Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ogram Container: References: - http://wiki.orbeon.com/forms/doc/developer-guide/release-notes/39 - http://www.securityfocus.com/bid/47362 - http://www.stratsec.net/Research/Advisories/Orbeon-Forms-XML-Entity-Dereferencing-%28SS-2011-004 - https://github.com/orbeon/orbeon-forms/commit/aba6681660f65af7f1676434da68c10298c30200
CVE ID: CVE-2010-3261 State: PUBLISHED Published: 2010-09-24T18:00:00 Last Updated: 2024-08-07T03:03:18.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in RSA Authentication Agent 7.0 before P2 for Web allows remote attackers to read unspecified data via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43406 - http://www.securityfocus.com/archive/1/513908/100/0/threaded
CVE ID: CVE-2010-3262 State: PUBLISHED Published: 2010-09-20T20:00:00 Last Updated: 2024-08-07T03:03:18.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Flock Browser 3.x before 3.0.0.4114 allows remote attackers to inject arbitrary web script or HTML via a crafted RSS feed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43225 - http://flock.com/security/ - http://www.securityfocus.com/archive/1/513701/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/61820
CVE ID: CVE-2010-3263 State: PUBLISHED Published: 2010-09-10T19:00:00 Last Updated: 2024-08-07T03:03:18.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in setup/frames/index.inc.php in the setup script in phpMyAdmin 3.x before 3.3.7 allows remote attackers to inject arbitrary web script or HTML via a server name. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:186 - http://secunia.com/advisories/41210 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61675 - http://www.phpmyadmin.net/home_page/security/PMASA-2010-7.php
CVE ID: CVE-2010-3264 State: PUBLISHED Published: 2010-09-08T19:00:00Z Last Updated: 2024-09-17T00:42:03.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: The engine installer in Novell Identity Manager (aka IDM) 3.6.1 stores admin tree credentials in /tmp/idmInstall.log, which allows local users to obtain sensitive information by reading this file. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=7006705 - http://secunia.com/advisories/41194 - http://www.vupen.com/english/advisories/2010/2226
CVE ID: CVE-2010-3266 State: PUBLISHED Published: 2010-12-02T16:00:00 Last Updated: 2024-08-07T03:03:18.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via (1) the pcd parameter to edit_bug.aspx, (2) the bug_id parameter to edit_comment.aspx, (3) the id parameter to edit_user_permissions2.aspx, or (4) the default_name parameter to edit_customfield.aspx. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://btnet.svn.sourceforge.net/view
arty information. Additional Analyst Notes: - CVE Program Container: References: - http://btnet.svn.sourceforge.net/viewvc/btnet/RELEASE_NOTES.TXT?revision=578&view=markup - http://www.exploit-db.com/exploits/15653 - http://www.securityfocus.com/archive/1/514957/100/0/threaded - http://www.securityfocus.com/bid/45121 - http://secunia.com/advisories/42418 - http://www.coresecurity.com/content/multiple-vulnerabilities-in-bugtracker
CVE ID: CVE-2010-3267 State: PUBLISHED Published: 2010-12-02T16:00:00 Last Updated: 2024-08-07T03:03:18.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to execute arbitrary SQL commands via (1) the qu_id parameter to bugs.aspx, (2) the row_id parameter to delete_query.aspx, the (3) new_project or (4) us_id parameter to edit_bug.aspx, or (5) the bug_list parameter to massedit.aspx. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://btnet.svn.sourceforge.net/viewvc/btnet/RELEASE_NOTES.T
onal Analyst Notes: - CVE Program Container: References: - http://btnet.svn.sourceforge.net/viewvc/btnet/RELEASE_NOTES.TXT?revision=578&view=markup - http://www.exploit-db.com/exploits/15653 - http://www.securityfocus.com/archive/1/514957/100/0/threaded - http://www.securityfocus.com/bid/45121 - http://secunia.com/advisories/42418 - http://www.coresecurity.com/content/multiple-vulnerabilities-in-bugtracker
CVE ID: CVE-2010-3268 State: PUBLISHED Published: 2010-12-22T20:00:00 Last Updated: 2024-08-07T03:03:18.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GetStringAMSHandler function in prgxhndl.dll in hndlrsvc.exe in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (AMS), as used in Symantec Antivirus Corporate Edition 10.1.4.4010 on Windows 2000 SP4 and Symantec Endpoint Protection before 11.x, does not properly validate the CommandLine field of an AMS request, which allows remote attackers to cause a denial of service (application crash) via a crafted request. Additional Analyst Notes: - CVE Program Container: Referenc
denial of service (application crash) via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/515191/100/0/threaded - http://secunia.com/advisories/43099 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110126_00 - http://www.vupen.com/english/advisories/2010/3206 - http://www.coresecurity.com/content/symantec-intel-handler-service-remote-dos - http://secunia.com/advisories/42593 - http://www.securitytracker.com/id?1024866 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64028 - http://www.securityfocus.com/bid/45936 - http://www.vup
6 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64028 - http://www.securityfocus.com/bid/45936 - http://www.vupen.com/english/advisories/2011/0234
CVE ID: CVE-2010-3269 State: PUBLISHED Published: 2011-02-02T22:00:00 Last Updated: 2024-08-07T03:03:18.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to execute arbitrary code via a crafted (1) .wrf or (2) .arf file, related to use of a function pointer in a callback mechanism. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65076 - http://securitytracker.com/id?1025015 - http://www.coresecurity.com/content/webex-atp-
cloud.com/vulnerabilities/65076 - http://securitytracker.com/id?1025015 - http://www.coresecurity.com/content/webex-atp-and-wrf-overflow-vulnerabilities - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6913f.shtml - http://www.securityfocus.com/archive/1/516095/100/0/threaded - http://www.vupen.com/english/advisories/2011/0261 - http://tools.cisco.com/security/center/viewAlert.x?alertId=22016 - http://www.securityfocus.com/bid/46075
CVE ID: CVE-2010-3270 State: PUBLISHED Published: 2011-02-02T22:00:00 Last Updated: 2024-08-07T03:03:18.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Cisco WebEx Meeting Center T27LB before SP21 EP3 and T27LC before SP22 allows user-assisted remote authenticated users to execute arbitrary code by providing a crafted .atp file and then disconnecting from a meeting. NOTE: since this is a site-specific issue with no expected action for consumers, it might be REJECTed. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1025015 - http://www.coresecurity.com/content/webex-atp-and-wrf-overflow-vulnerabiliti
: - http://securitytracker.com/id?1025015 - http://www.coresecurity.com/content/webex-atp-and-wrf-overflow-vulnerabilities - http://www.securityfocus.com/bid/46078 - http://www.securityfocus.com/archive/1/516095/100/0/threaded - http://tools.cisco.com/security/center/viewAlert.x?alertId=22355 - http://www.vupen.com/english/advisories/2011/0260
CVE ID: CVE-2010-3271 State: PUBLISHED Published: 2011-07-18T22:00:00 Last Updated: 2024-08-07T03:03:18.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Integrated Solutions Console (aka administrative console) in IBM WebSphere Application Server (WAS) 7.0.0.13 and earlier allow remote attackers to hijack the authentication of administrators for requests that disable certain security options via an Edit action to console/adminSecurityDetail.do followed by a save action to console/syncworkspace.do. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/518465/100/0
do. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/518465/100/0/threaded - http://www.coresecurity.com/content/IBM-WebSphere-CSRF - http://www.securityfocus.com/bid/48305 - http://www.exploit-db.com/exploits/17404 - http://securityreason.com/securityalert/8281
CVE ID: CVE-2010-3272 State: PUBLISHED Published: 2011-02-17T17:00:00 Last Updated: 2024-08-07T03:03:18.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: accounts/ValidateAnswers in the security-questions implementation in ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 makes it easier for remote attackers to reset user passwords, and consequently obtain access to arbitrary user accounts, via a modified (1) Hide_Captcha or (2) quesList parameter in a validateAll action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43241 - http://www.vupen.com/english/advisories/2011/0392 - http://www.securityfocus.com/archive/1/516396
com/advisories/43241 - http://www.vupen.com/english/advisories/2011/0392 - http://www.securityfocus.com/archive/1/516396/100/0/threaded - http://securityreason.com/securityalert/8089 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65350 - http://www.coresecurity.com/content/zoho-manageengine-vulnerabilities - http://www.securityfocus.com/bid/46331 - http://www.osvdb.org/70870
CVE ID: CVE-2010-3273 State: PUBLISHED Published: 2011-02-17T17:00:00 Last Updated: 2024-08-07T03:03:18.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 allows remote attackers to reset user passwords, and consequently obtain access to arbitrary user accounts, by providing a user id to accounts/ValidateUser, and then providing a new password to accounts/ResetResult. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65348 - http://secunia.com/advisories/43241 - http://www.vupen.com/english/advisories/2011/0392 - http://www.securityfocus.com/archive/1/51
nia.com/advisories/43241 - http://www.vupen.com/english/advisories/2011/0392 - http://www.securityfocus.com/archive/1/516396/100/0/threaded - http://securityreason.com/securityalert/8089 - http://www.osvdb.org/70869 - http://www.coresecurity.com/content/zoho-manageengine-vulnerabilities - http://www.securityfocus.com/bid/46331
CVE ID: CVE-2010-3274 State: PUBLISHED Published: 2011-02-17T17:00:00 Last Updated: 2024-08-07T03:03:18.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in the Employee Search Engine in ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 allow remote attackers to inject arbitrary web script or HTML via the searchString parameter in a (1) showList or (2) Search action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43241 - http://www.osvdb.org/70872 - http://www.vupen.com/english/advisories/2011/0392 - http://www.securityfocus.com/archive/1/516396/100/
osvdb.org/70872 - http://www.vupen.com/english/advisories/2011/0392 - http://www.securityfocus.com/archive/1/516396/100/0/threaded - http://securityreason.com/securityalert/8089 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65349 - http://www.osvdb.org/70871 - http://www.coresecurity.com/content/zoho-manageengine-vulnerabilities - http://www.securityfocus.com/bid/46331
CVE ID: CVE-2010-3275 State: PUBLISHED Published: 2011-03-28T16:00:00 Last Updated: 2024-08-07T03:03:18.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an AMV file, related to a "dangling pointer vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1025250 - http://www.vupen.com/english/advisories/2011/0759 - http://www.videolan.org/vlc/releases/1.1.8.html - http://secunia.com/advisories/43826 - http://www.metasploit.com/modules/exploit/windows/browser/vlc_amv - http://www.coresecurit
ecunia.com/advisories/43826 - http://www.metasploit.com/modules/exploit/windows/browser/vlc_amv - http://www.coresecurity.com/content/vlc-vulnerabilities-amv-nsv-files - http://www.debian.org/security/2011/dsa-2211 - http://www.exploit-db.com/exploits/17048 - http://www.securityfocus.com/archive/1/517150/100/0/threaded - http://www.osvdb.org/71277 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66259 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14718 - http://securityreason.com/securityalert/8162 - http://www.securityfocus.com/bid/47012
CVE ID: CVE-2010-3276 State: PUBLISHED Published: 2011-03-28T16:00:00 Last Updated: 2024-08-07T03:03:18.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an NSV file. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1025250 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14873 - http://www.vupen.com/english/advisories/2011/0759 - http://www.videolan.org/vlc/releases/1.1.8.html - http://secunia.com/advisories/43826 - http://www.coresecurity.com/content/vlc-vu
.videolan.org/vlc/releases/1.1.8.html - http://secunia.com/advisories/43826 - http://www.coresecurity.com/content/vlc-vulnerabilities-amv-nsv-files - http://www.debian.org/security/2011/dsa-2211 - http://www.securityfocus.com/archive/1/517150/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/66260 - http://securityreason.com/securityalert/8162 - http://www.osvdb.org/71278 - http://www.securityfocus.com/bid/47012
CVE ID: CVE-2010-3277 State: PUBLISHED Published: 2010-09-28T17:00:00Z Last Updated: 2024-09-17T03:49:11.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installer in VMware Workstation 7.x before 7.1.2 build 301548 and VMware Player 3.x before 3.1.2 build 301548 renders an index.htm file if present in the installation directory, which might allow local users to trigger unintended interpretation of web script or HTML by creating this file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2010-0014.html - http://secunia.com/advisories/41574 - http://lists.vmware.com/pipermail/security-announce/2010/000105.html -
0014.html - http://secunia.com/advisories/41574 - http://lists.vmware.com/pipermail/security-announce/2010/000105.html - http://www.vupen.com/english/advisories/2010/2491 - http://securitytracker.com/id?1024481
CVE ID: CVE-2010-3278 State: REJECTED Published: 2010-09-10T17:00:00 Last Updated: 2010-10-14T09:00:00 Description: No description available.
CVE ID: CVE-2010-3279 State: PUBLISHED Published: 2010-09-23T18:00:00 Last Updated: 2024-08-07T03:03:18.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the CCAgent option before 9.0.8.4 in the management server (aka TSA) component in Alcatel-Lucent OmniTouch Contact Center Standard Edition enables maintenance access, which allows remote attackers to monitor or reconfigure Contact Center operations via vectors involving TSA_maintenance.exe. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/513869 - http://www.alcatel-lucent.com/wps/DocumentStreamerServlet?LMSG_CABINET=Corporate&LMSG_CONTENT_FILE
om/archive/1/513869 - http://www.alcatel-lucent.com/wps/DocumentStreamerServlet?LMSG_CABINET=Corporate&LMSG_CONTENT_FILE=Support/Security/2010001.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/61921 - http://www.vupen.com/english/advisories/2010/2459 - http://www.nruns.com/_downloads/nruns-SA-2010-001.pdf - http://secunia.com/advisories/41509 - http://www.securityfocus.com/bid/43340
CVE ID: CVE-2010-3280 State: PUBLISHED Published: 2010-09-23T18:00:00 Last Updated: 2024-08-07T03:03:18.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CCAgent option 9.0.8.4 and earlier in the management server (aka TSA) component in Alcatel-Lucent OmniTouch Contact Center Standard Edition relies on client-side authorization checking, and unconditionally sends the SuperUser password to the client for use during an authorized session, which allows remote attackers to monitor or reconfigure Contact Center operations via a modified client application. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/513869 - http://www.
tional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/513869 - http://www.alcatel-lucent.com/wps/DocumentStreamerServlet?LMSG_CABINET=Corporate&LMSG_CONTENT_FILE=Support/Security/2010001.pdf - http://secunia.com/advisories/41547 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61920 - http://www.vupen.com/english/advisories/2010/2459 - http://www.nruns.com/_downloads/nruns-SA-2010-001.pdf - http://www.securityfocus.com/bid/43340
CVE ID: CVE-2010-3281 State: PUBLISHED Published: 2010-09-23T18:00:00 Last Updated: 2024-08-07T03:03:18.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the HTTP proxy service in Alcatel-Lucent OmniVista 4760 server before R5.1.06.03.c_Patch3 allows remote attackers to execute arbitrary code or cause a denial of service (service crash) via a long request. Additional Analyst Notes: - CVE Program Container: References: - http://www.nruns.com/_downloads/nruns-SA-2010-002.pdf - http://www.securityfocus.com/archive/1/513865 - http://www.securityfocus.com/archive/1/513866 - http://www.securityfocus.com/bid/43338 - http://www.vupen.com/english/advisorie
www.securityfocus.com/archive/1/513866 - http://www.securityfocus.com/bid/43338 - http://www.vupen.com/english/advisories/2010/2460 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61922 - http://secunia.com/advisories/41508 - http://www.alcatel-lucent.com/wps/DocumentStreamerServlet?LMSG_CABINET=Corporate&LMSG_CONTENT_FILE=Support/Security/2010002.pdf
CVE ID: CVE-2010-3282 State: PUBLISHED Published: 2020-01-09T20:52:18 Last Updated: 2024-08-07T03:03:18.937Z Vendors: Red Hat, HP Products: 389 Directory Server, HP-UX Directory Server Problem Types: Path Disclosure Description: 389 Directory Server before 1.2.7.1 (aka Red Hat Directory Server 8.2) and HP-UX Directory Server before B.08.10.03, when audit logging is enabled, logs the Directory Manager password (nsslapd-rootpw) in cleartext when changing cn=config:nsslapd-rootpw, which might allow local users to obtain sensitive information by reading the log. Additional Analyst Notes: - CVE Program Container: References: - http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:de
yst Notes: - CVE Program Container: References: - http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6914 - https://bugzilla.redhat.com/show_bug.cgi?id=625950 - https://git.fedorahosted.org/cgit/389/ds.git/commit/?id=d38ae06 - https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c02522633&docLocale=en_US
CVE ID: CVE-2010-3283 State: PUBLISHED Published: 2010-09-24T18:00:00Z Last Updated: 2024-09-16T18:18:57.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=128525419119241&w=2 - http://marc.info/?l=bugtraq&m=128525419119241&w=2
CVE ID: CVE-2010-3284 State: PUBLISHED Published: 2010-09-24T18:00:00Z Last Updated: 2024-09-17T02:57:27.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=128525531721328&w=2 - http://marc.info/?l=bugtraq&m=128525531721328&w=2
CVE ID: CVE-2010-3285 State: PUBLISHED Published: 2010-09-24T18:00:00Z Last Updated: 2024-09-17T01:10:55.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=128525454219838&w=2 - http://marc.info/?l=bugtraq&m=128525454219838&w=2
CVE ID: CVE-2010-3286 State: PUBLISHED Published: 2010-10-18T16:00:00 Last Updated: 2024-08-07T03:03:18.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Systems Insight Manager (SIM) 6.0 and 6.1 allows remote attackers to read arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=128706731926760&w=2 - http://www.securitytracker.com/id?1024575 - http://marc.info/?l=bugtraq&m=128706731926760&w=2
CVE ID: CVE-2010-3287 State: PUBLISHED Published: 2010-10-18T16:00:00Z Last Updated: 2024-09-16T23:26:55.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability on HP ProCurve Access Points, Access Controllers, and Mobility Controllers with software 5.1.x through 5.1.9, 5.2.x through 5.2.7, 5.3.x through 5.3.5, and 5.4.x through 5.4.0 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=128708618023203&w=2 - http://marc.info/?l=bugtraq&m=128708618023203&w=2
CVE ID: CVE-2010-3288 State: PUBLISHED Published: 2010-10-22T22:00:00 Last Updated: 2024-08-07T03:03:18.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in HP Systems Insight Manager (SIM) before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=128768031706686&w=2 - http://marc.info/?l=bugtraq&m=128768031706686&w=2 - http://www.securitytracker.com/id?1024622