Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
11-January/052836.html - http://secunia.com/advisories/42812 - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://marc.info/?l=bugtraq&m=130331363227777&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:218 - http://securityreason.com/achievement_securityalert/90 - http://www.redhat.com/support/errata/RHSA-2011-0195.html - http://www.securitytracker.com/id?1024690 - http://www.php.net/releases/5_3_4.php - http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/ext/zip/php_zip.c?view=log - http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html - http://www.ubuntu.com/usn/USN-1042-1 - http://www.exploit-db.com/exploits/15431 - http://www.vupen.com/engli
0006.html - http://www.ubuntu.com/usn/USN-1042-1 - http://www.exploit-db.com/exploits/15431 - http://www.vupen.com/english/advisories/2011/0021 - http://www.php.net/ChangeLog-5.php - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.490619 - http://www.vupen.com/english/advisories/2010/3313 - http://www.php.net/archive/2010.php#id2010-12-10-1 - http://www.php.net/releases/5_2_15.php - http://marc.info/?l=bugtraq&m=130331363227777&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052845.html - http://svn.php.net/viewvc/php/php-src/branches/PHP_5_2/ext/zip/php_zip.c?view=log -
-announce/2011-January/052845.html - http://svn.php.net/viewvc/php/php-src/branches/PHP_5_2/ext/zip/php_zip.c?view=log - http://www.vupen.com/english/advisories/2011/0020 - http://secunia.com/advisories/42729 - http://www.securityfocus.com/bid/44718 - http://support.apple.com/kb/HT4581
CVE ID: CVE-2010-3710 State: PUBLISHED Published: 2010-10-25T19:00:00 Last Updated: 2024-08-07T03:18:53.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack consumption vulnerability in the filter_var function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3, when FILTER_VALIDATE_EMAIL mode is used, allows remote attackers to cause a denial of service (memory consumption and application crash) via a long e-mail address string. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0077 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052836.html - http://secunia.com/advisories/42812 - http://ma
.fedoraproject.org/pipermail/package-announce/2011-January/052836.html - http://secunia.com/advisories/42812 - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://www.redhat.com/support/errata/RHSA-2011-0196.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:218 - http://www.php.net/releases/5_3_4.php - http://www.securityfocus.com/bid/43926 - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html - http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html - http://www.ubuntu.com/usn/USN-1042-1 - http://www.vupen.com/english/advisories/2011/0021 - http://www.php.net/ChangeLog-5.php - http://marc.info/?l=bugtraq&m=133469208622507&w=2 -
/english/advisories/2011/0021 - http://www.php.net/ChangeLog-5.php - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://www.php.net/archive/2010.php#id2010-12-10-1 - http://www.php.net/releases/5_2_15.php - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052845.html - http://bugs.php.net/bug.php?id=52929 - http://www.vupen.com/english/advisories/2011/0020 - http://secunia.com/advisories/43189 - http://support.apple.com/kb/HT4581
CVE ID: CVE-2010-3711 State: PUBLISHED Published: 2010-10-27T22:00:00 Last Updated: 2024-08-07T03:18:52.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purple_base64_decode function, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a crafted message, related to the plugins for MSN, MySpaceIM, XMPP, and Yahoo! and the NTLM authentication support. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050695.html - http://www.redhat.com/suppor
es: - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050695.html - http://www.redhat.com/support/errata/RHSA-2010-0788.html - http://www.vupen.com/english/advisories/2010/2753 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62708 - http://www.vupen.com/english/advisories/2010/2754 - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.462352 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050227.html - http://securitytracker.com/id?1024623 - http://www.securityfocus.com/bid/44283 - http://secunia.com/advisories/42294 - http://secunia.com/advisories/42075 - http://www.osvdb.org/68773 - http://www.re
- http://secunia.com/advisories/42294 - http://secunia.com/advisories/42075 - http://www.osvdb.org/68773 - http://www.redhat.com/support/errata/RHSA-2010-0890.html - http://www.ubuntu.com/usn/USN-1014-1 - http://secunia.com/advisories/41893 - https://bugzilla.redhat.com/show_bug.cgi?id=641921 - http://www.vupen.com/english/advisories/2010/2851 - http://www.vupen.com/english/advisories/2010/2847 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050133.html - http://developer.pidgin.im/viewmtn/revision/info/b01c6a1f7fe4d86b83f5f10917b3cb713989cfcc - http://secunia.com/advisories/41899 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%
p://secunia.com/advisories/41899 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18506 - http://www.vupen.com/english/advisories/2010/2755 - http://www.vupen.com/english/advisories/2010/2870 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:208 - http://pidgin.im/news/security/?id=48
CVE ID: CVE-2010-3712 State: PUBLISHED Published: 2010-10-27T22:00:00 Last Updated: 2024-08-07T03:18:52.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Joomla! 1.5.x before 1.5.21 and 1.6.x before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving "multiple encoded entities," as demonstrated by the query string to index.php in the com_weblinks or com_content component. Additional Analyst Notes: - CVE Program Container: References: - http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_id=32&tracker_item_id=22767 - http://www.openwall.com/lists/oss-security/2011/03/18
cker/?action=TrackerItemEdit&tracker_id=32&tracker_item_id=22767 - http://www.openwall.com/lists/oss-security/2011/03/18/5 - http://www.openwall.com/lists/oss-security/2010/10/08/4 - http://yehg.net/lab/pr0js/advisories/joomla/core/%5Bjoomla_1.5.20%5D_cross_site_scripting%28XSS%29 - http://www.openwall.com/lists/oss-security/2011/03/18/3 - http://developer.joomla.org/security/news/9-security/10-core-security/322-20101001-core-xss-vulnerabilities - http://www.openwall.com/lists/oss-security/2011/03/13/8 - http://www.openwall.com/lists/oss-security/2011/03/14/22 - http://www.openwall.com/lists/oss-security/2010/10/11/4
CVE ID: CVE-2010-3713 State: PUBLISHED Published: 2010-10-27T22:00:00Z Last Updated: 2024-09-16T20:31:51.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: rss.php in UseBB before 1.0.11 does not properly handle forum configurations in which a user has the view permission but not the read permission, which allows remote attackers to bypass intended access restrictions by reading a forum feed in combination with a topic feed. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/10/08/5 - http://www.openwall.com/lists/oss-security/2010/10/11/5 - http://www.usebb.net/community/topic.php?id=2501 - http://www.usebb.net/commu
wall.com/lists/oss-security/2010/10/11/5 - http://www.usebb.net/community/topic.php?id=2501 - http://www.usebb.net/community/topic-2495.html
CVE ID: CVE-2010-3714 State: PUBLISHED Published: 2010-10-25T19:00:00 Last Updated: 2024-08-07T03:18:53.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jumpUrl (aka access tracking) implementation in tslib/class.tslib_fe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly compare certain hash values during access-control decisions, which allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43786 - http://www.exploit-db.com/exploits/15856 - http://www.debian.org/security/2010/dsa-2121 - http://typo3.org/teams/secur
- http://www.exploit-db.com/exploits/15856 - http://www.debian.org/security/2010/dsa-2121 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-020/ - http://blog.nibblesec.org/2010/12/typo3-sa-2010-020-typo3-sa-2010-022.html
CVE ID: CVE-2010-3715 State: PUBLISHED Published: 2010-10-25T19:00:00Z Last Updated: 2024-09-17T03:32:35.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the RemoveXSS function, and allow remote authenticated users to inject arbitrary web script or HTML via vectors related to (2) the backend. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43786 - http://www.debian.org/security/2010/dsa-2121 - http://typo3.org/teams/s
nces: - http://www.securityfocus.com/bid/43786 - http://www.debian.org/security/2010/dsa-2121 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-020/
CVE ID: CVE-2010-3716 State: PUBLISHED Published: 2010-10-25T19:00:00Z Last Updated: 2024-09-16T18:29:17.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: The be_user_creation task in TYPO3 4.2.x before 4.2.15 and 4.3.x before 4.3.7 allows remote authenticated users to gain privileges via a crafted POST request that creates a user account with arbitrary group memberships. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43786 - http://www.debian.org/security/2010/dsa-2121 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-020/
CVE ID: CVE-2010-3717 State: PUBLISHED Published: 2010-10-25T19:00:00Z Last Updated: 2024-09-16T16:47:44.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: The t3lib_div::validEmail function in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly restrict input to filter_var FILTER_VALIDATE_EMAIL operations in PHP, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a long e-mail address string, a related issue to CVE-2010-3710. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43786 - http://www.debian.org/security/2010/dsa-2121 - http://typo3
iner: References: - http://www.securityfocus.com/bid/43786 - http://www.debian.org/security/2010/dsa-2121 - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-020/
CVE ID: CVE-2010-3718 State: PUBLISHED Published: 2011-02-10T17:00:00 Last Updated: 2024-08-07T03:18:53.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make the ServletContext attribute read-only, which allows local web applications to read or write files outside of the intended working directory, as demonstrated using a directory traversal attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/46177 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13969 - http://www.securityfocus.com/ar
//oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13969 - http://www.securityfocus.com/archive/1/516211/100/0/threaded - http://securityreason.com/securityalert/8072 - http://tomcat.apache.org/security-6.html - http://marc.info/?l=bugtraq&m=136485229118404&w=2 - http://secunia.com/advisories/45022 - http://www.redhat.com/support/errata/RHSA-2011-1845.html - http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html - http://marc.info/?l=bugtraq&m=132215163318824&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65159 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://www.mandriva.com/security/advisories
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:030 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19379 - http://www.redhat.com/support/errata/RHSA-2011-0897.html - http://secunia.com/advisories/57126 - http://www.redhat.com/support/errata/RHSA-2011-0791.html - http://secunia.com/advisories/43192 - http://www.redhat.com/support/errata/RHSA-2011-0896.html - http://www.debian.org/security/2011/dsa-2160 - http://www.securitytracker.com/id?1025025 - http://support.apple.com/kb/HT5002 - http://marc.info/?l=bugtraq&m=132215163318824&w=2 - http://marc.info/?l=bugtraq&m
- http://support.apple.com/kb/HT5002 - http://marc.info/?l=bugtraq&m=132215163318824&w=2 - http://marc.info/?l=bugtraq&m=136485229118404&w=2 - http://tomcat.apache.org/security-5.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12517 - http://marc.info/?l=bugtraq&m=130168502603566&w=2 - http://marc.info/?l=bugtraq&m=139344343412337&w=2 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html - http://tomcat.apache.org/security-7.html - https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646
018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2010-3719 State: PUBLISHED Published: 2011-02-02T00:00:00 Last Updated: 2024-08-07T03:18:53.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in IMAdminSchedTask.asp in the administrative interface for Symantec IM Manager 8.4.16 and earlier allows remote attackers to execute arbitrary code via unspecified parameters to the ScheduleTask method. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-11-037 - http://www.securityfocus.com/archive/1/516103/100/0/threaded - http://www.securityfocus.com/bid/45946 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65040 - http://secun
ded - http://www.securityfocus.com/bid/45946 - https://exchange.xforce.ibmcloud.com/vulnerabilities/65040 - http://secunia.com/advisories/43143 - http://www.vupen.com/english/advisories/2011/0259 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110131_00 - http://osvdb.org/70755
CVE ID: CVE-2010-3720 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-3721 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-3722 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-3723 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-3724 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-3725 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-3726 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-3727 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-3728 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2010-3729 State: PUBLISHED Published: 2010-10-05T17:00:00 Last Updated: 2024-08-07T03:18:53.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SPDY protocol implementation in Google Chrome before 6.0.472.62 does not properly manage buffers, which might allow remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/chromium/issues/detail?id=55119 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7380 - http://googlechromereleases.blogspot.com/2010/09/stable-beta-channel-updates_17.html
CVE ID: CVE-2010-3730 State: PUBLISHED Published: 2010-10-05T17:00:00 Last Updated: 2024-08-07T03:18:52.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 6.0.472.62 does not properly use information about the origin of a document to manage properties, which allows remote attackers to have an unspecified impact via a crafted web site, related to a "property pollution" issue. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7313 - http://code.google.com/p/chromium/issues/detail?id=55350 - http://googlechromereleases.blogspot.com/2010/09/stable-beta-channel-u
de.google.com/p/chromium/issues/detail?id=55350 - http://googlechromereleases.blogspot.com/2010/09/stable-beta-channel-updates_17.html
CVE ID: CVE-2010-3731 State: PUBLISHED Published: 2010-10-05T17:00:00 Last Updated: 2024-08-07T03:18:53.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the validateUser implementation in the com.ibm.db2.das.core.DasSysCmd function in db2dasrrm in the DB2 Administration Server (DAS) component in IBM DB2 9.1 before FP10, 9.5 before FP6a, and 9.7 before FP3 allows remote attackers to execute arbitrary code via a long username string. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41686 - http://www.securityfocus.com/bid/46077 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.
86 - http://www.securityfocus.com/bid/46077 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14687 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC70538 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC69986 - http://www-01.ibm.com/support/docview.wss?uid=swg21426108 - ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - http://www.vupen.com/english/advisories/2010/2544 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC70539 - http://www.zerodayinitiative.com/advisories/ZDI-11-035
CVE ID: CVE-2010-3732 State: PUBLISHED Published: 2010-10-05T17:00:00 Last Updated: 2024-08-07T03:18:52.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DRDA Services component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to cause a denial of service (database server ABEND) by using the client CLI on Linux, UNIX, or Windows for executing a prepared statement with a large number of parameter markers. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14219 - ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - http://w
.oval%3Adef%3A14219 - ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ56428
CVE ID: CVE-2010-3733 State: PUBLISHED Published: 2010-10-05T17:00:00 Last Updated: 2024-08-07T03:18:52.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Engine Utilities component in IBM DB2 UDB 9.5 before FP6a uses world-writable permissions for the sqllib/cfg/db2sprf file, which might allow local users to gain privileges by modifying this file. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ68463 - ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14707
CVE ID: CVE-2010-3734 State: PUBLISHED Published: 2010-10-05T17:00:00 Last Updated: 2024-08-07T03:18:53.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Install component in IBM DB2 UDB 9.5 before FP6a on Linux, UNIX, and Windows enforces an unintended limit on password length, which makes it easier for attackers to obtain access via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14764 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC62856 - ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT
CVE ID: CVE-2010-3735 State: PUBLISHED Published: 2010-10-05T17:00:00 Last Updated: 2024-08-07T03:18:52.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Query Compiler, Rewrite, Optimizer" component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted query involving certain UNION ALL views, leading to an indefinitely large amount of compilation time. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ58417 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14736 - ftp://public.dhe.ibm.com/ps/produ
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14736 - ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT
CVE ID: CVE-2010-3736 State: PUBLISHED Published: 2010-10-05T17:00:00 Last Updated: 2024-08-07T03:18:52.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the Relational Data Services component in IBM DB2 UDB 9.5 before FP6a, when the connection concentrator is enabled, allows remote authenticated users to cause a denial of service (heap memory consumption) by using a different code page than the database server. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13859 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC68182 - ftp://public.dhe.ibm.com/ps/product
tre.oval%3Adef%3A13859 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC68182 - ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT