deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-0345
Published: 2010-01-15
Description: Cross-site scripting (XSS) vulnerability in the Majordomo extension 1.1.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/; http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/
CVE: CVE-2010-0346
Published: 2010-01-15
Description: Cross-site scripting (XSS) vulnerability in the Tip many friends (mimi_tipfriends) extension 0.0.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/; http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/
CVE: CVE-2010-0347
Published: 2010-01-15
Description: Cross-site scripting (XSS) vulnerability in the VD / Geomap (vd_geomap) extension 0.3.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/; http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/
CVE: CVE-2010-0348
Published: 2010-01-15
Description: Directory traversal vulnerability in C3 Corp. WebCalenderC3 0.32 and earlier allows remote attackers to read arbitrary files via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://jvn.jp/en/jp/JVN22247093/index.html; http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000003.html; http://osvdb.org/61630
CVE: CVE-2010-0349
Published: 2010-01-15
Description: Cross-site scripting (XSS) vulnerability in C3 Corp. WebCalenderC3 0.32 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors.  NOTE: this issue could not be reproduced by the vendor, but a patch was provided anyway. The original researcher is reliable.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN33977065/index.html; http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000002.html; http://secunia.com/advisories/38135
CVE: CVE-2010-0350
Published: 2010-01-15
Description: Directory traversal vulnerability in the Photo Book (goof_fotoboek) extension 1.7.14 and earlier for TYPO3 has unknown impact and remote attack vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://typo3.org/extensions/repository/view/goof_fotoboek/1.7.15/; http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/; http://typo3.org/extensions/repository/view/goof_fotoboek/1.7.15/
CVE: CVE-2010-0356
Published: 2010-01-18
Description: Stack-based buffer overflow in the MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX control in MoviePlayer.ocx 6.8.0.0 in Viscom Software Movie Player Pro SDK ActiveX 6.8 allows remote attackers to execute arbitrary code via a long strFontName parameter to the DrawText method.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/38156; http://www.shinnai.net/exploits/X6hU4E0E7P5H3qH5yXrn.txt; http://www.vupen.com/english/advisories/2010/0093
CVE: CVE-2009-4614
Published: 2010-01-18
Description: Multiple PHP remote file inclusion vulnerabilities in Moa Gallery 1.2.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the MOA_PATH parameter to (1) _error_funcs.php, (2) _integrity_funcs.php, (3) _template_component_admin.php, (4) _template_component_gallery.php, (5) _template_parser.php, (6) mod_gallery_funcs.php, (7) mod_image_funcs.php, (8) mod_tag_funcs.php, (9) mod_tag_view.php, (10) mod_upgrade_funcs.php, (11) mod_user_funcs.php, (12) page_admin.php, (13) page_gallery_add.php, (14) page_gallery_view.php, (15) page_image_add.php, (16) page_image_view_full.php, (17) page_login.php, and (18) page_sitemap.php in sources/.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.exploit-db.com/exploits/9522; http://www.vupen.com/english/advisories/2009/2430; http://www.exploit-db.com/exploits/9522
CVE: CVE-2009-4615
Published: 2010-01-18
Description: SQL injection vulnerability in review.php in MYRE Holiday Rental Manager allows remote attackers to execute arbitrary SQL commands via the link_id parameter in a show_review action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/36655; http://www.exploit-db.com/exploits/9630; http://secunia.com/advisories/36655
CVE: CVE-2009-4616
Published: 2010-01-18
Description: Cross-site scripting (XSS) vulnerability in search.php in MYRE Holiday Rental Manager allows remote attackers to inject arbitrary web script or HTML via the cat_id1 parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/36655; http://www.exploit-db.com/exploits/9630; http://secunia.com/advisories/36655
CVE: CVE-2009-4617
Published: 2010-01-18
Description: Multiple SQL injection vulnerabilities in Tourism Script Accommodation Hotel Booking Portal Script allow remote attackers to execute arbitrary SQL commands via the hotel_id parameter to (1) hotel.php, (2) details.php, (3) roomtypes.php, (4) photos.php, (5) map.php, (6) weather.php, (7) reviews.php, and (8) book.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/36661; http://www.exploit-db.com/exploits/9632; https://exchange.xforce.ibmcloud.com/vulnerabilities/53138
CVE: CVE-2009-4618
Published: 2010-01-18
Description: Multiple SQL injection vulnerabilities in Tourism Script Bus Script allow remote attackers to execute arbitrary SQL commands via the sitetext_id parameter to (1) aboutus.php and (2) faq.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/36664; http://www.exploit-db.com/exploits/9633; http://secunia.com/advisories/36664
CVE: CVE-2009-4619
Published: 2010-01-18
Description: SQL injection vulnerability in the Lucy Games (com_lucygames) component 1.5.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a game action to index.php.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/9614; http://www.securityfocus.com/bid/36334; https://exchange.xforce.ibmcloud.com/vulnerabilities/53117
CVE: CVE-2009-4620
Published: 2010-01-18
Description: SQL injection vulnerability in the Joomloc (com_joomloc) component 1.0 for Joomla allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit task to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/57885; http://secunia.com/advisories/36654; http://www.exploit-db.com/exploits/9604
CVE: CVE-2009-4621
Published: 2010-01-18
Description: SQL injection vulnerability in the JiangHu Inn plugin 1.1 and earlier for Discuz! allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action to forummission.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/9576; http://www.securityfocus.com/bid/36222; http://www.vupen.com/english/advisories/2009/2525
CVE: CVE-2009-4622
Published: 2010-01-18
Description: PHP remote file inclusion vulnerability in admin/admin_news_bot.php in Drunken:Golem Gaming Portal 0.5.1 alpha 2 allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter, a different vector than CVE-2007-0572.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.exploit-db.com/exploits/9635; https://exchange.xforce.ibmcloud.com/vulnerabilities/53136; http://www.exploit-db.com/exploits/9635
CVE: CVE-2009-4623
Published: 2010-01-18
Description: Multiple PHP remote file inclusion vulnerabilities in Advanced Comment System 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the ACS_path parameter to (1) index.php and (2) admin.php in advanced_comment_system/. NOTE: this might only be a vulnerability when the administrator has not followed installation instructions in install.php. NOTE: this might be the same as CVE-2020-35598.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/36643; http://www.exploit-db.com/exploits/9623; http://secunia.com/advisories/36643
CVE: CVE-2009-4624
Published: 2010-01-18
Description: SQL injection vulnerability in download.php in Nicecoder iDesk allows remote attackers to execute arbitrary SQL commands via the cat_id parameter, a different vector than CVE-2005-3843.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/36659; http://www.exploit-db.com/exploits/9631; http://www.securityfocus.com/bid/36348
CVE: CVE-2009-4625
Published: 2010-01-18
Description: SQL injection vulnerability in the updateOnePage function in components/com_bfsurvey_pro/controller.php in BF Survey Pro Free (com_bfsurvey_profree) 1.2.4, and other versions before 1.2.6, a component for Joomla!, allows remote attackers to execute arbitrary SQL commands via the table parameter in an updateOnePage action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/57883; http://secunia.com/advisories/36657; http://www.exploit-db.com/exploits/9601
CVE: CVE-2009-4626
Published: 2010-01-18
Description: Directory traversal vulnerability in menu.php in phpNagios 1.2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the conf[lang] parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.exploit-db.com/exploits/9611; http://www.vupen.com/english/advisories/2009/2615; https://exchange.xforce.ibmcloud.com/vulnerabilities/53119
CVE: CVE-2009-4627
Published: 2010-01-18
Description: Directory traversal vulnerability in sources/_template_parser.php in Moa Gallery 1.2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the p_filename parameter, a different issue than CVE-2009-4614.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://www.exploit-db.com/exploits/9525; http://www.vupen.com/english/advisories/2009/2430; https://exchange.xforce.ibmcloud.com/vulnerabilities/52778
CVE: CVE-2009-4628
Published: 2010-01-18
Description: SQL injection vulnerability in the TemplatePlaza.com TPDugg (com_tpdugg) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a tags action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://evilc0de.blogspot.com/2009/09/tpdugg-joomla-component-11-blind-sql.html; http://osvdb.org/57894; http://secunia.com/advisories/36656
CVE: CVE-2008-7251
Published: 2010-01-19
Description: libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 creates a temporary directory with 0777 permissions, which has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html; http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/QA_2_11/phpMyAdmin/libraries/File.class.php?r1=11536&r2=11535&pathrev=11536; http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin?view=rev&revision=11536
CVE: CVE-2008-7252
Published: 2010-01-19
Description: libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 uses predictable filenames for temporary files, which has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-310
References: http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html; http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/QA_2_11/phpMyAdmin/libraries/File.class.php?r1=11528&r2=11527&pathrev=11528; http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin?view=rev&revision=11528
CVE: CVE-2009-3739
Published: 2010-01-19
Description: Multiple unspecified vulnerabilities on the Rockwell Automation AB Micrologix 1100 and 1400 controllers allow remote attackers to obtain privileged access or cause a denial of service (halt) via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://www.securityfocus.com/archive/1/508946/100/0/threaded; http://www.securityfocus.com/archive/1/508946/100/0/threaded
CVE: CVE-2009-4012
Published: 2010-01-19
Description: Multiple integer overflows in LibThai before 0.1.13 might allow context-dependent attackers to execute arbitrary code via long strings that trigger heap-based buffer overflows, related to (1) thbrk/thbrk.c and (2) thwbrk/thwbrk.c.  NOTE: some of these details are obtained from third party information.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://linux.thai.net/node/184; http://linux.thai.net/svn/software/libthai/tags/r_0_1_13/ChangeLog; http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html
CVE: CVE-2009-4141
Published: 2010-01-19
Description: Use-after-free vulnerability in the fasync_helper function in fs/fcntl.c in the Linux kernel before 2.6.33-rc4-git1 allows local users to gain privileges via vectors that include enabling O_ASYNC (aka FASYNC or FIOASYNC) on a locked file, and then closing this file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-399
References: http://archives.neohapsis.com/archives/fulldisclosure/2010-01/0252.html; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=53281b6d34d44308372d16acb7fb5327609f68b6; http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html
CVE: CVE-2009-4605
Published: 2010-01-19
Description: scripts/setup.php (aka the setup script) in phpMyAdmin 2.11.x before 2.11.10 calls the unserialize function on the values of the (1) configuration and (2) v[0] parameters, which might allow remote attackers to conduct cross-site request forgery (CSRF) attacks via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html; http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/QA_2_11/phpMyAdmin/scripts/setup.php?r1=13149&r2=13148&pathrev=13149; http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin?view=rev&revision=13149
CVE: CVE-2010-0007
Published: 2010-01-19
Description: net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure arbitrary network-traffic filtering via a modified ebtables application.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=dce766af541f6605fa9889892c0280bab31c66ab; http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034250.html; http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00008.html
CVE: CVE-2010-0036
Published: 2010-01-20
Description: Buffer overflow in CoreAudio in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MP4 audio file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html; http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html; http://secunia.com/advisories/38241
CVE: CVE-2010-0037
Published: 2010-01-20
Description: Buffer overflow in Image RAW in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted DNG image.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html; http://secunia.com/advisories/38241; http://support.apple.com/kb/HT4004
CVE: CVE-2010-0357
Published: 2010-01-20
Description: Cross-site scripting (XSS) vulnerability in the Login page in IBM Lotus Web Content Management (WCM) 6.0.1.4, 6.0.1.5, and 6.0.1.6 before iFix 32; and 6.1.0.1 and 6.1.0.2 before iFix 24; for WebSphere Portal allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/38174; http://securitytracker.com/id?1023463; http://www-01.ibm.com/support/docview.wss?uid=swg1PM02704
CVE: CVE-2010-0358
Published: 2010-01-20
Description: Heap-based buffer overflow in the server in IBM Lotus Domino 7 and 8.5 FP1 allows remote attackers to cause a denial of service (daemon exit) and possibly have unspecified other impact via a long string in a crafted LDAP message to a TCP port, a different vulnerability than CVE-2009-3087.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://intevydis.blogspot.com/2010/01/lotus-domino-7-probably-8-ldap-heap.html; http://intevydis.com/vd-list.shtml; http://securitytracker.com/id?1023456
CVE: CVE-2010-0359
Published: 2010-01-20
Description: Buffer overflow in the SSLv2 support in Zeus Web Server before 4.3r5 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long string in an invalid Client Hello message.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://intevydis.blogspot.com/2010/01/zeus-web-server-ssl2clienthello.html; http://intevydis.com/vd-list.shtml; http://secunia.com/advisories/38056
CVE: CVE-2010-0360
Published: 2010-01-20
Description: Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to overwrite memory locations in the heap, and discover the contents of memory locations, via a malformed HTTP TRACE request that includes a long URI and many empty headers, related to an "overflow." NOTE: this might overlap CVE-2010-0272 and CVE-2010-0273.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://intevydis.blogspot.com/2010/01/sun-java-system-web-server-70u7-trace.html; http://intevydis.com/vd-list.shtml; http://intevydis.blogspot.com/2010/01/sun-java-system-web-server-70u7-trace.html
CVE: CVE-2010-0361
Published: 2010-01-20
Description: Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via a long URI in an HTTP OPTIONS request.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://intevydis.blogspot.com/2010/01/sun-java-system-web-server-70u7-webdav.html; http://intevydis.blogspot.com/2010/01/sun-java-system-web-server-70u7-webdav.html
CVE: CVE-2010-0362
Published: 2010-01-20
Description: Zeus Web Server before 4.3r5 does not use random transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES; http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES
CVE: CVE-2010-0363
Published: 2010-01-20
Description: Cross-site scripting (XSS) vulnerability in Zeus Web Server before 4.3r5, when SSL is enabled for the admin server, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2002-1785.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES; http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES
CVE: CVE-2009-3999
Published: 2010-01-20
Description: Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code via a long fileName parameter.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1959&w=2; http://secunia.com/advisories/37280; http://secunia.com/secunia_research/2009-47/
CVE: CVE-2009-4000
Published: 2010-01-20
Description: Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite arbitrary files, and execute arbitrary code, via directory traversal sequences in the fileName parameter.
CVSS Score: 10.0 (HIGH)
CWE: CWE-22
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1959&w=2; http://secunia.com/advisories/37280; http://secunia.com/secunia_research/2009-48/
CVE: CVE-2009-4002
Published: 2010-01-21
Description: Heap-based buffer overflow in Adobe Shockwave Player before 11.5.6.606 allows remote attackers to execute arbitrary code via a crafted 3D model in a Shockwave file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/37888; http://secunia.com/secunia_research/2009-61/; http://securitytracker.com/id?1023481
CVE: CVE-2009-4003
Published: 2010-01-21
Description: Multiple integer overflows in Adobe Shockwave Player before 11.5.6.606 allow remote attackers to execute arbitrary code via (1) an unspecified block type in a Shockwave file, leading to a heap-based buffer overflow; and might allow remote attackers to execute arbitrary code via (2) an unspecified 3D block in a Shockwave file, leading to memory corruption; or (3) a crafted 3D model in a Shockwave file, leading to heap memory corruption.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://secunia.com/advisories/37888; http://secunia.com/secunia_research/2009-62/; http://secunia.com/secunia_research/2009-63/
CVE: CVE-2010-0232
Published: 2010-01-21
Description: The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly validate certain BIOS calls, which allows local users to gain privileges by crafting a VDM_TIB data structure in the Thread Environment Block (TEB), and then calling the NtVdmControl function to start the Windows Virtual DOS Machine (aka NTVDM) subsystem, leading to improperly handled exceptions involving the #GP trap handler (nt!KiTrap0D), aka "Windows Kernel Exception Handler Vulnerability."
CVSS Score: 7.8 (HIGH)
References: http://blogs.technet.com/msrc/archive/2010/01/20/security-advisory-979682-released.aspx; http://lists.immunitysec.com/pipermail/dailydave/2010-January/006000.html; http://lock.cmpxchg8b.com/c0af0967d904cef2ad4db766a00bc6af/KiTrap0D.zip
CVE: CVE-2010-0364
Published: 2010-01-21
Description: Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg file with a crafted Advanced SubStation Alpha Subtitle (.ass) file, probably involving the Dialogue field.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.exploit-db.com/exploits/11174; http://www.securityfocus.com/bid/37832; https://exchange.xforce.ibmcloud.com/vulnerabilities/55717
CVE: CVE-2010-0365
Published: 2010-01-21
Description: Cross-site scripting (XSS) vulnerability in search.php in BitScripts Bits Video Script 2.04 and 2.05 Gold Beta allows remote attackers to inject arbitrary web script or HTML via the order parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/61827; http://secunia.com/advisories/38252; http://www.packetstormsecurity.com/1001-exploits/bitsvs-xssuploadrfi.txt
CVE: CVE-2010-0366
Published: 2010-01-21
Description: Multiple unrestricted file upload vulnerabilities in (1) register.php and (2) addvideo.php in BitScripts Bits Video Script 2.04 and 2.05 Gold Beta allow remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/61826; http://secunia.com/advisories/38252; http://www.packetstormsecurity.com/1001-exploits/bitsvs-xssuploadrfi.txt
CVE: CVE-2010-0367
Published: 2010-01-21
Description: Multiple PHP remote file inclusion vulnerabilities in BitScripts Bits Video Script 2.05 Gold Beta, and possibly 2.04, allow remote attackers to execute arbitrary PHP code via a URL in the rowptem[template] parameter to (1) showcasesearch.php and (2) showcase2search.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.packetstormsecurity.com/1001-exploits/bitsvs-xssuploadrfi.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/55740; http://www.packetstormsecurity.com/1001-exploits/bitsvs-xssuploadrfi.txt