Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
9207 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57531 - http://www.vupen.com/english/advisories/2010/0806 - http://www.exploit-db.com/exploits/12070
CVE ID: CVE-2010-1308 State: PUBLISHED Published: 2010-04-08T16:00:00 Last Updated: 2024-08-07T01:21:18.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the SVMap (com_svmap) component 1.1.1 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1004-exploits/joomlasvmap-lfi.txt - http://secunia.com/advisories/39350 - http://www.exploit-db.com/exploits/12066 - http://www.vupen.com/english/advisories/2010/0809
CVE ID: CVE-2010-1309 State: PUBLISHED Published: 2010-04-08T17:00:00 Last Updated: 2024-08-07T01:21:18.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Irmin CMS (formerly Pepsi CMS) 0.6 BETA2 allows remote attackers to read arbitrary files via a .. (dot dot) in the w parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11938
CVE ID: CVE-2010-1310 State: PUBLISHED Published: 2010-04-08T17:00:00Z Last Updated: 2024-09-16T16:32:48.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 10.50 allows remote attackers to obtain sensitive information via crafted XSLT constructs, which cause Opera to return cached contents of other pages. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/docs/changelogs/windows/1051/ - http://secunia.com/advisories/38820 - http://www.opera.com/support/kb/view/949/
CVE ID: CVE-2010-1311 State: PUBLISHED Published: 2010-04-08T17:00:00 Last Updated: 2024-08-07T01:21:18.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: The qtm_decompress function in libclamav/mspack.c in ClamAV before 0.96 allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted CAB archive that uses the Quantum (aka .Q) compression format. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1771 - http://www.vupen.com/english/advisories/2010/1206 - http://secunia.com/advisories/39656 - http:/
/show_bug.cgi?id=1771 - http://www.vupen.com/english/advisories/2010/1206 - http://secunia.com/advisories/39656 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:082 - http://www.ubuntu.com/usn/USN-926-1 - http://www.vupen.com/english/advisories/2010/0827 - http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html - http://support.apple.com/kb/HT4312 - http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob_plain%3Bf=ChangeLog%3Bhb=clamav-0.96 - http://www.vupen.com/english/advisories/2010/0909 - http://secunia.com/advisories/39293 - http://www.vupen.com/english/advisories/2010/0832 - ht
lish/advisories/2010/0909 - http://secunia.com/advisories/39293 - http://www.vupen.com/english/advisories/2010/0832 - http://secunia.com/advisories/39329 - http://www.securityfocus.com/bid/39262 - http://www.vupen.com/english/advisories/2010/1001
CVE ID: CVE-2010-1312 State: PUBLISHED Published: 2010-04-08T20:00:00 Last Updated: 2024-08-07T01:21:18.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the iJoomla News Portal (com_news_portal) component 1.5.x for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/12077 - http://packetstormsecurity.org/1004-exploits/joomlanewportal-lfi.txt - http://www.securityfocus.com/bid/39222 - http://secunia.com/advisories/39289 - http://osvdb.org/63572
CVE ID: CVE-2010-1313 State: PUBLISHED Published: 2010-04-08T20:00:00 Last Updated: 2024-08-07T01:21:18.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Seber Cart (com_sebercart) component 1.0.0.12 and 1.0.0.13 for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39355 - http://www.securityfocus.com/bid/39237 - http://www.exploit-db.com/exploits/12082
CVE ID: CVE-2010-1314 State: PUBLISHED Published: 2010-04-08T20:00:00 Last Updated: 2024-08-07T01:21:18.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Highslide JS (com_hsconfig) component 1.5 and 2.0.9 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/12086 - http://packetstormsecurity.org/1004-exploits/joomlahsconfig-lfi.txt - http://www.securityfocus.com/bid/39239 - http://secunia.com/advisorie
ecurity.org/1004-exploits/joomlahsconfig-lfi.txt - http://www.securityfocus.com/bid/39239 - http://secunia.com/advisories/39359
CVE ID: CVE-2010-1315 State: PUBLISHED Published: 2010-04-08T20:00:00 Last Updated: 2024-08-07T01:21:18.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in weberpcustomer.php in the webERPcustomer (com_weberpcustomer) component 1.2.1 and 1.x before 1.06.02 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/11999 - http://packetstormsecurity.org/1004-exploits/joomlaweberpcustomer-lfi.txt - http://secunia.com
t-db.com/exploits/11999 - http://packetstormsecurity.org/1004-exploits/joomlaweberpcustomer-lfi.txt - http://secunia.com/advisories/39209 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57482
CVE ID: CVE-2010-1316 State: PUBLISHED Published: 2010-04-14T15:44:00Z Last Updated: 2024-09-17T02:16:26.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Tembria Server Monitor before 5.6.1 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted (1) GET, (2) PUT, or (3) HEAD request, as demonstrated by a malformed GET request containing a long PATH_INFO to index.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.corelan.be:8800/wp-content/forum-file-uploads/admin1/exploits/corelan_lincoln_tembria.py_.txt - http://www.corelan.be:8800/advisories.php?
-content/forum-file-uploads/admin1/exploits/corelan_lincoln_tembria.py_.txt - http://www.corelan.be:8800/advisories.php?id=CORELAN-10-022 - http://secunia.com/advisories/39270
CVE ID: CVE-2010-1317 State: PUBLISHED Published: 2010-04-20T15:00:00Z Last Updated: 2024-09-17T00:20:44.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the NTLM authentication functionality in RealNetworks Helix Server and Helix Mobile Server 11.x, 12.x, and 13.x allows remote attackers to have an unspecified impact via invalid base64-encoded data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39490 - http://www.realnetworks.com/uploadedFiles/Support/helix-support/SecurityUpdate041410HS.pdf - http://secunia.com/advisories/39279 - http://www.vupen.com/english/advisories/2010/0889
CVE ID: CVE-2010-1318 State: PUBLISHED Published: 2010-04-20T15:00:00Z Last Updated: 2024-09-17T03:33:06.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Server and Helix Mobile Server 11.x through 13.x and other products, allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39490 - http://www.realnetworks.com/uploadedFiles/Support/helix-support/SecurityUpdate041410HS.pdf - http://secunia.com/advisories/39279 - http://www.vupen.com/english/advi
pport/helix-support/SecurityUpdate041410HS.pdf - http://secunia.com/advisories/39279 - http://www.vupen.com/english/advisories/2010/0889
CVE ID: CVE-2010-1319 State: PUBLISHED Published: 2010-04-20T15:00:00Z Last Updated: 2024-09-16T19:35:45.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Server and Helix Mobile Server 11.x through 13.x and other products, allows remote attackers to execute arbitrary code via a request with a crafted payload length. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39490 - http://www.realnetworks.com/uploadedFiles/Support/helix-support/SecurityUpdate041410HS.pdf - http://secunia.com/advisories/39279 - http://www.vupen.com/eng
dFiles/Support/helix-support/SecurityUpdate041410HS.pdf - http://secunia.com/advisories/39279 - http://www.vupen.com/english/advisories/2010/0889
CVE ID: CVE-2010-1320 State: PUBLISHED Published: 2010-04-22T14:00:00 Last Updated: 2024-08-07T01:21:18.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x before 1.8.2 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a request associated with (1) renewal or (2) validation. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html - http://www.securityfocus.com/archive/1/510843/100/0/threaded - http://secunia.co
rity-announce/2010//Jun/msg00001.html - http://www.securityfocus.com/archive/1/510843/100/0/threaded - http://secunia.com/advisories/39784 - http://www.ubuntu.com/usn/USN-940-1 - http://www.vupen.com/english/advisories/2010/1481 - http://secunia.com/advisories/39656 - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-004.txt - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=577490 - http://www.vupen.com/english/advisories/2010/1192 - http://support.apple.com/kb/HT4188 - http://secunia.com/advisories/40220 - http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html - http://securitytracker.com/id?1023904 - http://www.vupen.com/english/advisories/2010/1001 - http://www.s
msg00006.html - http://securitytracker.com/id?1023904 - http://www.vupen.com/english/advisories/2010/1001 - http://www.securityfocus.com/bid/39599
CVE ID: CVE-2010-1321 State: PUBLISHED Published: 2010-05-19T18:13:00 Last Updated: 2024-08-07T01:21:18.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5 (aka krb5) through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for invalid GSS-API tokens, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an AP-REQ message in which the authenticator's checksum field is missing. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-s
field is missing. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00010.html - http://secunia.com/advisories/39818 - http://www.vupen.com/english/advisories/2011/0134 - http://support.avaya.com/css/P8/documents/100114315 - http://secunia.com/advisories/39784 - http://www.ubuntu.com/usn/USN-940-1 - http://marc.info/?l=bugtraq&m=134254866602253&w=2 - http://www.securityfocus.com/archive/1/511331/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDVSA-2010:100 - http://www.us-cert.gov/cas/techalerts/TA11-201A.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041615.html - ht
.gov/cas/techalerts/TA11-201A.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041615.html - http://www.redhat.com/support/errata/RHSA-2010-0770.html - http://secunia.com/advisories/40685 - http://www.securityfocus.com/bid/40235 - http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041645.html - http://www.vupen.com/english/advisories/2010/1574 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7198 - http://www.vupen.com/english/advisories/2010/1192 - http://secunia.com/advisories/39799 - http://www.vupen.com/english/advisories/2010/1196 - http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
www.vupen.com/english/advisories/2010/1196 - http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02257427 - http://secunia.com/advisories/39849 - http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html - http://www.redhat.com/support/errata/RHSA-2010-0987.html - http://secunia.com/advisories/44954 - http://www.ubuntu.com/usn/USN-940-2 - http://secunia.com/advisories/42432 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7450 - http://secunia.com/advisories/39762 - http://www.redhat.com/support/errata/RHSA-2011-0880.html - http://www.oracle.
50 - http://secunia.com/advisories/39762 - http://www.redhat.com/support/errata/RHSA-2011-0880.html - http://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.html - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-005.txt - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00002.html - http://www.redhat.com/support/errata/RHSA-2010-0873.html - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02257427 - http://www.vupen.com/english/advisories/2010/1177 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://secunia.com/advisories/42974 - http
s/2010/1177 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://secunia.com/advisories/42974 - http://www.vupen.com/english/advisories/2010/3112 - http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041654.html - http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html - http://www.us-cert.gov/cas/techalerts/TA10-287A.html - http://secunia.com/advisories/43335 - http://www.debian.org/security/2010/dsa-2052 - http://www.redhat.com/support/errata/RHSA-2010-0423.html - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html - http://www.vupen.com/english/advisories/2010/1882 - http://www.redhat.com/support/errata/RHSA-2011-
0-10/msg00006.html - http://www.vupen.com/english/advisories/2010/1882 - http://www.redhat.com/support/errata/RHSA-2011-0152.html - http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html - http://www.securityfocus.com/archive/1/516397/100/0/threaded - http://secunia.com/advisories/40346 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11604 - http://secunia.com/advisories/41967 - http://www.redhat.com/support/errata/RHSA-2010-0807.html - http://www.redhat.com/support/errata/RHSA-2010-0935.html - http://osvdb.org/64744 - http://www.vupen.com/english/advisories/2010/1222 - http://www.vupen.com/english/advisories/2010/1193
CVE ID: CVE-2010-1322 State: PUBLISHED Published: 2010-10-07T20:21:00 Last Updated: 2024-08-07T01:21:18.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: The merge_authdata function in kdc_authdata.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8.x before 1.8.4 does not properly manage an index into an authorization-data list, which allows remote attackers to cause a denial of service (daemon crash), or possibly obtain sensitive information, spoof authorization, or execute arbitrary code, via a TGS request that triggers an uninitialized pointer dereference, as demonstrated by a request from a Windows Active Directory client. Additional Analyst Notes: - CV
pointer dereference, as demonstrated by a request from a Windows Active Directory client. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:202 - http://www.securityfocus.com/bid/43756 - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-006.txt - http://www.securityfocus.com/archive/1/514144/100/0/threaded - http://www.vupen.com/english/advisories/2010/2865 - http://www.redhat.com/support/errata/RHSA-2010-0863.html - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html - http://www.ubuntu.com/usn/USN-999-1
CVE ID: CVE-2010-1323 State: PUBLISHED Published: 2010-12-02T16:00:00 Last Updated: 2024-08-07T01:21:18.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: MIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center (KDC), or forge a KRB-SAFE message via certain checksums that (1) are unkeyed or (2) use RC4 keys. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00010.html - http://www.vupen.com/english
References: - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00010.html - http://www.vupen.com/english/advisories/2010/3094 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:246 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051999.html - http://www.securityfocus.com/bid/45118 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://kb.vmware.com/kb/1035108 - http://secunia.com/advisories/46397 - http://www.vupen.com/english/advisories/2010/3118 - http://marc.info/?l=bugtraq&m=130497213107107&w=2 - https://oval.cisecurity.org/repository/search/de
isories/2010/3118 - http://marc.info/?l=bugtraq&m=130497213107107&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12121 - http://www.vupen.com/english/advisories/2011/0187 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:245 - http://osvdb.org/69610 - http://www.securityfocus.com/archive/1/514953/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2010-0926.html - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html - http://www.vmware.com/security/advisories/VMSA-2011-0007.html - http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html - http://secunia.com/advisories/42420 - http://marc.in
lists.apple.com/archives/security-announce/2011/Mar/msg00006.html - http://secunia.com/advisories/42420 - http://marc.info/?l=bugtraq&m=129562442714657&w=2 - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-007.txt - http://marc.info/?l=bugtraq&m=129562442714657&w=2 - http://www.vupen.com/english/advisories/2010/3095 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://www.vupen.com/english/advisories/2010/3101 - http://secunia.com/advisories/42399 - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00002.html - http://lists.vmware.com/pipermail/security-announce/2011/000133.html - http://www.securitytracker.com/id?1024803 - http://www.securityfocus.co
m/pipermail/security-announce/2011/000133.html - http://www.securitytracker.com/id?1024803 - http://www.securityfocus.com/archive/1/517739/100/0/threaded - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051976.html - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html - http://www.redhat.com/support/errata/RHSA-2010-0925.html - http://www.ubuntu.com/usn/USN-1030-1 - http://marc.info/?l=bugtraq&m=130497213107107&w=2 - http://secunia.com/advisories/43015 - http://support.apple.com/kb/HT4581 - http://www.debian.org/security/2010/dsa-2129 - http://secunia.com/advisories/42436
CVE ID: CVE-2010-1324 State: PUBLISHED Published: 2010-12-02T16:00:00 Last Updated: 2024-08-07T01:21:18.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to forge GSS tokens, gain privileges, or have unspecified other impact via (1) an unkeyed checksum, (2) an unkeyed PAC checksum, or (3) a KrbFastArmoredReq checksum based on an RC4 key. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/3094 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - ht
.vupen.com/english/advisories/2010/3094 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:246 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051999.html - http://kb.vmware.com/kb/1035108 - http://www.vupen.com/english/advisories/2010/3118 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11936 - http://www.vupen.com/english/advisories/2011/0187 - http://www.securityfocus.com/archive/1/514953/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html - http://www.vmware.com/security/advisories/VMSA-2011-0007.
pensuse.org/opensuse-security-announce/2010-12/msg00000.html - http://www.vmware.com/security/advisories/VMSA-2011-0007.html - http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html - http://osvdb.org/69609 - http://marc.info/?l=bugtraq&m=129562442714657&w=2 - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-007.txt - http://marc.info/?l=bugtraq&m=129562442714657&w=2 - http://www.vupen.com/english/advisories/2010/3095 - http://secunia.com/advisories/42399 - http://www.securityfocus.com/bid/45116 - http://lists.vmware.com/pipermail/security-announce/2011/000133.html - http://www.securitytracker.com/id?1024803 - http://www.securityfocus.com/archive/1/517739/100/0/thread
011/000133.html - http://www.securitytracker.com/id?1024803 - http://www.securityfocus.com/archive/1/517739/100/0/threaded - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051976.html - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html - http://www.redhat.com/support/errata/RHSA-2010-0925.html - http://www.ubuntu.com/usn/USN-1030-1 - http://secunia.com/advisories/43015 - http://support.apple.com/kb/HT4581
CVE ID: CVE-2010-1325 State: PUBLISHED Published: 2010-09-03T19:00:00 Last Updated: 2024-08-07T01:21:18.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the apache2-slms package in SUSE Lifecycle Management Server (SLMS) 1.0 on SUSE Linux Enterprise (SLE) 11 allows remote attackers to hijack the authentication of unspecified victims via vectors related to improper parameter quoting. NOTE: some sources report that this is a vulnerability in a product named "Apache SLMS," but that is incorrect. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=588284 - http://www.securit