryonic TCP connections that remain in the SYN_RCVD or SYN_SENT state, aka Bug ID CSCti18193. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4095e.shtml - http://www.securityfocus.com/bid/42426
CVE ID: CVE-2010-2828 State: PUBLISHED Published: 2010-09-23T18:00:00Z Last Updated: 2024-09-16T17:53:47.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the H.323 implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 2.5.x before 2.5.2 and 2.6.x before 2.6.1, allows remote attackers to cause a denial of service (device reload) via crafted H.323 packets, aka Bug ID CSCtc73759. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a300.shtml
CVE ID: CVE-2010-2829 State: PUBLISHED Published: 2010-09-23T18:00:00Z Last Updated: 2024-09-16T19:42:01.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the H.323 implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 2.5.x before 2.5.2 and 2.6.x before 2.6.1, allows remote attackers to cause a denial of service (traceback and device reload) via crafted H.323 packets, aka Bug ID CSCtd33567. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a300.shtml
CVE ID: CVE-2010-2830 State: PUBLISHED Published: 2010-09-23T18:00:00Z Last Updated: 2024-09-16T23:01:36.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IGMPv3 implementation in Cisco IOS 12.2, 12.3, 12.4, and 15.0 and IOS XE 2.5.x before 2.5.2, when PIM is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed IGMP packet, aka Bug ID CSCte14603. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a310.shtml
CVE ID: CVE-2010-2831 State: PUBLISHED Published: 2010-09-23T18:00:00Z Last Updated: 2024-09-16T20:22:59.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the NAT for SIP implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 allows remote attackers to cause a denial of service (device reload) via transit traffic on UDP port 5060, aka Bug ID CSCtf17624. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a311.shtml
CVE ID: CVE-2010-2832 State: PUBLISHED Published: 2010-09-23T18:00:00Z Last Updated: 2024-09-16T19:05:45.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the NAT for H.323 implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 allows remote attackers to cause a denial of service (device reload) via transit traffic, aka Bug ID CSCtf91428. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a311.shtml
CVE ID: CVE-2010-2833 State: PUBLISHED Published: 2010-09-23T18:00:00Z Last Updated: 2024-09-17T01:21:49.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the NAT for H.225.0 implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 allows remote attackers to cause a denial of service (device reload) via transit traffic, aka Bug ID CSCtd86472. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a311.shtml
CVE ID: CVE-2010-2834 State: PUBLISHED Published: 2010-09-23T18:00:00Z Last Updated: 2024-09-17T02:57:58.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)SU1, 7.x before 7.1(5), and 8.0 before 8.0(2) allow remote attackers to cause a denial of service (device reload or voice-services outage) via crafted SIP registration traffic over UDP, aka Bug IDs CSCtf72678 and CSCtf14987. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_ad
dditional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a313.shtml - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a30f.shtml
CVE ID: CVE-2010-2835 State: PUBLISHED Published: 2010-09-23T18:00:00Z Last Updated: 2024-09-17T00:25:40.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5), 7.0 before 7.0(2a)su3, 7.1su before 7.1(3b)su2, 7.1 before 7.1(5), and 8.0 before 8.0(1) allow remote attackers to cause a denial of service (device reload or voice-services outage) via a SIP REFER request with an invalid Refer-To header, aka Bug IDs CSCta20040 and CSCta31358. Additional Analyst Notes: - CVE Program Container: References: - h
fer-To header, aka Bug IDs CSCta20040 and CSCta31358. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a313.shtml - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a30f.shtml
CVE ID: CVE-2010-2836 State: PUBLISHED Published: 2010-09-23T18:00:00Z Last Updated: 2024-09-16T19:56:28.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled, allows remote attackers to cause a denial of service (memory consumption) by improperly disconnecting SSL sessions, leading to connections that remain in the CLOSE-WAIT state, aka Bug ID CSCtg21685. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a312.shtml
CVE ID: CVE-2010-2837 State: PUBLISHED Published: 2010-08-26T20:00:00 Last Updated: 2024-08-07T02:46:48.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIPStationInit implementation in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.1SU before 6.1(5)SU1, 7.0SU before 7.0(2a)SU3, 7.1SU before 7.1(3b)SU2, 7.1 before 7.1(5), and 8.0 before 8.0(1) allows remote attackers to cause a denial of service (process failure) via a malformed SIP message, aka Bug ID CSCtd17310. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2187 - http://www.cisco.com/en/US/products/products_security_advisory09186a00
tp://www.vupen.com/english/advisories/2010/2187 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b43908.shtml
CVE ID: CVE-2010-2838 State: PUBLISHED Published: 2010-08-26T20:00:00 Last Updated: 2024-08-07T02:46:48.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SendCombinedStatusInfo implementation in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7.0SU before 7.0(2a)SU3, 7.1 before 7.1(5), and 8.0 before 8.0(3) allows remote attackers to cause a denial of service (process failure) via a malformed SIP REGISTER message, aka Bug ID CSCtf66305. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2187 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b43908.shtml
CVE ID: CVE-2010-2839 State: PUBLISHED Published: 2010-08-26T20:00:00 Last Updated: 2024-08-07T02:46:48.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: SIPD in Cisco Unified Presence 6.x before 6.0(7) and 7.x before 7.0(8) allows remote attackers to cause a denial of service (stack memory corruption and process failure) via a malformed SIP message, aka Bug ID CSCtd14474. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2186 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b43909.shtml
CVE ID: CVE-2010-2840 State: PUBLISHED Published: 2010-08-26T20:00:00 Last Updated: 2024-08-07T02:46:48.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Presence Engine (PE) service in Cisco Unified Presence 6.x before 6.0(7) and 7.x before 7.0(8) does not properly handle an erroneous Contact field in the header of a SIP SUBSCRIBE message, which allows remote attackers to cause a denial of service (process failure) via a malformed message, aka Bug ID CSCtd39629. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2186 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b43909.shtml
CVE ID: CVE-2010-2841 State: PUBLISHED Published: 2010-09-10T17:00:00Z Last Updated: 2024-09-16T17:43:51.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco Wireless LAN Controller (WLC) software 4.2 before 4.2.209.0; 4.2M before 4.2.207.54M; 5.0, 5.1, and 6.0 before 6.0.196.0; and 5.2 before 5.2.193.11 allows remote authenticated users to cause a denial of service (device reload) via crafted HTTP packets that trigger invalid arguments to the emweb component, aka Bug ID CSCtd16938. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=21288 - http://www.cisco.com/en/US/product
ner: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=21288 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b466e9.shtml
CVE ID: CVE-2010-2842 State: PUBLISHED Published: 2010-09-10T17:00:00Z Last Updated: 2024-09-17T00:01:21.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Wireless LAN Controller (WLC) software, possibly 4.2 through 6.0, allows remote authenticated users to bypass intended access restrictions and modify the configuration, and possibly obtain administrative privileges, via unspecified vectors, a different vulnerability than CVE-2010-2843 and CVE-2010-3033. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b466e9.shtml - http://tools.cisco.com/security/center/viewAlert.x?alertId=21290
CVE ID: CVE-2010-2843 State: PUBLISHED Published: 2010-09-10T17:00:00Z Last Updated: 2024-09-17T01:01:11.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Wireless LAN Controller (WLC) software, possibly 4.2 through 6.0, allows remote authenticated users to bypass intended access restrictions and modify the configuration, and possibly obtain administrative privileges, via unspecified vectors, a different vulnerability than CVE-2010-2842 and CVE-2010-3033. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b466e9.shtml - http://tools.cisco.com/security/center/viewAlert.x?alertId=21290
CVE ID: CVE-2010-2844 State: PUBLISHED Published: 2010-07-23T20:00:00 Last Updated: 2024-08-07T02:46:48.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in news_show.php in Newanz NewsOffice 2.0.18 allows remote attackers to inject arbitrary web script or HTML via the n-cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1723 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60182 - http://packetstormsecurity.org/1007-exploits/newsoffice-xss.txt - http://www.securityfocus.com/bid/41419 - http://cross-site-scripting.blogspot.com/2010/07/news-office-2018-reflect
txt - http://www.securityfocus.com/bid/41419 - http://cross-site-scripting.blogspot.com/2010/07/news-office-2018-reflected-xss.html
CVE ID: CVE-2010-2845 State: PUBLISHED Published: 2010-07-23T20:00:00 Last Updated: 2024-08-07T02:46:48.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the QuickFAQ (com_quickfaq) component 1.0.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a category action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41508 - http://packetstormsecurity.org/1007-exploits/joomlaquickfaq-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/60236 - http://www.exploit-db.com/exploits/14296
CVE ID: CVE-2010-2846 State: PUBLISHED Published: 2010-07-23T20:00:00 Last Updated: 2024-08-07T02:46:48.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the InterJoomla ArtForms (com_artforms) component 2.1b7.2 RC2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the afmsg parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41457 - http://www.securityfocus.com/archive/1/512215/100/0/threaded - http://www.exploit-db.com/exploits/14263 - http://packetstormsecurity.org/1007-exploits/joomlaartforms-sqltraversalxss.txt - https://exchange.xf
m/exploits/14263 - http://packetstormsecurity.org/1007-exploits/joomlaartforms-sqltraversalxss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/60162
CVE ID: CVE-2010-2847 State: PUBLISHED Published: 2010-07-23T20:00:00 Last Updated: 2024-08-07T02:46:48.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the InterJoomla ArtForms (com_artforms) component 2.1b7.2 RC2 for Joomla! allow remote attackers to execute arbitrary SQL commands via the viewform parameter in a (1) ferforms or (2) tferforms action to index.php, and the (3) id parameter in a vferforms action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41457 - http://www.securityfocus.com/archive/1/512215/100/0/threaded - http://www.exploit-db.com/exploits/14263 - htt
id/41457 - http://www.securityfocus.com/archive/1/512215/100/0/threaded - http://www.exploit-db.com/exploits/14263 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60160 - http://packetstormsecurity.org/1007-exploits/joomlaartforms-sqltraversalxss.txt
CVE ID: CVE-2010-2848 State: PUBLISHED Published: 2010-07-23T20:00:00 Last Updated: 2024-08-07T02:46:48.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in assets/captcha/includes/alikon/playcode.php in the InterJoomla ArtForms (com_artforms) component 2.1b7.2 RC2 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the l parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41457 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60161 - http://www.securityfocus.com/archive/1/512215/100/0/threaded - http://www.exploit-db.com/exploits/14263 - http://packets
http://www.securityfocus.com/archive/1/512215/100/0/threaded - http://www.exploit-db.com/exploits/14263 - http://packetstormsecurity.org/1007-exploits/joomlaartforms-sqltraversalxss.txt
CVE ID: CVE-2010-2849 State: PUBLISHED Published: 2010-07-23T20:00:00 Last Updated: 2024-08-07T02:46:48.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in productionnu2/nuedit.php in nuBuilder 10.04.20, and possibly other versions before 10.07.12, allows remote attackers to inject arbitrary web script or HTML via the f parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41404 - http://www.nubuilder.com/nubuilderwww/change.php?changelog_id=14c3d1ea2a9fab - http://secunia.com/advisories/40483 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60137 - http://packetstormsecurity.
/secunia.com/advisories/40483 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60137 - http://packetstormsecurity.org/1007-exploits/nubuilder-xss.txt - http://cross-site-scripting.blogspot.com/2010/07/nubuilder-100420-reflected-xss.html - http://www.osvdb.org/66005 - http://www.vupen.com/english/advisories/2010/1726
CVE ID: CVE-2010-2850 State: PUBLISHED Published: 2010-07-23T20:00:00 Last Updated: 2024-08-07T02:46:48.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in productionnu2/fileuploader.php in nuBuilder 10.04.20, and possibly other versions before 10.07.12, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41404 - http://www.osvdb.org/66006 - http://www.nubuilder.com/nubuilderwww/change.php?changelog_id=14c3d1ea2a9fab - http://secunia.com/advisories/40483 - http://cross-site-scripting.blogsp
derwww/change.php?changelog_id=14c3d1ea2a9fab - http://secunia.com/advisories/40483 - http://cross-site-scripting.blogspot.com/2010/07/nubuilder-100420-local-file-inclusion.html - http://www.vupen.com/english/advisories/2010/1726 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60138 - http://packetstormsecurity.org/1007-exploits/nubuilder-lfi.txt
CVE ID: CVE-2010-2851 State: PUBLISHED Published: 2010-07-23T20:00:00 Last Updated: 2024-08-07T02:46:48.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the BookLibrary From Same Author (com_booklibrary) module 1.5 and possibly earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/65996 - http://secunia.com/secunia_research/2010-83/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/60107 - http://www.securityfocus.com/bid/41350 - http://secunia.com/advisories/40130 - http://www.vupe
m/vulnerabilities/60107 - http://www.securityfocus.com/bid/41350 - http://secunia.com/advisories/40130 - http://www.vupen.com/english/advisories/2010/1707 - http://www.securityfocus.com/archive/1/512174/100/0/threaded
CVE ID: CVE-2010-2852 State: PUBLISHED Published: 2010-07-23T20:00:00 Last Updated: 2024-08-07T02:46:48.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in modules/headlines/magpierss/scripts/magpie_debug.php in RunCms 2.1, when the Headlines module is enabled, allows remote attackers to inject arbitrary web script or HTML via the url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/60224 - http://cross-site-scripting.blogspot.com/2010/07/runcms-21-magpie-rss-module-reflected.html - http://osvdb.org/66244 - http://www.securityfocus.com/bid/41551 - http://sec
uncms-21-magpie-rss-module-reflected.html - http://osvdb.org/66244 - http://www.securityfocus.com/bid/41551 - http://secunia.com/advisories/40521
CVE ID: CVE-2010-2853 State: PUBLISHED Published: 2010-07-23T20:00:00 Last Updated: 2024-08-07T02:46:48.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in flashPlayer/playVideo.php in iScripts VisualCaster allows remote attackers to execute arbitrary SQL commands via the product_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/58242 - http://www.exploit-db.com/exploits/12451 - http://www.securityfocus.com/bid/39795 - http://packetstormsecurity.org/1004-exploits/iscriptsvisualcaster-sql.txt - http://www.osvdb.org/65840 - http://secunia.com/advisories/40416 - http://ww
004-exploits/iscriptsvisualcaster-sql.txt - http://www.osvdb.org/65840 - http://secunia.com/advisories/40416 - http://www.iscripts.com/patches.php
CVE ID: CVE-2010-2854 State: PUBLISHED Published: 2010-07-23T20:00:00Z Last Updated: 2024-09-16T19:51:34.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in modfile.php in Event Horizon (EVH) 1.1.10, when magic_quotes_gpc is disabled, allow remote attackers to inject arbitrary web script or HTML via the (1) YourEmail and (2) VerificationNumber parameters, which are not properly handled in a forced SQL error message. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://freshmeat.net/projects/eventh/ - http://secunia.com/advisories/40517
CVE ID: CVE-2010-2855 State: PUBLISHED Published: 2010-07-23T20:00:00Z Last Updated: 2024-09-16T18:04:22.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in modfile.php in Event Horizon (EVH) 1.1.10, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) YourEmail and (2) VerificationNumber parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41580 - http://secunia.com/advisories/40517
CVE ID: CVE-2010-2856 State: PUBLISHED Published: 2010-07-23T20:00:00 Last Updated: 2024-08-07T02:46:48.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/currencies.php in osCSS 1.2.2, and probably earlier versions, allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1770 - http://secunia.com/advisories/40502 - http://osvdb.org/66138 - http://www.htbridge.ch/advisory/xss_vulnerability_in_oscss.html - http://www.securityfocus.com/bid/41510 - https://exchange.xforce.ibmcloud.com/vulnerabi
ss_vulnerability_in_oscss.html - http://www.securityfocus.com/bid/41510 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60203
CVE ID: CVE-2010-2857 State: PUBLISHED Published: 2010-07-23T20:00:00 Last Updated: 2024-08-07T02:46:48.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Music Manager component for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the cid parameter to album.html. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41485 - http://packetstormsecurity.org/1007-exploits/joomlamusicmanager-lfi.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/60195 - http://www.exploit-db.com/exploits/14274
CVE ID: CVE-2010-2858 State: PUBLISHED Published: 2010-07-23T20:00:00 Last Updated: 2024-08-07T02:46:48.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in news.php in SimpNews 2.47.03 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) layout and (2) sortorder parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60244 - http://www.securityfocus.com/archive/1/512271/100/0/threaded - http://websecurity.com.ua/4245/ - http://packetstormsecurity.org/1007-exploits/simpnews-xss.txt -
2271/100/0/threaded - http://websecurity.com.ua/4245/ - http://packetstormsecurity.org/1007-exploits/simpnews-xss.txt - http://www.securityfocus.com/bid/41517