Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-3973 State: PUBLISHED Published: 2010-12-23T17:00:00 Last Updated: 2024-08-07T03:26:12.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted argument to the AddContextRef method, possibly an untrusted pointer dereference, aka "Microsoft WMITools ActiveX Control Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-
ces: - http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx - http://www.vupen.com/english/advisories/2010/3301 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12475 - http://www.kb.cert.org/vuls/id/725596 - http://www.wooyun.org/bug.php?action=view&id=1006 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-027 - http://www.securityfocus.com/bid/45546 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64250 - http://www.exploit-db.com/exploits/15809 - http://secunia.com/advisories/42693
CVE ID: CVE-2010-3974 State: PUBLISHED Published: 2011-04-13T18:00:00 Last Updated: 2024-08-07T03:26:12.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: fxscover.exe in the Fax Cover Page Editor in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly parse FAX cover pages, which allows remote attackers to execute arbitrary code via a crafted .cov file, aka "Fax Cover Page Editor Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - https://oval.cisecurity.
: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-102A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12390 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-024
CVE ID: CVE-2010-3975 State: PUBLISHED Published: 2010-10-19T20:00:00 Last Updated: 2024-08-07T03:26:12.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Adobe Flash Player 9 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse schannel.dll that is located in the same folder as a file that is processed by Flash. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/513397 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12212
CVE ID: CVE-2010-3976 State: PUBLISHED Published: 2010-10-19T20:00:00 Last Updated: 2024-08-07T03:26:12.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a file that is processed by Flash Player. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0192 - http://www.securityfocus.com/archive/1/514653/100/0/threaded - http://support.ap
upen.com/english/advisories/2011/0192 - http://www.securityfocus.com/archive/1/514653/100/0/threaded - http://support.apple.com/kb/HT4435 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6926 - http://core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Bflash_player%5D_10.1.x_insecure_dll_hijacking_%28dwmapi.dll%29 - http://secunia.com/advisories/43026 - http://security.gentoo.org/glsa/glsa-201101-09.xml - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://www.acrossecurity.com/aspr/ASPR-2010-11-05-1-PUB.txt - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html - http://marc.info/?l=bugtraq&m=130331
.txt - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html - http://marc.info/?l=bugtraq&m=130331642631603&w=2 - http://www.vupen.com/english/advisories/2010/2903 - http://marc.info/?l=bugtraq&m=130331642631603&w=2 - http://www.adobe.com/support/security/bulletins/apsb10-26.html - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-09/msg00070.html - http://www.securityfocus.com/bid/44671
CVE ID: CVE-2010-3977 State: PUBLISHED Published: 2010-11-03T01:00:00 Last Updated: 2024-08-07T03:26:12.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in wp-content/plugins/cforms/lib_ajax.php in cforms WordPress plugin 11.5 allow remote attackers to inject arbitrary web script or HTML via the (1) rs and (2) rsargs[] parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44587 - http://secunia.com/advisories/42006 - http://www.securityfocus.com/archive/1/514579/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/62938 - http://www.conviso.com.br/securi
/1/514579/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/62938 - http://www.conviso.com.br/security-advisory-cform-wordpress-plugin-v-11-cve-2010-3977/
CVE ID: CVE-2010-3978 State: PUBLISHED Published: 2010-11-17T15:00:00 Last Updated: 2024-08-07T03:26:12.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Spree 0.11.x before 0.11.2 and 0.30.x before 0.30.0 exchanges data using JavaScript Object Notation (JSON) without a mechanism for validating requests, which allows remote attackers to obtain sensitive information via vectors involving (1) admin/products.json, (2) admin/users.json, or (3) admin/overview/get_report_data, related to a "JSON hijacking" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.conviso.com.br/json-hijacking-vulnerability/ - http://spreecommerce.com/blog/2010/11/02/json-hija
ferences: - http://www.conviso.com.br/json-hijacking-vulnerability/ - http://spreecommerce.com/blog/2010/11/02/json-hijacking-vulnerability/ - https://github.com/railsdog/spree/commit/19944bd999c310d9b10d16a41f48ebac97dc4fac - http://spreecommerce.com/blog/2010/11/09/spree-0-30-0-released/ - https://github.com/railsdog/spree/commit/d881b2bb610ea33e2364ff16feb8e702dfeda135 - http://www.conviso.com.br/security-advisory-spree-e-commerce-json-v-0-11x/ - http://twitter.com/conviso/statuses/29555076248 - http://www.securityfocus.com/archive/1/514674/100/0/threaded
CVE ID: CVE-2010-3979 State: PUBLISHED Published: 2010-10-18T16:00:00Z Last Updated: 2024-09-17T02:07:13.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dswsbobje in SAP BusinessObjects Enterprise XI 3.2 generates different error messages depending on whether the Login field corresponds to a valid username, which allows remote attackers to enumerate account names via a login SOAPAction to the dswsbobje/services/session URI. Additional Analyst Notes: - CVE Program Container: References: - http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf
CVE ID: CVE-2010-3980 State: PUBLISHED Published: 2010-10-18T16:00:00Z Last Updated: 2024-09-17T03:59:59.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dswsbobje in SAP BusinessObjects Enterprise XI 3.2 does not limit the number of CUIDs that may be requested, which allows remote authenticated users to cause a denial of service via a large numCuids value in a GenerateCuids SOAPAction to the dswsbobje/services/biplatform URI. Additional Analyst Notes: - CVE Program Container: References: - http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf
CVE ID: CVE-2010-3981 State: PUBLISHED Published: 2010-10-18T16:00:00 Last Updated: 2024-08-07T03:26:12.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SAP BusinessObjects Enterprise XI 3.2 allows remote attackers to inject arbitrary web script or HTML via the ServiceClass field to the Edit Service Parameters page. Additional Analyst Notes: - CVE Program Container: References: - http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf - http://osvdb.org/68680
CVE ID: CVE-2010-3982 State: PUBLISHED Published: 2010-10-18T16:00:00 Last Updated: 2024-08-07T03:26:12.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP BusinessObjects Enterprise XI 3.2 allows remote attackers to trigger TCP connections to arbitrary intranet hosts on any port, and obtain potentially sensitive information about open ports, via the apstoken parameter to the CrystalReports/viewrpt.cwr URI, related to an "internal port scanning" issue. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/68681 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62682 - http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObj
xforce.ibmcloud.com/vulnerabilities/62682 - http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf
CVE ID: CVE-2010-3983 State: PUBLISHED Published: 2010-10-18T16:00:00 Last Updated: 2024-08-07T03:26:12.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: CmcApp in SAP BusinessObjects Enterprise XI 3.2 allows remote authenticated users to gain privileges via vectors involving the Program Job Server and the Program Login property. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/68682 - http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf
CVE ID: CVE-2010-3984 State: PUBLISHED Published: 2011-01-07T22:00:00 Last Updated: 2024-08-07T03:26:12.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in mng_core_com.dll in CA XOsoft Replication r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft High Availability r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft Content Distribution r12.0 SP1 and r12.5 SP2 rollup, and CA ARCserve Replication and High Availability (RHA) r15.0 SP1 allows remote attackers to execute arbitrary code via a crafted create_session_bab operation in a SOAP request to xosoapapi.asmx. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42561 - http://www.zeroda
Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42561 - http://www.zerodayinitiative.com/advisories/ZDI-10-263/ - http://www.securityfocus.com/archive/1/515115/100/0/threaded - http://www.securityfocus.com/bid/45317 - http://www.securitytracker.com/id?1024852 - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7bFEB41CE8-5023-46DF-B257-5299F492BF23%7d
CVE ID: CVE-2010-3985 State: PUBLISHED Published: 2010-10-26T18:00:00 Last Updated: 2024-08-07T03:26:12.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9.0, when Internet Explorer 6.0 is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44331 - http://secunia.com/advisories/41983 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62727 - http://www.vupen.com/english/advisories/2010/2760 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objec
http://www.vupen.com/english/advisories/2010/2760 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02541822 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02541822 - http://osvdb.org/68906
CVE ID: CVE-2010-3986 State: PUBLISHED Published: 2010-10-26T17:00:00 Last Updated: 2024-08-07T03:26:12.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Virtual Connect Enterprise Manager (VCEM) 6.0 and 6.1 allows remote attackers to read arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=128776031714107&w=2 - http://www.securitytracker.com/id?1024631 - http://secunia.com/advisories/41926 - http://marc.info/?l=bugtraq&m=128776031714107&w=2 - http://www.vupen.com/english/advisories/2010/2759
CVE ID: CVE-2010-3987 State: PUBLISHED Published: 2010-10-28T19:00:00 Last Updated: 2024-08-07T03:26:12.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=128811259326540&w=2 - http://marc.info/?l=bugtraq&m=128811259326540&w=2 - http://www.securitytracker.com/id?1024641
CVE ID: CVE-2010-3988 State: PUBLISHED Published: 2010-10-28T19:00:00 Last Updated: 2024-08-07T03:26:12.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to bypass intended access restrictions and cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=128811259326540&w=2 - http://marc.info/?l=bugtraq&m=128811259326540&w=2 - http://www.securitytracker.com/id?1024641
CVE ID: CVE-2010-3989 State: PUBLISHED Published: 2010-10-28T19:00:00 Last Updated: 2024-08-07T03:26:12.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44435 - http://marc.info/?l=bugtraq&m=128811259326540&w=2 - http://marc.info/?l=bugtraq&m=128811259326540&w=2 - http://www.securitytracker.com/id?1024641
CVE ID: CVE-2010-3990 State: PUBLISHED Published: 2010-10-28T19:00:00 Last Updated: 2024-08-07T03:26:12.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Virtual Server Environment before 6.2 allows remote attackers to read arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2785 - http://securitytracker.com/id?1024640 - http://osvdb.org/68909 - http://marc.info/?l=bugtraq&m=128811222125961&w=2 - http://www.securityfocus.com/bid/44428 - http://marc.info/?l=bugtraq&m=128811222125961&w=2
CVE ID: CVE-2010-3991 State: PUBLISHED Published: 2010-10-28T19:00:00 Last Updated: 2024-08-07T03:26:12.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP Insight Control Server Migration before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=128811321427551&w=2 - http://www.securitytracker.com/id?1024643 - http://marc.info/?l=bugtraq&m=128811321427551&w=2 - http://www.securityfocus.com/bid/44433
CVE ID: CVE-2010-3992 State: PUBLISHED Published: 2010-10-28T19:00:00 Last Updated: 2024-08-07T03:26:12.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Insight Control Server Migration before 6.2 allows remote authenticated users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=128811321427551&w=2 - http://www.securitytracker.com/id?1024643 - http://marc.info/?l=bugtraq&m=128811321427551&w=2
CVE ID: CVE-2010-3993 State: PUBLISHED Published: 2010-10-28T19:00:00 Last Updated: 2024-08-07T03:26:12.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Insight Control Server Migration before 6.2 allows remote attackers to obtain sensitive information or modify data via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=128811321427551&w=2 - http://www.securitytracker.com/id?1024643 - http://marc.info/?l=bugtraq&m=128811321427551&w=2
CVE ID: CVE-2010-3994 State: PUBLISHED Published: 2010-10-28T19:00:00 Last Updated: 2024-08-07T03:26:12.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HP Version Control Repository Manager (VCRM) before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41998 - http://marc.info/?l=bugtraq&m=128811016023086&w=2 - http://securitytracker.com/id?1024644 - http://osvdb.org/68907 - http://www.securityfocus.com/bid/44431 - http://marc.info/?l=bugtraq&m=128811016023086&w=2
CVE ID: CVE-2010-3996 State: PUBLISHED Published: 2010-11-05T16:28:00 Last Updated: 2024-08-07T03:26:12.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: festival_server in Centre for Speech Technology Research (CSTR) Festival, probably 2.0.95-beta and earlier, places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44395 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html - http://lists.opensuse.org/opensuse-updates/2010-10/msg00028.html - ht
opensuse-security-announce/2010-11/msg00001.html - http://lists.opensuse.org/opensuse-updates/2010-10/msg00028.html - https://bugzilla.novell.com/show_bug.cgi?id=642507 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
CVE ID: CVE-2010-3998 State: PUBLISHED Published: 2010-11-05T22:00:00 Last Updated: 2024-08-07T03:26:12.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) banshee-1 and (2) muinshee scripts in Banshee 1.8.0 and earlier place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. NOTE: Banshee might also be affected using GST_PLUGIN_PATH. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050747.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050756
kage-announce/2010-November/050747.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050756.html - http://www.securityfocus.com/bid/44752 - https://bugzilla.redhat.com/show_bug.cgi?id=644554 - http://secunia.com/advisories/42237 - http://secunia.com/advisories/42234 - http://download.banshee.fm/banshee/unstable/1.9.0/banshee-1-1.9.0.news - http://www.vupen.com/english/advisories/2010/2964 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:034 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050744.html
CVE ID: CVE-2010-3999 State: PUBLISHED Published: 2010-11-05T16:28:00 Last Updated: 2024-08-07T03:26:12.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: gnc-test-env in GnuCash 2.3.15 and earlier places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050269.html - http://www.vupen.com/english/advisories/2010/2898 - http://secunia.com/advisories/42054 - http://www.vupen.com/english/advisories/2010/3060 - http://lists.fedoraproje
898 - http://secunia.com/advisories/42054 - http://www.vupen.com/english/advisories/2010/3060 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050164.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:241 - http://www.vupen.com/english/advisories/2010/2848 - https://bugzilla.redhat.com/show_bug.cgi?id=644933 - http://secunia.com/advisories/42048 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050177.html - http://www.securityfocus.com/bid/44563
CVE ID: CVE-2010-4000 State: PUBLISHED Published: 2010-11-05T22:00:00Z Last Updated: 2024-09-16T22:40:43.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: gnome-shell in GNOME Shell 2.31.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=644561
CVE ID: CVE-2010-4001 State: PUBLISHED Published: 2010-11-05T22:00:00 Last Updated: 2024-08-07T03:26:12.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: GMXRC.bash in Gromacs 4.5.1 and earlier places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. NOTE: CVE disputes this issue because the GMXLDLIB value is always added to the beginning of LD_LIBRARY_PATH at a later point in the script Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2971 - http://lists.fedoraproject.org/pipermail/package-announce/2010-
s: - http://www.vupen.com/english/advisories/2010/2971 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050783.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050763.html - https://bugzilla.redhat.com/show_bug.cgi?id=644596
CVE ID: CVE-2010-4005 State: PUBLISHED Published: 2010-11-05T22:00:00 Last Updated: 2024-08-07T03:26:12.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) tomboy and (2) tomboy-panel scripts in GNOME Tomboy 1.5.2 and earlier place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. NOTE: vector 1 exists because of an incorrect fix for CVE-2005-4790.2. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:035 - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html - http
urity/advisories?name=MDVSA-2011:035 - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html - https://bugzilla.redhat.com/show_bug.cgi?id=644606 - http://www.vupen.com/english/advisories/2011/0457
CVE ID: CVE-2010-4006 State: PUBLISHED Published: 2010-11-03T19:00:00 Last Updated: 2024-08-07T03:26:12.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in search.php in WSN Links 5.0.x before 5.0.81, 5.1.x before 5.1.51, and 6.0.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) namecondition or (2) namesearch parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2010-10/0512.html - http://www.securityfocus.com/archive/1/514585/100/0/threaded - http://www.uncompiled.com/2010/10/wsn-links-sql-injection-vulnerability-cve-2010-4006/
rchive/1/514585/100/0/threaded - http://www.uncompiled.com/2010/10/wsn-links-sql-injection-vulnerability-cve-2010-4006/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/62939 - http://www.securityfocus.com/bid/44593 - http://www.exploit-db.com/exploits/15607