Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-4209 State: PUBLISHED Published: 2010-11-07T21:00:00 Last Updated: 2024-08-07T03:34:37.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.8.1, as used in Bugzilla 3.7.1 through 3.7.3 and 4.1, allows remote attackers to inject arbitrary web script or HTML via vectors related to swfstore/swfstore.swf. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050813.html - http://yuilibrary.com/support/2.8.2/ - http://www.vupen.com/english/advisories/2010/2878 - http://www.securityfocus.
l - http://yuilibrary.com/support/2.8.2/ - http://www.vupen.com/english/advisories/2010/2878 - http://www.securityfocus.com/archive/1/514622 - http://www.bugzilla.org/security/3.2.8/ - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050820.html - http://secunia.com/advisories/41955 - http://www.securitytracker.com/id?1024683 - http://www.securityfocus.com/bid/44420 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050830.html - http://www.vupen.com/english/advisories/2010/2975 - http://www.openwall.com/lists/oss-security/2010/11/07/1 - http://secunia.com/advisories/422
glish/advisories/2010/2975 - http://www.openwall.com/lists/oss-security/2010/11/07/1 - http://secunia.com/advisories/42271
CVE ID: CVE-2010-4210 State: PUBLISHED Published: 2010-11-20T20:00:00 Last Updated: 2024-08-07T03:34:37.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pfs_getextattr function in FreeBSD 7.x before 7.3-RELEASE and 8.x before 8.0-RC1 unlocks a mutex that was not previously locked, which allows local users to cause a denial of service (kernel panic), overwrite arbitrary memory locations, and possibly execute arbitrary code via vectors related to opening a file on a file system that uses pseudofs. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2956 - http://www.securitytracker.com/id?1024724 - http://secunia.com/
s: - http://www.vupen.com/english/advisories/2010/2956 - http://www.securitytracker.com/id?1024724 - http://secunia.com/advisories/42200 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63218 - https://www.exploit-db.com/exploits/15206/ - http://security.FreeBSD.org/advisories/FreeBSD-SA-10:09.pseudofs.asc
CVE ID: CVE-2010-4211 State: PUBLISHED Published: 2010-11-08T23:00:00 Last Updated: 2024-08-07T03:34:37.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PayPal app before 3.0.1 for iOS does not verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof a PayPal web server via an arbitrary certificate. Additional Analyst Notes: - CVE Program Container: References: - http://viaforensics.com/press-releases/viaforensics-uncovers-paypal-application-vulnerability.html - http://www.vupen.com/english/advisories/2010/2887 - http://news.cnet.com/8301-27080_3-20021730-245.html - http://www.security
//www.vupen.com/english/advisories/2010/2887 - http://news.cnet.com/8301-27080_3-20021730-245.html - http://www.securityfocus.com/bid/44657 - http://online.wsj.com/article/SB10001424052748703506904575592782874885808.html - http://itunes.apple.com/us/app/paypal/id283646709 - http://viaforensics.com/security/viaforensics-uncovers-significant-vulnerability-paypal-iphone.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/63002
CVE ID: CVE-2010-4212 State: PUBLISHED Published: 2010-11-08T23:00:00Z Last Updated: 2024-09-16T22:46:41.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: The USAA application 3.0 for Android stores a mirror image of each visited web page, which might allow physically proximate attackers to obtain sensitive banking information by reading application data. Additional Analyst Notes: - CVE Program Container: References: - http://viaforensics.com/appwatchdog/usaa-android.html - http://news.cnet.com/8301-27080_3-20021874-245.html - http://online.wsj.com/article/SB10001424052748703805704575594581203248658.html
CVE ID: CVE-2010-4213 State: PUBLISHED Published: 2010-11-08T23:00:00Z Last Updated: 2024-09-16T22:50:33.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bank of America application 2.12 for Android stores a security question's answer in cleartext, which might allow physically proximate attackers to obtain sensitive information by reading application data. Additional Analyst Notes: - CVE Program Container: References: - http://viaforensics.com/appwatchdog/bank-of-america-android.html - http://news.cnet.com/8301-27080_3-20021874-245.html - http://online.wsj.com/article/SB10001424052748703805704575594581203248658.html
CVE ID: CVE-2010-4214 State: PUBLISHED Published: 2010-11-08T23:00:00Z Last Updated: 2024-09-17T00:16:33.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Wells Fargo Mobile application 1.1 for Android stores a username and password, along with account balances, in cleartext, which might allow physically proximate attackers to obtain sensitive information by reading application data. Additional Analyst Notes: - CVE Program Container: References: - http://viaforensics.com/appwatchdog/wells-fargo-android.html - http://news.cnet.com/8301-27080_3-20021874-245.html - http://online.wsj.com/article/SB10001424052748703805704575594581203248658.html
CVE ID: CVE-2010-4215 State: PUBLISHED Published: 2010-11-16T23:00:00 Last Updated: 2024-08-07T03:34:37.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: UI/Manage.pm in Foswiki 1.1.0 and 1.1.1 allows remote authenticated users to gain privileges by modifying the GROUP and ALLOWTOPICCHANGE preferences in the topic preferences for Main.AdminGroup. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44858 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63253 - http://foswiki.org/Support/SecurityAlertCVE20104215 - http://sourceforge.net/mailarchive/message.php?msg_name=4CD9F6F5.4030204%40lavrsen.dk - http://secunia.com/advisorie
5 - http://sourceforge.net/mailarchive/message.php?msg_name=4CD9F6F5.4030204%40lavrsen.dk - http://secunia.com/advisories/42275
CVE ID: CVE-2010-4216 State: PUBLISHED Published: 2010-11-09T20:00:00 Last Updated: 2024-08-07T03:34:37.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Directory Server (TDS) 6.0.0.x before 6.0.0.8-TIV-ITDS-IF0007 does not properly handle invalid buffer references in LDAP BER requests, which might allow remote attackers to cause a denial of service (daemon crash) via vectors involving a buffer that has a memory address near the maximum possible address. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44604 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62977 - http://www.ibm.com/support/docview.wss?uid=swg1I
id/44604 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62977 - http://www.ibm.com/support/docview.wss?uid=swg1IO13306 - http://secunia.com/advisories/42116 - http://www.vupen.com/english/advisories/2010/2863
CVE ID: CVE-2010-4217 State: PUBLISHED Published: 2010-11-09T20:00:00Z Last Updated: 2024-09-16T23:56:59.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the proxy server in IBM Tivoli Directory Server (TDS) 6.0.0.x before 6.0.0.8-TIV-ITDS-IF0007 and 6.1.x before 6.1.0-TIV-ITDS-FP0005 allows remote attackers to cause a denial of service (daemon crash) via an unbind request that occurs during a certain search operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44604 - http://www.vupen.com/english/advisories/2010/2861 - http://secunia.com/advisories/42083 - http://securitytracker.com/id?1024
://www.vupen.com/english/advisories/2010/2861 - http://secunia.com/advisories/42083 - http://securitytracker.com/id?1024670 - http://www-01.ibm.com/support/docview.wss?uid=swg1IO13282 - http://www.osvdb.org/68964 - http://www.vupen.com/english/advisories/2010/2863 - http://www-01.ibm.com/support/docview.wss?uid=swg1IO13364
CVE ID: CVE-2010-4218 State: PUBLISHED Published: 2010-11-09T20:00:00 Last Updated: 2024-08-07T03:34:37.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Web Services in IBM ENOVIA 6 has unknown impact and attack vectors, related to a system that becomes "exposed to the internet." Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1HE01296 - http://www-01.ibm.com/support/docview.wss?uid=swg1HE01296 - http://secunia.com/advisories/42029 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62921 - http://www.vupen.com/english/advisories/2010/2828 - http://www.securityfocus.com/
e.ibmcloud.com/vulnerabilities/62921 - http://www.vupen.com/english/advisories/2010/2828 - http://www.securityfocus.com/bid/44509
CVE ID: CVE-2010-4219 State: PUBLISHED Published: 2010-11-09T20:00:00Z Last Updated: 2024-09-17T00:50:45.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SemanticTagService.js in IBM WebSphere Portal 6.1.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PK91972 - http://www.vupen.com/english/advisories/2010/2827
CVE ID: CVE-2010-4220 State: PUBLISHED Published: 2010-11-09T20:00:00Z Last Updated: 2024-09-16T19:40:38.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Integrated Solution Console in the Administrative Console component in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related in part to "URL injection." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41722 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM11777 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463
CVE ID: CVE-2010-4221 State: PUBLISHED Published: 2010-11-09T20:00:00 Last Updated: 2024-08-07T03:34:37.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD before 1.3.3c allow remote attackers to execute arbitrary code via vectors involving a TELNET IAC escape character to a (1) FTP or (2) FTPS server. Additional Analyst Notes: - CVE Program Container: References: - http://www.proftpd.org/docs/NEWS-1.3.3c - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050687.html - http://www.zerodayinitiative.com/advisories/ZDI-10-229/ - http://secunia.com/advisories/42217
10-November/050687.html - http://www.zerodayinitiative.com/advisories/ZDI-10-229/ - http://secunia.com/advisories/42217 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050703.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050726.html - http://www.vupen.com/english/advisories/2010/2941 - http://www.vupen.com/english/advisories/2010/2962 - http://secunia.com/advisories/42052 - http://bugs.proftpd.org/show_bug.cgi?id=3521 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:227 - http://www.securityfocus.com/bid/44562 - http://www.vupen.com/english/advisories/2010/2959
CVE ID: CVE-2010-4225 State: PUBLISHED Published: 2011-01-11T01:00:00 Last Updated: 2024-08-07T03:34:37.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the mod_mono module for XSP in Mono 2.8.x before 2.8.2 allows remote attackers to obtain the source code for .aspx (ASP.NET) applications via unknown vectors related to an "unloading bug." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0051 - http://www.securityfocus.com/bid/45711 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64532 - http://osvdb.org/70312 - http://secunia.com/advisories/42842 - http://www.mono-project.com/Vuln
/vulnerabilities/64532 - http://osvdb.org/70312 - http://secunia.com/advisories/42842 - http://www.mono-project.com/Vulnerabilities#XSP.2Fmod_mono_source_code_disclosure
CVE ID: CVE-2010-4226 State: PUBLISHED Published: 2014-02-06T16:00:00.000Z Last Updated: 2025-06-09T15:10:07.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://support.novell.com/security/cve/CVE-2010-4226.html - http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html - https://bugzilla.novell.com/show_bug.cgi?id=665768 - http://lists.opensuse.org/opensuse-updates/2011-03/msg00008.html
CVE ID: CVE-2010-4227 State: PUBLISHED Published: 2011-02-25T18:00:00 Last Updated: 2024-08-07T03:34:37.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xdrDecodeString function in XNFS.NLM in Novell Netware 6.5 before SP8 allows remote attackers to cause a denial of service (abend) or execute arbitrary code via a crafted, signed value in a NFS RPC request to port UDP 1234, leading to a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65625 - http://www.securityfocus.com/bid/46535 - http://www.vupen.com/english/advisories/2011/0497 - http://www.zerodayinitiative.com/advisories
ityfocus.com/bid/46535 - http://www.vupen.com/english/advisories/2011/0497 - http://www.zerodayinitiative.com/advisories/ZDI-11-090 - http://download.novell.com/Download?buildid=1z3z-OsVCiE~ - http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=24&Itemid=24 - http://securityreason.com/securityalert/8104 - http://secunia.com/advisories/43431 - http://www.exploit-db.com/exploits/16234 - http://www.securitytracker.com/id?1025119 - http://www.securityfocus.com/archive/1/516645/100/0/threaded
CVE ID: CVE-2010-4228 State: PUBLISHED Published: 2011-03-22T17:00:00 Last Updated: 2024-08-07T03:34:37.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in NWFTPD.NLM before 5.10.02 in the FTP server in Novell NetWare allows remote authenticated users to execute arbitrary code or cause a denial of service (abend) via a long DELE command, a different vulnerability than CVE-2010-0625.4. Additional Analyst Notes: - CVE Program Container: References: - http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=25&Itemid=25 - http://secunia.com/advisories/43824 - http://securityreason.com/securityalert/8149 - https://bugzilla.novell.co
mid=25 - http://secunia.com/advisories/43824 - http://securityreason.com/securityalert/8149 - https://bugzilla.novell.com/show_bug.cgi?id=641249 - http://www.securityfocus.com/bid/46922 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66170 - http://www.zerodayinitiative.com/advisories/ZDI-11-106/ - http://www.novell.com/support/viewContent.do?externalId=3238588
CVE ID: CVE-2010-4229 State: PUBLISHED Published: 2011-04-18T18:00:00 Last Updated: 2024-08-07T03:34:37.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management (ZAM) in Novell ZENworks Configuration Management 10.3 before 10.3.2, and 11, allows remote attackers to overwrite files, and subsequently execute arbitrary code, via directory traversal sequences in a filename field in an upload request. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-11-118/ - http://www.vupen.com/english/advisories/2011/0917 - http:/
nces: - http://zerodayinitiative.com/advisories/ZDI-11-118/ - http://www.vupen.com/english/advisories/2011/0917 - http://www.securityfocus.com/archive/1/517425/100/0/threaded - http://secunia.com/advisories/44120 - http://securityreason.com/securityalert/8207 - http://www.novell.com/support/viewContent.do?externalId=7007841 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66656 - http://www.securityfocus.com/bid/47295 - http://securitytracker.com/id?1025313
CVE ID: CVE-2010-4230 State: PUBLISHED Published: 2010-11-16T23:00:00 Last Updated: 2024-08-07T03:34:37.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in a certain ActiveX control for the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to execute arbitrary code via a long string in the first argument to the connect method. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15504 - http://www.securityfocus.com/archive/1/514753/100/0/threaded - https://www.trustwave.com/spiderlabs/advisories/TWSL2010-006.txt
CVE ID: CVE-2010-4231 State: PUBLISHED Published: 2010-11-16T23:00:00 Last Updated: 2024-08-07T03:34:37.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15505/ - http://www.securityfocus.com/archive/1/514753/100/0/threaded - https://www.trustwave.com/spiderlabs/advisories/TWSL2010-006.txt
CVE ID: CVE-2010-4232 State: PUBLISHED Published: 2010-11-16T23:00:00 Last Updated: 2024-08-07T03:34:37.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to bypass authentication via a // (slash slash) at the beginning of a URI, as demonstrated by the //system.html URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/514753/100/0/threaded - https://www.trustwave.com/spiderlabs/advisories/TWSL2010-006.txt - http://www.exploit-db.com/exploits/15506
CVE ID: CVE-2010-4233 State: PUBLISHED Published: 2010-11-16T23:00:00 Last Updated: 2024-08-07T03:34:37.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux installation on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 has a default password of m for the root account, and a default password of merlin for the mg3500 account, which makes it easier for remote attackers to obtain access via the TELNET interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/514753/100/0/threaded - https://www.trustwave.com/spiderlabs/advisories/TWSL2010-006.txt - http://www.exp
.com/archive/1/514753/100/0/threaded - https://www.trustwave.com/spiderlabs/advisories/TWSL2010-006.txt - http://www.exploit-db.com/exploits/15507
CVE ID: CVE-2010-4234 State: PUBLISHED Published: 2010-11-16T23:00:00 Last Updated: 2024-08-07T03:34:37.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to cause a denial of service (device reboot) via a large number of requests in a short time interval. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15508 - http://www.securityfocus.com/archive/1/514753/100/0/threaded - https://www.trustwave.com/spiderlabs/advisories/TWSL2010-006.txt
CVE ID: CVE-2010-4235 State: PUBLISHED Published: 2011-04-01T21:00:00Z Last Updated: 2024-09-16T19:01:07.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via vectors related to the x-wap-profile HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/47110 - http://docs.real.com/docs/security/SecurityUpdate033111HS.pdf
CVE ID: CVE-2010-4236 State: PUBLISHED Published: 2010-11-12T21:00:00 Last Updated: 2024-08-07T03:34:37.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in estaskwrapper in IBM OmniFind Enterprise Edition before 9.1 allows local users to gain privileges via an ES_LIBRARY_PATH environment variable and a modified PATH environment variable, which is used during execution of the estasklight program, a different vulnerability than CVE-2010-3895. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/514688/100/0/threaded - http://www.exploit-db.com/exploits/15475 - http://www.securityfocus.com/bid/
focus.com/archive/1/514688/100/0/threaded - http://www.exploit-db.com/exploits/15475 - http://www.securityfocus.com/bid/44740 - http://security.fatihkilic.de/advisory/fkilic-sa-2010-ibm-omnifind.txt - http://www.vupen.com/english/advisories/2010/2933
CVE ID: CVE-2010-4237 State: PUBLISHED Published: 2019-10-29T17:07:34 Last Updated: 2024-08-07T03:34:37.773Z Vendors: mercurial Products: mercurial Problem Types: Other Description: Mercurial before 1.6.4 fails to verify the Common Name field of SSL certificates which allows remote attackers who acquire a certificate signed by a Certificate Authority to perform a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-4237 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4237 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598841 - https://bz.mercurial-scm.org/show_bug.cgi?id=2407
CVE ID: CVE-2010-4238 State: PUBLISHED Published: 2011-01-22T21:00:00 Last Updated: 2024-08-07T03:34:37.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vbd_create function in Xen 3.1.2, when the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 is used, allows guest OS users to cause a denial of service (host OS panic) via an attempted access to a virtual CD-ROM device through the blkback driver. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.centos.org/bug_view_advanced_page.php?bug_id=4517 - https://bugzilla.redhat.com/show_bug.cgi?id=655623 - http://www.securityf
s.org/bug_view_advanced_page.php?bug_id=4517 - https://bugzilla.redhat.com/show_bug.cgi?id=655623 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2011-0017.html - http://secunia.com/advisories/46397 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://secunia.com/advisories/42884 - http://www.securityfocus.com/bid/45795 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64698
CVE ID: CVE-2010-4239 State: PUBLISHED Published: 2019-10-28T14:48:29 Last Updated: 2024-08-07T03:34:37.985Z Vendors: Tiki Wiki Products: CMS Groupware Problem Types: UNKNOWN_TYPE Description: Tiki Wiki CMS Groupware 5.2 has Local File Inclusion Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-4239 - https://access.redhat.com/security/cve/cve-2010-4239 - https://www.openwall.com/lists/oss-security/2010/11/22/9 - https://dl.packetstormsecurity.net/1009-exploits/tikiwiki52-lfi.txt