Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
t/errata/RHSA-2010-0834.html - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html - http://secunia.com/advisories/42926 - http://marc.info/?l=bugtraq&m=130331642631603&w=2 - http://www.vupen.com/english/advisories/2010/2903 - http://marc.info/?l=bugtraq&m=130331642631603&w=2 - http://www.vupen.com/english/advisories/2011/0173 - http://www.adobe.com/support/security/bulletins/apsb10-26.html - http://www.securityfocus.com/bid/44686 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11636 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15971 - http://www.vupen.com/english/advisories/2010/2906
rg/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15971 - http://www.vupen.com/english/advisories/2010/2906 - http://www.redhat.com/support/errata/RHSA-2010-0867.html - http://www.redhat.com/support/errata/RHSA-2010-0829.html
CVE ID: CVE-2010-3651 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2010-3652 State: PUBLISHED Published: 2010-11-07T21:00:00 Last Updated: 2024-08-07T03:18:52.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, and CVE-2010-3650. Additional Analyst Notes: - CVE Program Container: Referen
E-2010-3647, CVE-2010-3648, CVE-2010-3649, and CVE-2010-3650. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0192 - http://secunia.com/advisories/42183 - http://support.apple.com/kb/HT4435 - http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1 - http://secunia.com/advisories/43026 - http://security.gentoo.org/glsa/glsa-201101-09.xml - http://www.vupen.com/english/advisories/2010/2918 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://www.securityfocus.com/bid/44687 - http://www.redhat.com/support/errata/RHSA-2010-0834.html - http://lists.opensuse.org/opensuse-security-anno
/bid/44687 - http://www.redhat.com/support/errata/RHSA-2010-0834.html - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html - http://secunia.com/advisories/42926 - http://marc.info/?l=bugtraq&m=130331642631603&w=2 - http://www.vupen.com/english/advisories/2010/2903 - http://marc.info/?l=bugtraq&m=130331642631603&w=2 - http://www.vupen.com/english/advisories/2011/0173 - http://www.adobe.com/support/security/bulletins/apsb10-26.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11965 - http://www.vupen.com/english/advisories/2010/2906 - http://www.redhat.com/support/errata/RHSA-2010-0867.html - https://oval.cisecurity.org/reposi
ish/advisories/2010/2906 - http://www.redhat.com/support/errata/RHSA-2010-0867.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15284 - http://www.redhat.com/support/errata/RHSA-2010-0829.html
CVE ID: CVE-2010-3653 State: PUBLISHED Published: 2010-10-26T17:00:00 Last Updated: 2024-08-07T03:18:53.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted rcsL chunk containing a field whose value is used as a pointer offset, as exploited in the wild in October 2010. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb10-25.html - https:
st Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb10-25.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/62688 - http://www.abysssec.com/blog/2010/10/adobe-shockwave-player-rcsl-chunk-memory-corruption-0day/ - http://www.exploit-db.com/exploits/15296 - http://www.kb.cert.org/vuls/id/402231 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11285 - http://www.securityfocus.com/bid/44291 - http://www.securitytracker.com/id?1024635 - http://www.vupen.com/english/advisories/2010/2752
CVE ID: CVE-2010-3654 State: PUBLISHED Published: 2010-10-29T18:00:00 Last Updated: 2024-08-07T03:18:52.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll (aka AuthPlayLib.bundle or libauthplay.so.0.0.0) in Adobe Reader and Acrobat 9.x through 9.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted SWF content, as exploited in the wild in October 2010. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisori
in October 2010. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0192 - http://secunia.com/advisories/42183 - http://contagiodump.blogspot.com/2010/10/potential-new-adobe-flash-player-zero.html - http://support.apple.com/kb/HT4435 - http://secunia.com/advisories/42030 - http://www.vupen.com/english/advisories/2011/0191 - http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1 - http://secunia.com/advisories/43025 - http://www.vupen.com/english/advisories/2011/0344 - http://secunia.com/advisories/43026 - http://security.gentoo.org/glsa/glsa-201101-09.xml - http://www.vupen.com/english/advisories/2010/2918 - ht
ries/43026 - http://security.gentoo.org/glsa/glsa-201101-09.xml - http://www.vupen.com/english/advisories/2010/2918 - http://www.vupen.com/english/advisories/2010/3111 - http://secunia.com/advisories/41917 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://security.gentoo.org/glsa/glsa-201101-08.xml - http://www.redhat.com/support/errata/RHSA-2010-0834.html - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html - http://www.securitytracker.com/id?1024660 - http://secunia.com/advisories/42926 - http://www.redhat.com/support/errata/RHSA-2010-0934.html - http://www.vupen.com/english/advisories/2010/2903 - http://www.vupen.com/english/advis
port/errata/RHSA-2010-0934.html - http://www.vupen.com/english/advisories/2010/2903 - http://www.vupen.com/english/advisories/2011/0173 - http://secunia.com/advisories/42401 - http://www.adobe.com/support/security/bulletins/apsb10-26.html - http://www.kb.cert.org/vuls/id/298081 - http://www.securitytracker.com/id?1024659 - http://www.turbolinux.co.jp/security/2011/TLSA-2011-2j.txt - http://www.securityfocus.com/bid/44504 - http://www.adobe.com/support/security/advisories/apsa10-05.html - http://www.adobe.com/support/security/bulletins/apsb10-28.html - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00001.html - http://securityreason.com/securityalert/8210 - http://www.vupen.c
org/opensuse-security-announce/2010-12/msg00001.html - http://securityreason.com/securityalert/8210 - http://www.vupen.com/english/advisories/2010/2906 - http://www.redhat.com/support/errata/RHSA-2010-0867.html - http://www.redhat.com/support/errata/RHSA-2010-0829.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13294
CVE ID: CVE-2010-3655 State: PUBLISHED Published: 2010-10-29T18:00:00 Last Updated: 2024-08-07T03:18:53.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024664 - http://www.adobe.com/support/security/bulletins/apsb10-25.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12077
CVE ID: CVE-2010-3656 State: PUBLISHED Published: 2010-10-06T16:00:00 Last Updated: 2024-08-07T03:18:53.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to cause a denial of service via unknown vectors, a different vulnerability than CVE-2010-3657. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00001.html - http://www.vupen.com/english/advisories/2011/0191 - http://secunia.com/advisories/43025 - http://security.gentoo.org/glsa/glsa-201101-08.xml - http://www.redhat.
011/0191 - http://secunia.com/advisories/43025 - http://security.gentoo.org/glsa/glsa-201101-08.xml - http://www.redhat.com/support/errata/RHSA-2010-0743.html - http://www.adobe.com/support/security/bulletins/apsb10-21.html - http://www.us-cert.gov/cas/techalerts/TA10-279A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7484 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
CVE ID: CVE-2010-3657 State: PUBLISHED Published: 2010-10-06T16:00:00 Last Updated: 2024-08-07T03:18:52.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to cause a denial of service via unknown vectors, a different vulnerability than CVE-2010-3656. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00001.html - http://www.vupen.com/english/advisories/2011/0191 - http://secunia.com/advisories/43025 - http://security.gentoo.org/glsa/glsa-201101-08.xml - https://oval.cisec
011/0191 - http://secunia.com/advisories/43025 - http://security.gentoo.org/glsa/glsa-201101-08.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6791 - http://www.redhat.com/support/errata/RHSA-2010-0743.html - http://www.adobe.com/support/security/bulletins/apsb10-21.html - http://www.us-cert.gov/cas/techalerts/TA10-279A.html - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
CVE ID: CVE-2010-3658 State: PUBLISHED Published: 2010-10-06T16:00:00 Last Updated: 2024-08-07T03:18:52.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2890, CVE-2010-3619, CVE-2010-3621, CVE-2010-3622, CVE-2010-3628, and CVE-2010-3632. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00001.html - http://www.vupen.com/english/advisories/2011/0191 - http://sec
se.org/opensuse-security-announce/2010-10/msg00001.html - http://www.vupen.com/english/advisories/2011/0191 - http://secunia.com/advisories/43025 - http://security.gentoo.org/glsa/glsa-201101-08.xml - http://www.redhat.com/support/errata/RHSA-2010-0743.html - http://www.adobe.com/support/security/bulletins/apsb10-21.html - http://www.us-cert.gov/cas/techalerts/TA10-279A.html - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7225
CVE ID: CVE-2010-3659 State: PUBLISHED Published: 2017-10-20T18:00:00 Last Updated: 2024-08-07T03:18:51.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 CMS 4.1.x before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4, and 4.4.x before 4.4.1 allow remote authenticated backend users to inject arbitrary web script or HTML via unspecified parameters to the extension manager, or unspecified parameters to unknown backend forms. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-3659/ - http://www.openwall.com/lists/oss-security/2014/02/12/8 - http://www.op
rity-tracker.debian.org/tracker/CVE-2010-3659/ - http://www.openwall.com/lists/oss-security/2014/02/12/8 - http://www.openwall.com/lists/oss-security/2010/09/28/8 - http://www.securityfocus.com/bid/42029 - https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-012/
CVE ID: CVE-2010-3660 State: PUBLISHED Published: 2019-11-01T17:16:31 Last Updated: 2024-08-07T03:18:52.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS on the backend. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-3660 - https://typo3.org/security/advisory/typo3-sa-2010-012/#XSS - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719
CVE ID: CVE-2010-3661 State: PUBLISHED Published: 2019-11-01T17:26:21 Last Updated: 2024-08-07T03:18:52.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Open Redirection on the backend. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-3661 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719 - https://typo3.org/security/advisory/typo3-sa-2010-012/#Open_Redirection
CVE ID: CVE-2010-3662 State: PUBLISHED Published: 2019-11-04T21:11:33 Last Updated: 2024-08-07T03:18:53.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows SQL Injection on the backend. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-3662 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719 - https://typo3.org/security/advisory/typo3-sa-2010-012/#SQL_Injection
CVE ID: CVE-2010-3663 State: PUBLISHED Published: 2019-11-04T21:18:24 Last Updated: 2024-08-07T03:18:52.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 contains an insecure default value of the variable fileDenyPattern which could allow remote attackers to execute arbitrary code on the backend. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-3663 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719 - https://typo3.org/security/advisory/typo3-sa-2010-012/#Arbitrary_Code_Execution
CVE ID: CVE-2010-3664 State: PUBLISHED Published: 2019-11-04T21:21:10 Last Updated: 2024-08-07T03:18:53.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Information Disclosure on the backend. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-3664 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719 - https://typo3.org/security/advisory/typo3-sa-2010-012/#Information_Disclosure
CVE ID: CVE-2010-3665 State: PUBLISHED Published: 2019-11-04T21:23:51 Last Updated: 2024-08-07T03:18:52.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS on the Extension Manager. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-3665 - https://typo3.org/security/advisory/typo3-sa-2010-012/#XSS - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719
CVE ID: CVE-2010-3666 State: PUBLISHED Published: 2019-11-04T21:27:20 Last Updated: 2024-08-07T03:18:52.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 contains insecure randomness in the uniqid function. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-3666 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719 - https://typo3.org/security/advisory/typo3-sa-2010-012/#Insecure_Randomness
CVE ID: CVE-2010-3667 State: PUBLISHED Published: 2019-11-04T21:58:31 Last Updated: 2024-08-07T03:18:52.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Spam Abuse in the native form content element. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-3667 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719 - https://typo3.org/security/advisory/typo3-sa-2010-012/#Spam_Abuse
CVE ID: CVE-2010-3668 State: PUBLISHED Published: 2019-11-04T22:01:24 Last Updated: 2024-08-07T03:18:52.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Header Injection in the secure download feature jumpurl. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-3668 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719 - https://typo3.org/security/advisory/typo3-sa-2010-012/#Header_Injection
CVE ID: CVE-2010-3669 State: PUBLISHED Published: 2019-11-04T22:04:56 Last Updated: 2024-08-07T03:18:52.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS and Open Redirection in the frontend login box. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-3669 - https://typo3.org/security/advisory/typo3-sa-2010-012/#XSS - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719
CVE ID: CVE-2010-3670 State: PUBLISHED Published: 2019-11-05T19:10:11 Last Updated: 2024-08-07T03:18:52.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: TYPO3 before 4.3.4 and 4.4.x before 4.4.1 contains insecure randomness during generation of a hash with the "forgot password" function. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-3670 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719 - https://typo3.org/security/advisory/typo3-sa-2010-012/#Insecure_Randomness
CVE ID: CVE-2010-3671 State: PUBLISHED Published: 2019-11-05T19:19:02 Last Updated: 2024-08-07T03:18:52.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 is open to a session fixation attack which allows remote attackers to hijack a victim's session. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-3671 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719 - https://typo3.org/security/advisory/typo3-sa-2010-012/#Broken_Authentication_and_Session_Management
CVE ID: CVE-2010-3672 State: PUBLISHED Published: 2019-11-05T19:25:17 Last Updated: 2024-08-07T03:18:52.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: TYPO3 before 4.3.4 and 4.4.x before 4.4.1 allows XSS in the textarea view helper in an extbase extension. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-3672 - https://typo3.org/security/advisory/typo3-sa-2010-012/#XSS - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719
CVE ID: CVE-2010-3673 State: PUBLISHED Published: 2019-11-05T19:32:21 Last Updated: 2024-08-07T03:18:52.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows information disclosure in the mail header of the HTML mailing API. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-3673 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719 - https://typo3.org/security/advisory/typo3-sa-2010-012/#Information_Disclosure
CVE ID: CVE-2010-3674 State: PUBLISHED Published: 2019-11-05T19:34:14 Last Updated: 2024-08-07T03:18:52.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: TYPO3 before 4.4.1 allows XSS in the frontend search box. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-3674 - https://typo3.org/security/advisory/typo3-sa-2010-012/#XSS - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719
CVE ID: CVE-2010-3676 State: PUBLISHED Published: 2011-01-11T19:00:00 Last Updated: 2024-08-07T03:18:52.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: storage/innobase/dict/dict0crea.c in mysqld in Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (assertion failure) by modifying the (1) innodb_file_format or (2) innodb_file_per_table configuration parameters for the InnoDB storage engine, then executing a DDL statement. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.mysql.com/bug.php?id=55039 - https://bugzilla.redhat.com/show_bug.cgi?id=628660 - http://www.mandriva.com/security/advisories?name=MDVSA-
?id=55039 - https://bugzilla.redhat.com/show_bug.cgi?id=628660 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:012 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64689 - http://www.vupen.com/english/advisories/2011/0133 - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.html - http://www.securityfocus.com/bid/42643 - http://www.openwall.com/lists/oss-security/2010/09/28/10
CVE ID: CVE-2010-3677 State: PUBLISHED Published: 2011-01-11T19:00:00 Last Updated: 2024-08-07T03:18:51.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a join query that uses a table with a unique SET column. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1397-1 - http://support.apple.com/kb/HT4723 - http://secunia.com/advisories/42875 - http://www.ubuntu.com/usn/USN-1017-1 - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - http://www.turbolinux.co.jp/security/20
-1 - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - http://www.turbolinux.co.jp/security/2011/TLSA-2011-3j.txt - http://www.mandriva.com/security/advisories?name=MDVSA-2011:012 - http://www.vupen.com/english/advisories/2011/0105 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:222 - http://www.redhat.com/support/errata/RHSA-2011-0164.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/64688 - http://www.vupen.com/english/advisories/2011/0170 - http://www.vupen.com/english/advisories/2011/0133 - http://dev.mysql.com/doc/refman/5.0/en/news-5-0-92.html - https://bugzilla.redhat.com/show_bug.cgi?id=628040 - http://dev.mysql.com/doc/refman/5.1/en/
n/5.0/en/news-5-0-92.html - https://bugzilla.redhat.com/show_bug.cgi?id=628040 - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.html - http://www.securityfocus.com/bid/42646 - http://www.debian.org/security/2011/dsa-2143 - http://www.vupen.com/english/advisories/2011/0345 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:155 - http://secunia.com/advisories/42936 - http://bugs.mysql.com/bug.php?id=54575 - http://www.redhat.com/support/errata/RHSA-2010-0825.html - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html - http://www.openwall.com/lists/oss-security/2010/09/28/10