Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-4496 State: PUBLISHED Published: 2011-01-07T18:00:00 Last Updated: 2024-08-07T03:51:16.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45691 - http://osvdb.org/70371 - http://secunia.com/advisories/42791 - http://www.vupen.com/english/advisories/2011/0037 - https://exchange.xforce.ibmcloud.com/vulnerabilit
advisories/42791 - http://www.vupen.com/english/advisories/2011/0037 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64520 - http://www.securitytracker.com/id?1024942 - http://www.tibco.com/services/support/advisories/cim-advisory_20100105.jsp - http://www.tibco.com/multimedia/cim_advisory_20110105_tcm8-12765.txt
CVE ID: CVE-2010-4497 State: PUBLISHED Published: 2011-01-07T18:00:00 Last Updated: 2024-08-07T03:51:16.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45691 - http://secunia.com/advisories/42791 - http://www.vupen.com/english/advisories/2011/0037 - http://osvdb.org/70372 - http://www.securitytracker.com/id?1024942
- http://www.vupen.com/english/advisories/2011/0037 - http://osvdb.org/70372 - http://www.securitytracker.com/id?1024942 - http://www.tibco.com/services/support/advisories/cim-advisory_20100105.jsp - http://www.tibco.com/multimedia/cim_advisory_20110105_tcm8-12765.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/64521
CVE ID: CVE-2010-4498 State: PUBLISHED Published: 2011-01-07T18:00:00 Last Updated: 2024-08-07T03:51:17.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to modify data or obtain sensitive information via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45691 - http://secunia.com/advisories/42791 - http://osvdb.org/70373 - http://www.vupen.com/english/advisories/2011/0037 - http://www.securitytracker.com/id?1024942 - http://www
b.org/70373 - http://www.vupen.com/english/advisories/2011/0037 - http://www.securitytracker.com/id?1024942 - http://www.tibco.com/services/support/advisories/cim-advisory_20100105.jsp - http://www.tibco.com/multimedia/cim_advisory_20110105_tcm8-12765.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/64522
CVE ID: CVE-2010-4499 State: PUBLISHED Published: 2011-01-07T18:00:00 Last Updated: 2024-08-07T03:51:17.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to hijack web sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45691 - http://secunia.com/advisories/42791 - http://www.vupen.com/english/advisories/2011/0037 - http://www.securitytracker.com/id?1024942 - http://www.tibco.com/services/support/advisories
lish/advisories/2011/0037 - http://www.securitytracker.com/id?1024942 - http://www.tibco.com/services/support/advisories/cim-advisory_20100105.jsp - http://www.tibco.com/multimedia/cim_advisory_20110105_tcm8-12765.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/64523 - http://osvdb.org/70374
CVE ID: CVE-2010-4500 State: PUBLISHED Published: 2010-12-08T16:00:00Z Last Updated: 2024-09-16T16:17:29.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY (MCG) FreeTicket 1.0.0, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) name, (2) email, (3) subject, and (4) message parameters in a sendmess action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42313 - http://www.securityfocus.com/bid/45067
CVE ID: CVE-2010-4501 State: REJECTED Published: 2010-12-08T19:00:00 Last Updated: 2011-01-19T10:00:00 Description: No description available.
CVE ID: CVE-2010-4502 State: PUBLISHED Published: 2010-12-08T19:00:00Z Last Updated: 2024-09-17T01:22:07.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in KmxSbx.sys 6.2.0.22 in CA Internet Security Suite Plus 2010 allows local users to cause a denial of service (pool corruption) and execute arbitrary code via crafted arguments to the 0x88000080 IOCTL, which triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/3070 - http://www.securitytracker.com/id?1024808 - http://www.exploit-db.com/exploits/15624 - http://secunia.com/advisories/42267
CVE ID: CVE-2010-4503 State: PUBLISHED Published: 2010-12-08T19:00:00Z Last Updated: 2024-09-16T18:13:47.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in indexlight.php in Aigaion 1.3.4 allows remote attackers to execute arbitrary SQL commands via the ID parameter in an export action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42463 - http://packetstormsecurity.org/files/view/96077/aigaion134-sql.txt - http://www.securityfocus.com/bid/45232
CVE ID: CVE-2010-4504 State: PUBLISHED Published: 2010-12-08T19:00:00Z Last Updated: 2024-09-17T03:03:08.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in eSyndiCat Directory 2.3 allow remote attackers to inject arbitrary web script or HTML via the title parameter to (1) suggest-category.php and (2) suggest-listing.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/view/96181/esyndicat23-xss.txt - http://secunia.com/advisories/42484 - http://www.securityfocus.com/bid/45093 - http://osvdb.org/69639 - http://osvdb.org/69638
CVE ID: CVE-2010-4505 State: PUBLISHED Published: 2010-12-08T19:00:00Z Last Updated: 2024-09-17T00:30:35.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in login.php in Injader 2.4.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) un and (2) pw parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42541 - http://www.johnleitch.net/Vulnerabilities/Injader.2.4.4.SQL.Injection/69
CVE ID: CVE-2010-4506 State: PUBLISHED Published: 2011-02-07T20:19:00 Last Updated: 2024-08-07T03:51:17.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Passlogix v-GO Self-Service Password Reset (SSPR) and OEM before 7.0A allows physically proximate attackers to execute arbitrary programs without authentication by triggering use of an invalid SSL certificate and using the Internet Explorer interface to navigate through the filesystem via a "Save As" dialog that is reachable from the "Certificate Export" wizard. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65439 - http://www.securityfocus.com/bid/46452 -
er: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/65439 - http://www.securityfocus.com/bid/46452 - https://www.trustwave.com/spiderlabs/advisories/TWSL2010-007.txt - http://securityreason.com/securityalert/8065
CVE ID: CVE-2010-4507 State: PUBLISHED Published: 2010-12-30T18:00:00 Last Updated: 2024-08-07T03:51:16.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities on the iSpot 2.0.0.0 R1679, and the ClearSpot 2.0.0.0 R1512 and R1786, with firmware 1.9.9.4 allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary commands via the cmd parameter in an act_cmd_result action to webmain.cgi, (2) enable remote management via an enable_remote_access act_network_set action to webmain.cgi, (3) enable the TELNET service via an ENABLE_TELNET act_set_wimax_etc_config action to webmain.cgi,
tion to webmain.cgi, (3) enable the TELNET service via an ENABLE_TELNET act_set_wimax_etc_config action to webmain.cgi, (4) enable TELNET sessions via a certain act_network_set action to webmain.cgi, or (5) read arbitrary files via the FILE_PATH parameter in an act_file_download action to upgrademain.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15728/ - https://www.trustwave.com/spiderlabs/advisories/TWSL2010-008.txt - http://secunia.com/advisories/42590
CVE ID: CVE-2010-4508 State: PUBLISHED Published: 2010-12-09T19:00:00 Last Updated: 2024-08-07T03:51:17.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebSockets implementation in Mozilla Firefox 4 through 4.0 Beta 7 does not properly perform proxy upgrade negotiation, which has unspecified impact and remote attack vectors, related to an "inherent problem" with the WebSocket specification. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12251 - http://osvdb.org/69758 - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html - https://wiki.mozilla.org
/osvdb.org/69758 - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html - https://wiki.mozilla.org/Platform/2010-12-07
CVE ID: CVE-2010-4509 State: PUBLISHED Published: 2010-12-09T19:00:00 Last Updated: 2024-08-07T03:51:17.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Movable Type 4.x before 4.35 and 5.x before 5.04 have unknown impact and attack vectors related to the (1) mt:AssetProperty and (2) mt:EntryFlag tags. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64130 - http://www.movabletype.org/documentation/appendices/release-notes/movable-type-504-435-release-notes.html - http://www.securityfocus.com/bid/45383
CVE ID: CVE-2010-4510 State: REJECTED Published: 2010-12-06T22:00:00Z Last Updated: 2024-09-16T19:31:24.459Z Description: No description available.
CVE ID: CVE-2010-4511 State: PUBLISHED Published: 2010-12-09T19:00:00 Last Updated: 2024-08-07T03:51:17.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 has unknown impact and attack vectors related to the "dynamic publishing error message." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45380 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64129 - http://osvdb.org/69751 - http://www.movabletype.org/documentation/appendices/release-notes/movable-type-504-435-release-notes.html
CVE ID: CVE-2010-4512 State: PUBLISHED Published: 2010-12-09T19:00:00 Last Updated: 2024-08-07T03:51:17.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cobbler before 2.0.4 uses an incorrect umask value, which allows local users to have an unspecified impact by leveraging world writable permissions for files and directories. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42602 - https://bugzilla.redhat.com/show_bug.cgi?id=554567 - http://people.fedoraproject.org/~shenson/cobbler/cobbler-2.0.8.tar.gz
CVE ID: CVE-2010-4513 State: PUBLISHED Published: 2010-12-09T20:00:00 Last Updated: 2024-08-07T03:51:17.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Zimplit CMS 3.0, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) file parameter in a load action to zimplit.php and (2) client parameter to English_manual_version_2.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.htbridge.ch/advisory/xss_vulnerability_in_zimplit_cms_1.html - http://www.htbridge.ch/advisory/xss_vulnerability_in_zimplit_cms.html - http://www.securityfocus.com/bid/45252 - http://
http://www.htbridge.ch/advisory/xss_vulnerability_in_zimplit_cms.html - http://www.securityfocus.com/bid/45252 - http://packetstormsecurity.org/files/view/96466/zimplit-xss.txt - http://www.securityfocus.com/archive/1/515078/100/0/threaded - http://marc.info/?l=bugtraq&m=129182251500541&w=2 - http://secunia.com/advisories/41629
CVE ID: CVE-2010-4514 State: PUBLISHED Published: 2010-12-09T20:00:00Z Last Updated: 2024-09-17T04:09:35.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Install/InstallWizard.aspx in DotNetNuke 5.05.01 and 5.06.00 allows remote attackers to inject arbitrary web script or HTML via the __VIEWSTATE parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/view/96378/PR10-19.txt - http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-19 - http://www.securitytracker.com/id?1024828 - http://secunia.c
checkup.com/vulnerability_manager/vulnerabilities/pr10-19 - http://www.securitytracker.com/id?1024828 - http://secunia.com/advisories/42478 - http://www.securityfocus.com/bid/45180
CVE ID: CVE-2010-4515 State: PUBLISHED Published: 2010-12-09T20:00:00 Last Updated: 2024-08-07T03:51:17.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Citrix Web Interface 5.0, 5.1, and 5.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2007-6477 and CVE-2009-2454. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45291 - http://www.vupen.com/english/advisories/2010/3153 - http://support.citrix.com/article/CTX127541 - http://secunia.com/advisories/39514 - http://osvdb.org/69676
CVE ID: CVE-2010-4516 State: PUBLISHED Published: 2010-12-09T20:00:00Z Last Updated: 2024-09-16T19:24:31.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the JXtended Comments component before 1.3.1 for Joomla allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45296 - http://jxtended.com/blog/releases/375-jxtended-comments-131-stable-released.html - http://secunia.com/advisories/42534
CVE ID: CVE-2010-4517 State: PUBLISHED Published: 2010-12-09T20:00:00Z Last Updated: 2024-09-16T18:09:03.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JExtensions JE Auto (com_jeauto) component 1.0 for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the char parameter in an item action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15714
CVE ID: CVE-2010-4518 State: PUBLISHED Published: 2010-12-09T20:00:00 Last Updated: 2024-08-07T03:51:17.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in wp-safe-search/wp-safe-search-jx.php in the Safe Search plugin 0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the v1 parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.johnleitch.net/Vulnerabilities/WordPress.Safe.Search.0.7.Reflected.Cross-site.Scripting/66 - http://osvdb.org/69762 - http://www.securityfocus.com/bid/45267 - http://secunia.com/advisories/42544
CVE ID: CVE-2010-4519 State: PUBLISHED Published: 2010-12-23T17:00:00Z Last Updated: 2024-09-16T18:24:18.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Views UI implementation in the Views module 5.x before 5.x-1.8 and 6.x before 6.x-2.11 for Drupal allow remote attackers to hijack the authentication of administrators for requests that (1) enable all Views or (2) disable all Views. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/829840 - http://www.openwall.com/lists/oss-security/2010/12/16/7 - http://www.openwall.com/lists/oss-security/2010/12/22/1
CVE ID: CVE-2010-4520 State: PUBLISHED Published: 2010-12-23T17:00:00Z Last Updated: 2024-09-17T03:43:09.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Views module 6.x before 6.x-2.11 for Drupal allow remote attackers to inject arbitrary web script or HTML via (1) a URL or (2) an aggregator feed title. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/829840 - http://www.openwall.com/lists/oss-security/2010/12/16/7 - http://www.openwall.com/lists/oss-security/2010/12/22/1
CVE ID: CVE-2010-4521 State: PUBLISHED Published: 2010-12-23T17:00:00 Last Updated: 2024-08-07T03:51:17.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Views module 6.x before 6.x-2.12 for Drupal allows remote attackers to inject arbitrary web script or HTML via a page path. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0011 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052802.html - http://www.openwall.com/lists/oss-security/2010/12/16/7 - http://drupal.org/node/999380 - http://www.openwall.com/lists/oss-security/2010/12/22/1 - http://lis
rity/2010/12/16/7 - http://drupal.org/node/999380 - http://www.openwall.com/lists/oss-security/2010/12/22/1 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052814.html
CVE ID: CVE-2010-4522 State: PUBLISHED Published: 2010-12-30T20:00:00Z Last Updated: 2024-09-16T20:22:36.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) 1.4.14, and 1.6.x before 1.6.1, allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) editpost.php, (2) member.php, and (3) newreply.php. Additional Analyst Notes: - CVE Program Container: References: - http://blog.mybb.com/2010/12/15/mybb-1-6-1-release-1-4-14-update/ - http://openwall.com/lists/oss-security/2010/12/20/1 - http://openwall.com/lists/oss-security/2010/12/22/2
CVE ID: CVE-2010-4523 State: PUBLISHED Published: 2011-01-07T19:00:00 Last Updated: 2024-08-07T03:51:17.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a smart card, related to (1) card-acos5.c, (2) card-atrust-acos.c, and (3) card-starcos.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.h-online.com/open/news/item/When-a-smart-card-can-root-your-computer-1154829.html - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2011/0212 - http://openwa
r-1154829.html - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2011/0212 - http://openwall.com/lists/oss-security/2010/12/22/3 - https://www.opensc-project.org/opensc/changeset/4913 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=607427 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:011 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052777.html - https://bugzilla.redhat.com/show_bug.cgi?id=664831 - http://secunia.com/advisories/42807 - http://labs.mwrinfosecurity.com/files/Advisories/mwri_opensc-get-serial-buffer-overflow_2010-12-13.pdf - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - ht
-serial-buffer-overflow_2010-12-13.pdf - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://www.vupen.com/english/advisories/2011/0109 - http://secunia.com/advisories/42658 - http://www.vupen.com/english/advisories/2011/0009 - https://bugs.launchpad.net/ubuntu/+source/opensc/+bug/692483 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052796.html - http://openwall.com/lists/oss-security/2010/12/21/2 - http://www.securityfocus.com/bid/45435
CVE ID: CVE-2010-4524 State: PUBLISHED Published: 2011-01-03T19:26:00 Last Updated: 2024-08-07T03:51:17.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in lib/mhtxthtml.pl in MHonArc 2.6.16 allows remote attackers to inject arbitrary web script or HTML via a malformed start tag and end tag for a SCRIPT element, as demonstrated by <scr<body>ipt> and </scr<body>ipt> sequences. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=664718 - http://openwall.com/lists/oss-security/2010/12/22/4 - http://openwall.com/lists/oss-security/2010/12/22/5 - http://www.vupen.com/english/advisories
ss-security/2010/12/22/4 - http://openwall.com/lists/oss-security/2010/12/22/5 - http://www.vupen.com/english/advisories/2010/3344 - http://www.vupen.com/english/advisories/2011/0067 - http://www.securityfocus.com/bid/45528 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=607693 - http://secunia.com/advisories/42694 - http://savannah.nongnu.org/bugs/?32013 - http://openwall.com/lists/oss-security/2010/12/21/7 - http://lists.mandriva.com/security-announce/2011-01/msg00004.php - http://www.mail-archive.com/mhonarc-dev%40mhonarc.org/msg01296.html - http://openwall.com/lists/oss-security/2010/12/21/4
CVE ID: CVE-2010-4525 State: PUBLISHED Published: 2011-01-11T01:00:00 Last Updated: 2024-08-07T03:51:17.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel 2.6.33 and 2.6.34.y does not initialize the kvm_vcpu_events->interrupt.pad structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/64519 - http://www.openwall.com/lists/oss-security/2011/01/05/9 - http://www.redhat.com/support/errata/RHSA-2011-0007.html - http://osvdb.org/70377 - http://www.redhat.com/support/errata/RH
p://www.redhat.com/support/errata/RHSA-2011-0007.html - http://osvdb.org/70377 - http://www.redhat.com/support/errata/RHSA-2011-0028.html - http://www.securityfocus.com/bid/45676 - http://www.openwall.com/lists/oss-security/2011/01/05/1 - http://www.openwall.com/lists/oss-security/2011/01/06/3 - http://secunia.com/advisories/42890 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4525 - http://www.vupen.com/english/advisories/2011/0123