Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ry/OSA-2010-02-en/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/61868 - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html - http://www.securityfocus.com/bid/43264
CVE ID: CVE-2010-2082 State: PUBLISHED Published: 2010-05-26T19:00:00Z Last Updated: 2024-09-16T23:31:37.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface on the Cisco Scientific Atlanta WebSTAR DPC2100R2 cable modem with firmware 2.0.2r1256-060303 has a default administrative password (aka SAPassword) of W2402, which makes it easier for remote attackers to obtain privileged access. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0322.html
CVE ID: CVE-2010-2083 State: PUBLISHED Published: 2010-05-26T19:00:00Z Last Updated: 2024-09-16T18:50:20.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Dynamics GP has a default value of ACCESS for the system password, which might make it easier for remote authenticated users to bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.christopherkois.com/?p=448
CVE ID: CVE-2010-2084 State: PUBLISHED Published: 2010-05-27T18:32:00Z Last Updated: 2024-09-16T17:43:57.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft ASP.NET 2.0 does not prevent setting the InnerHtml property on a control that inherits from HtmlContainerControl, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to an attribute. Additional Analyst Notes: - CVE Program Container: References: - http://www.communities.hp.com/securitysoftware/blogs/spilabs/archive/2010/03/30/configuration-is-half-the-battle-asp-net-and-cross-site-scripting.aspx
CVE ID: CVE-2010-2085 State: PUBLISHED Published: 2010-05-27T18:32:00Z Last Updated: 2024-09-17T02:47:15.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of ASP.NET in Microsoft .NET before 1.1 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the __VIEWSTATE parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/spiderlabs/advisories/TWSL2010-001.txt - http://www.blackhat.com/presentations/bh-dc-10/Byrne_David/BlackHat-DC-2010-Byrne-SGUI-slides.pdf
CVE ID: CVE-2010-2086 State: PUBLISHED Published: 2010-05-27T18:32:00Z Last Updated: 2024-09-17T02:36:44.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache MyFaces 1.1.7 and 1.2.8, as used in IBM WebSphere Application Server and other applications, does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary Expression Language (EL) statements via vectors that involve modifying the serialized view object. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/spiderlabs/advisories/TWSL2010-001.txt - http://www.blackhat.com/presentations/bh-dc-10/Byrn
- https://www.trustwave.com/spiderlabs/advisories/TWSL2010-001.txt - http://www.blackhat.com/presentations/bh-dc-10/Byrne_David/BlackHat-DC-2010-Byrne-SGUI-slides.pdf
CVE ID: CVE-2010-2087 State: PUBLISHED Published: 2010-05-27T18:32:00Z Last Updated: 2024-09-17T01:02:09.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle Mojarra 1.2_14 and 2.0.2, as used in IBM WebSphere Application Server, Caucho Resin, and other applications, does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary Expression Language (EL) statements via vectors that involve modifying the serialized view object. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/spiderlabs/advisories/TWSL2010-001.txt - http://www.blackhat.com/presentatio
er: References: - https://www.trustwave.com/spiderlabs/advisories/TWSL2010-001.txt - http://www.blackhat.com/presentations/bh-dc-10/Byrne_David/BlackHat-DC-2010-Byrne-SGUI-slides.pdf
CVE ID: CVE-2010-2088 State: PUBLISHED Published: 2010-05-27T18:32:00Z Last Updated: 2024-09-16T22:21:05.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASP.NET in Microsoft .NET 3.5 does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting (XSS) attacks against the form control via the __VIEWSTATE parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/spiderlabs/advisories/TWSL2010-001.txt - http://www.blackhat.com/presentations/bh-dc-10/Byrne_David/BlackHat-DC-2010-Byrne-SGUI-slides.pdf
CVE ID: CVE-2010-2089 State: PUBLISHED Published: 2010-05-27T19:00:00 Last Updated: 2024-08-07T02:17:14.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengths, which allows context-dependent attackers to cause a denial of service (memory corruption and application crash) via crafted arguments, as demonstrated by a call to audioop.reverse with a one-byte string, a different vulnerability than CVE-2010-1634. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=598197 - http://secunia.com/advisories/43068 - htt
Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=598197 - http://secunia.com/advisories/43068 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042751.html - http://secunia.com/advisories/51087 - http://www.vupen.com/english/advisories/2011/0212 - http://www.ubuntu.com/usn/USN-1616-1 - http://secunia.com/advisories/51040 - http://www.vupen.com/english/advisories/2010/1448 - http://secunia.com/advisories/50858 - http://www.securityfocus.com/bid/40863 - http://bugs.python.org/issue7673 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://www.vupen.com/english/advisories/2011/0122 - http://lists.opensuse.org/opensuse-secur
e/2011//Oct/msg00003.html - http://www.vupen.com/english/advisories/2011/0122 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/42888 - http://www.ubuntu.com/usn/USN-1596-1 - http://secunia.com/advisories/40194 - http://www.redhat.com/support/errata/RHSA-2011-0027.html - http://www.ubuntu.com/usn/USN-1613-2 - http://support.apple.com/kb/HT5002 - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html - http://secunia.com/advisories/51024 - http://www.ubuntu.com/usn/USN-1613-1
CVE ID: CVE-2010-2090 State: PUBLISHED Published: 2010-05-27T19:00:00 Last Updated: 2024-08-07T02:17:14.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: The npb_protocol_error function in sna V5router64 in IBM Communications Server for Windows 6.1.3 and Communications Server for AIX (aka CSAIX or CS/AIX) in sna.rte before 6.3.1.2 allows remote attackers to cause a denial of service (daemon crash) via APPC data containing a GDSID variable with a GDS length that is too small. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1244 - http://www.securityfocus.com/bid/40372 - http://secunia.com/advisories/39909 - http://www
english/advisories/2010/1244 - http://www.securityfocus.com/bid/40372 - http://secunia.com/advisories/39909 - http://www-01.ibm.com/support/docview.wss?uid=swg1JR36026 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ68810 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58874 - http://www-01.ibm.com/support/docview.wss?uid=swg24013012
CVE ID: CVE-2010-2091 State: PUBLISHED Published: 2010-05-27T19:00:00 Last Updated: 2024-08-07T02:17:14.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Outlook Web Access (OWA) 8.2.254.0, when Internet Explorer 7 on Windows Server 2003 is used, does not properly handle the id parameter in a Folder IPF.Note action to the default URI, which might allow remote attackers to obtain sensitive information or conduct cross-site scripting (XSS) attacks via an invalid value. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/12728 - http://www.securityfocus.com/archive/1/511448/100/0/threaded - https://exchange.xforce.ibmcloud.
db.com/exploits/12728 - http://www.securityfocus.com/archive/1/511448/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/58835 - http://www.securityfocus.com/archive/1/511401/100/0/threaded - http://www.securityfocus.com/archive/1/511416/100/0/threaded
CVE ID: CVE-2010-2092 State: PUBLISHED Published: 2010-05-27T22:00:00 Last Updated: 2024-08-07T02:17:14.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in graph.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via a crafted rra_id parameter in a GET request in conjunction with a valid rra_id value in a POST request or a cookie, which causes the POST or cookie value to bypass the validation routine, but inserts the $_GET value into the resulting query. Additional Analyst Notes: - CVE Program Container: References: - http://www.cacti.net/changelog.php - http://www.debian.org/security/2010/dsa-2060 - http://sec
Container: References: - http://www.cacti.net/changelog.php - http://www.debian.org/security/2010/dsa-2060 - http://secunia.com/advisories/41041 - https://rhn.redhat.com/errata/RHSA-2010-0635.html - http://www.vupen.com/english/advisories/2010/2132 - http://php-security.org/2010/05/13/mops-2010-023-cacti-graph-viewer-sql-injection-vulnerability/index.html
CVE ID: CVE-2010-2093 State: PUBLISHED Published: 2010-05-27T22:00:00 Last Updated: 2024-08-07T02:17:14.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the request shutdown functionality in PHP 5.2 before 5.2.13 and 5.3 before 5.3.2 allows context-dependent attackers to cause a denial of service (crash) via a stream context structure that is freed before destruction occurs. Additional Analyst Notes: - CVE Program Container: References: - http://php-security.org/2010/05/12/mops-2010-022-php-stream-context-use-after-free-on-request-shutdown-vulnerability/index.html - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - htt
est-shutdown-vulnerability/index.html - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html
CVE ID: CVE-2010-2094 State: PUBLISHED Published: 2010-05-27T22:00:00 Last Updated: 2024-08-07T02:17:14.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in the phar extension in PHP 5.3 before 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) and possibly execute arbitrary code via a crafted phar:// URI that is not properly handled by the (1) phar_stream_flush, (2) phar_wrapper_unlink, (3) phar_parse_url, or (4) phar_wrapper_open_url functions in ext/phar/stream.c; and the (5) phar_wrapper_open_dir function in ext/phar/dirstream.c, which triggers errors in the php_stream_wrapper_log_error function.
_wrapper_open_dir function in ext/phar/dirstream.c, which triggers errors in the php_stream_wrapper_log_error function. Additional Analyst Notes: - CVE Program Container: References: - http://php-security.org/2010/05/14/mops-2010-028-php-phar_wrapper_open_url-format-string-vulnerabilities/index.html - http://php-security.org/2010/05/14/mops-2010-024-php-phar_stream_flush-format-string-vulnerability/index.html - http://www.vupen.com/english/advisories/2011/0068 - http://php-security.org/2010/05/14/mops-2010-027-php-phar_parse_url-format-string-vulnerabilities/index.html - http://php-security.org/2010/05/14/mops-2010-025-php-phar_wrapper_open_dir-format-string-vulnerability/index.html - http:/
tp://php-security.org/2010/05/14/mops-2010-025-php-phar_wrapper_open_dir-format-string-vulnerability/index.html - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:004 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html - http://php-security.org/2010/05/14/mops-2010-026-php-phar_wrapper_unlink-format-string-vulnerability/index.html
CVE ID: CVE-2010-2095 State: PUBLISHED Published: 2010-05-27T22:00:00Z Last Updated: 2024-09-16T19:14:11.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in CMSQlite 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the c parameter. Additional Analyst Notes: - CVE Program Container: References: - http://php-security.org/2010/05/15/mops-2010-029-cmsqlite-c-parameter-sql-injection-vulnerability/index.html
CVE ID: CVE-2010-2096 State: PUBLISHED Published: 2010-05-27T22:00:00Z Last Updated: 2024-09-17T04:20:22.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in CMSQlite 1.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the mod parameter. Additional Analyst Notes: - CVE Program Container: References: - http://php-security.org/2010/05/15/mops-2010-030-cmsqlite-mod-parameter-local-file-inclusion-vulnerability/index.html
CVE ID: CVE-2010-2097 State: PUBLISHED Published: 2010-05-27T22:00:00 Last Updated: 2024-08-07T02:17:14.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) iconv_mime_decode, (2) iconv_substr, and (3) iconv_mime_encode functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature. Additional Analyst Notes: - CVE Program Container: References: - http://php-security.org/2010/05/18/mops-2010-032-php-iconv_mime_decode-interruption-information-leak-vulnerability/index.html - http://marc.i
rg/2010/05/18/mops-2010-032-php-iconv_mime_decode-interruption-information-leak-vulnerability/index.html - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://php-security.org/2010/05/18/mops-2010-034-php-iconv_mime_encode-interruption-information-leak-vulnerability/index.html - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://php-security.org/2010/05/18/mops-2010-033-php-iconv_substr-interruption-information-leak-vulnerability/index.html - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html
CVE ID: CVE-2010-2098 State: PUBLISHED Published: 2010-05-27T22:00:00 Last Updated: 2024-08-07T02:17:14.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in usersettings.php in e107 0.7.20 and earlier allows remote attackers to conduct SQL injection attacks via the loginname parameter. Additional Analyst Notes: - CVE Program Container: References: - http://php-security.org/2010/05/15/mops-2010-029-cmsqlite-c-parameter-sql-injection-vulnerability/index.html - http://e107.svn.sourceforge.net/viewvc/e107/trunk/e107_0.7/usersettings.php?r1=11521&r2=11538 - http://e107.svn.sourceforge.net/viewvc/e107/trunk/e107_0.7/usersettings.php?r1=11538&r2=1154
ngs.php?r1=11521&r2=11538 - http://e107.svn.sourceforge.net/viewvc/e107/trunk/e107_0.7/usersettings.php?r1=11538&r2=11541
CVE ID: CVE-2010-2099 State: PUBLISHED Published: 2010-05-27T22:00:00Z Last Updated: 2024-09-17T04:19:20.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: bbcode/php.bb in e107 0.7.20 and earlier does not perform access control checks for all inputs that could contain the php bbcode tag, which allows remote attackers to execute arbitrary PHP code, as demonstrated using the toEmail method in contact.php, related to invocations of the toHTML method. Additional Analyst Notes: - CVE Program Container: References: - http://php-security.org/2010/05/19/mops-2010-035-e107-bbcode-remote-php-code-execution-vulnerability/index.html - http://www.securityfocus.com/bid/40252
CVE ID: CVE-2010-2100 State: PUBLISHED Published: 2010-05-27T22:00:00 Last Updated: 2024-08-07T02:25:06.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) htmlentities, (2) htmlspecialchars, (3) str_getcsv, (4) http_build_query, (5) strpbrk, and (6) strtr functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://php-security.org/2010/05/21/mops-2010-037-ph
r: References: - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://php-security.org/2010/05/21/mops-2010-037-php-str_getcsv-interruption-information-leak-vulnerability/index.html - http://php-security.org/2010/05/21/mops-2010-038-php-http_build_query-interruption-information-leak-vulnerability/index.html - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://php-security.org/2010/05/21/mops-2010-040-php-strtr-interruption-information-leak-vulnerability/index.html - http://php-security.org/2010/05/21/mops-2010-039-php-strpbrk-interruption-information-leak-vulnerability/index.html - http://php-security.
y.org/2010/05/21/mops-2010-039-php-strpbrk-interruption-information-leak-vulnerability/index.html - http://php-security.org/2010/05/21/mops-2010-036-php-htmlentities-and-htmlspecialchars-interruption-information-leak-vulnerability/index.html - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html
CVE ID: CVE-2010-2101 State: PUBLISHED Published: 2010-05-27T22:00:00 Last Updated: 2024-08-07T02:25:05.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) strip_tags, (2) setcookie, (3) strtok, (4) wordwrap, (5) str_word_count, and (6) str_pad functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://php-security.org/2010/05/26/mops-2010-045-php-str_word_c
s: - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://php-security.org/2010/05/26/mops-2010-045-php-str_word_count-interruption-information-leak-vulnerability/index.html - http://php-security.org/2010/05/26/mops-2010-042-php-setcookie-interruption-information-leak-vulnerability/index.html - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://php-security.org/2010/05/26/mops-2010-043-php-strtok-interruption-information-leak-vulnerability/index.html - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://php-security.org/2010/05/26/mops-2010-044-php-wordwrap-interruption-information-leak-vulnerability/index.html - http://php-security.org/2010/05/2
26/mops-2010-044-php-wordwrap-interruption-information-leak-vulnerability/index.html - http://php-security.org/2010/05/26/mops-2010-041-php-strip_tags-interruption-information-leak-vulnerability/index.html - http://php-security.org/2010/05/26/mops-2010-046-php-str_pad-interruption-information-leak-vulnerability/index.html - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html
CVE ID: CVE-2010-2102 State: PUBLISHED Published: 2010-05-27T22:00:00 Last Updated: 2024-08-07T02:25:06.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Webby Webserver 1.01 allows remote attackers to execute arbitrary code via a long HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/511428/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/58892 - http://www.securityfocus.com/bid/40353 - http://www.exploit-db.com/exploits/12740
CVE ID: CVE-2010-2103 State: PUBLISHED Published: 2010-05-27T22:00:00 Last Updated: 2024-08-07T02:25:05.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in axis2-admin/axis2-admin/engagingglobally in the administration console in Apache Axis2/Java 1.4.1, 1.5.1, and possibly other versions, as used in SAP Business Objects 12, 3com IMC, and possibly other products, allows remote attackers to inject arbitrary web script or HTML via the modules parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities
n. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/58790 - http://secunia.com/advisories/39906 - http://www.exploit-db.com/exploits/12689 - https://kb.juniper.net/KB27373 - http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-03 - http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf - http://www.vupen.com/english/advisories/2010/1215 - http://www.securityfocus.com/bid/40327 - http://www.securityfocus.com/archive/1/511404/100/0/threaded - http://osvdb.org/64844
CVE ID: CVE-2010-2104 State: PUBLISHED Published: 2010-05-27T22:00:00 Last Updated: 2024-08-07T02:25:06.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Orbit Downloader 3.0.0.4 and 3.0.0.5 allows user-assisted remote attackers to write arbitrary files via a metalink file containing directory traversal sequences in the name attribute of a file element. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2010-73/ - http://secunia.com/advisories/39527 - http://www.securityfocus.com/archive/1/511348/100/100/threaded
CVE ID: CVE-2010-2105 State: PUBLISHED Published: 2010-05-28T18:00:00 Last Updated: 2024-08-07T02:25:06.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 5.0.375.55 does not properly follow the Safe Browsing specification's requirements for canonicalization of URLs, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2010/05/stable-channel-update.html - http://code.google.com/p/chromium/issues/detail?id=7713 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12113
CVE ID: CVE-2010-2106 State: PUBLISHED Published: 2010-05-28T18:00:00 Last Updated: 2024-08-07T02:25:06.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Google Chrome before 5.0.375.55 might allow remote attackers to spoof the URL bar via vectors involving unload event handlers. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2010/05/stable-channel-update.html - http://code.google.com/p/chromium/issues/detail?id=16535 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11644
CVE ID: CVE-2010-2107 State: PUBLISHED Published: 2010-05-28T18:00:00 Last Updated: 2024-08-07T02:25:05.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Google Chrome before 5.0.375.55 allows attackers to cause a denial of service (memory error) or possibly have unspecified other impact via vectors related to the Safe Browsing functionality. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=30079 - http://googlechromereleases.blogspot.com/2010/05/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12128