Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-3480 State: PUBLISHED Published: 2010-09-22T19:00:00 Last Updated: 2024-08-07T03:11:44.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in ApPHP PHP MicroCMS 1.0.1, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41491 - http://www.securityfocus.com/bid/43232 - http://www.exploit-db.com/exploits/15011 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61813 - http://secunia.com/advisories/41455 - http://osvdb.org/68074
CVE ID: CVE-2010-3481 State: PUBLISHED Published: 2010-09-22T19:00:00 Last Updated: 2024-08-07T03:11:44.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in login.php in ApPHP PHP MicroCMS 1.0.1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) user_name and (2) password variables, possibly related to include/classes/Login.php. NOTE: some of these details are obtained from third party information. NOTE: the password vector might not be vulnerable. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41492 - https://exchange.xforce.ibmcloud.com/
otes: - CVE Program Container: References: - http://secunia.com/advisories/41492 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61810 - http://www.securityfocus.com/bid/43232 - http://osvdb.org/68073 - http://www.exploit-db.com/exploits/15011 - http://www.attrition.org/pipermail/vim/2010-September/002439.html - http://secunia.com/advisories/41455
CVE ID: CVE-2010-3482 State: PUBLISHED Published: 2010-09-22T19:00:00Z Last Updated: 2024-09-16T19:46:04.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in cms_write.php in Primitive CMS 1.0.9 allow remote authenticated administrators to execute arbitrary SQL commands via the (1) title and (2) menutitle parameters. NOTE: this can be leveraged with CVE-2010-3483 to conduct attacks without authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2458 - http://packetstormsecurity.org/1009-exploits/primitive-sqlxss.txt - http://www.exploit-db.com/exploits/15064
CVE ID: CVE-2010-3483 State: PUBLISHED Published: 2010-09-22T19:00:00Z Last Updated: 2024-09-16T17:07:37.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: cms_write.php in Primitive CMS 1.0.9 does not properly restrict access, which allows remote attackers to gain administrative privileges via a direct request. NOTE: this vulnerability can be leveraged to conduct cross-site scripting attacks, as demonstrated using the (1) title, (2) content, and (3) menutitle parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2458 - http://packetstormsecurity.org/1009-exploits/primitive-sqlxss.txt - http://www.exploit-db.com
ish/advisories/2010/2458 - http://packetstormsecurity.org/1009-exploits/primitive-sqlxss.txt - http://www.exploit-db.com/exploits/15064 - http://secunia.com/advisories/41515
CVE ID: CVE-2010-3484 State: PUBLISHED Published: 2010-09-22T19:00:00Z Last Updated: 2024-09-16T19:56:04.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands via the handle parameter to LightNEasy.php, a different vector than CVE-2008-6593. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15060 - http://packetstormsecurity.org/1009-exploits/lightneasy-sql.txt - http://www.vupen.com/english/advisories/2010/2457 - http://www.securityfocus.com/bid/43330 - http://secunia.com/advisories/41502
CVE ID: CVE-2010-3485 State: PUBLISHED Published: 2010-09-22T19:00:00Z Last Updated: 2024-09-16T20:41:37.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands via the userhandle cookie to LightNEasy.php, a different vector than CVE-2008-6593. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41502
CVE ID: CVE-2010-3486 State: PUBLISHED Published: 2010-09-22T19:00:00 Last Updated: 2024-08-07T03:11:44.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in FileStorageUpload.ashx in SmarterMail 7.1.3876 allows remote attackers to read arbitrary files via a (1) ../ (dot dot slash), (2) %5C (encoded backslash), or (3) %255c (double-encoded backslash) in the name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43324 - http://cloudscan.blogspot.com/2010/09/smarter-stats-533819-file-fuzzing.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/61910 - http://www.exploit-db.com/explo
-533819-file-fuzzing.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/61910 - http://www.exploit-db.com/exploits/15048 - http://packetstormsecurity.org/1009-exploits/smartermail-traversal.txt
CVE ID: CVE-2010-3487 State: PUBLISHED Published: 2010-09-22T19:00:00Z Last Updated: 2024-09-16T23:10:57.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in YelloSoft Pinky 1.0 for Windows allows remote attackers to read arbitrary files via a %5C (encoded backslash) in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/68141 - http://secunia.com/advisories/41538 - http://www.johnleitch.net/Vulnerabilities/Pinky.1.0.Directory.Traversal/42 - http://packetstormsecurity.org/1009-exploits/pinky10-traversal.txt
CVE ID: CVE-2010-3488 State: PUBLISHED Published: 2010-09-22T19:00:00 Last Updated: 2024-08-07T03:11:44.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in QuickShare 1.0 allows remote attackers to read arbitrary files via a ... (triple dot) in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41474 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61857 - http://www.johnleitch.net/Vulnerabilities/QuickShare.1.0.Directory.Traversal/38 - http://www.securityfocus.com/bid/43258 - http://packetstormsecurity.org/1009-exploits/quickshare10-traversal.txt - http://osvdb.org/68089
CVE ID: CVE-2010-3489 State: PUBLISHED Published: 2010-09-22T19:00:00Z Last Updated: 2024-09-17T02:42:13.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in netautor/napro4/home/login2.php in CMS Digital Workroom (formerly Netautor Professional) 5.5.0 allows remote attackers to inject arbitrary web script or HTML via the goback parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4964.php - http://secunia.com/advisories/41475 - http://www.securityfocus.com/bid/43290 - http://packetstormsecurity.org/1009-exploits/ZSL-2010-4964.txt - http://www.osvdb.org/68128
CVE ID: CVE-2010-3490 State: PUBLISHED Published: 2010-09-28T17:00:00 Last Updated: 2024-08-07T03:11:44.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in page.recordings.php in the System Recordings component in the configuration interface in FreePBX 2.8.0 and earlier allows remote authenticated administrators to create arbitrary files via a .. (dot dot) in the usersnum parameter to admin/config.php, as demonstrated by creating a .php file under the web root. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/spiderlabs/advisories/TWSL2010-005.txt - http://www.securityfocus.com/archive/1/513947/100/0/t
https://www.trustwave.com/spiderlabs/advisories/TWSL2010-005.txt - http://www.securityfocus.com/archive/1/513947/100/0/threaded - http://www.securityfocus.com/bid/43454 - http://www.freepbx.org/trac/ticket/4553 - http://www.exploit-db.com/exploits/15098
CVE ID: CVE-2010-3491 State: PUBLISHED Published: 2010-10-26T18:00:00 Last Updated: 2024-08-07T03:11:44.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) ActiveMatrix Runtime and (2) ActiveMatrix Administrator components in TIBCO ActiveMatrix Service Grid before 2.3.1, ActiveMatrix Service Bus before 2.3.1, ActiveMatrix BusinessWorks Service Engine before 5.8.1, and ActiveMatrix Service Performance Manager before 1.3.2 do not properly handle JMX connections, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://ww
a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44254 - http://secunia.com/advisories/41891 - http://www.tibco.com/services/support/advisories/activematrix-advisory_20101019.jsp - http://www.vupen.com/english/advisories/2010/2747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62674 - http://www.tibco.com/multimedia/activematrix_advisory_tcm8-12488.txt
CVE ID: CVE-2010-3492 State: PUBLISHED Published: 2010-10-19T19:00:00 Last Updated: 2024-08-07T03:11:44.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: The asyncore module in Python before 3.2 does not properly handle unsuccessful calls to the accept function, and does not have accompanying documentation describing how daemon applications should handle unsuccessful calls to the accept function, which makes it easier for remote attackers to conduct denial of service attacks that terminate these applications via network connections. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/09/11/2 - http://bugs.python.org/i
CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/09/11/2 - http://bugs.python.org/issue6706 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:216 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12111 - http://www.openwall.com/lists/oss-security/2010/09/24/3 - http://www.openwall.com/lists/oss-security/2010/09/22/3 - http://www.openwall.com/lists/oss-security/2010/09/09/6 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:215
CVE ID: CVE-2010-3493 State: PUBLISHED Published: 2010-10-19T19:00:00 Last Updated: 2024-08-07T03:11:44.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, or the getpeername function having an ENOTCONN error, a related issue to CVE-2010-3492. Additional Analyst Notes: - CVE Program Containe
me function having an ENOTCONN error, a related issue to CVE-2010-3492. Additional Analyst Notes: - CVE Program Container: References: - http://svn.python.org/view/python/branches/py3k/Lib/smtpd.py?r1=84289&r2=84288&pathrev=84289 - http://www.openwall.com/lists/oss-security/2010/09/11/2 - https://bugzilla.redhat.com/show_bug.cgi?id=632200 - http://secunia.com/advisories/43068 - https://bugs.launchpad.net/zodb/+bug/135108 - http://www.vupen.com/english/advisories/2011/0212 - http://secunia.com/advisories/51040 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12210 - http://secunia.com/advisories/50858 - http://www.mandriva.com/security/advisories?name=M
Aorg.mitre.oval%3Adef%3A12210 - http://secunia.com/advisories/50858 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:216 - http://bugs.python.org/issue9129 - http://www.securityfocus.com/bid/44533 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://www.openwall.com/lists/oss-security/2010/09/24/3 - http://www.ubuntu.com/usn/USN-1596-1 - http://www.openwall.com/lists/oss-security/2010/09/22/3 - http://bugs.python.org/issue6706 - http://www.openwall.com/lists/oss-security/2010/09/09/6 - http://www.ubuntu.com/usn/USN-1613-2 - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html - http://svn.python.org/view?view=rev&revision=84
://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html - http://svn.python.org/view?view=rev&revision=84289 - http://secunia.com/advisories/51024 - http://www.ubuntu.com/usn/USN-1613-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:215
CVE ID: CVE-2010-3494 State: PUBLISHED Published: 2010-10-19T19:00:00Z Last Updated: 2024-09-16T20:01:23.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, a related issue to CVE-2010-3492. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/09/11/2 - http://code.google.com/p/pyf
Program Container: References: - http://www.openwall.com/lists/oss-security/2010/09/11/2 - http://code.google.com/p/pyftpdlib/source/detail?r=556 - http://code.google.com/p/pyftpdlib/source/browse/trunk/HISTORY - https://bugs.launchpad.net/zodb/+bug/135108 - http://code.google.com/p/pyftpdlib/source/diff?spec=svn556&r=556&format=side&path=/trunk/pyftpdlib/ftpserver.py - http://code.google.com/p/pyftpdlib/issues/detail?id=105 - http://www.openwall.com/lists/oss-security/2010/09/24/3 - http://www.openwall.com/lists/oss-security/2010/09/22/3 - http://code.google.com/p/pyftpdlib/issues/detail?id=104 - http://bugs.python.org/issue6706 - http://www.openwall.com/lists/oss-security/2010/09/09/6
CVE ID: CVE-2010-3495 State: PUBLISHED Published: 2010-10-19T19:00:00 Last Updated: 2024-08-07T03:11:44.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in ZEO/StorageServer.py in Zope Object Database (ZODB) before 3.10.0 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, a related issue to CVE-2010-3492. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/
-3492. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/09/11/2 - https://bugs.launchpad.net/zodb/+bug/135108 - http://pypi.python.org/pypi/ZODB3/3.10.0#id1 - http://www.openwall.com/lists/oss-security/2010/09/24/3 - http://www.openwall.com/lists/oss-security/2010/09/22/3 - http://bugs.python.org/issue6706 - http://www.openwall.com/lists/oss-security/2010/09/09/6 - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html - http://secunia.com/advisories/41755
CVE ID: CVE-2010-3496 State: PUBLISHED Published: 2012-08-22T10:00:00Z Last Updated: 2024-09-16T22:21:18.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee VirusScan Enterprise 8.5i and 8.7i does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too late to stop the code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/514356 - https://kc.mcafee.com/corporate/index?page=content&id=SB10012 - http
: - http://www.securityfocus.com/archive/1/514356 - https://kc.mcafee.com/corporate/index?page=content&id=SB10012 - http://www.n00bz.net/antivirus-cve
CVE ID: CVE-2010-3497 State: PUBLISHED Published: 2012-08-22T10:00:00Z Last Updated: 2024-09-16T22:15:12.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Norton AntiVirus 2011 does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too late to stop the code execution. NOTE: the researcher indicates that a vendor response was received, stating that this issue "falls into the work of our Firewall and not our AV (per our methodology of layers of defense)." Add
ing that this issue "falls into the work of our Firewall and not our AV (per our methodology of layers of defense)." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/514356 - http://www.n00bz.net/antivirus-cve
CVE ID: CVE-2010-3498 State: PUBLISHED Published: 2012-08-22T10:00:00Z Last Updated: 2024-09-17T02:46:28.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: AVG Anti-Virus does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too late to stop the code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/514356 - http://www.n00bz.net/antivirus-cve
CVE ID: CVE-2010-3499 State: PUBLISHED Published: 2012-08-22T10:00:00Z Last Updated: 2024-09-16T20:22:12.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: F-Secure Anti-Virus does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too late to stop the code execution. NOTE: the researcher indicates that a vendor response was received, stating that "the inability to catch these files are caused by lacking functionality rather than programming errors." Additional Analys
he inability to catch these files are caused by lacking functionality rather than programming errors." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/514356 - http://www.n00bz.net/antivirus-cve
CVE ID: CVE-2010-3500 State: PUBLISHED Published: 2010-10-13T23:00:00 Last Updated: 2024-08-07T03:11:44.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Siebel Core - Highly Interactive Client component in Oracle Siebel Suite 7.7.2.12, 7.8.2.14, 8.0.0.10, and 8.1.1.3 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-2405. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://www.us-cert.gov/cas/techalerts/TA10-287A.html
CVE ID: CVE-2010-3501 State: PUBLISHED Published: 2010-10-13T23:00:00 Last Updated: 2024-08-07T03:11:44.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the OID component in Oracle Fusion Middleware 10.1.2.3, 10.1.4.3, and 11.1.1.2.0 allows remote attackers to affect availability via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43995 - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://www.us-cert.gov/cas/techalerts/TA10-287A.html
CVE ID: CVE-2010-3502 State: PUBLISHED Published: 2010-10-13T23:00:00 Last Updated: 2024-08-07T03:11:44.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Siebel Core component in Oracle Siebel Suite 7.7.2.12, 7.8.2.14, 8.0.0.10, and 8.1.1.3 allows remote authenticated users to affect confidentiality via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://www.us-cert.gov/cas/techalerts/TA10-287A.html
CVE ID: CVE-2010-3503 State: PUBLISHED Published: 2010-10-13T23:00:00 Last Updated: 2024-08-07T03:11:44.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect confidentiality and integrity via unknown vectors related to su. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://www.us-cert.gov/cas/techalerts/TA10-287A.html
CVE ID: CVE-2010-3504 State: PUBLISHED Published: 2010-10-13T23:00:00 Last Updated: 2024-08-07T03:11:44.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect integrity via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://www.us-cert.gov/cas/techalerts/TA10-287A.html
CVE ID: CVE-2010-3505 State: PUBLISHED Published: 2011-01-19T15:00:00 Last Updated: 2024-08-07T03:11:44.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Agile Core component in Oracle Supply Chain Products Suite 9.3.0.2 and 9.3.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Folders, Files & Attachments, a different vulnerability than CVE-2010-4429. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0145 - http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/64782 - ht
com/technetwork/topics/security/cpujan2011-194091.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/64782 - http://secunia.com/advisories/42923 - http://www.securityfocus.com/bid/45872
CVE ID: CVE-2010-3506 State: PUBLISHED Published: 2010-10-13T23:00:00 Last Updated: 2024-08-07T03:11:44.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Explorer (Sun Explorer) component in Oracle Sun Products Suite 6.4 allows local users to affect confidentiality and integrity via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://www.us-cert.gov/cas/techalerts/TA10-287A.html
CVE ID: CVE-2010-3507 State: PUBLISHED Published: 2010-10-13T23:00:00 Last Updated: 2024-08-07T03:11:44.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Live Upgrade. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://www.us-cert.gov/cas/techalerts/TA10-287A.html