Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-3737 State: PUBLISHED Published: 2010-10-05T17:00:00 Last Updated: 2024-08-07T03:18:52.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the Relational Data Services component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to cause a denial of service (heap memory consumption) by executing a (1) user-defined function (UDF) or (2) stored procedure while using a different code page than the database server. Additional Analyst Notes: - CVE Program Container: References: - ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitr
ixes/english-us/aparlist/db2_v95/APARLIST.TXT - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14567 - http://www-01.ibm.com/support/docview.wss?uid=swg1LI75022
CVE ID: CVE-2010-3738 State: PUBLISHED Published: 2010-10-05T17:00:00 Last Updated: 2024-08-07T03:18:53.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Security component in IBM DB2 UDB 9.5 before FP6a logs AUDIT events by using a USERID and an AUTHID value corresponding to the instance owner, instead of a USERID and an AUTHID value corresponding to the logged-in user account, which makes it easier for remote authenticated users to execute Audit administration commands without discovery. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IC65184 - https://oval.cisecurity.org/repository/search/definition/oval%
tp://www-01.ibm.com/support/docview.wss?uid=swg1IC65184 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14488 - ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT
CVE ID: CVE-2010-3739 State: PUBLISHED Published: 2010-10-05T17:00:00Z Last Updated: 2024-09-16T17:14:29.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: The audit facility in the Security component in IBM DB2 UDB 9.5 before FP6a uses instance-level audit settings to capture connection (aka CONNECT and AUTHENTICATION) events in certain circumstances in which database-level audit settings were intended, which might make it easier for remote attackers to connect without discovery. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1JR34218 - ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/A
m.com/support/docview.wss?uid=swg1JR34218 - ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT
CVE ID: CVE-2010-3740 State: PUBLISHED Published: 2010-10-05T17:00:00 Last Updated: 2024-08-07T03:18:53.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Net Search Extender (NSE) implementation in the Text Search component in IBM DB2 UDB 9.5 before FP6a does not properly handle an alphanumeric Fuzzy search, which allows remote authenticated users to cause a denial of service (memory consumption and system hang) via the db2ext.textSearch function. Additional Analyst Notes: - CVE Program Container: References: - ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg1IC66613 - https://oval.ci
s/english-us/aparlist/db2_v95/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg1IC66613 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13811
CVE ID: CVE-2010-3741 State: PUBLISHED Published: 2010-10-05T17:00:00 Last Updated: 2024-08-07T03:18:53.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: The offline backup mechanism in Research In Motion (RIM) BlackBerry Desktop Software uses single-iteration PBKDF2, which makes it easier for local users to decrypt a .ipd file via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://blog.crackpassword.com/2010/09/smartphone-forensics-cracking-blackberry-backup-passwords/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7360 - http://twitter.com/elcomsoft/statuses/25954970586 - http://www.infoworld
definition/oval%3Aorg.mitre.oval%3Adef%3A7360 - http://twitter.com/elcomsoft/statuses/25954970586 - http://www.infoworld.com/t/mobile-device-management/you-can-no-longer-rely-encryption-protect-blackberry-436 - http://it.slashdot.org/story/10/10/01/166226/
CVE ID: CVE-2010-3742 State: PUBLISHED Published: 2010-10-05T17:00:00Z Last Updated: 2024-09-17T02:57:35.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) meta or (2) phpincdir parameter, a different issue than CVE-2010-3307. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14672/ - http://secunia.com/advisories/41001 - http://packetstormsecurity.org/1008-exploits/freesimplesoftware-rfi.txt - http://www.osvdb.org/67239
CVE ID: CVE-2010-3743 State: PUBLISHED Published: 2010-10-08T20:00:00 Last Updated: 2024-08-07T03:18:53.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Visual Synapse HTTP Server 1.0 RC1 through RC3, and 0.60 and earlier, allows remote attackers to read arbitrary files via a .. (dot dot) in the URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.syhunt.com/advisories/?id=vs-httpd-dirtrav - http://www.securityfocus.com/archive/1/514167/100/0/threaded - http://www.securityfocus.com/bid/43830 - http://www.exploit-db.com/exploits/15216
CVE ID: CVE-2010-3747 State: PUBLISHED Published: 2010-10-18T22:00:00 Last Updated: 2024-08-07T03:18:53.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: An ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 does not properly initialize an unspecified object component during parsing of a CDDA URI, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer dereference and application crash) via a long URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-10-210/ - http://www.securityfocus.com/
Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-10-210/ - http://www.securityfocus.com/bid/44144 - http://securityreason.com/securityalert/8147 - http://service.real.com/realplayer/security/10152010_player/en/
CVE ID: CVE-2010-3748 State: PUBLISHED Published: 2010-10-18T22:00:00Z Last Updated: 2024-09-16T20:32:48.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the RichFX component in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 allows remote attackers to have an unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44144 - http://service.real.com/realplayer/security/10152010_player/en/
CVE ID: CVE-2010-3749 State: PUBLISHED Published: 2010-10-18T22:00:00 Last Updated: 2024-08-07T03:18:53.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: The browser-plugin implementation in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1 allows remote attackers to arguments to the RecordClip method, which allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via a " (double quote) in an argument to the RecordClip method, aka "parameter injection." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44144 - http://www.exploit-db.com/exploits/15991 - http
rogram Container: References: - http://www.securityfocus.com/bid/44144 - http://www.exploit-db.com/exploits/15991 - http://www.zerodayinitiative.com/advisories/ZDI-10-211/ - http://www.securityfocus.com/bid/44443 - http://service.real.com/realplayer/security/10152010_player/en/
CVE ID: CVE-2010-3750 State: PUBLISHED Published: 2010-10-18T22:00:00Z Last Updated: 2024-09-16T19:14:07.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: rjrmrpln.dll in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 does not properly validate file contents that are used during interaction with a heap buffer, which allows remote attackers to execute arbitrary code via crafted Name Value Property (NVP) elements in logical streams in a media file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44144 - http://www.zerodayinitiative.com/advisories/ZDI-10-212/ - http://ser
erences: - http://www.securityfocus.com/bid/44144 - http://www.zerodayinitiative.com/advisories/ZDI-10-212/ - http://service.real.com/realplayer/security/10152010_player/en/
CVE ID: CVE-2010-3751 State: PUBLISHED Published: 2010-10-18T22:00:00Z Last Updated: 2024-09-16T16:33:17.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in an ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 allow remote attackers to execute arbitrary code via a long .smil argument to the (1) tfile, (2) pnmm, or (3) cdda protocol handler. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44144 - http://www.zerodayinitiative.com/advisories/ZDI-10-213/ - http://service.real.com/realplayer/security/10152010_player/en/
CVE ID: CVE-2010-3752 State: PUBLISHED Published: 2010-10-05T21:00:00 Last Updated: 2024-08-07T03:18:53.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in (1) cisco_dns_info or (2) cisco_domain_info data in a packet, a different vulnerability than CVE-2010-3302. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2526 - http://www.openswan.org/download/CVE-2010-3302/CVE-2010-3302.txt - http://www.securityfocus.com/bid/43588 - http://www.redhat.com/support/err
rg/download/CVE-2010-3302/CVE-2010-3302.txt - http://www.securityfocus.com/bid/43588 - http://www.redhat.com/support/errata/RHSA-2010-0892.html - http://www.securitytracker.com/id?1024749 - http://www.openswan.org/download/CVE-2010-3308/openswan-2.6.26-2.6.28-CVE-2010-330x.patch - http://www.openswan.org/download/CVE-2010-3302/openswan-2.6.25-CVE-2010-3302.patch
CVE ID: CVE-2010-3753 State: PUBLISHED Published: 2010-10-05T21:00:00 Last Updated: 2024-08-07T03:18:53.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: programs/pluto/xauth.c in the client in Openswan 2.6.26 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in the cisco_banner (aka server_banner) field, a different vulnerability than CVE-2010-3308. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2526 - http://www.securityfocus.com/bid/43588 - http://www.redhat.com/support/errata/RHSA-2010-0892.html - http://www.securitytracker.com/id?1024749 - http://www.open
- http://www.redhat.com/support/errata/RHSA-2010-0892.html - http://www.securitytracker.com/id?1024749 - http://www.openswan.org/download/CVE-2010-3308/openswan-2.6.26-2.6.28-CVE-2010-330x.patch - http://www.openswan.org/download/CVE-2010-3308/CVE-2010-3308.txt
CVE ID: CVE-2010-3754 State: PUBLISHED Published: 2010-10-05T21:00:00 Last Updated: 2024-08-07T03:18:52.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FXCLI_OraBR_Exec_Command function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 uses values of packet fields to determine the content and length of data copied to memory, which allows remote attackers to execute arbitrary code via a crafted packet. NOTE: this might overlap CVE-2010-3059. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-10-182/ - http://www.ibm.com/support/docvie
Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-10-182/ - http://www.ibm.com/support/docview.wss?uid=swg21443820 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC69883 - http://www.securityfocus.com/archive/1/514058/100/0/threaded
CVE ID: CVE-2010-3755 State: PUBLISHED Published: 2010-10-05T21:00:00 Last Updated: 2024-08-07T03:18:53.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _DAS_ReadBlockReply function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via data in a TCP packet. NOTE: this might overlap CVE-2010-3060. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-10-187/ - http://www.securityfocus.com/archive/1/514063/100/0/threaded - http://www.ibm.com/su
iative.com/advisories/ZDI-10-187/ - http://www.securityfocus.com/archive/1/514063/100/0/threaded - http://www.ibm.com/support/docview.wss?uid=swg21443820 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC69883
CVE ID: CVE-2010-3756 State: PUBLISHED Published: 2010-10-05T21:00:00 Last Updated: 2024-08-07T03:18:52.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _CalcHashValueWithLength function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 does not properly validate an unspecified length value, which allows remote attackers to cause a denial of service (daemon crash) by sending data over TCP. NOTE: this might overlap CVE-2010-3060. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/514070/100/0/threaded - http://www.ibm.com/support/docview.ws
iner: References: - http://www.securityfocus.com/archive/1/514070/100/0/threaded - http://www.ibm.com/support/docview.wss?uid=swg21443820 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC69883 - http://zerodayinitiative.com/advisories/ZDI-10-186/
CVE ID: CVE-2010-3757 State: PUBLISHED Published: 2010-10-05T21:00:00 Last Updated: 2024-08-07T03:18:53.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the _Eventlog function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allows remote attackers to execute arbitrary code via format string specifiers located after a | (pipe) character in a string. NOTE: this might overlap CVE-2010-3059. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-10-185/ - http://www.ibm.com/support/docview.wss?uid=swg21443820 - ht
ces: - http://zerodayinitiative.com/advisories/ZDI-10-185/ - http://www.ibm.com/support/docview.wss?uid=swg21443820 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC69883 - http://www.securityfocus.com/archive/1/514069/100/0/threaded
CVE ID: CVE-2010-3758 State: PUBLISHED Published: 2010-10-05T21:00:00 Last Updated: 2024-08-07T03:18:53.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allow remote attackers to execute arbitrary code via vectors involving the (1) AGI_SendToLog (aka _SendToLog) function; the (2) group, (3) workgroup, or (4) domain name field to the USER_S_AddADGroup function; the (5) user_path variable to the FXCLI_checkIndexDBLocation function; or (6) the _AGI_S_ActivateLTScriptReply (aka ActivateLTScriptReply) function. NO
he FXCLI_checkIndexDBLocation function; or (6) the _AGI_S_ActivateLTScriptReply (aka ActivateLTScriptReply) function. NOTE: this might overlap CVE-2010-3059. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-10-183/ - http://zerodayinitiative.com/advisories/ZDI-10-184/ - http://www.securityfocus.com/archive/1/514078/100/0/threaded - http://zerodayinitiative.com/advisories/ZDI-10-181/ - http://zerodayinitiative.com/advisories/ZDI-10-180/ - http://www.securityfocus.com/archive/1/514072/100/0/threaded - http://www.securityfocus.com/archive/1/514059/100/0/threaded - http://www.ibm.com/support/docview.wss?uid=swg21443820 - http://www-01.i
rityfocus.com/archive/1/514059/100/0/threaded - http://www.ibm.com/support/docview.wss?uid=swg21443820 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC69883 - http://www.securityfocus.com/archive/1/514067/100/0/threaded
CVE ID: CVE-2010-3759 State: PUBLISHED Published: 2010-10-05T21:00:00 Last Updated: 2024-08-07T03:18:53.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 writes a certain value to a memory location specified by a UDP packet field, which allows remote attackers to execute arbitrary code via multiple requests. NOTE: this might overlap CVE-2010-3058. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-10-179/ - http://www.securityfocus.com/archive/1/514068/100/0/threaded - http://www.ibm.com
nitiative.com/advisories/ZDI-10-179/ - http://www.securityfocus.com/archive/1/514068/100/0/threaded - http://www.ibm.com/support/docview.wss?uid=swg21443820 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC69883
CVE ID: CVE-2010-3760 State: PUBLISHED Published: 2010-10-05T21:00:00Z Last Updated: 2024-09-16T16:38:36.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 does not properly handle a certain failure to allocate memory, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash, and recovery failure) by specifying a large size value within TCP packet data. NOTE: this might overlap CVE-2010-3061. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-1
010-3061. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-10-188/ - http://www.ibm.com/support/docview.wss?uid=swg21443820 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC69883
CVE ID: CVE-2010-3761 State: PUBLISHED Published: 2010-10-05T21:00:00Z Last Updated: 2024-09-17T01:26:07.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-700. NOTE: this might overlap CVE-2010-3058 or CVE-2010-3059. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/upcoming/ - http://www.ibm.com/support/docview.wss?uid=swg21443820 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC69883
CVE ID: CVE-2010-3762 State: PUBLISHED Published: 2010-10-05T21:00:00 Last Updated: 2024-08-07T03:18:53.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: ISC BIND before 9.7.2-P2, when DNSSEC validation is enabled, does not properly handle certain bad signatures if multiple trust anchors exist for a single zone, which allows remote attackers to cause a denial of service (daemon crash) via a DNS query. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:253 - http://lists.vmware.com/pipermail/security-announce/2011/000126.html - http://www.vupen.com/english/advisories/2011/0606 - http://www.securityfocus.co
ail/security-announce/2011/000126.html - http://www.vupen.com/english/advisories/2011/0606 - http://www.securityfocus.com/archive/1/516909/100/0/threaded - http://ftp.isc.org/isc/bind9/9.7.2-P2/RELEASE-NOTES-BIND-9.7.2-P2.html - http://www.redhat.com/support/errata/RHSA-2010-0976.html - http://www.debian.org/security/2010/dsa-2130 - http://support.avaya.com/css/P8/documents/100124923 - http://www.securityfocus.com/bid/45385 - http://www.vmware.com/security/advisories/VMSA-2011-0004.html
CVE ID: CVE-2010-3763 State: PUBLISHED Published: 2010-10-05T21:00:00 Last Updated: 2024-08-07T03:18:53.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in core/summary_api.php in MantisBT before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the Summary field, a different vector than CVE-2010-3303. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0002 - http://security.gentoo.org/glsa/glsa-201211-01.xml - http://www.mantisbt.org/blog/?p=123 - http://www.openwall.com/lists/oss-security/2010/09/14/12 - http://secunia.com/advisories/51199 - http://www.o
g/?p=123 - http://www.openwall.com/lists/oss-security/2010/09/14/12 - http://secunia.com/advisories/51199 - http://www.openwall.com/lists/oss-security/2010/09/14/13 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052730.html - http://www.mantisbt.org/bugs/changelog_page.php?version_id=111 - http://www.securityfocus.com/bid/43837 - http://www.mantisbt.org/bugs/view.php?id=12309 - http://secunia.com/advisories/42772 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052721.html
CVE ID: CVE-2010-3764 State: PUBLISHED Published: 2010-11-05T16:28:00 Last Updated: 2024-08-07T03:18:53.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Old Charts implementation in Bugzilla 2.12 through 3.2.8, 3.4.8, 3.6.2, 3.7.3, and 4.1 creates graph files with predictable names in graphs/, which allows remote attackers to obtain sensitive information via a modified URL. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050813.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/62969 - http://www.vupen.com/english/advisories/2010/2878 - http://www.bugzilla.org/security/3.2.8/
com/vulnerabilities/62969 - http://www.vupen.com/english/advisories/2010/2878 - http://www.bugzilla.org/security/3.2.8/ - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050820.html - http://www.securitytracker.com/id?1024683 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050830.html - http://www.vupen.com/english/advisories/2010/2975 - http://secunia.com/advisories/42271 - https://bugzilla.mozilla.org/show_bug.cgi?id=419014
CVE ID: CVE-2010-3765 State: PUBLISHED Published: 2010-10-27T22:00:00.000Z Last Updated: 2025-10-22T00:05:51.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware. Additional Analyst Notes: - CVE Program Container