Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
/2011/0061 - http://www.ubuntu.com/usn/USN-998-1 - http://www.debian.org/security/2010/dsa-2124 - http://support.avaya.com/css/P8/documents/100120156 - http://www.ubuntu.com/usn/USN-997-1 - http://www.mozilla.org/security/announce/2010/mfsa2010-65.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html - http://www.redhat.com/support/errata/RHSA-2010-0861.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html
CVE ID: CVE-2010-3180 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:03:18.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the nsBarProp function in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allows remote attackers to execute arbitrary code by accessing the locationbar property of a closed window. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0782.html - http://www.redhat.com/support/errata/RHSA-2010-0896.html - http://www.mandriva.com/security/advisories?name=MDV
2.html - http://www.redhat.com/support/errata/RHSA-2010-0896.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:210 - http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox - http://www.securityfocus.com/bid/44248 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12158 - http://www.redhat.com/support/errata/RHSA-2010-0781.html - http://secunia.com/advisories/42867 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:211 - http://www.vupen.com/english/advisories/2011/0061 - http://www.ubuntu.com/usn/USN-998-1 - http://www.mozilla.org/security/announce/2010/mfsa2010-66.html - http://www.debian.org/security
untu.com/usn/USN-998-1 - http://www.mozilla.org/security/announce/2010/mfsa2010-66.html - http://www.debian.org/security/2010/dsa-2124 - http://support.avaya.com/css/P8/documents/100114250 - http://support.avaya.com/css/P8/documents/100120156 - http://www.ubuntu.com/usn/USN-997-1 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html - http://www.redhat.com/support/errata/RHSA-2010-0861.html - https://bugzilla.mozilla.org/show_bug.cgi?id=588929 - http://www.redhat.com/support/errata/RHSA-2010-0780.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html
CVE ID: CVE-2010-3181 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:03:18.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=589190 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12116 - http://www.mozilla.org/security/announce/2
curity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12116 - http://www.mozilla.org/security/announce/2010/mfsa2010-71.html
CVE ID: CVE-2010-3182 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:03:18.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain application-launch script in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on Linux places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0782.html - http://www.redhat.com/support/errata/RHSA-2010-0896.html
: - http://www.redhat.com/support/errata/RHSA-2010-0782.html - http://www.redhat.com/support/errata/RHSA-2010-0896.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:210 - http://www.securityfocus.com/bid/44251 - http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox - http://www.redhat.com/support/errata/RHSA-2010-0781.html - http://secunia.com/advisories/42867 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:211 - http://www.vupen.com/english/advisories/2011/0061 - http://www.ubuntu.com/usn/USN-998-1 - http://support.avaya.com/css/P8/documents/100114250 - http://support.avaya.com/css/P8/documents/100120156 - http://www.mozilla.org/secur
vaya.com/css/P8/documents/100114250 - http://support.avaya.com/css/P8/documents/100120156 - http://www.mozilla.org/security/announce/2010/mfsa2010-71.html - http://www.ubuntu.com/usn/USN-997-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=590753 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html - http://www.redhat.com/support/errata/RHSA-2010-0861.html - http://www.redhat.com/support/errata/RHSA-2010-0780.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13844
CVE ID: CVE-2010-3183 State: PUBLISHED Published: 2010-10-21T18:12:00 Last Updated: 2024-08-07T03:03:18.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LookupGetterOrSetter function in js3250.dll in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly support window.__lookupGetter__ function calls that lack arguments, which allows remote attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference and application crash) via vectors involving a "dangling pointer" and the JS_ValueToId function. Additional Analyst Notes: - CVE Program Container:
ectors involving a "dangling pointer" and the JS_ValueToId function. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2010-0782.html - http://www.redhat.com/support/errata/RHSA-2010-0896.html - http://www.zerodayinitiative.com/advisories/ZDI-10-219/ - http://www.mandriva.com/security/advisories?name=MDVSA-2010:210 - http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox - http://secunia.com/advisories/42867 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:211 - http://www.vupen.com/english/advisories/2011/0061 - http://www.ubuntu.com/usn/USN-998-1 - http://www.debian.org/security/2010/dsa-2124 - h
om/english/advisories/2011/0061 - http://www.ubuntu.com/usn/USN-998-1 - http://www.debian.org/security/2010/dsa-2124 - http://www.securityfocus.com/bid/44249 - http://support.avaya.com/css/P8/documents/100120156 - http://www.ubuntu.com/usn/USN-997-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=598669 - http://www.mozilla.org/security/announce/2010/mfsa2010-67.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11891 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html - http://www.redhat.com/support/errata/RHSA-2010-0861.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html
CVE ID: CVE-2010-3186 State: PUBLISHED Published: 2010-08-30T19:00:00 Last Updated: 2024-08-07T03:03:18.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 7.x before 7.0.0.13, and WebSphere Application Server Feature Pack for Web Services 6.1.0.9 through 6.1.0.32, when a JAX-WS application is used, does not properly handle an IncludeTimestamp setting in the WS-Security policy, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1PM08360 - http://osvdb.org/67570 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM16014 - ht
rt/docview.wss?uid=swg1PM08360 - http://osvdb.org/67570 - http://www-01.ibm.com/support/docview.wss?uid=swg1PM16014 - http://www-01.ibm.com/support/docview.wss?uid=swg24027709 - http://secunia.com/advisories/41173 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61435 - http://www.vupen.com/english/advisories/2010/2215 - http://www-01.ibm.com/support/docview.wss?uid=swg21443736 - http://www-01.ibm.com/support/docview.wss?uid=swg24027708
CVE ID: CVE-2010-3187 State: PUBLISHED Published: 2010-08-30T19:00:00 Last Updated: 2024-08-07T03:03:18.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ftpd in IBM AIX 5.3 and earlier allows remote attackers to execute arbitrary code via a long NLST command. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1024368 - http://www.ibm.com/support/docview.wss?uid=isg1IZ83276 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11697 - http://www.exploit-db.com/exploits/14456/ - http://www.exploit-db.com/exploits/14409/ - http://www.osvdb.org/66576 - http://www.ibm.com/support/docvi
loits/14456/ - http://www.exploit-db.com/exploits/14409/ - http://www.osvdb.org/66576 - http://www.ibm.com/support/docview.wss?uid=isg1IZ83274 - http://www.ibm.com/support/docview.wss?uid=isg1IZ83252 - http://www.ibm.com/support/docview.wss?uid=isg1IZ83275 - http://seclists.org/fulldisclosure/2010/Jul/324 - http://seclists.org/fulldisclosure/2010/Jul/337 - http://aix.software.ibm.com/aix/efixes/security/ftpd_advisory.asc - http://seclists.org/fulldisclosure/2010/Jul/281 - http://seclists.org/fulldisclosure/2010/Jul/317
CVE ID: CVE-2010-3188 State: PUBLISHED Published: 2010-08-31T19:25:00 Last Updated: 2024-08-07T03:03:17.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.aspx in BugTracker.NET 3.4.3 and earlier allows remote attackers to execute arbitrary SQL commands via a custom field to the search page. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/61434 - http://www.securityfocus.com/archive/1/513385/100/0/threaded - http://secunia.com/advisories/41150 - http://sourceforge.net/projects/btnet/files/btnet_3_4_4_release_notes.txt/view
CVE ID: CVE-2010-3189 State: PUBLISHED Published: 2010-08-31T19:25:00 Last Updated: 2024-08-07T03:03:18.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: The extSetOwner function in the UfProxyBrowserCtrl ActiveX control (UfPBCtrl.dll) in Trend Micro Internet Security Pro 2010 allows remote attackers to execute arbitrary code via an invalid address that is dereferenced as a pointer. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-10-165 - http://www.securityfocus.com/archive/1/513327/100/0/threaded - http://www.securitytracker.com/id?1024364 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mit
ed - http://www.securitytracker.com/id?1024364 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7633 - http://secunia.com/advisories/41140 - http://www.vupen.com/english/advisories/2010/2185 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61397 - http://esupport.trendmicro.com/pages/Hot-Fix-UfPBCtrldll-is-vulnerable-to-remote-attackers.aspx
CVE ID: CVE-2010-3190 State: PUBLISHED Published: 2010-08-31T19:25:00 Last Updated: 2024-08-07T03:03:18.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual C++ 2005 SP1, 2008 SP1, and 2010; and Exchange Server 2010 Service Pack 3, 2013, and 2013 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory during execution of an MFC application such as AtlTraceTool8.exe (aka ATL MFC Trace Tool), as demonstrated by a directory that contains a TRC, cur, rs, rct, or
such as AtlTraceTool8.exe (aka ATL MFC Trace Tool), as demonstrated by a directory that contains a TRC, cur, rs, rct, or res file, aka "MFC Insecure Library Loading Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT205221 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2010-3190 - http://secunia.com/advisories/41212 - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - http://www.corelan.be:8800/index.php/2010/08/25/dll-hijacking-kb-2269637-the-unofficial-list/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12457 - https://docs.microsoft.com/en-us/security-updates/
rg/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12457 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-025 - http://www.securityfocus.com/bid/42811 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.html
CVE ID: CVE-2010-3191 State: PUBLISHED Published: 2010-08-31T19:25:00 Last Updated: 2024-08-07T03:03:18.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Adobe Captivate 5.0.0.596, and possibly other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .cptx file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3A
l Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7470 - http://secunia.com/advisories/41233
CVE ID: CVE-2010-3192 State: PUBLISHED Published: 2010-10-12T21:00:00Z Last Updated: 2024-09-16T16:17:25.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain run-time memory protection mechanisms in the GNU C Library (aka glibc or libc6) print argv[0] and backtrace information, which might allow context-dependent attackers to obtain sensitive information from process memory by executing an incorrect program, as demonstrated by a setuid program that contains a stack-based buffer overflow error, related to the __fortify_fail function in debug/fortify_fail.c, and the __stack_chk_fail (aka stack protection) and __chk_fail (aka FORTIFY_SOURCE) implementations. Additional Analys
, and the __stack_chk_fail (aka stack protection) and __chk_fail (aka FORTIFY_SOURCE) implementations. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/09/02/3 - http://www.openwall.com/lists/oss-security/2010/09/02/5 - http://seclists.org/fulldisclosure/2010/Apr/399 - http://www.openwall.com/lists/oss-security/2010/09/02/2 - http://www.openwall.com/lists/oss-security/2010/08/31/7 - http://www.openwall.com/lists/oss-security/2010/09/02/4 - http://www.openwall.com/lists/oss-security/2010/08/31/6 - http://www.openwall.com/lists/oss-security/2010/08/25/8
CVE ID: CVE-2010-3193 State: PUBLISHED Published: 2010-08-31T21:00:00 Last Updated: 2024-08-07T03:03:18.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the DB2STST program in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2225 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61444 - http://secunia.com/advisories/41218 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC65742 - http://www-01.ibm.com/support/docview.wss?uid=swg21426108 - ftp://public.dhe.ibm.com/ps/products/db2/fixes
swg1IC65742 - http://www-01.ibm.com/support/docview.wss?uid=swg21426108 - ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg21432298 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC65703 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14190 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC65408
CVE ID: CVE-2010-3194 State: PUBLISHED Published: 2010-08-31T21:00:00 Last Updated: 2024-08-07T03:03:18.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DB2DART program in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows attackers to bypass intended file access restrictions via unspecified vectors related to overwriting files owned by an instance owner. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2225 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13841 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC65762 - http://www-01.ibm.com/support/docvie
re.oval%3Adef%3A13841 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC65762 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC65749 - http://secunia.com/advisories/41218 - http://www-01.ibm.com/support/docview.wss?uid=swg21426108 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC65756 - ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg21432298 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61445
CVE ID: CVE-2010-3195 State: PUBLISHED Published: 2010-08-31T21:00:00 Last Updated: 2024-08-07T03:03:18.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 on Windows Server 2008 allows attackers to cause a denial of service (trap) via vectors involving "special group and user enumeration." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/61446 - http://www.vupen.com/english/advisories/2010/2225 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC66643 - http://secunia.com/advisories/41218 - http://www-01.ibm.com/support/do
-01.ibm.com/support/docview.wss?uid=swg1IC66643 - http://secunia.com/advisories/41218 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC66642 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC66099 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14647 - http://www-01.ibm.com/support/docview.wss?uid=swg21426108 - ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg21432298
CVE ID: CVE-2010-3196 State: PUBLISHED Published: 2010-08-31T21:00:00 Last Updated: 2024-08-07T03:03:17.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 9.7 before FP2, when AUTO_REVAL is IMMEDIATE, allows remote authenticated users to cause a denial of service (loss of privileges) to a view owner by defining a dependent view. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21432298 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC67008 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14472
CVE ID: CVE-2010-3197 State: PUBLISHED Published: 2010-08-31T21:00:00 Last Updated: 2024-08-07T03:03:18.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 9.7 before FP2 does not perform the expected access control on the monitor administrative views in the SYSIBMADM schema, which allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14430 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC67819 - http://www-01.ibm.com/support/docview.wss?uid=swg21432298
CVE ID: CVE-2010-3198 State: PUBLISHED Published: 2010-09-08T19:00:00Z Last Updated: 2024-09-16T16:22:53.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions. Additional Analyst Notes: - CVE Program Container: References: - http://www.zope.org/Products/Zope/2.10.12/CHANGES.txt - http://www.vupen.com/english/advisories/2010/2275 - https://mail.zope.org/pipermail/zope-announce/2010-September/002247.html - http://www.zope.org/Products/Zope/2.11.7/CHANGES.txt - http://www.securityfocus.com/bid/42939 -
-September/002247.html - http://www.zope.org/Products/Zope/2.11.7/CHANGES.txt - http://www.securityfocus.com/bid/42939 - https://bugs.launchpad.net/zope2/+bug/627988
CVE ID: CVE-2010-3199 State: PUBLISHED Published: 2010-09-10T19:00:00 Last Updated: 2024-08-07T03:03:18.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in TortoiseSVN 1.6.10, Build 19898 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a file that is processed by Tortoise. NOTE: this is only a vulnerability when a file extension is associated with TortoiseProc or TortoiseMerge, which is not the default. Additional Analyst Notes: - CVE Program Container: References: - http://tortoisesvn.tigris.org/ds/v
is not the default. Additional Analyst Notes: - CVE Program Container: References: - http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=2653202&orderBy=createDate&orderType=desc - http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=2653163 - http://www.securityfocus.com/archive/1/513442/100/0/threaded - http://www.securityfocus.com/archive/1/513463/100/0/threaded
CVE ID: CVE-2010-3200 State: PUBLISHED Published: 2010-09-20T20:00:00 Last Updated: 2024-08-07T03:03:18.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: MSO.dll in Microsoft Word 2003 SP3 11.8326.11.8324 allows remote attackers to cause a denial of service (NULL pointer dereference and multiple-instance application crash) via a crafted buffer in a Word document, as demonstrated by word_crash_11.8326.8324_poc.doc. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/513679/100/0/threaded
CVE ID: CVE-2010-3201 State: PUBLISHED Published: 2011-01-07T22:00:00 Last Updated: 2024-08-07T03:03:18.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in NetWin Surgemail before 4.3g allows remote attackers to inject arbitrary web script or HTML via the username_ex parameter to the surgeweb program. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/34797/ - http://www.securityfocus.com/archive/1/514115/100/0/threaded - http://ictsec.se/?p=108 - http://www.securityfocus.com/bid/43679 - http://secunia.com/advisories/41685
CVE ID: CVE-2010-3202 State: PUBLISHED Published: 2010-09-13T20:00:00 Last Updated: 2024-08-07T03:03:18.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Flock Browser 3.0.0.3989 allows remote attackers to inject arbitrary web script or HTML via a crafted bookmark. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/42556 - http://flock.com/security/ - http://archives.neohapsis.com/archives/bugtraq/2010-09/0111.html - http://lostmon.blogspot.com/2010/08/flock-browser-3003989-malformed.html