Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-3453 State: PUBLISHED Published: 2011-01-28T21:13:00 Last Updated: 2024-08-07T03:11:44.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WW8ListManager::WW8ListManager function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle an unspecified number of list levels in user-defined list styles in WW8 data in a Microsoft Word document, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted .DOC file that triggers an out-of-bounds write. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40775 - http://www.securit
dditional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40775 - http://www.securityfocus.com/bid/46031 - http://www.debian.org/security/2011/dsa-2151 - http://secunia.com/advisories/60799 - http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html - http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml - http://secunia.com/advisories/43118 - http://secunia.com/advisories/43065 - http://www.vupen.com/english/advisories/2011/0230 - http://www.securitytracker.com/id?1025002 - http://www.openoffice.org/security/cves/CVE-2010-3453_CVE-2010-3454.html - http://www.vupen.com/english/advisories/2011/0232 - https://bugzilla.redhat.com/show_bug.c
010-3453_CVE-2010-3454.html - http://www.vupen.com/english/advisories/2011/0232 - https://bugzilla.redhat.com/show_bug.cgi?id=640950 - http://www.redhat.com/support/errata/RHSA-2011-0182.html - http://ubuntu.com/usn/usn-1056-1 - http://www.redhat.com/support/errata/RHSA-2011-0181.html - http://osvdb.org/70714 - http://www.vupen.com/english/advisories/2011/0279 - http://secunia.com/advisories/43105 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:027 - http://www.vsecurity.com/resources/advisory/20110126-1 - http://www.cs.brown.edu/people/drosenbe/research.html - http://secunia.com/advisories/42999
CVE ID: CVE-2010-3454 State: PUBLISHED Published: 2011-01-28T21:13:00 Last Updated: 2024-08-07T03:11:44.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple off-by-one errors in the WW8DopTypography::ReadFromMem function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted typography information in a Microsoft Word .DOC file that triggers an out-of-bounds write. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40775 - http://www.securityfocus.com/bid/46031 - http://www.debian.org/security/2011/dsa-2151 -
//secunia.com/advisories/40775 - http://www.securityfocus.com/bid/46031 - http://www.debian.org/security/2011/dsa-2151 - http://secunia.com/advisories/60799 - http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html - https://bugzilla.redhat.com/show_bug.cgi?id=640954 - http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml - http://osvdb.org/70715 - http://secunia.com/advisories/43118 - http://secunia.com/advisories/43065 - http://www.vupen.com/english/advisories/2011/0230 - http://www.securitytracker.com/id?1025002 - http://www.openoffice.org/security/cves/CVE-2010-3453_CVE-2010-3454.html - http://www.vupen.com/english/advisories/2011/0232 - http://www.redhat.com/support
ves/CVE-2010-3453_CVE-2010-3454.html - http://www.vupen.com/english/advisories/2011/0232 - http://www.redhat.com/support/errata/RHSA-2011-0182.html - http://ubuntu.com/usn/usn-1056-1 - http://www.redhat.com/support/errata/RHSA-2011-0181.html - http://www.vupen.com/english/advisories/2011/0279 - http://secunia.com/advisories/43105 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:027 - http://www.vsecurity.com/resources/advisory/20110126-1 - http://www.cs.brown.edu/people/drosenbe/research.html - http://secunia.com/advisories/42999
CVE ID: CVE-2010-3455 State: PUBLISHED Published: 2010-09-17T19:00:00 Last Updated: 2024-08-07T03:11:43.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in AChecker 1.0 allows remote attackers to inject arbitrary web script or HTML via the uri parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41467 - http://packetstormsecurity.org/1009-exploits/achecker-xss.txt - http://www.securityfocus.com/archive/1/513735/100/0/threaded - http://www.htbridge.ch/advisory/xss_vulnerability_in_achecker.html
CVE ID: CVE-2010-3456 State: PUBLISHED Published: 2010-09-17T19:00:00 Last Updated: 2024-08-07T03:11:44.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download.php in EnergyScripts (ES) Simple Download 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43124 - http://www.osvdb.org/67944 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61718 - http://www.exploit-db.com/exploits/14960 - http://secunia.com/advisories/41359 - http://packetstormsecurity.org/1009-exploits/essimpledownload-lfi.txt
CVE ID: CVE-2010-3457 State: PUBLISHED Published: 2010-09-17T19:00:00 Last Updated: 2024-08-07T03:11:43.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.0.7 and 2.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) fields[website] parameter in the post comments feature in articles/a-primer-to-symphony-2s-default-theme/ or (2) send-email[recipient] parameter to about/. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43180 - http://secunia.com/advisories/41379 - htt
CVE Program Container: References: - http://www.securityfocus.com/bid/43180 - http://secunia.com/advisories/41379 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61750 - http://www.exploit-db.com/exploits/14968 - http://packetstormsecurity.org/1009-exploits/symphony-sqlxss.txt
CVE ID: CVE-2010-3458 State: PUBLISHED Published: 2010-09-17T19:00:00 Last Updated: 2024-08-07T03:11:44.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in lib/toolkit/events/event.section.php in Symphony CMS 2.0.7 and 2.1.1 allows remote attackers to execute arbitrary SQL commands via the send-email[recipient] parameter to about/. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43180 - http://secunia.com/advisories/41379 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61749 - http://www.exploit-db.com/exploits/14968 - http
ies/41379 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61749 - http://www.exploit-db.com/exploits/14968 - http://packetstormsecurity.org/1009-exploits/symphony-sqlxss.txt
CVE ID: CVE-2010-3459 State: PUBLISHED Published: 2010-09-17T19:00:00 Last Updated: 2024-08-07T03:11:44.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Ajax WebMail interface in AXIGEN Mail Server before 7.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/68026 - http://www.vupen.com/english/advisories/2010/2415 - http://www.axigen.com/press/product-releases/axigen-releases-version-742_74.html - http://secunia.com/advisories/41430 - http://www.securityfocus.com/bid/43230 - https://exchange.xforce.ibmclo
_74.html - http://secunia.com/advisories/41430 - http://www.securityfocus.com/bid/43230 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61825
CVE ID: CVE-2010-3460 State: PUBLISHED Published: 2010-09-17T19:00:00 Last Updated: 2024-08-07T03:11:43.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers to read arbitrary files via a %5C (encoded backslash) in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1009-exploits/axigen741-traversal.txt - http://www.vupen.com/english/advisories/2010/2415 - http://www.axigen.com/press/product-releases/axigen-releases-version-742_74.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/61826 - http://www.osv
leases/axigen-releases-version-742_74.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/61826 - http://www.osvdb.org/68027 - http://secunia.com/advisories/41430 - http://www.securityfocus.com/bid/43230 - http://www.acunetix.com/blog/news/directory-traversal-axigen/
CVE ID: CVE-2010-3461 State: PUBLISHED Published: 2010-09-17T19:00:00 Last Updated: 2024-08-07T03:11:43.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Publisher module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printarticle action to mod.php, a different vector than CVE-2007-3394. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15006 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61809
CVE ID: CVE-2010-3462 State: PUBLISHED Published: 2010-09-17T19:00:00Z Last Updated: 2024-09-16T17:03:08.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in backend/plugin/Registration/index.php in Mollify 1.6, 1.6.5.5, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the confirm parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1009-exploits/mollify16-xss.txt - http://www.securityfocus.com/bid/43262 - http://www.johnleitch.net/Vulnerabilities/Mollify.1.6.Reflected.
fy16-xss.txt - http://www.securityfocus.com/bid/43262 - http://www.johnleitch.net/Vulnerabilities/Mollify.1.6.Reflected.Cross-site.Scripting/36 - http://secunia.com/advisories/41472
CVE ID: CVE-2010-3463 State: PUBLISHED Published: 2010-09-17T19:00:00 Last Updated: 2024-08-07T03:11:44.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in modules/search/search.class.php in SantaFox 2.02, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the search parameter to search.html. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1009-exploits/santafox-xssxsrf.txt - http://www.htbridge.ch/advisory/xss_vulnerability_in_santafox_search_module.html - http://secunia.com/advisories/41465 - http://www.securityfocus.com/archive/1/513737/100/0/thread
ox_search_module.html - http://secunia.com/advisories/41465 - http://www.securityfocus.com/archive/1/513737/100/0/threaded
CVE ID: CVE-2010-3464 State: PUBLISHED Published: 2010-09-17T19:00:00 Last Updated: 2024-08-07T03:11:44.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in admin/manager_users.class.php in SantaFox 2.02, and possibly earlier, allows remote attackers to hijack the authentication of administrators for requests, as demonstrated by adding administrative users via the save_admin action to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1009-exploits/santafox-xssxsrf.txt - http://secunia.com/advisories/41465 - http://www.securityfocus.com/archive/1/513738/100/0/threaded -
tafox-xssxsrf.txt - http://secunia.com/advisories/41465 - http://www.securityfocus.com/archive/1/513738/100/0/threaded - http://www.htbridge.ch/advisory/xsrf_csrf_in_santafox.html
CVE ID: CVE-2010-3465 State: PUBLISHED Published: 2010-09-17T19:00:00 Last Updated: 2024-08-07T03:11:43.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in XSE Shopping Cart 1.5.2.1 and 1.5.3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to Default.aspx and the (2) type parameter to SearchResults.aspx. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/61828 - http://pridels-team.blogspot.com/2010/09/xse-shopping-cart-xss-vuln.html - http://secunia.com/advisories/41453 - http://osvdb.org/68029 - http://osvdb.org/68030
CVE ID: CVE-2010-3466 State: PUBLISHED Published: 2010-09-17T19:00:00 Last Updated: 2024-08-07T03:11:44.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in the hosted_signup module in NetArt Media iBoutique.MALL 1.2 allows remote attackers to inject arbitrary web script or HTML via the tmpl parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43146 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61737 - http://pridels-team.blogspot.com/2010/09/iboutiquemall-12-xss-vuln.html - http://secunia.c
d.com/vulnerabilities/61737 - http://pridels-team.blogspot.com/2010/09/iboutiquemall-12-xss-vuln.html - http://secunia.com/advisories/36726
CVE ID: CVE-2010-3467 State: PUBLISHED Published: 2010-09-17T19:00:00 Last Updated: 2024-08-07T03:11:44.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modules/sections/index.php in E-Xoopport Samsara 3.1 and earlier, when the Tutorial module is enabled, allows remote attackers to execute arbitrary SQL commands via the secid parameter in a listarticles action. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15004 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61808 - http://packetstormsecurity.org/1009-exploits/exoopport-sql.txt - http://secunia.com/advisories/41397
CVE ID: CVE-2010-3468 State: PUBLISHED Published: 2010-09-29T16:00:00Z Last Updated: 2024-09-17T02:53:22.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in fileManager.cfc in Mura CMS 5.1 before 5.1.498 and 5.2 before 5.2.2809, and Sava CMS 5 through 5.2, allows remote attackers to read arbitrary files via a .. (dot dot) in the FILEID parameter to the default URI under tasks/render/file/. Additional Analyst Notes: - CVE Program Container: References: - http://www.stratsec.net/Research/Advisories/Blue-River-Mura-CMS-Directory-Traversal-%28SS-2010-0 - http://www.getmura.com/index.cfm/blog/critical-security-patch/ - http://www.securityfocus.com/
-Traversal-%28SS-2010-0 - http://www.getmura.com/index.cfm/blog/critical-security-patch/ - http://www.securityfocus.com/bid/43499 - http://www.exploit-db.com/exploits/15120 - http://secunia.com/advisories/41591
CVE ID: CVE-2010-3470 State: PUBLISHED Published: 2010-09-20T21:00:00Z Last Updated: 2024-09-17T03:28:50.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-021 and 4.0.2.x before 4.0.2.7-P8AE-FP007 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43271 - http://download2.boulder.ibm.com/sar/CMA/IMA/00yrk/0/readme-ae351-021.htm - http://www.securityfocus.com/bid/43272 - http://secunia.com/advisorie
ibm.com/sar/CMA/IMA/00yrk/0/readme-ae351-021.htm - http://www.securityfocus.com/bid/43272 - http://secunia.com/advisories/41458 - http://www.vupen.com/english/advisories/2010/2419 - http://secunia.com/advisories/41460 - http://download2.boulder.ibm.com/sar/CMA/IMA/00y3y/0/readme-4027-P8AE-FP007.htm - http://www-01.ibm.com/support/docview.wss?uid=swg1PJ37179
CVE ID: CVE-2010-3471 State: PUBLISHED Published: 2010-09-20T21:00:00Z Last Updated: 2024-09-17T02:37:17.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.7-P8AE-FP007 allows remote attackers to hijack web sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43271 - http://secunia.com/advisories/41460 - http://www-01.ibm.com/support/docview.wss?uid=swg1PJ37346 - http://download2.boulder.ibm.com/sar/CMA/IMA/00y3y/0/readme-4027-P8AE-FP007.htm
CVE ID: CVE-2010-3472 State: PUBLISHED Published: 2010-09-20T21:00:00Z Last Updated: 2024-09-17T03:03:42.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-021 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://download2.boulder.ibm.com/sar/CMA/IMA/00yrk/0/readme-ae351-021.htm - http://www-01.ibm.com/support/docview.wss?uid=swg1PJ37466 - http://www.securityfocus.com/bid/43272 - http://secunia.com/advisories/41458 - http://ww
t/docview.wss?uid=swg1PJ37466 - http://www.securityfocus.com/bid/43272 - http://secunia.com/advisories/41458 - http://www.vupen.com/english/advisories/2010/2419
CVE ID: CVE-2010-3473 State: PUBLISHED Published: 2010-09-20T21:00:00Z Last Updated: 2024-09-16T19:31:31.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-021 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://download2.boulder.ibm.com/sar/CMA/IMA/00yrk/0/readme-ae351-021.htm - http://www-01.ibm.com/support/docview.wss?uid=swg1PJ37180 - http://www.securityfocus.com/bid/43272 - http://secunia.com/advisories/41458 - h
m/support/docview.wss?uid=swg1PJ37180 - http://www.securityfocus.com/bid/43272 - http://secunia.com/advisories/41458 - http://www.vupen.com/english/advisories/2010/2419
CVE ID: CVE-2010-3474 State: PUBLISHED Published: 2010-09-20T21:00:00 Last Updated: 2024-08-07T03:11:44.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 9.7 before FP3 does not perform the expected drops or invalidations of dependent functions upon a loss of privileges by the functions' owners, which allows remote authenticated users to bypass intended access restrictions via calls to these functions, a different vulnerability than CVE-2009-3471. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43291 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14669 - https://exchange.xforce.i
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14669 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61872 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC68015 - http://www.vupen.com/english/advisories/2010/2425 - http://www.securitytracker.com/id?1024457 - http://secunia.com/advisories/41444 - http://osvdb.org/68121 - http://www.ibm.com/support/docview.wss?uid=swg21446455
CVE ID: CVE-2010-3475 State: PUBLISHED Published: 2010-09-20T21:00:00 Last Updated: 2024-08-07T03:11:44.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 9.7 before FP3 does not properly enforce privilege requirements for execution of entries in the dynamic SQL cache, which allows remote authenticated users to bypass intended access restrictions by leveraging the cache to execute an UPDATE statement contained in a compiled compound SQL statement. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43291 - http://www.vupen.com/english/advisories/2010/2425 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61873 - http://s
ttp://www.vupen.com/english/advisories/2010/2425 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61873 - http://secunia.com/advisories/41444 - http://www.ibm.com/support/docview.wss?uid=swg21446455 - http://www-01.ibm.com/support/docview.wss?uid=swg1IC70406 - http://osvdb.org/68122 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14609 - http://www.securitytracker.com/id?1024458
CVE ID: CVE-2010-3476 State: PUBLISHED Published: 2010-09-20T21:00:00 Last Updated: 2024-08-07T03:11:44.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Ticket Request System (OTRS) 2.3.x before 2.3.6 and 2.4.x before 2.4.8 does not properly handle the matching of Perl regular expressions against HTML e-mail messages, which allows remote attackers to cause a denial of service (CPU consumption) via a large message, a different vulnerability than CVE-2010-2080. Additional Analyst Notes: - CVE Program Container: References: - http://security-tracker.debian.org/tracker/CVE-2010-2080 - http://secunia.com/advisories/41381 - http://otrs.org/advisory/OSA-2010-02-en/ - https://exc
org/tracker/CVE-2010-2080 - http://secunia.com/advisories/41381 - http://otrs.org/advisory/OSA-2010-02-en/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/61869 - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html - http://www.securityfocus.com/bid/43264
CVE ID: CVE-2010-3477 State: PUBLISHED Published: 2010-09-21T19:00:00 Last Updated: 2024-08-07T03:11:44.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tcf_act_police_dump function in net/sched/act_police.c in the actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc4 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel memory via vectors involving a dump operation. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-2942. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024
r CVE-2010-2942. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1024603 - http://www.ubuntu.com/usn/USN-1000-1 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://www.redhat.com/support/errata/RHSA-2011-0007.html - http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=0f04cfd098fb81fded74e78ea1a1b86cc6c6c31e - http://www.redhat.com/support/errata/RHSA-2010-0839.html - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://secunia.com/advisories/42890 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc4 - http://www.redhat.com
.com/advisories/42890 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc4 - http://www.redhat.com/support/errata/RHSA-2010-0779.html - http://www.debian.org/security/2010/dsa-2126
CVE ID: CVE-2010-3479 State: PUBLISHED Published: 2010-09-22T19:00:00 Last Updated: 2024-08-07T03:11:44.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in list.php in BoutikOne 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/61911 - http://packetstormsecurity.org/1009-exploits/boutikone-sql.txt - http://www.vupen.com/english/advisories/2010/2436 - http://www.exploit-db.com/exploits/15049