Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Notes: - CVE Program Container: References: - http://secunia.com/advisories/42789 - http://www.vupen.com/english/advisories/2011/0024 - http://www.redhat.com/support/errata/RHSA-2011-0004.html - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://www.ubuntu.com/usn/USN-1041-1 - http://www.openwall.com/lists/oss-security/2010/10/21/1 - http://www.redhat.com/support/errata/RHSA-2010-0958.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1b528181b2ffa14721fb28ad1bd539fe1732c583 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:257 - http://www.exploit-db.com/exploits/15619 - http://www.vmwar
//www.mandriva.com/security/advisories?name=MDVSA-2010:257 - http://www.exploit-db.com/exploits/15619 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://secunia.com/advisories/42758 - http://www.openwall.com/lists/oss-security/2010/10/22/4 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36 - http://www.securityfocus.com/bid/44301 - http://grsecurity.net/~spender/64bit_dos.c - http://www.vupen.com/english/advisories/2011/0070 - https://bugzilla.redhat.com/show_bug.cgi?id=645222 - http://www.debian.org/security/2010/dsa-2126
CVE ID: CVE-2010-3859 State: PUBLISHED Published: 2010-12-29T17:27:00 Last Updated: 2024-08-07T03:26:12.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer signedness errors in the TIPC implementation in the Linux kernel before 2.6.36.2 allow local users to gain privileges via a crafted sendmsg call that triggers a heap-based buffer overflow, related to the tipc_msg_build function in net/tipc/msg.c and the verify_iovec function in net/core/iovec.c. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42789 - http://www.vupen.com/english/advisories/2011/0024 - http://www.redhat.com/support/errata/RHSA-2011-0004.html - http
89 - http://www.vupen.com/english/advisories/2011/0024 - http://www.redhat.com/support/errata/RHSA-2011-0004.html - http://marc.info/?l=linux-netdev&m=128770476511716&w=2 - http://www.spinics.net/lists/netdev/msg145264.html - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://www.spinics.net/lists/netdev/msg145263.html - https://bugzilla.redhat.com/show_bug.cgi?id=645867 - http://www.spinics.net/lists/netdev/msg145247.html - http://www.spinics.net/lists/netdev/msg145352.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2 - http://www.openwall.com/lists/oss-security/2010/10/22/2 - http://secunia.com/advisories/42963 -
.6/ChangeLog-2.6.36.2 - http://www.openwall.com/lists/oss-security/2010/10/22/2 - http://secunia.com/advisories/42963 - http://www.securityfocus.com/bid/44354 - http://www.spinics.net/lists/netdev/msg145262.html - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://www.redhat.com/support/errata/RHSA-2011-0162.html - http://www.spinics.net/lists/netdev/msg145265.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8acfe468b0384e834a303f08ebc4953d72fb690a - http://www.vupen.com/english/advisories/2011/0168 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:029 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=
riva.com/security/advisories?name=MDVSA-2011:029 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=253eacc070b114c2ec1f81b067d2fed7305467b0 - http://www.spinics.net/lists/netdev/msg145248.html - http://www.openwall.com/lists/oss-security/2010/10/22/5 - http://www.debian.org/security/2010/dsa-2126
CVE ID: CVE-2010-3860 State: PUBLISHED Published: 2010-12-08T19:00:00 Last Updated: 2024-08-07T03:26:12.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: IcedTea 1.7.x before 1.7.6, 1.8.x before 1.8.3, and 1.9.x before 1.9.2, as based on OpenJDK 6, declares multiple sensitive variables as public, which allows remote attackers to obtain sensitive information including (1) user.name, (2) user.home, and (3) java.home system properties, and other sensitive information such as installation directories. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201406-32.xml - http://lists.fedoraproject.org/pipermail/package-announce/2010-De
- http://security.gentoo.org/glsa/glsa-201406-32.xml - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051711.html - http://secunia.com/advisories/43085 - http://www.vupen.com/english/advisories/2011/0215 - http://www.ubuntu.com/usn/USN-1024-1 - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html - http://secunia.com/advisories/42412 - http://www.vupen.com/english/advisories/2010/3090 - http://blog.fuseyism.com/index.php/2010/11/24/icedtea6-176-183-and-192-released/ - http://www.vupen.com/english/advisories/2010/3108 - https://bugzilla.redhat.com/show_bug.cgi?id=645843 - http://secunia.com/advisories/42417 - http://www.securityfocus.com/bid/4511
bugzilla.redhat.com/show_bug.cgi?id=645843 - http://secunia.com/advisories/42417 - http://www.securityfocus.com/bid/45114 - http://icedtea.classpath.org/hg/release/icedtea6-1.9/rev/9aa0018d8c28 - http://www.redhat.com/support/errata/RHSA-2011-0176.html
CVE ID: CVE-2010-3861 State: PUBLISHED Published: 2010-12-10T18:00:00 Last Updated: 2024-08-07T03:26:11.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ethtool_get_rxnfc function in net/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize a certain block of heap memory, which allows local users to obtain potentially sensitive information via an ETHTOOL_GRXCLSRLALL ethtool command with a large info.rule_cnt value, a different vulnerability than CVE-2010-2478. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html - http://secunia.com/advisories/42778 - http://openwall.com/l
nsuse.org/opensuse-security-announce/2011-01/msg00004.html - http://secunia.com/advisories/42778 - http://openwall.com/lists/oss-security/2010/10/25/4 - http://secunia.com/advisories/42801 - https://bugzilla.redhat.com/show_bug.cgi?id=646725 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html - http://secunia.com/advisories/42932 - http://www.ubuntu.com/usn/USN-1041-1 - http://www.redhat.com/support/errata/RHSA-2011-0007.html - http://openwall.com/lists/oss-security/2010/10/26/1 - http://www.vupen.com/english/advisories/2011/0124 - http://lists.opensuse.org/opensuse-security-announce/2011-02
/26/1 - http://www.vupen.com/english/advisories/2011/0124 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://www.vupen.com/english/advisories/2011/0298 - http://www.redhat.com/support/errata/RHSA-2010-0958.html - http://secunia.com/advisories/42758 - http://secunia.com/advisories/42890 - http://www.vupen.com/english/advisories/2011/0012 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ae6df5f96a51818d6376da5307d773baeece4014 - http://www.vupen.com/english/advisories/2011/0070 - http://www.securityfocus.com/bid/44427
CVE ID: CVE-2010-3862 State: PUBLISHED Published: 2010-12-30T20:00:00Z Last Updated: 2024-08-07T03:26:11.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 through 4.3.0.CP09, and 5.1.0; and JBoss Enterprise Web Platform (aka JBEWP) 5.1.0; allows remote attackers to cause a denial of service (daemon outage) by establishing a bisocket control connection TCP session, and then not sending any application data. Additional Analyst Notes: -
ishing a bisocket control connection TCP session, and then not sending any application data. Additional Analyst Notes: - CVE Program Container: References: - https://issues.jboss.org/browse/JBPAPP-5253 - http://www.redhat.com/support/errata/RHSA-2010-0938.html - https://bugzilla.redhat.com/show_bug.cgi?id=641389 - http://www.redhat.com/support/errata/RHSA-2010-0960.html - http://www.redhat.com/support/errata/RHSA-2010-0959.html - https://issues.jboss.org/browse/JBREM-1261 - http://www.redhat.com/support/errata/RHSA-2010-0937.html - http://www.redhat.com/support/errata/RHSA-2010-0961.html - http://www.redhat.com/support/errata/RHSA-2010-0962.html - http://www.redhat.com/support/errata/RHSA-20
2010-0961.html - http://www.redhat.com/support/errata/RHSA-2010-0962.html - http://www.redhat.com/support/errata/RHSA-2010-0939.html - http://www.redhat.com/support/errata/RHSA-2010-0963.html - http://securitytracker.com/id?1024813
CVE ID: CVE-2010-3863 State: PUBLISHED Published: 2010-11-05T16:28:00 Last Updated: 2024-08-07T03:26:11.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Shiro before 1.1.0, and JSecurity 0.9.x, does not canonicalize URI paths before comparing them to entries in the shiro.ini file, which allows remote attackers to bypass intended access restrictions via a crafted request, as demonstrated by the /./account/index.jsp URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44616 - http://secunia.com/advisories/41989 - http://osvdb.org/69067 - http://www.securityfocus.com/archive/1/514616/100/0/threaded - http://archives.neohaps
/41989 - http://osvdb.org/69067 - http://www.securityfocus.com/archive/1/514616/100/0/threaded - http://archives.neohapsis.com/archives/fulldisclosure/2010-11/0020.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/62959 - http://www.vupen.com/english/advisories/2010/2888
CVE ID: CVE-2010-3864 State: PUBLISHED Published: 2010-11-17T15:00:00 Last Updated: 2024-08-07T03:26:11.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, might allow remote attackers to execute arbitrary code via client data that triggers a heap-based buffer overflow, related to (1) the TLS server name extension and (2) elliptic curve cryptography. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051170.html - http://marc.info/?l
References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051170.html - http://marc.info/?l=bugtraq&m=132828103218869&w=2 - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.668793 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564 - http://www.vupen.com/english/advisories/2010/3041 - http://support.apple.com/kb/HT4723 - http://marc.info/?l=bugtraq&m=132828103218869&w=2 - http://securitytracker.com/id?1024743 - http://blogs.sun.com/security/entry/cve_2010_3864_race_condition - http://secunia.com/advisories/42413 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051255.html - http://openssl.
advisories/42413 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051255.html - http://openssl.org/news/secadv_20101116.txt - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.html - https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051237.html - http://www.kb.cert.org/vuls/id/737740 - https://rhn.redhat.com/errata/RHSA-2010-0888.html - http://secunia.com/advisories/42397 - http://marc.info/?l=bugtraq&m=130497251507577&w=2 - http://secunia.com/advisories/42241 - https://
om/advisories/42397 - http://marc.info/?l=bugtraq&m=130497251507577&w=2 - http://secunia.com/advisories/42241 - https://bugzilla.redhat.com/show_bug.cgi?id=649304 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777 - http://marc.info/?l=bugtraq&m=129916880600544&w=2 - http://secunia.com/advisories/57353 - https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html - http://www.vupen.com/english/advisories/2010/3097 - http://www.adobe.com/support/security/bulletins/apsb11-11.html - http://secunia.com/advisories/42336 - http://secunia.com/advisories/42309 - http
ort/security/bulletins/apsb11-11.html - http://secunia.com/advisories/42336 - http://secunia.com/advisories/42309 - http://www.vupen.com/english/advisories/2010/3077 - http://security.FreeBSD.org/advisories/FreeBSD-SA-10:10.openssl.asc - http://secunia.com/advisories/44269 - http://secunia.com/advisories/43312 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://secunia.com/advisories/42243 - http://marc.info/?l=bugtraq&m=130497251507577&w=2 - http://www.vupen.com/english/advisories/2010/3121 - http://marc.info/?l=bugtraq&m=129916880600544&w=2 - http://secunia.com/advisories/42352 - http://www.securityfocus.com/archive/1/516397/100/0/threaded - http://www.debian.org/secur
ecunia.com/advisories/42352 - http://www.securityfocus.com/archive/1/516397/100/0/threaded - http://www.debian.org/security/2010/dsa-2125
CVE ID: CVE-2010-3865 State: PUBLISHED Published: 2011-01-11T01:00:00 Last Updated: 2024-08-07T03:26:12.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the rds_rdma_pages function in net/rds/rdma.c in the Linux kernel allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted iovec struct in a Reliable Datagram Sockets (RDS) request, which triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42789 - http://www.vupen.com/english/advisories/2011/0024 - http://secunia.com/advisories/42778 - http://www.redhat.com/support/errata/RHSA-2011-0004.ht
lish/advisories/2011/0024 - http://secunia.com/advisories/42778 - http://www.redhat.com/support/errata/RHSA-2011-0004.html - http://secunia.com/advisories/42801 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html - http://www.openwall.com/lists/oss-security/2010/11/01/1 - http://www.spinics.net/lists/netdev/msg145359.html - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html - http://www.redhat.com/support/errata/RHSA-2011-0007.html - http://www.securityfocus.com/bid/44549 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.h
.html - http://www.securityfocus.com/bid/44549 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://www.vupen.com/english/advisories/2011/0298 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00004.html - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://secunia.com/advisories/42890 - http://www.vupen.com/english/advisories/2011/0012 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62881 - http://www.openwall.com/lists/oss-security/2010/10/29/1 - http://www.spinics.net/lists/netdev/msg145397.html
CVE ID: CVE-2010-3866 State: REJECTED Published: 2010-11-07T21:00:00Z Last Updated: 2024-09-16T16:53:04.644Z Description: No description available.
CVE ID: CVE-2010-3867 State: PUBLISHED Published: 2010-11-09T20:00:00 Last Updated: 2024-08-07T03:26:11.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in the mod_site_misc module in ProFTPD before 1.3.3c allow remote authenticated users to create directories, delete directories, create symlinks, and modify file timestamps via directory traversal sequences in a (1) SITE MKDIR, (2) SITE RMDIR, (3) SITE SYMLINK, or (4) SITE UTIME command. Additional Analyst Notes: - CVE Program Container: References: - http://www.proftpd.org/docs/NEWS-1.3.3c - http://secunia.com/advisories/42047 - http://www.debian.org/security/2011/dsa-2191 - http:/
oftpd.org/docs/NEWS-1.3.3c - http://secunia.com/advisories/42047 - http://www.debian.org/security/2011/dsa-2191 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050687.html - http://bugs.proftpd.org/show_bug.cgi?id=3519 - http://secunia.com/advisories/42217 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050703.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050726.html - http://www.vupen.com/english/advisories/2010/2941 - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.498209 - http://www.openwall.com/lists/oss-security/2010/11/01/4 - http://www.vupen.com/english/advis
slackware-security.498209 - http://www.openwall.com/lists/oss-security/2010/11/01/4 - http://www.vupen.com/english/advisories/2010/2853 - http://www.vupen.com/english/advisories/2010/2962 - http://secunia.com/advisories/42052 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:227 - http://www.securityfocus.com/bid/44562 - http://www.vupen.com/english/advisories/2010/2959
CVE ID: CVE-2010-3868 State: PUBLISHED Published: 2010-11-17T15:00:00Z Last Updated: 2024-08-07T03:26:12.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System do not require authentication for requests to decrypt SCEP one-time PINs, which allows remote attackers to obtain PINs by sniffing the network for SCEP requests and then sending decryption requests to the Certificate Authority component. Additional Analyst Notes: - CVE Program Container: References: - https://rhn.redhat.com/errata/RHSA-2010-0837.html - http://www.osvdb.org/69149 - https://bugzilla.redhat.com/show_bug.cgi?id=648882 - https://rhn.redhat.c
-2010-0837.html - http://www.osvdb.org/69149 - https://bugzilla.redhat.com/show_bug.cgi?id=648882 - https://rhn.redhat.com/errata/RHSA-2010-0838.html - http://securitytracker.com/id?1024697 - https://fedorahosted.org/pki/changeset/1261 - http://secunia.com/advisories/42181
CVE ID: CVE-2010-3869 State: PUBLISHED Published: 2010-11-17T15:00:00Z Last Updated: 2024-08-07T03:26:12.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System allow remote authenticated users to generate an arbitrary number of certificates by replaying a single SCEP one-time PIN. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=648883 - https://rhn.redhat.com/errata/RHSA-2010-0837.html - https://fedorahosted.org/pki/changeset/1246 - https://rhn.redhat.com/errata/RHSA-2010-0838.html - http://securitytracker.com/id?1024697 - http://www.osvdb.org/69148
https://rhn.redhat.com/errata/RHSA-2010-0838.html - http://securitytracker.com/id?1024697 - http://www.osvdb.org/69148 - http://secunia.com/advisories/42181
CVE ID: CVE-2010-3870 State: PUBLISHED Published: 2010-11-12T20:00:00 Last Updated: 2024-08-07T03:26:11.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: The utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8 data, which makes it easier for remote attackers to bypass cross-site scripting (XSS) and SQL injection protection mechanisms via a crafted string. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/11/02/11 - http://www.vupen.com/english/advisories/2011/0077 - http://lists.fedoraproject.org/pipermail/package-announce/2011-Janua
http://www.vupen.com/english/advisories/2011/0077 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052836.html - http://secunia.com/advisories/42812 - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://www.openwall.com/lists/oss-security/2010/11/02/2 - http://www.redhat.com/support/errata/RHSA-2011-0195.html - http://www.openwall.com/lists/oss-security/2010/11/02/4 - http://www.securitytracker.com/id?1024797 - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html - http://bugs.php.net/bug.php?id=49687 - http://www.blackhat.com/presentations/bh-usa-09/VELANAVA/BHUSA09-VelaNava-FavoriteXSS-SLIDES.pdf - http://lists.apple.com/archives/securit
t.com/presentations/bh-usa-09/VELANAVA/BHUSA09-VelaNava-FavoriteXSS-SLIDES.pdf - http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html - http://www.ubuntu.com/usn/USN-1042-1 - http://www.openwall.com/lists/oss-security/2010/11/02/6 - http://www.redhat.com/support/errata/RHSA-2010-0919.html - http://bugs.php.net/bug.php?id=48230 - http://www.vupen.com/english/advisories/2011/0021 - http://www.php.net/ChangeLog-5.php - http://sirdarckcat.blogspot.com/2009/10/couple-of-unicode-issues-on-php-and.html - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://www.openwall.com/lists/oss-security/2010/11/02/1 - http://secunia.com/advisories/42410 - http://www.mandriva.com/en/se
//www.openwall.com/lists/oss-security/2010/11/02/1 - http://secunia.com/advisories/42410 - http://www.mandriva.com/en/security/advisories?name=MDVSA-2010:224 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052845.html - http://www.openwall.com/lists/oss-security/2010/11/03/1 - http://svn.php.net/viewvc?view=revision&revision=304959 - http://www.vupen.com/english/advisories/2011/0020 - http://www.openwall.com/lists/oss-security/2010/11/02/8 - http://www.securityfocus.com/bid/44605 - http://us2.php.net/manual/en/function.utf8-decode.php#83935 - http://www.acunetix.com/blog/web-security-articles/security-risks-associated-with-utf8_decode/ - http://www.vupen.com/english/
/www.acunetix.com/blog/web-security-articles/security-risks-associated-with-utf8_decode/ - http://www.vupen.com/english/advisories/2010/3081 - http://support.apple.com/kb/HT4581
CVE ID: CVE-2010-3871 State: PUBLISHED Published: 2010-11-09T20:00:00 Last Updated: 2024-08-07T03:26:11.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in blocktype/groupviews/theme/raw/groupviews.tpl in Mahara before 1.3.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/63052 - http://wiki.mahara.org/Release_Notes/1.3.3 - http://secunia.com/advisories/42152 - http://www.securityfocus.com/bid/44705
CVE ID: CVE-2010-3872 State: PUBLISHED Published: 2010-11-20T20:00:00 Last Updated: 2024-08-07T03:26:12.242Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a, Red Hat, Fedora Products: mod_fcgid, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora Problem Types: CWE-121 Description: A flaw was found in the mod_fcgid module of httpd. A malformed FastCGI response may result in a stack-based buffer overflow in the modules/fcgid/fcgid_bucket.c file in the fcgid_header_bucket_read() function, resulting in an application crash. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pi