Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-3037 State: PUBLISHED Published: 2010-11-22T19:00:00 Last Updated: 2024-08-07T02:55:46.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: goform/websXMLAdminRequestCgi.cgi in Cisco Unified Videoconferencing (UVC) System 5110 and 5115, and possibly Unified Videoconferencing System 3545 and 5230, Unified Videoconferencing 3527 Primary Rate Interface (PRI) Gateway, Unified Videoconferencing 3522 Basic Rate Interfaces (BRI) Gateway, and Unified Videoconferencing 3515 Multipoint Control Unit (MCU), allows remote authenticated administrators to execute arbitrary commands via the username field, related to a "shell command injection vulnerability," aka Bug ID CSCti5405
te arbitrary commands via the username field, related to a "shell command injection vulnerability," aka Bug ID CSCti54059. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44922 - http://www.trustmatta.com/advisories/MATTA-2010-001.txt - http://www.cisco.com/en/US/products/products_security_response09186a0080b56d0d.html - http://www.securitytracker.com/id?1024753 - http://seclists.org/fulldisclosure/2010/Nov/167
CVE ID: CVE-2010-3038 State: PUBLISHED Published: 2010-11-22T19:00:00 Last Updated: 2024-08-07T02:55:46.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is used, has a default password for the (1) root, (2) cs, and (3) develop accounts, which makes it easier for remote attackers to obtain access via the (a) FTP or (b) SSH daemon, aka Bug ID CSCti54008. Additional Analyst Notes: - CVE Program Container: References: - http://www.trustmatta.com/advisories/MATTA-2010-001.txt - http://www.cisco.com/en/US/products/products_security_response09186a0080b56d0d.html - http://www.securitytracker.co
xt - http://www.cisco.com/en/US/products/products_security_response09186a0080b56d0d.html - http://www.securitytracker.com/id?1024753 - http://www.securityfocus.com/bid/44924 - http://seclists.org/fulldisclosure/2010/Nov/167
CVE ID: CVE-2010-3039 State: PUBLISHED Published: 2010-11-09T20:00:00 Last Updated: 2024-08-07T02:55:46.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: /usr/local/cm/bin/pktCap_protectData in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6, 7, and 8 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in a request to the administrative interface, aka Bug IDs CSCti52041 and CSCti74930. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=21656 - http://www.securityfocus.com/bid/44672 - http://www.securityfocus.com/archive/1/514668/100/0/th
wAlert.x?alertId=21656 - http://www.securityfocus.com/bid/44672 - http://www.securityfocus.com/archive/1/514668/100/0/threaded - http://www.securitytracker.com/id?1024694 - http://www.nsense.fi/advisories/nsense_2010_003.txt - http://secunia.com/advisories/42129 - http://seclists.org/fulldisclosure/2010/Nov/40 - http://www.vupen.com/english/advisories/2010/2915
CVE ID: CVE-2010-3040 State: PUBLISHED Published: 2010-11-09T20:00:00Z Last Updated: 2024-09-16T17:18:09.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in agent.exe in Setup Manager in Cisco Intelligent Contact Manager (ICM) before 7.0 allow remote attackers to execute arbitrary code via a long parameter in a (1) HandleUpgradeAll, (2) AgentUpgrade, (3) HandleQueryNodeInfoReq, or (4) HandleUpgradeTrace TCP packet, aka Bug IDs CSCti45698, CSCti45715, CSCti45726, and CSCti46164. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-10-233/ - http://www.zerodayinitiative.com/advisori
ainer: References: - http://www.zerodayinitiative.com/advisories/ZDI-10-233/ - http://www.zerodayinitiative.com/advisories/ZDI-10-234/ - http://securitytracker.com/id?1024693 - http://tools.cisco.com/security/center/viewAlert.x?alertId=21726 - http://www.zerodayinitiative.com/advisories/ZDI-10-232/ - http://www.vupen.com/english/advisories/2010/2914 - http://secunia.com/advisories/42146 - http://www.securityfocus.com/bid/44699 - http://www.zerodayinitiative.com/advisories/ZDI-10-235/
CVE ID: CVE-2010-3041 State: PUBLISHED Published: 2011-02-02T22:00:00 Last Updated: 2024-08-07T02:55:46.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted (1) .wrf or (2) .arf file, related to atas32.dll, a different vulnerability than CVE-2010-3042, CVE-2010-3043, and CVE-2010-3044. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_adviso
ional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6913f.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/65072 - http://www.fortiguard.com/advisory/FGA-2011-03.html - http://tools.cisco.com/security/center/viewAlert.x?alertId=22016 - http://www.securityfocus.com/bid/46075 - http://securitytracker.com/id?1025016
CVE ID: CVE-2010-3042 State: PUBLISHED Published: 2011-02-02T22:00:00 Last Updated: 2024-08-07T02:55:46.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted (1) .wrf or (2) .arf file, a different vulnerability than CVE-2010-3041, CVE-2010-3043, and CVE-2010-3044. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6913f.shtm
CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6913f.shtml - http://tools.cisco.com/security/center/viewAlert.x?alertId=22016 - http://www.securityfocus.com/bid/46075 - http://securitytracker.com/id?1025016 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65073
CVE ID: CVE-2010-3043 State: PUBLISHED Published: 2011-02-02T22:00:00 Last Updated: 2024-08-07T02:55:46.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted (1) .wrf or (2) .arf file, a different vulnerability than CVE-2010-3041, CVE-2010-3042, and CVE-2010-3044. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6913f.shtm
CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6913f.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/65074 - http://tools.cisco.com/security/center/viewAlert.x?alertId=22016 - http://www.securityfocus.com/bid/46075 - http://securitytracker.com/id?1025016
CVE ID: CVE-2010-3044 State: PUBLISHED Published: 2011-02-02T22:00:00 Last Updated: 2024-08-07T02:55:46.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted (1) .wrf or (2) .arf file, related to atas32.dll, a different vulnerability than CVE-2010-3041, CVE-2010-3042, and CVE-2010-3043. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65075 -
ional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65075 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6913f.shtml - http://www.fortiguard.com/advisory/FGA-2011-03.html - http://tools.cisco.com/security/center/viewAlert.x?alertId=22016 - http://www.securityfocus.com/bid/46075 - http://securitytracker.com/id?1025016
CVE ID: CVE-2010-3048 State: PUBLISHED Published: 2020-01-16T17:15:54 Last Updated: 2024-11-15T17:47:52.234Z Vendors: Cisco Products: Unified Personal Communicator Problem Types: Other Description: Cisco Unified Personal Communicator 7.0 (1.13056) does not free allocated memory for received data and does not perform validation if memory allocation is successful, causing a remote denial of service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.fuzzmyapp.com/advisories/FMA-2010-002/FMA-2010-002-EN.xml
CVE ID: CVE-2010-3049 State: PUBLISHED Published: 2017-09-25T17:00:00 Last Updated: 2024-08-07T02:55:46.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS before 12.2(33)SXI allows local users to cause a denial of service (device reboot). Additional Analyst Notes: - CVE Program Container: References: - https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SX/release/notes/ol_14271/caveats_SXI_rebuilds.html
CVE ID: CVE-2010-3050 State: PUBLISHED Published: 2017-09-25T17:00:00 Last Updated: 2024-08-07T02:55:46.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS before 12.2(33)SXI allows remote authenticated users to cause a denial of service (device reboot). Additional Analyst Notes: - CVE Program Container: References: - https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SX/release/notes/ol_14271/caveats_SXI_rebuilds.html
CVE ID: CVE-2010-3053 State: PUBLISHED Published: 2010-08-19T17:43:00 Last Updated: 2024-08-07T02:55:46.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: bdf/bdflib.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) via a crafted BDF font file, related to an attempted modification of a value in a static string. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/3045 - http://support.apple.com/kb/HT4435 - https://bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019 - http://support.apple.com/kb/HT4457 - http://www.vupen.com/english/advisories/2010/3046 - http://
/freetype/+bug/617019 - http://support.apple.com/kb/HT4457 - http://www.vupen.com/english/advisories/2010/3046 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://secunia.com/advisories/42317 - http://secunia.com/advisories/42314 - http://support.apple.com/kb/HT4456 - http://secunia.com/advisories/48951 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html - http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html
CVE ID: CVE-2010-3054 State: PUBLISHED Published: 2010-08-19T17:43:00 Last Updated: 2024-08-07T02:55:46.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in FreeType 2.3.9, and other versions before 2.4.2, allows remote attackers to cause a denial of service via vectors involving nested Standard Encoding Accented Character (aka seac) calls, related to psaux.h, cffgload.c, cffgload.h, and t1decode.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/3045 - http://support.apple.com/kb/HT4435 - https://bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019 - http://support.apple.com/kb/H
.com/kb/HT4435 - https://bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019 - http://support.apple.com/kb/HT4457 - http://www.securityfocus.com/bid/42621 - http://www.vupen.com/english/advisories/2010/3046 - https://rhn.redhat.com/errata/RHSA-2010-0737.html - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://secunia.com/advisories/42317 - http://secunia.com/advisories/42314 - http://support.apple.com/kb/HT4456 - http://secunia.com/advisories/48951 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html - http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html - https://rhn.redhat.com/errata/RHSA-2010-0736.ht
p://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html - https://rhn.redhat.com/errata/RHSA-2010-0736.html
CVE ID: CVE-2010-3055 State: PUBLISHED Published: 2010-08-24T19:00:00 Last Updated: 2024-08-07T02:55:46.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: The configuration setup script (aka scripts/setup.php) in phpMyAdmin 2.11.x before 2.11.10.1 does not properly restrict key names in its output file, which allows remote attackers to execute arbitrary PHP code via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/42591 - http://www.phpmyadmin.net/home_page/security/PMASA-2010-4.php - http://secunia.com/advisories/41058 - http://sourceforge.net/tracker/?func=detail&aid=3045132&group_id=23067&atid=377408 - h
://secunia.com/advisories/41058 - http://sourceforge.net/tracker/?func=detail&aid=3045132&group_id=23067&atid=377408 - http://www.vupen.com/english/advisories/2010/2231 - http://www.debian.org/security/2010/dsa-2097 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:163 - http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commitdiff%3Bh=30c83acddb58d3bbf940b5f9ec28abf5b235f4d2 - http://www.vupen.com/english/advisories/2010/2223 - http://secunia.com/advisories/41185
CVE ID: CVE-2010-3056 State: PUBLISHED Published: 2010-08-24T19:00:00 Last Updated: 2024-08-07T02:55:46.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.11.x before 2.11.10.1 and 3.x before 3.3.5.1 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) db_search.php, (2) db_sql.php, (3) db_structure.php, (4) js/messages.php, (5) libraries/common.lib.php, (6) libraries/database_interface.lib.php, (7) libraries/dbi/mysql.dbi.lib.php, (8) libraries/dbi/mysqli.dbi.lib.php, (9) libraries/db_info.inc.php, (10) libraries/sanitizing.lib.php, (11) libraries/sqlparser.lib.php, (12) serv
i.lib.php, (9) libraries/db_info.inc.php, (10) libraries/sanitizing.lib.php, (11) libraries/sqlparser.lib.php, (12) server_databases.php, (13) server_privileges.php, (14) setup/config.php, (15) sql.php, (16) tbl_replace.php, and (17) tbl_sql.php. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045991.html - http://www.phpmyadmin.net/home_page/security/PMASA-2010-5.php - http://yehg.net/lab/pr0js/advisories/phpmyadmin/%5Bphpmyadmin-3.3.5%5D_cross_site_scripting%28XSS%29 - http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045997.html - http://secunia.com/advisories/41000 - http://www.vupe
raproject.org/pipermail/package-announce/2010-August/045997.html - http://secunia.com/advisories/41000 - http://www.vupen.com/english/advisories/2010/2231 - http://www.debian.org/security/2010/dsa-2097 - https://bugzilla.redhat.com/show_bug.cgi?id=625877 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:163 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:164 - http://www.securityfocus.com/bid/42584 - http://www.vupen.com/english/advisories/2010/2223 - http://secunia.com/advisories/41185
CVE ID: CVE-2010-3058 State: PUBLISHED Published: 2010-08-20T17:00:00Z Last Updated: 2024-09-16T22:35:58.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.x.x before 5.5.7, and 6.1.0.0, establishes an open UDP port, which might allow remote attackers to overwrite memory locations and execute arbitrary code, or cause a denial of service (application hang), via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21443820 - http://secunia.com/advisories/41044 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC69883 - http://www.secu
3820 - http://secunia.com/advisories/41044 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC69883 - http://www.securityfocus.com/bid/42549
CVE ID: CVE-2010-3059 State: PUBLISHED Published: 2010-08-20T17:00:00Z Last Updated: 2024-09-16T16:27:51.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the message-protocol implementation in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.x.x before 5.5.7, and 6.1.0.0, allows remote attackers to read and modify data, and possibly have other impact, via an unspecified command. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21443820 - http://secunia.com/advisories/41044 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC69883 - http://www.securityfocus.com/bid/42549
CVE ID: CVE-2010-3060 State: PUBLISHED Published: 2010-08-20T17:00:00Z Last Updated: 2024-09-16T20:27:28.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the message-protocol implementation in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.x.x before 5.5.7, and 6.1.0.0, allows remote attackers to cause a denial of service (daemon outage) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21443820 - http://secunia.com/advisories/41044 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC69883 - http://www.securityfocus.com/bid/42549
CVE ID: CVE-2010-3061 State: PUBLISHED Published: 2010-08-20T17:00:00Z Last Updated: 2024-09-16T20:27:52.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the message-protocol implementation in the Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.x.x before 5.5.7, and 6.1.0.0, allows remote attackers to cause a denial of service (recovery failure), and possibly trigger loss of data, via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21443820 - http://secunia.com/advisories/41044 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC69883 - http://www.secu
CVE ID: CVE-2010-3062 State: PUBLISHED Published: 2010-08-20T19:00:00 Last Updated: 2024-08-07T02:55:46.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: mysqlnd_wireprotocol.c in the Mysqlnd extension in PHP 5.3 through 5.3.2 allows remote attackers to (1) read sensitive memory via a modified length value, which is not properly handled by the php_mysqlnd_ok_read function; or (2) trigger a heap-based buffer overflow via a modified length value, which is not properly handled by the php_mysqlnd_rset_header_read function. Additional Analyst Notes: - CVE Program Container: References: - http://php-security.org/2010/05/31/mops-2010-056-php-php_mysqlnd_ok_read-information-leak-vulner
ontainer: References: - http://php-security.org/2010/05/31/mops-2010-056-php-php_mysqlnd_ok_read-information-leak-vulnerability/index.html - http://php-security.org/2010/05/31/mops-2010-057-php-php_mysqlnd_rset_header_read-buffer-overflow-vulnerability/index.html - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://svn.php.net/viewvc?view=revision&revision=298703 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html - http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/NEWS?r1=298701&r2=298703&pathrev=298703
CVE ID: CVE-2010-3063 State: PUBLISHED Published: 2010-08-20T19:00:00 Last Updated: 2024-08-07T02:55:46.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: The php_mysqlnd_read_error_from_line function in the Mysqlnd extension in PHP 5.3 through 5.3.2 does not properly calculate a buffer length, which allows context-dependent attackers to trigger a heap-based buffer overflow via crafted inputs that cause a negative length value to be used. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://php-security.org/2010/05/31/mops-2010-058-php-php_mysqlnd_read_error_from_line-buffer-overflow-
9/msg00006.html - http://php-security.org/2010/05/31/mops-2010-058-php-php_mysqlnd_read_error_from_line-buffer-overflow-vulnerability/index.html - http://svn.php.net/viewvc?view=revision&revision=298703 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html - http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/NEWS?r1=298701&r2=298703&pathrev=298703
CVE ID: CVE-2010-3064 State: PUBLISHED Published: 2010-08-20T19:00:00 Last Updated: 2024-08-07T02:55:46.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the php_mysqlnd_auth_write function in the Mysqlnd extension in PHP 5.3 through 5.3.2 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) username or (2) database name argument to the (a) mysql_connect or (b) mysqli_connect function. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://svn.php.net/viewvc?view=revision&revision=29870
s.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://svn.php.net/viewvc?view=revision&revision=298703 - http://php-security.org/2010/05/31/mops-2010-059-php-php_mysqlnd_auth_write-stack-buffer-overflow-vulnerability/index.html - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html - http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/NEWS?r1=298701&r2=298703&pathrev=298703
CVE ID: CVE-2010-3065 State: PUBLISHED Published: 2010-08-20T19:00:00 Last Updated: 2024-08-07T02:55:46.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default session serializer in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 does not properly handle the PS_UNDEF_MARKER marker, which allows context-dependent attackers to modify arbitrary session variables via a crafted session variable name. Additional Analyst Notes: - CVE Program Container: References: - http://php-security.org/2010/05/31/mops-2010-060-php-session-serializer-session-data-injection-vulnerability/index.html - http://www.debian.org/security/2010/dsa-2089 - http://www.redhat.com/support/errata/RHSA-2010-091
erability/index.html - http://www.debian.org/security/2010/dsa-2089 - http://www.redhat.com/support/errata/RHSA-2010-0919.html - http://secunia.com/advisories/42410 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html - http://www.vupen.com/english/advisories/2010/3081
CVE ID: CVE-2010-3066 State: PUBLISHED Published: 2010-12-06T20:00:00 Last Updated: 2024-08-07T02:55:46.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: The io_submit_one function in fs/aio.c in the Linux kernel before 2.6.23 allows local users to cause a denial of service (NULL pointer dereference) via a crafted io_submit system call with an IOCB_FLAG_RESFD flag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=87e2831c3fa39cbf6f7ab676bb5aef039b9659e2 - http://securitytracker.com/id