Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-1075 State: PUBLISHED Published: 2010-03-23T19:00:00Z Last Updated: 2024-09-17T00:40:39.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Entry Level CMS (EL CMS) allows remote attackers to execute arbitrary SQL commands via the subj parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1002-exploits/elcms-sql.txt - http://osvdb.org/62513 - http://secunia.com/advisories/38688
CVE ID: CVE-2010-1076 State: PUBLISHED Published: 2010-03-23T19:00:00Z Last Updated: 2024-09-16T23:10:50.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Entry Level CMS (EL CMS) allows remote attackers to inject arbitrary web script or HTML via the subj parameter, which is not properly handled in a forced SQL error message. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38688
CVE ID: CVE-2010-1077 State: PUBLISHED Published: 2010-03-23T19:00:00 Last Updated: 2024-08-07T01:14:05.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in vbseo.php in Crawlability vBSEO plugin 3.1.0 for vBulletin allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the vbseourl parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11526 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56439 - http://packetstormsecurity.org/1002-exploits/vbseo-lfi.txt - http://www.vupen.com/english/advisories/2010/0442
CVE ID: CVE-2010-1078 State: PUBLISHED Published: 2010-03-23T19:00:00 Last Updated: 2024-08-07T01:14:05.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in archive.php in XlentProjects SphereCMS 1.1 alpha allows remote attackers to execute arbitrary SQL commands via encoded null bytes ("%00") in the view parameter, which bypasses a protection mechanism. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38309 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56423 - http://www.securityfocus.com/archive/1/509603/100/0/threaded - http://www.packetstormsecurity.org/1002-exploits/spherecms-sql.txt - ht
urityfocus.com/archive/1/509603/100/0/threaded - http://www.packetstormsecurity.org/1002-exploits/spherecms-sql.txt - http://www.bugreport.ir/index_68.htm
CVE ID: CVE-2010-1079 State: PUBLISHED Published: 2010-03-23T19:00:00Z Last Updated: 2024-09-16T17:33:26.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Sawmill before 7.2.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38730 - http://www.sawmill.net/version_history7.html - http://www.securityfocus.com/bid/38387
CVE ID: CVE-2010-1080 State: PUBLISHED Published: 2010-03-23T19:00:00 Last Updated: 2024-08-07T01:14:05.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in view.php in Pulse CMS 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the f parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/62475 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56430 - http://secunia.com/advisories/38650 - http://www.securityfocus.com/bid/38356 - http://packetstormsecurity.org/1002-exploits/pulsecms-xss.txt
CVE ID: CVE-2010-1081 State: PUBLISHED Published: 2010-03-23T19:00:00Z Last Updated: 2024-09-16T17:18:00.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Community Polls (com_communitypolls) component 1.5.2, and possibly earlier, for Core Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38330 - http://secunia.com/advisories/38692 - http://www.corejoomla.com/component/content/article/1-corejoomla-updates/40-community-polls-v153-security-release.html - http://osvdb.org/62506
m/component/content/article/1-corejoomla-updates/40-community-polls-v153-security-release.html - http://osvdb.org/62506 - http://packetstormsecurity.org/1002-exploits/joomlacp-lfi.txt
CVE ID: CVE-2010-1082 State: PUBLISHED Published: 2010-03-23T19:00:00Z Last Updated: 2024-09-16T18:24:41.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in OI.Blogs 1.0.0, when magic_quotes_gpc is disabled, allow remote attackers to read arbitrary files via directory traversal sequences in the (1) theme parameter to loadStyles.php and the (2) scripts parameter to javascript/loadScripts.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38726
CVE ID: CVE-2010-1083 State: PUBLISHED Published: 2010-04-06T22:00:00 Last Updated: 2024-08-07T01:14:05.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate attackers to obtain sensitive information (kernel memory). Additional Analyst Notes: - CVE Program Container: References: - http://lkml.org/lkml/2010/3/30/759 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10831 - http:
kml/2010/3/30/759 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10831 - http://www.redhat.com/support/errata/RHSA-2010-0723.html - http://lwn.net/Articles/375350/ - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://www.redhat.com/support/errata/RHSA-2010-0394.html - http://www.openwall.com/lists/oss-security/2010/02/17/2 - http://support.avaya.com/css/P8/documents/100090459 - http://www.openwall.com/lists/oss-security/2010/02/17/1 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://support.avaya.com/css/P8/documents/100113326 - http://lists.opensuse.org/opensuse-security-
VMSA-2011-0012.html - http://support.avaya.com/css/P8/documents/100113326 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00007.html - http://www.novell.com/linux/security/advisories/2010_23_kernel.html - http://www.openwall.com/lists/oss-security/2010/02/18/7 - http://www.openwall.com/lists/oss-security/2010/02/18/4 - http://secunia.com/advisories/39742 - http://www.openwall.com/lists/oss-security/2010/02/19/1 - http://www.debian.org/security/2010/dsa-2053 - http://secunia.com/advisories/39830
CVE ID: CVE-2010-1084 State: PUBLISHED Published: 2010-04-06T22:00:00 Last Updated: 2024-08-07T01:14:06.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel 2.6.18 through 2.6.33, and possibly other versions, allows remote attackers to cause a denial of service (memory corruption) via a large number of Bluetooth sockets, related to the size of sysfs files in (1) net/bluetooth/l2cap.c, (2) net/bluetooth/rfcomm/core.c, (3) net/bluetooth/rfcomm/sock.c, and (4) net/bluetooth/sco.c. Additional Analyst Notes: - CVE Program Container: References: - http://security-tracker.debian.org/tracker/CVE-2010-1084 - https://bugzilla.redhat.com/show_bug.cgi?id=576018 - http://www.redha
ecurity-tracker.debian.org/tracker/CVE-2010-1084 - https://bugzilla.redhat.com/show_bug.cgi?id=576018 - http://www.redhat.com/support/errata/RHSA-2010-0610.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=101545f6fef4a0a3ea8daf0b5b880df2c6a92a69 - http://www.securityfocus.com/bid/38898 - http://secunia.com/advisories/43315 - http://www.openwall.com/lists/oss-security/2010/03/23/1 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://www.debian.org/security/2010/dsa-2053 - http://www.securityfocus.com/archive/1/516397/100/0/threaded - http://secunia.com/advisories/39830
CVE ID: CVE-2010-1085 State: PUBLISHED Published: 2010-04-06T22:00:00 Last Updated: 2024-08-07T01:14:05.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: The azx_position_ok function in hda_intel.c in Linux kernel 2.6.33-rc4 and earlier, when running on the AMD780V chip set, allows context-dependent attackers to cause a denial of service (crash) via unknown manipulations that trigger a divide-by-zero error. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0394.html - http://www.securityfocus.com/bid/38348 - http://secunia.com/advisories/39649 - http://support.avaya.com/css/P8/documents/100090459 - https://bugzilla.r
d/38348 - http://secunia.com/advisories/39649 - http://support.avaya.com/css/P8/documents/100090459 - https://bugzilla.redhat.com/show_bug.cgi?id=567168 - http://secunia.com/advisories/43315 - http://lkml.org/lkml/2010/2/5/322 - http://www.openwall.com/lists/oss-security/2010/02/22/2 - http://www.redhat.com/support/errata/RHSA-2010-0398.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10027 - http://support.avaya.com/css/P8/documents/100088287 - http://www.securityfocus.com/archive/1/516397/100/0/threaded - http://nctritech.net/bugreport.txt
CVE ID: CVE-2010-1086 State: PUBLISHED Published: 2010-04-06T22:00:00 Last Updated: 2024-08-07T01:14:05.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers to cause a denial of service (infinite loop) via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/03/01/1 - http://www.redhat.com/support/errata/RHSA-2010-0394.html - http://secunia.com/advisories/39649 - https://bugzilla.redhat.com/show_bug.cgi?id=569237 - h
rrata/RHSA-2010-0394.html - http://secunia.com/advisories/39649 - https://bugzilla.redhat.com/show_bug.cgi?id=569237 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10569 - http://support.avaya.com/css/P8/documents/100090459 - http://secunia.com/advisories/43315 - http://www.redhat.com/support/errata/RHSA-2010-0398.html - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00007.html - http://www.novell.com/linux/security/advisories/2010_23_kernel.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://secunia.com/advisories/39742 - http://support.avaya.com/css/P8/documents/100088287 - http://www.debian.org/security/2
://secunia.com/advisories/39742 - http://support.avaya.com/css/P8/documents/100088287 - http://www.debian.org/security/2010/dsa-2053 - http://www.securityfocus.com/archive/1/516397/100/0/threaded - http://secunia.com/advisories/39830 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=29e1fa3565a7951cc415c634eb2b78dbdbee151d - http://www.securityfocus.com/bid/38479
CVE ID: CVE-2010-1087 State: PUBLISHED Published: 2010-04-06T22:00:00 Last Updated: 2024-08-07T01:14:05.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nfs_wait_on_request function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5 allows attackers to cause a denial of service (Oops) via unknown vectors related to truncating a file and an operation that is not interruptible. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10442 - http://www.securityfocus.com/bid/39569 - http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html - http://git.ke
securityfocus.com/bid/39569 - http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=9f557cd8073104b39528794d44e129331ded649f - https://bugzilla.redhat.com/show_bug.cgi?id=567184 - http://secunia.com/advisories/40645 - http://www.openwall.com/lists/oss-security/2010/03/03/1 - http://secunia.com/advisories/43315 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://www.debian.org/security/2010/dsa-2053 - http://www.securityfocus.com/archive/1/516397/100/0/threaded - http://secunia.com/advisories/39830 - http://www.vupen.com/english/advisories/2010/1857
CVE ID: CVE-2010-1088 State: PUBLISHED Published: 2010-04-06T22:00:00 Last Updated: 2024-08-07T01:14:05.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown impact, related to LOOKUP_FOLLOW. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=ac278a9c505092dd82077a2446af8f9fc0d9c095 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 - http://www.openwall.com/lists/oss-security/2010/02/24/3 - http://www.mandriva.com/security/advisorie
me=MDVSA-2010:198 - http://www.openwall.com/lists/oss-security/2010/02/24/3 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:088 - http://www.securityfocus.com/bid/39044 - http://secunia.com/advisories/43315 - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00007.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10093 - http://www.novell.com/linux/security/advisories/2010_23_kernel.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://secunia.com/advisories/39742 - https://bugzilla.redhat.com/show_bug.cgi?id=567813 - http://www.debian.org/security/2010/dsa-2053 - http://www.securityfocus.com/arch
lla.redhat.com/show_bug.cgi?id=567813 - http://www.debian.org/security/2010/dsa-2053 - http://www.securityfocus.com/archive/1/516397/100/0/threaded - http://secunia.com/advisories/39830
CVE ID: CVE-2010-1089 State: PUBLISHED Published: 2010-03-24T17:00:00Z Last Updated: 2024-09-16T20:02:45.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in vedi_faq.php in PHP Trouble Ticket 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1003-exploits/phptroubleticket-sql.txt - http://secunia.com/advisories/38763
CVE ID: CVE-2010-1090 State: PUBLISHED Published: 2010-03-24T17:00:00 Last Updated: 2024-08-07T01:14:05.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in phpMySite allows remote attackers to execute arbitrary SQL commands via the action parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0492 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56573 - http://www.exploit-db.com/exploits/11588 - http://packetstormsecurity.org/1002-exploits/phpmysite-sqlxss.txt
CVE ID: CVE-2010-1091 State: PUBLISHED Published: 2010-03-24T17:00:00 Last Updated: 2024-08-07T01:14:05.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in contact.php in phpMySite allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) city, (3) email, (4) state, and (5) message parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0492 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56574 - http://www.exploit-db.com/exploits/11588 - http://packetstormsecurity.org/1002-exploits/phpmysite-sqlxss.txt
CVE ID: CVE-2010-1092 State: PUBLISHED Published: 2010-03-24T17:00:00 Last Updated: 2024-08-07T01:14:05.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers to execute arbitrary SQL commands via the (1) us and (2) ps parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56570 - http://secunia.com/advisories/38771 - http://www.vupen.com/english/advisories/2010/0494 - http://www.exploit-db.com/exploits/11592 - http://osvdb.org/62626 - http://www.securityfocus.com/bid/38470
CVE ID: CVE-2010-1093 State: PUBLISHED Published: 2010-03-24T17:00:00Z Last Updated: 2024-09-16T22:20:26.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in rss.php in 1024 CMS 2.1.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a vp action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38476 - http://www.bugreport.ir/index_69.htm - http://secunia.com/advisories/38775
CVE ID: CVE-2010-1094 State: PUBLISHED Published: 2010-03-24T17:00:00 Last Updated: 2024-08-07T01:14:05.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php in DZ EROTIK Auktionshaus V4rgo allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11582 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56581 - http://secunia.com/advisories/38792 - http://osvdb.org/62623 - http://4004securityproject.wordpress.com/2010/02/26/dz-erotik-auktionshaus-v-4-rgo-news-php-sql-injection/
CVE ID: CVE-2010-1095 State: PUBLISHED Published: 2010-03-24T17:00:00Z Last Updated: 2024-09-17T03:53:45.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login_reset_password_page.php in Tracking Requirements & Use Cases (TRUC) 0.11.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/0491
CVE ID: CVE-2010-1096 State: PUBLISHED Published: 2010-03-24T17:00:00Z Last Updated: 2024-09-16T22:09:17.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in searchmatch.php in ScriptsFeed Dating Software allow remote attackers to execute arbitrary SQL commands via the (1) txtgender and (2) txtlookgender parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38767 - http://www.vupen.com/english/advisories/2010/0493 - http://osvdb.org/62627
CVE ID: CVE-2010-1097 State: PUBLISHED Published: 2010-03-24T17:00:00Z Last Updated: 2024-09-17T01:41:27.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: include/userlogin.class.php in DeDeCMS 5.5 GBK, when session.auto_start is enabled, allows remote attackers to bypass authentication and gain administrative access via a value of 1 for the _SESSION[dede_admin_id] parameter, as demonstrated by a request to uploads/include/dialog/select_soft_post.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/62622 - http://bbs.wolvez.org/topic/125/ - http://www.securityfocus.com/bid/38469 - http://secunia.com/advisories/38790
CVE ID: CVE-2010-1098 State: PUBLISHED Published: 2010-03-24T17:00:00 Last Updated: 2024-08-07T01:14:05.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ANI parser in Microsoft Windows before 7 on the x86 platform, as used in Internet Explorer and other applications, allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted biClrUsed value in the BITMAPINFO header of a .ANI file. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/skylined/issues/detail?id=3 - http://www.securityfocus.com/bid/38579 - http://skypher.com/index.php/2010/03/08/ani-file-bitmapinfoheader-biclrused-bounds-check-missing/ -
ocus.com/bid/38579 - http://skypher.com/index.php/2010/03/08/ani-file-bitmapinfoheader-biclrused-bounds-check-missing/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/56756
CVE ID: CVE-2010-1099 State: PUBLISHED Published: 2010-03-24T18:00:00 Last Updated: 2024-08-07T01:14:06.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Apple Safari allows remote attackers to bypass intended port restrictions on outbound TCP connections via a port number outside the range of the unsigned short data type, as demonstrated by a value of 65561 for TCP port 25. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57233 - http://www.securityfocus.com/archive/1/510283/100/0/threaded
CVE ID: CVE-2010-1100 State: PUBLISHED Published: 2010-03-24T18:00:00 Last Updated: 2024-08-07T01:14:05.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Arora allows remote attackers to bypass intended port restrictions on outbound TCP connections via a port number outside the range of the unsigned short data type, as demonstrated by a value of 65561 for TCP port 25. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/510283/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/57234
CVE ID: CVE-2010-1101 State: PUBLISHED Published: 2010-03-24T18:00:00 Last Updated: 2024-08-07T01:14:05.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Alexander Clauss iCab allows remote attackers to bypass intended port restrictions on outbound TCP connections via a port number outside the range of the unsigned short data type, as demonstrated by a value of 65561 for TCP port 25. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57235 - http://www.securityfocus.com/archive/1/510283/100/0/threaded
CVE ID: CVE-2010-1102 State: PUBLISHED Published: 2010-03-24T18:00:00 Last Updated: 2024-08-07T01:14:05.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in OmniWeb allows remote attackers to bypass intended port restrictions on outbound TCP connections via a port number outside the range of the unsigned short data type, as demonstrated by a value of 65561 for TCP port 25. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57236 - http://www.securityfocus.com/archive/1/510283/100/0/threaded
CVE ID: CVE-2010-1103 State: PUBLISHED Published: 2010-03-24T18:00:00 Last Updated: 2024-08-07T01:14:06.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Stainless allows remote attackers to bypass intended port restrictions on outbound TCP connections via a port number outside the range of the unsigned short data type, as demonstrated by a value of 65561 for TCP port 25. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57237 - http://www.securityfocus.com/archive/1/510283/100/0/threaded