Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-2005 State: PUBLISHED Published: 2010-05-20T21:00:00 Last Updated: 2024-08-07T02:17:13.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in DataLife Engine (DLE) 8.3 allow remote attackers to execute arbitrary PHP code via a URL in (1) the selected_language parameter to engine/inc/include/init.php, (2) the config[langs] parameter to engine/inc/help.php, (3) the config[lang] parameter to engine/ajax/pm.php, (4) and the _REQUEST[skin] parameter to engine/ajax/addcomments.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.packetstormsecurity.com/1001-exploits/datalifeengine83-rfi.txt
Notes: - CVE Program Container: References: - http://www.packetstormsecurity.com/1001-exploits/datalifeengine83-rfi.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/55757 - http://www.securityfocus.com/bid/37851
CVE ID: CVE-2010-2006 State: PUBLISHED Published: 2010-05-20T21:00:00 Last Updated: 2024-08-07T02:17:13.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in op/op.Login.php in LetoDMS (formerly MyDMS) 1.7.2 and earlier allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38237 - https://www.sec-consult.com/files/20100115-0_mydms_file_inclusion.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/55709 - http://secunia.com/advisories/42900 - http://www.securityfocus.com/bid/37828
xforce.ibmcloud.com/vulnerabilities/55709 - http://secunia.com/advisories/42900 - http://www.securityfocus.com/bid/37828 - http://www.securityfocus.com/archive/1/508947/100/0/threaded - http://osvdb.org/61834 - http://www.debian.org/security/2011/dsa-2146
CVE ID: CVE-2010-2007 State: PUBLISHED Published: 2010-05-20T21:00:00 Last Updated: 2024-08-07T02:17:13.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in LetoDMS (formerly MyDMS) 1.7.2 and earlier allow remote attackers to hijack the authentication of administrators for requests that use (1) op/op.EditUserData.php, (2) op/op.UsrMgr.php, (3) out/out.RemoveVersion.php, (4) op/op.RemoveFolder.php, (5) op/op.DefaultKeywords.php, (6) op/op.GroupMgr.php, (7) op/op.FolderAccess.php, (8) op/op.FolderNotify.php, or (9) op.MoveFolder.php in mydms. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.
php, or (9) op.MoveFolder.php in mydms. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38237 - https://www.sec-consult.com/files/20100115-0_mydms_file_inclusion.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/55710 - http://www.securityfocus.com/archive/1/508947/100/0/threaded - http://osvdb.org/61835
CVE ID: CVE-2010-2008 State: PUBLISHED Published: 2010-07-13T20:00:00 Last Updated: 2024-08-07T02:17:13.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL before 5.1.48 allows remote authenticated users with alter database privileges to cause a denial of service (server crash and database loss) via an ALTER DATABASE command with a #mysql50# string followed by a . (dot), .. (dot dot), ../ (dot dot slash) or similar sequence, and an UPGRADE DATA DIRECTORY NAME command, which causes MySQL to move certain directories to the server data directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1397-1 - https://oval.cisecurity.org/
nalyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1397-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11869 - http://bugs.mysql.com/bug.php?id=53804 - http://www.vupen.com/english/advisories/2010/1918 - http://www.securityfocus.com/bid/41198 - http://www.securitytracker.com/id?1024160 - http://secunia.com/advisories/40333 - http://www.ubuntu.com/usn/USN-1017-1 - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-48.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:155 - http://secunia.com/advisories/40762 - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044546.html
CVE ID: CVE-2010-2009 State: PUBLISHED Published: 2010-05-21T17:00:00Z Last Updated: 2024-09-16T19:04:56.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the media library in BS.Global BS.Player 2.51 build 1022, 2.41 build 1003, and possibly other versions allows user-assisted remote attackers to execute arbitrary code via a long ID3 tag in a .MP3 file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4932.php - http://secunia.com/advisories/38221 - http://www.securityfocus.com/bid/38568 - http://www.packets
es/ZSL-2010-4932.php - http://secunia.com/advisories/38221 - http://www.securityfocus.com/bid/38568 - http://www.packetstormsecurity.org/1003-advisories/bsplayerml-overflow.txt
CVE ID: CVE-2010-2010 State: PUBLISHED Published: 2010-05-21T20:00:00 Last Updated: 2024-08-07T02:17:13.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Chaos Tool Suite (aka CTools) module 6.x before 6.x-1.4 for Drupal allow remote attackers to inject arbitrary web script or HTML via a node title. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/58721 - http://secunia.com/advisories/39884 - http://drupal.org/node/803944 - http://www.securityfocus.com/bid/40285
CVE ID: CVE-2010-2011 State: PUBLISHED Published: 2010-05-21T20:00:00Z Last Updated: 2024-09-16T22:20:59.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Dynamics GP uses a substitution cipher to encrypt the system password field and unspecified other fields, which makes it easier for remote authenticated users to obtain sensitive information by decrypting a field's contents. Additional Analyst Notes: - CVE Program Container: References: - http://blogs.msdn.com/developingfordynamicsgp/archive/2008/10/02/why-does-microsoft-dynamics-gp-encrypt-passwords.aspx - http://www.christopherkois.com/?p=448 - http://slashdot.org/story/10/05/21/1437227
CVE ID: CVE-2010-2012 State: PUBLISHED Published: 2010-05-24T17:00:00Z Last Updated: 2024-09-16T20:43:35.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in function.php in MigasCMS 1.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the categorie parameter in a catalogo action. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1005-exploits/migascms-sql.txt - http://www.securityfocus.com/bid/40256 - http://osvdb.org/64732 - http://www.itsecteam.com/en/vulnerabilities/vulnerability54.h
www.securityfocus.com/bid/40256 - http://osvdb.org/64732 - http://www.itsecteam.com/en/vulnerabilities/vulnerability54.htm - http://secunia.com/advisories/39878
CVE ID: CVE-2010-2013 State: PUBLISHED Published: 2010-05-24T17:00:00 Last Updated: 2024-08-07T02:17:13.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cp/edit_email.php in LiSK CMS 4.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.htbridge.ch/advisory/xss_vulnerability_in_product.html - http://www.securityfocus.com/archive/1/511379/100/0/threaded - http://secunia.com/advisories/39912
CVE ID: CVE-2010-2014 State: PUBLISHED Published: 2010-05-24T17:00:00Z Last Updated: 2024-09-17T00:51:52.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cp/list_content.php in LiSK CMS 4.4 allows remote attackers to inject arbitrary web script or HTML via the cl or possibly id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.htbridge.ch/advisory/xss_vulnerability_in_lisk_cms.html - http://secunia.com/advisories/39912
CVE ID: CVE-2010-2015 State: PUBLISHED Published: 2010-05-24T17:00:00Z Last Updated: 2024-09-16T18:13:46.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in LiSK CMS 4.4 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in a view_inbox action to cp/cp_messages.php or (2) the id parameter to cp/edit_email.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.htbridge.ch/advisory/sql_injection_vulnerability_in_lisk_cms.html - http://www.htbridge.ch/advisory/sql_injection_vulnerability_in_lisk_cms_1.html - http://secunia.com/advisories/39912
CVE ID: CVE-2010-2016 State: PUBLISHED Published: 2010-05-24T17:00:00 Last Updated: 2024-08-07T02:17:13.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in details.php in Iceberg CMS allows remote attackers to execute arbitrary SQL commands via the p_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/12620 - http://www.vupen.com/english/advisories/2010/1161 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58617 - http://packetstormsecurity.org/1005-exploits/iceberg-sql.txt - http://secunia.com/advisories/39833 - http://www.osvdb.org/64694
CVE ID: CVE-2010-2017 State: PUBLISHED Published: 2010-05-24T17:00:00Z Last Updated: 2024-09-17T03:13:23.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in hasil-pencarian.html in Lokomedia CMS 1.4.1 and 2.0 allows remote attackers to inject arbitrary web script or HTML via the kata parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39863 - http://osvdb.org/64748 - http://packetstormsecurity.org/1005-exploits/lokomediacms-xss.txt
CVE ID: CVE-2010-2018 State: PUBLISHED Published: 2010-05-24T17:00:00 Last Updated: 2024-08-07T02:17:14.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in downlot.php in Lokomedia CMS 1.4.1 and 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39863 - http://packetstormsecurity.org/1005-exploits/lokomediacms-disclose.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/58670 - http://osvdb.org/64747 - http://www.exploit-db.com/exploits/12651
CVE ID: CVE-2010-2019 State: PUBLISHED Published: 2010-05-24T17:00:00Z Last Updated: 2024-09-16T23:11:36.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in downlot.php in Lokomedia CMS 1.4.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the file parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39863
CVE ID: CVE-2010-2020 State: PUBLISHED Published: 2010-05-28T18:00:00 Last Updated: 2024-08-07T02:17:14.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: sys/nfsclient/nfs_vfsops.c in the NFS client in the kernel in FreeBSD 7.2 through 8.1-PRERELEASE, when vfs.usermount is enabled, does not validate the length of a certain fhsize parameter, which allows local users to gain privileges via a crafted mount request. Additional Analyst Notes: - CVE Program Container: References: - http://security.FreeBSD.org/advisories/FreeBSD-SA-10:06.nfsclient.asc - http://www.exploit-db.com/exploits/14003 - http://www.exploit-db.com/exploits/14002 - http://securitytracker.com/id?1024039
CVE ID: CVE-2010-2021 State: PUBLISHED Published: 2012-06-25T21:00:00 Last Updated: 2024-08-07T02:17:13.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the Global Redirect module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.4 for Drupal, when non-clean to clean is enabled, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/1378118 - http://drupal.org/node/768244 - http://www.openwall.com/lists/oss-security/2012/06/14/3 - http://www.madirish.net/?article=460 - http://www.osvdb.org/829
ttp://www.openwall.com/lists/oss-security/2012/06/14/3 - http://www.madirish.net/?article=460 - http://www.osvdb.org/82959 - http://drupal.org/node/1633054 - https://drupal.org/node/1378116 - https://exchange.xforce.ibmcloud.com/vulnerabilities/76293 - http://secunia.com/advisories/49523 - http://www.securityfocus.com/bid/54002
CVE ID: CVE-2010-2022 State: PUBLISHED Published: 2010-05-28T18:00:00Z Last Updated: 2024-09-17T01:05:51.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: jail.c in jail in FreeBSD 8.0 and 8.1-PRERELEASE, when the "-l -U root" options are omitted, does not properly restrict access to the current working directory, which might allow local users to read, modify, or create arbitrary files via standard filesystem operations. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1247 - http://security.FreeBSD.org/advisories/FreeBSD-SA-10:04.jail.asc - http://www.securityfocus.com/bid/40399 - http://securitytracker.com/id?102403
org/advisories/FreeBSD-SA-10:04.jail.asc - http://www.securityfocus.com/bid/40399 - http://securitytracker.com/id?1024038
CVE ID: CVE-2010-2023 State: PUBLISHED Published: 2010-06-07T14:00:00 Last Updated: 2024-08-07T02:17:13.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: transports/appendfile.c in Exim before 4.72, when a world-writable sticky-bit mail directory is used, does not verify the st_nlink field of mailbox files, which allows local users to cause a denial of service or possibly gain privileges by creating a hard link to another user's file. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2010-06/0079.html - http://www.securityfocus.com/bid/40451 - http://www.vupen.com/english/advisories/2010/1402 - http://www.vupe
0079.html - http://www.securityfocus.com/bid/40451 - http://www.vupen.com/english/advisories/2010/1402 - http://www.vupen.com/english/advisories/2011/0364 - http://secunia.com/advisories/43243 - http://bugs.exim.org/show_bug.cgi?id=988 - http://vcs.exim.org/viewvc/exim/exim-src/src/transports/appendfile.c?r1=1.24&r2=1.25 - http://secunia.com/advisories/40019 - http://lists.exim.org/lurker/message/20100524.175925.9a69f755.en.html - http://vcs.exim.org/viewvc/exim/exim-doc/doc-txt/ChangeLog?view=markup&pathrev=exim-4_72_RC2 - http://secunia.com/advisories/40123 - http://www.securityfocus.com/archive/1/511653/100/0/threaded - https://bugzilla.redhat.com/show_bug.cgi?id=600093 - http://lists.fed
ecurityfocus.com/archive/1/511653/100/0/threaded - https://bugzilla.redhat.com/show_bug.cgi?id=600093 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042613.html - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://www.ubuntu.com/usn/USN-1060-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59043 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042587.html
CVE ID: CVE-2010-2024 State: PUBLISHED Published: 2010-06-07T14:00:00 Last Updated: 2024-08-07T02:17:14.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: transports/appendfile.c in Exim before 4.72, when MBX locking is enabled, allows local users to change permissions of arbitrary files or create arbitrary files, and cause a denial of service or possibly gain privileges, via a symlink attack on a lockfile in /tmp/. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2010-06/0079.html - https://bugzilla.redhat.com/show_bug.cgi?id=600097 - http://www.vupen.com/english/advisories/2010/1402 - http://www.securityfocu
bugzilla.redhat.com/show_bug.cgi?id=600097 - http://www.vupen.com/english/advisories/2010/1402 - http://www.securityfocus.com/bid/40454 - http://www.vupen.com/english/advisories/2011/0364 - http://secunia.com/advisories/43243 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59042 - http://vcs.exim.org/viewvc/exim/exim-src/src/transports/appendfile.c?r1=1.25&r2=1.26 - http://secunia.com/advisories/40019 - http://lists.exim.org/lurker/message/20100524.175925.9a69f755.en.html - http://vcs.exim.org/viewvc/exim/exim-doc/doc-txt/ChangeLog?view=markup&pathrev=exim-4_72_RC2 - http://secunia.com/advisories/40123 - http://www.securityfocus.com/archive/1/511653/100/0/threaded - http://lists.fedor
http://secunia.com/advisories/40123 - http://www.securityfocus.com/archive/1/511653/100/0/threaded - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042613.html - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://www.ubuntu.com/usn/USN-1060-1 - http://bugs.exim.org/show_bug.cgi?id=989 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042587.html
CVE ID: CVE-2010-2025 State: PUBLISHED Published: 2010-05-26T19:00:00Z Last Updated: 2024-09-16T18:19:28.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the Cisco Scientific Atlanta WebSTAR DPC2100R2 cable modem with firmware 2.0.2r1256-060303 allow remote attackers to hijack the authentication of administrators for requests that (1) reset the modem, (2) erase the firmware, (3) change the administrative password, (4) install modified firmware, or (5) change the access level, as demonstrated by a request to goform/_aslvl. Additional Analyst Notes: - CVE Program Container: References: - http://ar
s demonstrated by a request to goform/_aslvl. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0322.html - http://www.securityfocus.com/bid/40346
CVE ID: CVE-2010-2026 State: PUBLISHED Published: 2010-05-26T19:00:00Z Last Updated: 2024-09-16T23:51:17.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface on the Cisco Scientific Atlanta WebSTAR DPC2100R2 cable modem with firmware 2.0.2r1256-060303 allows remote attackers to bypass authentication, and reset the modem or replace the firmware, via a direct request to an unspecified page. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0322.html - http://www.securityfocus.com/bid/40346
CVE ID: CVE-2010-2027 State: PUBLISHED Published: 2010-05-24T19:00:00 Last Updated: 2024-08-07T02:17:13.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mathematica 7, when running on Linux, allows local users to overwrite arbitrary files via a symlink attack on (1) files within /tmp/MathLink/ or (2) /tmp/fonts$$.conf. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39805 - http://www.securityfocus.com/archive/1/511298/100/0/threaded - http://marc.info/?l=full-disclosure&m=127380255201760&w=2
CVE ID: CVE-2010-2028 State: PUBLISHED Published: 2010-05-24T19:00:00 Last Updated: 2024-08-07T02:17:13.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in k23productions TFTPUtil GUI (aka TFTPGUI) 1.4.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long transport mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39872 - http://www.exploit-db.com/exploits/12482 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58283 - http://www.exploit-db.com/exploits/12530
CVE ID: CVE-2010-2029 State: PUBLISHED Published: 2010-05-24T19:00:00 Last Updated: 2024-08-07T02:17:14.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybozu Office 7 Ktai and Dotsales do not properly restrict access to the login page, which allows remote attackers to bypass authentication and obtain or modify sensitive information by using the unique ID of the user's cell phone. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39508 - http://cybozu.co.jp/products/dl/notice/detail/0034.html - http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000016.html - http://www.osvdb.org/63933 - https://exchange.xforce.ibmcloud.com/vulnerabili
/ja/contents/2010/JVNDB-2010-000016.html - http://www.osvdb.org/63933 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57976 - http://www.ipa.go.jp/security/english/vuln/201004_cybozu_en.html - http://jvn.jp/en/jp/JVN87730223/index.html
CVE ID: CVE-2010-2030 State: PUBLISHED Published: 2010-05-24T19:00:00 Last Updated: 2024-08-07T02:17:13.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the External Link Page module 5.x before 5.x-1.0 and 6.x before 6.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors related to the administration and redirect pages. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39888 - http://drupal.org/node/803766 - http://osvdb.org/64762 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58714
CVE ID: CVE-2010-2031 State: PUBLISHED Published: 2010-05-24T19:00:00 Last Updated: 2024-08-07T02:17:14.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: KAVSafe.sys 2010.4.14.609 and earlier, as used in Kingsoft Webshield 3.5.1.2 and earlier, allows local users to overwrite arbitrary kernel memory via a crafted request to IOCTL 0x830020d4 on the KAVSafe device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40342 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58780 - http://secunia.com/advisories/39916 - http://www.exploit-db.com/exploits/12710
CVE ID: CVE-2010-2032 State: PUBLISHED Published: 2010-05-24T19:00:00 Last Updated: 2024-08-07T02:17:14.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in resin-admin/digest.php in Caucho Technology Resin Professional 3.1.5, 3.1.10, 4.0.6, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the (1) digest_realm or (2) digest_username parameters. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1201 - http://www.securityfocus.com/bid/40251 - http://packet
References: - http://www.vupen.com/english/advisories/2010/1201 - http://www.securityfocus.com/bid/40251 - http://packetstormsecurity.org/1005-exploits/cauchoresin312-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/58733 - http://www.securityfocus.com/archive/1/511341/100/0/threaded - http://secunia.com/advisories/39839
CVE ID: CVE-2010-2033 State: PUBLISHED Published: 2010-05-25T14:00:00Z Last Updated: 2024-09-17T01:00:49.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Percha Multicategory Article (com_perchacategoriestree) component 0.6 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1005-exploits/joomlaperchact-lfi.txt - http://www.securityfocus.com/bid/40244 - http://secunia.com/advisories/39873