Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-0370 State: PUBLISHED Published: 2010-01-21T22:00:00 Last Updated: 2024-08-07T00:45:12.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Node Blocks module 5.x-1.1 and earlier, and 6.x-1.3 and earlier, a module for Drupal, allows remote authenticated users, with permissions to create or edit content and administer blocks, to inject arbitrary web script or HTML via the edit-title parameter (aka block title). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38186 - http://www.securityfocus.com/archive/1/508933/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnera
ries/38186 - http://www.securityfocus.com/archive/1/508933/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/55606 - http://drupal.org/node/683584 - http://www.osvdb.org/61682 - http://drupal.org/node/683598 - http://drupal.org/node/683586 - http://packetstormsecurity.org/1001-exploits/drupalnb-xss.txt - http://www.securityfocus.com/bid/37782
CVE ID: CVE-2010-0371 State: PUBLISHED Published: 2010-01-21T22:00:00 Last Updated: 2024-08-07T00:45:12.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Hitmaaan Gallery 1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) gall and (2) levela parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38234 - http://osvdb.org/61801 - http://packetstormsecurity.org/1001-exploits/galleriehitmaaan-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/55704
CVE ID: CVE-2010-0372 State: PUBLISHED Published: 2010-01-21T22:00:00 Last Updated: 2024-08-07T00:45:12.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Articlemanager (com_articlemanager) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the artid parameter in a display action to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/55664 - http://packetstormsecurity.org/1001-exploits/joomlaarticlemanager-sql.txt - http://www.securityfocus.com/bid/37799 - http://www.exploit-db.com/exploits/11140
CVE ID: CVE-2010-0373 State: PUBLISHED Published: 2010-01-21T22:00:00 Last Updated: 2024-08-07T00:45:12.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the libros (com_libros) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1001-exploits/joomlalibros-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/55696 - http://www.exploit-db.com/exploits/11178
CVE ID: CVE-2010-0374 State: PUBLISHED Published: 2010-01-21T22:00:00 Last Updated: 2024-08-07T00:45:12.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Marketplace (com_marketplace) component 1.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the catid parameter in a show_category action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.packetstormsecurity.com/1001-exploits/joomlamarketplace-xss.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/55662 - http://www.securityfocus.com/bid/37819
CVE ID: CVE-2010-0375 State: PUBLISHED Published: 2010-01-21T22:00:00 Last Updated: 2024-08-07T00:45:12.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in product_list.php in JCE-Tech PHP Calendars, downloaded 2010-01-11, allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/61617 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55518 - http://www.exploit-db.com/exploits/11082 - http://secunia.com/advisories/38036 - ht
ibmcloud.com/vulnerabilities/55518 - http://www.exploit-db.com/exploits/11082 - http://secunia.com/advisories/38036 - http://www.securityfocus.com/bid/40757
CVE ID: CVE-2010-0376 State: PUBLISHED Published: 2010-01-21T22:00:00 Last Updated: 2024-08-07T00:45:12.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in product_list.php in JCE-Tech PHP Calendars, downloaded 2010-01-11, allows remote attackers to inject arbitrary web script or HTML via the cat parameter. NOTE: this issue is reportedly resultant from a forced SQL error message that occurs from exploitation of CVE-2010-0375. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/55517 - http://packetstormsecurity.org/1001-exploits/phpcalendars-xss.txt - http://www.securityf
oud.com/vulnerabilities/55517 - http://packetstormsecurity.org/1001-exploits/phpcalendars-xss.txt - http://www.securityfocus.com/bid/40391 - http://www.exploit-db.com/exploits/11082 - http://secunia.com/advisories/38036
CVE ID: CVE-2010-0377 State: PUBLISHED Published: 2010-01-21T22:00:00Z Last Updated: 2024-09-17T02:56:44.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modules/arcade/index.php in PHP MySpace Gold Edition 8.0 and 8.10 allows remote attackers to execute arbitrary SQL commands via the gid parameter in a play_game action. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38245 - http://packetstormsecurity.org/1001-exploits/phpmyspace-sql.txt
CVE ID: CVE-2010-0378 State: PUBLISHED Published: 2010-01-21T23:00:00 Last Updated: 2024-08-07T00:45:12.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player 6.0.79, as distributed in Microsoft Windows XP SP2 and SP3, allows remote attackers to execute arbitrary code by unloading a Flash object that is currently being accessed by a script, leading to memory corruption, aka a "Movie Unloading Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7580 - http://securitytracker.com/id?1023435 - http://www.kb.cert.org/vuls/i
ch/definition/oval%3Aorg.mitre.oval%3Adef%3A7580 - http://securitytracker.com/id?1023435 - http://www.kb.cert.org/vuls/id/204889 - http://secunia.com/secunia_research/2007-77/ - http://secunia.com/advisories/27105 - http://www.microsoft.com/technet/security/advisory/979267.mspx
CVE ID: CVE-2010-0379 State: PUBLISHED Published: 2010-01-21T23:00:00 Last Updated: 2024-08-07T00:45:12.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Macromedia Flash ActiveX control in Adobe Flash Player 6, as distributed in Microsoft Windows XP SP2 and SP3, might allow remote attackers to execute arbitrary code via unspecified vectors that are not related to the use-after-free "Movie Unloading Vulnerability" (CVE-2010-0378). NOTE: due to lack of details, it is not clear whether this overlaps any other CVE item. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1023435 - https://oval.c
Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1023435 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14146 - http://secunia.com/advisories/27105 - http://www.microsoft.com/technet/security/advisory/979267.mspx
CVE ID: CVE-2010-0380 State: PUBLISHED Published: 2010-01-22T21:20:00 Last Updated: 2024-08-07T00:45:12.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: install.php in JCE-Tech PHP Calendars, downloaded 20100121, allows remote attackers to bypass intended access restrictions and modify application settings via a direct request. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1001-exploits/phpcalendars-xss.txt - http://www.exploit-db.com/exploits/11082
CVE ID: CVE-2010-0381 State: PUBLISHED Published: 2010-01-22T21:20:00Z Last Updated: 2024-09-17T02:31:52.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modules/arcade/index.php in PHP MySpace Gold Edition 8.0 and 8.10 allows remote attackers to execute arbitrary SQL commands via the gid parameter in a show_stats action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38245
CVE ID: CVE-2010-0382 State: PUBLISHED Published: 2010-01-22T21:20:00 Last Updated: 2024-08-07T00:45:12.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta handles out-of-bailiwick data accompanying a secure response without re-fetching from the original source, which allows remote attackers to have an unspecified impact via a crafted response, aka Bug 20819. NOTE: this vulnerability exists because of a regression during the fix for CVE-2009-4022. Additional Analyst Notes: - CVE Program Container: References: - https://www.isc.org/advisories/CVE-2009-4022v6 - https://oval.c
al Analyst Notes: - CVE Program Container: References: - https://www.isc.org/advisories/CVE-2009-4022v6 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7086 - http://www.vupen.com/english/advisories/2010/1352 - http://secunia.com/advisories/40086 - http://www.vupen.com/english/advisories/2010/0622 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6665 - http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018 - http://www.debian.org/security/2010/dsa-2054 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11753
CVE ID: CVE-2010-0383 State: PUBLISHED Published: 2010-01-25T19:00:00 Last Updated: 2024-08-07T00:45:12.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, uses deprecated identity keys for certain directory authorities, which makes it easier for man-in-the-middle attackers to compromise the anonymity of traffic sources and destinations. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37901 - http://osvdb.org/61977 - http://archives.seul.org/or/announce/Jan-2010/msg00000.html - http://secunia.com/advisories/38198 - http://archives.seul.org/or/talk/Jan-2010/msg00161.html - http
010/msg00000.html - http://secunia.com/advisories/38198 - http://archives.seul.org/or/talk/Jan-2010/msg00161.html - http://archives.seul.org/or/talk/Jan-2010/msg00165.html - http://archives.seul.org/or/talk/Jan-2010/msg00162.html
CVE ID: CVE-2010-0384 State: PUBLISHED Published: 2010-01-25T19:00:00Z Last Updated: 2024-09-17T00:15:38.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor 0.2.2.x before 0.2.2.7-alpha, when functioning as a directory mirror, does not prevent logging of the client IP address upon detection of erroneous client behavior, which might make it easier for local users to discover the identities of clients in opportunistic circumstances by reading log files. Additional Analyst Notes: - CVE Program Container: References: - http://archives.seul.org/or/talk/Jan-2010/msg00162.html
CVE ID: CVE-2010-0385 State: PUBLISHED Published: 2010-01-25T19:00:00Z Last Updated: 2024-09-16T17:22:56.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, when functioning as a bridge directory authority, allows remote attackers to obtain sensitive information about bridge identities and bridge descriptors via a dbg-stability.txt directory query. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37901 - http://www.osvdb.org/61865 - http://archives.seul.org/or/announce/Jan-2010/msg00000.html - http://secunia.com/advisories/38198 - http://archives.seul.org/or/talk/Jan-2010/msg00
/announce/Jan-2010/msg00000.html - http://secunia.com/advisories/38198 - http://archives.seul.org/or/talk/Jan-2010/msg00162.html
CVE ID: CVE-2010-0386 State: PUBLISHED Published: 2010-01-25T19:00:00Z Last Updated: 2024-09-16T19:47:21.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Sun Java System Application Server 7 and 7 2004Q2 enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing (XST) attack, a related issue to CVE-2004-2763 and CVE-2005-3398. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200942-1
CVE ID: CVE-2010-0387 State: PUBLISHED Published: 2010-01-25T19:00:00 Last Updated: 2024-08-07T00:45:12.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in (1) webservd and (2) the admin server in Sun Java System Web Server 7.0 Update 7 allow remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via a long string in an "Authorization: Digest" HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://intevydis.blogspot.com/2010/01/sun-java-system-web-server-70u7-digest.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/55792 - http://lists.immunitysec.com/p
eb-server-70u7-digest.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/55792 - http://lists.immunitysec.com/pipermail/dailydave/2010-January/006014.html - http://securitytracker.com/id?1023488 - http://www.securityfocus.com/bid/37896
CVE ID: CVE-2010-0388 State: PUBLISHED Published: 2010-01-25T19:00:00 Last Updated: 2024-08-07T00:45:12.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the WebDAV implementation in webservd in Sun Java System Web Server 7.0 Update 6 allows remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in the encoding attribute of the XML declaration in a PROPFIND request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/37910 - http://intevydis.blogspot.com/2010/01/sun-java-system-web-server-70-webdav.html - https://exchange.xfo
s.com/bid/37910 - http://intevydis.blogspot.com/2010/01/sun-java-system-web-server-70-webdav.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/55812
CVE ID: CVE-2010-0389 State: PUBLISHED Published: 2010-01-25T19:00:00Z Last Updated: 2024-09-16T23:30:40.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: The admin server in Sun Java System Web Server 7.0 Update 6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an HTTP request that lacks a method token. Additional Analyst Notes: - CVE Program Container: References: - http://intevydis.blogspot.com/2010/01/sun-java-system-web-server-70-admin.html
CVE ID: CVE-2010-0390 State: PUBLISHED Published: 2010-01-26T18:00:00 Last Updated: 2024-08-07T00:45:12.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in maxImageUpload/index.php in PHP F1 Max's Image Uploader 1.0, when Apache is not configured to handle the mime-type for files with pjpeg or jpeg extensions, allows remote attackers to execute arbitrary code by uploading a file with a pjpeg or jpeg extension, then accessing it via a direct request to the file in original/. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/3
hird party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38018 - http://osvdb.org/61808 - http://www.exploit-db.com/exploits/11169
CVE ID: CVE-2010-0391 State: PUBLISHED Published: 2010-01-26T18:00:00Z Last Updated: 2024-09-16T23:31:58.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Embarcadero Technologies InterBase SMP 2009 9.0.3.437 allow remote attackers to execute arbitrary code via unknown vectors involving crafted packets. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/61892 - http://secunia.com/advisories/38285 - http://www.securityfocus.com/bid/37916
CVE ID: CVE-2010-0392 State: PUBLISHED Published: 2010-01-26T18:00:00 Last Updated: 2024-08-07T00:45:12.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in vpnconf.exe in TheGreenBow IPSec VPN Client 4.51.001, 4.65.003, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a long OpenScriptAfterUp parameter in a policy (.tgb) file, related to "phase 2." Additional Analyst Notes: - CVE Program Container: References: - http://www.senseofsecurity.com.au/advisories/SOS-10-001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/55793 - http://secunia.com/advisories/38262 - http://www.securityfocus.com/bid/403
e.xforce.ibmcloud.com/vulnerabilities/55793 - http://secunia.com/advisories/38262 - http://www.securityfocus.com/bid/40387 - http://www.thegreenbow.com/download.php?id=1000150 - http://osvdb.org/61866 - http://www.securityfocus.com/archive/1/509091/100/0/threaded
CVE ID: CVE-2010-0393 State: PUBLISHED Published: 2010-03-05T19:00:00 Last Updated: 2024-08-07T00:45:12.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4.1, relies on an environment variable to determine the file that provides localized message strings, which allows local users to gain privileges via a file that contains crafted localization data with format string specifiers. Additional Analyst Notes: - CVE Program Container: References: - http://www.cups.org/str.php?L3482 - http://www.ubuntu.com/usn/USN-906-1 - http://www.securityfocus.com/bid/38524 - http://lists.apple.com/archi
.php?L3482 - http://www.ubuntu.com/usn/USN-906-1 - http://www.securityfocus.com/bid/38524 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:072 - http://security.gentoo.org/glsa/glsa-201207-10.xml - http://www.mandriva.com/security/advisories?name=MDVSA-2010:073 - http://support.apple.com/kb/HT4077 - https://bugzilla.redhat.com/show_bug.cgi?id=558460
CVE ID: CVE-2010-0394 State: PUBLISHED Published: 2010-02-10T02:00:00 Last Updated: 2024-08-07T00:45:12.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: PyGIT.py in the Trac Git plugin (trac-git) before 0.0.20080710-3+lenny1 and before 0.0.20090320-1 on Debian GNU/Linux, when enabled in Trac, allows remote attackers to execute arbitrary commands via shell metacharacters in a crafted HTTP query that is used to generate a certain git command. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567039 - http://secunia.com/advisories/38325 - http://www.securityfocus.com/bid/38076 - http://www.debian.org/security/2010/ds
- http://secunia.com/advisories/38325 - http://www.securityfocus.com/bid/38076 - http://www.debian.org/security/2010/dsa-1990 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56105 - http://osvdb.org/62147
CVE ID: CVE-2010-0395 State: PUBLISHED Published: 2010-06-10T00:00:00 Last Updated: 2024-08-07T00:45:12.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenOffice.org 2.x and 3.0 before 3.2.1 allows user-assisted remote attackers to bypass Python macro security restrictions and execute arbitrary Python code via a crafted OpenDocument Text (ODT) file that triggers code execution when the macro directory structure is previewed. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:221 - http://secunia.com/advisories/60799 - http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml - http://lists.fedoraprojec
p://secunia.com/advisories/60799 - http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042534.html - http://secunia.com/advisories/40070 - http://www.vupen.com/english/advisories/2010/1369 - https://bugzilla.redhat.com/show_bug.cgi?id=574119 - http://www.vupen.com/english/advisories/2010/1350 - http://secunia.com/advisories/40084 - http://www.vupen.com/english/advisories/2010/1366 - http://www.debian.org/security/2010/dsa-2055 - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://www.redhat.com/support/errata/RHSA-2010-0459.html - http://secunia.com/advisories/40104 - http://www.vupen.co
l - http://www.redhat.com/support/errata/RHSA-2010-0459.html - http://secunia.com/advisories/40104 - http://www.vupen.com/english/advisories/2010/1353 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11091 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042468.html - http://secunia.com/advisories/41818 - http://www.us-cert.gov/cas/techalerts/TA10-287A.html - http://ubuntu.com/usn/usn-949-1 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042529.html - http://secunia.com/advisories/40107 - http://www.vupen.com/english/advisories/2010/2
ge-announce/2010-June/042529.html - http://secunia.com/advisories/40107 - http://www.vupen.com/english/advisories/2010/2905 - http://www.openoffice.org/security/cves/CVE-2010-0395.html
CVE ID: CVE-2010-0396 State: PUBLISHED Published: 2010-03-12T20:00:00 Last Updated: 2024-08-07T00:45:12.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the dpkg-source component in dpkg before 1.14.29 allows remote attackers to modify arbitrary files via a crafted Debian source archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2010/dsa-2011 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56887 - http://security.debian.org/pool/updates/main/d/dpkg/dpkg_1.14.29.tar.gz - http://www.vupen.com/english/advisories/2010/0582
CVE ID: CVE-2010-0397 State: PUBLISHED Published: 2010-03-16T19:00:00 Last Updated: 2024-08-07T00:45:12.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the first argument to the xmlrpc_decode_request function, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) and possibly have unspecified other impact via a crafted argument. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=573573 - http://support.apple.com/kb/HT4435 - http://www.openwall.com/lists/oss-sec