Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ferences: - http://www.securityfocus.com/bid/45982 - http://secunia.com/advisories/43165 - http://osvdb.org/70700 - http://www.bugzilla.org/security/3.2.9/ - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053665.html - http://www.vupen.com/english/advisories/2011/0271 - https://bugzilla.mozilla.org/attachment.cgi?id=506031&action=diff - http://secunia.com/advisories/43033 - https://bugzilla.mozilla.org/show_bug.cgi?id=621591 - http://www.vupen.com/english/advisories/2011/0207 - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053678.html - http://www.debian.org/security/2011/dsa-2322 - https://bugzilla.mozilla.org/show_bug.cgi?id=619594 - https
053678.html - http://www.debian.org/security/2011/dsa-2322 - https://bugzilla.mozilla.org/show_bug.cgi?id=619594 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65001
CVE ID: CVE-2010-4569 State: PUBLISHED Published: 2011-01-28T15:00:00 Last Updated: 2024-08-07T03:51:17.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Bugzilla 3.7.1, 3.7.2, 3.7.3, and 4.0rc1 allows remote attackers to inject arbitrary web script or HTML via the real name field of a user account, related to the AutoComplete widget in YUI. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=619637 - http://www.securityfocus.com/bid/45982 - http://www.bugzilla.org/security/3.2.9/ - http://www.vupen.com/english/advisories/2011/0271 - http://osvdb.org/70701 - http://www.vupen.co
a.org/security/3.2.9/ - http://www.vupen.com/english/advisories/2011/0271 - http://osvdb.org/70701 - http://www.vupen.com/english/advisories/2011/0207 - http://yuilibrary.com/projects/yui2/ticket/2529228 - http://yuilibrary.com/forum/viewtopic.php?p=12923 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65178
CVE ID: CVE-2010-4570 State: PUBLISHED Published: 2011-01-28T15:00:00 Last Updated: 2024-08-07T03:51:17.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the duplicate-detection functionality in Bugzilla 3.7.1, 3.7.2, 3.7.3, and 4.0rc1 allows remote attackers to inject arbitrary web script or HTML via the summary field, related to the DataTable widget in YUI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45982 - http://osvdb.org/70702 - http://www.bugzilla.org/security/3.2.9/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/65179 - http://www.vupen.com/english/advisories/2011/0
ity/3.2.9/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/65179 - http://www.vupen.com/english/advisories/2011/0271 - https://bugzilla.mozilla.org/show_bug.cgi?id=619648 - http://www.vupen.com/english/advisories/2011/0207 - http://yuilibrary.com/projects/yui2/ticket/2529228 - http://yuilibrary.com/forum/viewtopic.php?p=12923
CVE ID: CVE-2010-4572 State: PUBLISHED Published: 2011-01-28T15:00:00 Last Updated: 2024-08-07T03:51:17.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in chart.cgi in Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the query string, a different vulnerability than CVE-2010-2761 and CVE-2010-4411. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45982 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65440 - http://secunia.com/advisories/43165 - https:
om/bid/45982 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65440 - http://secunia.com/advisories/43165 - https://bugzilla.mozilla.org/show_bug.cgi?id=621572 - http://www.bugzilla.org/security/3.2.9/ - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053665.html - http://osvdb.org/70703 - http://www.vupen.com/english/advisories/2011/0271 - http://secunia.com/advisories/43033 - http://www.vupen.com/english/advisories/2011/0207 - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053678.html - http://www.debian.org/security/2011/dsa-2322
CVE ID: CVE-2010-4573 State: PUBLISHED Published: 2010-12-22T20:00:00 Last Updated: 2024-08-07T03:51:17.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Update Installer in VMware ESXi 4.1, when a modified sfcb.cfg is present, does not properly configure the SFCB authentication mode, which allows remote attackers to obtain access via an arbitrary username and password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/515420/100/0/threaded - http://www.vmware.com/security/advisories/VMSA-2010-0020.html - http://securitytracker.com/id?1024917 - http://www.securityfocus.com/bid/45543 - http://lists.vmware.com/pipermail/se
- http://securitytracker.com/id?1024917 - http://www.securityfocus.com/bid/45543 - http://lists.vmware.com/pipermail/security-announce/2010/000114.html - http://www.vupen.com/english/advisories/2010/3303 - http://secunia.com/advisories/42591 - http://kb.vmware.com/kb/1031761
CVE ID: CVE-2010-4574 State: PUBLISHED Published: 2010-12-22T00:00:00 Last Updated: 2024-08-07T03:51:17.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Pickle::Pickle function in base/pickle.cc in Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 on 64-bit Linux platforms does not properly perform pointer arithmetic, which allows remote attackers to bypass message deserialization validation, and cause a denial of service or possibly have unspecified other impact, via invalid pickle data. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates_13.html - http://secunia.com/
References: - http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates_13.html - http://secunia.com/advisories/42648 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14141 - http://www.securityfocus.com/bid/45390 - http://src.chromium.org/viewvc/chrome?view=rev&revision=68033 - http://www.gentoo.org/security/en/glsa/glsa-201012-01.xml - http://code.google.com/p/chromium/issues/detail?id=56449
CVE ID: CVE-2010-4575 State: PUBLISHED Published: 2010-12-22T00:00:00 Last Updated: 2024-08-07T03:51:17.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ThemeInstalledInfoBarDelegate::Observe function in browser/extensions/theme_installed_infobar_delegate.cc in Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 does not properly handle incorrect tab interaction by an extension, which allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted extension. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates_13.html - http://secunia.
er: References: - http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates_13.html - http://secunia.com/advisories/42648 - http://src.chromium.org/viewvc/chrome?view=rev&revision=68112 - http://code.google.com/p/chromium/issues/detail?id=60761 - http://www.securityfocus.com/bid/45390 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14427 - http://www.gentoo.org/security/en/glsa/glsa-201012-01.xml
CVE ID: CVE-2010-4576 State: PUBLISHED Published: 2010-12-22T00:00:00 Last Updated: 2024-08-07T03:51:17.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: browser/worker_host/message_port_dispatcher.cc in Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 does not properly handle certain postMessage calls, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted JavaScript code that creates a web worker. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates_13.html - http://secunia.com/advisories/42648 - https://ova
omereleases.blogspot.com/2010/12/stable-beta-channel-updates_13.html - http://secunia.com/advisories/42648 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14161 - http://www.securityfocus.com/bid/45390 - http://src.chromium.org/viewvc/chrome?view=rev&revision=66620 - http://www.gentoo.org/security/en/glsa/glsa-201012-01.xml - http://code.google.com/p/chromium/issues/detail?id=63529
CVE ID: CVE-2010-4577 State: PUBLISHED Published: 2010-12-22T00:00:00 Last Updated: 2025-01-21T17:37:30.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6, and other products does not properly parse Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted local font, related to "Type Confusion." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://lists.fedoraproject.org/piperma
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.html - http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates_13.html - http://secunia.com/advisories/42648 - https://bugzilla.redhat.com/show_bug.cgi?id=667025 - http://www.vupen.com/english/advisories/2011/0216 - https://bugs.webkit.org/show_bug.cgi?id=49883 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13953 - http://secunia.com/advisories/43086 - http://code.google.com/p/chromium/issues/detail?id=63866 - http://www.redhat.com/support/errata/RHSA-2011-0177.html - http
tp://code.google.com/p/chromium/issues/detail?id=63866 - http://www.redhat.com/support/errata/RHSA-2011-0177.html - http://trac.webkit.org/changeset/72685/trunk/WebCore/css/CSSParser.cpp - http://trac.webkit.org/changeset/72685 - http://www.debian.org/security/2011/dsa-2188 - http://www.gentoo.org/security/en/glsa/glsa-201012-01.xml - http://www.securityfocus.com/bid/45722
CVE ID: CVE-2010-4578 State: PUBLISHED Published: 2010-12-22T00:00:00 Last Updated: 2024-08-07T03:51:17.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 do not properly perform cursor handling, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale pointers." Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2010/12/stable-beta-channel-updates_13.html - http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html - http://secunia.com/advisories/42648 - http:/
ttp://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html - http://secunia.com/advisories/42648 - http://code.google.com/p/chromium/issues/detail?id=64959 - http://www.securityfocus.com/bid/45390 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14323 - http://www.debian.org/security/2011/dsa-2188 - http://www.gentoo.org/security/en/glsa/glsa-201012-01.xml
CVE ID: CVE-2010-4579 State: PUBLISHED Published: 2010-12-22T01:00:00 Last Updated: 2024-08-07T03:51:17.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 11.00 does not properly constrain dialogs to appear on top of rendered documents, which makes it easier for remote attackers to trick users into interacting with a crafted web site that spoofs the (1) security information dialog or (2) download dialog. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/support/kb/view/977/ - http://secunia.com/advisories/42653 - http://www.opera.com/docs/changelogs/unix/1100/ - http://www.opera.com/docs/changelogs/windows/1100/ - http://www.opera
http://www.opera.com/docs/changelogs/unix/1100/ - http://www.opera.com/docs/changelogs/windows/1100/ - http://www.opera.com/docs/changelogs/mac/1100/ - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
CVE ID: CVE-2010-4580 State: PUBLISHED Published: 2010-12-22T01:00:00 Last Updated: 2024-08-07T03:51:17.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 11.00 does not clear WAP WML form fields after manual navigation to a new web site, which allows remote attackers to obtain sensitive information via an input field that has the same name as an input field on a previously visited web site. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42653 - http://www.opera.com/docs/changelogs/unix/1100/ - http://www.opera.com/docs/changelogs/windows/1100/ - http://www.opera.com/docs/changelogs/mac/1100/ - http://www.opera.com/sup
/www.opera.com/docs/changelogs/windows/1100/ - http://www.opera.com/docs/changelogs/mac/1100/ - http://www.opera.com/support/kb/view/979/ - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
CVE ID: CVE-2010-4581 State: PUBLISHED Published: 2010-12-22T01:00:00 Last Updated: 2024-08-07T03:51:17.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Opera before 11.00 has unknown impact and attack vectors, related to "a high severity issue." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42653 - http://www.opera.com/docs/changelogs/unix/1100/ - http://www.opera.com/docs/changelogs/windows/1100/ - http://www.opera.com/docs/changelogs/mac/1100/ - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
CVE ID: CVE-2010-4582 State: PUBLISHED Published: 2010-12-22T01:00:00 Last Updated: 2024-08-07T03:51:17.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 11.00 does not properly handle security policies during updates to extensions, which might allow remote attackers to bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42653 - http://www.opera.com/docs/changelogs/unix/1100/ - http://www.opera.com/docs/changelogs/windows/1100/ - http://www.opera.com/docs/changelogs/mac/1100/ - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
CVE ID: CVE-2010-4583 State: PUBLISHED Published: 2010-12-22T01:00:00 Last Updated: 2024-08-07T03:51:17.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 11.00, when Opera Turbo is enabled, does not display a page's security indication, which makes it easier for remote attackers to spoof trusted content via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42653 - http://www.opera.com/docs/changelogs/unix/1100/ - http://www.opera.com/docs/changelogs/windows/1100/ - http://www.opera.com/docs/changelogs/mac/1100/ - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
CVE ID: CVE-2010-4584 State: PUBLISHED Published: 2010-12-22T01:00:00 Last Updated: 2024-08-07T03:51:17.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 11.00, when Opera Turbo is used, does not properly present information about problematic X.509 certificates on https web sites, which might make it easier for remote attackers to spoof trusted content via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42653 - http://www.opera.com/docs/changelogs/unix/1100/ - http://www.opera.com/docs/changelogs/windows/1100/ - http://www.opera.com/docs/changelogs/mac/1100/ - http://lists.opensuse.org/opensuse-secu
docs/changelogs/windows/1100/ - http://www.opera.com/docs/changelogs/mac/1100/ - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
CVE ID: CVE-2010-4585 State: PUBLISHED Published: 2010-12-22T01:00:00 Last Updated: 2024-08-07T03:51:17.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the auto-update functionality in Opera before 11.00 allows remote attackers to cause a denial of service (application crash) by triggering an Opera Unite update. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42653 - http://www.opera.com/docs/changelogs/unix/1100/ - http://www.opera.com/docs/changelogs/windows/1100/ - http://www.opera.com/docs/changelogs/mac/1100/ - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
CVE ID: CVE-2010-4586 State: PUBLISHED Published: 2010-12-22T01:00:00 Last Updated: 2024-08-07T03:51:17.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Opera before 11.00 enables WebSockets functionality, which has unspecified impact and remote attack vectors, possibly a related issue to CVE-2010-4508. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42653 - http://www.opera.com/docs/changelogs/unix/1100/ - http://www.opera.com/docs/changelogs/windows/1100/ - http://www.opera.com/docs/changelogs/mac/1100/ - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
CVE ID: CVE-2010-4587 State: PUBLISHED Published: 2010-12-22T01:00:00 Last Updated: 2024-08-07T03:51:17.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 11.00 on Windows does not properly implement the Insecure Third Party Module warning message, which might make it easier for user-assisted remote attackers to have an unspecified impact via a crafted module. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42653 - http://www.opera.com/docs/changelogs/windows/1100/
CVE ID: CVE-2010-4588 State: PUBLISHED Published: 2010-12-23T17:00:00 Last Updated: 2024-08-07T03:51:17.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WBEMSingleView.ocx ActiveX control 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier allows remote attackers to execute arbitrary code via a crafted argument to the ReleaseContext method, a different vector than CVE-2010-3973, possibly an untrusted pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx - http://www.kb.cert.org/vuls/id/725596 - http://w
ng-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx - http://www.kb.cert.org/vuls/id/725596 - http://www.wooyun.org/bug.php?action=view&id=1006 - http://twitter.com/carsteneiram/status/17526155733110784 - http://secunia.com/advisories/42693
CVE ID: CVE-2010-4589 State: PUBLISHED Published: 2010-12-22T20:00:00 Last Updated: 2024-08-07T03:51:17.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM ENOVIA 6 allows remote attackers to inject arbitrary web script or HTML via vectors related to the emxFramework.FilterParameterPattern property. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1HE02563 - http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1HE02563 - http://www.vupen.com/english/advisories/2010/3211 - http://www.securityfocus.com/bid/45391 - http://secunia.com/advisories/42668
CVE ID: CVE-2010-4590 State: PUBLISHED Published: 2010-12-22T20:00:00Z Last Updated: 2024-09-16T22:45:48.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HTTP Access Services (HTTP-AS) in the Connection Manager in IBM Lotus Mobile Connect (LMC) before 6.1.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ77536 - http://www-01.ibm.com/support/docview.wss?uid=swg27020327 - http://securitytracker.com/id?1024871 - http://www.vupen.com/english/advisories/2010/3209
CVE ID: CVE-2010-4591 State: PUBLISHED Published: 2010-12-22T20:00:00 Last Updated: 2024-08-07T03:51:17.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Connection Manager in IBM Lotus Mobile Connect (LMC) before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not delete LTPA tokens in response to use of the iNotes Logoff button, which might allow physically proximate attackers to obtain access via an unattended client, related to a cookie domain mismatch. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42703 - http://www-01.ibm.com/support/docview.wss?uid=swg27020327 - http://www-01.ibm.com/support/docview.wss?uid
sories/42703 - http://www-01.ibm.com/support/docview.wss?uid=swg27020327 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ74393
CVE ID: CVE-2010-4592 State: PUBLISHED Published: 2010-12-22T20:00:00 Last Updated: 2024-08-07T03:51:17.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mobile Network Connections functionality in the Connection Manager in IBM Lotus Mobile Connect before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not properly handle failed attempts at establishing HTTP-TCP sessions, which allows remote attackers to cause a denial of service (memory consumption and daemon crash) by making many TCP connection attempts. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42703 - http://www-01.ibm.com/support/docview.wss?uid=swg270203
m Container: References: - http://secunia.com/advisories/42703 - http://www-01.ibm.com/support/docview.wss?uid=swg27020327 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ74588
CVE ID: CVE-2010-4593 State: PUBLISHED Published: 2010-12-22T20:00:00 Last Updated: 2024-08-07T03:51:17.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Connection Manager in IBM Lotus Mobile Connect before 6.1.4 does not properly maintain a certain reference count, which allows remote authenticated users to cause a denial of service (IP address exhaustion) by making invalid attempts to establish sessions with the same VPN ID from multiple devices. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42703 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ75012 - http://www-01.ibm.com/support/docview.wss?uid=swg27020327
CVE ID: CVE-2010-4594 State: PUBLISHED Published: 2010-12-22T20:00:00Z Last Updated: 2024-09-17T00:00:32.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Connection Manager in IBM Lotus Mobile Connect before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not properly process TCP connection requests, which allows remote attackers to cause a denial of service (memory consumption and HTTP-AS hang) by making many connection requests that trigger "queue size delta errors," related to a "timing hole" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27020327 - http://www-01.ibm.com/support/docvie
ontainer: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27020327 - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ75163
CVE ID: CVE-2010-4595 State: PUBLISHED Published: 2010-12-22T20:00:00Z Last Updated: 2024-09-17T01:50:31.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Connection Manager in IBM Lotus Mobile Connect before 6.1.4 disables the http.device.stanza blacklisting functionality for HTTP Access Services (HTTP-AS), which allows remote attackers to bypass intended access restrictions via an HTTP request that contains a disallowed User-Agent header. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ86207 - http://www-01.ibm.com/support/docview.wss?uid=swg27020327