Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
an application crash. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050930.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050932.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050976.html - http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00005.html - http://osvdb.org/69275 - http://secunia.com/advisories/42288 - http://secunia.com/advisories/42302 - http://secunia.com/advisories/42815 - http://www.debian.org/security/2010/dsa-2140 - http://www.goss
/advisories/42302 - http://secunia.com/advisories/42815 - http://www.debian.org/security/2010/dsa-2140 - http://www.gossamer-threads.com/lists/apache/announce/391406 - http://www.securityfocus.com/bid/44900 - http://www.vupen.com/english/advisories/2010/2997 - http://www.vupen.com/english/advisories/2010/2998 - http://www.vupen.com/english/advisories/2011/0031 - https://access.redhat.com/security/cve/CVE-2010-3872 - https://bugzilla.redhat.com/show_bug.cgi?id=2248172 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63303 - https://github.com/apache/httpd-mod_fcgid/commit/b1afa70840b4ab4e6fbc12ac8798b2f3ccc336b2 - https://issues.apache.org/bugzilla/show_bug.cgi?id=49406
CVE ID: CVE-2010-3873 State: PUBLISHED Published: 2011-01-03T19:26:00 Last Updated: 2024-08-07T03:26:12.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: The X.25 implementation in the Linux kernel before 2.6.36.2 does not properly parse facilities, which allows remote attackers to cause a denial of service (heap memory corruption and panic) or possibly have unspecified other impact via malformed (1) X25_FAC_CALLING_AE or (2) X25_FAC_CALLED_AE data, related to net/x25/x25_facilities.c and net/x25/x25_in.c, a different vulnerability than CVE-2010-4164. Additional Analyst Notes: - CVE Program Container: References: - http://www.spinics.net/lists/netdev/msg145786.html - https://bu
al Analyst Notes: - CVE Program Container: References: - http://www.spinics.net/lists/netdev/msg145786.html - https://bugzilla.redhat.com/show_bug.cgi?id=649693 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2 - http://openwall.com/lists/oss-security/2010/11/04/3 - http://www.vupen.com/english/advisories/2011/0375 - http://openwall.com/lists/oss-security/2010/11/03/2 - http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:029 - http://secunia.com/advisories/43291 - http://www.spinics.net/lists/netdev/msg145873.html - h
ories?name=MDVSA-2011:029 - http://secunia.com/advisories/43291 - http://www.spinics.net/lists/netdev/msg145873.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a6331d6f9a4298173b413cf99a40cc86a9d92c37 - http://www.debian.org/security/2010/dsa-2126
CVE ID: CVE-2010-3874 State: PUBLISHED Published: 2010-12-29T17:27:00 Last Updated: 2024-08-07T03:26:12.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.36.2 on 64-bit platforms might allow local users to cause a denial of service (memory corruption) via a connect operation. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html - http://secunia.com/advisories/42778 - http://openwall.com/lists/oss-security/2010/12
ty-announce/2011-01/msg00004.html - http://secunia.com/advisories/42778 - http://openwall.com/lists/oss-security/2010/12/20/2 - http://secunia.com/advisories/42801 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html - http://openwall.com/lists/oss-security/2010/12/20/4 - http://openwall.com/lists/oss-security/2010/12/20/3 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.html - http://openwall.com/lists/oss-security/2010/12/21/1 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html - http://secunia.com/advisories/42932 - http://openwall.com/lists/oss-security/2010/11/04/4 - http://www.redhat.com/support/errata/RHS
ia.com/advisories/42932 - http://openwall.com/lists/oss-security/2010/11/04/4 - http://www.redhat.com/support/errata/RHSA-2011-0007.html - http://www.vupen.com/english/advisories/2011/0124 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://www.vupen.com/english/advisories/2010/3321 - http://www.spinics.net/lists/netdev/msg145791.html - http://www.vupen.com/english/advisories/2011/0298 - http://www.redhat.com/support/errata/RHSA-2010-0958.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2 - https://bugzilla.redhat.com/show_bug.cgi?id=649695 - http://secunia.com/advisories/42890 - http://www.vupen.com/english/advisories/2011/0012 - http://w
w_bug.cgi?id=649695 - http://secunia.com/advisories/42890 - http://www.vupen.com/english/advisories/2011/0012 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:029 - http://secunia.com/advisories/42745 - http://openwall.com/lists/oss-security/2010/12/20/5 - http://openwall.com/lists/oss-security/2010/11/03/3 - http://www.spinics.net/lists/netdev/msg146469.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0597d1b99fcfc2c0eada09a698f85ed413d4ba84 - http://www.debian.org/security/2010/dsa-2126
CVE ID: CVE-2010-3875 State: PUBLISHED Published: 2011-01-03T19:26:00 Last Updated: 2024-08-07T03:26:12.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ax25_getname function in net/ax25/af_ax25.c in the Linux kernel before 2.6.37-rc2 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory by reading a copy of this structure. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc2 - http://openwall.com/lists/oss-security/2010/11/04/5 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 - http://openwal
l.com/lists/oss-security/2010/11/04/5 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 - http://openwall.com/lists/oss-security/2010/11/02/7 - http://marc.info/?l=linux-netdev&m=128854507120898&w=2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fe10ae53384e48c51996941b7720ee16995cbcb7 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:029 - https://bugzilla.redhat.com/show_bug.cgi?id=649713 - http://www.securityfocus.com/bid/44630 - http://www.debian.org/security/2010/dsa-2126
CVE ID: CVE-2010-3876 State: PUBLISHED Published: 2011-01-03T19:26:00 Last Updated: 2024-08-07T03:26:12.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/packet/af_packet.c in the Linux kernel before 2.6.37-rc2 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory by leveraging the CAP_NET_RAW capability to read copies of the applicable structures. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42789 - http://openwall.com/lists/oss-security/2010/11/02/9 - http://www.vupen.com/english/advisories/2011/0024 - http://www.redhat.com/supp
all.com/lists/oss-security/2010/11/02/9 - http://www.vupen.com/english/advisories/2011/0024 - http://www.redhat.com/support/errata/RHSA-2011-0004.html - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://openwall.com/lists/oss-security/2010/11/02/12 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc2 - http://openwall.com/lists/oss-security/2010/11/04/5 - http://www.redhat.com/support/errata/RHSA-2011-0007.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=67286640f638f5ad41a946b9a3dc75327950248f - http://openwall.com/lists/oss-security/2010/11/02/10 - http://www.redhat.com/sup
86640f638f5ad41a946b9a3dc75327950248f - http://openwall.com/lists/oss-security/2010/11/02/10 - http://www.redhat.com/support/errata/RHSA-2010-0958.html - http://secunia.com/advisories/42963 - https://bugzilla.redhat.com/show_bug.cgi?id=649715 - http://marc.info/?l=linux-netdev&m=128854507220908&w=2 - http://openwall.com/lists/oss-security/2010/11/02/7 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://secunia.com/advisories/42890 - http://www.redhat.com/support/errata/RHSA-2011-0162.html - http://www.vupen.com/english/advisories/2011/0168 - http://www.securityfocus.com/bid/44630 - http://www.debian.org/security/2010/dsa-2126
CVE ID: CVE-2010-3877 State: PUBLISHED Published: 2011-01-03T19:26:00 Last Updated: 2024-08-07T03:26:11.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_name function in net/tipc/socket.c in the Linux kernel before 2.6.37-rc2 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory by reading a copy of this structure. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64578 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2011-0017.html - http://secunia.com/advisories/4
ive/1/520102/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2011-0017.html - http://secunia.com/advisories/46397 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc2 - http://openwall.com/lists/oss-security/2010/11/04/5 - http://marc.info/?l=linux-netdev&m=128854507420917&w=2 - http://openwall.com/lists/oss-security/2010/11/02/7 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - https://bugzilla.redhat.com/show_bug.cgi?id=649717 - http://secunia.com/advisories/42884 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=88f8a5e3e7defccd3925cabb1ee4d3994e5cdb52 - http://www.mandriva.com/security/advisories?name=MDVSA-
.6.git%3Ba=commit%3Bh=88f8a5e3e7defccd3925cabb1ee4d3994e5cdb52 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:029 - http://www.securityfocus.com/bid/44630 - http://www.debian.org/security/2010/dsa-2126
CVE ID: CVE-2010-3878 State: PUBLISHED Published: 2010-12-30T20:00:00Z Last Updated: 2024-08-07T03:26:12.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the JMX Console in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 allows remote attackers to hijack the authentication of administrators for requests that deploy WAR files. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0938.html - http://www.redhat.com/support/errata/RHSA-2010-0937.html - https://bugzilla.redhat.com/show_bug.cgi?id=604617 - http://www.redhat.com/sup
.com/support/errata/RHSA-2010-0937.html - https://bugzilla.redhat.com/show_bug.cgi?id=604617 - http://www.redhat.com/support/errata/RHSA-2010-0939.html - http://securitytracker.com/id?1024813
CVE ID: CVE-2010-3879 State: PUBLISHED Published: 2011-01-22T21:00:00 Last Updated: 2024-08-07T03:26:11.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: FUSE, possibly 2.8.5 and earlier, allows local users to create mtab entries with arbitrary pathnames, and consequently unmount any filesystem, via a symlink attack on the parent directory of the mountpoint of a FUSE filesystem, a different vulnerability than CVE-2010-0789. Additional Analyst Notes: - CVE Program Container: References: - http://www.halfdog.net/Security/FuseTimerace/ - http://www.ubuntu.com/usn/USN-1045-1 - http://secunia.com/advisories/42965 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62986 - http://
/USN-1045-1 - http://secunia.com/advisories/42965 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62986 - http://lists.grok.org.uk/pipermail/full-disclosure/2010-November/077247.html - http://openwall.com/lists/oss-security/2010/11/04/8 - http://www.vupen.com/english/advisories/2011/0302 - https://bugzilla.novell.com/show_bug.cgi?id=651598 - http://www.vupen.com/english/advisories/2011/0181 - http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html - https://bugzilla.redhat.com/show_bug.cgi?id=651183 - http://secunia.com/advisories/42961 - https://bugs.launchpad.net/bugs/670622 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=602333 - http://www.securityfocus.com/b
ugs.launchpad.net/bugs/670622 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=602333 - http://www.securityfocus.com/bid/44623 - http://openwall.com/lists/oss-security/2010/11/05/2 - http://www.ubuntu.com/usn/USN-1045-2 - http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053792.html - http://osvdb.org/70520 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:155
CVE ID: CVE-2010-3880 State: PUBLISHED Published: 2010-12-10T18:00:00 Last Updated: 2024-08-07T03:26:12.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/ipv4/inet_diag.c in the Linux kernel before 2.6.37-rc2 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message that contains multiple attribute elements, as demonstrated by INET_DIAG_BC_JMP instructions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42789 - http://www.vupen.com/english/advisories/2011/0024 - http://www.redhat.com/support/errat
//secunia.com/advisories/42789 - http://www.vupen.com/english/advisories/2011/0024 - http://www.redhat.com/support/errata/RHSA-2011-0004.html - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc2 - http://www.securityfocus.com/bid/44665 - https://bugzilla.redhat.com/show_bug.cgi?id=651264 - http://www.redhat.com/support/errata/RHSA-2011-0007.html - http://www.redhat.com/support/errata/RHSA-2010-0958.html - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=22e76c849d505d87c5ecf3d3
011-0012.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=22e76c849d505d87c5ecf3d3e6742a65f0ff4860 - http://secunia.com/advisories/42890 - http://openwall.com/lists/oss-security/2010/11/05/3 - http://secunia.com/advisories/42126 - http://www.spinics.net/lists/netdev/msg145899.html - http://openwall.com/lists/oss-security/2010/11/04/9 - http://www.debian.org/security/2010/dsa-2126
CVE ID: CVE-2010-3881 State: PUBLISHED Published: 2010-12-23T17:00:00 Last Updated: 2024-08-07T03:26:12.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/x86/kvm/x86.c in the Linux kernel before 2.6.36.2 does not initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via read operations on the /dev/kvm device. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html - http://www.spinics.net/lists/kvm/msg44130.html - http://www.securityfocus.com/bid/44666 - http://openwall.com/lists/oss-security/2010/11/05/4 - http:/
vm/msg44130.html - http://www.securityfocus.com/bid/44666 - http://openwall.com/lists/oss-security/2010/11/05/4 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=97e69aa62f8b5d338d6cff49be09e37cc1262838 - http://secunia.com/advisories/42932 - http://www.vupen.com/english/advisories/2011/0124 - http://securitytracker.com/id?1024912 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://www.vupen.com/english/advisories/2011/0298 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2 - https://bugzilla.redhat.com/show_bug.cgi?id=649920 - http://git.kernel.org/?p=virt/kvm/kvm.git%3Ba=commit%3Bh=831d9d02f9522e739825a51a11e3b
dhat.com/show_bug.cgi?id=649920 - http://git.kernel.org/?p=virt/kvm/kvm.git%3Ba=commit%3Bh=831d9d02f9522e739825a51a11e3bc5aa531a905 - http://openwall.com/lists/oss-security/2010/11/04/10 - http://rhn.redhat.com/errata/RHSA-2010-0998.html - http://www.vupen.com/english/advisories/2010/3287
CVE ID: CVE-2010-3882 State: PUBLISHED Published: 2010-10-08T20:00:00Z Last Updated: 2024-09-16T20:36:49.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in CMS Made Simple 1.7.1 and earlier allow remote attackers to inject arbitrary web script or HTML via input to the (1) Add Pages, (2) Add Global Content, (3) Edit Global Content, (4) Add Article, (5) Add Category, (6) Add Field Definition, or (7) Add Shortcut module. Additional Analyst Notes: - CVE Program Container: References: - http://security.bkis.com/multiple-vulnerabilities-in-cms-made-simple/ - http://secunia.com/advisories/40031
CVE ID: CVE-2010-3883 State: PUBLISHED Published: 2010-10-08T20:00:00Z Last Updated: 2024-09-16T23:06:00.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Change Group Permissions module in CMS Made Simple 1.7.1 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make permission modifications. Additional Analyst Notes: - CVE Program Container: References: - http://security.bkis.com/multiple-vulnerabilities-in-cms-made-simple/ - http://secunia.com/advisories/40031
CVE ID: CVE-2010-3884 State: PUBLISHED Published: 2010-10-08T20:00:00Z Last Updated: 2024-09-16T19:25:18.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in CMS Made Simple 1.8.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that reset the administrative password. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40031
CVE ID: CVE-2010-3885 State: REJECTED Published: 2010-10-08T21:00:00 Last Updated: 2010-10-28T09:00:00 Description: No description available.
CVE ID: CVE-2010-3886 State: PUBLISHED Published: 2010-10-08T21:00:00 Last Updated: 2024-08-07T03:26:12.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CTimeoutEventList::InsertIntoTimeoutList function in Microsoft mshtml.dll uses a certain pointer value as part of producing Timer ID values for the setTimeout and setInterval methods in VBScript and JScript, which allows remote attackers to obtain sensitive information about the heap memory addresses used by an application, as demonstrated by the Internet Explorer 8 application. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2010-06/0259.html - http://www.eey
- CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2010-06/0259.html - http://www.eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2010/20100630 - http://twitter.com/WisecWisec/statuses/17254776077 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11606
CVE ID: CVE-2010-3887 State: PUBLISHED Published: 2010-10-08T21:00:00Z Last Updated: 2024-09-17T04:09:47.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Limit Mail feature in the Parental Controls functionality in Mail on Apple Mac OS X does not properly enforce the correspondence whitelist, which allows remote attackers to bypass intended access restrictions and conduct e-mail communication by leveraging knowledge of a child's e-mail address and a parent's e-mail address, related to parental notification of unapproved e-mail addresses. Additional Analyst Notes: - CVE Program Container: References: - http://blog.kamens.us/2010/08/03/mac-os-x-mail-parental-controls-vulnera
t Notes: - CVE Program Container: References: - http://blog.kamens.us/2010/08/03/mac-os-x-mail-parental-controls-vulnerability/
CVE ID: CVE-2010-3888 State: PUBLISHED Published: 2010-10-08T21:00:00Z Last Updated: 2024-09-17T02:42:19.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Kaspersky Lab researchers and other researchers. Additional Analyst Notes: - CVE Program Container: References: - http://www.virusbtn.com/conference/vb2010/abstracts/LastMinute7.xml - http://www.symantec.com/connect/blogs/stuxnet-using-three-additional-zero-day-vulnerabilities - http://www.computerworld.com/s/article/9185919/I
connect/blogs/stuxnet-using-three-additional-zero-day-vulnerabilities - http://www.computerworld.com/s/article/9185919/Is_Stuxnet_the_best_malware_ever_ - http://www.eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2010/20100716 - http://www.virusbtn.com/conference/vb2010/abstracts/LastMinute8.xml - http://www.securelist.com/en/blog/2291/Myrtus_and_Guava_Episode_MS10_061
CVE ID: CVE-2010-3889 State: PUBLISHED Published: 2010-10-08T21:00:00Z Last Updated: 2024-09-16T23:20:23.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Microsoft researchers and other researchers. Additional Analyst Notes: - CVE Program Container: References: - http://www.virusbtn.com/conference/vb2010/abstracts/LastMinute7.xml - http://www.eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2010/20100716-%281%29 - http://www.symantec.com/connect/blogs/stuxnet-using-
s/Security-Center/Research/Zero-Day-Tracker/2010/20100716-%281%29 - http://www.symantec.com/connect/blogs/stuxnet-using-three-additional-zero-day-vulnerabilities - http://www.computerworld.com/s/article/9185919/Is_Stuxnet_the_best_malware_ever_ - http://www.virusbtn.com/conference/vb2010/abstracts/LastMinute8.xml - http://www.securelist.com/en/blog/2291/Myrtus_and_Guava_Episode_MS10_061
CVE ID: CVE-2010-3890 State: PUBLISHED Published: 2010-11-12T20:00:00 Last Updated: 2024-08-07T03:26:12.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM OmniFind Enterprise Edition before 9.1 allows remote attackers to inject arbitrary web script or HTML via the command parameter to the administration interface, as demonstrated by the command parameter to ESAdmin/collection.do. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/514688/100/0/threaded - http://www.securityfocus.com/bid/44740 - http://security.fatihkilic.de/advisory/fkilic-sa-2010-ibm-omnifind.txt - http://www.vup
ww.securityfocus.com/bid/44740 - http://security.fatihkilic.de/advisory/fkilic-sa-2010-ibm-omnifind.txt - http://www.vupen.com/english/advisories/2010/2933
CVE ID: CVE-2010-3891 State: PUBLISHED Published: 2010-11-12T20:00:00 Last Updated: 2024-08-07T03:26:12.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in ESAdmin/security.do in the administrator interface in IBM OmniFind Enterprise Edition before 9.1 allows remote attackers to hijack the authentication of administrators for requests that add an administrative user via a saveNewUser action. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/69083 - http://www.exploit-db.com/exploits/15473 - http://www.securityfocus.com/archive/1/514688/100/0/threaded - http://www.securityfocus.com/bid/44740 - h