Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-5096 State: PUBLISHED Published: 2012-08-13T23:00:00Z Last Updated: 2024-09-17T04:10:28.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MyBB (aka MyBulletinBoard) before 1.6.1 allow remote attackers to execute arbitrary SQL commands via the keywords parameter in a (1) do_search action to search.php or (2) do_stuff action to private.php. NOTE: the vendor disputes this issue, saying "Although this doesn't lead to an SQL injection, it does provide a general MyBB SQL error. Additional Analyst Notes: - ADP Container: - CVE Program Container: References: - http://www.osvdb.org/70014 - http://dev.mybb.com/issues/1330 - http:
P Container: - CVE Program Container: References: - http://www.osvdb.org/70014 - http://dev.mybb.com/issues/1330 - http://www.openwall.com/lists/oss-security/2012/05/08/7 - http://www.osvdb.org/70013 - http://www.securityfocus.com/bid/45565 - http://www.openwall.com/lists/oss-security/2012/03/25/1 - http://www.openwall.com/lists/oss-security/2012/05/08/3 - http://www.openwall.com/lists/oss-security/2012/03/23/4
CVE ID: CVE-2010-5097 State: PUBLISHED Published: 2012-05-21T20:00:00 Last Updated: 2024-08-07T04:09:38.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the click enlarge functionality in TYPO3 4.3.x before 4.3.9 and 4.4.x before 4.4.5 when the caching framework is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022/ - http://www.securityfocus.com/bid/45470 - http://secunia.com/advisories/35770 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
.securityfocus.com/bid/45470 - http://secunia.com/advisories/35770 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64178 - http://www.openwall.com/lists/oss-security/2012/05/12/5 - http://www.openwall.com/lists/oss-security/2011/01/13/2 - http://www.openwall.com/lists/oss-security/2012/05/11/3 - http://www.osvdb.org/70123 - http://www.openwall.com/lists/oss-security/2012/05/10/7
CVE ID: CVE-2010-5098 State: PUBLISHED Published: 2012-05-21T20:00:00 Last Updated: 2024-08-07T04:09:38.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the FORM content object in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/70122 - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022/ - http://www.securityfocus.com/bid/45470 - http://secunia.com/advisories/35770 - http://www.openwall.com/lists/oss-se
2/ - http://www.securityfocus.com/bid/45470 - http://secunia.com/advisories/35770 - http://www.openwall.com/lists/oss-security/2012/05/12/5 - http://www.openwall.com/lists/oss-security/2011/01/13/2 - http://www.openwall.com/lists/oss-security/2012/05/11/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64179 - http://www.openwall.com/lists/oss-security/2012/05/10/7
CVE ID: CVE-2010-5099 State: PUBLISHED Published: 2012-05-30T20:00:00 Last Updated: 2024-08-07T04:09:38.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fileDenyPattern functionality in the PHP file inclusion protection API in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 does not properly filter file types, which allows remote attackers to bypass intended access restrictions and access arbitrary PHP files, as demonstrated using path traversal sequences with %00 null bytes and CVE-2010-3714 to read the TYPO3 encryption key from localconf.php. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bu
alconf.php. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/64180 - http://secunia.com/advisories/35770 - http://www.openwall.com/lists/oss-security/2012/05/12/5 - http://www.openwall.com/lists/oss-security/2011/01/13/2 - http://www.exploit-db.com/exploits/15856 - http://www.openwall.com/lists/oss-security/2012/05/11/3 - http://www.openwall.com/lists/oss-security/2012/05/10/7 - http://blog.nibblesec.org/2010/12/typo3-sa-2010-020-typo3-sa-2010-022.html
CVE ID: CVE-2010-5100 State: PUBLISHED Published: 2012-05-21T20:00:00 Last Updated: 2024-08-07T04:09:39.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Install Tool in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022/ - http://www.securityfocus.com/bid/45470 - http://secunia.com/advisories/35770 - http://www.osvdb.org/70120 - http://www.openwall.com/lists/oss-
us.com/bid/45470 - http://secunia.com/advisories/35770 - http://www.osvdb.org/70120 - http://www.openwall.com/lists/oss-security/2011/01/13/2 - http://www.openwall.com/lists/oss-security/2012/05/11/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64181 - http://www.openwall.com/lists/oss-security/2012/05/10/7
CVE ID: CVE-2010-5101 State: PUBLISHED Published: 2012-05-21T20:00:00 Last Updated: 2024-08-07T04:09:39.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the TypoScript setup in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated administrators to read arbitrary files via unspecified vectors related to the "file inclusion functionality." Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022/ - http://www.osvdb.org/70119 - http://www.securityfocus.com/bid/45470 - https://exchange.xforce.ibmcloud.com/vulnerab
2/ - http://www.osvdb.org/70119 - http://www.securityfocus.com/bid/45470 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64180 - http://secunia.com/advisories/35770 - http://www.openwall.com/lists/oss-security/2012/05/12/5 - http://www.openwall.com/lists/oss-security/2011/01/13/2 - http://www.openwall.com/lists/oss-security/2012/05/11/3 - http://www.openwall.com/lists/oss-security/2012/05/10/7
CVE ID: CVE-2010-5102 State: PUBLISHED Published: 2012-05-21T20:00:00 Last Updated: 2024-08-07T04:09:39.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in mod/tools/em/class.em_unzip.php in the unzip library in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote attackers to write arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.typo3.org/view.php?id=16362 - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022/ - http://www.osvdb.org/70119 - http://www.securityfocus.com/bid/45470 - https://exchange.xforce.ibmcloud.co
sa-2010-022/ - http://www.osvdb.org/70119 - http://www.securityfocus.com/bid/45470 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64180 - http://secunia.com/advisories/35770 - http://www.openwall.com/lists/oss-security/2012/05/12/5 - http://www.openwall.com/lists/oss-security/2011/01/13/2 - http://www.openwall.com/lists/oss-security/2012/05/11/3 - http://securesystems.ca/advisory.php?id=2010-001 - http://www.openwall.com/lists/oss-security/2012/05/10/7
CVE ID: CVE-2010-5103 State: PUBLISHED Published: 2012-05-21T20:00:00 Last Updated: 2024-08-07T04:09:38.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the list module in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022/ - http://www.securityfocus.com/bid/45470 - http://secunia.com/advisories/35770 - http://www.openwall.com/lists/oss-security/2012/05/12/5 - http://ww
om/bid/45470 - http://secunia.com/advisories/35770 - http://www.openwall.com/lists/oss-security/2012/05/12/5 - http://www.openwall.com/lists/oss-security/2011/01/13/2 - http://www.openwall.com/lists/oss-security/2012/05/11/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64184 - http://www.osvdb.org/70117 - http://www.openwall.com/lists/oss-security/2012/05/10/7
CVE ID: CVE-2010-5104 State: PUBLISHED Published: 2012-05-21T20:00:00 Last Updated: 2024-08-07T04:09:39.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: The escapeStrForLike method in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 does not properly escape input when the MySQL database is set to sql_mode NO_BACKSLASH_ESCAPES, which allows remote attackers to obtain sensitive information via wildcard characters in a LIKE query. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022/ - http://www.securityfocus.com/bid/45470 - http://secunia.com/advisories/35770 - http:
ins/typo3-core/typo3-sa-2010-022/ - http://www.securityfocus.com/bid/45470 - http://secunia.com/advisories/35770 - http://www.openwall.com/lists/oss-security/2012/05/12/5 - http://www.openwall.com/lists/oss-security/2011/01/13/2 - http://www.osvdb.org/70116 - http://www.openwall.com/lists/oss-security/2012/05/11/3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64185 - http://www.openwall.com/lists/oss-security/2012/05/10/7
CVE ID: CVE-2010-5105 State: PUBLISHED Published: 2014-04-27T20:00:00 Last Updated: 2024-08-07T04:09:39.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: The undo save quit routine in the kernel in Blender 2.5, 2.63a, and earlier allows local users to overwrite arbitrary files via a symlink attack on the quit.blend temporary file. NOTE: this issue might be a regression of CVE-2008-1103. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/09/07/13 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584621 - http://www.openwall.com/lists/oss-security/2012/09/06/3 - https://developer.blender.org/T22509 - http://lists.ope
4621 - http://www.openwall.com/lists/oss-security/2012/09/06/3 - https://developer.blender.org/T22509 - http://lists.opensuse.org/opensuse-updates/2013-02/msg00047.html
CVE ID: CVE-2010-5106 State: PUBLISHED Published: 2012-09-14T19:00:00Z Last Updated: 2024-09-17T03:17:40.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML-RPC remote publishing interface in xmlrpc.php in WordPress before 3.0.3 does not properly check capabilities, which allows remote authenticated users to bypass intended access restrictions, and publish, edit, or delete posts, by leveraging the Author or Contributor role. Additional Analyst Notes: - CVE Program Container: References: - http://codex.wordpress.org/Version_3.0.3 - http://openwall.com/lists/oss-security/2012/09/14/10 - http://core.trac.wordpress.org/changeset/16803
CVE ID: CVE-2010-5107 State: PUBLISHED Published: 2013-03-07T20:00:00 Last Updated: 2024-08-07T04:09:39.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service (connection-slot exhaustion) by periodically making many new TCP connections. Additional Analyst Notes: - CVE Program Container: References: - http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/servconf.c?r1=1.234#rev1.234 - http://rhn.redhat.com/errata/RHSA-2013-1591.html - http://marc.info/?l=bugtraq&m=144050155601
conf.c?r1=1.234#rev1.234 - http://rhn.redhat.com/errata/RHSA-2013-1591.html - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/sshd_config?r1=1.89#rev1.89 - https://bugzilla.redhat.com/show_bug.cgi?id=908707 - http://www.securityfocus.com/bid/58162 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/sshd_config.5?r1=1.156#rev1.156 - http://www.openwall.com/lists/oss-security/2013/02/07/3 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef
m/lists/oss-security/2013/02/07/3 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19595 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19515
CVE ID: CVE-2010-5108 State: PUBLISHED Published: 2019-11-13T22:33:17 Last Updated: 2024-08-07T04:09:38.941Z Vendors: trac Products: trac Problem Types: Ticket Modification Workflow Permission Restriction Bypass Description: Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of tickets without having proper permissions. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-5108 - https://access.redhat.com/security/cve/cve-2010-5108 - http://www.openwall.com/lists/oss-security/2013/02/13/2
CVE ID: CVE-2010-5109 State: PUBLISHED Published: 2014-05-05T17:00:00 Last Updated: 2024-08-07T04:09:39.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the DecompressRTF function in ytnef.c in Yerase's TNEF Stream Reader allows remote attackers to cause a denial of service (crash) via a crafted TNEF file, which triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/p/ytnef/bugs/13/ - http://www.openwall.com/lists/oss-security/2013/04/11/1 - https://bugzilla.redhat.com/show_bug.cgi?id=831322 - http://www.securityfocus.com/bid/54484 - https://lists.fedoraproject.org/pipermail/package-announce/2012-
gi?id=831322 - http://www.securityfocus.com/bid/54484 - https://lists.fedoraproject.org/pipermail/package-announce/2012-July/083804.html - https://lists.fedoraproject.org/pipermail/package-announce/2012-July/083853.html
CVE ID: CVE-2010-5110 State: PUBLISHED Published: 2014-08-29T17:00:00 Last Updated: 2024-08-07T04:09:39.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: DCTStream.cc in Poppler before 0.13.3 allows remote attackers to cause a denial of service (crash) via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://cgit.freedesktop.org/poppler/poppler/commit/poppler/DCTStream.cc?id=fc071d800cb4329a3ccf898d7bf16b4db7323ad8 - http://comments.gmane.org/gmane.comp.security.oss.general/11132 - https://www.suse.com/support/update/announcement/2014/suse-su-20140817-1.html - https://bugs.freedesktop.org/show_bug.cgi?id=26280 - http://secunia.com/advisori
uncement/2014/suse-su-20140817-1.html - https://bugs.freedesktop.org/show_bug.cgi?id=26280 - http://secunia.com/advisories/59857
CVE ID: CVE-2010-5111 State: PUBLISHED Published: 2014-06-16T18:00:00 Last Updated: 2024-08-07T04:09:38.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in readline.c in Echoping 6.0.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted reply in the (1) TLS_readline or (2) SSL_readline function, related to the EchoPingHttps Smokeping probe. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/p/echoping/bugs/55 - http://www.openwall.com/lists/oss-security/2013/10/21/9 - http://www.openwall.com/lists/oss-security/2013/10/17/1 - https://bugs.debian.org/cgi-bin/b
/oss-security/2013/10/21/9 - http://www.openwall.com/lists/oss-security/2013/10/17/1 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=606808 - http://security.gentoo.org/glsa/glsa-201406-07.xml
CVE ID: CVE-2010-5112 State: REJECTED Published: 2020-11-05T21:58:09 Last Updated: 2020-11-05T21:58:09 Description: No description available.
CVE ID: CVE-2010-5113 State: REJECTED Published: 2020-11-05T21:58:37 Last Updated: 2020-11-05T21:58:37 Description: No description available.
CVE ID: CVE-2010-5114 State: REJECTED Published: 2020-11-05T21:59:00 Last Updated: 2020-11-05T21:59:00 Description: No description available.
CVE ID: CVE-2010-5115 State: REJECTED Published: 2020-11-05T21:59:22 Last Updated: 2020-11-05T21:59:22 Description: No description available.
CVE ID: CVE-2010-5116 State: REJECTED Published: 2020-11-05T21:59:48 Last Updated: 2020-11-05T21:59:48 Description: No description available.
CVE ID: CVE-2010-5117 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-5118 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-5119 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-5120 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-5121 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-5122 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-5123 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-5124 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-5125 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-5126 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-5127 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-5128 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-5129 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-5130 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-5131 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-5132 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-5133 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-5134 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-5135 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-5136 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-5137 State: PUBLISHED Published: 2012-08-06T16:00:00Z Last Updated: 2024-09-16T23:46:31.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: wxBitcoin and bitcoind before 0.3.5 allow remote attackers to cause a denial of service (daemon crash) via a Bitcoin transaction containing an OP_LSHIFT script opcode. Additional Analyst Notes: - CVE Program Container: References: - https://en.bitcoin.it/wiki/CVEs
CVE ID: CVE-2010-5138 State: PUBLISHED Published: 2012-08-06T16:00:00Z Last Updated: 2024-09-17T02:11:46.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: wxBitcoin and bitcoind 0.3.x allow remote attackers to cause a denial of service (electricity consumption) via a Bitcoin transaction containing multiple OP_CHECKSIG script opcodes. Additional Analyst Notes: - CVE Program Container: References: - https://en.bitcoin.it/wiki/CVEs
CVE ID: CVE-2010-5139 State: PUBLISHED Published: 2012-08-06T16:00:00Z Last Updated: 2024-09-16T22:35:57.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in wxBitcoin and bitcoind before 0.3.11 allows remote attackers to bypass intended economic restrictions and create many bitcoins via a crafted Bitcoin transaction. Additional Analyst Notes: - CVE Program Container: References: - https://bitcointalk.org/index.php?topic=822.0 - https://en.bitcoin.it/wiki/CVEs
CVE ID: CVE-2010-5140 State: PUBLISHED Published: 2012-08-06T16:00:00Z Last Updated: 2024-09-17T04:04:38.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: wxBitcoin and bitcoind before 0.3.13 do not properly handle bitcoins associated with Bitcoin transactions that have zero confirmations, which allows remote attackers to cause a denial of service (invalid-transaction flood) by sending low-valued transactions without transaction fees. Additional Analyst Notes: - CVE Program Container: References: - https://en.bitcoin.it/wiki/CVEs - http://www.bitcoin.org/smf/index.php?topic=1306.0
CVE ID: CVE-2010-5141 State: PUBLISHED Published: 2012-08-06T16:00:00Z Last Updated: 2024-09-17T00:16:23.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: wxBitcoin and bitcoind before 0.3.5 do not properly handle script opcodes in Bitcoin transactions, which allows remote attackers to spend bitcoins owned by other users via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://en.bitcoin.it/wiki/CVEs
CVE ID: CVE-2010-5142 State: PUBLISHED Published: 2012-08-08T10:00:00Z Last Updated: 2024-09-16T20:41:52.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: chef-server-api/app/controllers/users.rb in the API in Chef before 0.9.0 does not require administrative privileges for the create, destroy, and update methods, which allows remote authenticated users to manage user accounts via requests to the /users URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/opscode/chef/commit/c3bb41f727fbe00e5de719d687757b24c8dcdfc8 - http://tickets.opscode.com/browse/CHEF-1289
CVE ID: CVE-2010-5143 State: PUBLISHED Published: 2012-08-22T10:00:00Z Last Updated: 2024-09-17T00:06:40.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee VirusScan Enterprise before 8.8 allows local users to disable the product by leveraging administrative privileges to execute an unspecified Metasploit Framework module. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10014
CVE ID: CVE-2010-5144 State: PUBLISHED Published: 2012-08-23T10:00:00Z Last Updated: 2024-09-16T20:12:44.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ISAPI Filter plug-in in Websense Enterprise, Websense Web Security, and Websense Web Filter 6.3.3 and earlier, when used in conjunction with a Microsoft ISA or Microsoft Forefront TMG server, allows remote attackers to bypass intended filtering and monitoring activities for web traffic via an HTTP Via header. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0376.html - http://www.websense.com/support/article/t-kbarticle/Web-Security-Vulnerabilit