Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
http://osvdb.org/66514 - http://www.securityfocus.com/bid/41829 - http://www.securityfocus.com/archive/1/512544/100/0/threaded - http://marc.info/?l=bugtraq&m=127973001009749&w=2 - http://www.attrition.org/pipermail/vim/2010-July/002374.html - http://secunia.com/advisories/40686 - http://www.securitytracker.com/id?1024238 - http://www.securitytracker.com/id?1024224 - http://securityreason.com/securityalert/8161 - http://www.securityfocus.com/archive/1/512552/100/0/threaded - http://marc.info/?l=bugtraq&m=127973001009749&w=2
CVE ID: CVE-2010-2704 State: PUBLISHED Published: 2010-07-27T22:00:00 Last Updated: 2024-08-07T02:39:37.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long HTTP request to nnmrptconfig.exe. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1866 - http://marc.info/?l=bugtraq&m=127972286628707&w=2 - http://www.securityfocus.com/bid/41839 - http://marc.info/?l=bugtraq&m=127974889107645&w=2 - http://www.attrition.org/pipermail/vim/2010-July/002374.html - http://marc.info/?l=bugtraq&m=1279722
7974889107645&w=2 - http://www.attrition.org/pipermail/vim/2010-July/002374.html - http://marc.info/?l=bugtraq&m=127972286628707&w=2 - http://secunia.com/advisories/40697 - http://www.securityfocus.com/archive/1/512543/100/0/threaded
CVE ID: CVE-2010-2705 State: PUBLISHED Published: 2010-08-06T19:31:00Z Last Updated: 2024-09-16T18:56:19.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability on the HP ProCurve 1800-24G switch with software PB.03.02 and earlier, and the ProCurve 1800-8G switch with software PA.03.02 and earlier, when SNMP is enabled, allows remote attackers to obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40867 - https://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02436028 - https://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02436028
CVE ID: CVE-2010-2706 State: PUBLISHED Published: 2010-08-06T19:31:00Z Last Updated: 2024-09-16T21:08:19.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the In-band Agent on the HP ProCurve 2610 switch before R.11.30 allows remote attackers to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02436043 - http://secunia.com/advisories/40864 - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02436043
CVE ID: CVE-2010-2707 State: PUBLISHED Published: 2010-08-06T19:31:00Z Last Updated: 2024-09-17T04:29:19.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability on the HP ProCurve 2626 and 2650 switches before H.10.80 allows remote attackers to obtain sensitive information, modify data, and cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40865 - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02436047 - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02436047
CVE ID: CVE-2010-2708 State: PUBLISHED Published: 2010-08-06T19:31:00Z Last Updated: 2024-09-16T21:57:07.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability on the HP ProCurve 2610 switch before R.11.22, when DHCP is enabled, allows remote attackers to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02436045 - http://secunia.com/advisories/40864 - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02436045
CVE ID: CVE-2010-2709 State: PUBLISHED Published: 2010-08-05T18:00:00 Last Updated: 2024-08-07T02:39:38.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in webappmon.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long OvJavaLocale value in a cookie. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/60880 - http://www.exploit-db.com/exploits/14547 - http://securityreason.com/securityalert/8150 - http://securitytracker.com/id?1024274 - http://seclists.org/bugtraq/2010/Aug/21 - http://www.securityfocus.com/bid/4215
http://securitytracker.com/id?1024274 - http://seclists.org/bugtraq/2010/Aug/21 - http://www.securityfocus.com/bid/42154 - http://www.coresecurity.com/content/hp-nnm-ovjavalocale-buffer-overflow - http://seclists.org/bugtraq/2010/Aug/21
CVE ID: CVE-2010-2710 State: PUBLISHED Published: 2010-08-20T20:00:00Z Last Updated: 2024-09-17T04:14:32.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01926980 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01926980
CVE ID: CVE-2010-2711 State: PUBLISHED Published: 2010-08-25T19:00:00 Last Updated: 2024-08-07T02:39:37.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the HP MagCloud app before 1.0.5 for the iPad allows remote attackers to read and modify MagCloud application data via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=128266345029913&w=2 - http://securitytracker.com/id?1024357 - http://secunia.com/advisories/41062 - http://marc.info/?l=bugtraq&m=128266345029913&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61325
CVE ID: CVE-2010-2712 State: PUBLISHED Published: 2010-08-30T20:00:00 Last Updated: 2024-08-07T02:39:38.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Software Distributor (sd) in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1024367 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7050 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02285980 - http://secunia.com/advisories/41163 - http://h20000.www2.hp.com/bizsupport/TechSupport/Documen
.jsp?objectID=c02285980 - http://secunia.com/advisories/41163 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02285980 - http://www.vupen.com/english/advisories/2010/2214 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61394
CVE ID: CVE-2010-2713 State: PUBLISHED Published: 2010-08-05T18:00:00 Last Updated: 2024-08-07T02:39:38.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vte_sequence_handler_window_manipulation function in vteseq.c in libvte (aka libvte9) in VTE 0.25.1 and earlier, as used in gnome-terminal, does not properly handle escape sequences, which allows remote attackers to execute arbitrary commands or obtain potentially sensitive information via a (1) window title or (2) icon title sequence. NOTE: this issue exists because of a CVE-2003-0070 regression. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-962-1 - http://www.vupen.com/eng
nal Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-962-1 - http://www.vupen.com/english/advisories/2010/1839 - http://www.securityfocus.com/bid/41716 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://git.gnome.org/browse/vte/commit/?id=8b971a7b2c59902914ecbbc3915c45dd21530a91 - https://bugzilla.redhat.com/show_bug.cgi?id=613110 - http://secunia.com/advisories/40635
CVE ID: CVE-2010-2714 State: PUBLISHED Published: 2010-07-13T18:00:00 Last Updated: 2024-08-07T02:39:37.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to execute arbitrary SQL commands via the album parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41382 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60079 - http://www.vupen.com/english/advisories/2010/1696 - http://www.exploit-db.com/exploits/14203
CVE ID: CVE-2010-2715 State: PUBLISHED Published: 2010-07-13T18:00:00 Last Updated: 2024-08-07T02:39:37.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to inject arbitrary web script or HTML via the album parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41382 - http://www.vupen.com/english/advisories/2010/1696 - http://www.exploit-db.com/exploits/14203 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60078
CVE ID: CVE-2010-2716 State: PUBLISHED Published: 2010-07-13T18:00:00 Last Updated: 2024-08-07T02:39:37.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PsNews 1.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) ndetail.php and (2) print.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/60129 - http://www.securityfocus.com/bid/41410 - http://www.exploit-db.com/exploits/14251 - http://packetstormsecurity.org/1007-exploits/psnews-sql.txt
CVE ID: CVE-2010-2717 State: PUBLISHED Published: 2010-07-13T18:00:00 Last Updated: 2024-08-07T02:39:38.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in manager/login.php in CruxSoftware CruxCMS 3.0, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the txtusername parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/512245/100/0/threaded - http://www.vupen.com/english/advisories/2010/1708 - http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxcms_1.html
CVE ID: CVE-2010-2718 State: PUBLISHED Published: 2010-07-13T18:00:00 Last Updated: 2024-08-07T02:39:37.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in CruxSoftware CruxPA 2.00, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) txtusername parameter to login.php, (2) todo parameter to newtodo.php, and unspecified vectors to (3) newtelephone.php and (4) newappointment.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa_3.html - http://packetstormsecurity.org/1007-exploits/cruxpa-xss.txt - http://www.v
advisory/xss_vulnerability_in_cruxpa_3.html - http://packetstormsecurity.org/1007-exploits/cruxpa-xss.txt - http://www.vupen.com/english/advisories/2010/1709 - http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa.html - http://www.securityfocus.com/archive/1/512243/100/0/threaded - http://www.securityfocus.com/bid/41495 - http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa_2.html - http://www.htbridge.ch/advisory/xss_vulnerability_in_cruxpa_1.html
CVE ID: CVE-2010-2719 State: PUBLISHED Published: 2010-07-13T18:00:00 Last Updated: 2024-08-07T02:39:37.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in show.php in phpaaCms 0.3.1 UTF-8, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/65994 - http://www.vupen.com/english/advisories/2010/1690 - http://secunia.com/advisories/40450 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60075 - http://www.securityfocus.com/bid/41341 - http://www.exploit-db.com/exploits/14199
CVE ID: CVE-2010-2720 State: PUBLISHED Published: 2010-07-13T18:00:00 Last Updated: 2024-08-07T02:39:37.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in list.php in phpaaCms 0.3.1 UTF-8, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14201 - http://osvdb.org/65995 - http://www.vupen.com/english/advisories/2010/1690 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60076 - http://secunia.com/advisories/40450 - htt
ories/2010/1690 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60076 - http://secunia.com/advisories/40450 - http://www.securityfocus.com/bid/41341
CVE ID: CVE-2010-2721 State: PUBLISHED Published: 2010-07-13T18:00:00 Last Updated: 2024-08-07T02:46:47.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to execute arbitrary SQL commands via the artist_id parameter in an addalbum action. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1741 - http://packetstormsecurity.org/1007-exploits/lyrics-sql.txt - http://secunia.com/advisories/40438 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60118 - http://www.exploit-db.com/exploits/14244 - http://osvdb.org/66033 - ht
hange.xforce.ibmcloud.com/vulnerabilities/60118 - http://www.exploit-db.com/exploits/14244 - http://osvdb.org/66033 - http://www.securityfocus.com/bid/41394
CVE ID: CVE-2010-2722 State: PUBLISHED Published: 2010-07-13T18:00:00Z Last Updated: 2024-09-17T03:58:33.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to inject arbitrary web script or HTML via the artist_id parameter, which is not properly handled in a forced SQL error message. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40438
CVE ID: CVE-2010-2723 State: PUBLISHED Published: 2010-07-13T18:00:00Z Last Updated: 2024-09-16T23:36:46.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in LISTSERV 15 and 16 allows remote attackers to inject arbitrary web script or HTML via the T parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41503 - http://secunia.com/advisories/40529
CVE ID: CVE-2010-2724 State: PUBLISHED Published: 2010-07-13T18:00:00 Last Updated: 2024-08-07T02:46:47.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Hierarchical Select module 5.x before 5.x-3.2 and 6.x before 6.x-3.2 for Drupal allows remote authenticated users, with administer taxonomy permissions, to inject arbitrary web script or HTML via unspecified vectors in the hierarchical_select form. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40440 - http://www.securityfocus.com/bid/41450 - http://osvdb.org/66117 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60158 - http:
ecurityfocus.com/bid/41450 - http://osvdb.org/66117 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60158 - http://drupal.org/node/847488
CVE ID: CVE-2010-2725 State: PUBLISHED Published: 2010-08-04T19:00:00Z Last Updated: 2024-09-16T18:44:18.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: BarnOwl before 1.6.2 does not check the return code of calls to the (1) ZPending and (2) ZReceiveNotice functions in libzephyr, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://github.com/barnowl/barnowl/blob/barnowl-1.6.2/ChangeLog - http://barnowl.mit.edu/wiki/release-notes/1.6.2
CVE ID: CVE-2010-2726 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-2727 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-2728 State: PUBLISHED Published: 2010-09-15T18:00:00 Last Updated: 2024-08-07T02:46:47.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Microsoft Outlook 2002 SP3, 2003 SP3, and 2007 SP2, when Online Mode for an Exchange Server is enabled, allows remote attackers to execute arbitrary code via a crafted e-mail message, aka "Heap Based Buffer Overflow in Outlook Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7125 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-064
CVE ID: CVE-2010-2729 State: PUBLISHED Published: 2010-09-15T18:00:00 Last Updated: 2024-08-07T02:46:48.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when printer sharing is enabled, does not properly validate spooler access permissions, which allows remote attackers to create files in a system directory, and consequently execute arbitrary code, by sending a crafted print request over RPC, as exploited in the wild in September 2010, aka "Print Spooler Service Impersonation Vulnerability." Additional Analyst
as exploited in the wild in September 2010, aka "Print Spooler Service Impersonation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-061 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7358
CVE ID: CVE-2010-2730 State: PUBLISHED Published: 2010-09-15T18:00:00 Last Updated: 2024-08-07T02:46:47.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft Internet Information Services (IIS) 7.5, when FastCGI is enabled, allows remote attackers to execute arbitrary code via crafted headers in a request, aka "Request Header Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-065 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6933
CVE ID: CVE-2010-2731 State: PUBLISHED Published: 2010-09-15T18:00:00 Last Updated: 2024-08-07T02:46:47.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.1 on Windows XP SP3, when directory-based Basic Authentication is enabled, allows remote attackers to bypass intended access restrictions and execute ASP files via a crafted request, aka "Directory Authentication Bypass Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-065 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mi
ecurity-updates/securitybulletins/2010/ms10-065 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6942
CVE ID: CVE-2010-2732 State: PUBLISHED Published: 2010-11-10T01:00:00 Last Updated: 2024-08-07T02:46:47.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the web interface in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka "UAG Redirection Spoofing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-089 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre
rity-updates/securitybulletins/2010/ms10-089 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12257 - http://www.us-cert.gov/cas/techalerts/TA10-313A.html
CVE ID: CVE-2010-2733 State: PUBLISHED Published: 2010-11-10T01:00:00 Last Updated: 2024-08-07T02:46:47.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web Monitor in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "UAG XSS Allows EOP Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12127 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-089 - http
Aorg.mitre.oval%3Adef%3A12127 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-089 - http://www.us-cert.gov/cas/techalerts/TA10-313A.html
CVE ID: CVE-2010-2734 State: PUBLISHED Published: 2010-11-10T01:00:00 Last Updated: 2024-08-07T02:46:47.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the mobile portal in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "XSS Issue on UAG Mobile Portal Website in Forefront Unified Access Gateway Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12058 - https://docs.microsoft.com/en-
://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12058 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-089 - http://www.us-cert.gov/cas/techalerts/TA10-313A.html
CVE ID: CVE-2010-2735 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-2736 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-2737 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-2738 State: PUBLISHED Published: 2010-09-15T18:00:00 Last Updated: 2024-08-07T02:46:47.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Uniscribe (aka new Unicode Script Processor) implementation in USP10.DLL in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2, and Microsoft Office XP SP3, 2003 SP3, and 2007 SP2, does not properly validate tables associated with malformed OpenType fonts, which allows remote attackers to execute arbitrary code via a crafted (1) web site or (2) Office document, aka "Uniscribe Font Parsing Engine Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Contain
nt, aka "Uniscribe Font Parsing Engine Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-063 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7214