Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
securityfocus.com/bid/43676 - http://www.vupen.com/english/advisories/2011/0345 - https://bugzilla.redhat.com/show_bug.cgi?id=640865 - http://secunia.com/advisories/42936 - http://www.redhat.com/support/errata/RHSA-2010-0825.html - http://lists.mysql.com/commits/117094 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64838 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:223
CVE ID: CVE-2010-3841 State: PUBLISHED Published: 2010-10-18T16:00:00 Last Updated: 2024-08-07T03:26:12.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in lib/TWiki.pm in TWiki before 5.0.1 allow remote attackers to inject arbitrary web script or HTML via (1) the rev parameter to the view script or (2) the query string to the login script. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/62557 - http://secunia.com/advisories/41796 - http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2010-3841 - http://www.securityfocus.com/bid/44103
CVE ID: CVE-2010-3842 State: PUBLISHED Published: 2010-10-27T22:00:00Z Last Updated: 2024-08-07T03:26:12.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in curl 7.20.0 through 7.21.1, when the --remote-header-name or -J option is used, allows remote servers to create or overwrite arbitrary files by using \ (backslash) as a separator of path components within the Content-disposition HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://curl.haxx.se/docs/adv_20101013.html - http://www.openwall.com/lists/oss-security/2010/10/13/4 - http://www.openwall.com/lists/oss-security/2010/10/13/5 - http://securitytracker
l.com/lists/oss-security/2010/10/13/4 - http://www.openwall.com/lists/oss-security/2010/10/13/5 - http://securitytracker.com/id?1024583 - http://secunia.com/advisories/39532 - http://www.openwall.com/lists/oss-security/2010/10/13/1 - https://bugzilla.redhat.com/show_bug.cgi?id=642642
CVE ID: CVE-2010-3843 State: PUBLISHED Published: 2021-05-28T12:14:46 Last Updated: 2024-08-07T03:26:12.157Z Vendors: n/a Products: ettercap Problem Types: CWE-787 Description: The GTK version of ettercap uses a global settings file at /tmp/.ettercap_gtk and does not verify ownership of this file. When parsing this file for settings in gtkui_conf_read() (src/interfacesgtk/ec_gtk_conf.c), an unchecked sscanf() call allows a maliciously placed settings file to overflow a statically-sized buffer on the stack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=643453 - https://bugs.launchpad.net/ubuntu/+source/ettercap/+bug/656347 - http:
ps://bugzilla.redhat.com/show_bug.cgi?id=643453 - https://bugs.launchpad.net/ubuntu/+source/ettercap/+bug/656347 - http://article.gmane.org/gmane.comp.security.oss.general/3660
CVE ID: CVE-2010-3844 State: PUBLISHED Published: 2019-11-12T21:47:08 Last Updated: 2024-08-07T03:26:11.497Z Vendors: ettercap Products: ettercap Problem Types: Buffer Overflow Description: An unchecked sscanf() call in ettercap before 0.7.5 allows an insecure temporary settings file to overflow a static-sized buffer on the stack. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-3844 - https://access.redhat.com/security/cve/cve-2010-3844 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=600130 - https://github.com/Ettercap/ettercap/commit/4ef3ede30181eca9add74305ad26dbcb0c3686a0
CVE ID: CVE-2010-3845 State: PUBLISHED Published: 2017-08-08T21:00:00 Last Updated: 2024-08-07T03:26:11.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: libapache-authenhook-perl 2.00-04 stores usernames and passwords in plaintext in the vhost error log. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=599712 - http://seclists.org/oss-sec/2010/q4/63 - https://rt.cpan.org/Public/Bug/Display.html?id=62040
CVE ID: CVE-2010-3846 State: PUBLISHED Published: 2010-11-05T16:28:00 Last Updated: 2024-08-07T03:26:11.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the apply_rcs_change function in rcs.c in CVS 1.11.23 allows local users to gain privileges via an RCS file containing crafted delta fragment changes that trigger a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42041 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050090.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050212.html - http://www.vupen.com/english/advisories/2010
ts.fedoraproject.org/pipermail/package-announce/2010-November/050212.html - http://www.vupen.com/english/advisories/2010/2846 - http://www.securityfocus.com/bid/44528 - http://secunia.com/advisories/42409 - http://www.osvdb.org/68952 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62858 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050287.html - http://www.vupen.com/english/advisories/2010/2845 - http://www.securitytracker.com/id?1024795 - https://bugzilla.redhat.com/show_bug.cgi?id=642146 - http://www.vupen.com/english/advisories/2010/3080 - http://www.vupen.com/english/advisories/2010/2869 - http://cvs.savannah.gnu.org/viewvc/cvs/ccvs/src/rcs.c?r1=1.262.4
0 - http://www.vupen.com/english/advisories/2010/2869 - http://cvs.savannah.gnu.org/viewvc/cvs/ccvs/src/rcs.c?r1=1.262.4.65&r2=1.262.4.66&sortby=rev - http://secunia.com/advisories/41079 - http://www.vupen.com/english/advisories/2010/2899 - http://www.redhat.com/support/errata/RHSA-2010-0918.html
CVE ID: CVE-2010-3847 State: PUBLISHED Published: 2011-01-07T18:00:00 Last Updated: 2024-08-07T03:26:12.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not properly handle a value of $ORIGIN for the LD_AUDIT environment variable, which allows local users to gain privileges via a crafted dynamic shared object (DSO) located in an arbitrary directory. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201011-01.xml - http://www.vmware.com/security/advisories/VMSA-2011-0001.html - http://support.avaya.com/css/P8/docume
a-201011-01.xml - http://www.vmware.com/security/advisories/VMSA-2011-0001.html - http://support.avaya.com/css/P8/documents/100120941 - http://seclists.org/fulldisclosure/2010/Oct/257 - http://www.redhat.com/support/errata/RHSA-2010-0872.html - https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:207 - https://www.exploit-db.com/exploits/44025/ - https://www.exploit-db.com/exploits/44024/ - http://www.debian.org/security/2010/dsa-2122 - http://www.ubuntu.com/usn/USN-1009-1 - https://bugzilla.redhat.com/show_bug.cgi?id=643306 - http://www.securityfocus.com/archive/1/515545/100/0/threaded - https://rhn.redhat.
a.redhat.com/show_bug.cgi?id=643306 - http://www.securityfocus.com/archive/1/515545/100/0/threaded - https://rhn.redhat.com/errata/RHSA-2010-0787.html - http://www.securityfocus.com/bid/44154 - http://seclists.org/fulldisclosure/2010/Oct/294 - http://secunia.com/advisories/42787 - http://www.vupen.com/english/advisories/2011/0025 - http://sourceware.org/ml/libc-hacker/2010-10/msg00007.html - http://seclists.org/fulldisclosure/2010/Oct/292 - http://www.kb.cert.org/vuls/id/537223
CVE ID: CVE-2010-3848 State: PUBLISHED Published: 2010-12-30T18:00:00 Last Updated: 2024-08-07T03:26:12.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to gain privileges by providing a large number of iovec structures. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43056 - https://bugzilla.redhat.com/show_bug.cgi?id=644156 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://openwall.com/lists/oss-security/2010/11/30/1
sts.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://openwall.com/lists/oss-security/2010/11/30/1 - http://www.vupen.com/english/advisories/2011/0298 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a27e13d370415add3487949c60810e36069a23a6 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:257 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00007.html - http://www.vupen.com/english/advisories/2011/0375 - http://www.ubuntu.com/usn/USN-1023-1 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html - http://secunia.com/advisori
sn/USN-1023-1 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html - http://secunia.com/advisories/43291 - http://www.vupen.com/english/advisories/2011/0213 - http://www.debian.org/security/2010/dsa-2126
CVE ID: CVE-2010-3849 State: PUBLISHED Published: 2010-12-30T18:00:00 Last Updated: 2024-08-07T03:26:12.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a sendmsg call that specifies a NULL value for the remote address field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43056 - https://bugzilla.redhat.com/show_bug.cgi?id=644156 - http://archives.neohapsis.com/archives/fulldisclosure/2010-12/0086.html - http://lists
dhat.com/show_bug.cgi?id=644156 - http://archives.neohapsis.com/archives/fulldisclosure/2010-12/0086.html - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://openwall.com/lists/oss-security/2010/11/30/1 - http://www.vupen.com/english/advisories/2011/0298 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:257 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00007.html - http://www.vupen.com/english/advisories/2011/0375 - http://www.ubuntu.com/usn/USN-1023-1 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html - http://secunia.com/advisories/432
-1023-1 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html - http://secunia.com/advisories/43291 - http://www.vupen.com/english/advisories/2011/0213 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fa0e846494792e722d817b9d3d625a4ef4896c96 - http://www.debian.org/security/2010/dsa-2126
CVE ID: CVE-2010-3850 State: PUBLISHED Published: 2010-12-30T18:00:00 Last Updated: 2024-08-07T03:26:12.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ec_dev_ioctl function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP_NET_ADMIN capability, which allows local users to bypass intended access restrictions and configure econet addresses via an SIOCSIFADDR ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=16c41745c7b92a243d0874f534c1655196c64b74 - http://secunia.com/advisories/43056 - https://bugzilla.redhat.com/show_bug.cgi?id=6
45c7b92a243d0874f534c1655196c64b74 - http://secunia.com/advisories/43056 - https://bugzilla.redhat.com/show_bug.cgi?id=644156 - http://archives.neohapsis.com/archives/fulldisclosure/2010-12/0086.html - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://openwall.com/lists/oss-security/2010/11/30/1 - http://www.vupen.com/english/advisories/2011/0298 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:257 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00007.html - http://www.vupen.com/english/advisories/2
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00007.html - http://www.vupen.com/english/advisories/2011/0375 - http://www.ubuntu.com/usn/USN-1023-1 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html - http://secunia.com/advisories/43291 - http://www.vupen.com/english/advisories/2011/0213 - http://www.debian.org/security/2010/dsa-2126
CVE ID: CVE-2010-3851 State: PUBLISHED Published: 2010-11-04T17:00:00 Last Updated: 2024-08-07T03:26:11.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and possibly other products, when a raw-format disk image is used, allows local guest OS administrators to read files from the host via a crafted (1) qcow2, (2) VMDK, or (3) VDI header, related to lack of support for a disk format specifier. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/libguestfs/2010-October/msg00041.html - https://bugzilla.redhat.com/show_bug.cgi?id=643958 - http://rwmj.wordpre
rchives/libguestfs/2010-October/msg00041.html - https://bugzilla.redhat.com/show_bug.cgi?id=643958 - http://rwmj.wordpress.com/2010/10/23/new-libguestfs-stable-versions/ - https://www.redhat.com/archives/libguestfs/2010-October/msg00037.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050237.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050742.html - http://www.vupen.com/english/advisories/2010/2963 - http://www.redhat.com/support/errata/RHSA-2011-0586.html - http://www.securityfocus.com/bid/44166 - http://secunia.com/advisories/41797 - https://www.redhat.com/archives/libguestfs/2010-October/msg00036.html - http://secunia.com/adv
ia.com/advisories/41797 - https://www.redhat.com/archives/libguestfs/2010-October/msg00036.html - http://secunia.com/advisories/42235 - http://www.vupen.com/english/advisories/2010/2874
CVE ID: CVE-2010-3852 State: PUBLISHED Published: 2010-11-05T22:00:00 Last Updated: 2024-08-07T03:26:12.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Luci 0.22.4 and earlier in Red Hat Conga uses "[INSERT SECRET HERE]" as its secret key for cookies, which makes it easier for remote attackers to bypass repoze.who authentication via a forged ticket cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2900 - http://www.securityfocus.com/bid/44611 - http://secunia.com/advisories/42123 - http://www.vupen.com/english/advisories/2010/2873 - http://lists.fedoraproject.org/pipermail/package
/advisories/42123 - http://www.vupen.com/english/advisories/2010/2873 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050244.html - http://secunia.com/advisories/42113 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050309.html - https://bugzilla.redhat.com/show_bug.cgi?id=626504 - http://osvdb.org/69015 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62980 - http://git.fedorahosted.org/git/?p=luci.git%3Ba=commit%3Bh=9e0bbf0c5faa198379d945474f7d55da5031cacf - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050246.html
CVE ID: CVE-2010-3853 State: PUBLISHED Published: 2011-01-24T17:00:00 Last Updated: 2024-08-07T03:26:12.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: pam_namespace.c in the pam_namespace module in Linux-PAM (aka pam) before 1.1.3 uses the environment of the invoking application or service during execution of the namespace.init script, which might allow local users to gain privileges by running a setuid program that relies on the pam_namespace PAM check, as demonstrated by the sudo program. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201206-31.xml - http://lists.vmware.com/pipermail/security-announce/2011/000126.html
tp://security.gentoo.org/glsa/glsa-201206-31.xml - http://lists.vmware.com/pipermail/security-announce/2011/000126.html - http://www.vupen.com/english/advisories/2011/0606 - http://www.securityfocus.com/archive/1/516909/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDVSA-2010:220 - http://secunia.com/advisories/49711 - http://www.redhat.com/support/errata/RHSA-2010-0891.html - https://bugzilla.redhat.com/show_bug.cgi?id=643043 - http://www.redhat.com/support/errata/RHSA-2010-0819.html - http://www.vmware.com/security/advisories/VMSA-2011-0004.html - http://pam.cvs.sourceforge.net/viewvc/pam/Linux-PAM/modules/pam_namespace/pam_namespace.c?view=log#rev1.13
CVE ID: CVE-2010-3854 State: PUBLISHED Published: 2011-02-02T00:00:00 Last Updated: 2024-08-07T03:26:12.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the web administration interface (aka Futon) in Apache CouchDB 0.8.0 through 1.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65050 - http://mail-archives.apache.org/mod_mbox/couchdb-dev/201101.mbox/%3CC840F655-C8C5-4EC6-8AA8-DD223E39C34A%40apache.org%3E - http://osvdb.org/70734 - http://www.vupen.com/english/advi
box/%3CC840F655-C8C5-4EC6-8AA8-DD223E39C34A%40apache.org%3E - http://osvdb.org/70734 - http://www.vupen.com/english/advisories/2011/0263 - http://www.securityfocus.com/bid/46066 - http://www.securityfocus.com/archive/1/516058/100/0/threaded - http://secunia.com/advisories/43111 - http://www.securitytracker.com/id?1025013
CVE ID: CVE-2010-3855 State: PUBLISHED Published: 2010-11-26T19:00:00 Last Updated: 2024-08-07T03:26:11.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ft_var_readpackedpoints function in truetype/ttgxvar.c in FreeType 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TrueType GX font. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43138 - http://secunia.com/advisories/42295 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=602221 - http://support.avaya.com/css/P8/documents/100122733 - http://support.apple.com/kb/HT4
cgi-bin/bugreport.cgi?bug=602221 - http://support.avaya.com/css/P8/documents/100122733 - http://support.apple.com/kb/HT4564 - http://support.apple.com/kb/HT4565 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:235 - http://support.apple.com/kb/HT4803 - http://www.vupen.com/english/advisories/2011/0246 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051251.html - http://lists.apple.com/archives/security-announce/2011//Jul/msg00000.html - http://www.securityfocus.com/bid/44214 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050965.html - http://www.redhat.com/support/errata/RHSA-2010-0889.html - http://lists.apple.com/archives/se
010-November/050965.html - http://www.redhat.com/support/errata/RHSA-2010-0889.html - http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051231.html - http://www.ubuntu.com/usn/USN-1013-1 - http://secunia.com/advisories/42289 - http://lists.apple.com/archives/security-announce/2011//Jul/msg00001.html - https://savannah.nongnu.org/bugs/?31310 - http://support.apple.com/kb/HT4802 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:236 - http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=59eb9f8cfe7d
urity-announce/2011//Mar/msg00003.html - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=59eb9f8cfe7d1df379a2318316d1f04f80fba54a - http://www.securitytracker.com/id?1024745 - http://lists.apple.com/archives/security-announce/2011//Mar/msg00005.html - http://secunia.com/advisories/48951 - http://www.debian.org/security/2011/dsa-2155 - http://www.vupen.com/english/advisories/2010/3037 - http://support.apple.com/kb/HT4581
CVE ID: CVE-2010-3856 State: PUBLISHED Published: 2011-01-07T18:00:00.000Z Last Updated: 2025-02-13T16:27:09.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use of the LD_AUDIT environment variable to reference dynamic shared objects (DSOs) as audit objects, which allows local users to gain privileges by leveraging an unsafe DSO located in a trusted library directory, as demonstrated by libpcprofile.so. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2010/Oct/344 - http://www.securityfocus.com/bid/44347 - http:
ontainer: References: - http://seclists.org/fulldisclosure/2010/Oct/344 - http://www.securityfocus.com/bid/44347 - http://security.gentoo.org/glsa/glsa-201011-01.xml - http://www.vmware.com/security/advisories/VMSA-2011-0001.html - http://support.avaya.com/css/P8/documents/100121017 - https://bugzilla.redhat.com/show_bug.cgi?id=645672 - http://www.redhat.com/support/errata/RHSA-2010-0872.html - https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html - https://www.exploit-db.com/exploits/44025/ - http://www.debian.org/security/2010/dsa-2122 - http://www.ubuntu.com/usn/USN-1009-1 - http://sourceware.org/ml/libc-hacker/2010-10/msg00010.html - http://www.securityfocus.com/arc
buntu.com/usn/USN-1009-1 - http://sourceware.org/ml/libc-hacker/2010-10/msg00010.html - http://www.securityfocus.com/archive/1/515545/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDVSA-2010:212 - http://secunia.com/advisories/42787 - http://www.vupen.com/english/advisories/2011/0025 - https://rhn.redhat.com/errata/RHSA-2010-0793.html - http://seclists.org/fulldisclosure/2019/Jun/18 - https://seclists.org/bugtraq/2019/Jun/14 - http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html - http://www.openwall.com/lists/oss-security/2023/07/19/9 - http://seclists.org/fulldisclosure/2023/Jul/31 - http://www.o
http://www.openwall.com/lists/oss-security/2023/07/19/9 - http://seclists.org/fulldisclosure/2023/Jul/31 - http://www.openwall.com/lists/oss-security/2023/07/20/1 - http://packetstormsecurity.com/files/173661/OpenSSH-Forwarded-SSH-Agent-Remote-Code-Execution.html
CVE ID: CVE-2010-3857 State: PUBLISHED Published: 2019-11-12T22:03:37 Last Updated: 2024-08-07T03:26:12.077Z Vendors: JBoss BRMS Products: JBoss BRMS Problem Types: Cross-Site Scripting Description: JBoss BRMS before 5.1.0 has a XSS vulnerability via asset=UUID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-3857 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-3857 - https://access.redhat.com/security/cve/cve-2010-3857
CVE ID: CVE-2010-3858 State: PUBLISHED Published: 2010-11-30T21:19:00 Last Updated: 2024-08-07T03:26:11.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: The setup_arg_pages function in fs/exec.c in the Linux kernel before 2.6.36, when CONFIG_STACK_GROWSDOWN is used, does not properly restrict the stack memory consumption of the (1) arguments and (2) environment for a 32-bit application on a 64-bit platform, which allows local users to cause a denial of service (system crash) via a crafted exec system call, a related issue to CVE-2010-2240. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42789 - http://www.vupen.com/english/advisor