Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
debian.org/cgi-bin/bugreport.cgi?bug=573573 - http://support.apple.com/kb/HT4435 - http://www.openwall.com/lists/oss-security/2010/03/12/5 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html - http://www.securityfocus.com/bid/38708 - http://www.redhat.com/support/errata/RHSA-2010-0919.html - http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html - http://support.apple.com/kb/HT4312 - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html - http://secunia.com/advisories/42410 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - h
l - http://secunia.com/advisories/42410 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://www.vupen.com/english/advisories/2010/0724 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:068 - http://www.vupen.com/english/advisories/2010/3081
CVE ID: CVE-2010-0398 State: PUBLISHED Published: 2019-10-30T21:07:11 Last Updated: 2024-08-07T00:45:12.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: The init script in autokey before 0.61.3-2 allows local attackers to write to arbitrary files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-0398 - https://bugs.launchpad.net/ubuntu/+source/autokey/+bug/538471
CVE ID: CVE-2010-0400 State: PUBLISHED Published: 2010-04-07T15:00:00Z Last Updated: 2024-09-16T19:52:10.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in lib/user.php in mahara 1.0.4 allows remote attackers to execute arbitrary SQL commands via a username. Additional Analyst Notes: - CVE Program Container: References: - http://security.debian.org/pool/updates/main/m/mahara/mahara_1.0.4-4+lenny5.diff.gz - http://www.securityfocus.com/bid/39253 - http://www.debian.org/security/2010/dsa-2030
CVE ID: CVE-2010-0401 State: PUBLISHED Published: 2010-05-04T18:00:00Z Last Updated: 2024-09-16T17:48:46.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenTTD before 1.0.1 accepts a company password for authentication in response to a request for the server password, which allows remote authenticated users to bypass intended access restrictions or cause a denial of service (daemon crash) by sending a company password packet. Additional Analyst Notes: - CVE Program Container: References: - http://security.openttd.org/en/CVE-2010-0401 - http://secunia.com/advisories/39669 - http://bugs.openttd.org/task/3754
CVE ID: CVE-2010-0402 State: PUBLISHED Published: 2010-05-04T18:00:00Z Last Updated: 2024-09-16T20:12:54.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenTTD before 1.0.1 does not properly validate index values of certain items, which allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted in-game command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39669 - http://security.openttd.org/en/CVE-2010-0402
CVE ID: CVE-2010-0403 State: PUBLISHED Published: 2010-05-18T15:29:00 Last Updated: 2024-08-07T00:45:12.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in about.php in phpGroupWare (phpgw) before 0.9.16.016 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the app parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1146 - http://www.vupen.com/english/advisories/2010/1145 - http://download.phpgroupware.org/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/58657 - http://lists.gnu.org/archive/html/phpgroupware-users/2010-05/msg000
exchange.xforce.ibmcloud.com/vulnerabilities/58657 - http://lists.gnu.org/archive/html/phpgroupware-users/2010-05/msg00004.html - http://www.securityfocus.com/bid/40167 - http://forums.phpgroupware.org/index.php?t=msg&th=98662&start=0&rid=0 - http://www.securityfocus.com/archive/1/511299/100/0/threaded - http://secunia.com/advisories/39731 - http://www.debian.org/security/2010/dsa-2046 - http://secunia.com/advisories/39665
CVE ID: CVE-2010-0404 State: PUBLISHED Published: 2010-05-18T15:29:00 Last Updated: 2024-08-07T00:45:12.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in phpGroupWare (phpgw) before 0.9.16.016 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) class.sessions_db.inc.php, (2) class.translation_sql.inc.php, or (3) class.auth_sql.inc.php in phpgwapi/inc/. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1146 - http://www.vupen.com/english/advisories/2010/1145 - http://download.phpgroupware.org/ - http://lists.gnu.org/archive/html/phpgroupwar
pen.com/english/advisories/2010/1145 - http://download.phpgroupware.org/ - http://lists.gnu.org/archive/html/phpgroupware-users/2010-05/msg00004.html - http://forums.phpgroupware.org/index.php?t=msg&th=98662&start=0&rid=0 - http://www.securityfocus.com/archive/1/511299/100/0/threaded - http://secunia.com/advisories/39731 - http://www.debian.org/security/2010/dsa-2046 - http://secunia.com/advisories/39665
CVE ID: CVE-2010-0405 State: PUBLISHED Published: 2010-09-28T17:00:00 Last Updated: 2024-08-07T00:45:12.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-986-3 - http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob_plain%3Bf=ChangeLog%3Bhb=clamav-0.96.3 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051278.htm
in%3Bf=ChangeLog%3Bhb=clamav-0.96.3 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051278.html - http://www.ubuntu.com/usn/usn-986-1 - http://www.ubuntu.com/usn/USN-986-2 - http://secunia.com/advisories/41452 - http://secunia.com/advisories/42404 - http://secunia.com/advisories/48378 - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2230 - http://www.vupen.com/english/advisories/2010/3073 - http://www.vupen.com/english/advisories/2010/2455 - http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html - http://secunia.com/advisories/42530 - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2231 - http://marc.info/?l=oss-security&m=128506868510655&w=2 -
2530 - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2231 - http://marc.info/?l=oss-security&m=128506868510655&w=2 - http://secunia.com/advisories/42529 - http://www.securityfocus.com/archive/1/515055/100/0/threaded - http://secunia.com/advisories/41505 - http://www.vupen.com/english/advisories/2010/3052 - http://www.redhat.com/support/errata/RHSA-2010-0703.html - http://www.redhat.com/support/errata/RHSA-2010-0858.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051366.html - http://blogs.sun.com/security/entry/cve_2010_0405_integer_overflow - http://secunia.com/advisories/42405 - http://xorl.wordpress.com/2010/09/21/cve-2010-0405-bzip2-integer-overflow/ - h
w - http://secunia.com/advisories/42405 - http://xorl.wordpress.com/2010/09/21/cve-2010-0405-bzip2-integer-overflow/ - https://bugzilla.redhat.com/show_bug.cgi?id=627882 - http://www.vupen.com/english/advisories/2010/3126 - http://security.gentoo.org/glsa/glsa-201301-05.xml - http://www.vmware.com/security/advisories/VMSA-2010-0019.html - http://www.bzip.org/ - http://www.vupen.com/english/advisories/2010/3127 - http://www.vupen.com/english/advisories/2010/3043 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html - http://secunia.com/advisories/42350 - http://support.apple.com/kb/HT4581
CVE ID: CVE-2010-0406 State: PUBLISHED Published: 2010-05-04T18:00:00Z Last Updated: 2024-09-16T18:34:55.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenTTD before 1.0.1 allows remote attackers to cause a denial of service (file-descriptor exhaustion and daemon crash) by performing incomplete downloads of the map. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39669 - http://bugs.openttd.org/task/3785 - http://security.openttd.org/en/CVE-2010-0406
CVE ID: CVE-2010-0407 State: PUBLISHED Published: 2010-06-18T16:00:00 Last Updated: 2024-08-07T00:45:12.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via crafted message data, which is improperly demarshalled. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/40758 - http://www.debian.org/security/2010/dsa-2059 - http://svn.debian.org/wsvn/pcsclite/?sc=1&rev=4208 - http://secunia.com/advisories/40239 - http://lists.fedoraproject.org/pi
://svn.debian.org/wsvn/pcsclite/?sc=1&rev=4208 - http://secunia.com/advisories/40239 - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044124.html - http://secunia.com/advisories/40140 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://www.vupen.com/english/advisories/2010/1427 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042900.html - http://www.vupen.com/english/advisories/2010/1508 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - https://bugzilla.redhat.com/show_bug.cgi?id=596426 - http://lists.fedoraproject.org/pipermail/pack
content&id=JSA10705 - https://bugzilla.redhat.com/show_bug.cgi?id=596426 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042921.html
CVE ID: CVE-2010-0408 State: PUBLISHED Published: 2010-03-05T16:00:00 Last Updated: 2024-08-07T00:45:12.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ap_proxy_ajp_request function in mod_proxy_ajp.c in mod_proxy_ajp in the Apache HTTP Server 2.2.x before 2.2.15 does not properly handle certain situations in which a client sends no request body, which allows remote attackers to cause a denial of service (backend server outage) via a crafted request, related to use of a 500 error code instead of the appropriate 400 error code. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1411 - http://www.vupen.com/english/a
CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1411 - http://www.vupen.com/english/advisories/2010/0911 - http://secunia.com/advisories/39628 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:053 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9935 - http://support.apple.com/kb/HT4435 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM12247 - http://lists.fedoraproject.org/pipermail/package-announce/2010-May/040652.html - http://marc.info/?l=bugtraq&m=127557640302499&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM15829 - http://secunia.com/advisories/39656 - http://www.redhat.com/support/er
-01.ibm.com/support/docview.wss?uid=swg1PM15829 - http://secunia.com/advisories/39656 - http://www.redhat.com/support/errata/RHSA-2010-0168.html - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://secunia.com/advisories/39100 - http://secunia.com/advisories/39501 - http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html - http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html - http://httpd.apache.org/security/vulnerabilities_22.html - http://secunia.com/advisories/40096 - http://marc.info/?l=bugtraq&m=127557640302499&w=2 - http://svn.apache.org/viewvc?view=revision&revision=917876 - http://secunia.com/advisories/39632 -
27557640302499&w=2 - http://svn.apache.org/viewvc?view=revision&revision=917876 - http://secunia.com/advisories/39632 - http://www.debian.org/security/2010/dsa-2035 - https://bugzilla.redhat.com/show_bug.cgi?id=569905 - http://www.securityfocus.com/bid/38491 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8619 - http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/modules/proxy/mod_proxy_ajp.c?r1=917876&r2=917875&pathrev=917876 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM08939 - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039957.html - http://www.vu
w.wss?uid=swg1PM08939 - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039957.html - http://www.vupen.com/english/advisories/2010/1001 - http://www.vupen.com/english/advisories/2010/0994 - http://www.vupen.com/english/advisories/2010/1057 - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0
277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E - https://lis
che.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2010-0409 State: PUBLISHED Published: 2010-02-08T21:00:00 Last Updated: 2024-08-07T00:45:12.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the GMIME_UUENCODE_LEN macro in gmime/gmime-encodings.h in GMime before 2.4.15 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via input data for a uuencode operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/02/03/4 - http://secunia.com/advisories/38459 - http://www.openwall.com/lists/oss-security/2010/02/03/2 - http://lists.opensuse.org/opensuse-security-announce/20
8459 - http://www.openwall.com/lists/oss-security/2010/02/03/2 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html - http://ftp.gnome.org/pub/GNOME/sources/gmime/2.4/gmime-2.4.14-2.4.15.diff.gz - https://bugzilla.redhat.com/show_bug.cgi?id=561457 - http://ftp.gnome.org/pub/GNOME/sources/gmime/2.4/gmime-2.4.15.changes - http://secunia.com/advisories/38915
CVE ID: CVE-2010-0410 State: PUBLISHED Published: 2010-02-21T22:00:00 Last Updated: 2024-08-07T00:45:12.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and system crash) by sending the kernel many NETLINK_CONNECTOR messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-914-1 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.8 - http://www.vupen.com/english/advisories/2010/0638 - http://secunia.com/advisories/38557 - http://lists.fedoraproject.org/pipermail/package-announce/2010-Febr
es/2010/0638 - http://secunia.com/advisories/38557 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035070.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10903 - http://secunia.com/advisories/38779 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:088 - http://secunia.com/advisories/39649 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html - http://secunia.com/advisories/38922 - http://www.openwall.com/lists/oss-security/2010/02/03/3 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.html - http://www.debian.org/security/2010/dsa-1996 - http://www.securityfocus.co
use-security-announce/2010-03/msg00006.html - http://www.debian.org/security/2010/dsa-1996 - http://www.securityfocus.com/bid/38058 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035159.html - http://secunia.com/advisories/43315 - https://bugzilla.redhat.com/show_bug.cgi?id=561682 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f98bfbd78c37c5946cc53089da32a5f741efdeb7 - http://secunia.com/advisories/39033 - http://www.redhat.com/support/errata/RHSA-2010-0398.html - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00007.html - http://www.novell.com/linux/security/advisories/2010_23_kernel.html - http://www.vmware.com/
nce/2010-03/msg00007.html - http://www.novell.com/linux/security/advisories/2010_23_kernel.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://secunia.com/advisories/39742 - http://www.openwall.com/lists/oss-security/2010/02/03/1 - http://support.avaya.com/css/P8/documents/100088287 - http://www.debian.org/security/2010/dsa-2005 - http://www.securityfocus.com/archive/1/516397/100/0/threaded - http://secunia.com/advisories/38492 - http://www.redhat.com/support/errata/RHSA-2010-0161.html
CVE ID: CVE-2010-0411 State: PUBLISHED Published: 2010-02-08T20:00:00 Last Updated: 2024-08-07T00:45:12.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer signedness errors in the (1) __get_argv and (2) __get_compat_argv functions in tapset/aux_syscalls.stp in SystemTap 1.1 allow local users to cause a denial of service (script crash, or system crash or hang) via a process with a large number of arguments, leading to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035201.html - http://secunia.com/advisories/38817 - http://secunia.com/advisories/38426 - htt
age-announce/2010-February/035201.html - http://secunia.com/advisories/38817 - http://secunia.com/advisories/38426 - https://bugzilla.redhat.com/show_bug.cgi?id=559719 - http://secunia.com/advisories/39656 - http://sourceware.org/bugzilla/show_bug.cgi?id=11234 - http://marc.info/?l=oss-security&m=126530657715364&w=2 - http://secunia.com/advisories/38680 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9675 - http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html - http://www.redhat.com/support/errata/RHSA-2010-0125.html - http://sourceware.org/git/gitweb.cgi?p=systemtap.git%3Ba=commit%3Bh=a2d399c87a642190f08ede63dc6fc434a5a8363a - h
.html - http://sourceware.org/git/gitweb.cgi?p=systemtap.git%3Ba=commit%3Bh=a2d399c87a642190f08ede63dc6fc434a5a8363a - http://securitytracker.com/id?1023664 - http://www.securityfocus.com/bid/38120 - http://www.redhat.com/support/errata/RHSA-2010-0124.html - http://secunia.com/advisories/38765 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035261.html - http://www.vupen.com/english/advisories/2010/1001
CVE ID: CVE-2010-0412 State: PUBLISHED Published: 2010-02-25T00:00:00 Last Updated: 2024-08-07T00:45:12.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: stap-server in SystemTap 1.1 does not properly restrict the value of the -B (aka BUILD) option, which allows attackers to have an unspecified impact via vectors associated with executing the make program, a different vulnerability than CVE-2009-4273. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035201.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/56611 - http://lists.fedoraproject.org/pipermail/scm-commits/2010-February/39
change.xforce.ibmcloud.com/vulnerabilities/56611 - http://lists.fedoraproject.org/pipermail/scm-commits/2010-February/394714.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035261.html - http://www.securityfocus.com/bid/38316
CVE ID: CVE-2010-0413 State: REJECTED Published: 2021-06-21T22:05:09 Last Updated: 2021-06-21T22:05:09 Description: No description available.
CVE ID: CVE-2010-0414 State: PUBLISHED Published: 2010-02-11T20:00:00 Last Updated: 2024-08-07T00:45:12.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: gnome-screensaver before 2.28.2 allows physically proximate attackers to bypass screen locking and access an unattended workstation by moving the mouse position to an external monitor and then disconnecting that monitor. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38468 - http://www.osvdb.org/62219 - http://www.securityfocus.com/bid/38149 - http://www.ubuntu.com/usn/USN-898-1 - http://secunia.com/advisories/38532 - https://bugzilla.redhat.com/show_bug.cgi?id=562217 - http://gi
com/usn/USN-898-1 - http://secunia.com/advisories/38532 - https://bugzilla.redhat.com/show_bug.cgi?id=562217 - http://git.gnome.org/browse/gnome-screensaver/commit/?id=a5f66339be6719c2b8fc478a1d5fc6545297d950 - http://secunia.com/advisories/38534 - http://git.gnome.org/browse/gnome-screensaver/commit/?id=dcca89b7ab6e1220815af38da246434b2e13fd9f - http://www.mandriva.com/security/advisories?name=MDVSA-2010:040 - https://bugzilla.gnome.org/show_bug.cgi?id=609337 - http://ftp.gnome.org/pub/GNOME/sources/gnome-screensaver/2.28/gnome-screensaver-2.28.2.news - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034904.html
CVE ID: CVE-2010-0415 State: PUBLISHED Published: 2010-02-17T18:00:00 Last Updated: 2024-08-07T00:45:12.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_pages_move function in mm/migrate.c in the Linux kernel before 2.6.33-rc7 does not validate node values, which allows local users to read arbitrary kernel memory locations, cause a denial of service (OOPS), and possibly have unspecified other impact by specifying a node that is not part of the kernel's node set. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/02/07/2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6f5a55f1
sts/oss-security/2010/02/07/2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6f5a55f1a6c5abee15a0e878e5c74d9f1569b8b0 - http://www.ubuntu.com/usn/USN-914-1 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.33-rc7 - http://www.vupen.com/english/advisories/2010/0638 - http://secunia.com/advisories/38557 - http://www.redhat.com/support/errata/RHSA-2010-0147.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9399 - http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035070.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 - http://www.securityfocus.com/bid/3814