Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-4628 State: PUBLISHED Published: 2010-12-30T20:00:00 Last Updated: 2024-08-07T03:51:17.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: member.php in MyBB (aka MyBulletinBoard) before 1.4.12 makes a certain superfluous call to the SQL COUNT function, which allows remote attackers to cause a denial of service (resource consumption) by making requests to member.php that trigger scans of the entire users table. Additional Analyst Notes: - CVE Program Container: References: - http://blog.mybb.com/2010/04/13/mybb-1-4-12-released-security-maintenance-update/ - http://openwall.com/lists/oss-security/2010/10/08/7 - http://openwall.com/lists/oss-security/2010/10/11/8 -
ce-update/ - http://openwall.com/lists/oss-security/2010/10/08/7 - http://openwall.com/lists/oss-security/2010/10/11/8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64514 - http://openwall.com/lists/oss-security/2010/12/06/2 - http://dev.mybboard.net/issues/662
CVE ID: CVE-2010-4629 State: PUBLISHED Published: 2010-12-30T20:00:00 Last Updated: 2024-08-07T03:51:17.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyBB (aka MyBulletinBoard) before 1.4.12 does not properly restrict uid values for group join requests, which allows remote attackers to cause a denial of service (resource consumption) by using guest access to submit join request forms for moderated groups, related to usercp.php and managegroup.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64513 - http://blog.mybb.com/2010/04/13/mybb-1-4-12-released-security-maintenance-update/ - http://openwall.com/
ilities/64513 - http://blog.mybb.com/2010/04/13/mybb-1-4-12-released-security-maintenance-update/ - http://openwall.com/lists/oss-security/2010/10/08/7 - http://dev.mybboard.net/projects/mybb/repository/revisions/4856 - http://openwall.com/lists/oss-security/2010/10/11/8 - http://dev.mybboard.net/issues/722 - http://openwall.com/lists/oss-security/2010/12/06/2
CVE ID: CVE-2010-4630 State: PUBLISHED Published: 2010-12-30T20:00:00 Last Updated: 2024-08-07T03:51:17.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in pages/admin/surveys/create.php in the WP Survey And Quiz Tool plugin 1.2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.johnleitch.net/Vulnerabilities/WordPress.Survery.And.Quiz.Tool.1.2.1.Reflected.Cross-site.Scripting/57 - http://secunia.com/advisories/42196 - http://osvdb.org/69074 - http://packetstormsecurity.org/1011-exploits/wpsurvey-xss.txt - ht
cunia.com/advisories/42196 - http://osvdb.org/69074 - http://packetstormsecurity.org/1011-exploits/wpsurvey-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/63056
CVE ID: CVE-2010-4631 State: PUBLISHED Published: 2010-12-30T20:00:00 Last Updated: 2024-08-07T03:51:17.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) countrycode parameter to contact.asp, USERNAME parameter to (2) gateway.asp and (3) cart.asp, and the specific parameter to (4) quote.asp and (5) buyitnow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30176 - http://packetstormsecurity.org/1011-exploits/aspilotpilotcart-sqlxssinject.txt - https://exchange.xforce.ibmcloud.com/vul
ttp://packetstormsecurity.org/1011-exploits/aspilotpilotcart-sqlxssinject.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/63053 - http://advisories.ariko-security.com/november/audyt_bezpieczenstwa_745.html - http://www.exploit-db.com/exploits/15448 - http://www.securityfocus.com/bid/44698 - http://marc.info/?l=full-disclosure&m=128913521908405&w=2
CVE ID: CVE-2010-4632 State: PUBLISHED Published: 2010-12-30T20:00:00Z Last Updated: 2024-09-17T01:01:46.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to execute arbitrary SQL commands via the (1) article parameter to kb.asp, (2) specific parameter to cart.asp, (3) countrycode parameter to contact.asp, and the (4) srch parameter to search.asp. NOTE: the article parameter to pilot.asp is already covered by CVE-2008-2688. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30176 - http://packetstormsecurity.org/1011-exploits/aspilotpilotcart-sqlxs
References: - http://secunia.com/advisories/30176 - http://packetstormsecurity.org/1011-exploits/aspilotpilotcart-sqlxssinject.txt - http://advisories.ariko-security.com/november/audyt_bezpieczenstwa_745.html - http://www.exploit-db.com/exploits/15448 - http://www.securityfocus.com/bid/44698 - http://marc.info/?l=full-disclosure&m=128913521908405&w=2
CVE ID: CVE-2010-4633 State: PUBLISHED Published: 2010-12-30T20:00:00 Last Updated: 2024-08-07T03:51:17.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in cart.php in digiSHOP 2.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vulnerability than CVE-2005-4614.1. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1011-exploits/digishop-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/62964 - http://www.securityfocus.com/bid/44614 - http://www.exploit-db.com/exploits/15405
CVE ID: CVE-2010-4634 State: PUBLISHED Published: 2010-12-30T20:00:00Z Last Updated: 2024-09-17T03:34:02.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in osTicket 1.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to module.php, a different vector than CVE-2005-1439. NOTE: this issue has been disputed by a reliable third party Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1011-exploits/osticket-lfi.txt - http://www.attrition.org/pipermail/vim/2010-November/002468.html - http://www.securityfocus.com/bid/44739 - http://www.attrition.org/pipermail/vim/2
ermail/vim/2010-November/002468.html - http://www.securityfocus.com/bid/44739 - http://www.attrition.org/pipermail/vim/2010-November/002469.html - http://www.exploit-db.com/exploits/15471
CVE ID: CVE-2010-4635 State: PUBLISHED Published: 2010-12-30T20:00:00 Last Updated: 2024-08-07T03:51:18.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in detail.asp in Site2Nite Vacation Rental (VRBO) Listings allows remote attackers to execute arbitrary SQL commands via the ID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/62956 - http://packetstormsecurity.org/1011-exploits/site2nitevr-sql.txt - http://www.exploit-db.com/exploits/15395 - http://secunia.com/advisories/42087 - http://osvdb.org/68983 - http://www.securityfocus.com/bid/44619
CVE ID: CVE-2010-4636 State: PUBLISHED Published: 2010-12-30T20:00:00 Last Updated: 2024-08-07T03:51:17.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in detail.asp in Site2Nite Business e-Listings allows remote attackers to execute arbitrary SQL commands via the ID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/62957 - http://www.exploit-db.com/exploits/15399 - http://secunia.com/advisories/42086 - http://osvdb.org/68984 - http://www.securityfocus.com/bid/44619
CVE ID: CVE-2010-4637 State: PUBLISHED Published: 2010-12-30T20:00:00 Last Updated: 2024-08-07T03:51:17.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in feedlist/handler_image.php in the FeedList plugin 2.61.01 for WordPress allows remote attackers to inject arbitrary web script or HTML via the i parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42197 - http://packetstormsecurity.org/1011-exploits/wpfeedlist-xss.txt - http://www.johnleitch.net/Vulnerabilities/WordPress.Feed.List.2.61.01.Reflected.Cross-site.Scripting/56 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6305
ordPress.Feed.List.2.61.01.Reflected.Cross-site.Scripting/56 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63055 - http://osvdb.org/69071
CVE ID: CVE-2010-4638 State: PUBLISHED Published: 2010-12-30T20:00:00Z Last Updated: 2024-09-16T17:23:03.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the submitSurvey function in controller.php in JQuarks4s (com_jquarks4s) component 1.0.0 for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the q parameter in a submitSurvey action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42164 - http://www.exploit-db.com/exploits/15466 - http://adv.salvatorefresta.net/JQuarks4s_Joomla_Component_1.0.0_Blind_SQL_Injection_Vulnerability-08
om/exploits/15466 - http://adv.salvatorefresta.net/JQuarks4s_Joomla_Component_1.0.0_Blind_SQL_Injection_Vulnerability-08112010.txt
CVE ID: CVE-2010-4639 State: PUBLISHED Published: 2010-12-30T20:00:00 Last Updated: 2024-08-07T03:51:17.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in MySource Matrix allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15402 - http://www.securityfocus.com/bid/44612 - http://packetstormsecurity.org/1011-exploits/mysourcematrix-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/62961
CVE ID: CVE-2010-4640 State: PUBLISHED Published: 2010-12-30T20:00:00 Last Updated: 2024-08-07T03:51:17.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in XWiki Watch 1.0 allow remote attackers to inject arbitrary web script or HTML via the rev parameter to (1) bin/viewrev/Main/WebHome and (2) bin/view/Blog, and the (3) register_first_name and (4) register_last_name parameters to bin/register/XWiki/Register. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vul
y information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/62940 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62941 - http://www.osvdb.org/68974 - http://www.osvdb.org/68975 - http://secunia.com/advisories/42090 - http://www.securityfocus.com/bid/44606 - http://www.osvdb.org/68973
CVE ID: CVE-2010-4641 State: PUBLISHED Published: 2010-12-30T20:00:00 Last Updated: 2024-08-07T03:51:17.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in XWiki Enterprise before 2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42058 - http://www.xwiki.org/xwiki/bin/view/ReleaseNotes/ReleaseNotesXWikiEnterprise25 - http://www.osvdb.org/68976 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62943 - http://www.securityfocus.com/bid/44601
CVE ID: CVE-2010-4642 State: PUBLISHED Published: 2010-12-30T20:00:00 Last Updated: 2024-08-07T03:51:18.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in XWiki Enterprise before 2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42058 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62942 - http://www.osvdb.org/68977 - http://www.xwiki.org/xwiki/bin/view/ReleaseNotes/ReleaseNotesXWikiEnterprise25 - http://www.securityfocus.com/bid/44601
CVE ID: CVE-2010-4643 State: PUBLISHED Published: 2011-01-28T21:13:00 Last Updated: 2024-08-07T03:51:17.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Truevision TGA (TARGA) file in an ODF or Microsoft Office document. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40775 - http://www.securityfocus.com/bid/46031 - http://www.debian.org/security/2011/dsa-2151 - http://secunia.com/advisories/60799 - http://www.oracle.com/techne
6031 - http://www.debian.org/security/2011/dsa-2151 - http://secunia.com/advisories/60799 - http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html - http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml - http://secunia.com/advisories/43118 - http://secunia.com/advisories/43065 - http://www.vupen.com/english/advisories/2011/0230 - http://www.securitytracker.com/id?1025002 - http://www.vupen.com/english/advisories/2011/0232 - http://osvdb.org/70718 - http://www.redhat.com/support/errata/RHSA-2011-0182.html - https://bugzilla.redhat.com/show_bug.cgi?id=667588 - http://ubuntu.com/usn/usn-1056-1 - http://www.redhat.com/support/errata/RHSA-2011-0181.html - http://www.vupen.c
67588 - http://ubuntu.com/usn/usn-1056-1 - http://www.redhat.com/support/errata/RHSA-2011-0181.html - http://www.vupen.com/english/advisories/2011/0279 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65441 - http://secunia.com/advisories/43105 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:027 - http://secunia.com/advisories/42999 - http://www.openoffice.org/security/cves/CVE-2010-4643.html
CVE ID: CVE-2010-4644 State: PUBLISHED Published: 2011-01-07T18:00:00 Last Updated: 2024-08-07T03:51:17.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/01/04/8 - http://www.vupen.com/english/advisories/2011/0103 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64473 - http://secunia.com/advisories/42969 - http://svn.haxx.se/dev/archive-2010-11/0102.shtml -
ud.com/vulnerabilities/64473 - http://secunia.com/advisories/42969 - http://svn.haxx.se/dev/archive-2010-11/0102.shtml - http://www.vupen.com/english/advisories/2011/0264 - http://svn.apache.org/viewvc?view=revision&revision=1032808 - http://secunia.com/advisories/42780 - http://svn.apache.org/repos/asf/subversion/tags/1.6.15/CHANGES - http://openwall.com/lists/oss-security/2011/01/05/4 - http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html - http://secunia.com/advisories/43346 - http://secunia.com/advisories/43115 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053230.html - http://www.vupen.com/english/advisories/2011/0015 - http://openwall.co
rmail/package-announce/2011-January/053230.html - http://www.vupen.com/english/advisories/2011/0015 - http://openwall.com/lists/oss-security/2011/01/02/1 - http://mail-archives.apache.org/mod_mbox/www-announce/201011.mbox/%3CAANLkTi=5+NOi-Cp=fKCx6mAW-TofFVW=ikEQkXgQB8Bt%40mail.gmail.com%3E - http://www.redhat.com/support/errata/RHSA-2011-0258.html - http://www.redhat.com/support/errata/RHSA-2011-0257.html - http://mail-archives.apache.org/mod_mbox/subversion-users/201011.mbox/%3C4CD33B61.7030203%40thepond.com%3E - http://www.mandriva.com/security/advisories?name=MDVSA-2011:006 - http://openwall.com/lists/oss-security/2011/01/04/10 - http://www.ubuntu.com/usn/USN-1053-1 - http://www.securityf
006 - http://openwall.com/lists/oss-security/2011/01/04/10 - http://www.ubuntu.com/usn/USN-1053-1 - http://www.securityfocus.com/bid/45655 - http://secunia.com/advisories/43139 - http://www.securitytracker.com/id?1024935 - http://www.vupen.com/english/advisories/2011/0162
CVE ID: CVE-2010-4645 State: PUBLISHED Published: 2011-01-11T01:00:00.000Z Last Updated: 2025-02-13T16:27:09.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: strtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service (infinite loop) via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU registers, as demonstrated using 2.2250738585072011e-308. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0077 - http://www.securityfocus.com/bid/45668 - http://marc.info/?
ences: - http://www.vupen.com/english/advisories/2011/0077 - http://www.securityfocus.com/bid/45668 - http://marc.info/?l=bugtraq&m=133226187115472&w=2 - http://secunia.com/advisories/42812 - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://www.redhat.com/support/errata/RHSA-2011-0196.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053355.html - http://www.openwall.com/lists/oss-security/2011/01/05/8 - http://www.redhat.com/support/errata/RHSA-2011-0195.html - http://bugs.php.net/53632 - http://hal.archives-ouvertes.fr/docs/00/28/14/29/PDF/floating-point-article.pdf - http://www.exploringbinary.com/php-hangs-on-numeric-value-2-2250738585072011e-308/ -
9/PDF/floating-point-article.pdf - http://www.exploringbinary.com/php-hangs-on-numeric-value-2-2250738585072011e-308/ - http://www.vupen.com/english/advisories/2011/0198 - http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.484686 - http://www.vupen.com/english/advisories/2011/0066 - http://www.ubuntu.com/usn/USN-1042-1 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053333.html - http://secunia.com/advisories/42843 - http://www.vupen.com/english/advisories/2011/0060 - http://support.apple.com/kb/HT5002 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
m/english/advisories/2011/0060 - http://support.apple.com/kb/HT5002 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64470 - http://secunia.com/advisories/43189 - http://secunia.com/advisories/43051 - http://www.openwall.com/lists/oss-security/2011/01/05/2 - http://svn.php.net/viewvc/php/php-src/branches/PHP_5_2/Zend/zend_strtod.c?r1=266327&r2=307095&pathrev=307095 - http://www.openwall.com/lists/oss-security/2011/01/06/5 - http://www.openwall.com/lists/oss-security/2023/05/14/3
CVE ID: CVE-2010-4646 State: PUBLISHED Published: 2011-01-18T17:00:00 Last Updated: 2024-08-07T03:51:17.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Hastymail2 before 1.01 allows remote attackers to inject arbitrary web script or HTML via a crafted background attribute within a cell in a TABLE element, related to improper use of the htmLawed filter. Additional Analyst Notes: - CVE Program Container: References: - http://www.hastymail.org/security/ - http://openwall.com/lists/oss-security/2011/01/06/14 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64962 - http://openwall.com/lists/oss-security/2011/01/05/3 - http://www.se
exchange.xforce.ibmcloud.com/vulnerabilities/64962 - http://openwall.com/lists/oss-security/2011/01/05/3 - http://www.securityfocus.com/bid/43681
CVE ID: CVE-2010-4647 State: PUBLISHED Published: 2011-01-13T18:35:00 Last Updated: 2024-08-07T03:51:17.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) help/index.jsp or (2) help/advanced/content.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/01/06/16 - http://www.redhat.com/support/errata/RHSA-2011-0568.html - http://openwall.com/lists/oss-security/2011/01/06/7 - http://lists.fedorapr
hat.com/support/errata/RHSA-2011-0568.html - http://openwall.com/lists/oss-security/2011/01/06/7 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052532.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:032 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052554.html - http://yehg.net/lab/pr0js/advisories/eclipse/%5Beclipse_help_server%5D_cross_site_scripting - https://exchange.xforce.ibmcloud.com/vulnerabilities/64833 - https://bugs.eclipse.org/bugs/show_bug.cgi?id=329582
CVE ID: CVE-2010-4648 State: PUBLISHED Published: 2012-06-21T23:00:00Z Last Updated: 2024-08-07T03:51:17.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: The orinoco_ioctl_set_auth function in drivers/net/wireless/orinoco/wext.c in the Linux kernel before 2.6.37 does not properly implement a TKIP protection mechanism, which makes it easier for remote attackers to obtain access to a Wi-Fi network by reading Wi-Fi frames. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/01/06/18 - https://bugzilla.redhat.com/show_bug.cgi?id=667907 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37 - http://git.kernel.org
redhat.com/show_bug.cgi?id=667907 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0a54917c3fc295cb61f3fb52373c173fd3b69f48 - https://github.com/torvalds/linux/commit/0a54917c3fc295cb61f3fb52373c173fd3b69f48
CVE ID: CVE-2010-4649 State: PUBLISHED Published: 2011-02-18T19:00:00 Last Updated: 2024-08-07T03:51:17.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large value of a certain structure member. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46073 - http://rhn.redhat.com/errata/RHSA-2011-0927.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7182afea8d1
errata/RHSA-2011-0927.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7182afea8d1afd432a17c18162cc3fd441d0da93 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37 - https://bugzilla.redhat.com/show_bug.cgi?id=667916
CVE ID: CVE-2010-4650 State: PUBLISHED Published: 2012-06-21T23:00:00Z Last Updated: 2024-08-07T03:51:17.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the fuse_do_ioctl function in fs/fuse/file.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service or possibly have unspecified other impact by leveraging the ability to operate a CUSE server. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/01/06/18 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37 - https://github.com/torvalds/linux/commit/7572777eef78ebdee1ecb7c258c0ef94d35bad16 - http://git.kernel.or
ngeLog-2.6.37 - https://github.com/torvalds/linux/commit/7572777eef78ebdee1ecb7c258c0ef94d35bad16 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7572777eef78ebdee1ecb7c258c0ef94d35bad16 - https://bugzilla.redhat.com/show_bug.cgi?id=667892