Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-1473 State: PUBLISHED Published: 2010-04-19T19:04:00 Last Updated: 2024-08-07T01:28:40.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Advertising (com_advertising) component 0.25 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1004-exploits/joomlaeasyadbanner-lfi.txt - http://secunia.com/advisories/39410 - http://www.exploit-db.com/exploits/12171
CVE ID: CVE-2010-1474 State: PUBLISHED Published: 2010-04-19T19:04:00 Last Updated: 2024-08-07T01:28:40.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Sweety Keeper (com_sweetykeeper) component 1.5.x for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39399 - http://packetstormsecurity.org/1004-exploits/joomlasweetykeeper-lfi.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/57662 - http://www.exploit-db.com/exploits/12
weetykeeper-lfi.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/57662 - http://www.exploit-db.com/exploits/12182 - http://secunia.com/advisories/39388
CVE ID: CVE-2010-1475 State: PUBLISHED Published: 2010-04-19T19:04:00 Last Updated: 2024-08-07T01:28:41.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Preventive & Reservation (com_preventive) component 1.0.5 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1004-exploits/joomlapr-lfi.txt - http://www.exploit-db.com/exploits/12147 - http://www.securityfocus.com/bid/39387 - https://exchange.xforce.ibmcloud.com/vulnerabilities/576
b.com/exploits/12147 - http://www.securityfocus.com/bid/39387 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57652 - http://secunia.com/advisories/39285
CVE ID: CVE-2010-1476 State: PUBLISHED Published: 2010-04-19T19:04:00 Last Updated: 2024-08-07T01:28:41.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the AlphaUserPoints (com_alphauserpoints) component 1.5.5 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the view parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/12150 - http://www.alphaplug.com/ - http://secunia.com/advisories/39250 - http://www.securityfocus.com/bid/39393 - http://packetstormsecurity.org/1004-exploits/joomlaalphauserpoin
sories/39250 - http://www.securityfocus.com/bid/39393 - http://packetstormsecurity.org/1004-exploits/joomlaalphauserpoints-lfi.txt
CVE ID: CVE-2010-1477 State: PUBLISHED Published: 2010-04-19T19:04:00 Last Updated: 2024-08-07T01:28:40.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the SermonSpeaker (com_sermonspeaker) component before 3.2.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a latest_sermons action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://joomlacode.org/gf/project/sermon_speaker/news/?action=NewsThreadView&id=2549 - http://www.exploit-db.com/exploits/12184 - http://joomlacode.org/gf/project/sermon_speaker/forum/?action=ForumBrowse&forum_id=7897&_forum_action=ForumMessage
184 - http://joomlacode.org/gf/project/sermon_speaker/forum/?action=ForumBrowse&forum_id=7897&_forum_action=ForumMessageBrowse&thread_id=15219 - http://www.securityfocus.com/bid/39410 - http://packetstormsecurity.org/1004-exploits/joomlasermonspeaker-sql.txt - http://secunia.com/advisories/39385
CVE ID: CVE-2010-1478 State: PUBLISHED Published: 2010-04-19T19:04:00 Last Updated: 2024-08-07T01:28:41.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Ternaria Informatica Jfeedback! (com_jfeedback) component 1.2 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39390 - http://www.exploit-db.com/exploits/12145 - http://packetstormsecurity.org/1004-exploits/joomlajfeedback-lfi.txt - http://secunia.com/advisories/39262
CVE ID: CVE-2010-1479 State: PUBLISHED Published: 2010-04-19T19:04:00 Last Updated: 2024-08-07T01:28:41.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the RokModule (com_rokmodule) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the moduleid parameter in a raw action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39255 - http://www.securityfocus.com/bid/39378 - http://www.rockettheme.com/extensions-downloads/free/rokmodule/1040-rokmodule-component/download - http://www.rockettheme.com/extensions-updates/673-rokmodule-security-update-released -
0-rokmodule-component/download - http://www.rockettheme.com/extensions-updates/673-rokmodule-security-update-released - http://www.exploit-db.com/exploits/12148 - http://packetstormsecurity.org/1004-exploits/joomlarokmodule-bsql.txt
CVE ID: CVE-2010-1480 State: PUBLISHED Published: 2010-04-19T19:04:00Z Last Updated: 2024-09-16T22:02:33.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the RokModule (com_rokmodule) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the module parameter to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39255 - http://www.rockettheme.com/extensions-updates/673-rokmodule-security-update-released - http://www.rockettheme.com/extensions-downloads/free/rokmodule/1040-rokmodule-componen
module-security-update-released - http://www.rockettheme.com/extensions-downloads/free/rokmodule/1040-rokmodule-component/download
CVE ID: CVE-2010-1481 State: PUBLISHED Published: 2010-05-11T23:00:00 Last Updated: 2024-08-07T01:28:40.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the table feature in PmWiki 2.2.15 allows remote authenticated users to inject arbitrary web script or HTML via the width attribute. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39994 - http://int21.de/cve/CVE-2010-1481-pmwiki-xss.html - http://secunia.com/advisories/39698 - http://www.securityfocus.com/archive/1/511177/100/0/threaded
CVE ID: CVE-2010-1482 State: PUBLISHED Published: 2010-05-12T15:00:00Z Last Updated: 2024-09-16T23:41:29.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/editprefs.php in the backend in CMS Made Simple (CMSMS) before 1.7.1 might allow remote attackers to inject arbitrary web script or HTML via the date_format_string parameter. Additional Analyst Notes: - CVE Program Container: References: - http://blog.cmsmadesimple.org/2010/05/01/announcing-cms-made-simple-1-7-1-escade/ - http://www.securityfocus.com/bid/39997 - http://int21.de/cve/CVE-2010-1482-cmsmadesimple-xss-backend.html - http://www.securityfocus.com/archive/1/511178
CVE ID: CVE-2010-1486 State: PUBLISHED Published: 2010-04-22T14:00:00Z Last Updated: 2024-09-17T04:10:00.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in _invoice.asp in CactuShop before 6.155 allow remote attackers to inject arbitrary web script or HTML via the (1) billing address or (2) shipping address. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39587 - http://www.coresecurity.com/content/cactushop-xss-persistent-vulnerability
CVE ID: CVE-2010-1487 State: PUBLISHED Published: 2010-04-20T15:00:00 Last Updated: 2024-08-07T01:28:41.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Lotus Notes 7.0, 8.0, and 8.5 stores administrative credentials in cleartext in SURunAs.exe, which allows local users to obtain sensitive information by examining this file, aka SPR JSTN837SEG. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21427073 - http://www.securityfocus.com/bid/39525 - http://secunia.com/advisories/39507 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14725
CVE ID: CVE-2010-1488 State: PUBLISHED Published: 2010-04-20T15:00:00Z Last Updated: 2024-09-16T23:01:12.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: The proc_oom_score function in fs/proc/base.c in the Linux kernel before 2.6.34-rc4 uses inappropriate data structures during selection of a candidate for the OOM killer, which might allow local users to cause a denial of service via unspecified patterns of task creation. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=582068 - http://www.openwall.com/lists/oss-security/2010/04/14/1 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.34-rc4 - http://
com/lists/oss-security/2010/04/14/1 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.34-rc4 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b95c35e76b29ba812e5dabdd91592e25ec640e93
CVE ID: CVE-2010-1489 State: PUBLISHED Published: 2010-04-20T16:00:00 Last Updated: 2024-08-07T01:28:41.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XSS Filter in Microsoft Internet Explorer 8 does not properly perform neutering for the SCRIPT tag, which allows remote attackers to conduct cross-site scripting (XSS) attacks against web sites that have no inherent XSS vulnerabilities, a different issue than CVE-2009-4074. Additional Analyst Notes: - CVE Program Container: References: - http://blogs.technet.com/msrc/archive/2010/04/19/guidance-on-internet-explorer-xss-filter.aspx - http://p42.us/ie8xss/Abusing_IE8s_XSS_Filters.pdf - http://p42.us/ie8xss/ - https://oval.ci
t-explorer-xss-filter.aspx - http://p42.us/ie8xss/Abusing_IE8s_XSS_Filters.pdf - http://p42.us/ie8xss/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12638
CVE ID: CVE-2010-1490 State: PUBLISHED Published: 2010-04-21T14:00:00 Last Updated: 2024-08-07T01:28:41.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Cognos 8 Business Intelligence before 8.4.1 FP1 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57937 - http://secunia.com/advisories/39451 - http://www.vupen.com/english/advisories/2010/0947 - http://www.securityfocus.com/bid/39580 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM04649
CVE ID: CVE-2010-1491 State: PUBLISHED Published: 2010-04-23T14:00:00 Last Updated: 2024-08-07T01:28:41.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the MMS Blog (com_mmsblog) component 2.3.0 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39607 - http://www.exploit-db.com/exploits/12318 - http://packetstormsecurity.org/1004-exploits/joomlammsblog-lfi.txt - http://secunia.com/advisories/39533
CVE ID: CVE-2010-1492 State: PUBLISHED Published: 2010-04-23T14:00:00Z Last Updated: 2024-09-16T16:32:27.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in help/frameRight.php in Elastix 1.6.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the id_nodo parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39610 - http://secunia.com/advisories/39164 - http://osvdb.org/63936
CVE ID: CVE-2010-1493 State: PUBLISHED Published: 2010-04-23T14:00:00 Last Updated: 2024-08-07T01:28:41.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the AWDwall (com_awdwall) component before 1.5.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cbuser parameter in an awdwall action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38194 - http://secunia.com/advisories/39553 - http://www.awdwall.com/index.php/awdwall-updates-logs- - http://packetstormsecurity.org/1004-exploits/joomlaawdwall-lfisql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilit
ttp://packetstormsecurity.org/1004-exploits/joomlaawdwall-lfisql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/57694 - http://www.exploit-db.com/exploits/12113 - http://www.osvdb.org/63942
CVE ID: CVE-2010-1494 State: PUBLISHED Published: 2010-04-23T14:00:00 Last Updated: 2024-08-07T01:28:41.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the AWDwall (com_awdwall) component 1.5.4 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39553 - http://www.securityfocus.com/bid/39331 - http://packetstormsecurity.org/1004-exploits/joomlaawdwall-lfisql.txt - http://www.osvdb.org/63943 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57693 - http://www.exploit-db.com/
t - http://www.osvdb.org/63943 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57693 - http://www.exploit-db.com/exploits/12113 - http://www.awdwall.com/index.php/awdwall-updates-logs-
CVE ID: CVE-2010-1495 State: PUBLISHED Published: 2010-04-23T14:00:00 Last Updated: 2024-08-07T01:28:41.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Matamko (com_matamko) component 1.01 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/12286 - http://secunia.com/advisories/39523 - http://packetstormsecurity.org/1004-exploits/joomlamatamko-lfi.txt - http://osvdb.org/63918 - http://www.securityfocus.com/bid/39550 - http://www.vupen.com/english/advisories/2010/0929
CVE ID: CVE-2010-1496 State: PUBLISHED Published: 2010-04-23T14:00:00 Last Updated: 2024-08-07T01:28:41.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JoltCard (com_joltcard) component 1.2.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cardID parameter in a view action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/12269 - http://www.xenuser.org/documents/security/joomla_com_joltcard_sqli.txt - http://www.securityfocus.com/bid/39541 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57910 - http://secunia.com/advisories/39520 - http://www
id/39541 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57910 - http://secunia.com/advisories/39520 - http://www.osvdb.org/63913 - http://packetstormsecurity.org/1004-exploits/joomlajoltcard-sql.txt
CVE ID: CVE-2010-1497 State: PUBLISHED Published: 2010-04-23T14:00:00 Last Updated: 2024-08-07T01:28:41.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in download_proc.php in dl_stats before 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.xenuser.org/documents/security/dl_stats_multiple_vulnerabilities.txt - http://www.securityfocus.com/bid/39592 - http://www.vupen.com/english/advisories/2010/0939 - http://www.osvdb.org/63909 - http://www.exploit-db.com/exploits/12280 - http://www.xenuser.org/2010/04/18/dl_stats-multipl
tp://www.osvdb.org/63909 - http://www.exploit-db.com/exploits/12280 - http://www.xenuser.org/2010/04/18/dl_stats-multiple-vulnerabilities-sqli-xss-unprotected-admin-panel/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/57918 - http://packetstormsecurity.org/1004-exploits/dlstats-sqlxssadmin.txt - http://secunia.com/advisories/39496
CVE ID: CVE-2010-1498 State: PUBLISHED Published: 2010-04-23T14:00:00 Last Updated: 2024-08-07T01:28:41.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in dl_stats before 2.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) download.php and (2) view_file.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.xenuser.org/documents/security/dl_stats_multiple_vulnerabilities.txt - http://www.securityfocus.com/bid/39592 - http://www.vupen.com/english/advisories/2010/0939 - http://www.osvdb.org/63908 - http://www.osvdb.org/63907 - http://www.exploit-db.com/exploits/12280 - http://w
010/0939 - http://www.osvdb.org/63908 - http://www.osvdb.org/63907 - http://www.exploit-db.com/exploits/12280 - http://www.xenuser.org/2010/04/18/dl_stats-multiple-vulnerabilities-sqli-xss-unprotected-admin-panel/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/57917 - http://packetstormsecurity.org/1004-exploits/dlstats-sqlxssadmin.txt - http://secunia.com/advisories/39496
CVE ID: CVE-2010-1499 State: PUBLISHED Published: 2010-04-23T14:00:00 Last Updated: 2024-08-07T01:28:41.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in genre_artists.php in MusicBox 3.3 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39476 - http://www.exploit-db.com/exploits/12303 - http://www.securityfocus.com/bid/39581 - http://osvdb.org/63927 - http://packetstormsecurity.org/1004-exploits/musicbox33-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/57979
CVE ID: CVE-2010-1500 State: PUBLISHED Published: 2010-04-23T14:00:00 Last Updated: 2024-08-07T01:28:41.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 4.1.249.1059 does not properly support forms, which has unknown impact and attack vectors, related to a "type confusion error." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39603 - http://secunia.com/advisories/39544 - http://googlechromereleases.blogspot.com/2010/04/stable-update-security-fixes.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11906 - http://bugs.chromium.org/39443
CVE ID: CVE-2010-1501 State: REJECTED Published: 2010-04-23T14:00:00 Last Updated: 2010-04-30T09:00:00 Description: No description available.
CVE ID: CVE-2010-1502 State: PUBLISHED Published: 2010-04-23T14:00:00 Last Updated: 2024-08-07T01:28:41.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Google Chrome before 4.1.249.1059 allows remote attackers to access local files via vectors related to "developer tools." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12041 - http://www.securityfocus.com/bid/39603 - http://secunia.com/advisories/39544 - http://bugs.chromium.org/40136 - http://googlechromereleases.blogspot.com/2010/04/stable-update-security-fixes.html
CVE ID: CVE-2010-1503 State: PUBLISHED Published: 2010-04-23T14:00:00 Last Updated: 2024-08-07T01:28:41.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Google Chrome before 4.1.249.1059 allows remote attackers to inject arbitrary web script or HTML via vectors related to a chrome://net-internals URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39603 - http://bugs.chromium.org/40137 - http://secunia.com/advisories/39544 - http://osvdb.org/63999 - http://googlechromereleases.blogspot.com/2010/04/stable-update-security-fixes.html - https://oval.cisecurity.org/repository/search/defin
omereleases.blogspot.com/2010/04/stable-update-security-fixes.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11244 - http://www.securityfocus.com/bid/39667
CVE ID: CVE-2010-1504 State: PUBLISHED Published: 2010-04-23T14:00:00 Last Updated: 2024-08-07T01:28:41.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Google Chrome before 4.1.249.1059 allows remote attackers to inject arbitrary web script or HTML via vectors related to a chrome://downloads URI. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/63998 - http://www.securityfocus.com/bid/39603 - http://secunia.com/advisories/39544 - http://googlechromereleases.blogspot.com/2010/04/stable-update-security-fixes.html - http://www.securityfocus.com/bid/39669 - http://bugs.chromium.org/40138 - https://oval.c
le-update-security-fixes.html - http://www.securityfocus.com/bid/39669 - http://bugs.chromium.org/40138 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11418
CVE ID: CVE-2010-1505 State: PUBLISHED Published: 2010-04-23T14:00:00 Last Updated: 2024-08-07T01:28:41.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 4.1.249.1059 does not prevent pages from loading with the New Tab page's privileges, which has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/63997 - http://www.securityfocus.com/bid/39603 - http://secunia.com/advisories/39544 - http://googlechromereleases.blogspot.com/2010/04/stable-update-security-fixes.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11866 - http://bugs.chromium.org/40575
CVE ID: CVE-2010-1506 State: PUBLISHED Published: 2010-04-23T14:00:00 Last Updated: 2024-08-07T01:28:41.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Google V8 bindings in Google Chrome before 4.1.249.1059 allow attackers to cause a denial of service (memory corruption) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39603 - http://osvdb.org/63996 - http://secunia.com/advisories/39544 - http://googlechromereleases.blogspot.com/2010/04/stable-update-security-fixes.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11925 - http://bugs.chromium.org/40635
CVE ID: CVE-2010-1507 State: PUBLISHED Published: 2010-09-03T19:00:00Z Last Updated: 2024-09-16T17:08:35.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebYaST in yast2-webclient in SUSE Linux Enterprise (SLE) 11 on the WebYaST appliance uses a fixed secret key that is embedded in the appliance's image, which allows remote attackers to spoof session cookies by leveraging knowledge of this key. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=591345 - http://support.novell.com/security/cve/CVE-2010-1507.html - http://www.securityfocus.com/bid/42128 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg000