deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-2512
Published: 2010-06-28
Description: SQL injection vulnerability in customprofile.php in 2daybiz Matrimonial Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/40338; http://www.exploit-db.com/exploits/14008; http://www.osvdb.org/65712
CVE: CVE-2010-2513
Published: 2010-06-28
Description: SQL injection vulnerability in the JE Ajax Event Calendar (com_jeajaxeventcalendar) component 1.0.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1006-exploits/joomlajeajax-sql.txt; http://www.exploit-db.com/exploits/13997; http://www.securityfocus.com/bid/41058
CVE: CVE-2010-2514
Published: 2010-06-28
Description: Cross-site scripting (XSS) vulnerability in the JFaq (com_jfaq) component 1.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the question parameter in an add2 action to index.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/65694; http://packetstormsecurity.org/1006-exploits/joomlajfaq-sqlxss.txt; http://secunia.com/advisories/40219
CVE: CVE-2010-2515
Published: 2010-06-28
Description: Multiple SQL injection vulnerabilities in index.php in the JFaq (com_jfaq) component 1.2 for Joomla!, when magic_quotes_gpc is disabled, allow (1) remote attackers to execute arbitrary SQL commands via the id parameter, and (2) remote authenticated users with "Public Front-end" permissions to execute arbitrary SQL commands via the titlu parameter (title field).  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://osvdb.org/65695; http://packetstormsecurity.org/1006-exploits/joomlajfaq-sqlxss.txt; http://secunia.com/advisories/40219
CVE: CVE-2008-7257
Published: 2010-06-29
Description: CRLF injection vulnerability in +webvpn+/index.html in WebVPN on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to inject arbitrary HTTP headers as demonstrated by a redirect attack involving a %0d%0aLocation%3a sequence in a URI, or conduct HTTP response splitting attacks via unspecified vectors, aka Bug ID CSCsr09163.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://securitytracker.com/id?1024155; http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html; http://www.secureworks.com/ctu/advisories/SWRX-2010-001
CVE: CVE-2009-4910
Published: 2010-06-29
Description: Cross-site scripting (XSS) vulnerability in the WebVPN portal on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCsq78418.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html; http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
CVE: CVE-2009-4911
Published: 2010-06-29
Description: Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (device crash) via vectors involving SSL VPN and PPPoE transactions, aka Bug ID CSCsm77958.
CVSS Score: 7.8 (HIGH)
References: http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html; http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
CVE: CVE-2009-4912
Published: 2010-06-29
Description: Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) complete an SSL handshake with an HTTPS client even if this client is unauthorized, which might allow remote attackers to bypass intended access restrictions via an HTTPS session, aka Bug ID CSCso10876.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html; http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
CVE: CVE-2009-4913
Published: 2010-06-29
Description: The IPv6 implementation on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) exposes IP services on the "far side of the box," which might allow remote attackers to bypass intended access restrictions via IPv6 packets, aka Bug ID CSCso58622.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html; http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
CVE: CVE-2009-4914
Published: 2010-06-29
Description: Memory leak on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (memory consumption) via Subject Alternative Name fields in an X.509 certificate, aka Bug ID CSCsq17879.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html; http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
CVE: CVE-2009-4915
Published: 2010-06-29
Description: Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (device reload) via unknown network traffic, as demonstrated by a "connection stress test," aka Bug ID CSCsq68451.
CVSS Score: 7.8 (HIGH)
References: http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html; http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
CVE: CVE-2009-4916
Published: 2010-06-29
Description: Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote authenticated users to cause a denial of service (console hang) via a login action during failover replication, aka Bug ID CSCsq80095.
CVSS Score: 4.0 (MEDIUM)
References: http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html; http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
CVE: CVE-2009-4917
Published: 2010-06-29
Description: Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (device reload) via a high volume of SIP traffic, aka Bug ID CSCsr65901.
CVSS Score: 7.8 (HIGH)
References: http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html; http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
CVE: CVE-2009-4918
Published: 2010-06-29
Description: Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allow remote attackers to cause a denial of service (IKE process hang) via malformed NAT-T packets, aka Bug ID CSCsr74439.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html; http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
CVE: CVE-2009-4919
Published: 2010-06-29
Description: Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to have an unspecified impact via long IKE attributes, aka Bug ID CSCsu43121.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html; http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
CVE: CVE-2009-4920
Published: 2010-06-29
Description: Unspecified vulnerability in CTM on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software 8.1(2) allows remote attackers to cause a denial of service (watchdog traceback) via a large amount of small-packet data, aka Bug ID CSCsu11412.
CVSS Score: 7.8 (HIGH)
References: http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html; http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
CVE: CVE-2009-4921
Published: 2010-06-29
Description: Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allow remote attackers to cause a denial of service (traceback) via malformed TCP packets, aka Bug ID CSCsm84110.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html; http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
CVE: CVE-2009-4922
Published: 2010-06-29
Description: Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote authenticated users to cause a denial of service (traceback) by establishing many IPsec L2L tunnels from remote peer IP addresses, aka Bug ID CSCso15583.
CVSS Score: 6.8 (MEDIUM)
References: http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html; http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
CVE: CVE-2009-4923
Published: 2010-06-29
Description: Unspecified vulnerability in the DTLS implementation on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (traceback) via TLS fragments, aka Bug ID CSCso53162.
CVSS Score: 7.8 (HIGH)
References: http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html; http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html
CVE: CVE-2010-2451
Published: 2010-06-29
Description: Multiple format string vulnerabilities in the DCC functionality in KVIrc 3.4 and 4.0 have unspecified impact and remote attack vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-134
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043601.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043629.html; http://lists.omnikron.net/pipermail/kvirc/2010-May/000867.html
CVE: CVE-2010-2452
Published: 2010-06-29
Description: Directory traversal vulnerability in the DCC functionality in KVIrc 3.4 and 4.0 allows remote attackers to overwrite arbitrary files via unknown vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-22
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043601.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043629.html; http://lists.omnikron.net/pipermail/kvirc/2010-May/000867.html
CVE: CVE-2010-2516
Published: 2010-06-29
Description: Multiple SQL injection vulnerabilities in 2daybiz Multi Level Marketing (MLM) Software allow remote attackers to execute arbitrary SQL commands via the username parameter to (1) index.php and (2) admin/index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/40340; http://secunia.com/advisories/40340
CVE: CVE-2010-1205
Published: 2010-06-30
Description: Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: http://blackberry.com/btsc/KB27244; http://code.google.com/p/chromium/issues/detail?id=45983; http://googlechromereleases.blogspot.com/2010/07/stable-channel-update.html
CVE: CVE-2010-1285
Published: 2010-06-30
Description: Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified manipulations involving the newclass (0x58) operator and an "invalid pointer vulnerability" that triggers memory corruption, a different vulnerability than CVE-2010-2168 and CVE-2010-2201.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20, CWE-399
References: http://www.adobe.com/support/security/bulletins/apsb10-15.html; http://www.securityfocus.com/archive/1/512099; http://www.securityfocus.com/bid/41232
CVE: CVE-2010-1295
Published: 2010-06-30
Description: Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2202, CVE-2010-2207, CVE-2010-2209, CVE-2010-2210, CVE-2010-2211, and CVE-2010-2212.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb10-15.html; http://www.securityfocus.com/bid/41230; http://www.securitytracker.com/id?1024159
CVE: CVE-2010-1520
Published: 2010-06-30
Description: Cross-site scripting (XSS) vulnerability in logout.php in TaskFreak! Original multi user before 0.6.4 allows remote attackers to inject arbitrary web script or HTML via the tznMessage parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/65846; http://secunia.com/advisories/40025; http://secunia.com/secunia_research/2010-78/
CVE: CVE-2010-1521
Published: 2010-06-30
Description: SQL injection vulnerability in include/classes/tzn_user.php in TaskFreak! Original multi user before 0.6.4 allows remote attackers to execute arbitrary SQL commands via the password parameter to login.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/65847; http://secunia.com/advisories/40025; http://secunia.com/secunia_research/2010-79/
CVE: CVE-2010-2168
Published: 2010-06-30
Description: Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via a PDF file with crafted Flash content, involving the newfunction (0x44) operator and an "invalid pointer vulnerability" that triggers memory corruption, a different vulnerability than CVE-2010-1285 and CVE-2010-2201.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.adobe.com/support/security/bulletins/apsb10-15.html; http://www.securityfocus.com/archive/1/512096; http://www.securityfocus.com/bid/41236
CVE: CVE-2010-2201
Published: 2010-06-30
Description: Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via a PDF file with crafted Flash content involving the (1) pushstring (0x2C) operator, (2) debugfile (0xF1) operator, and an "invalid pointer vulnerability" that triggers memory corruption, a different vulnerability than CVE-2010-1285 and CVE-2010-2168.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.adobe.com/support/security/bulletins/apsb10-15.html; http://www.securityfocus.com/archive/1/512098; http://www.securityfocus.com/bid/41237
CVE: CVE-2010-2202
Published: 2010-06-30
Description: Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-1295, CVE-2010-2207, CVE-2010-2209, CVE-2010-2210, CVE-2010-2211, and CVE-2010-2212.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb10-15.html; http://www.securityfocus.com/bid/41234; http://www.securitytracker.com/id?1024159
CVE: CVE-2010-2203
Published: 2010-06-30
Description: Adobe Reader and Acrobat 9.x before 9.3.3 on UNIX allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb10-15.html; http://www.securityfocus.com/bid/41235; http://www.securitytracker.com/id?1024159
CVE: CVE-2010-2204
Published: 2010-06-30
Description: Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors.
CVSS Score: 9.3 (HIGH)
References: http://www.adobe.com/support/security/bulletins/apsb10-15.html; http://www.securityfocus.com/bid/41231; http://www.securitytracker.com/id?1024159
CVE: CVE-2010-2205
Published: 2010-06-30
Description: Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, access uninitialized memory, which allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.adobe.com/support/security/bulletins/apsb10-15.html; http://www.securitytracker.com/id?1024159; http://www.vupen.com/english/advisories/2010/1636
CVE: CVE-2010-2206
Published: 2010-06-30
Description: Array index error in AcroForm.api in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted GIF image in a PDF file, which bypasses a size check and triggers a heap-based buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://secunia.com/secunia_research/2010-88/; http://www.adobe.com/support/security/bulletins/apsb10-15.html; http://www.securityfocus.com/archive/1/512092/100/0/threaded
CVE: CVE-2010-2207
Published: 2010-06-30
Description: Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-1295, CVE-2010-2202, CVE-2010-2209, CVE-2010-2210, CVE-2010-2211, and CVE-2010-2212.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb10-15.html; http://www.securityfocus.com/bid/41239; http://www.securitytracker.com/id?1024159
CVE: CVE-2010-2208
Published: 2010-06-30
Description: Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, dereference a heap object after this object's deletion, which allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.adobe.com/support/security/bulletins/apsb10-15.html; http://www.securityfocus.com/bid/41244; http://www.securitytracker.com/id?1024159
CVE: CVE-2010-2209
Published: 2010-06-30
Description: Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-1295, CVE-2010-2202, CVE-2010-2207, CVE-2010-2210, CVE-2010-2211, and CVE-2010-2212.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb10-15.html; http://www.securityfocus.com/bid/41240; http://www.securitytracker.com/id?1024159
CVE: CVE-2010-2210
Published: 2010-06-30
Description: Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-1295, CVE-2010-2202, CVE-2010-2207, CVE-2010-2209, CVE-2010-2211, and CVE-2010-2212.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb10-15.html; http://www.securityfocus.com/bid/41242; http://www.securitytracker.com/id?1024159
CVE: CVE-2010-2211
Published: 2010-06-30
Description: Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-1295, CVE-2010-2202, CVE-2010-2207, CVE-2010-2209, CVE-2010-2210, and CVE-2010-2212.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb10-15.html; http://www.securityfocus.com/bid/41243; http://www.securitytracker.com/id?1024159
CVE: CVE-2010-2212
Published: 2010-06-30
Description: Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a PDF file containing Flash content with a crafted #1023 (3FFh) tag, a different vulnerability than CVE-2010-1295, CVE-2010-2202, CVE-2010-2207, CVE-2010-2209, CVE-2010-2210, and CVE-2010-2211.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb10-15.html; http://www.securityfocus.com/archive/1/512095/100/0/threaded; http://www.securitytracker.com/id?1024159
CVE: CVE-2010-2249
Published: 2010-06-30
Description: Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a PNG image containing malformed Physical Scale (aka sCAL) chunks.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commitdiff%3Bh=90cfcecc09febb8d6c8c1d37ea7bb7cf0f4b00f3#patch20; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html
CVE: CVE-2010-2517
Published: 2010-06-30
Description: Multiple unspecified vulnerabilities in IBM Rational ClearQuest before 7.1.1.02 have unknown impact and attack vectors, as demonstrated by an AppScan report.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/40341; http://www-01.ibm.com/support/docview.wss?uid=swg1PM07157; http://www.securityfocus.com/bid/41205
CVE: CVE-2010-2518
Published: 2010-06-30
Description: Unspecified vulnerability in the P8 Content Engine (P8CE) 4.5.1 before FP3 and the P8 Content Search Engine (P8CSE) before 4.5.0 FP3 and 4.5.1 before FP1, as used in IBM FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), allows remote attackers to gain privileges via unknown vectors.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/40413; http://www-01.ibm.com/support/docview.wss?uid=swg21438487; http://www.osvdb.org/65804
CVE: CVE-2010-1522
Published: 2010-07-02
Description: Multiple SQL injection vulnerabilities in the BookLibrary Basic (com_booklibrary) component 1.5.3 before 1.5.3_2010_06_20 for Joomla! allow remote attackers to execute arbitrary SQL commands via the bid[] parameter in a (1) lend_request or (2) save_lend_request action to index.php, the id parameter in a (3) mdownload or (4) downitsf action to index.php, or (5) the searchtext parameter in a search action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://ordasoft.com/Download/Download-document/3-BookLibrary-1.5.3-Basic-for-Joomla-1.5.html; http://ordasoft.com/Download/View-document-details/3-BookLibrary-1.5.3-Basic-for-Joomla-1.5.html; http://osvdb.org/65879
CVE: CVE-2010-2233
Published: 2010-07-02
Description: tif_getimage.c in LibTIFF 3.9.0 and 3.9.2 on 64-bit platforms, as used in ImageMagick, does not properly perform vertical flips, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TIFF image, related to "downsampled OJPEG input."
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://bugzilla.maptools.org/show_bug.cgi?id=2207; http://marc.info/?l=oss-security&m=[PII_REDACTED]2908&w=2; http://secunia.com/advisories/40422
CVE: CVE-2010-2594
Published: 2010-07-02
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent 3.1.7 and earlier on Windows, Snare Agent 1.5.0 and earlier on Linux and AIX, Snare Agent 1.4 and earlier on IRIX, Snare Epilog 1.5.3 and earlier on Windows, and Snare Epilog 1.2 and earlier on UNIX allow remote attackers to hijack the authentication of administrators for requests that (1) change the password or (2) change the listening port.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://holisticinfosec.org/content/view/144/45/; http://secunia.com/advisories/39562; http://www.kb.cert.org/vuls/id/173009