Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-4167 State: PUBLISHED Published: 2010-11-22T19:00:00 Last Updated: 2024-08-07T03:34:37.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in configure.c in ImageMagick before 6.6.5-5, when MAGICKCORE_INSTALLED_SUPPORT is defined, allows local users to gain privileges via a Trojan horse configuration file in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42497 - https://bugzilla.redhat.com/show_bug.cgi?id=652860 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=601824 - http://www.ubuntu.com/usn/USN-1028-1 - http://www.openwall.com/lists/oss-securit
.org/cgi-bin/bugreport.cgi?bug=601824 - http://www.ubuntu.com/usn/USN-1028-1 - http://www.openwall.com/lists/oss-security/2010/11/15/3 - http://secunia.com/advisories/42744 - http://secunia.com/advisories/49063 - http://www.imagemagick.org/script/changelog.php - http://www.securityfocus.com/bid/45044 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052515.html - http://www.vupen.com/english/advisories/2010/3322 - http://www.vupen.com/english/advisories/2010/3150 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052599.html - http://rhn.redhat.com/errata/RHSA-2012-0544.html - http://www.openwall.com/lists/oss-security/2010/11/13/1 - http://secu
http://rhn.redhat.com/errata/RHSA-2012-0544.html - http://www.openwall.com/lists/oss-security/2010/11/13/1 - http://secunia.com/advisories/48100
CVE ID: CVE-2010-4168 State: PUBLISHED Published: 2010-11-17T15:00:00 Last Updated: 2024-08-07T03:34:37.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple use-after-free vulnerabilities in OpenTTD 1.0.x before 1.0.5 allow (1) remote attackers to cause a denial of service (invalid write and daemon crash) by abruptly disconnecting during transmission of the map from the server, related to network/network_server.cpp; (2) remote attackers to cause a denial of service (invalid read and daemon crash) by abruptly disconnecting, related to network/network_server.cpp; and (3) remote servers to cause a denial of service (invalid read and application crash) by forcing a disconnect
er.cpp; and (3) remote servers to cause a denial of service (invalid read and application crash) by forcing a disconnection during the join process, related to network/network.cpp. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42578 - http://www.vupen.com/english/advisories/2010/2985 - http://security.openttd.org/en/CVE-2010-4168 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052193.html - http://marc.info/?l=oss-security&m=128984298802678&w=2 - http://security.openttd.org/en/patch/28.patch - http://vcs.openttd.org/svn/changeset/21182 - http://www.securityfocus.com/bid/44844 - http://lists.fedoraproject.org/pipermail
/vcs.openttd.org/svn/changeset/21182 - http://www.securityfocus.com/bid/44844 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052187.html - http://marc.info/?l=oss-security&m=128975491407670&w=2 - http://www.vupen.com/english/advisories/2010/3199
CVE ID: CVE-2010-4169 State: PUBLISHED Published: 2010-11-20T21:00:00 Last Updated: 2024-08-07T03:34:37.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in mm/mprotect.c in the Linux kernel before 2.6.37-rc2 allows local users to cause a denial of service via vectors involving an mprotect system call. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html - http://secunia.com/advisories/42778 - http://www.securityfocus.com/bid/44861 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc2 - http://lists.fedoraproject.org/pipermail/package-announce
ernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc2 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=63bfd7384b119409685a17d5c58f0b56e5dc03da - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html - http://secunia.com/advisories/42932 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63316 - http://www.vupen.com/english/advisories/2011/0124 - https://bugzilla.redhat.com/show_bug.cgi?id=651671 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://www.vupen.com/english/advisories/2010/3321 - http://www.vupen.c
pensuse-security-announce/2011-02/msg00000.html - http://www.vupen.com/english/advisories/2010/3321 - http://www.vupen.com/english/advisories/2011/0298 - http://www.redhat.com/support/errata/RHSA-2010-0958.html - http://marc.info/?l=oss-security&m=128984344103497&w=2 - http://marc.info/?l=oss-security&m=128979684911295&w=2 - http://www.vupen.com/english/advisories/2011/0012 - http://secunia.com/advisories/42745
CVE ID: CVE-2010-4170 State: PUBLISHED Published: 2010-12-07T21:00:00 Last Updated: 2024-08-07T03:34:37.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gain privileges by setting the MODPROBE_OPTIONS environment variable to specify a malicious configuration file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/63344 - http://sources.redhat.com/ml/systemtap/2010-q4/msg00230.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051127.html - http://w
p/2010-q4/msg00230.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051127.html - http://www.exploit-db.com/exploits/15620 - http://secunia.com/advisories/42263 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051115.html - http://sources.redhat.com/git/gitweb.cgi?p=systemtap.git%3Ba=commit%3Bh=b7565b41228bea196cefa3a7d43ab67f8f9152e2 - http://www.redhat.com/support/errata/RHSA-2010-0894.html - http://www.redhat.com/support/errata/RHSA-2010-0895.html - http://secunia.com/advisories/42306 - http://www.securityfocus.com/bid/44914 - http://www.debian.org/security/2011/dsa-2348 - http://www.securitytracker.com/id?1024754 - http://secunia.com
id/44914 - http://www.debian.org/security/2011/dsa-2348 - http://www.securitytracker.com/id?1024754 - http://secunia.com/advisories/46920 - http://secunia.com/advisories/42256 - http://secunia.com/advisories/42318 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051122.html - http://packetstormsecurity.com/files/152569/SystemTap-1.3-MODPROBE_OPTIONS-Privilege-Escalation.html - https://www.exploit-db.com/exploits/46730/
CVE ID: CVE-2010-4171 State: PUBLISHED Published: 2010-12-07T21:00:00 Last Updated: 2024-08-07T03:34:37.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: The staprun runtime tool in SystemTap 1.3 does not verify that a module to unload was previously loaded by SystemTap, which allows local users to cause a denial of service (unloading of arbitrary kernel modules). Additional Analyst Notes: - CVE Program Container: References: - http://sources.redhat.com/ml/systemtap/2010-q4/msg00230.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051127.html - http://secunia.com/advisories/42263 - http://lists.fedoraproject.org/pipermail/package-announce/2010-Nove
/051127.html - http://secunia.com/advisories/42263 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051115.html - https://bugzilla.redhat.com/show_bug.cgi?id=653606 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63345 - http://sources.redhat.com/git/gitweb.cgi?p=systemtap.git%3Ba=commit%3Bh=b7565b41228bea196cefa3a7d43ab67f8f9152e2 - http://www.redhat.com/support/errata/RHSA-2010-0894.html - http://www.debian.org/security/2011/dsa-2348 - http://www.securitytracker.com/id?1024754 - http://secunia.com/advisories/46920 - http://secunia.com/advisories/42256 - http://secunia.com/advisories/42318 - http://www.securityfocus.com/bid/44917 - http://lists.fedoraproject.
ories/42256 - http://secunia.com/advisories/42318 - http://www.securityfocus.com/bid/44917 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051122.html
CVE ID: CVE-2010-4172 State: PUBLISHED Published: 2010-11-26T19:00:00 Last Updated: 2024-08-07T03:34:37.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1048-1 - http://secuni
s. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1048-1 - http://secunia.com/advisories/42337 - http://svn.apache.org/viewvc?view=revision&revision=1037778 - http://www.securityfocus.com/archive/1/514866/100/0/threaded - http://secunia.com/advisories/45022 - https://exchange.xforce.ibmcloud.com/vulnerabilities/63422 - http://tomcat.apache.org/security-7.html - https://bugzilla.redhat.com/show_bug.cgi?id=656246 - http://www.vupen.com/english/advisories/2010/3047 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://archives.neohapsis.com/archives/fulldisclosure/2010-11/0285.html - http://www.redhat.com/support/err
00003.html - http://archives.neohapsis.com/archives/fulldisclosure/2010-11/0285.html - http://www.redhat.com/support/errata/RHSA-2011-0897.html - http://tomcat.apache.org/security-6.html - http://secunia.com/advisories/57126 - http://www.redhat.com/support/errata/RHSA-2011-0791.html - http://www.vupen.com/english/advisories/2011/0203 - http://securitytracker.com/id?1024764 - http://www.redhat.com/support/errata/RHSA-2011-0896.html - http://support.apple.com/kb/HT5002 - http://marc.info/?l=bugtraq&m=139344343412337&w=2 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html - http://secunia.com/advisories/43019 - http://svn.apache.org/viewvc?view=revision&revisi
tchbuilder/readme_5098550.html - http://secunia.com/advisories/43019 - http://svn.apache.org/viewvc?view=revision&revision=1037779 - http://www.securityfocus.com/bid/45015
CVE ID: CVE-2010-4173 State: PUBLISHED Published: 2010-11-22T19:00:00Z Last Updated: 2024-08-07T03:34:37.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a (1) symlink or (2) hard link attack on the libsdp.log.##### temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/11/16/7 - http://www.openfabrics.org/downloads/libsdp/libsdp-1.1.105-0.4.g1b9b996.tar.gz - http://www.openwall.com/lists/oss-security/2010/11/16/2 - https://bugzilla.redhat.com/show_bu
.105-0.4.g1b9b996.tar.gz - http://www.openwall.com/lists/oss-security/2010/11/16/2 - https://bugzilla.redhat.com/show_bug.cgi?id=647941
CVE ID: CVE-2010-4174 State: REJECTED Published: 2013-12-27T01:00:00 Last Updated: 2013-12-27T00:57:03 Description: No description available.
CVE ID: CVE-2010-4175 State: PUBLISHED Published: 2011-01-11T01:00:00 Last Updated: 2024-08-07T03:34:37.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the rds_cmsg_rdma_args function (net/rds/rdma.c) in Linux kernel 2.6.35 allows local users to cause a denial of service (crash) and possibly trigger memory corruption via a crafted Reliable Datagram Sockets (RDS) request, a different vulnerability than CVE-2010-3865. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html - http://secunia.com/advisories/42778 - http://secunia.com/advisories/42801 - http://lists.opensuse.org/
1/msg00004.html - http://secunia.com/advisories/42778 - http://secunia.com/advisories/42801 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html - http://secunia.com/advisories/42932 - http://marc.info/?l=linux-netdev&m=129001184803080&w=2 - http://www.vupen.com/english/advisories/2011/0124 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://www.vupen.com/english/advisories/2011/0298 - http://www.securityfocus.com/bid/44921 - http://www.vupen.com/english/advisories/2011/0012 - http://www.openwall.com/lists/oss-security/2010/11/18/1 - http://www.openwall.com/l
n.com/english/advisories/2011/0012 - http://www.openwall.com/lists/oss-security/2010/11/18/1 - http://www.openwall.com/lists/oss-security/2010/11/17/8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64618
CVE ID: CVE-2010-4176 State: PUBLISHED Published: 2010-12-07T21:00:00 Last Updated: 2024-08-07T03:34:37.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from tty0 for local users. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45046 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051755.html - http://secunia.com/advisories/42342 - http://secunia.com/advisories/42451 - http://lists.fedoraproject.org/pipermail/pa
http://secunia.com/advisories/42342 - http://secunia.com/advisories/42451 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051418.html - http://www.vupen.com/english/advisories/2010/3110 - https://bugzilla.redhat.com/show_bug.cgi?id=654489 - http://www.vupen.com/english/advisories/2010/3062 - https://bugzilla.redhat.com/show_bug.cgi?id=654935
CVE ID: CVE-2010-4177 State: PUBLISHED Published: 2019-11-12T22:23:16 Last Updated: 2024-08-07T03:34:37.689Z Vendors: mysql-gui-tools Products: mysql-gui-tools Problem Types: Other Description: mysql-gui-tools (mysql-query-browser and mysql-admin) before 5.0r14+openSUSE-2.3 exposes the password of a user connected to the MySQL server in clear text form via the list of running processes. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-4177 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4177 - https://access.redhat.com/security/cve/cve-2010-4177 - http://www.securityfocus.com/bid/97959 - https://www.openwall.com/list
://access.redhat.com/security/cve/cve-2010-4177 - http://www.securityfocus.com/bid/97959 - https://www.openwall.com/lists/oss-security/2010/11/16/6 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=605542
CVE ID: CVE-2010-4178 State: PUBLISHED Published: 2019-11-06T18:03:41 Last Updated: 2024-08-07T03:34:37.451Z Vendors: MySQL-GUI-tools Products: MySQL-GUI-tools Problem Types: UNKNOWN_TYPE Description: MySQL-GUI-tools (mysql-administrator) leaks passwords into process list after with launch of mysql text console Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2010-4178 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4178 - https://access.redhat.com/security/cve/cve-2010-4178 - http://www.securityfocus.com/bid/97960
CVE ID: CVE-2010-4179 State: PUBLISHED Published: 2010-12-07T21:00:00Z Last Updated: 2024-08-07T03:34:37.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation documentation for Red Hat Enterprise Messaging, Realtime and Grid (MRG) 1.3 recommends that Condor should be configured so that the MRG Management Console (cumin) can submit jobs for users, which creates a trusted channel with insufficient access control that allows local users with the ability to publish to a broker to run jobs as arbitrary users via Condor QMF plug-ins. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024806 - http://www.redhat.com/support/
Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024806 - http://www.redhat.com/support/errata/RHSA-2010-0922.html - http://www.vupen.com/english/advisories/2010/3091 - http://secunia.com/advisories/42406 - http://www.redhat.com/support/errata/RHSA-2010-0921.html - https://bugzilla.redhat.com/show_bug.cgi?id=654856
CVE ID: CVE-2010-4180 State: PUBLISHED Published: 2010-12-06T21:00:00 Last Updated: 2024-08-07T03:34:37.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html - http://www.securitytracker.com/id?1024822 - htt
://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html - http://www.securitytracker.com/id?1024822 - http://secunia.com/advisories/42473 - http://secunia.com/advisories/42571 - http://secunia.com/advisories/43170 - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.668471 - http://www.vupen.com/english/advisories/2011/0268 - http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html - http://support.apple.com/kb/HT4723 - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html - http://secunia.com/advisories/42493 - http://secunia.com/advisories/43173 - http://lists.fedoraproject.org/pipermail/package-an
secunia.com/advisories/42493 - http://secunia.com/advisories/43173 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052027.html - http://www.vupen.com/english/advisories/2011/0032 - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html - http://secunia.com/advisories/43171 - http://secunia.com/advisories/42620 - http://www.securityfocus.com/archive/1/522176 - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - http://ubuntu.com/usn/usn-1029-1 - http://www.vupen.com/english/advisories/2010/3120 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052315.html - http://www.vupen.com/english/advisories/201
sts.fedoraproject.org/pipermail/package-announce/2010-December/052315.html - http://www.vupen.com/english/advisories/2010/3122 - http://secunia.com/advisories/43169 - http://secunia.com/advisories/43172 - http://marc.info/?l=bugtraq&m=132077688910227&w=2 - http://www.securityfocus.com/bid/45164 - http://osvdb.org/69565 - https://bugzilla.redhat.com/show_bug.cgi?id=659462 - http://www.kb.cert.org/vuls/id/737740 - http://secunia.com/advisories/42469 - http://www.securityfocus.com/archive/1/522176 - http://marc.info/?l=bugtraq&m=130497251507577&w=2 - http://secunia.com/advisories/42877 - http://cvs.openssl.org/chngview?cn=20131 - http://www.redhat.com/support/errata/RHSA-2010-0977.html - http:/
ies/42877 - http://cvs.openssl.org/chngview?cn=20131 - http://www.redhat.com/support/errata/RHSA-2010-0977.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777 - http://www.vupen.com/english/advisories/2010/3134 - http://www.vupen.com/english/advisories/2010/3188 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18910 - http://marc.info/?l=bugtraq&m=129916880600544&w=2 - http://www.vupen.com/english/advisories/2011/0076 - http://openssl.org/news/secadv_20101202.txt - http://www.redhat.com/support/errata/RHSA-2010-0978.html - http://secun
- http://openssl.org/news/secadv_20101202.txt - http://www.redhat.com/support/errata/RHSA-2010-0978.html - http://secunia.com/advisories/44269 - http://www.redhat.com/support/errata/RHSA-2011-0896.html - http://www.debian.org/security/2011/dsa-2141 - http://marc.info/?l=bugtraq&m=130497251507577&w=2 - http://marc.info/?l=bugtraq&m=132077688910227&w=2 - http://marc.info/?l=bugtraq&m=129916880600544&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:248 - http://www.redhat.com/support/errata/RHSA-2010-0979.html - https://kb.bluecoat.com/index?page=content&id=SA53&actp=LIST - http://secunia.com/advisories/42811
CVE ID: CVE-2010-4181 State: PUBLISHED Published: 2010-11-04T18:00:00 Last Updated: 2024-08-07T03:34:37.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Yaws 1.89 allows remote attackers to read arbitrary files via ..\ (dot dot backslash) and other sequences. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/62917 - http://secunia.com/advisories/42066 - http://www.exploit-db.com/exploits/15371 - http://osvdb.org/68962 - http://www.vupen.com/english/advisories/2010/2858 - http://www.securityfocus.com/bid/44564
CVE ID: CVE-2010-4182 State: PUBLISHED Published: 2010-11-04T18:00:00Z Last Updated: 2024-09-16T20:22:10.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the Data Access Objects (DAO) library (dao360.dll) in Microsoft Windows XP Professional SP3, Windows Server 2003 R2 Enterprise Edition SP3, Windows Vista Business SP1, and Windows 7 Professional allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse msjet49.dll that is located in the same folder as a file that is processed by dao360.dll. NOTE: the provenance of this information is unknown; the details are obtained
as a file that is processed by dao360.dll. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44541 - http://secunia.com/advisories/41986 - http://osvdb.org/68946
CVE ID: CVE-2010-4183 State: PUBLISHED Published: 2010-11-05T16:28:00Z Last Updated: 2024-09-16T18:33:51.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in HTML Purifier before 4.1.0, when Internet Explorer is used, allow remote attackers to inject arbitrary web script or HTML via a crafted (1) background-image, (2) background, or (3) font-family Cascading Style Sheets (CSS) property, a different vulnerability than CVE-2010-2479. Additional Analyst Notes: - CVE Program Container: References: - http://htmlpurifier.org/news/2010/0915-4.2.0-released - http://htmlpurifier.org/security/2010/css-quoting
CVE ID: CVE-2010-4184 State: PUBLISHED Published: 2010-11-05T16:28:00 Last Updated: 2024-08-07T03:34:37.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetSupport Manager (NSM) before 11.00.0005 sends HTTP headers with cleartext fields containing details about client machines, which allows remote attackers to obtain potentially sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://www.netsupportsoftware.com/support/td.asp?td=634 - http://www.kb.cert.org/vuls/id/465239 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62984