Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
09 - http://www.openwall.com/lists/oss-security/2010/09/25/2 - http://secunia.com/advisories/42789 - http://www.vupen.com/english/advisories/2011/0024 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html - http://secunia.com/advisories/42778 - http://www.redhat.com/support/errata/RHSA-2011-0004.html - http://www.spinics.net/lists/mm-commits/msg80234.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=982f7c2b2e6a28f8f266e075d92e19c0dd4c6e56 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://www.openwall.com/lists/oss-security/2010/10/06/6 - http://lists.opensuse.org/opensuse-
nia.com/advisories/46397 - http://www.openwall.com/lists/oss-security/2010/10/06/6 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html - http://secunia.com/advisories/42932 - http://www.redhat.com/support/errata/RHSA-2011-0007.html - http://www.vupen.com/english/advisories/2011/0124 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html - http://www.vupen.com/english/advisories/2011/0298 - http://www.redhat.com/support/errata/RHSA-2010-0958.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 - http://www.openwall.com/lists/oss-security/2010/10/07/1 -
://www.mandriva.com/security/advisories?name=MDVSA-2011:051 - http://www.openwall.com/lists/oss-security/2010/10/07/1 - http://secunia.com/advisories/42963 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://www.vupen.com/english/advisories/2011/0375 - http://secunia.com/advisories/42890 - http://www.redhat.com/support/errata/RHSA-2011-0162.html - http://www.vupen.com/english/advisories/2011/0012 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html - http://www.vupen.com/english/advisories/2011/0168 - http://www.openwall.com/lists/oss-security/2010/10/25/3 - http://secunia.com/advisori
com/english/advisories/2011/0168 - http://www.openwall.com/lists/oss-security/2010/10/25/3 - http://secunia.com/advisories/43291 - https://bugzilla.redhat.com/show_bug.cgi?id=648673 - http://www.debian.org/security/2010/dsa-2126
CVE ID: CVE-2010-4084 State: PUBLISHED Published: 2010-10-29T18:00:00 Last Updated: 2024-08-07T03:34:36.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2581, CVE-2010-4085, CVE-2010-4086, and CVE-2010-4088. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024664 - http://www.adobe.com/support/security/bulletins/apsb10-25.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1226
y/bulletins/apsb10-25.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12265
CVE ID: CVE-2010-4085 State: PUBLISHED Published: 2010-10-29T18:00:00 Last Updated: 2024-08-07T03:34:37.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2581, CVE-2010-4084, CVE-2010-4086, and CVE-2010-4088. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024664 - http://www.adobe.com/support/security/bulletins/apsb10-25.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1151
y/bulletins/apsb10-25.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11518
CVE ID: CVE-2010-4086 State: PUBLISHED Published: 2010-10-29T18:00:00 Last Updated: 2024-08-07T03:34:37.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Director (.dir) media file with an invalid element size, a different vulnerability than CVE-2010-2581, CVE-2010-2880, CVE-2010-4084, CVE-2010-4085, and CVE-2010-4088. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024664 - http://www.adobe.com/support/security/bulletins/apsb10-25.html - http://www.securityfocus.com/a
tracker.com/id?1024664 - http://www.adobe.com/support/security/bulletins/apsb10-25.html - http://www.securityfocus.com/archive/1/514578/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12030
CVE ID: CVE-2010-4087 State: PUBLISHED Published: 2010-10-29T18:00:00 Last Updated: 2024-08-07T03:34:37.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: IML32.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a .dir file with a crafted mmap record containing an invalid length of a VSWV entry, a different vulnerability than CVE-2010-4089. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024664 - http://www.adobe.com/support/security/bulletins/apsb10-25.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova
upport/security/bulletins/apsb10-25.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12093 - http://www.securityfocus.com/archive/1/514581/100/0/threaded
CVE ID: CVE-2010-4088 State: PUBLISHED Published: 2010-10-29T18:00:00 Last Updated: 2024-08-07T03:34:36.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a .dir file with "duplicated references to the same KEY* chunk," a different vulnerability than CVE-2010-2581, CVE-2010-4084, CVE-2010-4085, and CVE-2010-4086. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024664 - http://www.adobe.com/support/security/bulletins/apsb10-25.html - https://oval.cisecurity.org/repository/search/d
24664 - http://www.adobe.com/support/security/bulletins/apsb10-25.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12169 - http://www.securityfocus.com/archive/1/514580/100/0/threaded
CVE ID: CVE-2010-4089 State: PUBLISHED Published: 2010-10-29T18:00:00 Last Updated: 2024-08-07T03:34:36.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: IML32.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a .dir file containing "duplicated LCSM entries in mmap record," a different vulnerability than CVE-2010-4087. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11748 - http://www.securitytracker.com/id?1024664 - http://www.adobe.com/support/security/bulletins/apsb10-25.html - ht
A11748 - http://www.securitytracker.com/id?1024664 - http://www.adobe.com/support/security/bulletins/apsb10-25.html - http://www.securityfocus.com/archive/1/514582/100/0/threaded
CVE ID: CVE-2010-4090 State: PUBLISHED Published: 2010-10-29T18:00:00 Last Updated: 2024-08-07T03:34:37.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024664 - http://www.adobe.com/support/security/bulletins/apsb10-25.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12199
CVE ID: CVE-2010-4091 State: PUBLISHED Published: 2010-11-07T21:00:00 Last Updated: 2024-08-07T03:34:37.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document that triggers memory corruption, involving the printSeps function. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42095 - http://osvdb.org/69005 - http:/
lyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42095 - http://osvdb.org/69005 - http://www.vupen.com/english/advisories/2011/0191 - http://secunia.com/advisories/43025 - http://blogs.adobe.com/psirt/2010/11/potential-issue-in-adobe-reader.html - http://www.vupen.com/english/advisories/2010/3111 - http://www.vupen.com/english/advisories/2010/2890 - http://security.gentoo.org/glsa/glsa-201101-08.xml - http://www.securityfocus.com/bid/44638 - http://www.redhat.com/support/errata/RHSA-2010-0934.html - http://archives.neohapsis.com/archives/fulldisclosure/2010-11/0024.html - http://www.vupen.com/english/advisories/2011/0337 - http://www.securitytracker.com/id?102
disclosure/2010-11/0024.html - http://www.vupen.com/english/advisories/2011/0337 - http://www.securitytracker.com/id?1025033 - http://secunia.com/advisories/42401 - http://www.securitytracker.com/id?1024684 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12527 - http://www.exploit-db.com/exploits/15419 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62996 - http://www.adobe.com/support/security/bulletins/apsb10-28.html - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00001.html - http://www.adobe.com/support/security/bulletins/apsb11-03.html - http://extraexploit.blogspot.com/2010/11/full-disclosure-xplpdf-adober-reader-94.html
CVE ID: CVE-2010-4092 State: PUBLISHED Published: 2010-11-05T20:00:00 Last Updated: 2024-08-07T03:34:37.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in an unspecified compatibility component in Adobe Shockwave Player before 11.5.9.620 allows user-assisted remote attackers to execute arbitrary code via a crafted web site, related to the Shockwave Settings window and an unloaded library. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/68982 - http://secunia.com/advisories/42112 - http://www.vupen.com/english/advisories/2011/0335 - http://www.a
osvdb.org/68982 - http://secunia.com/advisories/42112 - http://www.vupen.com/english/advisories/2011/0335 - http://www.adobe.com/support/security/bulletins/apsb11-01.html - http://www.securityfocus.com/bid/44617 - http://www.securitytracker.com/id?1025056 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11548 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62978
CVE ID: CVE-2010-4093 State: PUBLISHED Published: 2011-02-10T15:00:00 Last Updated: 2024-08-07T03:34:37.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0555, CVE-2010-4187, CVE-2010-4190, CVE-2010-4191, CVE-2010-4192, and CVE-2010-4306. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/189929 - http://www.vupen.com/english/advisories/2011/0335 - http://www.adobe.com/support/security/bulletins/apsb11-01.html - http://www.securitytracker.
lish/advisories/2011/0335 - http://www.adobe.com/support/security/bulletins/apsb11-01.html - http://www.securitytracker.com/id?1025056 - http://www.securityfocus.com/bid/46321
CVE ID: CVE-2010-4094 State: PUBLISHED Published: 2010-10-26T17:00:00 Last Updated: 2024-08-07T03:34:37.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN account, which makes it easier for remote attackers to execute arbitrary code by leveraging access to the manager role. NOTE: this might overlap CVE-2009-3548. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2732 - http://www.zerodayinitiative.com/advisories/ZDI-10-214/ - http://www.securityfocus.com/bid/44172 - http://securitytracker.com/id?1024601 -
initiative.com/advisories/ZDI-10-214/ - http://www.securityfocus.com/bid/44172 - http://securitytracker.com/id?1024601 - http://secunia.com/advisories/41784 - http://osvdb.org/69008 - http://download4.boulder.ibm.com/sar/CMA/RAA/013m6/0/UpdateLog.txt
CVE ID: CVE-2010-4095 State: PUBLISHED Published: 2010-10-26T19:00:00 Last Updated: 2024-08-07T03:34:37.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the FTP client in Serengeti Systems Incorporated Robo-FTP 3.7.3, and probably other versions before 3.7.5, allows remote FTP servers to write arbitrary files via a .. (dot dot) in a filename in a server response. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41809 - http://www.securityfocus.com/bid/44073 - http://www.securityfocus.com/archive/1/514267/100/0/threaded - http://www.htbridge.ch/advisory/directory_traversal_vulnerability_in_robo_f
yfocus.com/archive/1/514267/100/0/threaded - http://www.htbridge.ch/advisory/directory_traversal_vulnerability_in_robo_ftp.html - http://kb.robo-ftp.com/change_log/show/77 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62548
CVE ID: CVE-2010-4096 State: PUBLISHED Published: 2010-10-27T18:00:00 Last Updated: 2024-08-07T03:34:36.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: share/ma/keys_for_user in Monkeysphere 0.31 and 0.32 allows local users to execute arbitrary code via unknown manipulations related to the "monkeysphere-authentication keys-for-user" command. Additional Analyst Notes: - CVE Program Container: References: - http://web.monkeysphere.info/news/CVE-2010-4096/ - http://secunia.com/advisories/42067 - https://lists.riseup.net/www/arc/monkeysphere/2010-10/msg00066.html
CVE ID: CVE-2010-4097 State: PUBLISHED Published: 2010-10-27T18:00:00 Last Updated: 2024-08-07T03:34:37.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Aardvark Topsites PHP 5.2.0 and 5.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) mail, (2) title, (3) u, and (4) url parameters. NOTE: the q parameter is already covered by CVE-2009-2302. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44390 - http://www.securityfocus.com/archive/1/514423/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/62767
CVE ID: CVE-2010-4098 State: PUBLISHED Published: 2010-10-27T18:00:00 Last Updated: 2024-08-07T03:34:37.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: monotone before 0.48.1, when configured to allow remote commands, allows remote attackers to cause a denial of service (crash) via an empty argument to the mtn command. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050468.html - http://www.monotone.ca/NEWS - https://exchange.xforce.ibmcloud.com/vulnerabilities/62758 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050484.html - http://www.vupen.com/english/adviso
ttp://lists.fedoraproject.org/pipermail/package-announce/2010-November/050484.html - http://www.vupen.com/english/advisories/2010/2910 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html - http://www.securityfocus.com/bid/44383 - http://secunia.com/advisories/41960 - http://secunia.com/advisories/42177
CVE ID: CVE-2010-4099 State: PUBLISHED Published: 2010-10-27T18:00:00 Last Updated: 2024-08-07T03:34:36.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: ess.pm in NitroSecurity NitroView ESM 8.4.0a, when ESSPMDebug is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the Request parameter to ess. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/62768 - http://www.exploit-db.com/exploits/15318 - http://www.securitytracker.com/id?1024639 - http://www.securityfocus.com/bid/44421
CVE ID: CVE-2010-4100 State: PUBLISHED Published: 2010-11-01T19:00:00 Last Updated: 2024-08-07T03:34:37.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Insight Control Performance Management before 6.1 update 2 allows remote attackers to read arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44583 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62883 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02574359 - http://www.vupen.com/english/advisories/2010/2833 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID
tp://www.vupen.com/english/advisories/2010/2833 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02574359 - http://www.securitytracker.com/id?1024675
CVE ID: CVE-2010-4101 State: PUBLISHED Published: 2010-11-01T19:00:00 Last Updated: 2024-08-07T03:34:37.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP Insight Recovery before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42037 - http://www.securityfocus.com/bid/44545 - http://www.vupen.com/english/advisories/2010/2830 - http://www.securitytracker.com/id?1024673 - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02571464 - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=
w.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02571464 - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02571464
CVE ID: CVE-2010-4102 State: PUBLISHED Published: 2010-11-01T19:00:00 Last Updated: 2024-08-07T03:34:37.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Insight Recovery before 6.2 allows remote attackers to read arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42037 - http://www.vupen.com/english/advisories/2010/2830 - http://www.securitytracker.com/id?1024673 - http://www.securityfocus.com/bid/44542 - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02571464 - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02571464
CVE ID: CVE-2010-4103 State: PUBLISHED Published: 2010-11-01T19:00:00 Last Updated: 2024-08-07T03:34:37.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Insight Managed System Setup Wizard before 6.2 allows remote attackers to read arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2831 - http://www.securitytracker.com/id?1024667 - http://www.securityfocus.com/bid/44532 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62860 - http://secunia.com/advisories/42038 - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02573176 - http://ww
ttp://secunia.com/advisories/42038 - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02573176 - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02573176
CVE ID: CVE-2010-4104 State: PUBLISHED Published: 2010-11-01T19:00:00Z Last Updated: 2024-09-16T22:44:52.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Insight Orchestration before 6.2 allows remote attackers to read arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2829 - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02573285 - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02573285 - http://secunia.com/advisories/42036 - http://www.securityfocus.com/bid/44534
CVE ID: CVE-2010-4105 State: PUBLISHED Published: 2010-11-01T19:00:00Z Last Updated: 2024-09-16T22:14:19.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Insight Orchestration before 6.2 allows remote attackers to bypass intended access restrictions, and obtain sensitive information or modify data, via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2829 - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02573285 - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02573285 - http://secunia.com/advisories/42036 - http://www.securityfocus.com/
m/service/cki/docDisplay.do?docId=emr_na-c02573285 - http://secunia.com/advisories/42036 - http://www.securityfocus.com/bid/44534
CVE ID: CVE-2010-4106 State: PUBLISHED Published: 2010-11-01T19:00:00 Last Updated: 2024-08-07T03:34:36.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in HP Insight Control for Linux before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02573692 - http://www.securityfocus.com/bid/44537 - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02573692 - http://www.vupen.com/english/advisories/2010/2834 - https://exchange.xforce.ibmcloud.com/v
y.do?docId=emr_na-c02573692 - http://www.vupen.com/english/advisories/2010/2834 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62859 - http://secunia.com/advisories/42040
CVE ID: CVE-2010-4107 State: PUBLISHED Published: 2010-11-17T15:00:00 Last Updated: 2024-08-07T03:34:37.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printers, Color LaserJet MFP printers, and LaserJet 4100, 4200, 4300, 5100, 8150, and 9000 printers enables PJL commands that use the device's filesystem, which allows remote attackers to read arbitrary files via a command inside a print job, as demonstrated by a directory traversal attack. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1024741 - http://www.exploit-db.
nal Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1024741 - http://www.exploit-db.com/exploits/15631 - http://securityreason.com/securityalert/8328 - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333 - http://www.nruns.com/_downloads/SA-2010%20003-Hewlett-Packard.pdf - http://secunia.com/advisories/42238 - http://www.vupen.com/english/advisories/2010/2987 - http://www.securityfocus.com/bid/44882 - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02004333 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63261