Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
m=130168502603566&w=2 - http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00011.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:192 - http://www.vupen.com/english/advisories/2010/2557 - http://www.vupen.com/english/advisories/2010/3074 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM31601 - http://ubuntu.com/usn/usn-1021-1 - http://www.vupen.com/english/advisories/2011/0358 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.
5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.
.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r688df6f16f141e966a0a47f817e559312b3da27886f59116a94b273d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c44
59312b3da27886f59116a94b273d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re2e23465bbdb17ffe109d21b4f192e6b58221cd7aa8797d530b4cd75%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://li
ache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480
3a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2010-1624 State: PUBLISHED Published: 2010-05-14T19:24:00 Last Updated: 2024-08-07T01:28:42.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: The msn_emoticon_msg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a custom emoticon in a malformed SLP message. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0788.html - http://www.securityfocus.com/bid/40138 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:097 - https://bugzilla.redhat.com/show_bug.
.com/bid/40138 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:097 - https://bugzilla.redhat.com/show_bug.cgi?id=589973 - http://secunia.com/advisories/39801 - http://www.ubuntu.com/usn/USN-1014-1 - http://developer.pidgin.im/viewmtn/revision/info/894460d22c434e73d60b71ec031611988e687c8b - http://www.vupen.com/english/advisories/2010/1141 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58559 - http://www.pidgin.im/news/security/index.php?id=46 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18547 - http://secunia.com/advisories/41899 - http://www.vupen.com/english/advisories/2010/2755 - http://developer.pidgin.im/viewmtn/revision/
.com/advisories/41899 - http://www.vupen.com/english/advisories/2010/2755 - http://developer.pidgin.im/viewmtn/revision/diff/884d44222e8c81ecec51c25e07d005e002a5479b/with/894460d22c434e73d60b71ec031611988e687c8b/libpurple/protocols/msn/slp.c
CVE ID: CVE-2010-1625 State: PUBLISHED Published: 2010-06-23T18:00:00Z Last Updated: 2024-09-16T23:55:54.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in LXR Cross Referencer before 0.9.7 allows remote attackers to inject arbitrary web script or HTML via vectors related to the search body and the results page for a search, a different vulnerability than CVE-2009-4497 and CVE-2010-1448. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/05/14/3 - http://marc.info/?l=oss-security&m=127316953819027&w=2 - http://www.openwall.com/lists/oss-security/2010/05/03/7 - http://www.ope
rc.info/?l=oss-security&m=127316953819027&w=2 - http://www.openwall.com/lists/oss-security/2010/05/03/7 - http://www.openwall.com/lists/oss-security/2010/05/06/2 - http://marc.info/?l=oss-security&m=127289957223005&w=2 - http://sourceforge.net/projects/lxr/files/stable/lxr-0.9.7/ChangeLog/download
CVE ID: CVE-2010-1626 State: PUBLISHED Published: 2010-05-21T17:00:00 Last Updated: 2024-08-07T01:28:41.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL before 5.1.46 allows local users to delete the data and index files of another user's MyISAM table via a symlink attack in conjunction with the DROP TABLE command, a different vulnerability than CVE-2008-4098 and CVE-2008-7247. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1397-1 - http://www.securityfocus.com/bid/40257 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9490 - http://www.openwall.com/lists/oss-security/2010/05/18/4 - h
itory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9490 - http://www.openwall.com/lists/oss-security/2010/05/18/4 - http://www.vupen.com/english/advisories/2010/1194 - http://securitytracker.com/id?1024004 - http://www.openwall.com/lists/oss-security/2010/05/10/2 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:101 - http://bugs.mysql.com/bug.php?id=40980 - http://www.redhat.com/support/errata/RHSA-2010-0442.html - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
CVE ID: CVE-2010-1627 State: PUBLISHED Published: 2010-05-19T22:00:00Z Last Updated: 2024-09-17T00:11:47.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: feed.php in phpBB 3.0.7 before 3.0.7-PL1 does not properly check permissions for feeds, which allows remote attackers to bypass intended access restrictions via unspecified attack vectors related to permission settings on a private forum. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/05/18/6 - http://www.phpbb.com/community/viewtopic.php?f=14&t=2014195 - http://www.openwall.com/lists/oss-security/2010/05/16/1
CVE ID: CVE-2010-1628 State: PUBLISHED Published: 2010-05-19T22:00:00 Last Updated: 2024-08-07T01:28:43.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ghostscript 8.64, 8.70, and possibly other versions allows context-dependent attackers to execute arbitrary code via a PostScript file containing unlimited recursive procedure invocations, which trigger memory corruption in the stack of the interpreter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39753 - http://seclists.org/fulldisclosure/2010/May/134 - http://security.gentoo.org/glsa/glsa-201412-17.xml - http://www.securityfocus.com/bid/40107 - http://www.mandriva.com/securit
//security.gentoo.org/glsa/glsa-201412-17.xml - http://www.securityfocus.com/bid/40107 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:134 - http://www.openwall.com/lists/oss-security/2010/05/18/7 - http://www.vupen.com/english/advisories/2010/1138 - http://www.ubuntu.com/usn/USN-961-1 - http://bugs.ghostscript.com/show_bug.cgi?id=691295 - http://secunia.com/advisories/40580 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://www.securityfocus.com/archive/1/511243/100/0/threaded - http://www.openwall.com/lists/oss-security/2010/05/12/1 - https://bugs.launchpad.net/ubuntu/+source/ghostscript/+bug/546009
CVE ID: CVE-2010-1629 State: PUBLISHED Published: 2010-05-19T22:00:00 Last Updated: 2024-08-07T01:28:42.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Phorum before 5.2.15 allows remote attackers to inject arbitrary web script or HTML via an invalid email address. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/05/18/11 - http://www.openwall.com/lists/oss-security/2010/05/16/2 - http://www.facebook.com/note.php?note_id=371190874581 - http://osvdb.org/64759
CVE ID: CVE-2010-1630 State: PUBLISHED Published: 2010-05-19T22:00:00Z Last Updated: 2024-09-16T20:06:19.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in posting.php in phpBB before 3.0.5 has unknown impact and attack vectors related to the use of a "forum id" in circumstances related to a "global announcement." Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/05/18/12 - http://github.com/phpbb/phpbb3/commit/4ea3402f9363c9259881bc8ea6ce7fc6cb212657 - http://www.openwall.com/lists/oss-security/2010/05/19/5 - http://www.phpbb.com/community/viewtopic.php?f=14&p=9764445 - http://www.openwa
ll.com/lists/oss-security/2010/05/19/5 - http://www.phpbb.com/community/viewtopic.php?f=14&p=9764445 - http://www.openwall.com/lists/oss-security/2010/05/16/1
CVE ID: CVE-2010-1631 State: REJECTED Published: 2017-07-24T16:00:00 Last Updated: 2017-07-24T15:57:01 Description: No description available.
CVE ID: CVE-2010-1632 State: PUBLISHED Published: 2010-06-22T20:24:00 Last Updated: 2024-08-07T01:28:41.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Axis2 before 1.5.2, as used in IBM WebSphere Application Server (WAS) 7.0 through 7.0.0.12, IBM Feature Pack for Web Services 6.1.0.9 through 6.1.0.32, IBM Feature Pack for Web 2.0 1.0.1.0, Apache Synapse, Apache ODE, Apache Tuscany, Apache Geronimo, and other products, does not properly reject DTDs in SOAP messages, which allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via a crafted DTD, as demonstrated by an entity decla
servers, or cause a denial of service (CPU and memory consumption) via a crafted DTD, as demonstrated by an entity declaration in a request to the Synapse SimpleStockQuoteService. Additional Analyst Notes: - CVE Program Container: References: - http://markmail.org/message/e4yiij7lfexastvl - http://geronimo.apache.org/2010/07/21/apache-geronimo-v216-released.html - http://www-1.ibm.com/support/docview.wss?uid=swg1PM14844 - http://www.vupen.com/english/advisories/2010/1528 - http://www-1.ibm.com/support/docview.wss?uid=swg1PM14765 - http://www.vupen.com/english/advisories/2010/1531 - http://www-01.ibm.com/support/docview.wss?uid=swg21433581 - http://www-1.ibm.com/support/docview.wss?uid=swg1PM
0/1531 - http://www-01.ibm.com/support/docview.wss?uid=swg21433581 - http://www-1.ibm.com/support/docview.wss?uid=swg1PM14847 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289984 - http://secunia.com/advisories/41025 - http://geronimo.apache.org/22x-security-report.html - http://www.securitytracker.com/id/1036901 - https://issues.apache.org/jira/browse/AXIS2-4450 - http://secunia.com/advisories/41016 - https://svn.apache.org/repos/asf/axis/axis2/java/core/security/CVE-2010-1632.pdf - http://secunia.com/advisories/40279 - https://issues.apache.org/jira/browse/GERONIMO-5383 - http://secunia.com/advisories/40252 - http://geronimo.apache.org/21x-security-rep
apache.org/jira/browse/GERONIMO-5383 - http://secunia.com/advisories/40252 - http://geronimo.apache.org/21x-security-report.html
CVE ID: CVE-2010-1633 State: PUBLISHED Published: 2010-06-03T14:00:00 Last Updated: 2024-08-07T01:28:42.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: RSA verification recovery in the EVP_PKEY_verify_recover function in OpenSSL 1.x before 1.0.0a, as used by pkeyutl and possibly other applications, returns uninitialized memory upon failure, which might allow context-dependent attackers to bypass intended key requirements or obtain sensitive information via unspecified vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1313 - http://secunia
Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1313 - http://secunia.com/advisories/40024 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564 - http://cvs.openssl.org/filediff?f=openssl/crypto/rsa/rsa_pmeth.c&v1=1.34&v2=1.34.2.1 - http://secunia.com/advisories/57353 - https://bugzilla.redhat.com/show_bug.cgi?id=598732 - http://www.securityfocus.com/bid/40503 - http://cvs.openssl.org/chngview?cn=19693 - http://www.openssl.org/news/secadv_20100601.txt
CVE ID: CVE-2010-1634 State: PUBLISHED Published: 2010-05-27T19:00:00 Last Updated: 2024-08-07T01:28:41.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in audioop.c in the audioop module in Python 2.6, 2.7, 3.1, and 3.2 allow context-dependent attackers to cause a denial of service (application crash) via a large fragment, as demonstrated by a call to audioop.lin2lin with a long string in the first argument, leading to a buffer overflow. NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-3143.5. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.python.org/issue8674 - http://secunia.com/advisories/4306
lyst Notes: - CVE Program Container: References: - http://bugs.python.org/issue8674 - http://secunia.com/advisories/43068 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042751.html - http://secunia.com/advisories/51087 - http://www.vupen.com/english/advisories/2011/0212 - http://www.ubuntu.com/usn/USN-1616-1 - http://secunia.com/advisories/51040 - http://www.vupen.com/english/advisories/2010/1448 - http://secunia.com/advisories/50858 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://www.vupen.com/english/advisories/2011/0122 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - https://bugzilla.redhat.com/show
011/0122 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - https://bugzilla.redhat.com/show_bug.cgi?id=590690 - http://secunia.com/advisories/42888 - http://svn.python.org/view?rev=81045&view=rev - http://secunia.com/advisories/39937 - http://www.ubuntu.com/usn/USN-1596-1 - http://secunia.com/advisories/40194 - http://www.redhat.com/support/errata/RHSA-2011-0027.html - http://www.ubuntu.com/usn/USN-1613-2 - http://support.apple.com/kb/HT5002 - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html - http://www.securityfocus.com/bid/40370 - http://secunia.com/advisories/51024 - http://www.ubuntu.com/usn/USN-1613-1 - http://svn.python.org/view?r
om/bid/40370 - http://secunia.com/advisories/51024 - http://www.ubuntu.com/usn/USN-1613-1 - http://svn.python.org/view?rev=81079&view=rev
CVE ID: CVE-2010-1635 State: PUBLISHED Published: 2010-06-17T16:00:00 Last Updated: 2024-08-07T01:28:43.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: The chain_reply function in process.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) via a Negotiate Protocol request with a certain 0x0003 field value followed by a Session Setup AndX request with a certain 0x8003 field value. Additional Analyst Notes: - CVE Program Container: References: - http://git.samba.org/?p=samba.git%3Ba=commit%3Bh=25452a2268ac7013da28125f3df22085139af12d - http://www.stratsec.net/Research/Advisories
a.org/?p=samba.git%3Ba=commit%3Bh=25452a2268ac7013da28125f3df22085139af12d - http://www.stratsec.net/Research/Advisories/Samba-Multiple-DoS-Vulnerabilities-%28SS-2010-005%29 - http://samba.org/samba/history/samba-3.4.8.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:141 - http://samba.org/samba/history/samba-3.5.2.html - https://bugzilla.redhat.com/show_bug.cgi?id=594921 - https://bugzilla.samba.org/show_bug.cgi?id=7229 - http://www.securityfocus.com/bid/40097 - http://security-tracker.debian.org/tracker/CVE-2010-1635 - http://www.vupen.com/english/advisories/2010/1933
CVE ID: CVE-2010-1636 State: PUBLISHED Published: 2010-06-07T20:00:00Z Last Updated: 2024-08-07T01:28:43.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the btrfs functionality in the Linux kernel 2.6.29 through 2.6.32, and possibly other versions, does not ensure that a cloned file descriptor has been opened for reading, which allows local users to read sensitive information from a write-only file descriptor. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/linux/+bug/579585 - http://www.openwall.com/lists/oss-security/2010/05/18/10 - http://www.openwall.com/lists/
tu/+source/linux/+bug/579585 - http://www.openwall.com/lists/oss-security/2010/05/18/10 - http://www.openwall.com/lists/oss-security/2010/05/18/2 - http://www.openwall.com/lists/oss-security/2010/05/25/8 - https://bugzilla.redhat.com/show_bug.cgi?id=593226 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=5dc6416414fb3ec6e2825fd4d20c8bf1d7fe0395
CVE ID: CVE-2010-1637 State: PUBLISHED Published: 2010-06-22T17:00:00 Last Updated: 2024-08-07T01:28:41.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mail Fetch plugin in SquirrelMail 1.4.20 and earlier allows remote authenticated users to bypass firewall restrictions and use SquirrelMail as a proxy to scan internal networks via a modified POP3 port number. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043261.html - http://www.securityfocus.com/bid/40291 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:120 - http://conference.hitb.org/hitbsecconf2010dxb/materials/D1%20-%2
.mandriva.com/security/advisories?name=MDVSA-2010:120 - http://conference.hitb.org/hitbsecconf2010dxb/materials/D1%20-%20Laurent%20Oudot%20-%20Improving%20the%20Stealthiness%20of%20Web%20Hacking.pdf#page=69 - http://support.apple.com/kb/HT5130 - http://www.securityfocus.com/bid/40307 - http://www.vupen.com/english/advisories/2010/1535 - http://www.vupen.com/english/advisories/2010/1554 - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - http://www.openwall.com/lists/oss-security/2010/05/25/9 - http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/plugins/mail_fetch/functions.php?r1=13951&r2=13950&pathrev=13951 - http://www.op
ail/branches/SM-1_4-STABLE/squirrelmail/plugins/mail_fetch/functions.php?r1=13951&r2=13950&pathrev=13951 - http://www.openwall.com/lists/oss-security/2010/05/25/3 - http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/plugins/mail_fetch/options.php?r1=13951&r2=13950&pathrev=13951 - http://www.vupen.com/english/advisories/2010/1536 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043258.html - http://www.openwall.com/lists/oss-security/2010/06/21/1 - http://rhn.redhat.com/errata/RHSA-2012-0103.html - http://secunia.com/advisories/40307 - http://squirrelmail.org/security/issue/2010-06-21 - http://lists.fedoraproject.org/pipermail/
nia.com/advisories/40307 - http://squirrelmail.org/security/issue/2010-06-21 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043239.html
CVE ID: CVE-2010-1638 State: PUBLISHED Published: 2010-06-22T17:00:00Z Last Updated: 2024-08-07T01:28:41.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IMP plugin in Horde allows remote attackers to bypass firewall restrictions and use Horde as a proxy to scan internal networks via a crafted request to an unspecified test script. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/05/25/2 - http://www.openwall.com/lists/oss-security/2010/05/21/2 - http://conference.hitb.org/hitb
ts/oss-security/2010/05/25/2 - http://www.openwall.com/lists/oss-security/2010/05/21/2 - http://conference.hitb.org/hitbsecconf2010dxb/materials/D1%20-%20Laurent%20Oudot%20-%20Improving%20the%20Stealthiness%20of%20Web%20Hacking.pdf#page=74
CVE ID: CVE-2010-1639 State: PUBLISHED Published: 2010-05-26T18:00:00 Last Updated: 2024-08-07T01:28:41.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cli_pdf function in libclamav/pdf.c in ClamAV before 0.96.1 allows remote attackers to cause a denial of service (crash) via a malformed PDF file, related to an inconsistency in the calculated stream length and the real stream length. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024017 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58824 - http://www.securityfocus.com/bid/40317 - http://secunia.com/advisories/43752 - http://www.vupen.com/english/advisories/2010
p://www.securityfocus.com/bid/40317 - http://secunia.com/advisories/43752 - http://www.vupen.com/english/advisories/2010/1214 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:110 - http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=commitdiff%3Bh=f0eb394501ec21b9fe67f36cbf5db788711d4236#patch2 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055777.html - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://secunia.com/advisories/39895 - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2016 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055771.html