Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-1205 State: PUBLISHED Published: 2010-06-30T18:00:00 Last Updated: 2024-08-07T01:14:06.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:133 - http://www.vmware.com/security/advisories/VMSA-2010-0014.html - http://www.securityfocus.com/bid/41174 - http://www.vupen.com/english/advisories/2010/1877 - http://googlechromer
html - http://www.securityfocus.com/bid/41174 - http://www.vupen.com/english/advisories/2010/1877 - http://googlechromereleases.blogspot.com/2010/07/stable-channel-update.html - http://www.vupen.com/english/advisories/2010/3045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59815 - http://support.apple.com/kb/HT4435 - http://www.mozilla.org/security/announce/2010/mfsa2010-41.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11851 - http://www.vupen.com/english/advisories/2010/1837 - https://bugzilla.mozilla.org/show_bug.cgi?id=570451 - http://support.apple.com/kb/HT4457 - http://www.vupen.com/english/advisories/2010/1755 - http://www.vupen.
i?id=570451 - http://support.apple.com/kb/HT4457 - http://www.vupen.com/english/advisories/2010/1755 - http://www.vupen.com/english/advisories/2010/3046 - http://secunia.com/advisories/40472 - http://support.apple.com/kb/HT4566 - http://secunia.com/advisories/40302 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://secunia.com/advisories/40336 - http://secunia.com/advisories/41574 - http://www.ubuntu.com/usn/USN-960-1 - http://blackberry.com/btsc/KB27244 - http://www.libpng.org/pub/png/libpng.html - http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html - http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html - http://sec
announce/2010//Aug/msg00003.html - http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html - http://secunia.com/advisories/42317 - http://lists.vmware.com/pipermail/security-announce/2010/000105.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044283.html - http://www.debian.org/security/2010/dsa-2072 - http://support.apple.com/kb/HT4312 - http://secunia.com/advisories/40547 - http://secunia.com/advisories/42314 - http://www.vupen.com/english/advisories/2010/1637 - http://support.apple.com/kb/HT4554 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html
suse-security-announce/2010-09/msg00006.html - http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.613061 - http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044397.html - https://bugs.webkit.org/show_bug.cgi?id=40798 - http://support.apple.com/kb/HT4456 - http://www.vupen.com/english/advisories/2010/2491 - http://trac.webkit.org/changeset/61816 - http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commitdiff%3Bh=188eb6b42602bf7d7ae708a21897923b6a83fe7c#patch18 - http://code.google.com/p/chromium/issues/detail?id=45983 - http://www.vupen.com/eng
7d7ae708a21897923b6a83fe7c#patch18 - http://code.google.com/p/chromium/issues/detail?id=45983 - http://www.vupen.com/english/advisories/2010/1846 - https://bugzilla.redhat.com/show_bug.cgi?id=608238 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html - http://www.vupen.com/english/advisories/2010/1612
CVE ID: CVE-2010-1206 State: PUBLISHED Published: 2010-06-25T19:00:00 Last Updated: 2024-08-07T01:14:06.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: The startDocumentLoad function in browser/base/content/browser.js in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, does not properly implement the Same Origin Policy in certain circumstances related to the about:blank document and a document that is currently loading, which allows (1) remote web servers to conduct spoofing attacks via vectors involving a 204 (aka No Content) status code, and allows (2) remote attackers to conduct spoofing attacks via vectors involving a window.stop cal
ontent) status code, and allows (2) remote attackers to conduct spoofing attacks via vectors involving a window.stop call. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40283 - http://www.mozilla.org/security/announce/2010/mfsa2010-45.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8248 - https://bugzilla.mozilla.org/show_bug.cgi?id=556957 - http://hg.mozilla.org/mozilla-central/rev/cadddabb1178 - http://lcamtuf.blogspot.com/2010/06/yeah-about-that-address-bar-thing.html
CVE ID: CVE-2010-1207 State: PUBLISHED Published: 2010-07-30T20:00:00 Last Updated: 2024-08-07T01:14:06.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 do not properly implement read restrictions for CANVAS elements, which allows remote attackers to obtain sensitive cross-origin information via vectors involving reference retention and node deletion. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=571287 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11887 - http://www.mozilla.org/security/announce/2010/mfsa2010-43.h
tory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11887 - http://www.mozilla.org/security/announce/2010/mfsa2010-43.html
CVE ID: CVE-2010-1208 State: PUBLISHED Published: 2010-07-30T20:00:00 Last Updated: 2024-08-07T01:14:06.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the attribute-cloning functionality in the DOM implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via vectors related to deletion of an event attribute node with a nonzero reference count. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11740 - http://www.zerodayinitiative.com/advisories/ZD
ty.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11740 - http://www.zerodayinitiative.com/advisories/ZDI-10-134/ - http://www.securityfocus.com/bid/41849 - https://bugzilla.mozilla.org/show_bug.cgi?id=572986 - http://www.mozilla.org/security/announce/2010/mfsa2010-35.html - http://www.securityfocus.com/archive/1/512515
CVE ID: CVE-2010-1209 State: PUBLISHED Published: 2010-07-30T20:00:00 Last Updated: 2024-08-07T01:14:06.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the NodeIterator implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via a crafted NodeFilter that detaches DOM nodes, related to the NodeIterator interface and a javascript callback. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/41845 - http://www.mozilla.org/security/announce/2010/mfsa2010-36.html - https://oval.cisecurity.org/repository/se
m/bid/41845 - http://www.mozilla.org/security/announce/2010/mfsa2010-36.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11055 - https://bugzilla.mozilla.org/show_bug.cgi?id=552110 - http://www.securityfocus.com/archive/1/512511 - http://www.zerodayinitiative.com/advisories/ZDI-10-130/
CVE ID: CVE-2010-1210 State: PUBLISHED Published: 2010-07-30T20:00:00 Last Updated: 2024-08-07T01:14:06.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: intl/uconv/util/nsUnicodeDecodeHelper.cpp in Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 inserts a U+FFFD sequence into text in certain circumstances involving undefined positions, which might make it easier for remote attackers to conduct cross-site scripting (XSS) attacks via crafted 8-bit text. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=564679 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11863 - http:
bug.cgi?id=564679 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11863 - http://www.mozilla.org/security/announce/2010/mfsa2010-44.html
CVE ID: CVE-2010-1211 State: PUBLISHED Published: 2010-07-30T20:00:00 Last Updated: 2024-08-07T01:14:06.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11552 - https://bugzilla.m
ces: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11552 - https://bugzilla.mozilla.org/show_bug.cgi?id=564705 - https://bugzilla.mozilla.org/show_bug.cgi?id=567059 - https://bugzilla.mozilla.org/show_bug.cgi?id=529087 - https://bugzilla.mozilla.org/show_bug.cgi?id=559241 - https://bugzilla.mozilla.org/show_bug.cgi?id=561539 - https://bugzilla.mozilla.org/show_bug.cgi?id=528644 - https://bugzilla.mozilla.org/show_bug.cgi?id=574750 - https://bugzilla.mozilla.org/show_bug.cgi?id=507775 - https://bugzilla.mozilla.org/show_bug.cgi?id=570657 - http://www.mozilla.org/security/announce/2010/mfsa2010-34.html - https://bugzilla.mozilla.org/show_bug.cgi?id=56
70657 - http://www.mozilla.org/security/announce/2010/mfsa2010-34.html - https://bugzilla.mozilla.org/show_bug.cgi?id=566136 - https://bugzilla.mozilla.org/show_bug.cgi?id=535926
CVE ID: CVE-2010-1212 State: PUBLISHED Published: 2010-07-30T20:00:00 Last Updated: 2024-08-07T01:14:06.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) propagation of deep aborts in the TraceRecorder::record_JSOP_BINDNAME function, (2) depth handling in the TraceRecorder::record_JSOP_GETELEM function, and (3) tracing of out-of-range arguments in the TraceRecorder::record_JSOP_ARGSUB function. Additional Analy
function, and (3) tracing of out-of-range arguments in the TraceRecorder::record_JSOP_ARGSUB function. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=558618 - https://bugzilla.mozilla.org/show_bug.cgi?id=568855 - https://bugzilla.mozilla.org/show_bug.cgi?id=530955 - http://www.mozilla.org/security/announce/2010/mfsa2010-34.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11771
CVE ID: CVE-2010-1213 State: PUBLISHED Published: 2010-07-30T20:00:00 Last Updated: 2024-08-07T01:14:06.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: The importScripts Web Worker method in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not verify that content is valid JavaScript code, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=568148 - http://www.mozilla.org/security/announce/2010/mfsa20
References: - https://bugzilla.mozilla.org/show_bug.cgi?id=568148 - http://www.mozilla.org/security/announce/2010/mfsa2010-42.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11835
CVE ID: CVE-2010-1214 State: PUBLISHED Published: 2010-07-30T20:00:00 Last Updated: 2024-08-07T01:14:06.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via plugin content with many parameter elements. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11685 - https://bugzilla.mozilla.org/show_bug.cgi?id=572985 - http://www.mozilla.org/security/announce/2010/mfsa2010-37.html
CVE ID: CVE-2010-1215 State: PUBLISHED Published: 2010-07-30T20:00:00 Last Updated: 2024-08-07T01:14:06.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 do not properly implement access to a content object through a SafeJSObjectWrapper (aka SJOW) wrapper, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging "access to an object from the chrome scope." Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=567069 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1152
org/show_bug.cgi?id=567069 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11527 - http://www.mozilla.org/security/announce/2010/mfsa2010-38.html
CVE ID: CVE-2010-1216 State: PUBLISHED Published: 2010-03-30T23:00:00 Last Updated: 2024-08-07T01:14:06.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in templates/template.php in notsoPureEdit 1.4.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the content parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://inj3ct0r.com/exploits/11393 - http://secunia.com/advisories/39070 - http://www.exploit-db.com/exploits/11832 - http://www.vupen.com/english/advisories/2010/0673
CVE ID: CVE-2010-1217 State: PUBLISHED Published: 2010-03-30T23:00:00 Last Updated: 2024-08-07T01:14:06.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the JE Form Creator (com_jeformcr) component for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via directory traversal sequences in the view parameter to index.php. NOTE: the original researcher states that the affected product is JE Tooltip, not Form Creator; however, the exploit URL suggests that Form Creator is affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38866 - http://secunia.co
itional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38866 - http://secunia.com/advisories/39063 - http://osvdb.org/63120 - http://www.exploit-db.com/exploits/11814 - http://www.packetstormsecurity.org/1003-exploits/joomlajetooltip-lfi.txt
CVE ID: CVE-2010-1218 State: PUBLISHED Published: 2010-03-30T23:00:00 Last Updated: 2024-08-07T01:14:06.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the mm_forum extension 1.8.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38825 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57037 - http://typo3.org/extensions/repository/view/mm_forum/1.8.3/ - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-007/
CVE ID: CVE-2010-1219 State: PUBLISHED Published: 2010-03-30T23:00:00 Last Updated: 2024-08-07T01:14:06.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the JA News (com_janews) component 1.0 for Joomla! allows remote attackers to read arbitrary local files via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38746 - http://www.exploit-db.com/exploits/11757 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56901 - http://secunia.com/advisories/38952
CVE ID: CVE-2010-1221 State: PUBLISHED Published: 2010-04-07T15:00:00 Last Updated: 2024-08-07T01:14:06.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: CA XOsoft r12.0 and r12.5 does not properly perform authentication, which allows remote attackers to enumerate usernames via a SOAP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/510564/100/0/threaded - http://www.securityfocus.com/bid/39244 - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=232869
CVE ID: CVE-2010-1222 State: PUBLISHED Published: 2010-04-07T15:00:00 Last Updated: 2024-08-07T01:14:06.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: CA XOsoft r12.5 does not properly perform authentication, which allows remote attackers to obtain potentially sensitive information via a SOAP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/510564/100/0/threaded - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=232869 - http://www.securityfocus.com/bid/39249
CVE ID: CVE-2010-1223 State: PUBLISHED Published: 2010-04-07T15:00:00 Last Updated: 2024-08-07T01:14:06.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in CA XOsoft r12.0 and r12.5 allow remote attackers to execute arbitrary code via (1) a malformed request to the ws_man/xosoapapi.asmx SOAP endpoint or (2) a long string to the entry_point.aspx service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39238 - http://www.securityfocus.com/archive/1/510564/100/0/threaded - http://www.securityfocus.com/archive/1/510565/100/0/threaded - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=232
urityfocus.com/archive/1/510565/100/0/threaded - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=232869 - http://www.zerodayinitiative.com/advisories/ZDI-10-065/ - http://www.securityfocus.com/archive/1/510567/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-10-066/
CVE ID: CVE-2010-1224 State: PUBLISHED Published: 2010-04-01T21:00:00 Last Updated: 2024-08-07T01:14:06.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: main/acl.c in Asterisk Open Source 1.6.0.x before 1.6.0.25, 1.6.1.x before 1.6.1.17, and 1.6.2.x before 1.6.2.5 does not properly enforce remote host access controls when CIDR notation "/0" is used in permit= and deny= configuration rules, which causes an improper arithmetic shift and might allow remote attackers to bypass ACL rules and access services from unauthorized hosts. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/509757/100/0/threaded - http://downloads.asteris
Program Container: References: - http://www.securityfocus.com/archive/1/509757/100/0/threaded - http://downloads.asterisk.org/pub/security/AST-2010-003.html - http://downloads.asterisk.org/pub/security/AST-2010-003-1.6.2.diff - http://secunia.com/advisories/39096 - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037679.html - http://downloads.asterisk.org/pub/security/AST-2010-003-1.6.0.diff - http://www.vupen.com/english/advisories/2010/0475 - http://downloads.asterisk.org/pub/security/AST-2010-003-1.6.1.diff - http://osvdb.org/62588 - https://exchange.xforce.ibmcloud.com/vulnerabilities/56552 - http://www.securityfocus.com/bid/38424 - http://secunia.com/advisories/3875
.xforce.ibmcloud.com/vulnerabilities/56552 - http://www.securityfocus.com/bid/38424 - http://secunia.com/advisories/38752
CVE ID: CVE-2010-1225 State: PUBLISHED Published: 2010-04-01T22:00:00 Last Updated: 2024-08-07T01:14:06.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: The memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007 Gold and SP1, Virtual Server 2005 Gold and R2 SP1, and Windows Virtual PC does not properly restrict access from the guest OS to memory locations in the VMM work area, which allows context-dependent attackers to bypass certain anti-exploitation protection mechanisms on the guest OS via crafted input to a vulnerable application. NOTE: the vendor reportedly found that only systems with an otherwise vulnerable
ted input to a vulnerable application. NOTE: the vendor reportedly found that only systems with an otherwise vulnerable application are affected, because "the memory areas accessible from the guest cannot be leveraged to achieve either remote code execution or elevation of privilege and ... no data from the host is exposed to the guest OS." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/510154/100/0/threaded - http://www.coresecurity.com/content/virtual-pc-2007-hypervisor-memory-protection-bug - http://securitytracker.com/id?1023720 - http://www.securityfocus.com/bid/38764
CVE ID: CVE-2010-1226 State: PUBLISHED Published: 2010-04-01T22:00:00 Last Updated: 2024-08-07T01:14:06.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP client functionality in Apple iPhone OS 3.1 on the iPhone 2G and 3.1.3 on the iPhone 3GS allows remote attackers to cause a denial of service (Safari, Mail, or Springboard crash) via a crafted innerHTML property of a DIV element, related to a "malformed character" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/38758 - http://www.exploit-db.com/exploits/11769
CVE ID: CVE-2010-1227 State: PUBLISHED Published: 2010-04-01T22:00:00 Last Updated: 2024-08-07T01:14:06.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Sun Java System Communications Express 6.2 and 6.3 allows remote attackers to inject arbitrary web script or HTML via the subject field of a message, as demonstrated by a subject containing an IMG element with a SRC attribute that performs a cross-site request forgery (CSRF) attack involving the cmd and argv parameters to cmd.msc. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/510154/100/0/threaded - http://www.vupen.com/englis
gram Container: References: - http://www.securityfocus.com/archive/1/510154/100/0/threaded - http://www.vupen.com/english/advisories/2011/0157 - http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html - http://secunia.com/advisories/42990
CVE ID: CVE-2010-1228 State: PUBLISHED Published: 2010-04-01T22:00:00 Last Updated: 2024-08-07T01:14:06.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple race conditions in the sandbox infrastructure in Google Chrome before 4.1.249.1036 have unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13829 - http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html - http://code.google.com/p/chromium/issues/detail?id=28804 - http://code.google.com/p/chromium/issues/detail?id=31880