Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-2261 State: PUBLISHED Published: 2010-06-10T00:00:00 Last Updated: 2024-08-07T02:25:07.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys WAP54Gv3 firmware 3.04.03 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) data2 and (2) data3 parameters to (a) Debug_command_page.asp and (b) debug.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/511733/100/0/threaded
CVE ID: CVE-2010-2262 State: PUBLISHED Published: 2010-06-10T00:00:00 Last Updated: 2024-08-07T02:25:07.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: Galileo Students Team Weborf before 0.12.1 allows remote attackers to cause a denial of service (crash) via a crafted Range header. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40051 - http://galileo.dmi.unict.it/wiki/weborf/doku.php?id=news:released_0.12.1 - http://www.securityfocus.com/bid/40575 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59135
CVE ID: CVE-2010-2263 State: PUBLISHED Published: 2010-06-14T18:00:00 Last Updated: 2024-08-07T02:25:07.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/13818 - http://spa-s3c.blogspot.com/2010/06/full-responsible-disclosurenginx-engine.html - http://www.exploit-db.com/exploits/13822 - http://www.securityfocus.com/bid/40760
CVE ID: CVE-2010-2264 State: PUBLISHED Published: 2010-06-11T19:00:00 Last Updated: 2024-08-07T02:25:07.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 - http://www.vupen.com/english/advisories/2010/2722 - http://secunia.com/ad
.com/security/advisories?name=MDVSA-2011:039 - http://www.vupen.com/english/advisories/2010/2722 - http://secunia.com/advisories/43068 - http://www.ubuntu.com/usn/USN-1006-1 - http://secunia.com/advisories/41856 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.apple.com/archives/security-announce/2010/Jun/msg00000.html - http://secunia.com/advisories/40105 - http://www.vupen.com/english/advisories/2010/1373 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://www.securityfocus.com/bid/40756 - http://www.securityfocus.com/bid/40620 - http://www.vupen.com/english/advisories/2011/0552 - http://securitytracker.com/id?1024067 - http://support.app
d/40620 - http://www.vupen.com/english/advisories/2011/0552 - http://securitytracker.com/id?1024067 - http://support.apple.com/kb/HT4196
CVE ID: CVE-2010-2265 State: PUBLISHED Published: 2010-06-14T18:00:00 Last Updated: 2024-08-07T02:25:07.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the GetServerName function in sysinfo/commonFunc.js in Microsoft Windows Help and Support Center for Windows XP and Windows Server 2003 allows remote attackers to inject arbitrary web script or HTML via the svr parameter to sysinfo/sysinfomain.htm. NOTE: this can be leveraged with CVE-2010-1885 to execute arbitrary commands without user interaction. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/578319 - http://www.securityfocus.com/ar
st Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/578319 - http://www.securityfocus.com/archive/1/511774/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/59267 - http://archives.neohapsis.com/archives/fulldisclosure/2010-06/0197.html - http://www.microsoft.com/technet/security/advisory/2219475.mspx - http://blogs.technet.com/b/msrc/archive/2010/06/10/windows-help-vulnerability-disclosure.aspx - http://blogs.technet.com/b/srd/archive/2010/06/10/help-and-support-center-vulnerability-full-disclosure-posting.aspx - http://www.securityfocus.com/bid/40721 - http://www.vupen.com/english/advisories/2010/1417 - http://secunia.com/advisories/40076
CVE ID: CVE-2010-2266 State: PUBLISHED Published: 2010-06-14T18:00:00 Last Updated: 2024-08-07T02:25:07.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: nginx 0.8.36 allows remote attackers to cause a denial of service (crash) via certain encoded directory traversal sequences that trigger memory corruption, as demonstrated using the "%c0.%c0." sequence. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/13818/
CVE ID: CVE-2010-2267 State: PUBLISHED Published: 2010-06-14T19:00:00Z Last Updated: 2024-09-17T02:33:04.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Accoria Web Server (aka Rock Web Server) 1.4.7 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to the getenv sample program, (2) the desc parameter to loadstatic.cgi, (3) the name parameter to httpdcfg.cgi, or (4) the dns parameter to servercfg.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.ioactive.com/pdfs/AccoriaWebServer.pdf - http://www.kb.cert.org/vuls/id/245081
CVE ID: CVE-2010-2268 State: PUBLISHED Published: 2010-06-14T19:00:00Z Last Updated: 2024-09-16T18:07:48.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in authcfg.cgi in Accoria Web Server (aka Rock Web Server) 1.4.7 allows remote attackers to hijack the authentication of administrators for requests that create user accounts. Additional Analyst Notes: - CVE Program Container: References: - http://www.ioactive.com/pdfs/AccoriaWebServer.pdf - http://www.kb.cert.org/vuls/id/245081
CVE ID: CVE-2010-2269 State: PUBLISHED Published: 2010-06-14T19:00:00Z Last Updated: 2024-09-16T18:49:48.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in loadstatic.cgi in Accoria Web Server (aka Rock Web Server) 1.4.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.ioactive.com/pdfs/AccoriaWebServer.pdf - http://www.kb.cert.org/vuls/id/245081
CVE ID: CVE-2010-2270 State: PUBLISHED Published: 2010-06-14T19:00:00Z Last Updated: 2024-09-17T00:41:57.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Accoria Web Server (aka Rock Web Server) 1.4.7 uses a predictable httpmod-sessionid cookie, which makes it easier for remote attackers to hijack sessions via a modified cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.ioactive.com/pdfs/AccoriaWebServer.pdf - http://www.kb.cert.org/vuls/id/245081
CVE ID: CVE-2010-2271 State: PUBLISHED Published: 2010-06-14T19:00:00Z Last Updated: 2024-09-16T17:08:55.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in authcfg.cgi in Accoria Web Server (aka Rock Web Server) 1.4.7 allows remote attackers to have an unspecified impact via format string specifiers in the path (aka Password File) parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.ioactive.com/pdfs/AccoriaWebServer.pdf - http://www.kb.cert.org/vuls/id/245081
CVE ID: CVE-2010-2272 State: PUBLISHED Published: 2010-06-14T19:00:00Z Last Updated: 2024-09-17T01:16:18.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in iframe_history.html in Dojo 0.4.x before 0.4.4 has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/38964 - http://dojotoolkit.org/blog/post/dylan/2010/03/dojo-security-advisory/
CVE ID: CVE-2010-2273 State: PUBLISHED Published: 2010-06-14T19:00:00Z Last Updated: 2024-09-16T16:28:07.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to dojo/resources/iframe_history.html, dojox/av/FLAudio.js, dojox/av/FLVideo.js, dojox/av/resources/audio.swf, dojox/av/resources/video.swf, util/buildscripts/jslib/build.js, and util/buildscripts/jslib/buildUtil.js, as demonstrated by the (1) dojoUrl and (2) test
l/buildscripts/jslib/build.js, and util/buildscripts/jslib/buildUtil.js, as demonstrated by the (1) dojoUrl and (2) testUrl parameters to util/doh/runner.html. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1281 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50849 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50932 - http://bugs.dojotoolkit.org/ticket/10773 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50994 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50833 - http://secunia.com/advisories/38964 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50958 - http://www-1.ibm.com/support/docview.wss?uid=sw
ories/38964 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50958 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50856 - http://dojotoolkit.org/blog/post/dylan/2010/03/dojo-security-advisory/ - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50896 - http://secunia.com/advisories/40007 - http://www.gdssecurity.com/l/b/2010/03/12/multiple-dom-based-xss-in-dojo-toolkit-sdk/ - http://www-01.ibm.com/support/docview.wss?uid=swg21431472
CVE ID: CVE-2010-2274 State: PUBLISHED Published: 2010-06-14T19:00:00Z Last Updated: 2024-09-17T00:51:43.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple open redirect vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, possibly related to dojo/resources/iframe_history.html, dojox/av/FLAudio.js, dojox/av/FLVideo.js, dojox/av/resources/audio.swf, dojox/av/resources/video.swf, util/buildscripts/jslib/build.js, util/buildscripts/jslib/buildUtil.js, and util/doh/runner.html. Additio
ces/video.swf, util/buildscripts/jslib/build.js, util/buildscripts/jslib/buildUtil.js, and util/doh/runner.html. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1281 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50849 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50932 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50994 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50833 - http://secunia.com/advisories/38964 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50958 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50856 - http://dojotoolkit.org/blog/post/dylan/2010/03/dojo-security-advisory/ - http:
com/support/docview.wss?uid=swg1LO50856 - http://dojotoolkit.org/blog/post/dylan/2010/03/dojo-security-advisory/ - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50896 - http://secunia.com/advisories/40007 - http://www-01.ibm.com/support/docview.wss?uid=swg21431472
CVE ID: CVE-2010-2275 State: PUBLISHED Published: 2010-06-14T19:00:00Z Last Updated: 2024-09-16T17:03:04.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in dijit/tests/_testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the theme parameter, as demonstrated by an attack against dijit/tests/form/test_Button.html. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1281 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50849 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50932 - http://bugs.dojotoolkit.org/tick
ocview.wss?uid=swg1LO50849 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50932 - http://bugs.dojotoolkit.org/ticket/10773 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50994 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50833 - http://secunia.com/advisories/38964 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50958 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50856 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50896 - http://secunia.com/advisories/40007 - http://www.gdssecurity.com/l/b/2010/03/12/multiple-dom-based-xss-in-dojo-toolkit-sdk/ - http://www-01.ibm.com/support/docview.wss?uid=swg21431472
CVE ID: CVE-2010-2276 State: PUBLISHED Published: 2010-06-14T19:00:00Z Last Updated: 2024-09-17T00:16:42.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the build process in Dojo 0.4.x before 0.4.4, 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 has the copyTests=true and mini=false options, which makes it easier for remote attackers to have an unspecified impact via a request to a (1) test or (2) demo component. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1281 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50849 - http:/
- http://www.vupen.com/english/advisories/2010/1281 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50849 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50932 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50994 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50833 - http://secunia.com/advisories/38964 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50958 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50856 - http://dojotoolkit.org/blog/post/dylan/2010/03/dojo-security-advisory/ - http://www-1.ibm.com/support/docview.wss?uid=swg1LO50896 - http://secunia.com/advisories/40007 - http://www-01.ibm.com/support/docview.wss?uid=swg21431472
CVE ID: CVE-2010-2277 State: PUBLISHED Published: 2010-06-14T19:00:00Z Last Updated: 2024-09-17T02:21:33.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Connections 2.5.x before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) create or (2) edit form in the Communities component, the (3) verbiage field in the Bookmarks component, or (4) unspecified vectors related to the Mobile Blogs component. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1281 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO47921 - http://www-1
p://www.vupen.com/english/advisories/2010/1281 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO47921 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO47214 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO47362 - http://secunia.com/advisories/40007 - http://www-01.ibm.com/support/docview.wss?uid=swg21431472
CVE ID: CVE-2010-2278 State: PUBLISHED Published: 2010-06-14T19:00:00Z Last Updated: 2024-09-16T20:16:35.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bookmarklet pop-up in the Bookmarks component in IBM Lotus Connections 2.5.x before 2.5.0.2 does not properly follow the "force SSL" setting, which might make it easier for remote attackers to obtain the cleartext of network communication by sniffing the network, or spoof arbitrary servers via a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1281 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO47496 - http://www-1.ibm.com/support
m/english/advisories/2010/1281 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO47496 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO47642 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO47669 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO47610 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO47501 - http://secunia.com/advisories/40007 - http://www-01.ibm.com/support/docview.wss?uid=swg21431472 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO47429
CVE ID: CVE-2010-2279 State: PUBLISHED Published: 2010-06-14T19:00:00Z Last Updated: 2024-09-16T18:17:49.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when "forced SSL" is enabled, uses http for links, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1281 - http://secunia.com/advisories/40007 - http://www-01.ibm.com/support/docview.wss?uid=swg21431472 - http://www-1.ibm.com/support/docview.wss?uid=swg1LO48325
CVE ID: CVE-2010-2280 State: PUBLISHED Published: 2010-06-14T19:00:00Z Last Updated: 2024-09-16T19:15:41.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the Mobile component in IBM Lotus Connections 2.5.x before 2.5.0.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, related to "mobile edit actions," aka SPR ASRE83PPVH. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/1281 - http://secunia.com/advisories/40007 - http://www-01.ibm.com/support/docview.wss?uid=swg21431472
CVE ID: CVE-2010-2281 State: PUBLISHED Published: 2010-06-14T19:00:00Z Last Updated: 2024-09-17T01:16:50.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in TomatoCMS 2.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) keyword or (2) bannerid parameter in conjunction with a /admin/ad/banner/list PATH_INFO; and allow remote authenticated users, with certain privileges, to inject arbitrary web script or HTML via the (3) title or (4) answers parameter in conjunction with a /admin/poll/add PATH_INFO, or the (5) name parameter in conjunction with a /admin/category/add PATH_INFO. Additional
a /admin/poll/add PATH_INFO, or the (5) name parameter in conjunction with a /admin/category/add PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39680 - http://holisticinfosec.org/content/view/148/45/
CVE ID: CVE-2010-2282 State: PUBLISHED Published: 2010-06-14T19:00:00Z Last Updated: 2024-09-16T20:43:18.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in TomatoCMS 2.0.6 allows remote attackers to hijack the authentication of administrators for requests that change the administrative password. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39680 - http://holisticinfosec.org/content/view/148/45/
CVE ID: CVE-2010-2283 State: PUBLISHED Published: 2010-06-15T01:00:00 Last Updated: 2024-08-07T02:25:07.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMB dissector in Wireshark 0.99.6 through 1.0.13, and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (NULL pointer dereference) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html - http://www.wireshark.org/security/wnpa-sec-2010-05.html - http://secunia.com/advisories/43068 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11608 - http://www.vupen.com
68 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11608 - http://www.vupen.com/english/advisories/2011/0212 - http://www.wireshark.org/security/wnpa-sec-2010-06.html - http://www.openwall.com/lists/oss-security/2010/06/11/1 - http://secunia.com/advisories/42877 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://www.vupen.com/english/advisories/2011/0076 - http://secunia.com/advisories/40112 - http://www.securityfocus.com/bid/40728 - http://www.vupen.com/english/advisories/2010/1418 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:113
CVE ID: CVE-2010-2284 State: PUBLISHED Published: 2010-06-15T01:00:00 Last Updated: 2024-08-07T02:25:07.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ASN.1 BER dissector in Wireshark 0.10.13 through 1.0.13 and 1.2.0 through 1.2.8 has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html - http://www.wireshark.org/security/wnpa-sec-2010-05.html - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2011/0212 - http://www.wireshark.org/security/wnpa-sec-2010-06.html - http://www.openwall.com/lists/oss-s
ish/advisories/2011/0212 - http://www.wireshark.org/security/wnpa-sec-2010-06.html - http://www.openwall.com/lists/oss-security/2010/06/11/1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11888 - http://secunia.com/advisories/42877 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://www.vupen.com/english/advisories/2011/0076 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:144 - http://secunia.com/advisories/40112 - http://www.securityfocus.com/bid/40728 - http://www.vupen.com/english/advisories/2010/1418 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:113
CVE ID: CVE-2010-2285 State: PUBLISHED Published: 2010-06-15T01:00:00 Last Updated: 2024-08-07T02:25:07.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMB PIPE dissector in Wireshark 0.8.20 through 1.0.13 and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (NULL pointer dereference) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html - http://www.wireshark.org/security/wnpa-sec-2010-05.html - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2011/0212 - http://www.wireshark.org/security/wnpa-sec-2010-06.html - h
/43068 - http://www.vupen.com/english/advisories/2011/0212 - http://www.wireshark.org/security/wnpa-sec-2010-06.html - http://www.openwall.com/lists/oss-security/2010/06/11/1 - http://secunia.com/advisories/42877 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://www.vupen.com/english/advisories/2011/0076 - http://secunia.com/advisories/40112 - http://www.securityfocus.com/bid/40728 - http://www.vupen.com/english/advisories/2010/1418 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11488 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:113
CVE ID: CVE-2010-2286 State: PUBLISHED Published: 2010-06-15T01:00:00 Last Updated: 2024-08-07T02:25:07.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.7 through 1.0.13 and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html - http://www.wireshark.org/security/wnpa-sec-2010-05.html - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2011/0212 - http://www.wireshark.org/securit