deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-4877
Published: 2012-09-06
Description: Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/80878; http://packetstormsecurity.org/files/111473/Flatnux-CMS-2011-08.09.2-CSRF-XSS-Directory-Traversal.html; http://secunia.com/advisories/48656
CVE: CVE-2012-4878
Published: 2012-09-06
Description: Absolute path traversal vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 allows remote administrators to read arbitrary files via a full pathname in the dir parameter in a contents/Files action.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.org/files/111473/Flatnux-CMS-2011-08.09.2-CSRF-XSS-Directory-Traversal.html; http://www.securityfocus.com/bid/52846; http://www.vulnerability-lab.com/get_content.php?id=487
CVE: CVE-2012-3013
Published: 2012-09-07
Description: WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices have default passwords for unspecified Web Based Management accounts, which makes it easier for remote attackers to obtain administrative access via a TCP session.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://www.us-cert.gov/control_systems/pdf/ICSA-12-249-02.pdf; http://www.wago.com/wagoweb/documentation/app_note/a1176/a117600e.pdf; http://www.us-cert.gov/control_systems/pdf/ICSA-12-249-02.pdf
CVE: CVE-2012-4879
Published: 2012-09-07
Description: The Linux Console on the WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices has a default password of wago for the (1) root and (2) admin accounts, (3) a default password of user for the user account, and (4) a default password of guest for the guest account, which makes it easier for remote attackers to obtain login access via a TELNET session, a different vulnerability than CVE-2012-3013.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://www.us-cert.gov/control_systems/pdf/ICSA-12-249-02.pdf; http://www.wago.com/wagoweb/documentation/app_note/a1176/a117600e.pdf; http://www.us-cert.gov/control_systems/pdf/ICSA-12-249-02.pdf
CVE: CVE-2010-5226
Published: 2012-09-07
Description: Multiple untrusted search path vulnerabilities in Autodesk Design Review 2011 11.0.0.86 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll, (2) whiptk_wt.7.12.601.dll, or (3) xaml_wt.7.6.0.dll file in the current working directory, as demonstrated by a directory that contains a .dwf file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41013; http://secunia.com/advisories/41013
CVE: CVE-2010-5227
Published: 2012-09-07
Description: Untrusted search path vulnerability in Opera before 10.62 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .htm, .mht, .mhtml, .xht, .xhtm, or .xhtl file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41083; http://www.exploit-db.com/exploits/14732; http://www.opera.com/docs/changelogs/windows/1062/
CVE: CVE-2010-5228
Published: 2012-09-07
Description: Untrusted search path vulnerability in RealPlayer SP 1.1.5 12.0.0.879 allows local users to gain privileges via a Trojan horse rio500.dll file in the current working directory, as demonstrated by a directory that contains a .avi file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41092; http://www.cs.ucdavis.edu/research/tech-reports/2010/CSE-2010-2.pdf; http://secunia.com/advisories/41092
CVE: CVE-2010-5229
Published: 2012-09-07
Description: Untrusted search path vulnerability in 010 Editor before 3.1.3 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a directory that contains a .hex file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41094; http://www.sweetscape.com/010editor/release_notes.html; http://secunia.com/advisories/41094
CVE: CVE-2010-5230
Published: 2012-09-07
Description: Multiple untrusted search path vulnerabilities in MicroStation 7.1 allow local users to gain privileges via a Trojan horse (1) mptools.dll, (2) baseman.dll, (3) wintab32.dll, or (4) wintab.dll file in the current working directory, as demonstrated by a directory that contains a .hln or .rdl file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0320.html; http://secunia.com/advisories/41106; http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0320.html
CVE: CVE-2010-5231
Published: 2012-09-07
Description: Untrusted search path vulnerability in DivX Player 7.2.019 allows local users to gain privileges via a Trojan horse VersionCheckDLL.dll file in the current working directory, as demonstrated by a directory that contains a .avi file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41108; http://secunia.com/blog/120; http://secunia.com/advisories/41108
CVE: CVE-2010-5232
Published: 2012-09-07
Description: Untrusted search path vulnerability in DivX Plus Player 8.1.0 allows local users to gain privileges via a Trojan horse ssleay32.dll file in a certain directory.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41108; http://secunia.com/blog/120; http://secunia.com/advisories/41108
CVE: CVE-2010-5233
Published: 2012-09-07
Description: Untrusted search path vulnerability in Virtual DJ 6.1.2 Trial b301 allows local users to gain privileges via a Trojan horse HDJAPI.dll file in the current working directory, as demonstrated by a directory that contains a .mp3 file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41115; http://www.corelan.be:8800/index.php/2010/08/25/dll-hijacking-kb-2269637-the-unofficial-list/; http://secunia.com/advisories/41115
CVE: CVE-2010-5234
Published: 2012-09-07
Description: Multiple untrusted search path vulnerabilities in Camtasia Studio 7.0.1 build 57 allow local users to gain privileges via a Trojan horse (1) MFC90ENU.DLL or (2) MFC90LOC.DLL file in the current working directory, as demonstrated by a directory that contains a .cmmp or .camrec file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41119; http://secunia.com/advisories/41119
CVE: CVE-2010-5235
Published: 2012-09-07
Description: Untrusted search path vulnerability in IZArc Archiver 4.1.2 allows local users to gain privileges via a Trojan horse ztv7z.dll file in the current working directory, as demonstrated by a directory that contains a .arj file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41131; http://www.corelan.be:8800/index.php/2010/08/25/dll-hijacking-kb-2269637-the-unofficial-list/; http://secunia.com/advisories/41131
CVE: CVE-2010-5236
Published: 2012-09-07
Description: Untrusted search path vulnerability in Roxio Easy Media Creator Home 9.0.136 allows local users to gain privileges via a Trojan horse homeutils9.dll file in the current working directory, as demonstrated by a directory that contains a .roxio, .c2d, or .gi file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41137; http://www.exploit-db.com/exploits/14768; http://secunia.com/advisories/41137
CVE: CVE-2010-5237
Published: 2012-09-07
Description: Untrusted search path vulnerability in CyberLink PowerDirector 7 allows local users to gain privileges via a Trojan horse mfc71loc.dll file in the current working directory, as demonstrated by a directory that contains a .pdl, .iso, .pds, .p2g, or .p2i file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://extraexploit.blogspot.com/2010/08/dll-hijacking-my-test-cases-on-default.html; http://secunia.com/advisories/41142; http://extraexploit.blogspot.com/2010/08/dll-hijacking-my-test-cases-on-default.html
CVE: CVE-2010-5238
Published: 2012-09-07
Description: Untrusted search path vulnerability in CyberLink PowerDirector 8.00.3022 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .pdl, .iso, .pds, .p2g, or .p2i file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://extraexploit.blogspot.com/2010/08/dll-hijacking-my-test-cases-on-default.html; http://secunia.com/advisories/41142; http://extraexploit.blogspot.com/2010/08/dll-hijacking-my-test-cases-on-default.html
CVE: CVE-2010-5239
Published: 2012-09-07
Description: Untrusted search path vulnerability in DAEMON Tools Lite 4.35.6.0091 and Pro Standard 4.36.0309.0160 allows local users to gain privileges via a Trojan horse mfc80loc.dll file in the current working directory, as demonstrated by a directory that contains a .mds file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41146; http://www.exploit-db.com/exploits/14791/; http://secunia.com/advisories/41146
CVE: CVE-2010-5240
Published: 2012-09-07
Description: Multiple untrusted search path vulnerabilities in Corel PHOTO-PAINT and CorelDRAW X5 15.1.0.588 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) CrlRib.dll file in the current working directory, as demonstrated by a directory that contains a .cdr, .cpt, .cmx, or .csl file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41148; http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4953.php; http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4954.php
CVE: CVE-2010-5241
Published: 2012-09-07
Description: Multiple untrusted search path vulnerabilities in Autodesk AutoCAD 2010 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) IBFS32.DLL file in the current working directory, as demonstrated by a directory that contains a .dwg file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41156; http://secunia.com/advisories/41156
CVE: CVE-2010-5242
Published: 2012-09-07
Description: Untrusted search path vulnerability in Sound Forge Pro 10.0b Build 474 allows local users to gain privileges via a Trojan horse MtxParhVegasPreview.dll file in the current working directory, as demonstrated by a directory that contains a .sfw file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41164; http://www.corelan.be:8800/index.php/2010/08/25/dll-hijacking-kb-2269637-the-unofficial-list/; http://secunia.com/advisories/41164
CVE: CVE-2010-5243
Published: 2012-09-07
Description: Multiple untrusted search path vulnerabilities in Cyberlink Power2Go 7.0.0.0816 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) MFC71LOC.DLL file in the current working directory, as demonstrated by a directory that contains a .p2g, .iso, .pdl, .pds, or .p2i file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://extraexploit.blogspot.com/2010/08/dll-hijacking-my-test-cases-on-default.html; http://secunia.com/advisories/41174; http://extraexploit.blogspot.com/2010/08/dll-hijacking-my-test-cases-on-default.html
CVE: CVE-2010-5244
Published: 2012-09-07
Description: Untrusted search path vulnerability in SiSoftware Sandra 2010 Lite 2010.7.16.52 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .sis file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41178; http://www.corelan.be:8800/index.php/2010/08/25/dll-hijacking-kb-2269637-the-unofficial-list/; http://secunia.com/advisories/41178
CVE: CVE-2010-5245
Published: 2012-09-07
Description: Untrusted search path vulnerability in PDF-XChange Viewer 2.0 Build 54.0 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a directory that contains a .pdf file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41197; http://www.corelan.be:8800/index.php/2010/08/25/dll-hijacking-kb-2269637-the-unofficial-list/; http://secunia.com/advisories/41197
CVE: CVE-2010-5246
Published: 2012-09-07
Description: Multiple untrusted search path vulnerabilities in Maxthon Browser 1.6.7.35 and 2.5.15 allow local users to gain privileges via a Trojan horse (1) RSRC32.dll or (2) dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .html file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41200; http://secunia.com/advisories/41200
CVE: CVE-2010-5247
Published: 2012-09-07
Description: Untrusted search path vulnerability in QtWeb Browser 3.3 build 043 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a directory that contains a .html, .htm, or .mhtml file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0386.html; http://secunia.com/advisories/41201; http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0386.html
CVE: CVE-2010-5248
Published: 2012-09-07
Description: Untrusted search path vulnerability in UltraVNC 1.0.8.2 allows local users to gain privileges via a Trojan horse vnclang.dll file in the current working directory, as demonstrated by a directory that contains a .vnc file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41208; http://web.archive.org/web/[PII_REDACTED]2712/http://www.uvnc.com/download/; http://secunia.com/advisories/41208
CVE: CVE-2010-5249
Published: 2012-09-07
Description: Untrusted search path vulnerability in Sophos Free Encryption 2.40.1.1 and Sophos SafeGuard PrivateCrypto 2.40.1.2 allows local users to gain privileges via a Trojan horse pcrypt0406.dll file in the current working directory, as demonstrated by a directory that contains a .uti file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41209; http://secunia.com/advisories/41209
CVE: CVE-2010-5250
Published: 2012-09-07
Description: Untrusted search path vulnerability in the pthread_win32_process_attach_np function in pthreadGC2.dll in Pthreads-win32 2.8.0 allows local users to gain privileges via a Trojan horse quserex.dll file in the current working directory.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-426
References: http://secunia.com/advisories/41215; http://www.corelan.be:8800/index.php/2010/08/25/dll-hijacking-kb-2269637-the-unofficial-list/; http://secunia.com/advisories/41215
CVE: CVE-2010-5251
Published: 2012-09-07
Description: Multiple untrusted search path vulnerabilities in IBM Lotus Notes 8.5 allow local users to gain privileges via a Trojan horse (1) nnoteswc.dll or (2) nlsxbe.dll file in the current working directory, as demonstrated by a directory that contains a .vcf, .vcs, or .ics file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41223; http://secunia.com/advisories/41223
CVE: CVE-2010-5252
Published: 2012-09-07
Description: Untrusted search path vulnerability in HTTrack 3.43-9 allows local users to gain privileges via a Trojan horse httrack-plugin.dll file in the current working directory, as demonstrated by a directory that contains a .whtt file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41224; http://www.corelan.be:8800/index.php/2010/08/25/dll-hijacking-kb-2269637-the-unofficial-list/; http://secunia.com/advisories/41224
CVE: CVE-2010-5253
Published: 2012-09-07
Description: Untrusted search path vulnerability in WinImage 8.50 allows local users to gain privileges via a Trojan horse wnaspi32.dll file in the current working directory, as demonstrated by a directory that contains a .imz file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41225; http://www.corelan.be:8800/index.php/2010/08/25/dll-hijacking-kb-2269637-the-unofficial-list/; http://secunia.com/advisories/41225
CVE: CVE-2010-5254
Published: 2012-09-07
Description: Untrusted search path vulnerability in GFI Backup 3.1 Build 20[PII_REDACTED] Home Edition allows local users to gain privileges via a Trojan horse ArmAccess.dll file in the current working directory, as demonstrated by a directory that contains a .gbc or .gbt file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41226; http://www.corelan.be:8800/index.php/2010/08/25/dll-hijacking-kb-2269637-the-unofficial-list/; http://secunia.com/advisories/41226
CVE: CVE-2010-5255
Published: 2012-09-07
Description: Untrusted search path vulnerability in UltraISO 9.3.6.2750 allows local users to gain privileges via a Trojan horse daemon.dll file in the current working directory, as demonstrated by a directory that contains a .iso file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41227; http://www.corelan.be:8800/index.php/2010/08/25/dll-hijacking-kb-2269637-the-unofficial-list/; http://secunia.com/advisories/41227
CVE: CVE-2010-5256
Published: 2012-09-07
Description: Untrusted search path vulnerability in CDisplay 1.8.1 allows local users to gain privileges via a Trojan horse TRACE32.DLL file in the current working directory, as demonstrated by a directory that contains a .cba file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41229; http://www.corelan.be:8800/index.php/2010/08/25/dll-hijacking-kb-2269637-the-unofficial-list/; http://secunia.com/advisories/41229
CVE: CVE-2010-5257
Published: 2012-09-07
Description: Multiple untrusted search path vulnerabilities in ArchiCAD 13 and 14 allow local users to gain privileges via a Trojan horse (1) srcsrv.dll or (2) GSAutoTester.DLL file in the current working directory, as demonstrated by a directory that contains a .2df file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41231; http://www.corelan.be:8800/index.php/2010/08/25/dll-hijacking-kb-2269637-the-unofficial-list/; http://secunia.com/advisories/41231
CVE: CVE-2010-5258
Published: 2012-09-07
Description: Untrusted search path vulnerability in Adobe Audition 3.0 build 7283.0 allows local users to gain privileges via a Trojan horse Assist.Dll file in the current working directory, as demonstrated by a directory that contains a .ses file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41232; http://www.corelan.be:8800/index.php/2010/08/25/dll-hijacking-kb-2269637-the-unofficial-list/; http://secunia.com/advisories/41232
CVE: CVE-2010-5259
Published: 2012-09-07
Description: Multiple untrusted search path vulnerabilities in IsoBuster 2.8 allow local users to gain privileges via a Trojan horse (1) wnaspi32.dll or (2) ntaspi32.dll file in the current working directory, as demonstrated by a directory that contains a .img file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41243; http://secunia.com/advisories/41243
CVE: CVE-2010-5260
Published: 2012-09-07
Description: Untrusted search path vulnerability in Agrin All DVD Ripper 4.0 allows local users to gain privileges via a Trojan horse wnaspi32.dll file in the current working directory, as demonstrated by a directory that contains a .ifo file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41497; http://www.exploit-db.com/dll-hijacking-vulnerable-applications/; http://secunia.com/advisories/41497
CVE: CVE-2010-5261
Published: 2012-09-07
Description: Untrusted search path vulnerability in SnowFox Total Video Converter 2.5.1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .avi file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41527; http://www.exploit-db.com/dll-hijacking-vulnerable-applications/; http://secunia.com/advisories/41527
CVE: CVE-2010-5262
Published: 2012-09-07
Description: Multiple untrusted search path vulnerabilities in libmcl-5.4.0.dll in Gromada Multimedia Conversion Library 5.4.0 allow local users to gain privileges via a Trojan horse (1) libgif-1.1.0.dll or (2) libhav-1.0.1.dll file in the current working directory.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/41571; http://secunia.com/advisories/41571
CVE: CVE-2010-5263
Published: 2012-09-07
Description: Untrusted search path vulnerability in Sothink SWF Decompiler 6.0 Build 610 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .flv file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://packetstormsecurity.org/1009-exploits/sothinkswf-dllhijack.txt; http://secunia.com/advisories/41572; http://packetstormsecurity.org/1009-exploits/sothinkswf-dllhijack.txt
CVE: CVE-2010-5264
Published: 2012-09-07
Description: Untrusted search path vulnerability in the CExtDWM::CExtDWM method in ProfUIS290m.dll and ProfUIS290m-RDE.dll in Prof-UIS before 2.9.1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.9 (MEDIUM)
References: http://packetstormsecurity.org/1009-exploits/yloader-dllhijack.txt; http://secunia.com/advisories/41578; http://www.prof-uis.com/prof-uis/version-history/version-291.aspx