Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
b12 - http://intevydis.blogspot.com/2010/01/postgresql-8023-bitsubstr-overflow.html - http://git.postgresql.org/gitweb?p=postgresql.git%3Ba=commit%3Bh=b15087cb39ca9e4bde3c8920fcee3741045d2b83 - http://www.vupen.com/english/advisories/2010/1207 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567058 - http://www.vupen.com/english/advisories/2010/1022 - http://archives.postgresql.org/pgsql-hackers/2010-01/msg00634.php - http://secunia.com/advisories/39566 - https://bugzilla.redhat.com/show_bug.cgi?id=559259 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55902 - http://archives.postgresql.org/pgsql-committers/2010-01/msg00125.php - http://www.redhat.com/support/errata/RHSA-2010-0429.h
://archives.postgresql.org/pgsql-committers/2010-01/msg00125.php - http://www.redhat.com/support/errata/RHSA-2010-0429.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9720 - https://bugzilla.redhat.com/show_bug.cgi?id=559194 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:103 - http://secunia.com/advisories/39939 - http://www.vupen.com/english/advisories/2010/1197
CVE ID: CVE-2010-0443 State: PUBLISHED Published: 2010-02-04T18:00:00 Last Updated: 2024-08-07T00:52:19.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Record Management Services (RMS) before VMS83A_RMS-V1100 for HP OpenVMS on the Alpha platform allows local users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=126520981100671&w=2 - http://www.securityfocus.com/bid/38048 - http://secunia.com/advisories/38366 - http://marc.info/?l=bugtraq&m=126520981100671&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56062 - http://www.vupen.com/english/advisories/2
20981100671&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56062 - http://www.vupen.com/english/advisories/2010/0286
CVE ID: CVE-2010-0444 State: PUBLISHED Published: 2010-02-09T19:00:00 Last Updated: 2024-08-07T00:52:17.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Operations Agent 8.51, 8.52, 8.53, and 8.60 on Solaris 10 uses a blank password for the opc_op account, which allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38150 - http://marc.info/?l=bugtraq&m=126566258722040&w=2 - http://osvdb.org/62213 - http://securitytracker.com/id?1023555 - http://marc.info/?l=bugtraq&m=126566258722040&w=2
CVE ID: CVE-2010-0445 State: PUBLISHED Published: 2010-02-11T17:00:00Z Last Updated: 2024-09-16T18:29:43.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Network Node Manager (NNM) 8.10, 8.11, 8.12, and 8.13 allows remote attackers to execute arbitrary commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38528 - http://marc.info/?l=bugtraq&m=126582291202560&w=2 - http://marc.info/?l=bugtraq&m=126582291202560&w=2
CVE ID: CVE-2010-0446 State: PUBLISHED Published: 2010-02-12T19:00:00 Last Updated: 2024-08-07T00:52:19.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability on the HP DreamScreen 100 and 130 with firmware before 1.6.0.0, when using a web-connected configuration, allows remote attackers to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1023581 - http://marc.info/?l=bugtraq&m=126592424225647&w=2 - http://marc.info/?l=bugtraq&m=126592424225647&w=2 - http://www.securityfocus.com/bid/38190 - http://secunia.com/advisories/38536
CVE ID: CVE-2010-0447 State: PUBLISHED Published: 2010-03-10T22:00:00 Last Updated: 2024-08-07T00:52:17.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: The helpmanager servlet in the web server in HP OpenView Performance Insight (OVPI) 5.4 and earlier does not properly authenticate and validate requests, which allows remote attackers to execute arbitrary commands via vectors involving upload of a JSP document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/509984/100/0/threaded - http://secunia.com/advisories/38899 - http://www.securityfocus.com/bid/38611 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56757 - ht
isories/38899 - http://www.securityfocus.com/bid/38611 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56757 - http://www.zerodayinitiative.com/advisories/ZDI-10-026 - http://osvdb.org/62797 - http://marc.info/?l=bugtraq&m=126815897824020&w=2 - http://marc.info/?l=bugtraq&m=126815897824020&w=2 - http://www.vupen.com/english/advisories/2010/0555
CVE ID: CVE-2010-0448 State: PUBLISHED Published: 2010-03-31T17:35:00Z Last Updated: 2024-09-17T03:37:52.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote attackers to obtain "unauthorized access to data" via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=126996774125378&w=2 - http://www.securitytracker.com/id?1023765 - http://marc.info/?l=bugtraq&m=126996774125378&w=2 - http://secunia.com/advisories/39187 - http://www.securityfocus.com/bid/39059
CVE ID: CVE-2010-0449 State: PUBLISHED Published: 2010-03-31T17:35:00Z Last Updated: 2024-09-16T18:49:43.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=126996774125378&w=2 - http://www.securitytracker.com/id?1023765 - http://marc.info/?l=bugtraq&m=126996774125378&w=2 - http://secunia.com/advisories/39187 - http://www.securityfocus.com/bid/39060
CVE ID: CVE-2010-0450 State: PUBLISHED Published: 2010-03-31T17:35:00Z Last Updated: 2024-09-16T20:57:34.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote authenticated users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=126996774125378&w=2 - http://www.securitytracker.com/id?1023765 - http://marc.info/?l=bugtraq&m=126996774125378&w=2 - http://secunia.com/advisories/39187 - http://www.securityfocus.com/bid/39061
CVE ID: CVE-2010-0451 State: PUBLISHED Published: 2010-03-29T22:00:00 Last Updated: 2024-08-07T00:52:17.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation process for NFS/ONCplus B.11.31_08 and earlier on HP HP-UX B.11.31 changes the NFS_SERVER setting in the nfsconf file, which might allow remote attackers to obtain filesystem access via NFS requests. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57216 - http://osvdb.org/63243 - http://www.securityfocus.com/bid/38982 - http://marc.info/?l=bugtraq&m=126962272413767&w=2 - http://www.vupen.com/english/advisories/2010/0731 - http://marc.info/?l
p://marc.info/?l=bugtraq&m=126962272413767&w=2 - http://www.vupen.com/english/advisories/2010/0731 - http://marc.info/?l=bugtraq&m=126962272413767&w=2 - http://securitytracker.com/id?1023758 - http://secunia.com/advisories/39111 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12025
CVE ID: CVE-2010-0452 State: PUBLISHED Published: 2010-03-29T18:00:00Z Last Updated: 2024-09-16T23:31:27.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in HP Project and Portfolio Management Center (PPMC, formerly Mercury IT Governance) 7.1 through SP10 and 7.5 through SP3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39105 - http://marc.info/?l=bugtraq&m=126953216625011&w=2 - http://securitytracker.com/id?1023749 - http://www.securityfocus.com/bid/38961 - http://marc.info/?l=bugtraq&m=1269
=2 - http://securitytracker.com/id?1023749 - http://www.securityfocus.com/bid/38961 - http://marc.info/?l=bugtraq&m=126953216625011&w=2 - http://www.osvdb.org/63175
CVE ID: CVE-2010-0453 State: PUBLISHED Published: 2010-02-03T18:00:00 Last Updated: 2024-08-07T00:52:19.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ucode_ioctl function in intel/io/ucode_drv.c in Sun Solaris 10 and OpenSolaris snv_69 through snv_133, when running on x86 architectures, allows local users to cause a denial of service (panic) via a request with a 0 size value to the UCODE_GET_VERSION IOCTL, which triggers a NULL pointer dereference in the ucode_get_rev function, related to retrieval of the microcode revision. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-103B.html - http://sunsolve.sun.com/sea
CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA10-103B.html - http://sunsolve.sun.com/search/document.do?assetkey=1-21-143913-01-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55991 - http://secunia.com/advisories/38452 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021799.1-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6959 - http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html - http://www.securityfocus.com/archive/1/509276/100/0/threaded - http://www.securityfocus.com/bid/38016 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-275910-1 - http://osvdb.org/62046 -
urityfocus.com/bid/38016 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-275910-1 - http://osvdb.org/62046 - http://www.trapkit.de/advisories/TKADV2010-001.txt - http://www.vupen.com/english/advisories/2010/0270
CVE ID: CVE-2010-0454 State: PUBLISHED Published: 2010-01-28T20:00:00 Last Updated: 2024-08-07T00:52:19.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in cgi/cgilua.exe/sys/start.htm in Publique! 2.3 allows remote attackers to execute arbitrary SQL commands via the sid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/509142/100/0/threaded - http://secunia.com/advisories/38302 - http://osvdb.org/61941 - http://packetstormsecurity.org/1001-exploits/publique-sql.txt
CVE ID: CVE-2010-0455 State: PUBLISHED Published: 2010-01-28T20:00:00 Last Updated: 2024-08-07T00:52:19.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in forum/viewtopic.php in PunBB 1.3 allows remote attackers to inject arbitrary web script or HTML via the pid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.packetstormsecurity.com/1001-exploits/punbb13-xss.txt - http://www.securityfocus.com/bid/37930 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55853
CVE ID: CVE-2010-0456 State: PUBLISHED Published: 2010-01-28T20:00:00 Last Updated: 2024-08-07T00:52:19.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the indianpulse Game Server (com_gameserver) component 1.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the grp parameter in a gameserver action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37920 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55829 - http://www.exploit-db.com/exploits/11222 - http://www.securityfocus.com/bid/37934
CVE ID: CVE-2010-0457 State: PUBLISHED Published: 2010-01-28T20:00:00 Last Updated: 2024-08-07T00:52:18.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in home.php in magic-portal 2.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11235 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55849 - http://packetstormsecurity.org/1001-exploits/magicportal-sql.txt
CVE ID: CVE-2010-0458 State: PUBLISHED Published: 2010-01-28T20:00:00 Last Updated: 2024-08-07T00:52:19.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to index.php and the (2) note parameter to blog.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11216 - http://packetstormsecurity.org/0512-exploits/blog12SQL.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/55862 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55818 - http://www.securityfocus.com/bid/3
/vulnerabilities/55862 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55818 - http://www.securityfocus.com/bid/37911
CVE ID: CVE-2010-0459 State: PUBLISHED Published: 2010-01-28T20:00:00 Last Updated: 2024-08-07T00:52:18.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Mochigames (com_mochigames) component 0.51 and possibly other versions for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37931 - http://www.exploit-db.com/exploits/11243 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55841 - http://packetstormsecurity.org/1001-exploits/joomlamochigames-sql.txt
CVE ID: CVE-2010-0460 State: PUBLISHED Published: 2010-01-28T20:00:00 Last Updated: 2024-08-07T00:52:18.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in staff/index.php in Kayako SupportSuite 3.60.04 and earlier allow remote authenticated users to inject arbitrary web script or HTML via the (1) subject parameter and (2) contents parameter (aka body) in an insertquestion action. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/509122/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabiliti
ces: - http://www.securityfocus.com/archive/1/509122/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/55859 - http://www.securityfocus.com/bid/37947 - http://secunia.com/advisories/38322 - http://packetstormsecurity.org/1001-advisories/kayako-xss.txt - http://osvdb.org/61928
CVE ID: CVE-2010-0461 State: PUBLISHED Published: 2010-01-28T20:00:00 Last Updated: 2024-08-07T00:52:19.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the casino (com_casino) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a (1) category or (2) player action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11237 - http://www.securityfocus.com/bid/37938 - http://packetstormsecurity.org/1001-exploits/joomlacasino1-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/55846
CVE ID: CVE-2010-0462 State: PUBLISHED Published: 2010-01-28T20:00:00 Last Updated: 2024-08-07T00:52:18.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows remote authenticated users to have an unspecified impact via a SELECT statement that has a long column name generated with the REPEAT function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/55899 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC65935 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC65933 - http://www.securityfocus.com/bid/37976 - http:
swg1IC65935 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC65933 - http://www.securityfocus.com/bid/37976 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC65922 - http://securitytracker.com/id?1023509 - http://www-01.ibm.com/support/docview.wss?uid=swg21426108 - ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg21432298 - http://intevydis.blogspot.com/2010/01/ibm-db2-97-heap-overflow.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14518
CVE ID: CVE-2010-0463 State: PUBLISHED Published: 2010-01-29T18:00:00 Last Updated: 2024-08-07T00:52:19.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56052 - https://secure.grepular.com/DNS_Prefetch_Exposure_on_Thunderbird_and_Webmail - http://bugs.horde.org/ticket/8836
CVE ID: CVE-2010-0464 State: PUBLISHED Published: 2010-01-29T18:00:00 Last Updated: 2024-08-07T00:52:18.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Roundcube 0.3.1 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:048 - https://secure.grepular.com/DNS_Prefetch_Exposure_on_Thunderbird_and_Webmail - http://trac.roundcube.net/ticket/1486449
CVE ID: CVE-2010-0465 State: PUBLISHED Published: 2010-03-19T19:00:00 Last Updated: 2024-08-07T00:52:18.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the online Documents functionality in SugarCRM 5.2.x before 5.2.0l and 5.5.x before 5.5.0a allows remote authenticated users to inject arbitrary web script or HTML via the Document Name field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/510116/100/0/threaded - http://www.securityfocus.com/bid/38772 - http://secunia.com/advisories/38962 - http://www.sugarcrm.com/crm/support/bugs.html?task=view&caseID=db4489b7-b5a8-4a6d-555b-4
/secunia.com/advisories/38962 - http://www.sugarcrm.com/crm/support/bugs.html?task=view&caseID=db4489b7-b5a8-4a6d-555b-4b9ffa7b4ffa
CVE ID: CVE-2010-0467 State: PUBLISHED Published: 2010-02-02T17:00:00 Last Updated: 2024-08-07T00:52:19.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the ccNewsletter (com_ccnewsletter) component 1.0.5 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter in a ccnewsletter action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.chillcreations.com/en/blog/ccnewsletter-joomla-newsletter/ccnewsletter-106-security-release.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/55953 - http://www.exploit-db.com/exploits/11282 - http://www.exploit
tps://exchange.xforce.ibmcloud.com/vulnerabilities/55953 - http://www.exploit-db.com/exploits/11282 - http://www.exploit-db.com/exploits/11277 - http://secunia.com/advisories/38378 - http://www.securityfocus.com/bid/37987
CVE ID: CVE-2010-0468 State: PUBLISHED Published: 2010-02-02T17:00:00 Last Updated: 2024-08-07T00:52:17.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in utilities/longproc.cfm in PaperThin CommonSpot Content Server allows remote attackers to inject arbitrary web script or HTML via the url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/55955 - http://archives.neohapsis.com/archives/fulldisclosure/2010-01/0601.html - http://www.securityfocus.com/archive/1/509239/100/0/threaded - http://osvdb.org/62087 - http://www.securityfocus.com/bid/37986
CVE ID: CVE-2010-0469 State: PUBLISHED Published: 2010-02-02T17:00:00 Last Updated: 2024-08-07T00:52:18.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Files2Links F2L 3000 appliance 4.0.0, and possibly other versions and models, allows remote attackers to execute arbitrary SQL commands via unspecified parameters to the login page. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38310 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55950 - http://archives.neohapsis.com/archives/fulldisclosure/2010-01/0499.html - http://osvdb.org/61976 - http://packetstormsecurity.org/1001-advisories/DDIVRT-20
ves/fulldisclosure/2010-01/0499.html - http://osvdb.org/61976 - http://packetstormsecurity.org/1001-advisories/DDIVRT-2009-27.txt
CVE ID: CVE-2010-0470 State: PUBLISHED Published: 2010-02-02T17:00:00Z Last Updated: 2024-09-16T20:07:48.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in scvrtsrv.cmd in Comtrend CT-507IT ADSL Router allows remote attackers to inject arbitrary web script or HTML via the srvName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38309 - http://www.securityfocus.com/bid/38004 - http://packetstormsecurity.org/1001-exploits/comtrend-xss.txt
CVE ID: CVE-2010-0471 State: PUBLISHED Published: 2010-02-02T17:00:00Z Last Updated: 2024-09-16T18:08:21.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the comment submission interface (includes/comment.php) in Enano CMS before 1.0.6pl1 allows remote attackers to execute arbitrary SQL commands via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/61974 - http://secunia.com/advisories/38253 - http://enanocms.org/Release_notes/1.0.6pl1
CVE ID: CVE-2010-0472 State: PUBLISHED Published: 2010-02-02T18:00:00 Last Updated: 2024-08-07T00:52:19.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: kuddb2 in Tivoli Monitoring for DB2, as distributed in IBM DB2 9.7 FP1 on Linux, allows remote attackers to cause a denial of service (daemon crash) via a certain byte sequence. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14289 - http://intevydis.blogspot.com/2010/01/ibm-db2-97-kuddb2-dos.html - http://www-01.ibm.com/support/docview.wss?uid=swg1IC68762 - http://www-01.ibm.com/support/docview.wss?uid=swg21432298 - http://
www-01.ibm.com/support/docview.wss?uid=swg1IC68762 - http://www-01.ibm.com/support/docview.wss?uid=swg21432298 - http://www.securityfocus.com/bid/38018
CVE ID: CVE-2010-0475 State: PUBLISHED Published: 2010-05-14T19:24:00 Last Updated: 2024-08-07T00:52:18.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in esp/editUser.esp in the Palo Alto Networks firewall 3.0.x before 3.0.9 and 3.1.x before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the role parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40113 - http://www.jeromiejackson.com/index.php?view=article&id=83:palo-alto-cross-site-scripting-vulnerability&tmpl=component&print=1&layout=default&page= - https://exchange.xforce.ibmcloud.com/vulnerabilitie
cripting-vulnerability&tmpl=component&print=1&layout=default&page= - https://exchange.xforce.ibmcloud.com/vulnerabilities/58624 - http://archives.neohapsis.com/archives/bugtraq/2010-05/0086.html