Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-4185 State: PUBLISHED Published: 2010-11-05T18:00:00 Last Updated: 2024-08-07T03:34:37.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Energine, possibly 2.3.8 and earlier, allows remote attackers to execute arbitrary SQL commands via the NRGNSID cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/514494/100/0/threaded - http://secunia.com/advisories/41973 - http://www.exploit-db.com/exploits/15327
CVE ID: CVE-2010-4186 State: PUBLISHED Published: 2010-11-05T18:00:00 Last Updated: 2024-08-07T03:34:37.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in process.asp in OnlineTechTools Online Work Order System (OWOS) Professional Edition 2.10 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42111 - http://www.securityfocus.com/bid/44608 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62972 - http://osvdb.org/68972 - http://www.exploit-db.com
/44608 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62972 - http://osvdb.org/68972 - http://www.exploit-db.com/exploits/15397
CVE ID: CVE-2010-4187 State: PUBLISHED Published: 2011-02-10T15:00:00 Last Updated: 2024-08-07T03:34:37.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed chunk in a Director file, a different vulnerability than CVE-2011-0555, CVE-2010-4093, CVE-2010-4190, CVE-2010-4191, CVE-2010-4192, and CVE-2010-4306. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46317 - http://www.vupen.com/english/advisories/2011/0335 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=892 -
/www.vupen.com/english/advisories/2011/0335 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=892 - http://www.adobe.com/support/security/bulletins/apsb11-01.html - http://www.securitytracker.com/id?1025056
CVE ID: CVE-2010-4188 State: PUBLISHED Published: 2011-02-10T15:00:00 Last Updated: 2024-08-07T03:34:37.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with an IFWV chunk with a size field of 0, which is used in the calculation of a file offset and causes invalid data to be used as a loop counter, triggering a heap-based buffer overflow, a different vulnerability than CVE-2010-2587 and CVE-2010-2588. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisor
and CVE-2010-2588. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0335 - http://www.adobe.com/support/security/bulletins/apsb11-01.html - http://www.securityfocus.com/bid/46319 - http://www.securitytracker.com/id?1025056 - http://www.securityfocus.com/archive/1/516332/100/0/threaded - http://dvlabs.tippingpoint.com/advisory/TPTI-11-01
CVE ID: CVE-2010-4189 State: PUBLISHED Published: 2011-02-10T15:00:00 Last Updated: 2024-08-07T03:34:37.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IML32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie containing a GIF image with a crafted global color table size value, which causes an out-of-range pointer offset. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0335 - http://www.adobe.com/support/security/bulletins/apsb11-01.html - http://www.securitytracker.com/id?1025056 - http://www.securit
www.adobe.com/support/security/bulletins/apsb11-01.html - http://www.securitytracker.com/id?1025056 - http://www.securityfocus.com/archive/1/516334/100/0/threaded - http://dvlabs.tippingpoint.com/advisory/TPTI-11-04 - http://www.securityfocus.com/bid/46320
CVE ID: CVE-2010-4190 State: PUBLISHED Published: 2011-02-10T15:00:00 Last Updated: 2024-08-07T03:34:37.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted CSWV RIFF chunk that causes an incorrect calculation of an offset for a substructure, which causes an out-of-bounds "seek" of heap memory, a different vulnerability than CVE-2011-0555, CVE-2010-4093, CVE-2010-4187, CVE-2010-4191, CVE-2010-4192, and CVE-2010-4306. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/a
, and CVE-2010-4306. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-11-080/ - http://www.vupen.com/english/advisories/2011/0335 - http://www.securityfocus.com/archive/1/516324/100/0/threaded - http://www.adobe.com/support/security/bulletins/apsb11-01.html - http://www.securityfocus.com/bid/46324 - http://www.securitytracker.com/id?1025056
CVE ID: CVE-2010-4191 State: PUBLISHED Published: 2011-02-10T15:00:00 Last Updated: 2024-08-07T03:34:37.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0555, CVE-2010-4093, CVE-2010-4187, CVE-2010-4190, CVE-2010-4192, and CVE-2010-4306. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46325 - http://www.vupen.com/english/advisories/2011/0335 - http://www.adobe.com/support/security/bulletins/apsb11-01.html - http://www.securitytracker
glish/advisories/2011/0335 - http://www.adobe.com/support/security/bulletins/apsb11-01.html - http://www.securitytracker.com/id?1025056
CVE ID: CVE-2010-4192 State: PUBLISHED Published: 2011-02-10T15:00:00 Last Updated: 2024-08-07T03:34:37.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted 3D Assets 0xFFFFFF88 type record that triggers an incorrect memory allocation, a different vulnerability than CVE-2011-0555, CVE-2010-4093, CVE-2010-4187, CVE-2010-4190, CVE-2010-4191, and CVE-2010-4306. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46326 - http://www.vupen.com/english/advisories/2011/0335 - h
Container: References: - http://www.securityfocus.com/bid/46326 - http://www.vupen.com/english/advisories/2011/0335 - http://www.adobe.com/support/security/bulletins/apsb11-01.html - http://www.securityfocus.com/archive/1/516322/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-11-078 - http://www.securitytracker.com/id?1025056
CVE ID: CVE-2010-4193 State: PUBLISHED Published: 2011-02-10T15:00:00 Last Updated: 2024-08-07T03:34:37.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/189929 - http://www.vupen.com/english/advisories/2011/0335 - http://www.adobe.com/support/security/bulletins/apsb11-01.html - http://www.securitytracker.com/id?1025056 - http://www.securityfocus.com/bid/46334
CVE ID: CVE-2010-4194 State: PUBLISHED Published: 2011-02-10T15:00:00 Last Updated: 2024-08-07T03:34:37.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46335 - http://www.kb.cert.org/vuls/id/189929 - http://www.vupen.com/english/advisories/2011/0335 - http://www.adobe.com/support/security/bulletins/apsb11-01.html - http://www.securitytracker.com/id?1025056
CVE ID: CVE-2010-4195 State: PUBLISHED Published: 2011-02-10T15:00:00 Last Updated: 2024-08-07T03:34:37.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TextXtra module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/189929 - http://www.vupen.com/english/advisories/2011/0335 - http://www.securityfocus.com/bid/46336 - http://www.adobe.com/support/security/bulletins/apsb11-01.html - http://www.securitytracker.com/id?1025056
CVE ID: CVE-2010-4196 State: PUBLISHED Published: 2011-02-10T15:00:00 Last Updated: 2024-08-07T03:34:37.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Shockwave 3d Asset module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/189929 - http://www.securityfocus.com/bid/46338 - http://www.vupen.com/english/advisories/2011/0335 - http://www.adobe.com/support/security/bulletins/apsb11-01.html - http://www.securitytracker.com/id?1025056
CVE ID: CVE-2010-4197 State: PUBLISHED Published: 2010-11-05T22:00:00 Last Updated: 2024-08-07T03:34:37.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving text editing. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.html - http://googlechromereleases.blogspot.com/2010/11/stable-c
ject.org/pipermail/package-announce/2011-January/052906.html - http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html - http://trac.webkit.org/changeset/70594 - http://code.google.com/p/chromium/issues/detail?id=51602 - http://www.vupen.com/english/advisories/2011/0216 - http://secunia.com/advisories/42109 - http://secunia.com/advisories/43086 - http://www.securityfocus.com/bid/45720 - http://www.redhat.com/support/errata/RHSA-2011-0177.html - https://bugs.webkit.org/show_bug.cgi?id=48349 - http://www.vupen.com/english/advisories/2011/0552 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12266 - https://bugzilla.redhat.com/show_bug
l.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12266 - https://bugzilla.redhat.com/show_bug.cgi?id=656115
CVE ID: CVE-2010-4198 State: PUBLISHED Published: 2010-11-05T22:00:00 Last Updated: 2024-08-07T03:34:37.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, does not properly handle large text areas, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.html - http://code.google.com/p/ch
1:039 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.html - http://code.google.com/p/chromium/issues/detail?id=55257 - http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html - http://www.vupen.com/english/advisories/2011/0216 - http://secunia.com/advisories/42109 - http://secunia.com/advisories/43086 - http://www.securityfocus.com/bid/45719 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12157 - http://www.redhat.com/support/errata/RHSA-2011-0177.html - http://www.vupen.com/english/advisories/2011/0552 - https://bugzilla.redhat.com/show_bug.cgi?id=656118 - https://bugs.webkit.org/show_bug.cgi?id=45
h/advisories/2011/0552 - https://bugzilla.redhat.com/show_bug.cgi?id=656118 - https://bugs.webkit.org/show_bug.cgi?id=45611
CVE ID: CVE-2010-4199 State: PUBLISHED Published: 2010-11-05T22:00:00 Last Updated: 2024-08-07T03:34:37.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 7.0.517.44 does not properly perform a cast of an unspecified variable during processing of an SVG use element, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SVG document. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html - http://secunia.com/advisories/42109 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11
secunia.com/advisories/42109 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11429 - http://www.debian.org/security/2011/dsa-2188 - http://code.google.com/p/chromium/issues/detail?id=58657
CVE ID: CVE-2010-4200 State: REJECTED Published: 2010-11-05T22:00:00 Last Updated: 2010-11-18T10:00:00 Description: No description available.
CVE ID: CVE-2010-4201 State: PUBLISHED Published: 2010-11-05T22:00:00 Last Updated: 2024-08-07T03:34:37.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Google Chrome before 7.0.517.44 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving text control selections. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12137 - http://secunia.com/advisories/42109 - http://code.google.com/p/chromium/issues/detail?id
Aorg.mitre.oval%3Adef%3A12137 - http://secunia.com/advisories/42109 - http://code.google.com/p/chromium/issues/detail?id=58741
CVE ID: CVE-2010-4202 State: PUBLISHED Published: 2010-11-05T22:00:00 Last Updated: 2024-08-07T03:34:37.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in Google Chrome before 7.0.517.44 on Linux allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted font. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=59320 - http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html - http://secunia.com/advisories/42109 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14277
CVE ID: CVE-2010-4203 State: PUBLISHED Published: 2010-11-05T22:00:00 Last Updated: 2024-08-07T03:34:37.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before 7.0.517.44, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via invalid frames. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42690 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12198 - http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html - http://security.gentoo.org/glsa/gl
12198 - http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html - http://security.gentoo.org/glsa/glsa-201101-03.xml - https://rhn.redhat.com/errata/RHSA-2010-0999.html - http://secunia.com/advisories/42109 - http://review.webmproject.org/gitweb?p=libvpx.git%3Ba=blob%3Bf=CHANGELOG - http://code.google.com/p/chromium/issues/detail?id=60055 - http://secunia.com/advisories/42118 - http://www.vupen.com/english/advisories/2011/0115 - http://review.webmproject.org/gitweb?p=libvpx.git%3Ba=commit%3Bh=09bcc1f710ea65dc158639479288fb1908ff0c53 - http://secunia.com/advisories/42908
CVE ID: CVE-2010-4204 State: PUBLISHED Published: 2010-11-05T22:00:00 Last Updated: 2024-08-07T03:34:37.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, accesses a frame object after this object has been destroyed, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.html - http://googlechromereleases.blogspot
ttp://lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.html - http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html - http://code.google.com/p/chromium/issues/detail?id=60238 - http://www.vupen.com/english/advisories/2011/0216 - http://secunia.com/advisories/42109 - https://bugzilla.redhat.com/show_bug.cgi?id=656126 - http://trac.webkit.org/changeset/70517 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12174 - http://secunia.com/advisories/43086 - https://bugs.webkit.org/show_bug.cgi?id=48281 - http://www.securityfocus.com/bid/45718 - http://www.redhat.com/support/errata/RHSA-2011-0177.html - http://www.vup
281 - http://www.securityfocus.com/bid/45718 - http://www.redhat.com/support/errata/RHSA-2011-0177.html - http://www.vupen.com/english/advisories/2011/0552
CVE ID: CVE-2010-4205 State: PUBLISHED Published: 2010-11-05T22:00:00 Last Updated: 2024-08-07T03:34:37.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 7.0.517.44 does not properly handle the data types of event objects, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11537 - http://secunia.com/advisories/42109 - http://code.google.com/p/chromium/issues/det
oval%3Aorg.mitre.oval%3Adef%3A11537 - http://secunia.com/advisories/42109 - http://code.google.com/p/chromium/issues/detail?id=60769 - http://code.google.com/p/chromium/issues/detail?id=60327 - http://code.google.com/p/chromium/issues/detail?id=61255
CVE ID: CVE-2010-4206 State: PUBLISHED Published: 2010-11-05T22:00:00 Last Updated: 2024-08-07T03:34:37.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted SVG document, related to effects in the application of filters. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 - http://lists.fedoraproject.org/piperm
r: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052906.html - http://trac.webkit.org/changeset/70652 - http://googlechromereleases.blogspot.com/2010/11/stable-channel-update.html - http://www.vupen.com/english/advisories/2011/0216 - http://secunia.com/advisories/42109 - http://code.google.com/p/chromium/issues/detail?id=60688 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11949 - http://secunia.com/advisories/43086 - https://bugs.webkit.org/show_bug.cgi?id=48371 - http://www.securityfocus.com/bid/45721 - http://www.redhat.com/support/errata/RHSA-
s.webkit.org/show_bug.cgi?id=48371 - http://www.securityfocus.com/bid/45721 - http://www.redhat.com/support/errata/RHSA-2011-0177.html - https://bugzilla.redhat.com/show_bug.cgi?id=656129 - http://www.vupen.com/english/advisories/2011/0552
CVE ID: CVE-2010-4207 State: PUBLISHED Published: 2010-11-07T21:00:00 Last Updated: 2024-08-07T03:34:37.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to charts/assets/charts.swf. Additional Analyst Notes: - CVE Program Container: References: - http://moodle.org/mod/forum/discuss.php?d=160910 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050813.html - http://yuilibrary.com/support/2.8.2/ - http://www.vupen.com/en
rg/pipermail/package-announce/2010-November/050813.html - http://yuilibrary.com/support/2.8.2/ - http://www.vupen.com/english/advisories/2010/2878 - http://www.securityfocus.com/archive/1/514622 - http://www.bugzilla.org/security/3.2.8/ - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050820.html - http://secunia.com/advisories/41955 - http://www.securitytracker.com/id?1024683 - http://www.securityfocus.com/bid/44420 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050830.html - http://www.vupen.com/english/advisories/2010/2975 - http://www.openwall.com/lists/oss-sec
ce/2010-November/050830.html - http://www.vupen.com/english/advisories/2010/2975 - http://www.openwall.com/lists/oss-security/2010/11/07/1 - http://secunia.com/advisories/42271
CVE ID: CVE-2010-4208 State: PUBLISHED Published: 2010-11-07T21:00:00 Last Updated: 2024-08-07T03:34:37.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to uploader/assets/uploader.swf. Additional Analyst Notes: - CVE Program Container: References: - http://moodle.org/mod/forum/discuss.php?d=160910 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050813.html - http://yuilibrary.com/support/2.8.2/ - http://www.vupen.co
ct.org/pipermail/package-announce/2010-November/050813.html - http://yuilibrary.com/support/2.8.2/ - http://www.vupen.com/english/advisories/2010/2878 - http://www.securityfocus.com/archive/1/514622 - http://www.bugzilla.org/security/3.2.8/ - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050820.html - http://secunia.com/advisories/41955 - http://www.securitytracker.com/id?1024683 - http://www.securityfocus.com/bid/44420 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050830.html - http://www.vupen.com/english/advisories/2010/2975 - http://www.openwall.com/lists/oss
nounce/2010-November/050830.html - http://www.vupen.com/english/advisories/2010/2975 - http://www.openwall.com/lists/oss-security/2010/11/07/1 - http://secunia.com/advisories/42271