rainbutterfly/cve_corpus huggingface dataset:
CVE-2010-2611 
SQL injection vulnerability in show_search_result.php in i-netsolution Job Search Engine allows remote attackers to execute arbitrary SQL commands via the keyword parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-01T21:00:00.000Z
CVE-2010-2612 
Unspecified vulnerability in the HP OpenVMS Auditing feature in OpenVMS ALPHA 7.3-2, 8.2, and 8.3; and OpenVMS for Integrity Servers 8.3 AND 8.3-1H1; allows local users to obtain sensitive information via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-01T21:00:00.000Z
CVE-2010-2613 
Cross-site scripting (XSS) vulnerability in the JExtensions JE Awd Song (com_awd_song) component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the song review field, which is not properly handled in a view action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-01T21:00:00.000Z
CVE-2010-2614 
SQL injection vulnerability in admin/admin.php in Grafik CMS 1.1.2, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit_page action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-01T21:00:00.000Z
CVE-2010-2615 
Multiple cross-site scripting (XSS) vulnerabilities in admin/admin.php in Grafik CMS 1.1.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) page_menu and (2) description parameters in an edit_page action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-01T21:00:00.000Z
CVE-2010-2616 
SQL injection vulnerability in bible.php in PHP Bible Search, probably 0.99, allows remote attackers to execute arbitrary SQL commands via the chapter parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-01T21:00:00.000Z
CVE-2010-2617 
Cross-site scripting (XSS) vulnerability in bible.php in PHP Bible Search allows remote attackers to inject arbitrary web script or HTML via the chapter parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-01T21:00:00.000Z
CVE-2010-2618 
PHP remote file inclusion vulnerability in inc/smarty/libs/init.php in AdaptCMS 2.0.0 Beta, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter.  NOTE: it was later reported that 2.0.1 is also affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-01T21:00:00.000Z
CVE-2010-2619 
Citrix XenServer 5.0 Update 2 and earlier, and 5.5 Update 1 and earlier, when using a pvops kernel, allows guest users to cause a denial of service in the host via unspecified vectors that trigger "incorrectly set flags."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-02T20:00:00.000Z
CVE-2010-2620 
Open&Compact FTP Server (Open-FTPD) 1.2 and earlier allows remote attackers to bypass authentication by sending (1) LIST, (2) RETR, (3) STOR, or other commands without performing the required login steps first.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-02T20:00:00.000Z
CVE-2010-2621 
The QSslSocketBackendPrivate::transmit function in src_network_ssl_qsslsocket_openssl.cpp in Qt 4.6.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a malformed request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-02T20:00:00.000Z
CVE-2010-2622 
SQL injection vulnerability in the Joomanager component, possibly 1.1.1, for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-02T20:00:00.000Z
CVE-2010-2623 
SQL injection vulnerability in pages.php in Internet DM Specialist Bed and Breakfast allows remote attackers to execute arbitrary SQL commands via the pp_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-02T20:00:00.000Z
CVE-2010-2624 
Multiple SQL injection vulnerabilities in iScripts EasySnaps 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) comment parameter to add_comments.php, (2) values parameter to tags_details.php, or (3) begin parameter to greetings.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-02T20:00:00.000Z
CVE-2010-2625 
Unspecified vulnerability in the Client Service for DPM in Hitachi ServerConductor / Deployment Manager 01-00, 01-01, and 06-00 through 06-00-/A; ServerConductor / Deployment Manager Standard Edition and Enterprise Edition 07-50 through 07-55, and 07-57 through 07-59; and JP1/ServerConductor/Deployment Manager Standard and Enterprise Edition 07-50 through 07-56-/F, 08-00 through 08-09-/E, 08-50 through 08-80-/A, 08-06 through 08-07, and 08-51 through 08-70; allows attackers to cause a denial of service (shutdown and reboot) via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-02T20:00:00.000Z
CVE-2010-2626 
index.pl in Miyabi CGI Tools SEO Links 1.02 allows remote attackers to execute arbitrary commands via shell metacharacters in the fn command. NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-02T20:00:00.000Z
CVE-2010-2627 
Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 (1.5.3153-802.0) and earlier, and Battlefield 2142 (1.10.48.0) and earlier, allow remote servers to overwrite arbitrary files on the client via "..\" (dot dot backslash) sequences in URLs for the (1) sponsor or (2) community logos, and other URLs related to (3) DemoDownloadURL, (4) DemoIndexURL and (5) CustomMapsURL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-02T20:00:00.000Z
CVE-2010-2628 
The IKE daemon in strongSwan 4.3.x before 4.3.7 and 4.4.x before 4.4.1 does not properly check the return values of snprintf calls, which allows remote attackers to execute arbitrary code via crafted (1) certificate or (2) identity data that triggers buffer overflows.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-08-20T17:00:00.000Z
CVE-2010-2629 
The Cisco Content Services Switch (CSS) 11500 with software 8.20.4.02 and the Application Control Engine (ACE) 4710 with software A2(3.0) do not properly handle LF header terminators in situations where the GET line is terminated by CRLF, which allows remote attackers to conduct HTTP request smuggling attacks and possibly bypass intended header insertions via crafted header data, as demonstrated by an LF character between the ClientCert-Subject and ClientCert-Subject-CN headers. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-1576.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-06T14:00:00.000Z
CVE-2010-2630 
The TIFFReadDirectory function in LibTIFF 3.9.0 does not properly validate the data types of codec-specific tags that have an out-of-order position in a TIFF file, which allows remote attackers to cause a denial of service (application crash) via a crafted file, a different vulnerability than CVE-2010-2481.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-06T15:00:00.000Z
CVE-2010-2631 
LibTIFF 3.9.0 ignores tags in certain situations during the first stage of TIFF file processing and does not properly handle this during the second stage, which allows remote attackers to cause a denial of service (application crash) via a crafted file, a different vulnerability than CVE-2010-2481.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-06T15:00:00.000Z
CVE-2010-2632 
Unspecified vulnerability in the FTP Server in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable researcher that this is an issue in the glob implementation in libc that allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-19T15:00:00.000Z
CVE-2010-2633 
Unspecified vulnerability in EMC Disk Library (EDL) before 3.2.7, 3.3.x before 3.3.2 epatch 8, and 4.0.x before 4.0.1 epatch 4 allows remote attackers to cause a denial of service (communication-module crash) by sending a crafted message through TCP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-08-02T21:00:00.000Z
CVE-2010-2634 
RSA enVision before 3.7 SP1 allows remote authenticated users to cause a denial of service via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-08-09T20:00:00.000Z
CVE-2010-2635 
SQL injection vulnerability in IBM WebSphere Commerce 6.0 before 6.0.0.10 allows remote authenticated users to execute arbitrary SQL commands via unspecified parameters to "Commerce Organization Admin Console JavaServer pages."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-09T20:00:00.000Z
CVE-2010-2636 
Multiple cross-site scripting (XSS) vulnerabilities in sample store pages in IBM WebSphere Commerce 7.0 before 7.0.0.1 allow remote attackers to inject arbitrary web script or HTML via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-09T20:00:00.000Z
CVE-2010-2637 
IBM WebSphere MQ 6.0 before 6.0.2.9 and 7.0 before 7.0.1.1 does not encrypt the username and password in the security parameters field, which allows remote attackers to obtain sensitive information by sniffing the network traffic from a .NET client application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-12T20:00:00.000Z
CVE-2010-2638 
Unspecified vulnerability in IBM WebSphere MQ 7.0 before 7.0.1.5 allows remote authenticated users to cause a denial of service (disk consumption) via vectors that trigger an FDC with an RM680004 Probe Id value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-15T20:00:00.000Z
CVE-2010-2639 
IBM WebSphere Commerce Enterprise 7.0 before 7.0.0.2 allows remote attackers to read messages intended for other recipients via vectors involving access by the outbound messaging system to the RunTimeProfileCacheCmdImpl class, related to the caching of mutable objects and "concurrency issues."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-06T20:00:00.000Z
CVE-2010-2640 
Array index error in the PK font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T18:00:00.000Z
CVE-2010-2641 
Array index error in the VF font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T18:00:00.000Z
CVE-2010-2642 
Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T18:00:00.000Z
CVE-2010-2643 
Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T18:00:00.000Z
CVE-2010-2644 
IBM WebSphere Service Registry and Repository (WSRR) 7.0.0 before FP1 does not properly implement access control, which allows remote attackers to perform governance actions via unspecified API requests to an EJB interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-22T20:00:00.000Z
CVE-2010-2645 
Unspecified vulnerability in Google Chrome before 5.0.375.99, when WebGL is used, allows remote attackers to cause a denial of service (out-of-bounds read) via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-06T17:00:00.000Z
CVE-2010-2646 
Google Chrome before 5.0.375.99 does not properly isolate sandboxed IFRAME elements, which has unspecified impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-06T17:00:00.000Z
CVE-2010-2647 
Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via an invalid SVG document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-06T17:00:00.000Z
CVE-2010-2648 
The implementation of the Unicode Bidirectional Algorithm (aka Bidi algorithm or UBA) in Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-06T17:00:00.000Z
CVE-2010-2649 
Unspecified vulnerability in Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service (application crash) via an invalid image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-06T17:00:00.000Z
CVE-2010-2650 
Unspecified vulnerability in Google Chrome before 5.0.375.99 has unknown impact and attack vectors, related to an "annoyance with print dialogs."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-06T17:00:00.000Z
CVE-2010-2651 
The Cascading Style Sheets (CSS) implementation in Google Chrome before 5.0.375.99 does not properly perform style rendering, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-06T17:00:00.000Z
CVE-2010-2652 
Google Chrome before 5.0.375.99 does not properly implement modal dialogs, which allows attackers to cause a denial of service (application crash) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-06T17:00:00.000Z
CVE-2010-2653 
Race condition in the hvc_close function in drivers/char/hvc_console.c in the Linux kernel before 2.6.34 allows local users to cause a denial of service or possibly have unspecified other impact by closing a Hypervisor Virtual Console device, related to the hvc_open and hvc_remove functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-05T17:00:00.000Z
CVE-2010-2654 
Multiple cross-site scripting (XSS) vulnerabilities on the IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, allow remote attackers to inject arbitrary web script or HTML via the (1) INDEX or (2) IPADDR parameter to private/cindefn.php, (3) the domain parameter to private/power_management_policy_options.php, the slot parameter to (4) private/pm_temp.php or (5) private/power_module.php, (6) the WEBINDEX parameter to private/blade_leds.php, or (7) the SLOT parameter to private/ipmi_bladestatus.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-07T18:00:00.000Z
CVE-2010-2655 
Directory traversal vulnerability in private/file_management.php on the IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, allows remote authenticated users to list arbitrary directories and possibly have unspecified other impact via a .. (dot dot) in the DIR parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-07T18:00:00.000Z
CVE-2010-2656 
The IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download (1) logs or (2) core files via direct requests, as demonstrated by a request for private/sdc.tgz.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-07T18:00:00.000Z
CVE-2010-2657 
Opera before 10.60 on Windows and Mac OS X does not properly prevent certain double-click operations from running a program located on a web site, which allows user-assisted remote attackers to execute arbitrary code via a crafted web page that bypasses a dialog.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-07T18:00:00.000Z
CVE-2010-2658 
Opera before 10.60 does not properly restrict certain interaction between plug-ins, file inputs, and the clipboard, which allows user-assisted remote attackers to trigger the uploading of arbitrary files via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-07T18:00:00.000Z
CVE-2010-2659 
Opera before 10.50 on Windows, before 10.52 on Mac OS X, and before 10.60 on UNIX platforms makes widget properties accessible to third-party domains, which allows remote attackers to obtain potentially sensitive information via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-07T18:00:00.000Z
CVE-2010-2660 
Opera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly restrict certain uses of homograph characters in domain names, which makes it easier for remote attackers to spoof IDN domains via unspecified choices of characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-07T18:00:00.000Z
CVE-2010-2661 
Opera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly restrict access to the full pathname of a file selected for upload, which allows remote attackers to obtain potentially sensitive information via unspecified DOM manipulations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-07T18:00:00.000Z
CVE-2010-2662 
Opera before 10.60 allows remote attackers to bypass the popup blocker via a javascript: URL and a "fake click."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-07T18:00:00.000Z
CVE-2010-2663 
Opera before 10.60 allows remote attackers to cause a denial of service (application hang) via an ended event handler that changes the SRC attribute of an AUDIO element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-07T18:00:00.000Z
CVE-2010-2664 
Opera before 10.60 allows remote attackers to cause a denial of service (application hang) via certain HTML content that has an unclosed SPAN element with absolute positioning.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-07T18:00:00.000Z
CVE-2010-2665 
Cross-site scripting (XSS) vulnerability in Opera before 10.54 on Windows and Mac OS X, and before 10.11 on UNIX platforms, allows remote attackers to inject arbitrary web script or HTML via a data: URI, related to incorrect detection of the "opening site."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-07T18:00:00.000Z
CVE-2010-2666 
Opera before 10.54 on Windows and Mac OS X does not properly enforce permission requirements for widget filesystem access and directory selection, which allows user-assisted remote attackers to create or modify arbitrary files, and consequently execute arbitrary code, via widget File I/O operations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-07T18:00:00.000Z
CVE-2010-2667 
Multiple unspecified vulnerabilities in the Virtual Appliance Management Infrastructure (VAMI) in VMware Studio 2.0 allow remote authenticated users to execute arbitrary commands via vectors involving (1) the Studio virtual appliance or (2) a virtual appliance created by the Studio virtual appliance.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-22T01:00:00.000Z
CVE-2010-2668 
Unspecified vulnerability in Adaptive Micro Systems ALPHA Ethernet Adapter II Web-Manager 3.40.2 allows remote attackers to bypass authentication and read or write configuration files via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-08T22:00:00.000Z
CVE-2010-2669 
Cross-site scripting (XSS) vulnerability in admin/editors/text/editor-body.php in Orbis CMS 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the s parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-08T22:00:00.000Z
CVE-2010-2670 
SQL injection vulnerability in recipedetail.php in BrotherScripts Recipe Website allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-08T22:00:00.000Z
CVE-2010-2671 
Cross-site scripting (XSS) vulnerability in advancedsearch.php in eZ Publish 3.7.0 through 4.2.0 allows remote attackers to inject arbitrary web script or HTML via the subTreeItem parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-08T22:00:00.000Z
CVE-2010-2672 
Multiple SQL injection vulnerabilities in eZ Publish 3.7.0 through 4.2.0 allow remote attackers to execute arbitrary SQL commands via the (1) SectionID and (2) SearchTimestamp parameters to the search feature and the (3) SearchContentClassAttributeID parameter to the advancedsearch feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-08T22:00:00.000Z
CVE-2010-2673 
SQL injection vulnerability in profile_view.php in Devana 1.6.6 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-08T22:00:00.000Z
CVE-2010-2674 
SQL injection vulnerability in index.php in TSOKA:CMS 1.1, 1.9, and 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in an articolo action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-08T22:00:00.000Z