Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-3009 State: PUBLISHED Published: 2010-09-15T17:26:00Z Last Updated: 2024-09-16T17:37:41.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP System Management Homepage (SMH) for Linux 6.0 and 6.1 allows remote authenticated users to obtain sensitive information and gain root privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41427 - http://www.securityfocus.com/bid/43208 - http://www13.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02475053 - http://www.securitytracker.com/id?1024433 - http://marc.info/?l=bugtraq&m=128447666623011&w=2 - http://marc.info
75053 - http://www.securitytracker.com/id?1024433 - http://marc.info/?l=bugtraq&m=128447666623011&w=2 - http://marc.info/?l=bugtraq&m=128447666623011&w=2
CVE ID: CVE-2010-3010 State: PUBLISHED Published: 2010-09-15T19:00:00 Last Updated: 2024-08-07T02:55:46.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability on the HP 3Com OfficeConnect Gigabit VPN Firewall 3CREVF100-73 with firmware before 1.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: a separate XSS issue for HP System Management Homepage (SMH) was originally assigned CVE-2010-3010 due to a CNA error, but CVE-2010-3012 is the appropriate identifier for the SMH issue. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Docume
Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02507909 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02507909 - http://securitytracker.com/id?1024449
CVE ID: CVE-2010-3011 State: PUBLISHED Published: 2010-09-17T17:46:00Z Last Updated: 2024-09-17T03:27:27.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41490 - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995 - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995 - http://secunia.com/advisories/41480
CVE ID: CVE-2010-3012 State: PUBLISHED Published: 2010-09-17T19:00:00Z Last Updated: 2024-09-16T19:51:34.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this issue was originally assigned CVE-2010-3010 due to a CNA error. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41490 - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995 - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995 - http://secunia.com/advisor
=emr_na-c02512995 - http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995 - http://secunia.com/advisories/41480
CVE ID: CVE-2010-3013 State: PUBLISHED Published: 2010-08-16T17:00:00Z Last Updated: 2024-09-16T23:46:16.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in groupadmin.php in Pligg before 1.1.1 allows remote attackers to execute arbitrary SQL commands via the role parameter, a different vulnerability than CVE-2010-2577. Additional Analyst Notes: - CVE Program Container: References: - http://pligg.svn.sourceforge.net/viewvc/pligg/trunk/groupadmin.php?r1=1532&r2=2143&pathrev=2143 - http://www.osvdb.org/67069 - http://www.securityfocus.com/bid/42408 - http://pligg.svn.sourceforge.net/viewvc/pligg/trunk/groupadmin.php?view=log&pathrev=2143 - http://secu
s.com/bid/42408 - http://pligg.svn.sourceforge.net/viewvc/pligg/trunk/groupadmin.php?view=log&pathrev=2143 - http://secunia.com/advisories/40931 - http://www.pligg.com/blog/991/pligg-cms-1-1-1-release/
CVE ID: CVE-2010-3014 State: PUBLISHED Published: 2010-08-20T19:00:00 Last Updated: 2024-08-07T02:55:46.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Coda filesystem kernel module, as used in NetBSD and FreeBSD, when Coda is loaded and Venus is running with /coda mounted, allows local users to read sensitive heap memory via a large out_size value in a ViceIoctl struct to a Coda ioctl, which triggers a buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/coda/coda.h.diff?r1=1.15&r2=1.16&only_with_tag=MAIN - http://www.vsecurity.com/resources/advisory/20100816-1/ - http://svn.freebsd.org/viewvc/base
2=1.16&only_with_tag=MAIN - http://www.vsecurity.com/resources/advisory/20100816-1/ - http://svn.freebsd.org/viewvc/base?view=revision&revision=210997 - http://www.securityfocus.com/archive/1/513151/100/0/threaded
CVE ID: CVE-2010-3015 State: PUBLISHED Published: 2010-08-20T17:00:00 Last Updated: 2024-08-07T02:55:46.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ext4_ext_get_blocks function in fs/ext4/extents.c in the Linux kernel before 2.6.34 allows local users to cause a denial of service (BUG and system crash) via a write operation on the last block of a large file, followed by a sync operation. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/61156 - http://www.redhat.com/support/errata/RHSA-2010-0723.html - http://www.ubuntu.com/usn/USN-1000-1 - http://www.vupen.com/english/advisories/20
m/support/errata/RHSA-2010-0723.html - http://www.ubuntu.com/usn/USN-1000-1 - http://www.vupen.com/english/advisories/2010/3117 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://marc.info/?l=oss-security&m=128201627016896&w=2 - http://marc.info/?l=oss-security&m=128192548904503&w=2 - http://marc.info/?l=oss-security&m=128197862004376&w=2 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html - https://bugzilla.redhat.com/show_bug.cgi?id=624327 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:247 - http://www.vupen.com/engl
unce/2011-02/msg00000.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:247 - http://www.vupen.com/english/advisories/2011/0298 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://support.avaya.com/css/P8/documents/100113326 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34 - http://www.debian.org/security/2010/dsa-2094 - http://www.securityfocus.com/bid/42477 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:029 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=731eb1a03a8445cde2cb23ecfb3580c6fa7bb690 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html - http://www.mandriv
cb23ecfb3580c6fa7bb690 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:172
CVE ID: CVE-2010-3016 State: REJECTED Published: 2010-08-17T17:00:00Z Last Updated: 2024-09-16T19:21:02.470Z Description: No description available.
CVE ID: CVE-2010-3017 State: PUBLISHED Published: 2010-09-09T21:00:00Z Last Updated: 2024-09-17T01:46:55.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in RSA Access Manager Agent 4.7.1 before 4.7.1.7, when RSA Adaptive Authentication Integration is enabled, allows remote attackers to bypass authentication and obtain sensitive information via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2010-09/0057.html
CVE ID: CVE-2010-3018 State: PUBLISHED Published: 2010-09-09T21:00:00Z Last Updated: 2024-09-16T19:14:13.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: RSA Access Manager Server 5.5.3 before 5.5.3.172, 6.0.4 before 6.0.4.53, and 6.1 before 6.1.2.01 does not properly perform cache updates, which allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2010-09/0056.html
CVE ID: CVE-2010-3019 State: PUBLISHED Published: 2010-08-16T18:25:00 Last Updated: 2024-08-07T02:55:46.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Opera before 10.61 allows remote attackers to execute arbitrary code or cause a denial of service (application crash or hang) via vectors related to HTML5 canvas painting operations that occur during the application of transformations. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/unix/1061/ - http://www.opera.com/support/kb/view/966/ - http://www.opera.com/docs/changelogs/mac/1061/ - http://www.opera.com/docs/changelogs/windows/1061/ - https
/view/966/ - http://www.opera.com/docs/changelogs/mac/1061/ - http://www.opera.com/docs/changelogs/windows/1061/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12066
CVE ID: CVE-2010-3020 State: PUBLISHED Published: 2010-08-16T18:25:00 Last Updated: 2024-08-07T02:55:46.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: The news-feed preview feature in Opera before 10.61 does not properly remove scripts, which allows remote attackers to force subscriptions to arbitrary feeds via crafted content. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/unix/1061/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12073 - http://www.opera.com/docs/changelogs/mac/1061/ - http://www.opera.com/docs/changelogs/windows/1061/ - http://www.opera.com/support/kb/view/968/
CVE ID: CVE-2010-3021 State: PUBLISHED Published: 2010-08-16T18:25:00 Last Updated: 2024-08-07T02:55:46.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Opera before 10.61 allows remote attackers to cause a denial of service (CPU consumption and application hang) via an animated PNG image. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/unix/1061/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11933 - http://www.opera.com/docs/changelogs/mac/1061/ - http://www.opera.com/docs/changelogs/windows/1061/
CVE ID: CVE-2010-3022 State: PUBLISHED Published: 2010-08-16T19:00:00 Last Updated: 2024-08-07T02:55:46.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Performance logging module in the Devel module 5.x before 5.x-1.3 and 6.x before 6.x-1.21 for Drupal allows remote authenticated users, with add url aliases and report access permissions, to inject arbitrary web script or HTML via crafted node paths in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/66889 - http://drupal.org/node/874132 - http://secunia.com/advisories/40844 - http://drupal.org/node/874130 - http://drupal.org/node/874116 -
org/node/874132 - http://secunia.com/advisories/40844 - http://drupal.org/node/874130 - http://drupal.org/node/874116 - http://www.securityfocus.com/bid/42231 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60905
CVE ID: CVE-2010-3023 State: PUBLISHED Published: 2010-08-16T19:00:00 Last Updated: 2024-08-07T02:55:46.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in DiamondList 0.1.6, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) category[description] parameter to user/main/update_category, which is not properly handled by _app/views/categories/index.html.erb; and the (2) setting[site_title] parameter to user/main/update_settings, which is not properly handled by _app/views/settings/_list_settings.rhtml. Additional Analyst Notes: - CVE Program Container: References: - http://www.securi
/views/settings/_list_settings.rhtml. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/512892 - http://dev.hulihanapplications.com/issues/show/211 - http://secunia.com/advisories/40873 - http://www.htbridge.ch/advisory/xss_vulnerability_in_diamondlist_1.html - http://www.securityfocus.com/archive/1/512897/100/0/threaded - http://www.vupen.com/english/advisories/2010/2025 - http://www.htbridge.ch/advisory/xss_vulnerability_in_diamondlist.html - http://dev.hulihanapplications.com/issues/show/213 - http://packetstormsecurity.org/1008-exploits/diamondlist-xssxsrf.txt - http://www.securityfocus.com/bid/42252
CVE ID: CVE-2010-3024 State: PUBLISHED Published: 2010-08-16T19:00:00 Last Updated: 2024-08-07T02:55:46.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in user/main/update_user in DiamondList 0.1.6, and possibly earlier, allow remote attackers to hijack the authentication of administrators for requests that (1) change the administrative password or (2) change the site's configuration. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/66918 - http://marc.info/?l=bugtraq&m=128104130309426&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60937 - http://secunia.com/advisories/4087
&m=128104130309426&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60937 - http://secunia.com/advisories/40873 - http://dev.hulihanapplications.com/issues/show/212 - http://www.exploit-db.com/exploits/14565 - http://www.htbridge.ch/advisory/xsrf_csrf_in_diamondlist.html - http://packetstormsecurity.org/1008-exploits/diamondlist-xssxsrf.txt
CVE ID: CVE-2010-3025 State: PUBLISHED Published: 2010-08-16T19:00:00 Last Updated: 2024-08-07T02:55:46.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Tomaz Muraus Open Blog 1.2.1, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) excerpt parameter to application/modules/admin/controllers/posts.php, as reachable by admin/posts/edit; and the (2) content parameter to application/modules/admin/controllers/pages.php, as reachable by admin/posts/edit. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/512901/100/0/threaded - htt
Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/512901/100/0/threaded - http://www.securityfocus.com/bid/42255 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60942 - http://www.htbridge.ch/advisory/xss_vulnerability_in_open_blog.html - http://packetstormsecurity.org/1008-exploits/openblog-xssxsrf.txt - http://www.securityfocus.com/archive/1/512895/100/0/threaded - http://secunia.com/advisories/40876 - http://www.htbridge.ch/advisory/xss_vulnerability_in_open_blog_1.html
CVE ID: CVE-2010-3026 State: PUBLISHED Published: 2010-08-16T19:00:00 Last Updated: 2024-08-07T02:55:46.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in application/modules/admin/controllers/users.php in Tomaz Muraus Open Blog 1.2.1, and possibly earlier, allows remote attackers to hijack the authentication of administrators for requests to admin/users/edit that grant administrative privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/512902/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/60943 - http://packetstormsecurity.org/1008-exploits/op
/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/60943 - http://packetstormsecurity.org/1008-exploits/openblog-xssxsrf.txt - http://www.exploit-db.com/exploits/14562 - http://www.htbridge.ch/advisory/xsrf_csrf_in_open_blog.html - http://osvdb.org/66925 - http://secunia.com/advisories/40876
CVE ID: CVE-2010-3027 State: PUBLISHED Published: 2010-08-16T19:00:00Z Last Updated: 2024-09-16T18:14:26.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Tycoon Baseball Script 1.0.9 allows remote attackers to execute arbitrary SQL commands via the game_id parameter in a game_player action. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1008-exploits/tycoonrecord-sql.txt - http://secunia.com/advisories/40920 - http://www.exploit-db.com/exploits/14572
CVE ID: CVE-2010-3028 State: PUBLISHED Published: 2010-08-16T19:00:00 Last Updated: 2024-08-07T02:55:46.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Aardvertiser component before 2.2.1 for Joomla! uses insecure permissions (777) in unspecified folders, which allows local users to modify, create, or delete certain files. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/66924 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60927 - http://secunia.com/advisories/40882 - http://sourceforge.net/projects/aardvertiser/forums/forum/989030/topic/3788365 - http://www.securityfocus.com/bid/42239
CVE ID: CVE-2010-3029 State: PUBLISHED Published: 2010-08-16T19:00:00Z Last Updated: 2024-09-17T00:50:38.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in statistics.php in PHPKick 0.8 allows remote attackers to execute arbitrary SQL commands via the gameday parameter in an overview action. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14578
CVE ID: CVE-2010-3030 State: PUBLISHED Published: 2010-08-17T17:31:00Z Last Updated: 2024-09-16T20:26:33.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Tomaz Muraus Open Blog 1.2.1, and possibly earlier, allows remote attackers to hijack the authentication of administrators for requests that change the administrative password. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40876
CVE ID: CVE-2010-3031 State: PUBLISHED Published: 2010-08-17T17:31:00Z Last Updated: 2024-09-17T03:29:02.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Wyse ThinOS HF 4.4.079i, and possibly other versions before ThinOS 6.5, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string to the LPD service. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/JALR-87AKR5 - http://www.kb.cert.org/vuls/id/320233
CVE ID: CVE-2010-3032 State: PUBLISHED Published: 2010-08-17T17:31:00 Last Updated: 2024-08-07T02:55:46.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the OBGIOPServerWorker::extractHeader function in the ebus-3-3-2-6.dll module in SAP Crystal Reports 2008 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a GIOP packet with a crafted size, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2074 - http://dvlabs.tippingpoint.com/advisory/TPTI-10-07 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61
2010/2074 - http://dvlabs.tippingpoint.com/advisory/TPTI-10-07 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61065 - http://www.securityfocus.com/archive/1/513103/100/0/threaded - http://secunia.com/advisories/40960 - https://service.sap.com/sap/support/notes/1473327 - http://www.securityfocus.com/bid/42374 - http://www.securityfocus.com/archive/1/513024/100/0/threaded - http://www.securityfocus.com/archive/1/513023/100/0/threaded - http://www.securitytracker.com/id?1024334 - http://osvdb.org/67080
CVE ID: CVE-2010-3033 State: PUBLISHED Published: 2010-09-10T17:00:00Z Last Updated: 2024-09-16T16:53:54.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Wireless LAN Controller (WLC) software, possibly 4.2 through 6.0, allows remote authenticated users to bypass intended access restrictions and modify the configuration, and possibly obtain administrative privileges, via unspecified vectors, a different vulnerability than CVE-2010-2842 and CVE-2010-2843. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b466e9.shtml - http://tools.cisco.com/security/center/viewAlert.x?alertId=21290
CVE ID: CVE-2010-3034 State: PUBLISHED Published: 2010-09-10T17:00:00Z Last Updated: 2024-09-16T19:35:24.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Wireless LAN Controller (WLC) software, possibly 6.0.x or possibly 4.1 through 6.0.x, allows remote attackers to bypass ACLs in the controller CPU, and consequently send network traffic to unintended segments or devices, via unspecified vectors, a different vulnerability than CVE-2010-0575. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/viewAlert.x?alertId=21291 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b466e9.shtml
CVE ID: CVE-2010-3035 State: PUBLISHED Published: 2010-08-30T20:00:00.000Z Last Updated: 2025-10-22T00:05:51.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attribute type code 99, aka Bug ID CSCti62211. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/61443 - http://www.securitytracker.com/id?1024371 - http://www.
: - https://exchange.xforce.ibmcloud.com/vulnerabilities/61443 - http://www.securitytracker.com/id?1024371 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4411f.shtml - http://mailman.nanog.org/pipermail/nanog/2010-August/024837.html - http://secunia.com/advisories/41190 - http://www.vupen.com/english/advisories/2010/2227 - http://osvdb.org/67696
CVE ID: CVE-2010-3036 State: PUBLISHED Published: 2010-10-29T18:00:00 Last Updated: 2024-08-07T02:55:46.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to execute arbitrary code via a session on TCP port (1) 443 or (2) 1741, aka Bug ID CSCti41352. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/68927 - http://www.cisco.com/en/US/products/products_security_advisory09186a0080b51501.shtml - http://securitytracker.com/id?1024646 - http://www.securityfocus.com/bid/44468 - http://secunia.com/ad
080b51501.shtml - http://securitytracker.com/id?1024646 - http://www.securityfocus.com/bid/44468 - http://secunia.com/advisories/42011 - http://www.vupen.com/english/advisories/2010/2793