Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-2462 State: PUBLISHED Published: 2010-06-25T21:00:00 Last Updated: 2024-08-07T02:32:16.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in withdraw_money.php in Toma Cero OroHYIP allows remote attackers to execute arbitrary SQL commands via the id parameter in a cancel action. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/13948 - http://packetstormsecurity.org/1006-exploits/orohyip-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/59582 - http://www.securityfocus.com/bid/40992
CVE ID: CVE-2010-2463 State: PUBLISHED Published: 2010-06-25T21:00:00Z Last Updated: 2024-09-16T19:10:34.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in forum.php in Jamroom before 4.1.9 allows remote attackers to inject arbitrary web script or HTML via the post_id parameter in a modify action. Additional Analyst Notes: - CVE Program Container: References: - http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1756 - http://www.htbridge.ch/advisory/xss_vulnerability_in_jamroom.html - http://secunia.com/advisories/40259 - http://www.securityfocus.com/bid/41071
CVE ID: CVE-2010-2464 State: PUBLISHED Published: 2010-06-25T21:00:00 Last Updated: 2024-08-07T02:32:16.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the RSComments (com_rscomments) component 1.0.0 Rev 2 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) website and (2) name parameters to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40977 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59578 - http://www.exploit-db.com/exploits/13935 - http://secunia.com/advisories/40278 - http://packetstormsecurity.org/1006-exploit
://www.exploit-db.com/exploits/13935 - http://secunia.com/advisories/40278 - http://packetstormsecurity.org/1006-exploits/joomlarscomments-xss.txt - http://www.rsjoomla.com/customer-support/documentations/96--general-overview-of-the-component/393-changelog.html
CVE ID: CVE-2010-2465 State: PUBLISHED Published: 2010-06-25T21:00:00 Last Updated: 2024-08-07T02:32:16.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: The S2 Security NetBox 2.5, 3.3, and 4.0, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download node logs, photographs of persons, and backup files via unspecified HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.darkreading.com/blog/archives/2010/04/attacking_door.html - http://secunia.com/advisories/40374 - http://www.kb.cert.org/vuls/id/251133 - ht
/archives/2010/04/attacking_door.html - http://secunia.com/advisories/40374 - http://www.kb.cert.org/vuls/id/251133 - http://www.kb.cert.org/vuls/id/MAPG-83TQL8 - http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2 - http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon - http://osvdb.org/65757 - http://www.securityfocus.com/bid/41134 - http://blip.tv/file/3414004
CVE ID: CVE-2010-2466 State: PUBLISHED Published: 2010-06-25T21:00:00 Last Updated: 2024-08-07T02:32:16.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: The S2 Security NetBox, possibly 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, does not properly prevent downloading of database backups, which allows remote attackers to obtain sensitive information via requests for full_*.dar files with predictable filenames. Additional Analyst Notes: - CVE Program Container: References: - http://www.darkreading.com/blog/archives/2010/04/attacking_door.html - http://www.kb.cert.org/vuls/id/228737 - http://www.securityinfowatch.com/Executives+Columns+%2526+Fe
tacking_door.html - http://www.kb.cert.org/vuls/id/228737 - http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2 - http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon - http://blip.tv/file/3414004 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59826
CVE ID: CVE-2010-2467 State: PUBLISHED Published: 2010-06-25T21:00:00 Last Updated: 2024-08-07T02:32:16.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: The S2 Security NetBox, possibly 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, does not require setting a password for the FTP server that stores database backups, which makes it easier for remote attackers to download backup files via unspecified FTP requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.darkreading.com/blog/archives/2010/04/attacking_door.html - http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2 - http://www.sl
tacking_door.html - http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2 - http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon - http://blip.tv/file/3414004 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59828
CVE ID: CVE-2010-2468 State: PUBLISHED Published: 2010-06-25T21:00:00 Last Updated: 2024-08-07T02:32:16.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: The S2 Security NetBox 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, uses a weak hash algorithm for storing the Administrator password, which makes it easier for context-dependent attackers to obtain privileged access by recovering the cleartext of this password. Additional Analyst Notes: - CVE Program Container: References: - http://www.darkreading.com/blog/archives/2010/04/attacking_door.html - http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2 - http://www.
attacking_door.html - http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2 - http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon - https://exchange.xforce.ibmcloud.com/vulnerabilities/59827 - http://blip.tv/file/3414004
CVE ID: CVE-2010-2469 State: PUBLISHED Published: 2010-06-25T21:00:00Z Last Updated: 2024-09-17T00:45:53.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linear eMerge 50 and 5000 uses a default password of eMerge for the IEIeMerge account, which makes it easier for remote attackers to obtain Video Recorder data by establishing a session to the device. Additional Analyst Notes: - CVE Program Container: References: - http://www.darkreading.com/blog/archives/2010/04/attacking_door.html - http://www.securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2 - http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access
6527?pageNum=2 - http://www.slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon - http://blip.tv/file/3414004
CVE ID: CVE-2010-2470 State: PUBLISHED Published: 2010-06-28T17:00:00Z Last Updated: 2024-09-16T16:17:41.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Install/Filesystem.pm in Bugzilla 3.5.1 through 3.6.1 and 3.7 through 3.7.1, when use_suexec is enabled, uses world-readable permissions within (1) .bzr/ and (2) data/webdot/, which allows local users to obtain potentially sensitive data by reading files in these directories, a different vulnerability than CVE-2010-0180. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=561797
CVE ID: CVE-2010-2471 State: PUBLISHED Published: 2019-11-06T17:09:06 Last Updated: 2024-08-07T02:32:16.886Z Vendors: Drupal Products: drupal6 Problem Types: redirection Description: Drupal versions 5.x and 6.x has open redirection Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/02/12/8 - https://security-tracker.debian.org/tracker/CVE-2010-2471 - https://access.redhat.com/security/cve/cve-2010-2471 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=592716 - https://www.drupal.org/node/731710 - https://www.openwall.com/lists/oss-security/2010/06/28/8 - https://www.drupal.org/node/731710
CVE ID: CVE-2010-2472 State: PUBLISHED Published: 2019-11-07T18:05:33 Last Updated: 2024-08-07T02:32:16.771Z Vendors: drupal6 Products: drupal6 Problem Types: module cross site scripting Description: Locale module and dependent contributed modules in Drupal 6.x before 6.16 and 5.x before version 5.22 do not sanitize the display of language codes, native and English language names properly which could allow an attacker to perform a cross-site scripting (XSS) attack. This vulnerability is mitigated by the fact that an attacker must have a role with the 'administer languages' permission. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker
permission. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-2472 - https://www.drupal.org/node/731710 - https://www.openwall.com/lists/oss-security/2010/06/28/8
CVE ID: CVE-2010-2473 State: PUBLISHED Published: 2019-11-07T18:11:35 Last Updated: 2024-08-07T02:32:16.842Z Vendors: drupal6 Products: drupal6 Problem Types: user session regeneration Description: Drupal 6.x before 6.16 and 5.x before version 5.22 does not properly block users under certain circumstances. A user with an open session that was blocked could maintain their session on the Drupal site despite being blocked. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-2473 - https://www.drupal.org/node/731710 - https://www.openwall.com/lists/oss-security/2010/06/28/8
CVE ID: CVE-2010-2474 State: PUBLISHED Published: 2010-08-09T20:00:00Z Last Updated: 2024-08-07T02:32:16.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: JBoss Enterprise Service Bus (ESB) before 4.7 CP02 in JBoss Enterprise SOA Platform before 5.0.2 does not properly consider the security domain with which a service is secured, which might allow remote attackers to gain privileges by executing a service. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40568 - http://secunia.com/advisories/40681 - https://jira.jboss.org/browse/JBESB-3345 - http://www.redhat.com/docs/en-US/JBoss_SOA_Platform/5.0.2/html/5.0.2_Release_Notes/index.htm
oss.org/browse/JBESB-3345 - http://www.redhat.com/docs/en-US/JBoss_SOA_Platform/5.0.2/html/5.0.2_Release_Notes/index.html - https://bugzilla.redhat.com/show_bug.cgi?id=609442
CVE ID: CVE-2010-2475 State: REJECTED Published: 2021-06-22T10:42:10 Last Updated: 2021-06-22T10:42:10 Description: No description available.
CVE ID: CVE-2010-2476 State: PUBLISHED Published: 2019-11-07T20:19:44 Last Updated: 2024-08-07T02:32:16.836Z Vendors: syscp Products: syscp Problem Types: open_basedir bypassing Description: syscp 1.4.2.1 allows attackers to add arbitrary paths via the documentroot of a domain by appending a colon to it and setting the open basedir path to use that domain documentroot. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-2476 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=587481 - https://www.openwall.com/lists/oss-security/2010/06/30/15
CVE ID: CVE-2010-2477 State: PUBLISHED Published: 2010-11-05T22:00:00 Last Updated: 2024-08-07T02:32:16.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to (1) paste.urlparser.StaticURLParser, (2) paste.urlparser.PkgResourcesParser, (3) paste.urlmap.URLMap, and (4) HTTPNotFound. Additional Analyst Notes: - CVE Program Container: References: - http://pylonshq.com/articles/archives/2010/6/paste_174_released_addresses_xss_security_hole - http://bitbucket.o
nces: - http://pylonshq.com/articles/archives/2010/6/paste_174_released_addresses_xss_security_hole - http://bitbucket.org/ianb/paste/changeset/fcae59df8b56 - http://www.securityfocus.com/bid/41160 - http://groups.google.com/group/paste-users/browse_thread/thread/3b3fff3dadd0b1e5?pli=1 - http://secunia.com/advisories/42500 - http://www.ubuntu.com/usn/USN-1026-1 - http://groups.google.com/group/pylons-discuss/msg/8c256dc076a408d8?dmode=source&output=gplain - http://marc.info/?l=oss-security&m=127785414818815&w=2 - http://marc.info/?l=oss-security&m=127792576822169&w=2
CVE ID: CVE-2010-2478 State: PUBLISHED Published: 2010-09-29T16:00:00 Last Updated: 2024-08-07T02:32:16.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ethtool_get_rxnfc function in net/core/ethtool.c in the Linux kernel before 2.6.33.7 on 32-bit platforms allows local users to cause a denial of service or possibly have unspecified other impact via an ETHTOOL_GRXCLSRLALL ethtool command with a large info.rule_cnt value that triggers a buffer overflow, a different vulnerability than CVE-2010-3084. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=608950 - http://www.ubuntu.com/usn/USN-1000-1 - h
m Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=608950 - http://www.ubuntu.com/usn/USN-1000-1 - http://www.openwall.com/lists/oss-security/2010/06/29/1 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.33.7 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=db048b69037e7fa6a7d9e95a1271a50dc08ae233 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html - http://article.gmane.org/gmane.linux.network/164869 - http://www.openwall.com/lists/oss-security/2010/06/29/3 - http://www.securityfocus.com/bid/41223 - http://www.openwall.com/lists/oss-security/2010/06/30/17
CVE ID: CVE-2010-2479 State: PUBLISHED Published: 2010-07-06T17:00:00Z Last Updated: 2024-08-07T02:32:16.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HTML Purifier before 4.1.1, as used in Mahara and other products, when the browser is Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39613 - http://wiki.mahara.org/Release_Notes/1.1.9 - http://htmlpurifier.org/news/2010/0531-4.1.1-released - http://www.securityfocus.com/bid/41259 - http://wiki.mahara.org/Release_Notes/1.2.5 - http
ws/2010/0531-4.1.1-released - http://www.securityfocus.com/bid/41259 - http://wiki.mahara.org/Release_Notes/1.2.5 - http://repo.or.cz/w/htmlpurifier.git/commitdiff/18e538317a877a0509ae71a860429c41770da230 - http://wiki.mahara.org/Release_Notes/1.0.15 - http://secunia.com/advisories/40431
CVE ID: CVE-2010-2480 State: PUBLISHED Published: 2010-07-02T18:30:00 Last Updated: 2024-08-07T02:32:16.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mako before 0.3.4 relies on the cgi.escape function in the Python standard library for cross-site scripting (XSS) protection, which makes it easier for remote attackers to conduct XSS attacks via vectors involving single-quote characters and a JavaScript onLoad event handler for a BODY element. Additional Analyst Notes: - CVE Program Container: References: - http://www.makotemplates.org/CHANGES - http://bugs.python.org/issue9061 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://secunia.com/a
python.org/issue9061 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://secunia.com/advisories/39935
CVE ID: CVE-2010-2481 State: PUBLISHED Published: 2010-07-06T14:00:00 Last Updated: 2024-08-07T02:32:16.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TIFFExtractData macro in LibTIFF before 3.9.4 does not properly handle unknown tag types in TIFF directory entries, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted TIFF file. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=oss-security&m=127736307002102&w=2 - http://secunia.com/advisories/40527 - http://marc.info/?l=oss-security&m=127781315415896&w=2 - http://marc.info/?l=oss-security&m=127731610612908&w=2 - http://bugz
//marc.info/?l=oss-security&m=127781315415896&w=2 - http://marc.info/?l=oss-security&m=127731610612908&w=2 - http://bugzilla.maptools.org/show_bug.cgi?id=2210 - http://www.vupen.com/english/advisories/2010/1761 - http://security.gentoo.org/glsa/glsa-201209-02.xml - http://www.redhat.com/support/errata/RHSA-2010-0519.html - http://marc.info/?l=oss-security&m=127738540902757&w=2 - http://marc.info/?l=oss-security&m=127797353202873&w=2 - http://www.openwall.com/lists/oss-security/2010/06/30/22 - http://secunia.com/advisories/50726
CVE ID: CVE-2010-2482 State: PUBLISHED Published: 2010-07-06T14:00:00 Last Updated: 2024-08-07T02:32:16.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibTIFF 3.9.4 and earlier does not properly handle an invalid td_stripbytecount field, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted TIFF file, a different vulnerability than CVE-2010-2443. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=oss-security&m=127736307002102&w=2 - https://bugs.launchpad.net/bugs/597246 - https://bugzilla.redhat.com/show_bug.cgi?id=608010 - http://www.debian.org/security/2012/dsa-2552 - htt
et/bugs/597246 - https://bugzilla.redhat.com/show_bug.cgi?id=608010 - http://www.debian.org/security/2012/dsa-2552 - http://security.gentoo.org/glsa/glsa-201209-02.xml - https://bugzilla.redhat.com/show_bug.cgi?id=603024 - http://secunia.com/advisories/40422 - http://bugzilla.maptools.org/show_bug.cgi?id=1996 - http://marc.info/?l=oss-security&m=127738540902757&w=2 - http://marc.info/?l=oss-security&m=127797353202873&w=2 - http://www.openwall.com/lists/oss-security/2010/06/30/22 - http://secunia.com/advisories/50726
CVE ID: CVE-2010-2483 State: PUBLISHED Published: 2010-07-06T14:00:00 Last Updated: 2024-08-07T02:32:16.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TIFFRGBAImageGet function in LibTIFF 3.9.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a TIFF file with an invalid combination of SamplesPerPixel and Photometric values. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/tiff/+bug/591605 - http://marc.info/?l=oss-security&m=127736307002102&w=2 - http://secunia.com/advisories/40527 - http://marc.info/?l=oss-security&m=127781315415896&w=2 - http://marc.info/?l=oss-
http://secunia.com/advisories/40527 - http://marc.info/?l=oss-security&m=127781315415896&w=2 - http://marc.info/?l=oss-security&m=127731610612908&w=2 - http://www.vupen.com/english/advisories/2010/1761 - http://bugzilla.maptools.org/show_bug.cgi?id=2216 - http://security.gentoo.org/glsa/glsa-201209-02.xml - http://www.redhat.com/support/errata/RHSA-2010-0519.html - http://secunia.com/advisories/40422 - http://marc.info/?l=oss-security&m=127738540902757&w=2 - http://marc.info/?l=oss-security&m=127797353202873&w=2 - http://www.openwall.com/lists/oss-security/2010/06/30/22 - http://secunia.com/advisories/50726 - https://bugzilla.redhat.com/show_bug.cgi?id=603081
CVE ID: CVE-2010-2484 State: PUBLISHED Published: 2010-08-20T20:00:00 Last Updated: 2024-08-07T02:32:16.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: The strrchr function in PHP 5.2 before 5.2.14 allows context-dependent attackers to obtain sensitive information (memory contents) or trigger memory corruption by causing a userspace interruption of an internal function or handler. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4435 - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://www.php.net/releases/5_2_14.php - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://lists.apple.com/archiv
s/5_2_14.php - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html - https://bugzilla.redhat.com/show_bug.cgi?id=619324 - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://support.apple.com/kb/HT4312 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html
CVE ID: CVE-2010-2485 State: REJECTED Published: 2021-06-22T10:46:54 Last Updated: 2021-06-22T10:46:54 Description: No description available.
CVE ID: CVE-2010-2486 State: REJECTED Published: 2021-06-22T10:44:09 Last Updated: 2021-06-22T10:44:09 Description: No description available.
CVE ID: CVE-2010-2487 State: PUBLISHED Published: 2010-08-04T21:00:00Z Last Updated: 2024-08-07T02:32:16.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, 1.8.x before 1.8.8, and 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted content, related to (1) Page.py, (2) PageEditor.py, (3) PageGraphicalEditor.py, (4) action/CopyPage.py, (5) action/Load.py, (6) action/RenamePage.py, (7) action/backup.py, (8) action/login.py, (9) action/newaccount.py, and (10) action/recoverpass.py. Additional Analyst Notes: - CVE Program Container: References: - http://hg.moinm
unt.py, and (10) action/recoverpass.py. Additional Analyst Notes: - CVE Program Container: References: - http://hg.moinmo.in/moin/1.8/rev/4238b0c90871 - http://www.vupen.com/english/advisories/2010/1981 - http://moinmo.in/MoinMoinRelease1.9 - http://moinmo.in/SecurityFixes - http://www.securityfocus.com/bid/40549 - http://hg.moinmo.in/moin/1.9/rev/68ba3cc79513 - http://www.debian.org/security/2010/dsa-2083 - http://hg.moinmo.in/moin/1.9/rev/e50b087c4572 - http://moinmo.in/MoinMoinRelease1.8 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584809 - http://marc.info/?l=oss-security&m=127799369406968&w=2 - http://marc.info/?l=oss-security&m=127809682420259&w=2 - http://hg.moinmo.in/moin/1.8/r
security&m=127799369406968&w=2 - http://marc.info/?l=oss-security&m=127809682420259&w=2 - http://hg.moinmo.in/moin/1.8/raw-file/1.8.8/docs/CHANGES - http://hg.moinmo.in/moin/1.9/raw-file/1.9.3/docs/CHANGES - http://hg.moinmo.in/moin/1.7/rev/37306fba2189 - http://secunia.com/advisories/40836 - http://moinmo.in/MoinMoinBugs/1.9.2UnescapedInputForThemeAddMsg
CVE ID: CVE-2010-2488 State: PUBLISHED Published: 2019-11-12T19:48:56 Last Updated: 2024-08-07T02:32:16.764Z Vendors: znc Products: znc Problem Types: null pointer deref Description: NULL pointer dereference vulnerability in ZNC before 0.092 caused by traffic stats when there are unauthenticated connections. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-2488 - https://access.redhat.com/security/cve/cve-2010-2488 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584929 - https://wiki.znc.in/ChangeLog/0.092