Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-1571 State: PUBLISHED Published: 2010-06-10T00:00:00 Last Updated: 2024-08-07T01:28:41.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the bootstrap service in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), unspecified 6.0 versions, and 5.0 before 5.0(2)SR3 allows remote attackers to read arbitrary files via a crafted bootstrap message to TCP port 6295. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/59277 - http://www.securityfocus.com/bid/40680 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2f11
- http://www.securityfocus.com/bid/40680 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2f110.shtml - http://www.securitytracker.com/id?1024082
CVE ID: CVE-2010-1572 State: PUBLISHED Published: 2010-06-10T00:00:00 Last Updated: 2024-08-07T01:28:42.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the tech support diagnostic shell in Cisco Application Extension Platform (AXP) 1.1 and 1.1.5 allows local users to obtain sensitive configuration information and gain administrator privileges via unspecified API calls. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/59271 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3290b.shtml - http://www.securityfocus.com/bid/40682
CVE ID: CVE-2010-1573 State: PUBLISHED Published: 2010-06-10T00:00:00 Last Updated: 2024-08-07T01:28:42.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys WAP54Gv3 firmware 3.04.03 and earlier uses a hard-coded username (Gemtek) and password (gemtekswd) for a debug interface for certain web pages, which allows remote attackers to execute arbitrary commands via the (1) data1, (2) data2, or (3) data3 parameters to (a) Debug_command_page.asp and (b) debug.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.icysilence.org/?p=268 - http://www.vupen.com/english/advisories/2010/1419 - http://www.securityfocus.com/bid/40648 - http://tools.cisco.com/s
- http://www.vupen.com/english/advisories/2010/1419 - http://www.securityfocus.com/bid/40648 - http://tools.cisco.com/security/center/viewAlert.x?alertId=20682 - http://secunia.com/advisories/40103 - http://www.securityfocus.com/archive/1/511733/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/59286
CVE ID: CVE-2010-1574 State: PUBLISHED Published: 2010-07-08T18:00:00 Last Updated: 2024-08-07T01:28:42.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: IOS 12.2(52)SE and 12.2(52)SE1 on Cisco Industrial Ethernet (IE) 3000 series switches has (1) a community name of public for RO access and (2) a community name of private for RW access, which makes it easier for remote attackers to modify the configuration or obtain potentially sensitive information via SNMP requests, aka Bug ID CSCtf25589. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40407 - http://securitytracker.com/id?1024173 - http://www.cisco.com/en/US/products/products_s
://secunia.com/advisories/40407 - http://securitytracker.com/id?1024173 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3891f.shtml - http://www.kb.cert.org/vuls/id/732671 - http://www.vupen.com/english/advisories/2010/1754 - http://www.securityfocus.com/bid/41436 - http://osvdb.org/66120 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60145
CVE ID: CVE-2010-1575 State: PUBLISHED Published: 2010-07-06T14:00:00 Last Updated: 2024-08-07T01:28:42.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco Content Services Switch (CSS) 11500 with software 08.20.1.01 conveys authentication data through ClientCert-* headers but does not delete client-supplied ClientCert-* headers, which might allow remote attackers to bypass authentication via crafted header data, as demonstrated by a ClientCert-Subject-CN header, aka Bug ID CSCsz04690. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/512144/100/0/threaded - http://securitytracker.com/id?1024167 - http://www.security
tp://www.securityfocus.com/archive/1/512144/100/0/threaded - http://securitytracker.com/id?1024167 - http://www.securityfocus.com/bid/41315 - http://www.vsecurity.com/resources/advisory/20100702-1/ - http://osvdb.org/66091
CVE ID: CVE-2010-1576 State: PUBLISHED Published: 2010-07-06T14:00:00 Last Updated: 2024-08-07T01:28:41.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco Content Services Switch (CSS) 11500 with software before 8.20.4.02 and the Application Control Engine (ACE) 4710 with software before A2(3.0) do not properly handle use of LF, CR, and LFCR as alternatives to the standard CRLF sequence between HTTP headers, which allows remote attackers to bypass intended header insertions or conduct HTTP request smuggling attacks via crafted header data, as demonstrated by LF characters preceding ClientCert-Subject and ClientCert-Subject-CN headers, aka Bug ID CSCta04885. Additional
ated by LF characters preceding ClientCert-Subject and ClientCert-Subject-CN headers, aka Bug ID CSCta04885. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/512144/100/0/threaded - http://securitytracker.com/id?1024167 - http://www.securityfocus.com/bid/41315 - http://www.vsecurity.com/resources/advisory/20100702-1/ - http://osvdb.org/66092 - http://securitytracker.com/id?1024168
CVE ID: CVE-2010-1577 State: PUBLISHED Published: 2010-07-27T22:00:00 Last Updated: 2024-08-07T01:28:42.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Cisco Internet Streamer, as used in Cisco Content Delivery System (CDS) 2.2.x, 2.3.x, 2.4.x, and 2.5.x before 2.5.7 allows remote attackers to read arbitrary files via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3bd1c.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/60567 - http://www.securitytracker.com/id?1024234 - http://osvdb.org/66508 - http://secunia.com/advisories/
nerabilities/60567 - http://www.securitytracker.com/id?1024234 - http://osvdb.org/66508 - http://secunia.com/advisories/40701 - http://www.vupen.com/english/advisories/2010/1881
CVE ID: CVE-2010-1578 State: PUBLISHED Published: 2010-08-06T19:31:00Z Last Updated: 2024-09-16T18:38:41.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the SunRPC inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.19), 8.1 before 8.1(2.47), and 8.2 before 8.2(2) and Cisco PIX Security Appliances 500 series devices allows remote attackers to cause a denial of service (device reload) via crafted SunRPC UDP packets, aka Bug ID CSCtc77567. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40842 - http://www.cisco.com/en/US/pr
nalyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40842 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3f12f.shtml
CVE ID: CVE-2010-1579 State: PUBLISHED Published: 2010-08-06T19:31:00Z Last Updated: 2024-09-16T22:51:20.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the SunRPC inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.19), 8.1 before 8.1(2.47), and 8.2 before 8.2(2) and Cisco PIX Security Appliances 500 series devices allows remote attackers to cause a denial of service (device reload) via crafted SunRPC UDP packets, aka Bug ID CSCtc79922. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40842 - http://www.cisco.com/en/US/pr
CVE ID: CVE-2010-1580 State: PUBLISHED Published: 2010-08-06T19:31:00Z Last Updated: 2024-09-16T17:43:02.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the SunRPC inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.19), 8.1 before 8.1(2.47), and 8.2 before 8.2(2) and Cisco PIX Security Appliances 500 series devices allows remote attackers to cause a denial of service (device reload) via crafted SunRPC UDP packets, aka Bug ID CSCtc85753. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40842 - http://www.cisco.com/en/US/pr
CVE ID: CVE-2010-1581 State: PUBLISHED Published: 2010-08-06T19:31:00Z Last Updated: 2024-09-16T20:23:00.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Transport Layer Security (TLS) implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.15), 8.1 before 8.1(2.44), 8.2 before 8.2(2.17), and 8.3 before 8.3(1.6) and Cisco PIX Security Appliances 500 series devices allows remote attackers to cause a denial of service (device reload) via a sequence of crafted TLS packets, aka Bug ID CSCtd32627. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.c
ed TLS packets, aka Bug ID CSCtd32627. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40842 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3f12f.shtml - http://www.securityfocus.com/bid/42187
CVE ID: CVE-2010-1583 State: PUBLISHED Published: 2010-05-05T18:00:00 Last Updated: 2024-08-07T01:28:41.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the loadByKey function in the TznDbConnection class in tzn_mysql.php in Tirzen (aka TZN) Framework 1.5, as used in TaskFreak! before 0.6.3, allows remote attackers to execute arbitrary SQL commands via the username field in a login action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/58241 - http://www.securityfocus.com/bid/39793 - http://www.exploit-db.com/exploits/12452 - http://www.madirish.net/?article=456 - http://www.t
rityfocus.com/bid/39793 - http://www.exploit-db.com/exploits/12452 - http://www.madirish.net/?article=456 - http://www.taskfreak.com/versions.html
CVE ID: CVE-2010-1584 State: PUBLISHED Published: 2010-05-18T15:29:00 Last Updated: 2024-08-07T01:28:42.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Context module before 6.x-2.0-rc4 for Drupal allows remote authenticated users, with Administer Blocks privileges, to inject arbitrary web script or HTML via a block description. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/795118 - http://www.securityfocus.com/bid/40056 - http://www.packetstormsecurity.com/1005-exploits/drupalab-xss.txt - http://drupal.org/node/794718 - http://www.theregister.co.uk/2010/05/10/drupal_security_bug/ - http
s/drupalab-xss.txt - http://drupal.org/node/794718 - http://www.theregister.co.uk/2010/05/10/drupal_security_bug/ - http://drupal.org/cvs?commit=365210 - http://www.madirish.net/?article=457 - http://crackingdrupal.com/blog/greggles/mitigation-against-cve-2010-1584-drupal-context-module-xss - https://exchange.xforce.ibmcloud.com/vulnerabilities/58521
CVE ID: CVE-2010-1585 State: PUBLISHED Published: 2010-04-28T22:00:00 Last Updated: 2024-08-07T01:28:41.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nsIScriptableUnescapeHTML.parseFragment method in the ParanoidFragmentSink protection mechanism in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, Thunderbird before 3.1.8, and SeaMonkey before 2.0.12 does not properly sanitize HTML in a chrome document, which makes it easier for remote attackers to execute arbitrary JavaScript with chrome privileges via a javascript: URI in input to an extension, as demonstrated by a javascript:alert sequence in (1) the HREF attribute of an A element or (2) the ACTION attribute of
as demonstrated by a javascript:alert sequence in (1) the HREF attribute of an A element or (2) the ACTION attribute of a FORM element. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.avaya.com/css/P8/documents/100133195 - https://bugzilla.mozilla.org/show_bug.cgi?id=562547 - http://www.securityfocus.com/archive/1/510883/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDVSA-2011:041 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12532 - http://www.security-assessment.com/files/whitepapers/Cross_Context_Scripting_with_Firefox.pdf - http://www.mozilla.org/security/announce/2011/mfsa2011-08.html - http
epapers/Cross_Context_Scripting_with_Firefox.pdf - http://www.mozilla.org/security/announce/2011/mfsa2011-08.html - http://wizzrss.blat.co.za/2009/11/17/so-much-for-nsiscriptableunescapehtmlparsefragment/ - http://www.mandriva.com/security/advisories?name=MDVSA-2011:042
CVE ID: CVE-2010-1586 State: PUBLISHED Published: 2010-04-28T22:00:00 Last Updated: 2024-08-07T01:28:42.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in red2301.html in HP System Management Homepage (SMH) 2.x.x.x allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the RedirectUrl parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39676 - http://yehg.net/lab/pr0js/advisories/hp_system_management_homepage_url_redirection_abuse - https://exchange.xforce.ibmcloud.com/vulnerabilities/58107
CVE ID: CVE-2010-1587 State: PUBLISHED Published: 2010-04-28T22:00:00 Last Updated: 2024-08-07T01:28:42.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and 5.4.x before 5.4.0 allows remote attackers to read JSP source code via a // (slash slash) initial substring in a URI for (1) admin/index.jsp, (2) admin/queues.jsp, or (3) admin/topics.jsp. Additional Analyst Notes: - CVE Program Container: References: - https://issues.apache.org/activemq/browse/AMQ-2700 - http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0278.html - http://secunia.com/advisories/39567 - http://www.securityfocus.com/bid/39636 - http:/
fulldisclosure/2010-04/0278.html - http://secunia.com/advisories/39567 - http://www.securityfocus.com/bid/39636 - http://www.securityfocus.com/archive/1/510896/100/0/threaded - http://www.vupen.com/english/advisories/2010/0979 - http://www.osvdb.org/64020
CVE ID: CVE-2010-1588 State: PUBLISHED Published: 2010-04-28T23:00:00 Last Updated: 2024-08-07T01:28:43.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Getwebsess function in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL commands via the websess parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/55821 - http://osvdb.org/61890 - http://archives.neohapsis.com/archives/fulldisclosure/2010-01/0400.html - http://secunia.com/advisories/38283
CVE ID: CVE-2010-1589 State: PUBLISHED Published: 2010-04-28T23:00:00 Last Updated: 2024-08-07T01:28:41.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier might allow remote attackers to determine the existence of arbitrary files via directory traversal sequences in the client's DNS hostname (aka the REMOTE_HOST variable), related to the CookielessGenerateFilename and CookielessReadFile functions. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/61891 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55824 - http://archive
iner: References: - http://osvdb.org/61891 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55824 - http://archives.neohapsis.com/archives/fulldisclosure/2010-01/0400.html - http://secunia.com/advisories/38283
CVE ID: CVE-2010-1590 State: PUBLISHED Published: 2010-04-28T23:00:00Z Last Updated: 2024-09-17T04:09:10.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier might allow remote attackers to inject arbitrary web script or HTML via the client's DNS hostname (aka the REMOTE_HOST variable), related to the CookielessGenerateFilename and CookielessReadFile functions. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2010-01/0400.html
CVE ID: CVE-2010-1591 State: PUBLISHED Published: 2010-04-28T23:00:00 Last Updated: 2024-08-07T01:28:41.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Beijing Rising International Rising Antivirus 2008 through 2010 does not properly validate input to certain IOCTLs, including 0x83003C07, which allows local users to gain privileges via crafted IOCTL requests to the (1) HookCont.sys, (2) HookNtos.sys, (3) HOOKREG.sys, or (4) HookSys.sys device driver; or the (5) RsNTGdi.sys kernel module, reachable through \Device\RSNTGDI. Additional Analyst Notes: - CVE Program Container: References: - http://www.ntinternals.org/ntiadv0902/ntiadv0902.html - http://osvdb.org/61946 - http://www
ram Container: References: - http://www.ntinternals.org/ntiadv0902/ntiadv0902.html - http://osvdb.org/61946 - http://www.vupen.com/english/advisories/2010/0218 - http://www.securityfocus.com/bid/37951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55869 - http://secunia.com/advisories/38335 - http://www.ntinternals.org/ntiadv0805/ntiadv0805.html
CVE ID: CVE-2010-1592 State: PUBLISHED Published: 2010-04-28T23:00:00Z Last Updated: 2024-09-17T03:23:14.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: sandra.sys 15.18.1.1 and earlier in the Sandra Device Driver in SiSoftware Sandra 16.10.2010.1 and earlier allows local users to gain privileges or cause a denial of service (system crash) via unspecified vectors involving "Model-Specific Registers." Additional Analyst Notes: - CVE Program Container: References: - http://www.ntinternals.org/ntiadv0808/ntiadv0808.html - http://osvdb.org/61947 - http://secunia.com/advisories/38212 - http://www.vupen.com/english/advisories/2010/0223
CVE ID: CVE-2010-1593 State: PUBLISHED Published: 2010-04-28T23:00:00 Last Updated: 2024-08-07T01:28:41.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via (1) the CommenterURL parameter to PostCommentForm, and in the Forum module before 0.2.5 in SilverStripe before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via (2) the Search parameter to forums/search (aka the search script). Additional Analyst Notes: - CVE Program Container: References: - http://www.silverstripe.org/security-releases/ - http://osvdb.org/6192
yst Notes: - CVE Program Container: References: - http://www.silverstripe.org/security-releases/ - http://osvdb.org/61921 - http://secunia.com/advisories/38347 - http://osvdb.org/61923 - http://www.securityfocus.com/archive/1/509139/100/0/threaded - http://open.silverstripe.org/wiki/ChangeLog/2.3.5 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55838 - http://www.securityfocus.com/bid/37923 - http://archives.neohapsis.com/archives/fulldisclosure/2010-01/0450.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/55839 - http://groups.google.com/group/silverstripe-announce/browse_thread/thread/f51749342eee9456 - http://open.silverstripe.org/changeset/97074 - http://secunia.com/ad
pe-announce/browse_thread/thread/f51749342eee9456 - http://open.silverstripe.org/changeset/97074 - http://secunia.com/advisories/38290
CVE ID: CVE-2010-1594 State: PUBLISHED Published: 2010-04-28T23:00:00 Last Updated: 2024-08-07T01:28:42.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via (1) the query string, (2) the BASE parameter, or (3) the ega_1 parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/61943 - http://secunia.com/advisories/38311 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:178 - https://exchange.xforce.
ecunia.com/advisories/38311 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:178 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55874 - http://packetstormsecurity.org/1001-exploits/ocsinventoryng-sqlxss.txt
CVE ID: CVE-2010-1595 State: PUBLISHED Published: 2010-04-28T23:00:00 Last Updated: 2024-08-07T01:28:41.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL commands via the (1) c, (2) val_1, or (3) onglet_bis parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38311 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:178 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55872 - http://packetstormsecurity.org/1001-exploits/ocsinventoryng-sqlxss.txt - http://osvdb.org/61942
CVE ID: CVE-2010-1596 State: PUBLISHED Published: 2010-04-28T23:00:00 Last Updated: 2024-08-07T01:28:43.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: Support Incident Tracker before 3.51, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37949 - http://sitracker.org/wiki/ReleaseNotes351 - http://sitracker.org/forum/viewtopic.php?f=4&t=1416979&p=2292 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55871 - http://osvdb.org/61945 - http://secunia.com/advisories/38329 - http://bugs.sitracker.org/view.
m/vulnerabilities/55871 - http://osvdb.org/61945 - http://secunia.com/advisories/38329 - http://bugs.sitracker.org/view.php?id=1047
CVE ID: CVE-2010-1597 State: PUBLISHED Published: 2010-04-29T16:00:00 Last Updated: 2024-08-07T01:28:42.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in zgtips.dll in ZipGenius 6.3.1.2552 allows user-assisted remote attackers to execute arbitrary code via a ZIP file containing an entry with a long filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39622 - http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-029-zipgenius-v6-3-1-2552-zgtips-dll-stack-buffer-overflow/ - http://www.corelan.be:8800/advisories.php?id=CORELAN-10-029 - http://feeds.feedburner.com/zipgeniusnews
ffer-overflow/ - http://www.corelan.be:8800/advisories.php?id=CORELAN-10-029 - http://feeds.feedburner.com/zipgeniusnews - http://secunia.com/advisories/39497 - http://www.vupen.com/english/advisories/2010/0966 - http://osvdb.org/63971 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58022 - http://www.exploit-db.com/exploits/12326