Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-0765 State: PUBLISHED Published: 2010-03-02T18:00:00 Last Updated: 2024-08-07T00:59:39.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: fipsForum 2.6 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for _database/forumFips.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1001-exploits/fipsforum-disclose.txt - http://www.exploit-db.com/exploits/11361 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56183
CVE ID: CVE-2010-0766 State: PUBLISHED Published: 2010-03-03T19:00:00 Last Updated: 2024-08-07T00:59:39.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the Swap4 function in valet4.dll in Luxology Modo 401 allows user-assisted remote attackers to execute arbitrary code via a .LXO file containing a CHNL subchunk associated with an invalid length. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/509810/100/0/threaded - http://www.securityfocus.com/archive/1/509843/100/0/threaded - http://www.coresecurity.com/content/luxology-modo-lxo-vulnerability - http://secunia.com/advisories/38784 - http://osvdb.org/
//www.coresecurity.com/content/luxology-modo-lxo-vulnerability - http://secunia.com/advisories/38784 - http://osvdb.org/62669 - http://www.securityfocus.com/bid/38460
CVE ID: CVE-2010-0768 State: PUBLISHED Published: 2010-04-01T19:00:00 Last Updated: 2024-08-07T00:59:39.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 allows remote attackers to inject arbitrary web script or HTML via the URI. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39140 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK97376 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57164 - http://www.securityfocus.com/bid/39051
CVE ID: CVE-2010-0769 State: PUBLISHED Published: 2010-04-01T19:00:00 Last Updated: 2024-08-07T00:59:39.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 does not properly define wsadmin scripting J2CConnectionFactory objects, which allows local users to discover a KeyRingPassword password by reading a cleartext field in the resources.xml file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57185 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK95089 - http://secunia.com/advisories/39140
CVE ID: CVE-2010-0770 State: PUBLISHED Published: 2010-04-01T19:00:00 Last Updated: 2024-08-07T00:59:39.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.9 allows remote authenticated users to cause a denial of service (ORB ListenerThread hang) by aborting an SSL handshake. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39140 - http://www.securityfocus.com/bid/39056 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57182 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK93653
CVE ID: CVE-2010-0771 State: REJECTED Published: 2017-07-17T15:00:00 Last Updated: 2017-07-17T14:57:01 Description: No description available.
CVE ID: CVE-2010-0772 State: PUBLISHED Published: 2010-04-27T15:00:00 Last Updated: 2024-08-07T00:59:39.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the channel process in IBM WebSphere MQ 7.0 before 7.0.1.2 allows remote authenticated users to cause a denial of service (daemon crash) via "incorrect channel control data." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/58039 - http://securitytracker.com/id?1023961 - http://www.vupen.com/english/advisories/2010/1083 - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ68621
CVE ID: CVE-2010-0774 State: PUBLISHED Published: 2010-05-17T22:00:00 Last Updated: 2024-08-07T00:59:39.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) JAX-RPC WS-Security 1.0 and (2) JAX-WS runtime implementations in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.11 do not properly handle WebServices PKCS#7 and PKIPath tokens, which allows remote attackers to bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/58554 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK96427
CVE ID: CVE-2010-0775 State: PUBLISHED Published: 2010-05-17T22:00:00 Last Updated: 2024-08-07T00:59:39.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.11 allows remote attackers to cause a denial of service (memory consumption and daemon crash) via a crafted request, related to the nodeagent and Deployment Manager components. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/58555 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM05663
CVE ID: CVE-2010-0776 State: PUBLISHED Published: 2010-05-17T22:00:00 Last Updated: 2024-08-07T00:59:39.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Container in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.43, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.11 does not properly handle chunked transfer encoding during a call to response.sendRedirect, which allows remote attackers to cause a denial of service via a GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM08760 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58556
CVE ID: CVE-2010-0777 State: PUBLISHED Published: 2010-05-17T22:00:00 Last Updated: 2024-08-07T00:59:39.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Container in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.43, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.11 does not properly handle long filenames and consequently sends an incorrect file in some responses, which allows remote attackers to obtain sensitive information by reading the retrieved file. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27007951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58557 - http://secunia.com/advisori
t/docview.wss?uid=swg27007951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58557 - http://secunia.com/advisories/39838 - http://www.securityfocus.com/bid/40277 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM06111 - http://www.vupen.com/english/advisories/2010/1200
CVE ID: CVE-2010-0778 State: PUBLISHED Published: 2010-06-24T17:00:00 Last Updated: 2024-08-07T00:59:39.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.33 and 7.0 before 7.0.0.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg1PM11778 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59646
CVE ID: CVE-2010-0779 State: PUBLISHED Published: 2010-06-24T17:00:00 Last Updated: 2024-08-07T00:59:39.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.43, 6.1 before 6.1.0.33, and 7.0 before 7.0.0.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/59647 - http://www-1.ibm.com/support/docview.wss?uid=swg1PM09250
CVE ID: CVE-2010-0780 State: PUBLISHED Published: 2011-10-29T10:00:00 Last Updated: 2024-08-07T00:59:39.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere MQ 7.x before 7.0.1.4 allows remote attackers to cause a denial of service (disk consumption) via multiple connection attempts to a stopped queue manager. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27014224 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60638 - http://www.ibm.com/support/docview.wss?uid=swg1IZ75124
CVE ID: CVE-2010-0781 State: PUBLISHED Published: 2010-09-21T19:00:00 Last Updated: 2024-08-07T00:59:39.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.33 allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27007951 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM11807 - http://secunia.com/advisories/41722 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61890
CVE ID: CVE-2010-0782 State: PUBLISHED Published: 2010-10-20T17:00:00 Last Updated: 2024-08-07T00:59:39.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere MQ 6.x before 6.0.2.10 and 7.x before 7.0.1.3 allows remote attackers to spoof X.509 certificate authentication, and send or receive channel messages, via a crafted Subject Distinguished Name (DN) value in a certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27014224 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60018 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ68707
CVE ID: CVE-2010-0783 State: PUBLISHED Published: 2010-11-09T20:00:00 Last Updated: 2024-08-07T00:59:39.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/62947 - http://secunia.com/advisories/42136 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM14251 - http://secunia.com/advisories/41722 - http://www-01.ibm.com/sup
p://www-01.ibm.com/support/docview.wss?uid=swg1PM14251 - http://secunia.com/advisories/41722 - http://www-01.ibm.com/support/docview.wss?uid=swg27004980 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463 - http://www.osvdb.org/69007 - http://securitytracker.com/id?1024686
CVE ID: CVE-2010-0784 State: PUBLISHED Published: 2010-11-09T20:00:00 Last Updated: 2024-08-07T00:59:39.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41722 - http://www-01.ibm.com/support/docview.wss?uid=swg27004980 - http://www.vupen.com/english/advisories/2010/2595 - http://www.securityfocus.com/bid/43874 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62
/advisories/2010/2595 - http://www.securityfocus.com/bid/43874 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62948 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM23872 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM17046
CVE ID: CVE-2010-0785 State: PUBLISHED Published: 2010-11-09T20:00:00 Last Updated: 2024-08-07T00:59:39.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM18909 - http://secunia.com/advisories/41722 - http://www-01.ibm.com/support/docview.wss?uid=swg27004980 - http://www.vupen.com/english/advisories/2010/259
ies/41722 - http://www-01.ibm.com/support/docview.wss?uid=swg27004980 - http://www.vupen.com/english/advisories/2010/2595 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62949 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM23874 - http://www.securityfocus.com/bid/43875
CVE ID: CVE-2010-0786 State: PUBLISHED Published: 2010-11-09T20:00:00 Last Updated: 2024-08-07T00:59:39.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Services Security component in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.13 does not properly implement the Java API for XML Web Services (aka JAX-WS), which allows remote attackers to cause a denial of service (data corruption) via a crafted JAX-WS request that leads to incorrectly encoded data. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/62950 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM13777 - http://www-01.ibm.com/supp
cloud.com/vulnerabilities/62950 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM13777 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463
CVE ID: CVE-2010-0787 State: PUBLISHED Published: 2010-03-02T18:00:00 Last Updated: 2024-08-07T00:59:39.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38286 - http://www.vupen.com/english/advisories/2010/1062 - http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034470.html - http://secunia.com/advisories/38308 - https://b
.fedoraproject.org/pipermail/package-announce/2010-January/034470.html - http://secunia.com/advisories/38308 - https://bugzilla.redhat.com/show_bug.cgi?id=558833 - http://security.gentoo.org/glsa/glsa-201206-29.xml - http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034444.html - http://www.securityfocus.com/bid/39898 - http://git.samba.org/?p=samba.git%3Ba=commit%3Bh=a0c31ec1c8d1220a5884e40d9ba6b191a04a24d5 - http://www.ubuntu.com/usn/USN-893-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:090 - https://bugzilla.redhat.com/show_bug.cgi?id=532940 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://www.securityfocus.com/bi
id=532940 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://www.securityfocus.com/bid/37992 - http://git.samba.org/?p=samba.git%3Ba=commit%3Bh=3ae5dac462c4ed0fb2cd94553583c56fce2f9d80 - http://secunia.com/advisories/38357 - https://bugzilla.samba.org/show_bug.cgi?id=6853 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55944
CVE ID: CVE-2010-0788 State: PUBLISHED Published: 2010-03-02T18:00:00 Last Updated: 2024-08-07T00:59:39.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: ncpfs 2.2.6 allows local users to cause a denial of service, obtain sensitive information, or possibly gain privileges via symlink attacks involving the (1) ncpmount and (2) ncpumount programs. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38371 - http://seclists.org/fulldisclosure/2010/Mar/122 - https://bugzilla.redhat.com/show_bug.cgi?id=558833 - http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html - http://lists.fedoraproject.org/pipermail/package-announ
.opensuse.org/opensuse-security-announce/2010-06/msg00001.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034422.html - http://secunia.com/advisories/38327 - http://www.securityfocus.com/archive/1/509893/100/0/threaded - http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034403.html - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html - https://bugzilla.redhat.com/show_bug.cgi?id=532940 - http://www.securityfocus.com/bid/38563 - http://www.securityfocus.com/archive/1/509894/100/0/threaded
CVE ID: CVE-2010-0789 State: PUBLISHED Published: 2010-03-02T18:00:00 Last Updated: 2024-08-07T00:59:39.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: fusermount in FUSE before 2.7.5, and 2.8.x before 2.8.2, allows local users to unmount an arbitrary FUSE filesystem share via a symlink attack on a mountpoint. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/projects/fuse/files/ReleaseNotes/fuse-2.8.3.html/view - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034580.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567633 - http://www.vupen.com/english/advisories/2010/1107 - http://www.debian.org/security/2
/cgi-bin/bugreport.cgi?bug=567633 - http://www.vupen.com/english/advisories/2010/1107 - http://www.debian.org/security/2010/dsa-1989 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55945 - https://bugzilla.redhat.com/show_bug.cgi?id=558833 - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html - http://secunia.com/advisories/38261 - http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html - https://bugzilla.redhat.com/show_bug.cgi?id=532940 - http://secunia.com/advisories/38359 - http://secunia.com/advisories/38287 - http://secunia.com/advisories/38437 - http://www.ubun
cunia.com/advisories/38359 - http://secunia.com/advisories/38287 - http://secunia.com/advisories/38437 - http://www.ubuntu.com/usn/USN-892-1 - http://sourceforge.net/projects/fuse/files/fuse-2.X/2.7.5/fuse-2.7.5.tar.gz/download - http://www.securityfocus.com/bid/37983 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034518.html
CVE ID: CVE-2010-0790 State: PUBLISHED Published: 2010-03-09T19:00:00 Last Updated: 2024-08-07T00:59:39.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: sutil/ncpumount.c in ncpumount in ncpfs 2.2.6 produces certain detailed error messages about the results of privileged file-access attempts, which allows local users to determine the existence of arbitrary files via the mountpoint name. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2010/Mar/122 - http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html - http://www.securityfocus.com/archive/1/509893/100/0/threaded - http://lists.opensuse.org/opensuse-secur
/msg00001.html - http://www.securityfocus.com/archive/1/509893/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html - http://www.securityfocus.com/bid/38563 - http://www.securityfocus.com/archive/1/509894/100/0/threaded
CVE ID: CVE-2010-0791 State: PUBLISHED Published: 2010-03-09T19:00:00 Last Updated: 2024-08-07T00:59:39.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) ncpmount, (2) ncpumount, and (3) ncplogin programs in ncpfs 2.2.6 do not properly create lock files, which allows local users to cause a denial of service (application failure) via unspecified vectors that trigger the creation of a /etc/mtab~ file that persists after the program exits. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2010/Mar/122 - http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html - http://www.securityfocus.com/archive/1/509893
tp://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html - http://www.securityfocus.com/archive/1/509893/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html - http://www.securityfocus.com/bid/38563 - http://www.securityfocus.com/archive/1/509894/100/0/threaded
CVE ID: CVE-2010-0792 State: PUBLISHED Published: 2010-03-05T19:00:00 Last Updated: 2024-08-07T00:59:39.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: fcrontab in fcron before 3.0.5 allows local users to read arbitrary files via a symlink attack on an unspecified file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0730 - http://secunia.com/advisories/39195 - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/038150.html - http://www.securityfocus.com/archive/1/509873/100/0/threaded - http://securitytracker.com/id?1023677 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56680 - http://www.
eaded - http://securitytracker.com/id?1023677 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56680 - http://www.osvdb.org/62718 - http://fcron.free.fr/ - http://seclists.org/fulldisclosure/2010/Mar/97 - http://secunia.com/advisories/38796 - http://www.securityfocus.com/bid/38531
CVE ID: CVE-2010-0793 State: PUBLISHED Published: 2010-03-16T19:00:00 Last Updated: 2024-08-07T00:59:39.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in BarnOwl before 1.5.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted CC: header. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1218 - http://barnowl.mit.edu/wiki/barnowl-1.5.1-announce - http://www.debian.org/security/2010/dsa-2049 - http://secunia.com/advisories/39908
CVE ID: CVE-2010-0795 State: PUBLISHED Published: 2010-03-02T20:00:00 Last Updated: 2024-08-07T00:59:39.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JE Event Calendars (com_jeeventcalendar) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the event_id parameter in an event action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/62038 - http://www.exploit-db.com/exploits/11292 - http://secunia.com/advisories/38408 - http://www.securityfocus.com/bid/38012 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56008
CVE ID: CVE-2010-0796 State: PUBLISHED Published: 2010-03-02T20:00:00 Last Updated: 2024-08-07T00:59:39.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JE Quiz (com_jequizmanagement) component 1.b01 for Joomla! allows remote attackers to execute arbitrary SQL commands via the eid parameter in a question action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/62039 - http://www.exploit-db.com/exploits/11287 - http://secunia.com/advisories/38412 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56009 - http://www.securityfocus.com/bid/38032 - http://packetstormsecurity.org/1001-exploits/jooml
.com/vulnerabilities/56009 - http://www.securityfocus.com/bid/38032 - http://packetstormsecurity.org/1001-exploits/joomlajequiz-sql.txt