Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-2062 State: PUBLISHED Published: 2014-12-26T20:00:00 Last Updated: 2024-08-07T02:17:13.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, allows remote attackers to execute arbitrary code via a crafted length value in an RDT chunk header. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2009/Jul/418 - https://dzcore.wordpress.com/2009/07/27/dzc-2009-001-the-movie-player-and-vlc-media-player-real-data-transport-parsing-
https://dzcore.wordpress.com/2009/07/27/dzc-2009-001-the-movie-player-and-vlc-media-player-real-data-transport-parsing-integer-underflow/ - http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=dc74600c97eb834c08674676e209afa842053aca - http://openwall.com/lists/oss-security/2010/06/04/4
CVE ID: CVE-2010-2063 State: PUBLISHED Published: 2010-06-17T16:00:00 Last Updated: 2024-08-07T02:17:13.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13 allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted field in a packet. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=130835366526620&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59481 - http://osvdb.org/65518 - http://marc.info/?l=bugtraq&m=1291
https://exchange.xforce.ibmcloud.com/vulnerabilities/59481 - http://osvdb.org/65518 - http://marc.info/?l=bugtraq&m=129138831608422&w=2 - http://www.securityfocus.com/bid/40884 - http://marc.info/?l=samba-announce&m=127668712312761&w=2 - http://secunia.com/advisories/40210 - http://www.samba.org/samba/ftp/history/samba-3.3.13.html - http://www.samba.org/samba/ftp/patches/security/samba-3.3.12-CVE-2010-2063.patch - http://secunia.com/advisories/40145 - http://www.vupen.com/english/advisories/2010/1507 - http://www.samba.org/samba/ftp/patches/security/samba-3.0.37-CVE-2010-2063.patch - http://www.vupen.com/english/advisories/2010/1505 - http://marc.info/?l=bugtraq&m=130835366526620&w=2 - http:
63.patch - http://www.vupen.com/english/advisories/2010/1505 - http://marc.info/?l=bugtraq&m=130835366526620&w=2 - http://secunia.com/advisories/40293 - http://www.debian.org/security/2010/dsa-2061 - http://ubuntu.com/usn/usn-951-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:119 - http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html - http://marc.info/?l=bugtraq&m=129138831608422&w=2 - http://secunia.com/advisories/40221 - http://www.vupen.com/english/advisories/2010/1504 - http://support.apple.com/kb/HT4312 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9859 - http://www.redhat.com/support/errata/RHSA-2010-0488
rg/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9859 - http://www.redhat.com/support/errata/RHSA-2010-0488.html - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://www.vupen.com/english/advisories/2010/1486 - http://secunia.com/advisories/42319 - http://www.samba.org/samba/security/CVE-2010-2063.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12427 - http://www.securitytracker.com/id?1024107 - http://www.vupen.com/english/advisories/2010/1517 - http://www.vupen.com/english/advisories/2010/3063 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7115 - http://labs
es/2010/3063 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7115 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=873 - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.471914
CVE ID: CVE-2010-2064 State: PUBLISHED Published: 2019-10-29T21:01:26 Last Updated: 2024-08-07T02:17:14.479Z Vendors: rpcbind Products: rpcbind Problem Types: Insecure (predictable) temporary file use Description: rpcbind 0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on (1) /tmp/portmap.xdr and (2) /tmp/rpcbind.xdr. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-2064 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-2064 - https://access.redhat.com/security/cve/cve-2010-2064 - https://www.openwall.com/lists/oss-security/2010/06/08/3
CVE ID: CVE-2010-2065 State: PUBLISHED Published: 2010-06-23T18:00:00 Last Updated: 2024-08-07T02:17:14.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the TIFFroundup macro in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TIFF file that triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40181 - http://blogs.sun.com/security/entry/cve_2010_2065_cve_2010 - http://marc.info/?l=oss-security&m=127731610612908&w=2 - http://www.vupen.com/english/advisories/2010/1638 - http://slackware.com/securit
?l=oss-security&m=127731610612908&w=2 - http://www.vupen.com/english/advisories/2010/1638 - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.596424 - http://www.vupen.com/english/advisories/2011/0621 - http://www.ubuntu.com/usn/USN-954-1 - http://security.gentoo.org/glsa/glsa-201209-02.xml - http://www.vupen.com/english/advisories/2011/0204 - http://www.remotesensing.org/libtiff/v3.9.3.html - https://bugzilla.redhat.com/show_bug.cgi?id=601274 - https://bugs.launchpad.net/ubuntu/+source/tiff/+bug/589565 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:043 - http://secunia.com/advisories/40381 - http://secunia.com/advisories/50726
CVE ID: CVE-2010-2066 State: PUBLISHED Published: 2010-09-08T19:00:00 Last Updated: 2024-08-07T02:17:14.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mext_check_arguments function in fs/ext4/move_extent.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a MOVE_EXT ioctl call that specifies this file as a donor. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0610.html - http://www.ubuntu.com/usn/USN-1000-1 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00000.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35 - http://www.openwall.c
ty-announce/2010-08/msg00000.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35 - http://www.openwall.com/lists/oss-security/2010/06/07/1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1f5a81e41f8b1a782c68d3843e9ec1bfaadf7d72 - http://secunia.com/advisories/43315 - http://www.openwall.com/lists/oss-security/2010/06/09/1 - https://bugzilla.redhat.com/show_bug.cgi?id=601006 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://www.securityfocus.com/archive/1/516397/100/0/threaded
CVE ID: CVE-2010-2067 State: PUBLISHED Published: 2010-06-23T18:00:00 Last Updated: 2024-08-07T02:17:14.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the TIFFFetchSubjectDistance function in tif_dirread.c in LibTIFF before 3.9.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long EXIF SubjectDistance field in a TIFF file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40241 - http://bugzilla.maptools.org/show_bug.cgi?id=2212 - http://marc.info/?l=oss-security&m=127731610612908&w=2 - http://www.vupen.com/english/advisories/2010/163
.cgi?id=2212 - http://marc.info/?l=oss-security&m=127731610612908&w=2 - http://www.vupen.com/english/advisories/2010/1638 - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.596424 - http://osvdb.org/65676 - http://www.ubuntu.com/usn/USN-954-1 - http://www.remotesensing.org/libtiff/v3.9.4.html - http://security.gentoo.org/glsa/glsa-201209-02.xml - https://bugzilla.redhat.com/show_bug.cgi?id=599576 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=874 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://secunia.com/advisories/40381 - http://secunia.com/advisories/50726
CVE ID: CVE-2010-2068 State: PUBLISHED Published: 2010-06-18T16:00:00 Last Updated: 2024-08-07T02:17:14.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_proxy_http.c in mod_proxy_http in the Apache HTTP Server 2.2.9 through 2.2.15, 2.3.4-alpha, and 2.3.5-alpha on Windows, NetWare, and OS/2, in certain configurations involving proxy worker pools, does not properly detect timeouts, which allows remote attackers to obtain a potentially sensitive response intended for a different client in opportunistic circumstances via a normal HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1436 - http://mail-archiv
yst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1436 - http://mail-archives.apache.org/mod_mbox/httpd-announce/201006.mbox/%3C4C12933D.4060400%40apache.org%3E - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6931 - http://secunia.com/advisories/40824 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11491 - http://www.securityfocus.com/archive/1/511809/100/0/threaded - http://secunia.com/advisories/41722 - http://www-01.ibm.com/support/docview.wss?uid=nas352ca0ac9460f9b8886257777005dd0e4 - http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html - ht
d=nas352ca0ac9460f9b8886257777005dd0e4 - http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html - http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html - http://secunia.com/advisories/41490 - http://marc.info/?l=apache-announce&m=128009718610929&w=2 - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995 - http://www.ibm.com/support/docview.wss?uid=swg1PM16366 - http://securitytracker.com/id?1024096 - http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html - http://httpd.apache.org/security/vulnerabilities_22.html - http://www.apache.org/dist/httpd/patches/apply_to_2.2.15/CVE-2010-2068-r953616.patch - http://secunia.c
lities_22.html - http://www.apache.org/dist/httpd/patches/apply_to_2.2.15/CVE-2010-2068-r953616.patch - http://secunia.com/advisories/40206 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59413 - http://www.redhat.com/support/errata/RHSA-2011-0896.html - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995 - http://secunia.com/advisories/41480 - http://www.apache.org/dist/httpd/patches/apply_to_2.3.5/CVE-2010-2068-r953418.patch - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - http://www.securityfocus.com/bid/40827 - http://support.apple.com/kb/HT4581 - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40
t.apple.com/kb/HT4581 - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f22
704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r688df6f16f141e966a0a47f817e559312b3da27886f59116a94b273d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re2e23465bbdb17ffe109d21b4f192e6b58221cd7aa8797d530b4cd75%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E
s://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r064df0985779b7ee044d3120d71ba59750427cf53f57ba3384e3773f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50
b2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2010-2069 State: REJECTED Published: 2017-07-24T16:00:00 Last Updated: 2017-07-24T15:57:01 Description: No description available.
CVE ID: CVE-2010-2070 State: PUBLISHED Published: 2010-06-16T20:00:00 Last Updated: 2024-08-07T02:17:13.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/ia64/xen/faults.c in Xen 3.4 and 4.0 in Linux kernel 2.6.18, and possibly other kernel versions, when running on IA-64 architectures, allows local users to cause a denial of service and "turn on BE by modifying the user mask of the PSR," as demonstrated via exploitation of CVE-2006-0742. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0610.html - http://xenbits.xensource.com/xen-4.0-testing.hg?rev/42caadb14edb - http://www.openwall.com/lists/oss-security/2010
tml - http://xenbits.xensource.com/xen-4.0-testing.hg?rev/42caadb14edb - http://www.openwall.com/lists/oss-security/2010/06/10/2 - http://osvdb.org/65541 - http://www.securityfocus.com/bid/40776 - http://secunia.com/advisories/43315 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59373 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - https://bugzilla.redhat.com/show_bug.cgi?id=586415 - http://www.securityfocus.com/archive/1/516397/100/0/threaded
CVE ID: CVE-2010-2071 State: PUBLISHED Published: 2010-06-16T20:00:00Z Last Updated: 2024-08-07T02:17:14.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: The btrfs_xattr_set_acl function in fs/btrfs/acl.c in btrfs in the Linux kernel 2.6.34 and earlier does not check file ownership before setting an ACL, which allows local users to bypass file permissions by setting arbitrary ACLs, as demonstrated using setfacl. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=2f26afba - http://lkml.org/lkml/2010/5/17/544 - http://www.openwall.com/lists/oss-security/2010/06/14/2 - http://www.ope
2f26afba - http://lkml.org/lkml/2010/5/17/544 - http://www.openwall.com/lists/oss-security/2010/06/14/2 - http://www.openwall.com/lists/oss-security/2010/06/11/3
CVE ID: CVE-2010-2072 State: PUBLISHED Published: 2010-06-16T20:00:00 Last Updated: 2024-08-07T02:17:14.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pyftpd 0.8.4 creates log files with predictable names in a temporary directory, which allows local users to cause a denial of service and obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/59429 - http://www.securityfocus.com/bid/40842 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=585773 - http://www.openwall.com/lists/oss-security/2010/06/13/1
CVE ID: CVE-2010-2073 State: PUBLISHED Published: 2010-06-16T20:00:00 Last Updated: 2024-08-07T02:17:13.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: auth_db_config.py in Pyftpd 0.8.4 contains hard-coded usernames and passwords for the (1) test, (2) user, and (3) roxon accounts, which allows remote attackers to read arbitrary files from the FTP server. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/59431 - http://www.securityfocus.com/bid/40839 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=585776 - http://www.openwall.com/lists/oss-security/2010/06/13/2
CVE ID: CVE-2010-2074 State: PUBLISHED Published: 2010-06-16T20:00:00 Last Updated: 2024-08-07T02:17:14.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: istream.c in w3m 0.5.2 and possibly other versions, when ssl_verify_server is enabled, does not properly handle a '\0' character in a domain name in the (1) subject's Common Name or (2) Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/20
009-2408. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/06/14/4 - http://secunia.com/advisories/40134 - http://osvdb.org/65538 - http://www.securitytracker.com/id?1024252 - http://www.vupen.com/english/advisories/2010/1467 - http://www.vupen.com/english/advisories/2010/1879 - http://www.vupen.com/english/advisories/2010/1928 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://www.redhat.com/support/errata/RHSA-2010-0565.html - http://www.securityfocus.com/bid/40837 - http://secunia.com/advisories/40733 - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044401.html
CVE ID: CVE-2010-2075 State: PUBLISHED Published: 2010-06-15T01:00:00 Last Updated: 2024-08-07T02:17:13.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally introduced modification (Trojan Horse) in the DEBUG3_DOLOG_SYSTEM macro, which allows remote attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.unrealircd.com/txt/unrealsecadvisory.20100612.txt - http://www.vupen.com/english/advisories/2010/1437 - http://security.gentoo.org/glsa/glsa-201006-21.xml - http://osvdb.org/65445 - http://www.openwall.
dvisories/2010/1437 - http://security.gentoo.org/glsa/glsa-201006-21.xml - http://osvdb.org/65445 - http://www.openwall.com/lists/oss-security/2010/06/14/11 - http://www.exploit-db.com/exploits/13853 - http://secunia.com/advisories/40169 - http://seclists.org/fulldisclosure/2010/Jun/277 - http://www.securityfocus.com/bid/40820 - http://seclists.org/fulldisclosure/2010/Jun/284
CVE ID: CVE-2010-2076 State: PUBLISHED Published: 2010-08-19T17:43:00 Last Updated: 2024-08-07T02:17:13.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache CXF 2.0.x before 2.0.13, 2.1.x before 2.1.10, and 2.2.x before 2.2.9, as used in Apache ServiceMix, Apache Camel, Apache Chemistry, Apache jUDDI, Apache Geronimo, and other products, does not properly reject DTDs in SOAP messages, which allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via a crafted DTD, as demonstrated by an entity declaration in a request to samples/wsdl_first_pure_xml, a similar issue to CVE-2010-1632. Ad
demonstrated by an entity declaration in a request to samples/wsdl_first_pure_xml, a similar issue to CVE-2010-1632. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/42492 - http://geronimo.apache.org/2010/07/21/apache-geronimo-v216-released.html - http://svn.apache.org/repos/asf/cxf/trunk/security/CVE-2010-2076.pdf - http://secunia.com/advisories/41025 - http://geronimo.apache.org/22x-security-report.html - http://secunia.com/advisories/41016 - https://issues.apache.org/jira/browse/GERONIMO-5383 - http://www.listware.net/201006/cxf-users/60160-important-apache-cxf-security-advisory-cve-2010-2076.html - http://geronimo.apache.org/21x-security
1006/cxf-users/60160-important-apache-cxf-security-advisory-cve-2010-2076.html - http://geronimo.apache.org/21x-security-report.html - http://secunia.com/advisories/40969 - https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E - https://lists.a
g/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E
CVE ID: CVE-2010-2077 State: REJECTED Published: 2010-05-25T22:00:00Z Last Updated: 2024-09-17T00:16:23.979Z Description: No description available.
CVE ID: CVE-2010-2078 State: PUBLISHED Published: 2010-05-25T22:00:00 Last Updated: 2024-08-07T02:17:13.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: DataTrack System 3.5 allows remote attackers to list the root directory via a (1) /%u0085/ or (2) /%u00A0/ URI. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/58734 - http://cross-site-scripting.blogspot.com/2010/05/datatrack-system-35-persistent-xss.html - http://packetstormsecurity.org/1005-exploits/datatrackserver35-xss.txt
CVE ID: CVE-2010-2079 State: PUBLISHED Published: 2010-05-25T22:00:00 Last Updated: 2024-08-07T02:17:14.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: DataTrack System 3.5 allows remote attackers to bypass intended restrictions on file extensions, and read arbitrary files, via a trailing backslash in a URI, as demonstrated by (1) web.config\ and (2) .ascx\ files. Additional Analyst Notes: - CVE Program Container: References: - http://cross-site-scripting.blogspot.com/2010/05/datatrack-system-35-persistent-xss.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/58735 - http://packetstormsecurity.org/1005-exploits/datatrackserver35-xss.txt
CVE ID: CVE-2010-2080 State: PUBLISHED Published: 2010-09-20T20:00:00 Last Updated: 2024-08-07T02:17:13.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) 2.3.x before 2.3.6 and 2.4.x before 2.4.8 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://security-tracker.debian.org/tracker/CVE-2010-2080 - http://secunia.com/advisories/41381 - http://otrs.org/advisory/OSA-2010-02-en/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/61868 - http://lists.opensuse.org/opensuse-sec