Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-1009 State: PUBLISHED Published: 2010-03-19T18:35:00Z Last Updated: 2024-09-16T23:01:34.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Educator extension 0.1.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38789 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006/
CVE ID: CVE-2010-1010 State: PUBLISHED Published: 2010-03-19T18:35:00Z Last Updated: 2024-09-17T00:01:37.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the MK Wastebasket (mk_wastebasket) extension 2.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006/ - http://www.securityfocus.com/bid/38792
CVE ID: CVE-2010-1011 State: PUBLISHED Published: 2010-03-19T18:35:00Z Last Updated: 2024-09-16T18:28:31.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the myDashboard (mydashboard) extension 0.1.13 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38795 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006/
CVE ID: CVE-2010-1012 State: PUBLISHED Published: 2010-03-19T18:35:00Z Last Updated: 2024-09-16T20:37:45.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the CleanDB (nf_cleandb) extension 1.0.7 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38810 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006/
CVE ID: CVE-2010-1013 State: PUBLISHED Published: 2010-03-19T18:35:00Z Last Updated: 2024-09-17T00:50:36.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Diocese of Portsmouth Database (pd_diocesedatabase) extension before 0.7.13 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38812 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006/ - http://typo3.org/extensions/repository/view/pd_diocesedatabase/0.7.13/ - http://secunia.com/advisories/38996 - http://osvdb.org/63034
CVE ID: CVE-2010-1014 State: PUBLISHED Published: 2010-03-19T18:35:00Z Last Updated: 2024-09-16T18:14:40.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Reports Logfile View (reports_logview) extension 1.2.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38823 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006/
CVE ID: CVE-2010-1015 State: PUBLISHED Published: 2010-03-19T18:35:00Z Last Updated: 2024-09-17T00:05:43.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the SAV Filter Alphabetic (sav_filter_abc) extension before 1.0.9 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/sav_filter_abc/1.0.9/ - http://secunia.com/advisories/38995 - http://osvdb.org/63033 - http://www.securityfocus.com/bid/38801 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006/
CVE ID: CVE-2010-1016 State: PUBLISHED Published: 2010-03-19T18:35:00Z Last Updated: 2024-09-17T03:38:32.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the SAV Filter Selectors (sav_filter_selectors) extension before 1.0.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38804 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006/ - http://typo3.org/extensions/repository/view/sav_filter_selectors/1.0.5/
CVE ID: CVE-2010-1017 State: PUBLISHED Published: 2010-03-19T18:35:00Z Last Updated: 2024-09-17T02:26:20.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the SAV Filter Months (sav_filter_months) extension before 1.0.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/63035 - http://secunia.com/advisories/38994 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006/ - http://www.securityfocus.com/bid/38806 - http://typo3.org/extensions/repository/view/sav_filter_months/1.0.5/
CVE ID: CVE-2010-1018 State: PUBLISHED Published: 2010-03-19T18:35:00Z Last Updated: 2024-09-17T00:56:22.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Book Reviews (sk_bookreview) extension 0.0.12 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38803 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006/
CVE ID: CVE-2010-1019 State: PUBLISHED Published: 2010-03-19T18:35:00Z Last Updated: 2024-09-17T00:00:41.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Simple Gallery (sk_simplegallery) extension 0.0.9 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006/ - http://www.securityfocus.com/bid/38796
CVE ID: CVE-2010-1020 State: PUBLISHED Published: 2010-03-19T18:35:00Z Last Updated: 2024-09-16T23:10:30.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Simple Gallery (sk_simplegallery) extension 0.0.9 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006/ - http://www.securityfocus.com/bid/38796
CVE ID: CVE-2010-1021 State: PUBLISHED Published: 2010-03-19T18:35:00Z Last Updated: 2024-09-16T19:09:23.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Typo3 Quixplorer (t3quixplorer) extension before 1.7.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/t3quixplorer/1.7.1/ - http://secunia.com/advisories/38993 - http://www.securityfocus.com/bid/38818 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006/ - http://osvdb.org/63036
CVE ID: CVE-2010-1022 State: PUBLISHED Published: 2010-03-19T18:35:00Z Last Updated: 2024-09-16T22:26:18.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TYPO3 Security - Salted user password hashes (t3sec_saltedpw) extension before 0.2.13 for TYPO3 allows remote attackers to bypass authentication via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/t3sec_saltedpw/0.2.13/ - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006/ - http://secunia.com/advisories/38992 - http://www.securityfocus.com/bid/38799
CVE ID: CVE-2010-1023 State: PUBLISHED Published: 2010-03-19T18:35:00Z Last Updated: 2024-09-17T01:32:02.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the UserTask Center, Recent (taskcenter_recent) extension 0.1.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38797 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006/ - http://typo3.org/extensions/repository/view/taskcenter_recent/0.2.0/ - http://secunia.com/advisories/38985 - http://osvdb.org/63037
CVE ID: CVE-2010-1024 State: PUBLISHED Published: 2010-03-19T18:35:00 Last Updated: 2024-08-07T01:06:52.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the TGM-Newsletter (tgm_newsletter) extension 0.0.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/tgm_newsletter/0.0.3/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/56978 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006/ - http://www.securityfocus.com/bid/38805
CVE ID: CVE-2010-1025 State: PUBLISHED Published: 2010-03-19T18:35:00 Last Updated: 2024-08-07T01:06:52.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the TGM-Newsletter (tgm_newsletter) extension 0.0.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56977 - http://typo3.org/extensions/repository/view/tgm_newsletter/0.0.3/ - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006/ - http://www.securityfocus.com/bid/38805
CVE ID: CVE-2010-1026 State: PUBLISHED Published: 2010-03-19T18:35:00 Last Updated: 2024-08-07T01:06:52.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the CleanDB - DBAL (tmsw_cleandb) extension 2.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38800 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/56979
CVE ID: CVE-2010-1027 State: PUBLISHED Published: 2010-03-19T18:35:00 Last Updated: 2024-08-07T01:06:52.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Meet Travelmates (travelmate) extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56980 - http://www.securityfocus.com/bid/38802 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006/
CVE ID: CVE-2010-1028 State: PUBLISHED Published: 2010-03-19T21:00:00 Last Updated: 2024-08-07T01:06:52.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the decompression functionality in the Web Open Fonts Format (WOFF) decoder in Mozilla Firefox 3.6 before 3.6.2 and 3.7 before 3.7 alpha 3 allows remote attackers to execute arbitrary code via a crafted WOFF file that triggers a buffer overflow, as demonstrated by the vd_ff module in VulnDisco 9.0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=552216 - https://forum.immunityinc.com/board/thread/1161/vulndisco-9-0/ - http://blog.mozilla.com/secu
g/show_bug.cgi?id=552216 - https://forum.immunityinc.com/board/thread/1161/vulndisco-9-0/ - http://blog.mozilla.com/security/2010/02/22/secunia-advisory-sa38608/ - http://www.h-online.com/security/news/item/Zero-day-exploit-for-Firefox-3-6-936124.html - http://blog.psi2.de/en/2010/02/20/going-commercial-with-firefox-vulnerabilities/ - http://secunia.com/advisories/38608 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7969 - http://blog.mozilla.com/security/2010/03/18/update-on-secunia-advisory-sa38608/ - http://www.mozilla.org/security/announce/2010/mfsa2010-08.html - http://www.kb.cert.org/vuls/id/964549 - http://secunia.com/community/forum/thread/sh
ty/announce/2010/mfsa2010-08.html - http://www.kb.cert.org/vuls/id/964549 - http://secunia.com/community/forum/thread/show/3592
CVE ID: CVE-2010-1029 State: PUBLISHED Published: 2010-03-19T21:00:00 Last Updated: 2024-08-07T01:06:52.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Safari on iPhone OS and iPhone OS for iPod touch, and Google Chrome 4.0.249, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a STYLE element composed of a large number of *> sequences. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56524 - http://secunia.com/advisories/43068 - ht
ner: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56524 - http://secunia.com/advisories/43068 - http://www.exploit-db.com/exploits/11574 - http://www.exploit-db.com/exploits/11567 - http://www.securityfocus.com/bid/38398 - http://www.vupen.com/english/advisories/2011/0212 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56527 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14301
CVE ID: CVE-2010-1030 State: PUBLISHED Published: 2010-03-31T17:35:00 Last Updated: 2024-08-07T01:06:52.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP-UX B.11.31, with AudFilter rules enabled, allows local users to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39046 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11779 - http://marc.info/?l=bugtraq&m=126996727024732&w=2 - http://marc.info/?l=bugtraq&m=126996727024732&w=2 - http://www.securitytracker.com/id?1023772
CVE ID: CVE-2010-1031 State: PUBLISHED Published: 2010-04-01T19:00:00Z Last Updated: 2024-09-17T01:21:31.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Insight Control for Linux (aka IC-Linux or ICE-LX) 2.11 and earlier allows local users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39052 - http://secunia.com/advisories/39227 - http://marc.info/?l=bugtraq&m=126996888626964&w=2 - http://www.vupen.com/english/advisories/2010/0750 - http://securitytracker.com/id?1023771 - http://marc.info/?l=bugtraq&m=126996888626964&w=2
CVE ID: CVE-2010-1032 State: PUBLISHED Published: 2010-04-21T14:00:00 Last Updated: 2024-08-07T01:06:52.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP HP-UX B.11.11 allows local users to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39537 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12146 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02091749 - http://www.vupen.com/english/advisories/2010/0948 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02091749
CVE ID: CVE-2010-1033 State: PUBLISHED Published: 2010-04-21T14:00:00 Last Updated: 2024-08-07T01:06:52.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in a certain Tetradyne ActiveX control in HP Operations Manager 7.5, 8.10, and 8.16 might allow remote attackers to execute arbitrary code via a long string argument to the (1) LoadFile or (2) SaveFile method, related to srcvw32.dll and srcvw4.dll. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39578 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57938 - http://secunia.com/advisories/39538 - http://www.vupen.com/english/advisories/
orce.ibmcloud.com/vulnerabilities/57938 - http://secunia.com/advisories/39538 - http://www.vupen.com/english/advisories/2010/0946 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02078800 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02078800 - http://www.corelan.be:8800/wp-content/forum-file-uploads/mr_me/hpoperationsmngr.html.txt - http://securitytracker.com/id?1023894 - http://net-ninja.net/blog/media/blogs/b/exploits/hpoperationsmngr.html.txt - http://www.corelan.be:8800/advisories.php?id=CORELAN-10-027
CVE ID: CVE-2010-1034 State: PUBLISHED Published: 2010-04-23T14:00:00 Last Updated: 2024-08-07T01:06:52.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP System Management Homepage (SMH) 6.0 before 6.0.0-95 on Linux, and 6.0 before 6.0.0.96 on Windows, allows remote authenticated users to obtain sensitive information, modify data, and cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444 - http://www.osvdb.org/64089 - http://securitytracker.com/id?1023909 - http://h20000.www2.hp.com/bizsupport/TechSupport/Docu
tp://www.osvdb.org/64089 - http://securitytracker.com/id?1023909 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444
CVE ID: CVE-2010-1035 State: PUBLISHED Published: 2010-04-23T14:00:00 Last Updated: 2024-08-07T01:06:52.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in HP Virtual Machine Manager (VMM) before 6.0 allow remote authenticated users to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/510881/100/0/threaded - http://www.securityfocus.com/bid/39637 - http://secunia.com/advisories/39583 - http://www.securityfocus.com/archive/1/510881/100/0/threaded - http://www.securitytracker.com/id?1023913
CVE ID: CVE-2010-1036 State: PUBLISHED Published: 2010-04-28T22:00:00Z Last Updated: 2024-09-16T16:37:36.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP System Insight Manager before 6.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=127239985506823&w=2 - http://securitytracker.com/id?1023927 - http://secunia.com/advisories/39645 - http://www.securityfocus.com/bid/39735 - http://marc.info/?l=bugtraq&m=127239985506823&w=2
CVE ID: CVE-2010-1037 State: PUBLISHED Published: 2010-04-28T22:00:00Z Last Updated: 2024-09-17T00:50:49.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in HP System Insight Manager before 6.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=127239985506823&w=2 - http://securitytracker.com/id?1023927 - http://secunia.com/advisories/39645 - http://www.securityfocus.com/bid/39736 - http://marc.info/?l=bugtraq&m=127239985506823&w=2
CVE ID: CVE-2010-1038 State: PUBLISHED Published: 2010-04-28T22:00:00Z Last Updated: 2024-09-17T01:41:30.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP System Insight Manager before 6.0 allows remote authenticated users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=127239985506823&w=2 - http://securitytracker.com/id?1023927 - http://www.securityfocus.com/bid/39734 - http://secunia.com/advisories/39645 - http://marc.info/?l=bugtraq&m=127239985506823&w=2
CVE ID: CVE-2010-1039 State: PUBLISHED Published: 2010-05-20T17:00:00 Last Updated: 2024-08-07T01:06:52.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCplus B.11.31_09 and earlier on HP HP-UX B.11.11, B.11.23, and B.11.31; and SGI IRIX 6.5 allows remote attackers to execute arbitrary code via an RPC request containing format string specifiers in an invalid directory name. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/64729 - http://www.ibm.com/support/docview.wss?uid=isg1IZ75440 - http://secunia.com/advi
References: - http://osvdb.org/64729 - http://www.ibm.com/support/docview.wss?uid=isg1IZ75440 - http://secunia.com/advisories/39911 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=5088 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11986 - http://www.securityfocus.com/bid/40248 - http://www.securitytracker.com/id?1023994 - http://www.ibm.com/support/docview.wss?uid=isg1IZ75369 - http://www.vupen.com/english/advisories/2010/1213 - http://www.ibm.com/support/docview.wss?uid=isg1IZ73757 - http://www.ibm.com/support/docview.wss?uid=isg1IZ73599 - http://www.checkpoint.com/defense/advisories/public/2010/cpai-13-May.html - http
m/support/docview.wss?uid=isg1IZ73599 - http://www.checkpoint.com/defense/advisories/public/2010/cpai-13-May.html - http://www.securityfocus.com/archive/1/511405/100/0/threaded - http://marc.info/?l=bugtraq&m=127428077629933&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12103 - http://www.ibm.com/support/docview.wss?uid=isg1IZ75465 - http://www.ibm.com/support/docview.wss?uid=isg1IZ73874 - http://marc.info/?l=bugtraq&m=127428077629933&w=2 - http://www.vupen.com/english/advisories/2010/1199 - http://secunia.com/advisories/39835 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58718 - http://securitytracker.com/id?1024016 - http://www.vupen.
- https://exchange.xforce.ibmcloud.com/vulnerabilities/58718 - http://securitytracker.com/id?1024016 - http://www.vupen.com/english/advisories/2010/1212 - http://www.vupen.com/english/advisories/2010/1211 - http://aix.software.ibm.com/aix/efixes/security/pcnfsd_advisory.asc - http://www.ibm.com/support/docview.wss?uid=isg1IZ73590 - http://www.ibm.com/support/docview.wss?uid=isg1IZ73681
CVE ID: CVE-2010-1040 State: PUBLISHED Published: 2010-03-23T18:00:00Z Last Updated: 2024-09-16T20:06:22.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "IP address range limitation" function in OpenPNE 1.6 through 1.8, 2.0 through 2.8, 2.10 through 2.14, and 3.0 through 3.4, when mobile device support is enabled, allows remote attackers to bypass the "simple login" functionality via unknown vectors related to spoofing. Additional Analyst Notes: - CVE Program Container: References: - http://www.openpne.jp/archives/4612/ - http://www.ipa.go.jp/security/vuln/alert/201003_openpne.html - http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000006.html - http://secunia.com/advisori
ln/alert/201003_openpne.html - http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000006.html - http://secunia.com/advisories/38857 - http://jvn.jp/en/jp/JVN06874657/index.html