Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
http://www.vupen.com/english/advisories/2011/0298 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html - http://www.vupen.com/english/advisories/2010/2266 - http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.36-rc3-next-20100901.bz2 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html - http://secunia.com/advisories/41512 - http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=628e300cccaa628d8fb92aa28cb7530a3d5f2257
CVE ID: CVE-2010-2955 State: PUBLISHED Published: 2010-09-08T19:00:00 Last Updated: 2024-08-07T02:55:45.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cfg80211_wext_giwessid function in net/wireless/wext-compat.c in the Linux kernel before 2.6.36-rc3-next-20100831 does not properly initialize certain structure members, which allows local users to leverage an off-by-one error in the ioctl_standard_iw_point function in net/wireless/wext-core.c, and obtain potentially sensitive information from kernel heap memory, via vectors involving an SIOCGIWESSID ioctl call that specifies a large buffer size. Additional Analyst Notes: - CVE Program Container: References: - http://www.u
l call that specifies a large buffer size. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1000-1 - http://www.redhat.com/support/errata/RHSA-2010-0771.html - http://www.securityfocus.com/bid/42885 - http://git.kernel.org/?p=linux/kernel/git/linville/wireless-2.6.git%3Ba=commit%3Bh=42da2f948d949efd0111309f5827bf0298bcc9a4 - http://lkml.org/lkml/2010/8/30/127 - http://grsecurity.net/~spender/wireless-infoleak-fix2.patch - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://lkml.org/lkml/2010/8/30/351 - http://www.redhat.com/support/errata/RHSA-2010-0842.html - http://www.openwall.com/lists/oss-security/2010/08/31/1
351 - http://www.redhat.com/support/errata/RHSA-2010-0842.html - http://www.openwall.com/lists/oss-security/2010/08/31/1 - http://www.vupen.com/english/advisories/2011/0298 - http://lkml.org/lkml/2010/8/27/413 - http://forums.grsecurity.net/viewtopic.php?f=3&t=2290 - https://bugzilla.redhat.com/show_bug.cgi?id=628434 - http://secunia.com/advisories/41245 - http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.36-rc3-next-20100831.bz2 - http://lkml.org/lkml/2010/8/30/146 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html
CVE ID: CVE-2010-2956 State: PUBLISHED Published: 2010-09-10T18:00:00 Last Updated: 2024-08-07T02:55:46.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sudo 1.7.0 through 1.7.4p3, when a Runas group is configured, does not properly handle use of the -u option in conjunction with the -g option, which allows local users to gain privileges via a command line containing a "-u root" sequence. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2312 - https://bugzilla.redhat.com/show_bug.cgi?id=628628 - http://www.vupen.com/english/advisories/2010/2318 - http://www.vmware.com/security/advisories/VMSA-2011-0001.html - http://
p://www.vupen.com/english/advisories/2010/2318 - http://www.vmware.com/security/advisories/VMSA-2011-0001.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:175 - http://www.vupen.com/english/advisories/2010/2320 - http://www.securityfocus.com/archive/1/514489/100/0/threaded - http://www.vupen.com/english/advisories/2010/2358 - http://www.sudo.ws/sudo/alerts/runas_group.html - http://wiki.rpath.com/Advisories:rPSA-2010-0075 - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047516.html - http://security.gentoo.org/glsa/glsa-201009-03.xml - http://www.securityfocus.com/archive/1/515545/100/0/threaded - http://lists.opensuse.org/opensuse-security-announc
xml - http://www.securityfocus.com/archive/1/515545/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://www.securityfocus.com/bid/43019 - http://www.redhat.com/support/errata/RHSA-2010-0675.html - http://secunia.com/advisories/40508 - http://www.securitytracker.com/id?1024392 - http://secunia.com/advisories/42787 - http://www.vupen.com/english/advisories/2011/0025 - http://www.ubuntu.com/usn/USN-983-1 - http://secunia.com/advisories/41316
CVE ID: CVE-2010-2957 State: PUBLISHED Published: 2010-09-10T17:00:00Z Last Updated: 2024-09-17T02:31:48.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Serendipity before 1.5.4, when "Remember me" logins are enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/08/29/3 - http://blog.s9y.org/archives/223-Serendipity-1.5.4-released.html - http://www.openwall.com/lists/oss-security/2010/08/31/5 - http://www.htbridge.ch/advisory/xss_vulnerability_in_serendipity.html
CVE ID: CVE-2010-2958 State: PUBLISHED Published: 2010-09-08T19:00:00 Last Updated: 2024-08-07T02:55:46.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in libraries/Error.class.php in phpMyAdmin 3.x before 3.3.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to a PHP backtrace and error messages (aka debugging messages), a different vulnerability than CVE-2010-3056. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41206 - http://www.openwall.com/lists/oss-security/2010/09/01/2 - http://www.openwall.com/lists/oss-security/2010/09/01/3 - http://www.phpmyadm
wall.com/lists/oss-security/2010/09/01/2 - http://www.openwall.com/lists/oss-security/2010/09/01/3 - http://www.phpmyadmin.net/home_page/security/PMASA-2010-6.php - http://www.vupen.com/english/advisories/2010/2242 - http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=133a77fac7d31a38703db2099a90c1b49de62e37
CVE ID: CVE-2010-2959 State: PUBLISHED Published: 2010-09-08T19:00:00 Last Updated: 2024-08-07T02:55:46.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in net/can/bcm.c in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before 2.6.35.4 allows attackers to execute arbitrary code or cause a denial of service (system crash) via crafted CAN traffic. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34.6 - http://
nsuse-security-announce/2010-09/msg00005.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34.6 - http://www.securityfocus.com/bid/42585 - http://lists.fedoraproject.org/pipermail/package-announce/2010-September/046947.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.53 - http://www.vupen.com/english/advisories/2010/2430 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://www.vupen.com/english/advisories/2011/0298 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=
ttp://www.vupen.com/english/advisories/2011/0298 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5b75c4973ce779520b9d1e392483207d6f842cde - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35.4 - http://www.debian.org/security/2010/dsa-2094 - http://www.openwall.com/lists/oss-security/2010/08/20/2 - https://bugzilla.redhat.com/show_bug.cgi?id=625699 - http://jon.oberheide.org/files/i-can-haz-modharden.c - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.21 - http://secunia.com/advisories/41512
CVE ID: CVE-2010-2960 State: PUBLISHED Published: 2010-09-08T19:00:00 Last Updated: 2024-08-07T02:55:45.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: The keyctl_session_to_parent function in security/keys/keyctl.c in the Linux kernel 2.6.35.4 and earlier expects that a certain parent session keyring exists, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a KEYCTL_SESSION_TO_PARENT argument to the keyctl function. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1000-1 - http://www.openwall.com/lists/oss-security/2010/09/02/1 - https:/
: References: - http://www.ubuntu.com/usn/USN-1000-1 - http://www.openwall.com/lists/oss-security/2010/09/02/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61557 - http://www.securityfocus.com/bid/42932 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://www.vupen.com/english/advisories/2011/0298 - http://secunia.com/advisories/41263 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html - http://twitter.com/taviso/statuses/22777866582 - http://securitytracker.com/id?1024384 - https://bugzilla.redhat.com/show_bug.cgi?id=627440
CVE ID: CVE-2010-2961 State: PUBLISHED Published: 2010-09-14T18:00:00Z Last Updated: 2024-09-16T19:25:51.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: mountall.c in mountall before 2.15.2 uses 0666 permissions for the root.rules file, which allows local users to gain privileges by modifying this file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2342 - http://www.osvdb.org/67914 - https://bugs.launchpad.net/ubuntu/+source/mountall/+bug/591807 - http://www.ubuntu.com/usn/USN-985-1 - http://secunia.com/advisories/41351
CVE ID: CVE-2010-2962 State: PUBLISHED Published: 2010-11-26T18:23:00 Last Updated: 2024-08-07T02:55:46.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/gpu/drm/i915/i915_gem.c in the Graphics Execution Manager (GEM) in the Intel i915 driver in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.36 does not properly validate pointers to blocks of memory, which allows local users to write to arbitrary kernel memory locations, and consequently gain privileges, via crafted use of the ioctl interface, related to (1) pwrite and (2) pread operations. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel
pread operations. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ce9d419dbecc292cc3e06e8b1d6d123d3fa813a4 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.html - https://bugzilla.redhat.com/show_bug.cgi?id=637688 - http://www.ubuntu.com/usn/USN-1041-1 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://www.vupen.com/english/advisories/2010/3321 - http://www.redhat.com/support/errata/RHSA-2010-0842.html - http://www.vupen.com/english/advisories/2011/0298 - http://www.redhat.com/support/errata/RHSA-2010-0958.html - http://lists.open
ww.vupen.com/english/advisories/2011/0298 - http://www.redhat.com/support/errata/RHSA-2010-0958.html - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00004.html - http://secunia.com/advisories/42758 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36 - http://www.securityfocus.com/bid/44067 - http://secunia.com/advisories/42745 - http://www.vupen.com/english/advisories/2011/0070
CVE ID: CVE-2010-2963 State: PUBLISHED Published: 2010-11-26T18:23:00 Last Updated: 2024-08-07T02:55:45.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/media/video/v4l2-compat-ioctl32.c in the Video4Linux (V4L) implementation in the Linux kernel before 2.6.36 on 64-bit platforms does not validate the destination of a memory copy operation, which allows local users to write to arbitrary kernel memory locations, and consequently gain privileges, via a VIDIOCSTUNER ioctl call on a /dev/video device, followed by a VIDIOCSMICROCODE ioctl call on this device. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1000-1 - http://www.s
ce. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1000-1 - http://www.securitytracker.com/id?1024710 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.html - http://www.vupen.com/english/advisories/2010/3321 - http://www.outflux.net/blog/archives/2010/10/19/cve-2010-2963-v4l-compat-exploit/ - http://www.mandriva.com/security/advisories?name=MDVSA-2010:257 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00004.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3e645d6b485446c54c6745c5e2cf5c528fe4deec - http://www.securityfocus.com/bid/44242 - https://bugzilla.re
t%3Ba=commit%3Bh=3e645d6b485446c54c6745c5e2cf5c528fe4deec - http://www.securityfocus.com/bid/44242 - https://bugzilla.redhat.com/show_bug.cgi?id=642465 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36 - http://secunia.com/advisories/42745 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00008.html - http://www.debian.org/security/2010/dsa-2126
CVE ID: CVE-2010-2965 State: PUBLISHED Published: 2010-08-04T21:00:00.000Z Last Updated: 2025-01-28T01:29:35.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other products, allows remote attackers to read or modify arbitrary memory locations, perform function calls, or manage tasks via requests to UDP port 17185, a related issue to CVE-2005-3804. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/MAPG-86FPQL - http://rockwellautomation.custhelp.com/cgi-bin/rockwellau
er: References: - http://www.kb.cert.org/vuls/id/MAPG-86FPQL - http://rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=69735 - http://www.kb.cert.org/vuls/id/362332 - https://support.windriver.com/olsPortal/faces/maintenance/downloadDetails.jspx?contentId=033708 - http://www.kb.cert.org/vuls/id/MAPG-86EPFA - http://blog.metasploit.com/2010/08/vxworks-vulnerabilities.html
CVE ID: CVE-2010-2966 State: PUBLISHED Published: 2010-08-04T21:00:00Z Last Updated: 2024-09-16T22:50:46.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: The INCLUDE_SECURITY functionality in Wind River VxWorks 6.x, 5.x, and earlier uses the LOGIN_USER_NAME and LOGIN_USER_PASSWORD (aka LOGIN_PASSWORD) parameters to create hardcoded credentials, which makes it easier for remote attackers to obtain access via a (1) telnet, (2) rlogin, or (3) FTP session. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/840249 - http://blog.metasploit.com/2010/08/vxworks-vulnerabilities.html
CVE ID: CVE-2010-2967 State: PUBLISHED Published: 2010-08-04T21:00:00Z Last Updated: 2024-09-16T16:57:53.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: The loginDefaultEncrypt algorithm in loginLib in Wind River VxWorks before 6.9 does not properly support a large set of distinct possible passwords, which makes it easier for remote attackers to obtain access via a (1) telnet, (2) rlogin, or (3) FTP session. Additional Analyst Notes: - CVE Program Container: References: - https://support.windriver.com/olsPortal/faces/maintenance/downloadDetails.jspx?contentId=033709 - http://www.kb.cert.org/vuls/id/840249 - http://www.kb.cert.org/vuls/id/MAPG-863QH9 - http://blog.metasploit.c
d=033709 - http://www.kb.cert.org/vuls/id/840249 - http://www.kb.cert.org/vuls/id/MAPG-863QH9 - http://blog.metasploit.com/2010/08/vxworks-vulnerabilities.html
CVE ID: CVE-2010-2968 State: PUBLISHED Published: 2010-08-04T21:00:00Z Last Updated: 2024-09-17T02:27:41.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FTP daemon in Wind River VxWorks does not close the TCP connection after a number of failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://blog.metasploit.com/2010/08/vxworks-vulnerabilities.html
CVE ID: CVE-2010-2969 State: PUBLISHED Published: 2010-08-04T21:00:00Z Last Updated: 2024-09-16T20:38:11.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, and 1.9.x before 1.9.3, allow remote attackers to inject arbitrary web script or HTML via crafted content, related to (1) action/LikePages.py, (2) action/chart.py, and (3) action/userprofile.py, a similar issue to CVE-2010-2487. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1981 - http://moinmo.in/MoinMoinRelease1.9 - http://moinmo.in/SecurityFixes - http://www.securityfocus.com/bi
ories/2010/1981 - http://moinmo.in/MoinMoinRelease1.9 - http://moinmo.in/SecurityFixes - http://www.securityfocus.com/bid/40549 - http://www.debian.org/security/2010/dsa-2083 - http://hg.moinmo.in/moin/1.9/rev/e50b087c4572 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584809 - http://marc.info/?l=oss-security&m=127799369406968&w=2 - http://marc.info/?l=oss-security&m=127809682420259&w=2 - http://hg.moinmo.in/moin/1.9/raw-file/1.9.3/docs/CHANGES - http://hg.moinmo.in/moin/1.7/rev/37306fba2189 - http://secunia.com/advisories/40836 - http://moinmo.in/MoinMoinBugs/1.9.2UnescapedInputForThemeAddMsg
CVE ID: CVE-2010-2970 State: PUBLISHED Published: 2010-08-04T21:00:00Z Last Updated: 2024-09-17T00:16:31.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted content, related to (1) action/SlideShow.py, (2) action/anywikidraw.py, and (3) action/language_setup.py, a similar issue to CVE-2010-2487. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1981 - http://moinmo.in/MoinMoinRelease1.9 - http://moinmo.in/SecurityFixes - http://www.securityfocus.com/bid/40549 - http:
- http://moinmo.in/MoinMoinRelease1.9 - http://moinmo.in/SecurityFixes - http://www.securityfocus.com/bid/40549 - http://hg.moinmo.in/moin/1.9/rev/4fe9951788cb - http://www.debian.org/security/2010/dsa-2083 - http://hg.moinmo.in/moin/1.9/rev/e50b087c4572 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584809 - http://marc.info/?l=oss-security&m=127799369406968&w=2 - http://marc.info/?l=oss-security&m=127809682420259&w=2 - http://hg.moinmo.in/moin/1.9/raw-file/1.9.3/docs/CHANGES - http://secunia.com/advisories/40836 - http://moinmo.in/MoinMoinBugs/1.9.2UnescapedInputForThemeAddMsg
CVE ID: CVE-2010-2971 State: PUBLISHED Published: 2010-08-04T21:00:00 Last Updated: 2024-08-07T02:55:45.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: loaders/load_it.c in libmikmod, possibly 3.1.12, does not properly account for the larger size of name##env relative to name##tick and name##node, which allows remote attackers to trigger a buffer over-read and possibly have unspecified other impact via a crafted Impulse Tracker file, a related issue to CVE-2010-2546. NOTE: this issue exists because of an incomplete fix for CVE-2009-3995. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:151 - http://se
otes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:151 - http://secunia.com/advisories/48244 - http://sourceforge.net/tracker/?func=detail&aid=3033086&group_id=40531&atid=428227 - http://security.gentoo.org/glsa/glsa-201203-10.xml - https://bugzilla.redhat.com/show_bug.cgi?id=614643 - http://www.debian.org/security/2010/dsa-2081
CVE ID: CVE-2010-2972 State: REJECTED Published: 2010-08-05T18:00:00 Last Updated: 2010-08-18T09:00:00 Description: No description available.
CVE ID: CVE-2010-2973 State: PUBLISHED Published: 2010-08-05T18:00:00 Last Updated: 2024-08-07T02:55:46.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in IOSurface in Apple iOS before 4.0.2 on the iPhone and iPod touch, and before 3.2.2 on the iPad, allows local users to gain privileges via vectors involving IOSurface properties, as demonstrated by JailbreakMe. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14538 - http://osvdb.org/66827 - http://lists.apple.com/archives/security-announce/2010//Aug/msg00001.html - http://support.apple.com/kb/HT4292 - http://www.securityfocus.com/bid/42151 - http://support.
/2010//Aug/msg00001.html - http://support.apple.com/kb/HT4292 - http://www.securityfocus.com/bid/42151 - http://support.apple.com/kb/HT4291 - http://lists.apple.com/archives/security-announce/2010//Aug/msg00000.html - http://secunia.com/advisories/40807
CVE ID: CVE-2010-2974 State: PUBLISHED Published: 2010-08-05T19:00:00Z Last Updated: 2024-09-17T03:43:16.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the IConfigurationAccess interface in the Invensys Wonderware Archestra ConfigurationAccessComponent ActiveX control in Wonderware Application Server (WAS) before 3.1 SP2 P01, as used in the Wonderware Archestra Integrated Development Environment (IDE) and the InFusion Integrated Engineering Environment (IEE), allows remote attackers to execute arbitrary code via the first argument to the UnsubscribeData method. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.
ment to the UnsubscribeData method. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/703189 - http://www.pacwest.wonderware.com/web/News/NewsDetails.aspx?NewsID=203108 - https://wdnresource.wonderware.com/support/kbcd/html/1/t002492.htm - http://www.kb.cert.org/vuls/id/MORO-87MHPT
CVE ID: CVE-2010-2975 State: PUBLISHED Published: 2010-08-09T19:23:00Z Last Updated: 2024-09-16T22:40:03.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Wireless Network (UWN) Solution 7.x through 7.0.98.0 does not properly handle multiple SSH sessions, which allows physically proximate attackers to read a password, related to an "arrow key failure," aka Bug ID CSCtg51544. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html
CVE ID: CVE-2010-2976 State: PUBLISHED Published: 2010-08-09T19:23:00Z Last Updated: 2024-09-17T04:09:23.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: The controller in Cisco Unified Wireless Network (UWN) Solution 7.x through 7.0.98.0 has (1) a default SNMP read-only community of public, (2) a default SNMP read-write community of private, and a value of "default" for the (3) SNMP v3 username, (4) SNMP v3 authentication password, and (5) SNMP v3 privacy password, which makes it easier for remote attackers to obtain access. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html
CVE ID: CVE-2010-2977 State: PUBLISHED Published: 2010-08-09T19:23:00Z Last Updated: 2024-09-17T03:59:52.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 does not properly implement TLS and SSL, which has unspecified impact and remote attack vectors, aka Bug ID CSCtd01611. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html