Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-2516 State: PUBLISHED Published: 2010-06-29T18:00:00Z Last Updated: 2024-09-17T01:51:24.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in 2daybiz Multi Level Marketing (MLM) Software allow remote attackers to execute arbitrary SQL commands via the username parameter to (1) index.php and (2) admin/index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40340
CVE ID: CVE-2010-2517 State: PUBLISHED Published: 2010-06-30T18:00:00Z Last Updated: 2024-09-16T17:58:20.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in IBM Rational ClearQuest before 7.1.1.02 have unknown impact and attack vectors, as demonstrated by an AppScan report. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40341 - http://www.vupen.com/english/advisories/2010/1615 - http://www.securityfocus.com/bid/41205 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM07157
CVE ID: CVE-2010-2518 State: PUBLISHED Published: 2010-06-30T18:00:00 Last Updated: 2024-08-07T02:39:37.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the P8 Content Engine (P8CE) 4.5.1 before FP3 and the P8 Content Search Engine (P8CSE) before 4.5.0 FP3 and 4.5.1 before FP1, as used in IBM FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), allows remote attackers to gain privileges via unknown vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/65804 - http://secunia.com/advisories/40413 - https://exchange
CVE Program Container: References: - http://www.osvdb.org/65804 - http://secunia.com/advisories/40413 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59792 - http://www.securityfocus.com/bid/41177 - http://www.vupen.com/english/advisories/2010/1616 - http://www-01.ibm.com/support/docview.wss?uid=swg21438487
CVE ID: CVE-2010-2519 State: PUBLISHED Published: 2010-08-19T17:43:00 Last Updated: 2024-08-07T02:39:36.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted length value in a POST fragment header in a font file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-963-1 - http://support.apple.com/kb/HT4435 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=b2ea64bcc6c385a8e8318f9c759450a07df58b6d
/kb/HT4435 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=b2ea64bcc6c385a8e8318f9c759450a07df58b6d - https://bugzilla.redhat.com/show_bug.cgi?id=613194 - http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=5ef20c8c1d4de12a84b50ba497c2a358c90ec44b - http://marc.info/?l=oss-security&m=127909326909362&w=2 - https://savannah.nongnu.org/bugs/?30306 - http://www.debian.org/security/2010/dsa-2070 - http://marc.info/?l=oss-security&m=127905701201340&w=2 - http://securitytracker.com/id?1024266 - http://www.redhat.com/sup
tp://marc.info/?l=oss-security&m=127905701201340&w=2 - http://securitytracker.com/id?1024266 - http://www.redhat.com/support/errata/RHSA-2010-0578.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:137 - http://secunia.com/advisories/48951
CVE ID: CVE-2010-2520 State: PUBLISHED Published: 2010-08-19T17:43:00 Last Updated: 2024-08-07T02:39:36.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Ins_IUP function in truetype/ttinterp.c in FreeType before 2.4.0, when TrueType bytecode support is enabled, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-963-1 - http://support.apple.com/kb/HT4435 - https://bugzilla.redhat.com/show_bug.cgi?id=613198 - https://savannah.nongnu.org/bugs/?30361 - http://git.savannah.g
5 - https://bugzilla.redhat.com/show_bug.cgi?id=613198 - https://savannah.nongnu.org/bugs/?30361 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=888cd1843e935fe675cf2ac303116d4ed5b9d54b - http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://marc.info/?l=oss-security&m=127909326909362&w=2 - http://www.debian.org/security/2010/dsa-2070 - http://marc.info/?l=oss-security&m=127905701201340&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:137 - http://secunia.com/advisories/48951
CVE ID: CVE-2010-2521 State: PUBLISHED Published: 2010-09-07T16:30:00 Last Updated: 2024-08-07T02:39:36.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in fs/nfsd/nfs4xdr.c in the XDR implementation in the NFS server in the Linux kernel before 2.6.34-rc6 allow remote attackers to cause a denial of service (panic) or possibly execute arbitrary code via a crafted NFSv4 compound WRITE request, related to the read_buf and nfsd4_decode_compound functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0610.html - http://www.redhat.com/support/errata/RHSA-2010-0893.html - http://www.ubuntu.co
com/support/errata/RHSA-2010-0610.html - http://www.redhat.com/support/errata/RHSA-2010-0893.html - http://www.ubuntu.com/usn/USN-1000-1 - http://www.openwall.com/lists/oss-security/2010/07/07/1 - https://rhn.redhat.com/errata/RHSA-2010-0606.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 - http://www.redhat.com/support/errata/RHSA-2010-0907.html - https://bugzilla.redhat.com/show_bug.cgi?id=612028 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 - http://secunia.com/advisories/43315 - http://www.debian.org/security/2010/dsa-2094 - http://www.vmware.com/security/advisories/VMS
unia.com/advisories/43315 - http://www.debian.org/security/2010/dsa-2094 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2bc3c1179c781b359d4f2f3439cb3df72afc17fc - http://securitytracker.com/id?1024286 - http://www.securityfocus.com/bid/42249 - http://www.vupen.com/english/advisories/2010/3050 - http://www.securityfocus.com/archive/1/516397/100/0/threaded - http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.34/ChangeLog-2.6.34-rc6 - http://www.openwall.com/lists/oss-security/2010/07/09/2
CVE ID: CVE-2010-2522 State: PUBLISHED Published: 2010-07-13T17:00:00 Last Updated: 2024-08-07T02:39:37.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mipv6 daemon in UMIP 0.4 does not verify that netlink messages originated in the kernel, which allows local users to spoof netlink socket communication via a crafted unicast message. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/07/07/4 - http://www.openwall.com/lists/oss-security/2010/07/06/5 - http://www.openwall.com/lists/oss-security/2010/07/09/1 - http://marc.info/?l=oss-security&m=127850299910685&w=2 - http://marc.info/?l=oss-security&m=12785939081540
010/07/09/1 - http://marc.info/?l=oss-security&m=127850299910685&w=2 - http://marc.info/?l=oss-security&m=127859390815405&w=2 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html - http://www.securityfocus.com/bid/41524
CVE ID: CVE-2010-2523 State: PUBLISHED Published: 2010-07-13T17:00:00 Last Updated: 2024-08-07T02:39:36.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in ha.c in the mipv6 daemon in UMIP 0.4 allow remote attackers to have an unspecified impact via a crafted (1) ND_OPT_PREFIX_INFORMATION or (2) ND_OPT_HOME_AGENT_INFO packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/07/07/4 - http://www.securityfocus.com/bid/41522 - http://www.openwall.com/lists/oss-security/2010/07/06/5 - http://www.openwall.com/lists/oss-security/2010/07/09/1 - http://marc.info/?l=oss-security&m=127850299910685&
/07/06/5 - http://www.openwall.com/lists/oss-security/2010/07/09/1 - http://marc.info/?l=oss-security&m=127850299910685&w=2 - http://marc.info/?l=oss-security&m=127859390815405&w=2 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
CVE ID: CVE-2010-2524 State: PUBLISHED Published: 2010-09-08T19:00:00 Last Updated: 2024-08-07T02:39:36.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNS resolution functionality in the CIFS implementation in the Linux kernel before 2.6.35, when CONFIG_CIFS_DFS_UPCALL is enabled, relies on a user's keyring for the dns_resolver upcall in the cifs.upcall userspace helper, which allows local users to spoof the results of DNS queries and perform arbitrary CIFS mounts via vectors involving an add_key call, related to a "cache stuffing" issue and MS-DFS referrals. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0
rrals. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0610.html - http://www.ubuntu.com/usn/USN-1000-1 - http://marc.info/?l=oss-security&m=128078387328921&w=2 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35 - http://secunia.com/advisories/43315 - http://marc.info/?l=oss-security&m=128072090331700&w=2 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - https://bugzilla.redhat.com/show_bug.cgi?id=612166 - http://www.securityfocus.com/archive/1/516397/100/0/threaded - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2
ttp://www.securityfocus.com/archive/1/516397/100/0/threaded - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4c0c03ca54f72fdd5912516ad0a23ec5cf01bda7 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:172 - http://marc.info/?l=oss-security&m=128080755321157&w=2
CVE ID: CVE-2010-2525 State: PUBLISHED Published: 2021-06-22T11:39:48 Last Updated: 2024-08-07T02:39:37.258Z Vendors: n/a Products: kernel Problem Types: CWE-863 Description: A flaw was discovered in gfs2 file system’s handling of acls (access control lists). An unprivileged local attacker could exploit this flaw to gain access or execute any file stored in the gfs2 file system. Additional Analyst Notes: - CVE Program Container: References: - https://ubuntu.com/security/CVE-2010-2525 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2646a1f61a3b5525914757f10fa12b5b94713648
CVE ID: CVE-2010-2526 State: PUBLISHED Published: 2010-08-04T21:00:00 Last Updated: 2024-08-07T02:39:37.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cluster logical volume manager daemon (clvmd) in lvm2-cluster in LVM2 before 2.02.72, as used in Red Hat Global File System (GFS) and other products, does not verify client credentials upon a socket connection, which allows local users to cause a denial of service (daemon exit or logical-volume change) or possibly have unspecified other impact via crafted control commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1001-1 - https://www.redhat.com/archives/linux-lvm/2010-J
Program Container: References: - http://www.ubuntu.com/usn/USN-1001-1 - https://www.redhat.com/archives/linux-lvm/2010-July/msg00083.html - http://secunia.com/advisories/40759 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60809 - https://rhn.redhat.com/errata/RHSA-2010-0568.html - https://rhn.redhat.com/errata/RHSA-2010-0567.html - http://securitytracker.com/id?1024258 - https://bugzilla.redhat.com/show_bug.cgi?id=614248 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://www.osvdb.org/66753 - http://www.vupen.com/english/advisories/2010/1944
CVE ID: CVE-2010-2527 State: PUBLISHED Published: 2010-08-19T17:43:00 Last Updated: 2024-08-07T02:39:36.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in demo programs in FreeType before 2.4.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-963-1 - https://bugzilla.redhat.com/show_bug.cgi?id=614557 - http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html - http://www.debian.org/security/2010/dsa-2070 - http://git.savannah.gnu.org/cgit/freetype/freetype2-demos.g
g00001.html - http://www.debian.org/security/2010/dsa-2070 - http://git.savannah.gnu.org/cgit/freetype/freetype2-demos.git/commit/?id=b995299b73ba4cd259f221f500d4e63095508bec - http://securitytracker.com/id?1024266 - http://marc.info/?l=oss-security&m=127912955808467&w=2 - http://www.redhat.com/support/errata/RHSA-2010-0578.html - http://www.redhat.com/support/errata/RHSA-2010-0577.html - http://savannah.nongnu.org/bugs/?30054 - http://secunia.com/advisories/48951
CVE ID: CVE-2010-2528 State: PUBLISHED Published: 2010-07-29T18:00:00 Last Updated: 2024-08-07T02:39:37.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: The clientautoresp function in family_icbm.c in the oscar protocol plugin in libpurple in Pidgin before 2.7.2 allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via an X-Status message that lacks the expected end tag for a (1) desc or (2) title element. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1887 - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.462873 - h
isories/2010/1887 - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.462873 - http://developer.pidgin.im/viewmtn/revision/diff/fcb70f7c12120206d30ad33223ff85be7b226d1c/with/8e8ff246492e45af8f8d0808296d6f2906794dc0/libpurple/protocols/oscar/family_icbm.c - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18359 - http://www.pidgin.im/news/security/index.php?id=47 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60566 - http://www.osvdb.org/66506 - http://secunia.com/advisories/40699 - http://www.securityfocus.com/bid/41881 - http://www.vupen.com/english/advisories/2010/2221 - http://developer.pidgin.im/viewmtn
www.securityfocus.com/bid/41881 - http://www.vupen.com/english/advisories/2010/2221 - http://developer.pidgin.im/viewmtn/revision/info/8e8ff246492e45af8f8d0808296d6f2906794dc0
CVE ID: CVE-2010-2529 State: PUBLISHED Published: 2010-07-27T22:00:00Z Last Updated: 2024-08-07T02:39:36.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ping.c in iputils 20020927, 20070202, 20071127, and 20100214 on Mandriva Linux allows remote attackers to cause a denial of service (hang) via a crafted echo response. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:138 - http://www.vupen.com/english/advisories/2010/1890 - http://www.securityfocus.com/bid/41911
CVE ID: CVE-2010-2530 State: PUBLISHED Published: 2010-09-29T16:00:00Z Last Updated: 2024-09-16T23:45:53.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer signedness errors in smb_subr.c in the netsmb module in the kernel in NetBSD 5.0.2 and earlier, FreeBSD, and Apple Mac OS X allow local users to cause a denial of service (panic) via a negative size value in a /dev/nsmb ioctl operation, as demonstrated by a (1) SMBIOC_LOOKUP or (2) SMBIOC_OPENSESSION ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/07/12/6 - http://www.securityfocus.com/bid/41557 - http://cvsweb.netbsd.org/bsdweb.cgi/
wall.com/lists/oss-security/2010/07/12/6 - http://www.securityfocus.com/bid/41557 - http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/netsmb/smb_subr.c.diff?r1=1.34&r2=1.35&only_with_tag=MAIN&f=h - http://www.openwall.com/lists/oss-security/2010/07/16/2
CVE ID: CVE-2010-2531 State: PUBLISHED Published: 2010-08-20T20:00:00 Last Updated: 2024-08-07T02:39:37.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: The var_export function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer to the user when certain fatal errors occur, even if display_errors is off, which allows remote attackers to obtain sensitive information by causing the application to exceed limits for memory, execution time, or recursion. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4435 - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://marc.info/?l=bugtraq&m=130331363227777&w=2 - http:/
/HT4435 - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://marc.info/?l=bugtraq&m=130331363227777&w=2 - http://www.openwall.com/lists/oss-security/2010/07/16/3 - http://svn.php.net/viewvc/php/php-src/trunk/ext/standard/tests/general_functions/var_export_error2.phpt?view=log&pathrev=301143 - https://bugzilla.redhat.com/show_bug.cgi?id=617673 - http://www.debian.org/security/2011/dsa-2266 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://www.redhat.com/support/errata/RHSA-2010-0919.html - http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html - http://www.openwall.com/lists/oss-security/2010/07/13/1 - http://www.php.net/archive/20
nounce/2010//Aug/msg00003.html - http://www.openwall.com/lists/oss-security/2010/07/13/1 - http://www.php.net/archive/2010.php#id2010-07-22-2 - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://support.apple.com/kb/HT4312 - http://secunia.com/advisories/42410 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://marc.info/?l=bugtraq&m=130331363227777&w=2 - http://www.php.net/archive/2010.php#id2010-07-22-1 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html - http://www.vupen.com/english/advisories/2010/3081
CVE ID: CVE-2010-2532 State: PUBLISHED Published: 2010-09-03T19:00:00Z Last Updated: 2024-09-17T01:46:01.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: lxsession-logout in lxsession in LXDE, as used on SUSE openSUSE 11.3 and other platforms, does not lock the screen when the Suspend or Hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action. NOTE: there is no general agreement that this is a vulnerability, because separate control over locking can be an equally secure, or more secure, behavior in some threat environments. Additional Analyst Notes: - CVE Program Container: References: - http
more secure, behavior in some threat environments. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/07/15/1 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://www.openwall.com/lists/oss-security/2010/07/16/4 - https://bugzilla.redhat.com/show_bug.cgi?id=614608 - https://bugzilla.novell.com/show_bug.cgi?id=622083 - https://bugzillafiles.novell.org/attachment.cgi?id=375737
CVE ID: CVE-2010-2533 State: REJECTED Published: 2010-08-20T21:00:00Z Last Updated: 2024-09-16T17:48:52.313Z Description: No description available.
CVE ID: CVE-2010-2534 State: PUBLISHED Published: 2010-07-27T22:00:00 Last Updated: 2024-08-07T02:39:37.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NetworkSyncCommandQueue function in network/network_command.cpp in OpenTTD before 1.0.3 does not properly clear a pointer in a linked list, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted request, related to the client command queue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/60568 - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044565.html - http://www.vupen.com/engl
ties/60568 - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044565.html - http://www.vupen.com/english/advisories/2010/1888 - http://bugs.openttd.org/task/3909/getfile/6237/loop_fix.patch - http://security.openttd.org/en/CVE-2010-2534 - http://www.openwall.com/lists/oss-security/2010/07/20/1 - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044516.html - http://bugs.openttd.org/task/3909 - http://www.securityfocus.com/bid/41804 - http://osvdb.org/66503 - http://secunia.com/advisories/40760 - http://secunia.com/advisories/40630 - http://www.vupen.com/english/advisories/2010/1916
CVE ID: CVE-2010-2535 State: PUBLISHED Published: 2010-10-05T17:00:00Z Last Updated: 2024-09-17T02:27:39.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Back End in Joomla! 1.5.x before 1.5.20 allow remote authenticated users to inject arbitrary web script or HTML via administrator screens. Additional Analyst Notes: - CVE Program Container: References: - http://developer.joomla.org/security/news/318-20100704-core-xss-vulnerabilitis-in-back-end.html - http://www.ocert.org/advisories/ocert-2010-002.html - http://www.openwall.com/lists/oss-security/2010/07/20/2 - http://www.openwall.com/lists/oss-security/2010/07/21/8
CVE ID: CVE-2010-2536 State: PUBLISHED Published: 2010-08-02T20:00:00 Last Updated: 2024-08-07T02:39:37.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in rekonq 0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) a URL associated with a nonexistent domain name, related to webpage.cpp, aka a "universal XSS" issue; (2) unspecified vectors related to webview.cpp; and the about: views for (3) favorites, (4) bookmarks, (5) closed tabs, and (6) history. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=oss-security&m=127973502617945&w=2 - http://secunia.com/advi
- CVE Program Container: References: - http://marc.info/?l=oss-security&m=127973502617945&w=2 - http://secunia.com/advisories/40646 - http://www.osvdb.org/66568 - http://www.vupen.com/english/advisories/2010/2689 - http://marc.info/?l=oss-security&m=127971194610788&w=2 - https://bugs.kde.org/show_bug.cgi?id=217464 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049406.html
CVE ID: CVE-2010-2537 State: PUBLISHED Published: 2010-09-30T14:00:00 Last Updated: 2024-08-07T02:39:37.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a (1) BTRFS_IOC_CLONE or (2) BTRFS_IOC_CLONE_RANGE ioctl call that specifies this file as a donor. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1041-1 - http://www.openwall.com/lists/oss-security/2010/07/21/10 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLo