Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-4651 State: PUBLISHED Published: 2011-03-11T22:00:00 Last Updated: 2024-08-07T03:51:17.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a filename that is specified with a .. (dot dot) or full pathname, a related issue to CVE-2010-1679. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0600 - http://support.apple.com/kb/HT4723 - http://openwall.com/lists/oss-security/2011/01/06/20 - http://www.securityfocus.com/bid/46768 - http://lists.apple.com/ar
ttp://openwall.com/lists/oss-security/2011/01/06/20 - http://www.securityfocus.com/bid/46768 - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - http://openwall.com/lists/oss-security/2011/01/06/21 - https://bugzilla.redhat.com/show_bug.cgi?id=667529 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055246.html - http://openwall.com/lists/oss-security/2011/01/06/19 - http://git.savannah.gnu.org/cgit/patch.git/commit/?id=685a78b6052f4df6eac6d625a545cfb54a6ac0e1 - http://secunia.com/advisories/43677 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055241.html - http://openwall.com/lists/oss-security/2011/01/05/10 - http://lis
rg/pipermail/package-announce/2011-March/055241.html - http://openwall.com/lists/oss-security/2011/01/05/10 - http://lists.gnu.org/archive/html/bug-patch/2010-12/msg00000.html - http://secunia.com/advisories/43663
CVE ID: CVE-2010-4652 State: PUBLISHED Published: 2011-02-02T00:00:00 Last Updated: 2024-08-07T03:51:17.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the sql_prepare_where function (contrib/mod_sql.c) in ProFTPD before 1.3.3d, when mod_sql is enabled, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted username containing substitution tags, which are not properly handled during construction of an SQL query. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053540.html - http://lists.fedoraproject.org/p
- http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053540.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053537.html - http://www.debian.org/security/2011/dsa-2191 - http://proftpd.org/docs/RELEASE_NOTES-1.3.3d - http://www.vupen.com/english/advisories/2011/0248 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:023 - http://bugs.proftpd.org/show_bug.cgi?id=3536 - https://bugzilla.redhat.com/show_bug.cgi?id=670170 - http://www.securityfocus.com/bid/44933 - http://www.vupen.com/english/advisories/2011/0331 - http://phrack.org/issues.html?issue=67&id=7#article
CVE ID: CVE-2010-4653 State: PUBLISHED Published: 2019-11-13T19:12:53 Last Updated: 2024-08-07T03:51:17.954Z Vendors: poppler Products: poppler Problem Types: Integer Overflow Description: An integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-4653 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4653 - https://access.redhat.com/security/cve/cve-2010-4653 - http://security.gentoo.org/glsa/glsa-201310-03.xml - http://www.securityfocus.com/bid/45948
CVE ID: CVE-2010-4654 State: PUBLISHED Published: 2019-11-13T19:41:43 Last Updated: 2024-08-07T03:51:18.054Z Vendors: poppler Products: poppler Problem Types: Other Description: poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-4654 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4654 - https://access.redhat.com/security/cve/cve-2010-4654 - http://security.gentoo.org/glsa/glsa-201310-03.xml
CVE ID: CVE-2010-4655 State: PUBLISHED Published: 2011-07-18T19:00:00 Last Updated: 2024-08-07T03:51:17.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize certain data structures, which allows local users to obtain potentially sensitive information from kernel heap memory by leveraging the CAP_NET_ADMIN capability for an ethtool ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1146-1 - http://www.securityfocus.com/bid/45972 - http://openwall.com/lists/oss-security/2011/01/24/9 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://se
/openwall.com/lists/oss-security/2011/01/24/9 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://openwall.com/lists/oss-security/2011/01/25/4 - http://openwall.com/lists/oss-security/2011/01/25/3 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://openwall.com/lists/oss-security/2011/01/25/5 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b00916b189d13a615ff05c9242201135992fcda3 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36 - http://openwall.com/lists/oss-security/2011/01/28/1 - https://bugzilla.redhat.com/show_bug.cgi?id=672428 - https://lkml.org/lkml/2010/10/7/
/lists/oss-security/2011/01/28/1 - https://bugzilla.redhat.com/show_bug.cgi?id=672428 - https://lkml.org/lkml/2010/10/7/297
CVE ID: CVE-2010-4656 State: PUBLISHED Published: 2011-07-18T19:00:00 Last Updated: 2024-08-07T03:51:17.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iowarrior_write function in drivers/usb/misc/iowarrior.c in the Linux kernel before 2.6.37 does not properly allocate memory, which might allow local users to trigger a heap-based buffer overflow, and consequently cause a denial of service or gain privileges, via a long report. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1146-1 - https://bugzilla.redhat.com/show_bug.cgi?id=672420 - http://openwall.com/lists/oss-security/2011/01/24/9 - http://git.kernel.org/?p=linux/kernel/
om/show_bug.cgi?id=672420 - http://openwall.com/lists/oss-security/2011/01/24/9 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3ed780117dbe5acb64280d218f0347f238dafed0 - http://openwall.com/lists/oss-security/2011/01/25/4 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37 - http://openwall.com/lists/oss-security/2011/01/25/3 - http://www.securityfocus.com/bid/46069
CVE ID: CVE-2010-4657 State: PUBLISHED Published: 2019-11-13T20:06:56 Last Updated: 2024-08-07T03:51:17.954Z Vendors: php5 Products: php5 Problem Types: Memory Leak Description: PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak into the resulting output. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-4657 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4657 - https://access.redhat.com/security/cve/cve-2010-4657 - https://bugs.launchpad.net/php/%2Bbug/655442
CVE ID: CVE-2010-4658 State: PUBLISHED Published: 2020-02-07T15:04:58 Last Updated: 2024-08-07T03:51:17.938Z Vendors: statusnet Products: statusnet Problem Types: Other Description: statusnet through 2010 allows attackers to spoof syslog messages via newline injection attacks. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-4658 - https://www.openwall.com/lists/oss-security/2011/01/25/13
CVE ID: CVE-2010-4659 State: PUBLISHED Published: 2019-11-20T16:47:43 Last Updated: 2024-08-07T03:51:17.959Z Vendors: statusnet Products: statusnet Problem Types: unspecified Description: Cross-site scripting (XSS) vulnerability in statusnet through 2010 in error message contents. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-4659 - https://access.redhat.com/security/cve/cve-2010-4659 - https://www.openwall.com/lists/oss-security/2011/01/25/13
CVE ID: CVE-2010-4660 State: PUBLISHED Published: 2019-11-20T15:41:50 Last Updated: 2024-08-07T03:51:18.037Z Vendors: statusnet Products: statusnet Problem Types: unspecified Description: Unspecified vulnerability in statusnet through 2010 due to the way addslashes are used in SQL string escapes.. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-4660 - https://www.openwall.com/lists/oss-security/2011/01/25/13
CVE ID: CVE-2010-4661 State: PUBLISHED Published: 2019-11-13T20:57:06 Last Updated: 2024-08-07T03:51:17.969Z Vendors: udisks Products: udisks Problem Types: Other Description: udisks before 1.0.3 allows a local user to load arbitrary Linux kernel modules. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-4661 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4661 - https://access.redhat.com/security/cve/cve-2010-4661 - http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00000.html
CVE ID: CVE-2010-4662 State: PUBLISHED Published: 2020-02-05T18:13:22 Last Updated: 2024-08-07T03:51:18.096Z Vendors: pmwiki Products: pmwiki Problem Types: Cross-Site Scripting Description: PmWiki before 2.2.21 has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/cve/CVE-2010-4662 - https://www.openwall.com/lists/oss-security/2011/02/23/23
CVE ID: CVE-2010-4663 State: PUBLISHED Published: 2011-06-08T10:00:00Z Last Updated: 2024-09-17T01:30:47.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the News module in CMS Made Simple (CMSMS) before 1.9.1 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/03/30/9 - http://openwall.com/lists/oss-security/2011/03/29/2 - http://forum.cmsmadesimple.org/viewtopic.php?t=49245
CVE ID: CVE-2010-4664 State: PUBLISHED Published: 2019-11-13T21:43:34 Last Updated: 2024-08-07T03:51:17.985Z Vendors: consolekit Products: consolekit Problem Types: Policy restrictions break-out via remote Virtual Network Computing (VNC) session Description: In ConsoleKit before 0.4.2, an intended security policy restriction bypass was found. This flaw allows an authenticated system user to escalate their privileges by initiating a remote VNC session. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-4664 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4664 - https://access.redhat.com/security/cve/cve-2010-4664
CVE ID: CVE-2010-4665 State: PUBLISHED Published: 2011-05-03T20:00:00 Last Updated: 2024-08-07T03:51:17.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ReadDirectory function in tiffdump.c in tiffdump in LibTIFF before 3.9.5 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TIFF file containing a directory data structure with many directory entries. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/04/12/10 - http://secunia.com/advisories/44271 - http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.h
04/12/10 - http://secunia.com/advisories/44271 - http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html - http://bugzilla.maptools.org/show_bug.cgi?id=2218 - http://www.debian.org/security/2012/dsa-2552 - https://bugzilla.redhat.com/show_bug.cgi?id=695887 - http://security.gentoo.org/glsa/glsa-201209-02.xml - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058478.html - http://www.remotesensing.org/libtiff/v3.9.5.html - http://ubuntu.com/usn/usn-1416-1 - http://www.securityfocus.com/bid/47338 - http://secunia.com/advisories/50726
CVE ID: CVE-2010-4666 State: PUBLISHED Published: 2012-04-13T20:00:00Z Last Updated: 2024-08-07T03:51:18.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in libarchive 3.0 pre-release code allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted CAB file, which is not properly handled during the reading of Huffman code data within LZX compressed data. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/libarchive/source/detail?r=2842 - https://bugzilla.redhat.com/show_bug.cgi?id=705849
CVE ID: CVE-2010-4667 State: PUBLISHED Published: 2011-06-14T17:00:00Z Last Updated: 2024-09-16T18:43:22.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Coppermine Photo Gallery (CPG) before 1.4.27 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/08/2 - http://www.openwall.com/lists/oss-security/2011/06/08/6 - http://bugs.gentoo.org/show_bug.cgi?id=347287 - http://forum.coppermine-gallery.net/index.php/topic%2C65023.msg322935.html
CVE ID: CVE-2010-4668 State: PUBLISHED Published: 2011-01-03T19:26:00 Last Updated: 2024-08-07T03:51:17.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 2.6.37-rc7 allows local users to cause a denial of service (panic) via a zero-length I/O request in a device ioctl to a SCSI device, related to an unaligned map. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4163. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45660 - http://openwall.com/lists/oss-security/2010/11/30/4 - http://openwall.com/lists/oss-security/2010/11/30/7
om/bid/45660 - http://openwall.com/lists/oss-security/2010/11/30/4 - http://openwall.com/lists/oss-security/2010/11/30/7 - http://www.redhat.com/support/errata/RHSA-2011-0007.html - http://openwall.com/lists/oss-security/2010/11/29/1 - http://lkml.org/lkml/2010/11/29/70 - http://lkml.org/lkml/2010/11/29/68 - http://secunia.com/advisories/42890 - https://patchwork.kernel.org/patch/363282/ - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5478755616ae2ef1ce144dded589b62b2a50d575 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc7 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64496
CVE ID: CVE-2010-4669 State: PUBLISHED Published: 2011-01-07T11:00:00 Last Updated: 2024-08-07T03:51:17.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 allows remote attackers to cause a denial of service (CPU consumption and system hang) by sending many Router Advertisement (RA) messages with different source addresses, as demonstrated by the flood_router6 program in the thc-ipv6 package. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45760 - http://mirror.fem-n
ional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45760 - http://mirror.fem-net.de/CCC/27C3/mp4-h264-HQ/27c3-3957-en-ipv6_insecurities.mp4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64583 - http://mirror.fem-net.de/CCC/27C3/mp3-audio-only/27c3-3957-en-ipv6_insecurities.mp3 - http://events.ccc.de/congress/2010/Fahrplan/events/3957.en.html - http://www.youtube.com/watch?v=00yjWB6gGy8
CVE ID: CVE-2010-4670 State: PUBLISHED Published: 2011-01-07T11:00:00 Last Updated: 2024-08-07T03:51:18.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Neighbor Discovery (ND) protocol implementation in the IPv6 stack on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(3) and earlier, and Cisco PIX Security Appliances devices, allows remote attackers to cause a denial of service (CPU consumption and device hang) by sending many Router Advertisement (RA) messages with different source addresses, as demonstrated by the flood_router6 program in the thc-ipv6 package, aka Bug ID CSCti24526. Additional Analyst Notes: - CVE Program Container: Refere
outer6 program in the thc-ipv6 package, aka Bug ID CSCti24526. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45760 - http://mirror.fem-net.de/CCC/27C3/mp4-h264-HQ/27c3-3957-en-ipv6_insecurities.mp4 - http://www.securitytracker.com/id?1024963 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64598 - http://mirror.fem-net.de/CCC/27C3/mp3-audio-only/27c3-3957-en-ipv6_insecurities.mp3 - http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf - http://events.ccc.de/congress/2010/Fahrplan/events/3957.en.html - http://www.youtube.com/watch?v=00yjWB6gGy8
CVE ID: CVE-2010-4671 State: PUBLISHED Published: 2011-01-07T11:00:00 Last Updated: 2024-08-07T03:51:18.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS before 15.0(1)XA5 allows remote attackers to cause a denial of service (CPU consumption and device hang) by sending many Router Advertisement (RA) messages with different source addresses, as demonstrated by the flood_router6 program in the thc-ipv6 package, aka Bug ID CSCti33534. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45760 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64589 -
er: References: - http://www.securityfocus.com/bid/45760 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64589 - http://mirror.fem-net.de/CCC/27C3/mp4-h264-HQ/27c3-3957-en-ipv6_insecurities.mp4 - http://www.ciscosystems.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdf - http://mirror.fem-net.de/CCC/27C3/mp3-audio-only/27c3-3957-en-ipv6_insecurities.mp3 - http://events.ccc.de/congress/2010/Fahrplan/events/3957.en.html - http://www.youtube.com/watch?v=00yjWB6gGy8
CVE ID: CVE-2010-4672 State: PUBLISHED Published: 2011-01-07T11:00:00 Last Updated: 2024-08-07T03:51:18.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(3) and earlier allow remote attackers to cause a denial of service (block exhaustion) via EIGRP traffic that triggers an EIGRP multicast storm, aka Bug ID CSCtf20269. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024963 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64694 - http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf - http://www.securityfocus.com/bid/4576
4 - http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf - http://www.securityfocus.com/bid/45767 - http://secunia.com/advisories/42931
CVE ID: CVE-2010-4673 State: PUBLISHED Published: 2011-01-07T11:00:00 Last Updated: 2024-08-07T03:51:17.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(4) and earlier allow remote attackers to cause a denial of service via a flood of packets, aka Bug ID CSCtg06316. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64599 - http://www.securityfocus.com/bid/45766 - http://www.securitytracker.com/id?1024963 - http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf
CVE ID: CVE-2010-4674 State: PUBLISHED Published: 2011-01-07T11:00:00 Last Updated: 2024-08-07T03:51:17.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(4) and earlier allows remote attackers to cause a denial of service (block exhaustion) via multicast traffic, aka Bug ID CSCtg63992. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45766 - http://www.securitytracker.com/id?1024963 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64600 - http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf - h
ce.ibmcloud.com/vulnerabilities/64600 - http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf - http://secunia.com/advisories/42942
CVE ID: CVE-2010-4675 State: PUBLISHED Published: 2011-01-07T11:00:00 Last Updated: 2024-08-07T03:51:17.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) do not properly determine the interfaces for which TELNET connections should be permitted, which allows remote authenticated users to bypass intended access restrictions via vectors involving the "lowest security level interface," aka Bug ID CSCsv40504. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024963 - http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf - h
://www.securitytracker.com/id?1024963 - http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/64601 - http://www.securityfocus.com/bid/45767 - http://secunia.com/advisories/42931
CVE ID: CVE-2010-4676 State: PUBLISHED Published: 2011-01-07T11:00:00 Last Updated: 2024-08-07T03:51:17.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote authenticated users to cause a denial of service (device crash) via a high volume of IPsec traffic, aka Bug ID CSCsx52748. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64602 - http://www.securitytracker.com/id?1024963 - http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf - http://www.securityfocus.com
id?1024963 - http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf - http://www.securityfocus.com/bid/45767 - http://secunia.com/advisories/42931
CVE ID: CVE-2010-4677 State: PUBLISHED Published: 2011-01-07T11:00:00 Last Updated: 2024-08-07T03:51:17.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: emWEB on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to cause a denial of service (daemon crash) via a request for a document whose name contains space characters, aka Bug ID CSCsy08416. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024963 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64603 - http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf - http://www.securityfocus.co
ities/64603 - http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf - http://www.securityfocus.com/bid/45767 - http://secunia.com/advisories/42931
CVE ID: CVE-2010-4678 State: PUBLISHED Published: 2011-01-07T11:00:00 Last Updated: 2024-08-07T03:51:17.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) permit packets to pass before the configuration has been loaded, which might allow remote attackers to bypass intended access restrictions by sending network traffic during device startup, aka Bug ID CSCsy86769. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024963 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64604 - http://www.cisco.com/en/US/docs/security/asa/asa82/release/no