Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-1355 State: PUBLISHED Published: 2010-04-13T17:00:00Z Last Updated: 2024-09-17T03:23:32.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability on the TANDBERG Video Communication Server (VCS) before X5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Reference ID 66316. Additional Analyst Notes: - CVE Program Container: References: - http://ftp.tandberg.com/pub/software/vcs/TANDBERG%20Video%20Communication%20Server%20Software%20Release%20Notes%20%28X5%29.pdf
CVE ID: CVE-2010-1356 State: PUBLISHED Published: 2010-04-13T17:00:00Z Last Updated: 2024-09-17T01:47:00.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability on the TANDBERG Video Communication Server (VCS) before X5.0 allows remote attackers to execute arbitrary code via unknown vectors, aka Reference ID 69773. Additional Analyst Notes: - CVE Program Container: References: - http://ftp.tandberg.com/pub/software/vcs/TANDBERG%20Video%20Communication%20Server%20Software%20Release%20Notes%20%28X5%29.pdf
CVE ID: CVE-2010-1357 State: PUBLISHED Published: 2010-04-13T18:00:00 Last Updated: 2024-08-07T01:21:18.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in editors/logindialogue.php in SBD Directory Software 4.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/61659 - http://packetstormsecurity.org/1001-exploits/sbddirectory-xss.txt - http://secunia.com/advisories/38148 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55564 - http://www.exploit-db.com/exploits/11118
CVE ID: CVE-2010-1358 State: PUBLISHED Published: 2010-04-13T18:00:00Z Last Updated: 2024-09-17T01:51:10.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Bibliography (Biblio) module 5.x through 5.x-1.17 and 6.x through 6.x-1.9 for Drupal allows remote authenticated users, with "administer biblio" privileges, to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38207 - http://www.securityfocus.com/bid/37804 - http://drupal.org/node/683786
CVE ID: CVE-2010-1359 State: PUBLISHED Published: 2010-04-13T18:00:00Z Last Updated: 2024-09-16T18:59:34.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in bluegate_seo.inc.php in the Direct URL module for xt:Commerce, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the coID parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38197 - http://www.securityfocus.com/bid/37808
CVE ID: CVE-2010-1360 State: PUBLISHED Published: 2010-04-13T18:00:00 Last Updated: 2024-08-07T01:21:18.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in FAQEngine 4.24.00 allow remote attackers to execute arbitrary PHP code via a URL in the path_faqe parameter to (1) attachs.php, (2) backup.php, (3) badwords.php, (4) categories.php, (5) changepw.php, (6) colorchooser.php, (7) colorwheel.php, (8) dbfiles.php, (9) diraccess.php, (10) faq.php, (11) index.php, (12) kb.php, and (13) stats.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11111 - https://exchange.xforce.ibmcl
t Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11111 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55532 - http://www.securityfocus.com/bid/37719 - http://packetstormsecurity.org/1001-exploits/faqengine-rfi.txt
CVE ID: CVE-2010-1361 State: PUBLISHED Published: 2010-04-13T18:00:00 Last Updated: 2024-08-07T01:21:19.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in shop/USER_ARTIKEL_HANDLING_AUFRUF.php in PHPepperShop 2.5 allows remote attackers to inject arbitrary web script or HTML via the darstellen parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37707 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55561 - http://packetstormsecurity.org/1001-exploits/phpeppershopws-xss.txt
CVE ID: CVE-2010-1362 State: PUBLISHED Published: 2010-04-13T18:00:00Z Last Updated: 2024-09-17T02:02:13.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Own Term module 6.x-1.0 for Drupal allows remote authenticated users, with "create additional terms" privileges, to inject arbitrary web script or HTML via the term description field in a term listing page. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/683544 - http://drupal.org/node/683576 - http://www.securityfocus.com/bid/37788 - http://secunia.com/advisories/38208
CVE ID: CVE-2010-1363 State: PUBLISHED Published: 2010-04-13T18:00:00 Last Updated: 2024-08-07T01:21:18.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JProjects (com_j-projects) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the project parameter in a projects action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/10988 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55361 - http://www.securityfocus.com/bid/37608 - http://packetstormsecurity.org/1001-exploits/joomlajprojects-sql.txt - http://www.vupen.com/english/advisories/2010/004
http://packetstormsecurity.org/1001-exploits/joomlajprojects-sql.txt - http://www.vupen.com/english/advisories/2010/0049
CVE ID: CVE-2010-1364 State: PUBLISHED Published: 2010-04-13T20:20:00 Last Updated: 2024-08-07T01:21:19.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Uiga Personal Portal, as downloaded on 20100301, allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0488 - http://secunia.com/advisories/38757 - http://www.exploit-db.com/exploits/11599 - http://packetstormsecurity.org/1002-exploits/uigapersonalportal-sql.txt
CVE ID: CVE-2010-1365 State: PUBLISHED Published: 2010-04-13T20:20:00 Last Updated: 2024-08-07T01:21:19.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Uiga Fan Club, as downloaded on 20100310, allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11600 - http://secunia.com/advisories/38756 - http://packetstormsecurity.org/1002-exploits/uigafc-sql.txt - http://www.vupen.com/english/advisories/2010/0487 - http://4004securityproject.wordpress.com/2010/02/28/uigafanclub-index-php-sql-injection
m/english/advisories/2010/0487 - http://4004securityproject.wordpress.com/2010/02/28/uigafanclub-index-php-sql-injection/
CVE ID: CVE-2010-1366 State: PUBLISHED Published: 2010-04-13T20:20:00 Last Updated: 2024-08-07T01:21:19.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in admin/admin_login.php in Uiga Fan Club 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) admin_name and (2) admin_password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11593 - http://packetstormsecurity.org/1002-exploits/uigafanclub-sql.txt
CVE ID: CVE-2010-1367 State: PUBLISHED Published: 2010-04-13T20:20:00Z Last Updated: 2024-09-16T18:49:05.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in admin/admin_login.php in Uiga Fan Club, as downloaded on 20100310, allow remote attackers to inject arbitrary web script or HTML via the (1) admin_name and (2) admin_password parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38756
CVE ID: CVE-2010-1368 State: PUBLISHED Published: 2010-04-13T20:20:00 Last Updated: 2024-08-07T01:21:18.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in GameScript (GS) 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a category action. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1002-exploits/gamescript-sql.txt - http://www.securityfocus.com/bid/38414 - http://www.exploit-db.com/exploits/11577 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56537
CVE ID: CVE-2010-1369 State: PUBLISHED Published: 2010-04-13T20:20:00 Last Updated: 2024-08-07T01:21:18.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in signup.asp in Pre Classified Listings ASP allows remote attackers to execute arbitrary SQL commands via the email parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0812-exploits/preclass-sqlxss.txt - http://secunia.com/advisories/38768 - http://www.securityfocus.com/bid/38446 - http://www.exploit-db.com/exploits/11589
CVE ID: CVE-2010-1370 State: PUBLISHED Published: 2010-04-13T20:20:00Z Last Updated: 2024-09-16T22:20:09.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in detailad.asp in Pre Classified Listings ASP allows remote attackers to execute arbitrary SQL commands via the siteid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0812-exploits/preclass-sqlxss.txt - http://secunia.com/advisories/38768
CVE ID: CVE-2010-1371 State: PUBLISHED Published: 2010-04-13T20:20:00Z Last Updated: 2024-09-16T20:32:47.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in signup.asp in Pre Classified Listings ASP allows remote attackers to inject arbitrary web script or HTML via the address parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/0812-exploits/preclass-sqlxss.txt - http://secunia.com/advisories/38768
CVE ID: CVE-2010-1372 State: PUBLISHED Published: 2010-04-13T20:20:00 Last Updated: 2024-08-07T01:21:19.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the HD FLV Player (com_hdflvplayer) component 1.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56516 - http://packetstormsecurity.org/1002-exploits/joomlahdflvplayer-sql.txt - http://www.securityfocus.com/bid/38401 - http://osvdb.org/62570 - http://secunia.com/advisories/38691
CVE ID: CVE-2010-1373 State: PUBLISHED Published: 2010-06-17T16:00:00Z Last Updated: 2024-09-17T03:53:31.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Help Viewer in Apple Mac OS X 10.6 before 10.6.4 allows remote attackers to inject arbitrary web script or HTML via a crafted help: URL, related to "URL parameters in HTML content." Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html - http://www.vupen.com/english/advisories/2010/1481 - http://www.securityfocus.com/bid/40871 - http://securitytracker.com/id?1024103 - http://support.apple.com/kb/HT4
/1481 - http://www.securityfocus.com/bid/40871 - http://securitytracker.com/id?1024103 - http://support.apple.com/kb/HT4188 - http://secunia.com/advisories/40220
CVE ID: CVE-2010-1374 State: PUBLISHED Published: 2010-06-17T16:00:00Z Last Updated: 2024-09-16T23:46:23.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in iChat in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, when AIM is used, allows remote attackers to create arbitrary files via directory traversal sequences in an inline image-transfer operation. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html - http://www.vupen.com/english/advisories/2010/1481 - http://www.securityfocus.com/bid/40871 - http://securitytracker.com/id?1024103 - http://support.apple.co
ies/2010/1481 - http://www.securityfocus.com/bid/40871 - http://securitytracker.com/id?1024103 - http://support.apple.com/kb/HT4188 - http://secunia.com/advisories/40220
CVE ID: CVE-2010-1375 State: PUBLISHED Published: 2010-06-17T16:00:00Z Last Updated: 2024-09-16T19:51:42.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetAuthSysAgent in Network Authorization in Apple Mac OS X 10.5.8 does not have the expected authorization requirements, which allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html - http://www.vupen.com/english/advisories/2010/1481 - http://www.securityfocus.com/bid/40871 - http://securitytracker.com/id?1024103 - http://support.apple.com/kb/HT4188 - http://secunia.com/advisories/
/bid/40871 - http://securitytracker.com/id?1024103 - http://support.apple.com/kb/HT4188 - http://secunia.com/advisories/40220
CVE ID: CVE-2010-1376 State: PUBLISHED Published: 2010-06-17T16:00:00Z Last Updated: 2024-09-16T20:31:29.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in Network Authorization in Apple Mac OS X 10.6 before 10.6.4 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a (1) afp, (2) cifs, or (3) smb URL. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html - http://www.vupen.com/english/advisories/2010/1481 - http://www.securityfocus.com/bid/40871 - http://securitytracker.com/id
tp://www.vupen.com/english/advisories/2010/1481 - http://www.securityfocus.com/bid/40871 - http://securitytracker.com/id?1024103 - http://support.apple.com/kb/HT4188 - http://secunia.com/advisories/40220
CVE ID: CVE-2010-1377 State: PUBLISHED Published: 2010-06-17T16:00:00Z Last Updated: 2024-09-16T18:19:44.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Directory in Apple Mac OS X 10.6 before 10.6.4 creates an unencrypted connection upon certain SSL failures, which allows man-in-the-middle attackers to spoof arbitrary network account servers, and possibly execute arbitrary code, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html - http://www.vupen.com/english/advisories/2010/1481 - http://www.securityfocus.com/bid/40871 - http://securitytracker.com/id?1024103
.vupen.com/english/advisories/2010/1481 - http://www.securityfocus.com/bid/40871 - http://securitytracker.com/id?1024103 - http://support.apple.com/kb/HT4188 - http://secunia.com/advisories/40220
CVE ID: CVE-2010-1378 State: PUBLISHED Published: 2010-11-15T22:00:00Z Last Updated: 2024-09-16T20:16:58.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSL in Apple Mac OS X 10.6.x before 10.6.5 does not properly perform arithmetic, which allows remote attackers to bypass X.509 certificate authentication via an arbitrary certificate issued by a legitimate Certification Authority. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4435 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
CVE ID: CVE-2010-1379 State: PUBLISHED Published: 2010-06-17T16:00:00Z Last Updated: 2024-09-17T03:07:04.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: Printer Setup in Apple Mac OS X 10.6 before 10.6.4 does not properly interpret character encoding, which allows remote attackers to cause a denial of service (printing failure) by deploying a printing device that has a Unicode character in its printing-service name. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html - http://www.vupen.com/english/advisories/2010/1481 - http://www.securityfocus.com/bid/40871 - http://securitytracker.com/id?
p://www.vupen.com/english/advisories/2010/1481 - http://www.securityfocus.com/bid/40871 - http://securitytracker.com/id?1024103 - http://support.apple.com/kb/HT4188 - http://secunia.com/advisories/40220
CVE ID: CVE-2010-1380 State: PUBLISHED Published: 2010-06-17T16:00:00Z Last Updated: 2024-09-17T04:14:43.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the cgtexttops CUPS filter in Printing in Apple Mac OS X 10.6 before 10.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to page sizes. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html - http://www.vupen.com/english/advisories/2010/1481 - http://www.securityfocus.com/bid/40871 - http://securitytracker.com/id?1024103 - http://support.apple.com/kb
2010/1481 - http://www.securityfocus.com/bid/40871 - http://securitytracker.com/id?1024103 - http://support.apple.com/kb/HT4188 - http://secunia.com/advisories/40220
CVE ID: CVE-2010-1381 State: PUBLISHED Published: 2010-06-17T16:00:00Z Last Updated: 2024-09-16T17:03:13.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of SMB File Server in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, enables support for wide links, which allows remote authenticated users to access arbitrary files via vectors involving symbolic links. NOTE: this might overlap CVE-2010-0926. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html - http://www.vupen.com/english/advisories/2010/1481 - http://www.securityfocus.com/bid/40871 - http://securitytracker.com
http://www.vupen.com/english/advisories/2010/1481 - http://www.securityfocus.com/bid/40871 - http://securitytracker.com/id?1024103 - http://support.apple.com/kb/HT4188 - http://secunia.com/advisories/40220
CVE ID: CVE-2010-1382 State: PUBLISHED Published: 2010-06-17T16:00:00Z Last Updated: 2024-09-17T01:27:10.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Wiki Server in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote authenticated users to inject arbitrary web script or HTML via crafted Wiki content, related to lack of a charset field. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html - http://www.vupen.com/english/advisories/2010/1481 - http://www.securityfocus.com/bid/40871 - http://securitytracker.com/id?1024103 - http://support.a
advisories/2010/1481 - http://www.securityfocus.com/bid/40871 - http://securitytracker.com/id?1024103 - http://support.apple.com/kb/HT4188 - http://secunia.com/advisories/40220
CVE ID: CVE-2010-1383 State: PUBLISHED Published: 2011-07-21T23:00:00Z Last Updated: 2024-09-16T17:58:17.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: CFNetwork in Apple Safari before 5.0.6 on Windows allows remote web servers to execute arbitrary code by replaying the NTLM credentials of a client user, related to a "credential reflection" issue. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4808 - http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
CVE ID: CVE-2010-1384 State: PUBLISHED Published: 2010-06-11T17:28:00 Last Updated: 2024-08-07T01:21:19.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not provide a warning about a (1) http or (2) https URL that contains a username and password, which makes it easier for remote attackers to conduct phishing attacks via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4225 - http://lists.apple.com/archives/security-announce/2010/Jun/msg00000.html - http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001538.html - htt
om/archives/security-announce/2010/Jun/msg00000.html - http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001538.html - http://secunia.com/advisories/40105 - http://www.vupen.com/english/advisories/2010/1373 - http://secunia.com/advisories/42314 - http://www.securityfocus.com/bid/40620 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6812 - http://support.apple.com/kb/HT4456 - http://securitytracker.com/id?1024067 - http://support.apple.com/kb/HT4196 - http://jvn.jp/en/jp/JVN46026251/index.html - http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html - http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html
CVE ID: CVE-2010-1385 State: PUBLISHED Published: 2010-06-11T17:28:00 Last Updated: 2024-08-07T01:21:19.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7199 - http://lists.apple.com/archives/security-announce/2010/Jun/msg00000.html - http://secunia.com/advisories/40105 - h
199 - http://lists.apple.com/archives/security-announce/2010/Jun/msg00000.html - http://secunia.com/advisories/40105 - http://www.vupen.com/english/advisories/2010/1373 - http://www.securityfocus.com/bid/40620 - http://securitytracker.com/id?1024067 - http://support.apple.com/kb/HT4196
CVE ID: CVE-2010-1386 State: PUBLISHED Published: 2010-08-19T20:00:00 Last Updated: 2024-08-07T01:21:18.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly restrict access to the lastPosition function, which has unspecified impact and remote attack vectors, aka rdar problem 7746357. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 - http://security-tracker.debian.org/tracker/CVE-2010-1386 - http://www.vupen.com/english/advisories/2010/2722 - http://secunia.com/advisories/43068 - http://www.ubuntu.com/usn/USN-100
p://www.vupen.com/english/advisories/2010/2722 - http://secunia.com/advisories/43068 - http://www.ubuntu.com/usn/USN-1006-1 - http://secunia.com/advisories/41856 - http://www.vupen.com/english/advisories/2011/0212 - http://www.securityfocus.com/bid/42500 - http://trac.webkit.org/changeset/56188 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://www.vupen.com/english/advisories/2011/0552 - https://bugs.webkit.org/show_bug.cgi?id=36255