Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
p://www.vupen.com/english/advisories/2011/0102 - http://secunia.com/advisories/42821 - http://www.vupen.com/english/advisories/2011/0056 - http://www.redhat.com/support/errata/RHSA-2011-0009.html - http://git.gnome.org/browse/evince/commit/?id=d4139205b010ed06310d14284e63114e88ec6de2 - http://www.securitytracker.com/id?1024937 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052910.html - http://www.securityfocus.com/bid/45678 - http://secunia.com/advisories/42847
CVE ID: CVE-2010-2644 State: PUBLISHED Published: 2010-12-22T20:00:00 Last Updated: 2024-08-07T02:39:37.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Service Registry and Repository (WSRR) 7.0.0 before FP1 does not properly implement access control, which allows remote attackers to perform governance actions via unspecified API requests to an EJB interface. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg24026132 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63640 - http://secunia.com/advisories/42742 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ72563
CVE ID: CVE-2010-2645 State: PUBLISHED Published: 2010-07-06T17:00:00 Last Updated: 2024-08-07T02:39:37.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Google Chrome before 5.0.375.99, when WebGL is used, allows remote attackers to cause a denial of service (out-of-bounds read) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2010/07/stable-channel-update.html - http://code.google.com/p/chromium/issues/detail?id=42396 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12090
CVE ID: CVE-2010-2646 State: PUBLISHED Published: 2010-07-06T17:00:00 Last Updated: 2024-08-07T02:39:37.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 5.0.375.99 does not properly isolate sandboxed IFRAME elements, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11981 - http://googlechromereleases.blogspot.com/2010/07/stable-channel-update.html - http://code.google.com/p/chromium/issues/detail?id=42575 - http://code.google.com/p/chromium/issues/detail?id=42980
CVE ID: CVE-2010-2647 State: PUBLISHED Published: 2010-07-06T17:00:00 Last Updated: 2024-08-07T02:39:37.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via an invalid SVG document. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 - http://code.google.com/p/chromium/issues/detail?id=43488 - http://googlechromereleases.blogspot.com/2010/07/stable-channel-update.html - http://www.vupen.com/english/advisories/2010/2722 - http://www.ubuntu.com/usn/USN-1006-1
07/stable-channel-update.html - http://www.vupen.com/english/advisories/2010/2722 - http://www.ubuntu.com/usn/USN-1006-1 - http://secunia.com/advisories/41856 - http://www.vupen.com/english/advisories/2011/0552 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11884
CVE ID: CVE-2010-2648 State: PUBLISHED Published: 2010-07-06T17:00:00 Last Updated: 2024-08-07T02:39:37.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: The implementation of the Unicode Bidirectional Algorithm (aka Bidi algorithm or UBA) in Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 - http://googlechromereleases.blogspot.com/2010/07/stable-channel-update.html - http://www.vupen.com/english/advisories/2010/2722 - http://code.go
ses.blogspot.com/2010/07/stable-channel-update.html - http://www.vupen.com/english/advisories/2010/2722 - http://code.google.com/p/chromium/issues/detail?id=44424 - http://www.ubuntu.com/usn/USN-1006-1 - http://secunia.com/advisories/41856 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11900 - http://www.vupen.com/english/advisories/2011/0552 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html
CVE ID: CVE-2010-2649 State: PUBLISHED Published: 2010-07-06T17:00:00 Last Updated: 2024-08-07T02:39:37.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service (application crash) via an invalid image. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=45164 - http://googlechromereleases.blogspot.com/2010/07/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11974
CVE ID: CVE-2010-2650 State: PUBLISHED Published: 2010-07-06T17:00:00 Last Updated: 2024-08-07T02:39:37.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Google Chrome before 5.0.375.99 has unknown impact and attack vectors, related to an "annoyance with print dialogs." Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2010/07/stable-channel-update.html - http://code.google.com/p/chromium/issues/detail?id=46575 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11438
CVE ID: CVE-2010-2651 State: PUBLISHED Published: 2010-07-06T17:00:00 Last Updated: 2024-08-07T02:39:37.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cascading Style Sheets (CSS) implementation in Google Chrome before 5.0.375.99 does not properly perform style rendering, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2010/07/stable-channel-update.html - http://code.google.com/p/chromium/issues/detail?id=46360 - https://oval.cisecurity.org/repository/search/definition/oval%
ttp://code.google.com/p/chromium/issues/detail?id=46360 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12028
CVE ID: CVE-2010-2652 State: PUBLISHED Published: 2010-07-06T17:00:00 Last Updated: 2024-08-07T02:39:38.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 5.0.375.99 does not properly implement modal dialogs, which allows attackers to cause a denial of service (application crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2010/07/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11118 - http://code.google.com/p/chromium/issues/detail?id=47056
CVE ID: CVE-2010-2653 State: PUBLISHED Published: 2010-10-05T17:00:00Z Last Updated: 2024-09-17T00:21:44.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the hvc_close function in drivers/char/hvc_console.c in the Linux kernel before 2.6.34 allows local users to cause a denial of service or possibly have unspecified other impact by closing a Hypervisor Virtual Console device, related to the hvc_open and hvc_remove functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/04/19/1 - https://bugzilla.redhat.com/show_bug.cgi?id=568621 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.g
/1 - https://bugzilla.redhat.com/show_bug.cgi?id=568621 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=320718ee074acce5ffced6506cb51af1388942aa - http://www.openwall.com/lists/oss-security/2010/03/04/3 - http://www.openwall.com/lists/oss-security/2010/07/01/1 - http://www.openwall.com/lists/oss-security/2010/07/07/5 - http://www.openwall.com/lists/oss-security/2010/04/17/2 - http://www.openwall.com/lists/oss-security/2010/04/18/1 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34 - http://lkml.org/lkml/2010/3/3/207 - http://www.openwall.com/lists/oss-security/2010/07/06/7 - http://patchwork.kernel.org/patch/83353/ - http://www.openwall.com/lists
.openwall.com/lists/oss-security/2010/07/06/7 - http://patchwork.kernel.org/patch/83353/ - http://www.openwall.com/lists/oss-security/2010/04/19/2
CVE ID: CVE-2010-2654 State: PUBLISHED Published: 2010-07-07T18:00:00 Last Updated: 2024-08-07T02:39:37.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities on the IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, allow remote attackers to inject arbitrary web script or HTML via the (1) INDEX or (2) IPADDR parameter to private/cindefn.php, (3) the domain parameter to private/power_management_policy_options.php, the slot parameter to (4) private/pm_temp.php or (5) private/power_module.php, (6) the WEBINDEX parameter to private/blade_leds.php, or (7) the
4) private/pm_temp.php or (5) private/power_module.php, (6) the WEBINDEX parameter to private/blade_leds.php, or (7) the SLOT parameter to private/ipmi_bladestatus.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14237/ - http://osvdb.org/66125 - http://osvdb.org/66128 - http://osvdb.org/66130 - http://www.securityfocus.com/bid/41383 - http://osvdb.org/66127 - http://osvdb.org/66129 - http://osvdb.org/66122 - http://dsecrg.com/pages/vul/show.php?id=154 - http://osvdb.org/66126
CVE ID: CVE-2010-2655 State: PUBLISHED Published: 2010-07-07T18:00:00 Last Updated: 2024-08-07T02:39:37.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in private/file_management.php on the IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, allows remote authenticated users to list arbitrary directories and possibly have unspecified other impact via a .. (dot dot) in the DIR parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14237/ - http://osvdb.org/66124 - http://www.securityfocus.com/bid/41383 - http://d
- http://www.exploit-db.com/exploits/14237/ - http://osvdb.org/66124 - http://www.securityfocus.com/bid/41383 - http://dsecrg.com/pages/vul/show.php?id=154
CVE ID: CVE-2010-2656 State: PUBLISHED Published: 2010-07-07T18:00:00 Last Updated: 2024-08-07T02:39:38.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download (1) logs or (2) core files via direct requests, as demonstrated by a request for private/sdc.tgz. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14237/ - http://www.securityfocus.com/bid/41383 - http://dsecrg.com/pages/vul
nces: - http://www.exploit-db.com/exploits/14237/ - http://www.securityfocus.com/bid/41383 - http://dsecrg.com/pages/vul/show.php?id=154 - http://osvdb.org/66123
CVE ID: CVE-2010-2657 State: PUBLISHED Published: 2010-07-07T18:00:00 Last Updated: 2024-08-07T02:39:37.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 10.60 on Windows and Mac OS X does not properly prevent certain double-click operations from running a program located on a web site, which allows user-assisted remote attackers to execute arbitrary code via a crafted web page that bypasses a dialog. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40375 - http://www.opera.com/docs/changelogs/mac/1060/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11856 - http://www.opera.com/
/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11856 - http://www.opera.com/support/search/view/957/ - http://www.vupen.com/english/advisories/2010/1664 - http://www.opera.com/docs/changelogs/windows/1060/
CVE ID: CVE-2010-2658 State: PUBLISHED Published: 2010-07-07T18:00:00 Last Updated: 2024-08-07T02:39:37.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 10.60 does not properly restrict certain interaction between plug-ins, file inputs, and the clipboard, which allows user-assisted remote attackers to trigger the uploading of arbitrary files via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40375 - http://www.vupen.com/english/advisories/2010/1673 - http://www.opera.com/docs/changelogs/mac/1060/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11862 - http:
ngelogs/mac/1060/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11862 - http://www.vupen.com/english/advisories/2010/1664 - http://www.opera.com/docs/changelogs/unix/1060/ - http://www.opera.com/docs/changelogs/windows/1060/ - http://www.opera.com/support/search/view/958/
CVE ID: CVE-2010-2659 State: PUBLISHED Published: 2010-07-07T18:00:00 Last Updated: 2024-08-07T02:39:37.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 10.50 on Windows, before 10.52 on Mac OS X, and before 10.60 on UNIX platforms makes widget properties accessible to third-party domains, which allows remote attackers to obtain potentially sensitive information via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1673 - http://www.opera.com/docs/changelogs/windows/1050/ - http://www.opera.com/docs/changelogs/mac/1052/ - https://oval.cisecurity.org/repository/search/definition/oval%3A
050/ - http://www.opera.com/docs/changelogs/mac/1052/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11096 - http://www.opera.com/support/search/view/959/ - http://www.opera.com/docs/changelogs/unix/1060/
CVE ID: CVE-2010-2660 State: PUBLISHED Published: 2010-07-07T18:00:00 Last Updated: 2024-08-07T02:39:37.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly restrict certain uses of homograph characters in domain names, which makes it easier for remote attackers to spoof IDN domains via unspecified choices of characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1673 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11603 - http://www.securityfocus.com/bid/40973 - http://www.oper
ository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11603 - http://www.securityfocus.com/bid/40973 - http://www.opera.com/docs/changelogs/unix/1060/ - http://www.vupen.com/english/advisories/2010/1529 - http://www.opera.com/docs/changelogs/mac/1054/ - http://secunia.com/advisories/40250 - http://www.opera.com/support/search/view/961/ - http://www.opera.com/docs/changelogs/windows/1054/
CVE ID: CVE-2010-2661 State: PUBLISHED Published: 2010-07-07T18:00:00 Last Updated: 2024-08-07T02:39:37.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly restrict access to the full pathname of a file selected for upload, which allows remote attackers to obtain potentially sensitive information via unspecified DOM manipulations. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1673 - http://www.securityfocus.com/bid/40973 - http://www.opera.com/support/search/view/960/ - http://www.opera.com/docs/changelogs/unix/1060/ - h
ocus.com/bid/40973 - http://www.opera.com/support/search/view/960/ - http://www.opera.com/docs/changelogs/unix/1060/ - http://www.vupen.com/english/advisories/2010/1529 - http://www.opera.com/docs/changelogs/mac/1054/ - http://secunia.com/advisories/40250 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11669 - http://www.opera.com/docs/changelogs/windows/1054/
CVE ID: CVE-2010-2662 State: PUBLISHED Published: 2010-07-07T18:00:00 Last Updated: 2024-08-07T02:39:38.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 10.60 allows remote attackers to bypass the popup blocker via a javascript: URL and a "fake click." Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/mac/1060/ - http://www.opera.com/docs/changelogs/unix/1060/ - http://www.opera.com/docs/changelogs/windows/1060/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11157
CVE ID: CVE-2010-2663 State: PUBLISHED Published: 2010-07-07T18:00:00 Last Updated: 2024-08-07T02:39:37.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 10.60 allows remote attackers to cause a denial of service (application hang) via an ended event handler that changes the SRC attribute of an AUDIO element. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/mac/1060/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11170 - http://www.opera.com/docs/changelogs/unix/1060/ - http://www.opera.com/docs/changelogs/windows/1060/
CVE ID: CVE-2010-2664 State: PUBLISHED Published: 2010-07-07T18:00:00 Last Updated: 2024-08-07T02:39:38.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 10.60 allows remote attackers to cause a denial of service (application hang) via certain HTML content that has an unclosed SPAN element with absolute positioning. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/mac/1060/ - http://www.opera.com/docs/changelogs/unix/1060/ - http://www.opera.com/docs/changelogs/windows/1060/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11640
CVE ID: CVE-2010-2665 State: PUBLISHED Published: 2010-07-07T18:00:00 Last Updated: 2024-08-07T02:39:37.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Opera before 10.54 on Windows and Mac OS X, and before 10.11 on UNIX platforms, allows remote attackers to inject arbitrary web script or HTML via a data: URI, related to incorrect detection of the "opening site." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/60646 - http://www.securityfocus.com/bid/40973 - http://www.opera.com/docs/changelogs/unix/1011/ - http://www.opera.com/support/kb/view/955/ - http://www.vu
/bid/40973 - http://www.opera.com/docs/changelogs/unix/1011/ - http://www.opera.com/support/kb/view/955/ - http://www.vupen.com/english/advisories/2010/1529 - http://www.opera.com/docs/changelogs/mac/1054/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11362 - http://secunia.com/advisories/40250 - http://www.opera.com/docs/changelogs/windows/1054/
CVE ID: CVE-2010-2666 State: PUBLISHED Published: 2010-07-07T18:00:00 Last Updated: 2024-08-07T02:39:38.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 10.54 on Windows and Mac OS X does not properly enforce permission requirements for widget filesystem access and directory selection, which allows user-assisted remote attackers to create or modify arbitrary files, and consequently execute arbitrary code, via widget File I/O operations. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/support/kb/view/962/ - http://www.securityfocus.com/bid/40973 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3A
tp://www.securityfocus.com/bid/40973 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11950 - http://www.vupen.com/english/advisories/2010/1529 - http://www.opera.com/docs/changelogs/mac/1054/ - http://secunia.com/advisories/40250 - http://www.opera.com/docs/changelogs/windows/1054/
CVE ID: CVE-2010-2667 State: PUBLISHED Published: 2010-07-22T01:00:00 Last Updated: 2024-08-07T02:39:37.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Virtual Appliance Management Infrastructure (VAMI) in VMware Studio 2.0 allow remote authenticated users to execute arbitrary commands via vectors involving (1) the Studio virtual appliance or (2) a virtual appliance created by the Studio virtual appliance. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/60350 - http://www.securityfocus.com/archive/1/512311/100/0/threaded - http://securitytracker.com/id?1024187 - h
ilities/60350 - http://www.securityfocus.com/archive/1/512311/100/0/threaded - http://securitytracker.com/id?1024187 - http://secunia.com/advisories/40507 - http://www.securityfocus.com/bid/41566 - http://www.vupen.com/english/advisories/2010/1791 - http://www.wmware.com/security/advisories/VMSA-2010-0011.html - http://lists.vmware.com/pipermail/security-announce/2010/000101.html
CVE ID: CVE-2010-2668 State: PUBLISHED Published: 2010-07-08T22:00:00 Last Updated: 2024-08-07T02:39:38.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adaptive Micro Systems ALPHA Ethernet Adapter II Web-Manager 3.40.2 allows remote attackers to bypass authentication and read or write configuration files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/512132/100/0/threaded - http://osvdb.org/66015 - http://secunia.com/advisories/40369 - http://archives.neohapsis.com/archives/fulldisclosure/2010-07/0010.html - http://www.securityfocus.com/bid/41288
CVE ID: CVE-2010-2669 State: PUBLISHED Published: 2010-07-08T22:00:00 Last Updated: 2024-08-07T02:39:37.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/editors/text/editor-body.php in Orbis CMS 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the s parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/66021 - http://cross-site-scripting.blogspot.com/2010/07/orbis-102-reflected-xss.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/60087 - http://secunia.com/advisories/40474 - http://www.securityfocus.com/bid/41390
CVE ID: CVE-2010-2670 State: PUBLISHED Published: 2010-07-08T22:00:00 Last Updated: 2024-08-07T02:39:38.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in recipedetail.php in BrotherScripts Recipe Website allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14224 - http://www.vupen.com/english/advisories/2010/1714 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60070 - http://www.securityfocus.com/bid/41365