rainbutterfly/cve_corpus huggingface dataset:
CVE-2010-2268 
Cross-site request forgery (CSRF) vulnerability in authcfg.cgi in Accoria Web Server (aka Rock Web Server) 1.4.7 allows remote attackers to hijack the authentication of administrators for requests that create user accounts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-14T19:00:00.000Z
CVE-2010-2269 
Directory traversal vulnerability in loadstatic.cgi in Accoria Web Server (aka Rock Web Server) 1.4.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-14T19:00:00.000Z
CVE-2010-2270 
Accoria Web Server (aka Rock Web Server) 1.4.7 uses a predictable httpmod-sessionid cookie, which makes it easier for remote attackers to hijack sessions via a modified cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-14T19:00:00.000Z
CVE-2010-2271 
Format string vulnerability in authcfg.cgi in Accoria Web Server (aka Rock Web Server) 1.4.7 allows remote attackers to have an unspecified impact via format string specifiers in the path (aka Password File) parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-14T19:00:00.000Z
CVE-2010-2272 
Unspecified vulnerability in iframe_history.html in Dojo 0.4.x before 0.4.4 has unknown impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-14T19:00:00.000Z
CVE-2010-2273 
Multiple cross-site scripting (XSS) vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to dojo/resources/iframe_history.html, dojox/av/FLAudio.js, dojox/av/FLVideo.js, dojox/av/resources/audio.swf, dojox/av/resources/video.swf, util/buildscripts/jslib/build.js, and util/buildscripts/jslib/buildUtil.js, as demonstrated by the (1) dojoUrl and (2) testUrl parameters to util/doh/runner.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-14T19:00:00.000Z
CVE-2010-2274 
Multiple open redirect vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, possibly related to dojo/resources/iframe_history.html, dojox/av/FLAudio.js, dojox/av/FLVideo.js, dojox/av/resources/audio.swf, dojox/av/resources/video.swf, util/buildscripts/jslib/build.js, util/buildscripts/jslib/buildUtil.js, and util/doh/runner.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-14T19:00:00.000Z
CVE-2010-2275 
Cross-site scripting (XSS) vulnerability in dijit/tests/_testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the theme parameter, as demonstrated by an attack against dijit/tests/form/test_Button.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-14T19:00:00.000Z
CVE-2010-2276 
The default configuration of the build process in Dojo 0.4.x before 0.4.4, 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 has the copyTests=true and mini=false options, which makes it easier for remote attackers to have an unspecified impact via a request to a (1) test or (2) demo component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-14T19:00:00.000Z
CVE-2010-2277 
Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Connections 2.5.x before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) create or (2) edit form in the Communities component, the (3) verbiage field in the Bookmarks component, or (4) unspecified vectors related to the Mobile Blogs component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-14T19:00:00.000Z
CVE-2010-2278 
The bookmarklet pop-up in the Bookmarks component in IBM Lotus Connections 2.5.x before 2.5.0.2 does not properly follow the "force SSL" setting, which might make it easier for remote attackers to obtain the cleartext of network communication by sniffing the network, or spoof arbitrary servers via a man-in-the-middle attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-14T19:00:00.000Z
CVE-2010-2279 
The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when "forced SSL" is enabled, uses http for links, which has unspecified impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-14T19:00:00.000Z
CVE-2010-2280 
Open redirect vulnerability in the Mobile component in IBM Lotus Connections 2.5.x before 2.5.0.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, related to "mobile edit actions," aka SPR ASRE83PPVH.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-14T19:00:00.000Z
CVE-2010-2281 
Multiple cross-site scripting (XSS) vulnerabilities in index.php in TomatoCMS 2.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) keyword or (2) bannerid parameter in conjunction with a /admin/ad/banner/list PATH_INFO; and allow remote authenticated users, with certain privileges, to inject arbitrary web script or HTML via the (3) title or (4) answers parameter in conjunction with a /admin/poll/add PATH_INFO, or the (5) name parameter in conjunction with a /admin/category/add PATH_INFO.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-14T19:00:00.000Z
CVE-2010-2282 
Cross-site request forgery (CSRF) vulnerability in TomatoCMS 2.0.6 allows remote attackers to hijack the authentication of administrators for requests that change the administrative password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-14T19:00:00.000Z
CVE-2010-2283 
The SMB dissector in Wireshark 0.99.6 through 1.0.13, and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (NULL pointer dereference) via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-15T01:00:00.000Z
CVE-2010-2284 
Buffer overflow in the ASN.1 BER dissector in Wireshark 0.10.13 through 1.0.13 and 1.2.0 through 1.2.8 has unknown impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-15T01:00:00.000Z
CVE-2010-2285 
The SMB PIPE dissector in Wireshark 0.8.20 through 1.0.13 and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (NULL pointer dereference) via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-15T01:00:00.000Z
CVE-2010-2286 
The SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.7 through 1.0.13 and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-15T01:00:00.000Z
CVE-2010-2287 
Buffer overflow in the SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.8 through 1.0.13 and 1.2.0 through 1.2.8 has unknown impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-15T01:00:00.000Z
CVE-2010-2288 
Cross-site scripting (XSS) vulnerability in dana/nc/ncrun.cgi in Juniper Networks IVE 6.5R1 (Build 14599) and 6.5R2 (Build 14951) allows remote attackers to inject arbitrary web script or HTML via the DSSignInURL cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-15T01:00:00.000Z
CVE-2010-2289 
Open redirect vulnerability in dana/home/homepage.cgi in Juniper Networks IVE 6.5R1 (Build 14599) and 6.5R2 (Build 14951) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the Location parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-15T01:00:00.000Z
CVE-2010-2290 
Cross-site scripting (XSS) vulnerability in cgi-bin/cgix/help in McAfee Unified Threat Management (UTM) Firewall (formerly SnapGear) firmware 3.0.0 through 4.0.6 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-15T01:00:00.000Z
CVE-2010-2291 
Unspecified vulnerability in the web interface in snom VoIP Phone firmware 8 before 8.2.35 allows remote attackers to bypass intended restrictions and modify user credentials via unknown vectors.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-15T01:00:00.000Z
CVE-2010-2292 
Cross-site scripting (XSS) vulnerability in the Ping tools web interface in Dlink Di-604 router allows remote attackers to inject arbitrary web script or HTML via the IP field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-15T01:00:00.000Z
CVE-2010-2293 
The Ping tools web interface in Dlink Di-604 router allows remote authenticated users to cause a denial of service via a large "ip textfield" size.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-15T01:00:00.000Z
CVE-2010-2294 
Cross-site request forgery (CSRF) vulnerability in Plume CMS 1.2.4 and possibly earlier allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-15T01:00:00.000Z
CVE-2010-2295 
page/EventHandler.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 does not properly handle a change of the focused frame during the dispatching of keydown, which allows user-assisted remote attackers to redirect keystrokes via a crafted HTML document, aka rdar problem 7018610.  NOTE: this might overlap CVE-2010-1422.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-15T17:48:00.000Z
CVE-2010-2296 
The implementation of unspecified DOM methods in Google Chrome before 5.0.375.70 allows remote attackers to bypass the Same Origin Policy via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-15T17:48:00.000Z
CVE-2010-2297 
rendering/FixedTableLayout.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an HTML document that has a large colspan attribute within a table.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-15T17:48:00.000Z
CVE-2010-2298 
browser/renderer_host/database_dispatcher_host.cc in Google Chrome before 5.0.375.70 on Linux does not properly handle ViewHostMsg_DatabaseOpenFile messages in chroot-based sandboxing, which allows remote attackers to bypass intended sandbox restrictions via vectors involving fchdir and chdir calls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-15T17:48:00.000Z
CVE-2010-2299 
The Clipboard::DispatchObject function in app/clipboard/clipboard.cc in Google Chrome before 5.0.375.70 does not properly handle CBF_SMBITMAP objects in a ViewHostMsg_ClipboardWriteObjectsAsync message, which might allow remote attackers to execute arbitrary code via vectors involving crafted data from the renderer process, related to a "Type Confusion" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-15T17:48:00.000Z
CVE-2010-2300 
Use-after-free vulnerability in the Element::normalizeAttributes function in dom/Element.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to handlers for DOM mutation events, aka rdar problem 7948784.  NOTE: this might overlap CVE-2010-1759.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-15T17:48:00.000Z
CVE-2010-2301 
Cross-site scripting (XSS) vulnerability in editing/markup.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to inject arbitrary web script or HTML via vectors related to the node.innerHTML property of a TEXTAREA element.  NOTE: this might overlap CVE-2010-1762.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-15T17:48:00.000Z
CVE-2010-2302 
Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors involving remote fonts in conjunction with shadow DOM trees, aka rdar problem 8007953.  NOTE: this might overlap CVE-2010-1771.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-15T17:48:00.000Z
CVE-2010-2305 
Buffer overflow in an ActiveX control in SSHelper.dll for Symantec Sygate Personal Firewall 5.6 build 2808 allows remote attackers to execute arbitrary code via a long third argument to the SetRegString method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-16T20:00:00.000Z
CVE-2010-2306 
The default installation of Sourcefire 3D Sensor 1000, 2000, and 9900; and Defense Center 1000; uses the same static, private SSL keys for multiple devices and installations, which allows remote attackers to decrypt SSL traffic via a man-in-the-middle (MITM) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-16T20:00:00.000Z
CVE-2010-2307 
Multiple directory traversal vulnerabilities in the web server for Motorola SURFBoard cable modem SBV6120E running firmware SBV6X2X-1.0.0.5-SCM-02-SHPC allow remote attackers to read arbitrary files via (1) "//" (multiple leading slash), (2) ../ (dot dot) sequences, and encoded dot dot sequences in a URL request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-16T20:00:00.000Z
CVE-2010-2308 
Unspecified vulnerability in the filter driver (savonaccessfilter.sys) in Sophos Anti-Virus before 7.6.20 allows local users to gain privileges via crafted arguments to the NtQueryAttributesFile function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-16T20:00:00.000Z
CVE-2010-2309 
Buffer overflow in the web server for EvoLogical EvoCam 3.6.6 and 3.6.7 allows remote attackers to execute arbitrary code via a long GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-16T20:00:00.000Z
CVE-2010-2310 
SolarWinds TFTP Server 10.4.0.13 allows remote attackers to cause a denial of service (crash) via a long write request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-16T20:00:00.000Z
CVE-2010-2311 
Stack-based buffer overflow in Power Tab Editor 1.7 build 80 allows user-assisted remote attackers to execute arbitrary code via a .ptb file with a long font name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-16T20:00:00.000Z
CVE-2010-2312 
SQL injection vulnerability in index.php in HauntmAx Haunted House Directory Listing CMS allows remote attackers to execute arbitrary SQL commands via the state parameter in a listings action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-16T20:00:00.000Z
CVE-2010-2313 
Directory traversal vulnerability in index.php in Anodyne Productions SIMM Management System (SMS) 2.6.10, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter to index.php.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-17T16:00:00.000Z
CVE-2010-2314 
PHP remote file inclusion vulnerability in nucleus/plugins/NP_Twitter.php in the NP_Twitter Plugin 0.8 and 0.9 for Nucleus, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the DIR_PLUGINS parameter. NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-17T16:00:00.000Z
CVE-2010-2315 
PHP remote file inclusion vulnerability in picturelib.php in SmartISoft phpBazar 2.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the cat parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-17T16:00:00.000Z
CVE-2010-2316 
Multiple cross-site scripting (XSS) vulnerabilities in default.asp in WmsCms 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) search, (2) sbr, (3) p, and (4) sbl parameters, different vectors than CVE-2007-3137.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-17T16:00:00.000Z
CVE-2010-2317 
Multiple SQL injection vulnerabilities in WmsCms 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) search, (2) sbr, (3) pid, (4) sbl, and (5) FilePath parameters to default.asp; and the (6) sbr, (7) pr, and (8) psPrice parameters to printpage.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-17T16:00:00.000Z
CVE-2010-2318 
Cross-site scripting (XSS) vulnerability in cms_data.php in PHPCityPortal 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-17T16:00:00.000Z
CVE-2010-2319 
SQL injection vulnerability in index.php in IDevSpot TextAds 2.08 allows remote attackers to execute arbitrary SQL commands via the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-17T16:00:00.000Z
CVE-2010-2320 
bozotic HTTP server (aka bozohttpd) before 20100621 allows remote attackers to list the contents of home directories, and determine the existence of user accounts, via multiple requests for URIs beginning with /~ sequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-08-02T19:00:00.000Z
CVE-2010-2321 
Buffer overflow in Adobe InDesign CS3 10.0 allows user-assisted remote attackers to execute arbitrary code via a crafted .indd file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-18T16:00:00.000Z
CVE-2010-2322 
Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-18T18:00:00.000Z
CVE-2010-2323 
IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS might allow attackers to obtain sensitive information by reading the default_create.log file that is associated with profile creation by the BBOWWPFx job and the zPMT.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-18T18:00:00.000Z
CVE-2010-2324 
IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS allows attackers to perform unspecified "link injection" actions via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-18T18:00:00.000Z
CVE-2010-2325 
Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related in part to "URL injection."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-18T18:00:00.000Z
CVE-2010-2326 
IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11, when addNode -trace is used during node federation, allows attackers to obtain sensitive information about CIMMetadataCollectorImpl trace actions by reading the addNode.log file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-18T18:00:00.000Z
CVE-2010-2327 
mod_ibm_ssl in IBM HTTP Server 6.0 before 6.0.2.43, 6.1 before 6.1.0.33, and 7.0 before 7.0.0.11, as used in IBM WebSphere Application Server (WAS) on z/OS, does not properly handle a large HTTP request body in uploading over SSL, which might allow remote attackers to cause a denial of service (daemon fail) via an upload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-18T18:00:00.000Z
CVE-2010-2328 
The HTTP Channel in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 allows remote attackers to cause a denial of service (NullPointerException) via a large amount of chunked data that uses gzip compression.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-18T18:00:00.000Z
CVE-2010-2329 
Buffer overflow in Rosoft Audio Converter 4.4.4 allows remote attackers to execute arbitrary code via a long playlist entry in a .m3u file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-18T20:00:00.000Z
CVE-2010-2330 
Stack-based buffer overflow in iSharer File Sharing Wizard 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Content-Length header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-18T20:00:00.000Z
CVE-2010-2331 
Stack-based buffer overflow in iSharer File Sharing Wizard 1.5.0 allows remote attackers to execute arbitrary code via a long HEAD request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-18T20:00:00.000Z
CVE-2010-2332 
Impact Financials, Inc. Impact PDF Reader 2.0, 1.2, and other versions for iPhone and iPod touch allows remote attackers to cause a denial of service (server crash) via a "..." body in a POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-18T20:00:00.000Z
CVE-2010-2333 
LiteSpeed Technologies LiteSpeed Web Server 4.0.x before 4.0.15 allows remote attackers to read the source code of scripts via an HTTP request with a null byte followed by a .txt file extension.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-18T20:00:00.000Z
CVE-2010-2334 
Directory traversal vulnerability in themes/default/download.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remote attackers to read arbitrary files via a .. (dot dot) in the download parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-18T20:00:00.000Z
CVE-2010-2335 
SQL injection vulnerability in index.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remote attackers to execute arbitrary SQL commands via the news parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-18T20:00:00.000Z