Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
56154 - http://secunia.com/advisories/38478 - http://www.securityfocus.com/bid/38116 - http://packetstormsecurity.org/1002-exploits/corelan-10-008-evalmsi.txt - http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-008-evalmsi-2-1-03-multiple-vulnerabilities/ - http://www.securityfocus.com/archive/1/509370/100/0/threaded
CVE ID: CVE-2010-0616 State: PUBLISHED Published: 2010-02-11T17:00:00 Last Updated: 2024-08-07T00:52:19.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: evalSMSI 2.1.03 stores passwords in cleartext in the database, which allows attackers with database access to gain privileges. NOTE: remote attack vectors are possible by leveraging a separate SQL injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38478 - http://www.securityfocus.com/bid/38116 - http://packetstormsecurity.org/1002-exploits/corelan-10-008-evalmsi.txt - http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-008-evalmsi-2-1-03
orelan-10-008-evalmsi.txt - http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-008-evalmsi-2-1-03-multiple-vulnerabilities/ - http://www.osvdb.org/62180 - http://www.securityfocus.com/archive/1/509370/100/0/threaded
CVE ID: CVE-2010-0617 State: PUBLISHED Published: 2010-02-11T17:00:00 Last Updated: 2024-08-07T00:52:19.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ajax.php in evalSMSI 2.1.03 allows remote attackers to inject arbitrary web script or HTML via the return parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/62179 - http://secunia.com/advisories/38478 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56157
CVE ID: CVE-2010-0618 State: PUBLISHED Published: 2010-03-24T18:00:00 Last Updated: 2024-08-07T00:52:19.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: The flood-protection feature in the base, IPDS DLE, Forms DLE, Barcode DLE, Prescribe DLE, and Printcryption DLE components on certain Lexmark laser and inkjet printers and MarkNet devices allows remote attackers to cause a denial of service (TCP outage) by making many passive FTP connections and then aborting these connections. Additional Analyst Notes: - CVE Program Container: References: - http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=11&Itemid=11 - http://www.securityfocus.com/bid/38906 - ht
kresearchlab.com/index.php?option=com_content&view=article&id=11&Itemid=11 - http://www.securityfocus.com/bid/38906 - http://support.lexmark.com/index?page=content&id=TE85&locale=EN&userlocale=EN_US - http://secunia.com/advisories/39056 - http://www.securityfocus.com/archive/1/510285/100/0/threaded
CVE ID: CVE-2010-0619 State: PUBLISHED Published: 2010-03-24T18:00:00 Last Updated: 2024-08-07T00:52:19.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the base, IPDS DLE, Forms DLE, Barcode DLE, Prescribe DLE, and Printcryption DLE components on certain Lexmark laser printers and multi-function printers allows remote attackers to execute arbitrary code or cause a denial of service (device hang) via a long argument to a PJL INQUIRE command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/510251/100/0/threaded - http://support.lexmark.com/index?page=content&id=TE84&locale=EN&userlocale=EN_US
s.com/archive/1/510251/100/0/threaded - http://support.lexmark.com/index?page=content&id=TE84&locale=EN&userlocale=EN_US - http://www.securityfocus.com/bid/38901
CVE ID: CVE-2010-0620 State: PUBLISHED Published: 2010-02-25T00:00:00 Last Updated: 2024-08-07T00:52:19.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the SSL Service in EMC HomeBase Server 6.2.x before 6.2.3 and 6.3.x before 6.3.2 allows remote attackers to overwrite arbitrary files with any content, and consequently execute arbitrary code, via a .. (dot dot) in an unspecified parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38380 - http://securityreason.com/securityalert/8230 - http://www.securityfocus.com/archive/1/509723/100/0/threaded - http://www.vupen.com/english/advisorie
curityalert/8230 - http://www.securityfocus.com/archive/1/509723/100/0/threaded - http://www.vupen.com/english/advisories/2010/0458 - http://www.zerodayinitiative.com/advisories/ZDI-10-020/
CVE ID: CVE-2010-0622 State: PUBLISHED Published: 2010-02-15T18:00:00 Last Updated: 2024-08-07T00:52:19.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wake_futex_pi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not properly handle certain unlock operations for a Priority Inheritance (PI) futex, which allows local users to cause a denial of service (OOPS) and possibly have unspecified other impact via vectors involving modification of the futex value from user space. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-914-1 - http://secunia.com/advisories/38905 - http://www.kernel.org/pub/linux/kernel/v2.6
http://www.ubuntu.com/usn/USN-914-1 - http://secunia.com/advisories/38905 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.33-rc7 - http://www.openwall.com/lists/oss-security/2010/02/09/2 - http://www.vupen.com/english/advisories/2010/0638 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035070.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 - http://secunia.com/advisories/38779 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:088 - https://bugzilla.redhat.com/show_bug.cgi?id=563091 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html - http://secunia.com/advisories/38922 - http://git.ker
sts.opensuse.org/opensuse-security-announce/2010-03/msg00000.html - http://secunia.com/advisories/38922 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=51246bfd189064079c54421507236fd2723b18f3 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.html - http://secunia.com/advisories/43315 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9655 - http://secunia.com/advisories/39033 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://www.openwall.com/lists/oss-security/2010/02/11/2 - http://www.debian.org/security/2010/dsa-2005 - http://www.securityfocus.com/archive/1/516397/100/0/thr
ty/2010/02/11/2 - http://www.debian.org/security/2010/dsa-2005 - http://www.securityfocus.com/archive/1/516397/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2010-0161.html
CVE ID: CVE-2010-0623 State: PUBLISHED Published: 2010-02-15T18:00:00 Last Updated: 2024-08-07T00:52:19.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: The futex_lock_pi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not properly manage a certain reference count, which allows local users to cause a denial of service (OOPS) via vectors involving an unmount of an ext3 filesystem. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-914-1 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.33-rc7 - http://www.vupen.com/english/advisories/2010/0638 - http://bugzilla.kernel.org/show_bug.cgi?id=14256 -
eLog-2.6.33-rc7 - http://www.vupen.com/english/advisories/2010/0638 - http://bugzilla.kernel.org/show_bug.cgi?id=14256 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:088 - http://secunia.com/advisories/38922 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5ecb01cfdf96c5f465192bdb2a4fd4a61a24c6cc - http://www.openwall.com/lists/oss-security/2010/02/11/2
CVE ID: CVE-2010-0624 State: PUBLISHED Published: 2010-03-12T20:00:00 Last Updated: 2024-08-07T00:52:19.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service (memory corruption) or possibly execute arbitrary code by sending more data than was requested, related to archive filenames that contain a : (colon) character. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0142.html - http://lists.fedoraproject.org/pipermail
ainer: References: - http://www.redhat.com/support/errata/RHSA-2010-0142.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036668.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:065 - http://www.vupen.com/english/advisories/2010/1107 - http://www.redhat.com/support/errata/RHSA-2010-0144.html - http://www.vupen.com/english/advisories/2010/0629 - http://www.agrs.tu-berlin.de/index.php?id=78327 - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html - http://secunia.com/advisories/38988 - http://security.gentoo.org/glsa/glsa-201111-11.xml - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037395.html - https:/
org/glsa/glsa-201111-11.xml - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037395.html - https://bugzilla.redhat.com/show_bug.cgi?id=564368 - http://www.vupen.com/english/advisories/2010/0687 - http://www.vupen.com/english/advisories/2010/0639 - https://issues.rpath.com/browse/RPL-3219 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6907 - http://www.vupen.com/english/advisories/2010/0628 - http://www.redhat.com/support/errata/RHSA-2010-0141.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037401.html - http://www.ubuntu.com/usn/USN-2456-1 - http://secunia.com/advisories/39008 - http://lists.fedorapro
-March/037401.html - http://www.ubuntu.com/usn/USN-2456-1 - http://secunia.com/advisories/39008 - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/038134.html - http://www.securityfocus.com/archive/1/514503/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10277 - http://www.redhat.com/support/errata/RHSA-2010-0145.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://secunia.com/advisories/38869 - http://www.vupen.com/english/advisories/2010/0729 - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/038149.html
upen.com/english/advisories/2010/0729 - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/038149.html - http://www.vupen.com/english/advisories/2010/0728 - http://osvdb.org/62950
CVE ID: CVE-2010-0625 State: PUBLISHED Published: 2010-04-05T16:00:00 Last Updated: 2024-08-07T00:52:19.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in NWFTPD.nlm before 5.10.01 in the FTP server in Novell NetWare 5.1 through 6.5 SP8 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long (1) MKD, (2) RMD, (3) RNFR, or (4) DELE command. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1 - http://www.vupen.com/english/advisories/2010/0742 - http://www.securityfocus.com/archive/1/510557/100/0/t
88&sliceId=1 - http://www.vupen.com/english/advisories/2010/0742 - http://www.securityfocus.com/archive/1/510557/100/0/threaded - http://secunia.com/advisories/39151 - http://www.zerodayinitiative.com/advisories/ZDI-10-062 - https://bugzilla.novell.com/show_bug.cgi?id=569496 - http://www.securityfocus.com/archive/1/510353/100/0/threaded - http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=12&Itemid=12 - http://www.securityfocus.com/bid/39041 - http://securitytracker.com/id?1023768
CVE ID: CVE-2010-0628 State: PUBLISHED Published: 2010-03-25T22:00:00 Last Updated: 2024-08-07T00:52:19.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in the SPNEGO GSS-API functionality in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.2 and 1.8 before 1.8.1 allows remote attackers to cause a denial of service (assertion failure and daemon crash) via an invalid packet that triggers incorrect preparation of an error token. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-916-1 - http://www.securityfocus.com/archive/1/510281/100/0/threaded - http://www.securit
http://www.ubuntu.com/usn/USN-916-1 - http://www.securityfocus.com/archive/1/510281/100/0/threaded - http://www.securityfocus.com/bid/38904 - https://bugzilla.redhat.com/show_bug.cgi?id=566258 - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-002.txt - http://secunia.com/advisories/39023 - http://www.kb.cert.org/vuls/id/839413
CVE ID: CVE-2010-0629 State: PUBLISHED Published: 2010-04-07T15:00:00 Last Updated: 2024-08-07T00:52:19.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authenticated users to cause a denial of service (daemon crash) via a request from a kadmin client that sends an invalid API version number. Additional Analyst Notes: - CVE Program Container: References: - http://krbdev.mit.edu/rt/Ticket/Display.html?id=5998 - http://www.debian.org/security/2010/dsa-2031 - http://www.vupen.com/english/advisories/2010/0876 - http://www.securityfocus.com/bid/39247
org/security/2010/dsa-2031 - http://www.vupen.com/english/advisories/2010/0876 - http://www.securityfocus.com/bid/39247 - http://securitytracker.com/id?1023821 - http://secunia.com/advisories/39324 - http://secunia.com/advisories/39367 - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-003.txt - http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html - http://secunia.com/advisories/39290 - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038556.html - http://www.redhat.com/support/errata/RHSA-2010-0343.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567052 - http://ubuntu.com/usn/usn-924-1 - https://oval.cisecurity.org/repository/search/de
rg/cgi-bin/bugreport.cgi?bug=567052 - http://ubuntu.com/usn/usn-924-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9489 - http://secunia.com/advisories/39264 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:071 - http://www.securityfocus.com/archive/1/510566/100/0/threaded - http://secunia.com/advisories/39315
CVE ID: CVE-2010-0630 State: PUBLISHED Published: 2010-02-12T22:00:00 Last Updated: 2024-08-07T00:52:19.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewjokes.php in Evernew Free Joke Script 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1002-exploits/evernewfjs-sql.txt - http://www.exploit-db.com/exploits/11306 - http://www.securityfocus.com/bid/38020 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56043 - http://secunia.com/advisories/35434
CVE ID: CVE-2010-0631 State: PUBLISHED Published: 2010-02-12T22:00:00 Last Updated: 2024-08-07T00:52:19.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in Eicra Car Rental-Script, when the plugin_id parameter is 4, allow remote attackers to execute arbitrary SQL commands via the (1) users (username) and (2) passwords parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38389 - http://www.exploit-db.com/exploits/11323
CVE ID: CVE-2010-0632 State: PUBLISHED Published: 2010-02-12T22:00:00 Last Updated: 2024-08-07T00:52:19.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Parkview Consultants SimpleFAQ (com_simplefaq) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a display action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11294 - http://packetstormsecurity.org/1001-exploits/joomlasimplefaq-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/56028 - http://www.securityfocus.com/bid/38015
CVE ID: CVE-2010-0633 State: PUBLISHED Published: 2010-02-12T22:00:00Z Last Updated: 2024-09-16T17:07:48.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Citrix XenServer 5.0 Update 3 and earlier, and 5.5, allows local users to bypass authentication and execute unspecified Xen API (XAPI) calls via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://support.citrix.com/article/CTX123456 - http://support.citrix.com/article/CTX123193 - http://support.citrix.com/article/CTX123460 - http://secunia.com/advisories/38431 - http://www.vupen.com/english/advisories/2010/0290 - http://www.securitytracker.com/id?1023530 - htt
m/advisories/38431 - http://www.vupen.com/english/advisories/2010/0290 - http://www.securitytracker.com/id?1023530 - http://www.securityfocus.com/bid/38052
CVE ID: CVE-2010-0634 State: PUBLISHED Published: 2010-02-12T22:00:00Z Last Updated: 2024-09-16T19:40:28.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Fast Lexical Analyzer Generator (flex) before 2.5.35 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://freshmeat.net/projects/flex/releases/311661 - http://osvdb.org/62029
CVE ID: CVE-2010-0635 State: PUBLISHED Published: 2010-02-12T22:00:00Z Last Updated: 2024-09-16T23:41:49.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the plgSearchEventsearch::onSearch method in eventsearch.php in the JEvents Search plugin 1.5 through 1.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38050 - http://www.jevents.net/forum/viewtopic.php?f=17&t=3910#p15526 - http://secunia.com/advisories/38404
CVE ID: CVE-2010-0636 State: PUBLISHED Published: 2010-02-12T22:00:00 Last Updated: 2024-08-07T00:52:19.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to inject arbitrary web script or HTML via the (1) tab parameter to users.php and the PATH_INFO to (2) day.php, (3) month.php, and (4) week.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://webcalendar.cvs.sourceforge.net/viewvc/webcalendar/webcalendar/ChangeLog?pathrev=REL_1_2 - http://secunia.com/advi
ttp://webcalendar.cvs.sourceforge.net/viewvc/webcalendar/webcalendar/ChangeLog?pathrev=REL_1_2 - http://secunia.com/advisories/38222 - http://www.securityfocus.com/bid/38053 - http://holisticinfosec.org/content/view/133/45/
CVE ID: CVE-2010-0637 State: PUBLISHED Published: 2010-02-12T22:00:00 Last Updated: 2024-08-07T00:52:19.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to hijack the authentication of administrators for requests that (1) delete an event or (2) ban an IP address from posting via unknown vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://webcalendar.cvs.sourceforge.net/viewvc/webcalendar/webcalendar/ChangeLog?pathrev=REL_1_2 - http://secunia.co
s: - http://webcalendar.cvs.sourceforge.net/viewvc/webcalendar/webcalendar/ChangeLog?pathrev=REL_1_2 - http://secunia.com/advisories/38222 - http://holisticinfosec.org/content/view/133/45/
CVE ID: CVE-2010-0638 State: PUBLISHED Published: 2010-02-15T18:00:00Z Last Updated: 2024-09-16T22:30:42.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in WebCalendar 1.2.0 allows remote attackers to hijack the authentication of administrators for requests that change the administrative password via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38222
CVE ID: CVE-2010-0639 State: PUBLISHED Published: 2010-02-15T18:00:00 Last Updated: 2024-08-07T00:52:20.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABLE24, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets to the HTCP port. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037159.html - http://osvdb.org/62297 - http://www.squid-cache.org/Advisories/SQUID-2010_2.txt - http://www.vupen.com/e
h/037159.html - http://osvdb.org/62297 - http://www.squid-cache.org/Advisories/SQUID-2010_2.txt - http://www.vupen.com/english/advisories/2010/0371 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035961.html - http://www.vupen.com/english/advisories/2010/0603 - http://secunia.com/advisories/38812 - http://www.squid-cache.org/Versions/v3/3.0/changesets/3.0-ADV-2010_2.patch - http://bugs.squid-cache.org/show_bug.cgi?id=2858 - http://www.securityfocus.com/bid/38212 - http://www.securitytracker.com/id?1023587 - http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch
CVE ID: CVE-2010-0640 State: PUBLISHED Published: 2010-02-24T18:00:00 Last Updated: 2024-08-07T00:52:19.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CA eHealth Performance Manager 6.0.x through 6.2.x, when malicious HTML detection is disabled, allows remote attackers to inject arbitrary web script or HTML via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38376 - http://seclists.org/fulldisclosure/2010/Feb/415 - http://www.securityfocus.com/archive/1/509714/100/0/threaded
CVE ID: CVE-2010-0641 State: PUBLISHED Published: 2010-02-17T18:00:00 Last Updated: 2024-08-07T00:52:19.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in webline/html/admin/wcs/LoginPage.jhtml in Cisco Collaboration Server (CCS) 5 allows remote attackers to inject arbitrary web script or HTML via the dest parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38201 - http://www.exploit-db.com/exploits/11403 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56220