deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-0033
Published: 2010-02-10
Description: Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint Viewer TextBytesAtom Record Stack Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id?1023563; http://www.us-cert.gov/cas/techalerts/TA10-040A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-004
CVE: CVE-2010-0034
Published: 2010-02-10
Description: Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "Office PowerPoint Viewer TextCharsAtom Record Stack Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id?1023563; http://www.us-cert.gov/cas/techalerts/TA10-040A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-004
CVE: CVE-2010-0035
Published: 2010-02-10
Description: The Key Distribution Center (KDC) in Kerberos in Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold and SP2, when a trust relationship with a non-Windows Kerberos realm exists, allows remote authenticated users to cause a denial of service (NULL pointer dereference and domain controller outage) via a crafted Ticket Granting Ticket (TGT) renewal request, aka "Kerberos Null Pointer Dereference Vulnerability."
CVSS Score: 6.3 (MEDIUM)
References: http://www.us-cert.gov/cas/techalerts/TA10-040A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-014; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8428
CVE: CVE-2010-0231
Published: 2010-02-10
Description: The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not use a sufficient source of entropy, which allows remote attackers to obtain access to files and other SMB resources via a large number of authentication requests, related to server-generated challenges, certain "duplicate values," and spoofing of an authentication token, aka "SMB NTLM Authentication Lack of Entropy Vulnerability."
CVSS Score: 10.0 (HIGH)
CWE: CWE-264, CWE-310
References: http://www.us-cert.gov/cas/techalerts/TA10-040A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-012; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7751
CVE: CVE-2010-0233
Published: 2010-02-10
Description: Double free vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows local users to gain privileges via a crafted application, aka "Windows Kernel Double Free Vulnerability."
CVSS Score: 7.2 (HIGH)
References: http://www.us-cert.gov/cas/techalerts/TA10-040A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-015; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8392
CVE: CVE-2010-0239
Published: 2010-02-10
Description: The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Router Advertisement packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "ICMPv6 Router Advertisement Vulnerability."
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA10-040A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-009; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8478
CVE: CVE-2010-0240
Published: 2010-02-10
Description: The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when a custom network driver is used, does not properly handle local fragmentation of Encapsulating Security Payload (ESP) over UDP packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "Header MDL Fragmentation Vulnerability."
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA10-040A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-009; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8400
CVE: CVE-2010-0241
Published: 2010-02-10
Description: The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Route Information packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "ICMPv6 Route Information Vulnerability."
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA10-040A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-009; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8516
CVE: CVE-2010-0242
Published: 2010-02-10
Description: The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to cause a denial of service (system hang) via crafted packets with malformed TCP selective acknowledgement (SACK) values, aka "TCP/IP Selective Acknowledgement Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://www.us-cert.gov/cas/techalerts/TA10-040A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-009; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8449
CVE: CVE-2010-0243
Published: 2010-02-10
Description: Buffer overflow in MSO.DLL in Microsoft Office XP SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Office document, aka "MSO.DLL Buffer Overflow."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/cas/techalerts/TA10-040A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-003; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8399
CVE: CVE-2010-0250
Published: 2010-02-10
Description: Heap-based buffer overflow in DirectShow in Microsoft DirectX, as used in the AVI Filter on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2, and in Quartz on Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, allows remote attackers to execute arbitrary code via an AVI file with a crafted length field in an unspecified video stream, which is not properly handled by the RLE video decompressor, aka "DirectShow Heap Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/38511; http://support.avaya.com/css/P8/documents/100074167; http://www.securityfocus.com/archive/1/509472/100/0/threaded
CVE: CVE-2010-0252
Published: 2010-02-10
Description: The Microsoft Data Analyzer ActiveX control (aka the Office Excel ActiveX control for Data Analysis) in max3activex.dll in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to execute arbitrary code via a crafted web page that corrupts the "system state," aka "Microsoft Data Analyzer ActiveX Control Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/38503; http://secunia.com/advisories/40059; http://www.us-cert.gov/cas/techalerts/TA10-040A.html
CVE: CVE-2009-3735
Published: 2010-02-11
Description: The ActiveScan Installer ActiveX control in as2stubie.dll before 1.3.3.0 in PandaActiveScan Installer 2.0 in Panda ActiveScan downloads software in an as2guiie.cab archive located at an arbitrary URL, and does not verify the archive's digital signature before installation, which allows remote attackers to execute arbitrary code via a URL argument to an unspecified method.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/38485; http://www.kb.cert.org/vuls/id/869993; http://www.kb.cert.org/vuls/id/MAPG-7QPKL3
CVE: CVE-2010-0143
Published: 2010-02-11
Description: Unspecified vulnerability in the administrative interface in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 and 6.5.x before 6.5.2, and the IronPort PostX MAP before 6.2.9.1, allows remote attackers to read arbitrary files via unknown vectors, aka IronPort Bug 65921.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/38525; http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080b17904.html; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b17903.shtml
CVE: CVE-2010-0144
Published: 2010-02-11
Description: Unspecified vulnerability in the WebSafe DistributorServlet in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 and 6.5.x before 6.5.2, and the IronPort PostX MAP before 6.2.9.1, allows remote attackers to read arbitrary files via unknown vectors, aka IronPort Bug 65922.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/38525; http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080b17904.html; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b17903.shtml
CVE: CVE-2010-0145
Published: 2010-02-11
Description: Unspecified vulnerability in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 and 6.5.x before 6.5.2, and the IronPort PostX MAP before 6.2.9.1, allows remote attackers to execute arbitrary code via unknown vectors, aka IronPort Bug 65923.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/38525; http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080b17904.html; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b17903.shtml
CVE: CVE-2010-0445
Published: 2010-02-11
Description: Unspecified vulnerability in HP Network Node Manager (NNM) 8.10, 8.11, 8.12, and 8.13 allows remote attackers to execute arbitrary commands via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2560&w=2; http://secunia.com/advisories/38528; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2560&w=2
CVE: CVE-2010-0605
Published: 2010-02-11
Description: SQL injection vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users, with "Staff" permissions, to execute arbitrary SQL commands via the input parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osticket.com/forums/project.php?issueid=176; http://packetstormsecurity.org/1002-exploits/osTicket-1.6-RC5-SQLi.pdf; http://secunia.com/advisories/38515
CVE: CVE-2010-0606
Published: 2010-02-11
Description: Cross-site scripting (XSS) vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users to inject arbitrary web script or HTML via the f parameter, possibly related to an error message generated by scp/admin.php.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://osticket.com/forums/project.php?issueid=176; http://packetstormsecurity.org/1002-exploits/osTicket-1.6-RC5-ReflectedXSS.pdf; http://secunia.com/advisories/38515
CVE: CVE-2010-0607
Published: 2010-02-11
Description: Cross-site scripting (XSS) vulnerability in Forms/status_statistics_1 in the Sterlite SAM300 AX Router allows remote attackers to inject arbitrary web script or HTML via the Stat_Radio parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]6756&w=2; http://osvdb.org/62211; http://packetstormsecurity.org/1002-exploits/sterlite-xss.txt
CVE: CVE-2010-0608
Published: 2010-02-11
Description: SQL injection vulnerability in index.php in NovaBoard 1.1.2 allows remote attackers to execute arbitrary SQL commands via the forums[] parameter in a search action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1001-exploits/novaboard112-sql.txt; http://secunia.com/advisories/38368; http://www.exploit-db.com/exploits/11278
CVE: CVE-2010-0609
Published: 2010-02-11
Description: SQL injection vulnerability in header.php in NovaBoard 1.1.2 allows remote attackers to execute arbitrary SQL commands via the nova_name cookie parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/38368; http://www.osvdb.org/62003; http://secunia.com/advisories/38368
CVE: CVE-2010-0610
Published: 2010-02-11
Description: Multiple SQL injection vulnerabilities in the Photoblog (com_photoblog) component for Joomla! allow remote attackers to execute arbitrary SQL commands via the blog parameter in an images action to index.php.  NOTE: a separate vector for the id parameter to detail.php may also exist.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1002-exploits/joomlaphotoblog-bsql.txt; http://www.exploit-db.com/exploits/11337; http://www.securityfocus.com/bid/38136
CVE: CVE-2010-0611
Published: 2010-02-11
Description: Multiple SQL injection vulnerabilities in adminlogin.php in Baal Systems 3.8 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1002-exploits/baalsystems-sql.txt; http://www.exploit-db.com/exploits/11346; http://www.securityfocus.com/bid/38139
CVE: CVE-2010-0612
Published: 2010-02-11
Description: Unspecified vulnerability in DocumentManager before 4.0 has unknown impact and attack vectors, related to file rights.
CVSS Score: 7.5 (HIGH)
References: http://freshmeat.net/projects/dmanager/releases/311735; http://secunia.com/advisories/38441; http://www.osvdb.org/62032
CVE: CVE-2010-0613
Published: 2010-02-11
Description: Directory traversal vulnerability in viewfile.php in ARWScripts Fonts Script allows remote attackers to read arbitrary local files via directory traversal sequences in a base64-encoded f parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/38518; http://www.securityfocus.com/bid/38709; http://secunia.com/advisories/38518
CVE: CVE-2010-0614
Published: 2010-02-11
Description: SQL injection vulnerability in ajax.php in evalSMSI 2.1.03 allows remote attackers to execute arbitrary SQL commands via the query parameter in the (1) question action, and possibly the (2) sub_par or (3) num_quest actions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1002-exploits/corelan-10-008-evalmsi.txt; http://secunia.com/advisories/38478; http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-008-evalmsi-2-1-03-multiple-vulnerabilities/
CVE: CVE-2010-0615
Published: 2010-02-11
Description: Cross-site scripting (XSS) vulnerability in assess.php in evalSMSI 2.1.03 allows remote attackers to inject arbitrary web script or HTML via the reports comment box in a continue_assess action.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/1002-exploits/corelan-10-008-evalmsi.txt; http://secunia.com/advisories/38478; http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-008-evalmsi-2-1-03-multiple-vulnerabilities/
CVE: CVE-2010-0616
Published: 2010-02-11
Description: evalSMSI 2.1.03 stores passwords in cleartext in the database, which allows attackers with database access to gain privileges.  NOTE: remote attack vectors are possible by leveraging a separate SQL injection vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-255
References: http://packetstormsecurity.org/1002-exploits/corelan-10-008-evalmsi.txt; http://secunia.com/advisories/38478; http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-008-evalmsi-2-1-03-multiple-vulnerabilities/
CVE: CVE-2010-0617
Published: 2010-02-11
Description: Cross-site scripting (XSS) vulnerability in ajax.php in evalSMSI 2.1.03 allows remote attackers to inject arbitrary web script or HTML via the return parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/38478; http://www.osvdb.org/62179; https://exchange.xforce.ibmcloud.com/vulnerabilities/56157
CVE: CVE-2010-0414
Published: 2010-02-11
Description: gnome-screensaver before 2.28.2 allows physically proximate attackers to bypass screen locking and access an unattended workstation by moving the mouse position to an external monitor and then disconnecting that monitor.
CVSS Score: 7.2 (HIGH)
References: http://ftp.gnome.org/pub/GNOME/sources/gnome-screensaver/2.28/gnome-screensaver-2.28.2.news; http://git.gnome.org/browse/gnome-screensaver/commit/?id=a5f66339be6719c2b8fc478a1d5fc6545297d950; http://git.gnome.org/browse/gnome-screensaver/commit/?id=dcca89b7ab6e1220815af38da246434b2e13fd9f
CVE: CVE-2009-4641
Published: 2010-02-11
Description: gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application becomes unavailable on the session bus, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended.
CVSS Score: 7.2 (HIGH)
References: http://www.mandriva.com/security/advisories?name=MDVSA-2010:040; http://www.ubuntu.com/usn/USN-866-1; https://bugzilla.gnome.org/show_bug.cgi?id=600488
CVE: CVE-2009-4642
Published: 2010-02-11
Description: gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle time, even when an Xfce desktop such as Xubuntu or Mythbuntu is used, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended.
CVSS Score: 7.2 (HIGH)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=536381; http://bugzilla.xfce.org/show_bug.cgi?id=5927; https://bugzilla.gnome.org/show_bug.cgi?id=592093
CVE: CVE-2010-0297
Published: 2010-02-12
Description: Buffer overflow in the usb_host_handle_control function in the USB passthrough handling implementation in usb-linux.c in QEMU before 0.11.1 allows guest OS users to cause a denial of service (guest OS crash or hang) or possibly execute arbitrary code on the host OS via a crafted USB packet.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://git.savannah.gnu.org/cgit/qemu.git/commit/?id=babd03fde[PII_REDACTED]8010a5435c14ce9128e3f; http://marc.info/?l=oss-security&m=[PII_REDACTED]1473&w=2; http://marc.info/?l=oss-security&m=[PII_REDACTED]7254&w=2
CVE: CVE-2010-0298
Published: 2010-02-12
Description: The x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) in determining the memory access available to CPL3 code, which allows guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, a related issue to CVE-2010-0306.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/38492; http://www.debian.org/security/2010/dsa-1996; http://www.securityfocus.com/bid/38158
CVE: CVE-2010-0306
Published: 2010-02-12
Description: The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) to restrict instruction execution, which allows guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, and replacing an instruction in between emulator entry and instruction fetch, a related issue to CVE-2010-0298.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/38492; http://secunia.com/advisories/38499; http://www.debian.org/security/2010/dsa-1996
CVE: CVE-2010-0309
Published: 2010-02-12
Description: The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly use the pit_state data structure, which allows guest OS users to cause a denial of service (host OS crash or hang) by attempting to read the /dev/port file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-16
References: http://secunia.com/advisories/38492; http://secunia.com/advisories/38922; http://www.debian.org/security/2010/dsa-1996
CVE: CVE-2010-0446
Published: 2010-02-12
Description: Unspecified vulnerability on the HP DreamScreen 100 and 130 with firmware before 1.6.0.0, when using a web-connected configuration, allows remote attackers to obtain sensitive information via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5647&w=2; http://secunia.com/advisories/38536; http://securitytracker.com/id?1023581
CVE: CVE-2001-1586
Published: 2010-02-12
Description: Directory traversal vulnerability in SimpleServer:WWW 1.13 and earlier allows remote attackers to execute arbitrary programs via encoded ../ ("%2E%2E%2F%") sequences in a request to the cgi-bin/ directory, a different vulnerability than CVE-2000-0664.
CVSS Score: 10.0 (HIGH)
CWE: CWE-22
References: http://seclists.org/bugtraq/2001/Jul/660; http://www.analogx.com/contents/download/network/sswww.htm; http://www.securiteam.com/windowsntfocus/5TP0B1P4UK.html
CVE: CVE-2009-4274
Published: 2010-02-12
Description: Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an XPM image file that contains a crafted header field associated with a large color index value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html; http://netpbm.svn.sourceforge.net/viewvc/netpbm/stable/converter/ppm/xpmtoppm.c?view=patch&r1=995&r2=1076&pathrev=1076; http://netpbm.svn.sourceforge.net/viewvc/netpbm/stable/doc/HISTORY?view=markup
CVE: CVE-2010-0630
Published: 2010-02-12
Description: SQL injection vulnerability in viewjokes.php in Evernew Free Joke Script 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1002-exploits/evernewfjs-sql.txt; http://secunia.com/advisories/35434; http://www.exploit-db.com/exploits/11306
CVE: CVE-2010-0631
Published: 2010-02-12
Description: Multiple SQL injection vulnerabilities in index.php in Eicra Car Rental-Script, when the plugin_id parameter is 4, allow remote attackers to execute arbitrary SQL commands via the (1) users (username) and (2) passwords parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/38389; http://www.exploit-db.com/exploits/11323; http://secunia.com/advisories/38389
CVE: CVE-2010-0632
Published: 2010-02-12
Description: SQL injection vulnerability in the Parkview Consultants SimpleFAQ (com_simplefaq) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a display action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1001-exploits/joomlasimplefaq-sql.txt; http://www.exploit-db.com/exploits/11294; http://www.securityfocus.com/bid/38015