Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-1598 State: PUBLISHED Published: 2010-04-29T16:00:00 Last Updated: 2024-08-07T01:28:42.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpThumb.php in phpThumb() 1.7.9 and possibly other versions, when ImageMagick is installed, allows remote attackers to execute arbitrary commands via the fltr[] parameter, as discovered in the wild in April 2010. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39605 - http://secunia.com/advisories/57038 - http://secunia.com/advisories/39556 - http://modx.com/blog/
yfocus.com/bid/39605 - http://secunia.com/advisories/57038 - http://secunia.com/advisories/39556 - http://modx.com/blog/2014/01/21/revolution-2.2.11%E2%80%94security-fixes-and-prevent-change-loss - https://exchange.xforce.ibmcloud.com/vulnerabilities/58040 - http://osvdb.org/63939
CVE ID: CVE-2010-1599 State: PUBLISHED Published: 2010-04-29T17:00:00 Last Updated: 2024-08-07T01:28:41.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in loadorder.php in NKInFoWeb 2.5 and 5.2.2.0 allows remote attackers to execute arbitrary SQL commands via the id_sp parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1004-exploits/nkinfoweb-sql.txt - http://www.exploit-db.com/exploits/12354 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58082 - http://secunia.com/advisories/39609
CVE ID: CVE-2010-1600 State: PUBLISHED Published: 2010-04-29T17:00:00 Last Updated: 2024-08-07T01:28:42.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Media Mall Factory (com_mediamall) component 1.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the category parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.thefactory.ro/shop/joomla-components/media-mall.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/57906 - http://secunia.com/advisories/39546 - http://www.osvdb.org/63940 - http://www.securityfocus.com/bid/39488 - http://www.exploit-db.com/exploits/
sories/39546 - http://www.osvdb.org/63940 - http://www.securityfocus.com/bid/39488 - http://www.exploit-db.com/exploits/12234 - http://www.packetstormsecurity.com/1004-exploits/joomlamediamallfactory-bsql.txt
CVE ID: CVE-2010-1601 State: PUBLISHED Published: 2010-04-29T17:00:00 Last Updated: 2024-08-07T01:28:41.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the JA Comment (com_jacomment) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57848 - http://www.securityfocus.com/bid/39516 - http://secunia.com/advisories/39472 - http://www.osvdb.org/63802 - http://www.exploit-db.com/exploits/12236 - http://packetstormsecurity.org/1004-exploits/joomlajacomment-l
db.org/63802 - http://www.exploit-db.com/exploits/12236 - http://packetstormsecurity.org/1004-exploits/joomlajacomment-lfi.txt
CVE ID: CVE-2010-1602 State: PUBLISHED Published: 2010-04-29T17:00:00 Last Updated: 2024-08-07T01:28:43.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the ZiMB Comment (com_zimbcomment) component 0.8.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39548 - http://www.vupen.com/english/advisories/2010/0932 - http://www.exploit-db.com/exploits/12283 - http://packetstormsecurity.org/1004-exploits/joomlazimbcomment-lfi.txt
CVE ID: CVE-2010-1603 State: PUBLISHED Published: 2010-04-29T17:00:00 Last Updated: 2024-08-07T01:28:41.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the ZiMB Core (aka ZiMBCore or com_zimbcore) component 0.1 in the ZiMB Manager collection for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/12284 - http://packetstormsecurity.org/1004-exploits/joomlazimbmanager-lfi.txt - http://www.securityfocus.com/bid/39546 - http://www.vupen.co
stormsecurity.org/1004-exploits/joomlazimbmanager-lfi.txt - http://www.securityfocus.com/bid/39546 - http://www.vupen.com/english/advisories/2010/0931
CVE ID: CVE-2010-1604 State: PUBLISHED Published: 2010-04-29T17:00:00 Last Updated: 2024-08-07T01:28:43.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in admin_login.php in NCT Jobs Portal Script allow remote attackers to execute arbitrary SQL commands via the (1) user parameter (aka login field) and (2) passwd parameter (aka password field). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1004-exploits/nctjobsportal-sqlxss.txt - http://secunia.com/advisories/39601 - http://www.exploit-db.com/exploits/12370 - https://ex
s/nctjobsportal-sqlxss.txt - http://secunia.com/advisories/39601 - http://www.exploit-db.com/exploits/12370 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58080
CVE ID: CVE-2010-1605 State: PUBLISHED Published: 2010-04-29T17:00:00 Last Updated: 2024-08-07T01:28:41.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in isearch.php in NCT Jobs Portal Script allow remote attackers to execute arbitrary SQL commands via the (1) anyword and (2) cityname parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39601 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58079
CVE ID: CVE-2010-1606 State: PUBLISHED Published: 2010-04-29T17:00:00 Last Updated: 2024-08-07T01:28:42.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in NCT Jobs Portal Script allow remote attackers to inject arbitrary web script or HTML via the (1) search, (2) Keywords, (3) Tags, or (4) Desired City field. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1004-exploits/nctjobsportal-sqlxss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/58081 - http://www.exploit-db.com/exploits/12370
CVE ID: CVE-2010-1607 State: PUBLISHED Published: 2010-04-29T17:00:00 Last Updated: 2024-08-07T01:28:43.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in wmi.php in the Webmoney Web Merchant Interface (aka WMI or com_wmi) component 1.5.0 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/58032 - http://secunia.com/advisories/39539 - http://osvdb.org/63979 - http://www.exploit-db.com/exploits/12316 - http://www.securityfocus.com/bid/3960
sories/39539 - http://osvdb.org/63979 - http://www.exploit-db.com/exploits/12316 - http://www.securityfocus.com/bid/39608
CVE ID: CVE-2010-1608 State: PUBLISHED Published: 2010-04-29T17:00:00 Last Updated: 2024-08-07T01:28:43.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in IBM Lotus Notes 8.5 and 8.5fp1, and possibly other versions, allows remote attackers to execute arbitrary code via unknown attack vectors, as demonstrated by the vd_ln module in VulnDisco 9.0. NOTE: as of 20100222, this disclosure has no actionable information. However, because the VulnDisco author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38622 - http
ng purposes. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38622 - https://forum.immunityinc.com/board/thread/1161/vulndisco-9-0/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/58322 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14489 - http://www.securityfocus.com/bid/38300
CVE ID: CVE-2010-1609 State: PUBLISHED Published: 2010-04-29T17:00:00 Last Updated: 2024-08-07T01:28:43.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SAP NetWeaver 2004 before SP21 and 2004s before SP13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0397 - http://www.securityfocus.com/archive/1/509499/100/0/threaded - http://secunia.com/advisories/38629 - http://archives.neohapsis.com/archives/fulldisclosure/2010-02/0216.html
CVE ID: CVE-2010-1610 State: PUBLISHED Published: 2010-04-29T19:00:00 Last Updated: 2024-08-07T01:28:42.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in index.php in OpenCart 1.4 allows remote attackers to hijack the authentication of an application administrator for requests that create an administrative account via a POST request with the route parameter set to "user/user/insert." NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/509313/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilit
nces: - http://www.securityfocus.com/archive/1/509313/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/56061 - http://blog.visionsource.org/2010/01/28/opencart-csrf-vulnerability/ - http://forum.opencart.com/viewtopic.php?f=16&t=10203&p=49654&hilit=csrf#p49654 - http://secunia.com/advisories/38419
CVE ID: CVE-2010-1611 State: PUBLISHED Published: 2010-04-29T19:00:00 Last Updated: 2024-08-07T01:28:43.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in AlegroCart 1.1 allows remote attackers to hijack the authentication of the administrator for requests that reset the administrator password via a POST to admin/ with an update action. Additional Analyst Notes: - CVE Program Container: References: - http://forum.alegrocart.com/viewtopic.php?f=8&t=54 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56037 - http://secunia.com/advisories/38386 - http://packetstormsecurity.org/1002-exploits/alegrocart-xsrf.txt - http://osvdb.
- http://secunia.com/advisories/38386 - http://packetstormsecurity.org/1002-exploits/alegrocart-xsrf.txt - http://osvdb.org/62073
CVE ID: CVE-2010-1612 State: PUBLISHED Published: 2010-04-29T19:00:00 Last Updated: 2024-08-07T01:28:42.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IBM WebSphere DataPower XML Accelerator XA35, Low Latency Appliance XM70, Integration Appliance XI50, B2B Appliance XB60, and XML Security Gateway XS40 SOA Appliances before 3.8.0.0, when a QLOGIC Ethernet interface is used, allow remote attackers to cause a denial of service (interface outage) via malformed ICMP packets to the 0.0.0.0 destination IP address. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37952 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC61364 -
ner: References: - http://www.securityfocus.com/bid/37952 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC61364 - http://www-01.ibm.com/support/docview.wss?uid=swg24024772 - http://www-01.ibm.com/support/docview.wss?uid=swg24024773 - http://www-01.ibm.com/support/docview.wss?uid=swg24024771 - http://www-01.ibm.com/support/docview.wss?uid=swg24024774 - http://www-01.ibm.com/support/docview.wss?uid=swg24024770 - http://www.securityfocus.com/archive/1/509163/100/0/threaded
CVE ID: CVE-2010-1613 State: PUBLISHED Published: 2010-04-29T21:00:00 Last Updated: 2024-08-07T01:28:43.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 1.8.x and 1.9.x before 1.9.8 does not enable the "Regenerate session id during login" setting by default, which makes it easier for remote attackers to conduct session fixation attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1107 - http://moodle.org/security/ - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html
CVE ID: CVE-2010-1614 State: PUBLISHED Published: 2010-04-29T21:00:00 Last Updated: 2024-08-07T01:28:43.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the Login-As feature or (2) when the global search feature is enabled, unspecified global search forms in the Global Search Engine. NOTE: vector 1 might be resultant from a cross-site request forgery (CSRF) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1107 -
ty. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1107 - http://moodle.org/security/ - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html
CVE ID: CVE-2010-1615 State: PUBLISHED Published: 2010-04-29T21:00:00 Last Updated: 2024-08-07T01:28:42.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) the add_to_log function in mod/wiki/view.php in the wiki module, or (2) "data validation in some forms elements" related to lib/form/selectgroups.php. Additional Analyst Notes: - CVE Program Container: References: - http://cvs.moodle.org/moodle/lib/form/selectgroups.php?r1=1.2.4.2&r2=1.2.4.3 - http://www.vupen.com/english/advisories/2010/1107 - http://mo
g/moodle/lib/form/selectgroups.php?r1=1.2.4.2&r2=1.2.4.3 - http://www.vupen.com/english/advisories/2010/1107 - http://moodle.org/security/ - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html - http://cvs.moodle.org/moodle/mod/wiki/view.php?r1=1.76.2.6&r2=1.76.2.7
CVE ID: CVE-2010-1616 State: PUBLISHED Published: 2010-04-29T21:00:00 Last Updated: 2024-08-07T01:28:43.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 1.8.x and 1.9.x before 1.9.8 can create new roles when restoring a course, which allows teachers to create new accounts even if they do not have the moodle/user:create capability. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1107 - http://moodle.org/security/ - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html - http://tracker.moodle.org/browse/MDL-16658
CVE ID: CVE-2010-1617 State: PUBLISHED Published: 2010-04-29T21:00:00 Last Updated: 2024-08-07T01:28:43.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: user/view.php in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 does not properly check a role, which allows remote authenticated users to obtain the full names of other users via the course profile page. Additional Analyst Notes: - CVE Program Container: References: - http://cvs.moodle.org/moodle/user/view.php?r1=1.168.2.28&r2=1.168.2.29 - http://www.vupen.com/english/advisories/2010/1107 - http://moodle.org/security/ - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html
CVE ID: CVE-2010-1618 State: PUBLISHED Published: 2010-04-29T21:00:00 Last Updated: 2024-08-07T01:28:42.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the phpCAS client library before 1.1.0, as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is not properly handled in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.ja-sig.org/wiki/display/CASC/phpCAS+ChangeLog - http://www.vupen.com/english/advisories/2010/1107 - http://moodle.org/security/ - http://lists.opensuse.org/opensuse-security-ann
w.vupen.com/english/advisories/2010/1107 - http://moodle.org/security/ - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html - http://www.ja-sig.org/issues/browse/PHPCAS-52
CVE ID: CVE-2010-1619 State: PUBLISHED Published: 2010-04-29T21:00:00 Last Updated: 2024-08-07T01:28:42.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the fix_non_standard_entities function in the KSES HTML text cleaning library (weblib.php), as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via crafted HTML entities. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1107 - http://moodle.org/security/ - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html
CVE ID: CVE-2010-1620 State: PUBLISHED Published: 2010-05-12T01:00:00Z Last Updated: 2024-08-07T01:28:42.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the load_iface function in Tools/gdomap.c in gdomap in GNUstep Base before 1.20.0 might allow context-dependent attackers to execute arbitrary code via a (1) file or (2) socket that provides configuration data with many entries, leading to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39746 - http://savannah.gnu.org/bugs/?29755 - http://thread.gmane.org/gmane.comp.lib.gnustep.bugs/12336 - http://ftpmain.gnustep.org/pub/gnustep/c
u.org/bugs/?29755 - http://thread.gmane.org/gmane.comp.lib.gnustep.bugs/12336 - http://ftpmain.gnustep.org/pub/gnustep/core/gnustep-base-1.20.0.tar.gz - http://marc.info/?l=oss-security&m=127325778527537&w=2 - http://marc.info/?l=oss-security&m=127324274005709&w=2 - https://bugs.launchpad.net/ubuntu/+source/gnustep-base/+bug/573108
CVE ID: CVE-2010-1621 State: PUBLISHED Published: 2010-05-14T19:24:00 Last Updated: 2024-08-07T01:28:43.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mysql_uninstall_plugin function in sql/sql_plugin.cc in MySQL 5.1 before 5.1.46 does not check privileges before uninstalling a plugin, which allows remote attackers to uninstall arbitrary plugins via the UNINSTALL PLUGIN command. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1397-1 - http://bugs.mysql.com/bug.php?id=51770 - http://www.securityfocus.com/bid/39543 - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-46.html - http://www.mandriva.com/security/advisories?name=MDVS
/39543 - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-46.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:093
CVE ID: CVE-2010-1622 State: PUBLISHED Published: 2010-06-21T16:00:00 Last Updated: 2024-08-07T01:28:42.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: followed by a URL of a crafted .jar file. Additional Analyst Notes: - CVE Program Container: References: - http://geronimo.apache.org/2010/07/21/apache-geronimo-v216-released.html - http://www.vupen.com/english/advisories/2011/0237 - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - http:/
en.com/english/advisories/2011/0237 - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - http://www.exploit-db.com/exploits/13918 - http://secunia.com/advisories/43087 - http://www.springsource.com/security/cve-2010-1622 - http://secunia.com/advisories/41025 - http://www.redhat.com/support/errata/RHSA-2011-0175.html - http://geronimo.apache.org/22x-security-report.html - http://www.securityfocus.com/bid/40954 - http://secunia.com/advisories/41016 - http://www.securitytracker.com/id/1033898 - http://geronimo.apache.org/21x-security-report.html - http://www.securityfocus.com/archive/1/511877
CVE ID: CVE-2010-1623 State: PUBLISHED Published: 2010-10-04T20:00:00 Last Updated: 2024-08-07T01:28:43.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache Portable Runtime Utility library (aka APR-util) before 1.3.10, as used in the mod_reqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors related to the destruction of an APR bucket. Additional Analyst Notes: - CVE Program Container: References: - http://svn.apache.org/viewvc?view=revision&revision=1003494 - http://svn.apache.org/view
rogram Container: References: - http://svn.apache.org/viewvc?view=revision&revision=1003494 - http://svn.apache.org/viewvc?view=revision&revision=1003492 - http://secunia.com/advisories/43285 - http://www.vupen.com/english/advisories/2010/3065 - http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.3 - http://www.vupen.com/english/advisories/2010/3064 - http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.627828 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049885.html - http://security-tracker.debian.org/tracker/CVE-2010-1623 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049939.html - http://www.vupen.com
VE-2010-1623 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049939.html - http://www.vupen.com/english/advisories/2010/2806 - http://secunia.com/advisories/41701 - http://www.ubuntu.com/usn/USN-1022-1 - http://www.redhat.com/support/errata/RHSA-2010-0950.html - http://secunia.com/advisories/42361 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12800 - http://svn.apache.org/viewvc?view=revision&revision=1003626 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM31601 - http://www.redhat.com/support/errata/RHSA-2011-0897.html - http://www.vupen.com/english/advisories/2010/2556 - http://secunia.com/advisories/42403 - http://w
RHSA-2011-0897.html - http://www.vupen.com/english/advisories/2010/2556 - http://secunia.com/advisories/42403 - http://www.securityfocus.com/bid/43673 - http://svn.apache.org/viewvc?view=revision&revision=1003495 - http://www.redhat.com/support/errata/RHSA-2011-0896.html - http://secunia.com/advisories/42367 - http://blogs.sun.com/security/entry/cve_2010_1623_memory_leak - http://secunia.com/advisories/43211 - http://secunia.com/advisories/42015 - http://secunia.com/advisories/42537 - http://svn.apache.org/viewvc?view=revision&revision=1003493 - http://marc.info/?l=bugtraq&m=130168502603566&w=2 - http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00011.html - http://www.mandriva