Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-4283 State: PUBLISHED Published: 2016-09-14T18:00:00 Last Updated: 2024-08-06T00:25:14.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4284, CVE-2016-4285, CVE-2016-6922, and CVE-2016-6924. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/20
CVE ID: CVE-2016-4284 State: PUBLISHED Published: 2016-09-14T18:00:00 Last Updated: 2024-08-06T00:25:14.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4285, CVE-2016-6922, and CVE-2016-6924. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/20
CVE ID: CVE-2016-4285 State: PUBLISHED Published: 2016-09-14T18:00:00 Last Updated: 2024-08-06T00:25:13.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-6922, and CVE-2016-6924. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/20
CVE ID: CVE-2016-4286 State: PUBLISHED Published: 2016-10-13T19:00:00 Last Updated: 2024-08-06T00:25:14.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201610-10 - http://www.securityfocus.com/bid/93497 - https://helpx.adobe.com/security/products/flash-player/apsb16-32.html - http://rhn.redhat.com/errata/RHSA-2016-2057.html - http://www.securitytracker.com/id/1036985
CVE ID: CVE-2016-4287 State: PUBLISHED Published: 2016-09-14T18:00:00 Last Updated: 2024-08-06T00:25:14.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201610-10 - https://helpx.adobe.com/security/products/flash-player/apsb16-29.html - http://rhn.redhat.com/errata/RHSA-2016-1865.html - http://www.securitytracker.com/id/1036791
CVE ID: CVE-2016-4288 State: PUBLISHED Published: 2017-01-06T21:00:00 Last Updated: 2024-08-06T00:25:13.792Z Vendors: BlueStacks Products: App Player Problem Types: unspecified Description: A local privilege escalation vulnerability exists in BlueStacks App Player. The BlueStacks App Player installer creates a registry key with weak permissions that allows users to execute arbitrary programs with SYSTEM privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0124/
CVE ID: CVE-2016-4289 State: PUBLISHED Published: 2019-10-29T17:55:40 Last Updated: 2024-08-06T00:25:14.218Z Vendors: GMER Products: GMER Problem Types: Buffer Overflow Description: A stack based buffer overflow vulnerability exists in the method receiving data from SysTreeView32 control of the GMER 2.1.19357 application. A specially created long path can lead to a buffer overflow on the stack resulting in code execution. An attacker needs to create path longer than 99 characters to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0127/
CVE ID: CVE-2016-4290 State: PUBLISHED Published: 2017-01-06T21:00:00 Last Updated: 2024-08-06T00:25:14.096Z Vendors: Hancom Products: Hancom Office Problem Types: integer overflow Description: When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will attempt to allocate space for a block of data within the file. When calculating this length, the application will use a value from the file and add a constant to it without checking whether the addition of the constant will cause the integer to overflow which will cause the buffer to be undersized when the application tries to copy file data into it. This allows one to overwrite contiguo
the buffer to be undersized when the application tries to copy file data into it. This allows one to overwrite contiguous data in the heap which can lead to code-execution under the context of the application. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0145/ - http://www.securityfocus.com/bid/92325
CVE ID: CVE-2016-4291 State: PUBLISHED Published: 2017-01-06T21:00:00 Last Updated: 2024-08-06T00:25:14.057Z Vendors: Hancom Products: Hancom Office Problem Types: integer overflow Description: When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will use a field from the structure in an operation that can cause the integer to overflow. This result is then used to allocate memory to copy file data in. Due to the lack of bounds checking on the integer, the allocated memory buffer can be made to be undersized at which point the reading of file data will write outside the bounds of the buffer. This can lead to code execution under the co
point the reading of file data will write outside the bounds of the buffer. This can lead to code execution under the context of the application. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92325 - http://www.talosintelligence.com/reports/TALOS-2016-0146/
CVE ID: CVE-2016-4292 State: PUBLISHED Published: 2017-01-06T21:00:00 Last Updated: 2024-08-06T00:25:14.181Z Vendors: Hancom Products: Hancom Office Problem Types: out-of-bounds write Description: When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will use a static size to allocate a heap buffer yet explicitly trust a size from the file when modifying data inside of it. Due to this, an aggressor can corrupt memory outside the bounds of this buffer which can lead to code execution under the context of the application. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-
n. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0147/ - http://www.securityfocus.com/bid/92325
CVE ID: CVE-2016-4293 State: PUBLISHED Published: 2017-04-20T17:00:00 Last Updated: 2024-08-06T00:25:14.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in the (1) CBookBase::SetDefTableStyle and (2) CBookBase::SetDefPivotStyle functions in Hancom Office 2014 VP allow remote attackers to execute arbitrary code via a crafted Hangul Hcell Document (.cell) file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92327 - http://www.talosintelligence.com/reports/TALOS-2016-0148/
CVE ID: CVE-2016-4294 State: PUBLISHED Published: 2017-01-06T21:00:00 Last Updated: 2024-08-06T00:25:14.117Z Vendors: Hancom Products: Hancom Office Problem Types: unspecified Description: When opening a Hangul Hcell Document (.cell) and processing a property record within the Workbook stream, Hancom Office 2014 will attempt to allocate space for an element using a length from the file. When copying user-supplied data to this buffer, however, the application will use a different size which leads to a heap-based buffer overflow. This vulnerability can lead to code-execution under the context of the application. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosi
under the context of the application. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0149/ - http://www.securityfocus.com/bid/92327
CVE ID: CVE-2016-4295 State: PUBLISHED Published: 2017-01-06T21:00:00 Last Updated: 2024-08-06T00:25:14.023Z Vendors: Hancom Products: Hancom Office Problem Types: index miscalculation Description: When opening a Hangul Hcell Document (.cell) and processing a particular record within the Workbook stream, an index miscalculation leading to a heap overlow can be made to occur in Hancom Office 2014. The vulnerability occurs when processing data for a formula used to render a chart via the HncChartPlugin.hplg library. Due to a lack of bounds-checking when incrementing an index that is used for writing into a buffer for formulae, the application can be made to write pointer data outside its bound
that is used for writing into a buffer for formulae, the application can be made to write pointer data outside its bounds which can lead to code execution under the context of the application. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0150/ - http://www.securityfocus.com/bid/92327
CVE ID: CVE-2016-4296 State: PUBLISHED Published: 2017-01-06T21:00:00 Last Updated: 2024-08-06T00:25:14.459Z Vendors: Hancom Products: Hancom Office Problem Types: unspecified Description: When opening a Hangul Hcell Document (.cell) and processing a record that uses the CSSValFormat object, Hancom Office 2014 will search for an underscore ("_") character at the end of the string and write a null terminator after it. If the character is at the very end of the string, the application will mistakenly write the null-byte outside the bounds of its destination. This can result in heap corruption that can lead code execution under the context of the application Additional Analyst Notes: - CVE Prog
n heap corruption that can lead code execution under the context of the application Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0151/ - http://www.securityfocus.com/bid/92327
CVE ID: CVE-2016-4298 State: PUBLISHED Published: 2017-01-06T21:00:00 Last Updated: 2024-08-06T00:25:14.120Z Vendors: n/a Products: Hancom version Hancom Office 2014 VP Trial HShow.exe Product version: 9.1.0.2176 HncBM90.dll Product version: 9.1.0.2291 Problem Types: integer overflow Description: When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will attempt to allocate space for a list of elements using a length from the file. When calculating this length, an integer overflow can be made to occur which will cause the buffer to be undersized when the application tries to copy file data into the object containing this structure. Thi
the buffer to be undersized when the application tries to copy file data into the object containing this structure. This allows one to overwrite contiguous data in the heap which can lead to code-execution under the context of the application. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0144/ - http://www.securityfocus.com/bid/92325
CVE ID: CVE-2016-4300 State: PUBLISHED Published: 2016-09-21T14:00:00 Last Updated: 2024-08-06T00:25:14.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the read_SubStreamsInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a 7zip file with a large number of substreams, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-1844.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://blog.talosintel.com/2016/06/the-poisoned-archives.html - ht
k/topics/security/linuxbulletinjul2016-3090544.html - http://blog.talosintel.com/2016/06/the-poisoned-archives.html - http://www.securityfocus.com/bid/91326 - https://github.com/libarchive/libarchive/issues/718 - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://www.talosintel.com/reports/TALOS-2016-0152/ - https://security.gentoo.org/glsa/201701-03 - https://github.com/libarchive/libarchive/commit/e79ef306afe332faf22e9b442a2c6b59cb175573 - https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00062&languageid=en-fr - http://www.debian.org/security/2016/dsa-3657 - https://bugzilla.redhat.com/show_bug.cgi?id=1348439
CVE ID: CVE-2016-4301 State: PUBLISHED Published: 2016-09-21T14:00:00 Last Updated: 2024-08-06T00:25:14.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the parse_device function in archive_read_support_format_mtree.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a crafted mtree file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91328 - https://github.com/libarchive/libarchive/issues/715 - http://blog.talosintel.com/2016/06/the-poisoned-archives.html - https://github.com/libarchive/libarchive/commit/a550daeecf6bc689ade371349892ea17b5b97c77 - http://www.talosin
ves.html - https://github.com/libarchive/libarchive/commit/a550daeecf6bc689ade371349892ea17b5b97c77 - http://www.talosintel.com/reports/TALOS-2016-0153/ - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - https://bugzilla.redhat.com/show_bug.cgi?id=1348441 - https://security.gentoo.org/glsa/201701-03
CVE ID: CVE-2016-4302 State: PUBLISHED Published: 2016-09-21T14:00:00 Last Updated: 2024-08-06T00:25:14.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the parse_codes function in archive_read_support_format_rar.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a RAR file with a zero-sized dictionary. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-1844.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://blog.talosintel.com/2016/06/the-poisoned-archives.html - http://www.talosintel.com/reports/TALOS-2016-0154/ -
l - http://blog.talosintel.com/2016/06/the-poisoned-archives.html - http://www.talosintel.com/reports/TALOS-2016-0154/ - https://github.com/libarchive/libarchive/issues/719 - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://www.securityfocus.com/bid/91331 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1348444 - https://security.gentoo.org/glsa/201701-03 - http://www.debian.org/security/2016/dsa-3657 - https://github.com/libarchive/libarchive/commit/05caadc7eedbef471ac9610809ba683f0c698700
CVE ID: CVE-2016-4303 State: PUBLISHED Published: 2016-09-26T14:00:00 Last Updated: 2024-08-06T00:25:14.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0164/ - http://blog.talosintel.com/2016/06/esnet-vulnerability.html - http://software.es.net/iperf/news.html#security-issue-iperf-3-1-3-iperf-3-0-12-
l.com/2016/06/esnet-vulnerability.html - http://software.es.net/iperf/news.html#security-issue-iperf-3-1-3-iperf-3-0-12-released - https://raw.githubusercontent.com/esnet/security/master/cve-2016-4303/esnet-secadv-2016-0001.txt.asc - https://github.com/esnet/iperf/commit/91f2fa59e8ed80dfbf400add0164ee0e508e412a - http://lists.opensuse.org/opensuse-updates/2016-08/msg00082.html - http://lists.opensuse.org/opensuse-updates/2016-08/msg00090.html - https://lists.debian.org/debian-lts-announce/2020/01/msg00023.html
CVE ID: CVE-2016-4304 State: PUBLISHED Published: 2017-01-06T21:00:00 Last Updated: 2024-08-06T00:25:14.275Z Vendors: Kaspersky Products: Internet Security Problem Types: unspecified Description: A denial of service vulnerability exists in the syscall filtering functionality of the Kaspersky Internet Security KLIF driver. A specially crafted native api call request can cause a access violation exception in KLIF kernel driver resulting in local denial of service. An attacker can run program from user-mode to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036702 - http://www.securitytracker.com/id/1036703 - http:/
Container: References: - http://www.securitytracker.com/id/1036702 - http://www.securitytracker.com/id/1036703 - http://www.talosintelligence.com/reports/TALOS-2016-0166/
CVE ID: CVE-2016-4305 State: PUBLISHED Published: 2017-01-06T21:00:00 Last Updated: 2024-08-06T00:25:13.934Z Vendors: Kaspersky Products: Internet Security Problem Types: unspecified Description: A denial of service vulnerability exists in the syscall filtering functionality of Kaspersky Internet Security KLIF driver. A specially crafted native api call can cause a access violation in KLIF kernel driver resulting in local denial of service. An attacker can run program from user-mode to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintelligence.com/reports/TALOS-2016-0167/ - http://www.securitytracker.com/id/1036702 - http://www.s
: - http://www.talosintelligence.com/reports/TALOS-2016-0167/ - http://www.securitytracker.com/id/1036702 - http://www.securitytracker.com/id/1036703
CVE ID: CVE-2016-4306 State: PUBLISHED Published: 2017-01-06T21:00:00 Last Updated: 2024-08-06T00:25:14.450Z Vendors: Kaspersky Products: Total Security Problem Types: unspecified Description: Multiple information leaks exist in various IOCTL handlers of the Kaspersky Internet Security KLDISK driver. Specially crafted IOCTL requests can cause the driver to return out-of-bounds kernel memory, potentially leaking sensitive information such as privileged tokens or kernel memory addresses that may be useful in bypassing kernel mitigations. An unprivileged user can run a program from user-mode to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://w
from user-mode to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036702 - http://www.talosintelligence.com/reports/TALOS-2016-0168/ - http://www.securitytracker.com/id/1036703
CVE ID: CVE-2016-4307 State: PUBLISHED Published: 2017-01-06T21:00:00 Last Updated: 2024-08-06T00:25:14.233Z Vendors: Kaspersky Products: Internet Security Problem Types: unspecified Description: A denial of service vulnerability exists in the IOCTL handling functionality of Kaspersky Internet Security KL1 driver. A specially crafted IOCTL signal can cause an access violation in KL1 kernel driver resulting in local system denial of service. An attacker can run a program from user-mode to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036702 - http://www.securitytracker.com/id/1036703 - http://www.talosintelligen
es: - http://www.securitytracker.com/id/1036702 - http://www.securitytracker.com/id/1036703 - http://www.talosintelligence.com/reports/TALOS-2016-0169/
CVE ID: CVE-2016-4309 State: PUBLISHED Published: 2016-06-30T17:00:00 Last Updated: 2024-08-06T00:25:14.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Symphony CMS 2.6.7, when session.use_only_cookies is disabled, allows remote attackers to hijack web sessions via the PHPSESSID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/39983/ - http://www.securityfocus.com/bid/91299 - http://hyp3rlinx.altervista.org/advisories/SYMPHONY-CMS-SESSION-FIXATION.txt - https://github.com/symphonycms/symphony-2/commit/b329a14adc40868965076a77210452e396243dcd - http://www.securityfocus.com/archive/
ithub.com/symphonycms/symphony-2/commit/b329a14adc40868965076a77210452e396243dcd - http://www.securityfocus.com/archive/1/538714/100/0/threaded - http://packetstormsecurity.com/files/137551/Symphony-CMS-2.6.7-Session-Fixation.html
CVE ID: CVE-2016-4311 State: PUBLISHED Published: 2017-02-16T18:00:00 Last Updated: 2024-08-06T00:25:14.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 allows remote attackers to hijack the authentication of privileged users for requests that process XACML requests via an entitlement/eval-policy-submit.jsp request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/40239/ - http://www.securityfocus.com/archive/1/539199/100/0/threaded - http://www.securityfocus.com/bid/92485 - http://hyp3rlinx.altervista.org/advisories/WSO2-I
ive/1/539199/100/0/threaded - http://www.securityfocus.com/bid/92485 - http://hyp3rlinx.altervista.org/advisories/WSO2-IDENTITY-SERVER-v5.1.0-XML-External-Entity.txt - http://packetstormsecurity.com/files/138329/WSO2-Identity-Server-5.1.0-XML-Injection.html
CVE ID: CVE-2016-4312 State: PUBLISHED Published: 2017-02-16T18:00:00 Last Updated: 2024-08-06T00:25:14.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 before WSO2-CARBON-PATCH-4.4.0-0231 allows remote authenticated users with access to XACML features to read arbitrary files, cause a denial of service, conduct server-side request forgery (SSRF) attacks, or have unspecified other impact via a crafted XACML request to entitlement/eval-policy-submit.jsp. NOTE: this issue can be combined with CVE-2016-4311 to exploit the vulnerability without credentials. Additional Analyst Notes: - CV
ssue can be combined with CVE-2016-4311 to exploit the vulnerability without credentials. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/40239/ - http://www.securityfocus.com/archive/1/539199/100/0/threaded - http://www.securityfocus.com/bid/92485 - https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2016-0096 - http://hyp3rlinx.altervista.org/advisories/WSO2-IDENTITY-SERVER-v5.1.0-XML-External-Entity.txt - http://packetstormsecurity.com/files/138329/WSO2-Identity-Server-5.1.0-XML-Injection.html
CVE ID: CVE-2016-4313 State: PUBLISHED Published: 2017-04-24T18:00:00 Last Updated: 2024-08-06T00:25:14.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in unzip/extract feature in eXtplorer 2.1.9 allows remote attackers to execute arbitrary files via a .. (dot dot) in an archive file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/538386/100/0/threaded - https://www.exploit-db.com/exploits/39816/ - http://hyp3rlinx.altervista.org/advisories/EXTPLORER-ARCHIVE-PATH-TRAVERSAL.txt - http://www.securityfocus.com/bid/98069 - http://packetstormsecurity.com/files/137031/eXtplorer-2.1.9-Path-Tra