Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-1152 State: PUBLISHED Published: 2010-04-12T18:00:00 Last Updated: 2024-08-07T01:14:06.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: memcached.c in memcached before 1.4.3 allows remote attackers to cause a denial of service (daemon hang or crash) via a long line that triggers excessive memory allocation. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=oss-security&m=127075341110616&w=2 - http://secunia.com/advisories/39306 - http://github.com/memcached/memcached/commit/d9cd01ede97f4145af9781d448c62a3318952719 - http://blogs.sun.com/security/entry/inpu
ithub.com/memcached/memcached/commit/d9cd01ede97f4145af9781d448c62a3318952719 - http://blogs.sun.com/security/entry/input_validation_vulnerability_in_memcached - http://marc.info/?l=oss-security&m=127074597129559&w=2 - http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html - http://www.vupen.com/english/advisories/2011/0442 - http://github.com/memcached/memcached/commit/75cc83685e103bc8ba380a57468c8f04413033f9 - http://code.google.com/p/memcached/issues/detail?id=102 - http://marc.info/?l=oss-security&m=127075808518733&w=2 - http://securitytracker.com/id?1023839 - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html
CVE ID: CVE-2010-1153 State: PUBLISHED Published: 2010-04-20T19:00:00Z Last Updated: 2024-09-17T01:27:09.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in the autoloader in TYPO3 4.3.x before 4.3.3 allows remote attackers to execute arbitrary PHP code via a URL in an input field associated with the className variable. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-008/ - http://marc.info/?l=oss-security&m=127092306209177&w=2 - http://www.openwall.com/lists/oss-security/2010/04/12/1
CVE ID: CVE-2010-1154 State: REJECTED Published: 2017-07-24T16:00:00 Last Updated: 2017-07-24T15:57:01 Description: No description available.
CVE ID: CVE-2010-1155 State: PUBLISHED Published: 2010-04-16T19:00:00 Last Updated: 2024-08-07T01:14:06.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Irssi before 0.8.15, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof IRC servers via an arbitrary certificate. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=oss-security&m=127110132019166&w=2 - http://marc.info/?l=oss-security&m=127116251220784&w=2 - http://www.vupen.com/english/advisories/2010/0856 - http:
w=2 - http://marc.info/?l=oss-security&m=127116251220784&w=2 - http://www.vupen.com/english/advisories/2010/0856 - http://www.vupen.com/english/advisories/2010/1110 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57790 - http://www.vupen.com/english/advisories/2010/1107 - http://www.vupen.com/english/advisories/2010/0987 - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html - http://marc.info/?l=oss-security&m=127119240204394&w=2 - http://secunia.com/advisories/39620 - http://secunia.com/advisories/39365 - http://www.ubuntu.com/usn/USN-929-1 - http://irssi.org/news - http://marc.info/?l=oss-security&m=127098845125270&w=2 - http://slackware.com/security/viewer.ph
http://irssi.org/news - http://marc.info/?l=oss-security&m=127098845125270&w=2 - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.497301 - http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041054.html - http://github.com/ensc/irssi-proxy/commit/85bbc05b21678e80423815d2ef1dfe26208491ab - http://irssi.org/news/ChangeLog - http://secunia.com/advisories/39797
CVE ID: CVE-2010-1156 State: PUBLISHED Published: 2010-04-16T19:00:00 Last Updated: 2024-08-07T01:14:06.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: core/nicklist.c in Irssi before 0.8.15 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to an attempted fuzzy nick match at the instant that a victim leaves a channel. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=oss-security&m=127110132019166&w=2 - http://www.vupen.com/english/advisories/2010/0856 - http://www.vupen.com/english/advisories/2010/1110 - http://www.vupen.com/english/advisories/2010/1107 - http://www.vu
- http://www.vupen.com/english/advisories/2010/1110 - http://www.vupen.com/english/advisories/2010/1107 - http://www.vupen.com/english/advisories/2010/0987 - http://marc.info/?l=oss-security&m=127111071631857&w=2 - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html - http://marc.info/?l=oss-security&m=127119240204394&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57791 - http://secunia.com/advisories/39620 - http://svn.irssi.org/cgi-bin/viewvc.cgi/irssi/trunk/src/core/nicklist.c?root=irssi&r1=4922&r2=5126 - http://secunia.com/advisories/39365 - http://www.ubuntu.com/usn/USN-929-1 - http://irssi.org/news - http://marc.info/?l=oss-security&m=127098845125270
39365 - http://www.ubuntu.com/usn/USN-929-1 - http://irssi.org/news - http://marc.info/?l=oss-security&m=127098845125270&w=2 - http://marc.info/?l=oss-security&m=127115784314970&w=2 - http://securitytracker.com/id?1023845 - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.497301 - http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041054.html - http://irssi.org/news/ChangeLog - http://secunia.com/advisories/39797
CVE ID: CVE-2010-1157 State: PUBLISHED Published: 2010-04-23T14:00:00 Last Updated: 2024-08-07T01:14:06.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and then reading the realm field in the WWW-Authenticate header in the reply. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/510879/100/0/threaded - http://www.debian.org/security/2011/dsa-2207 - http://svn.apache.org/viewvc?view=revision&revision=
879/100/0/threaded - http://www.debian.org/security/2011/dsa-2207 - http://svn.apache.org/viewvc?view=revision&revision=936540 - http://marc.info/?l=bugtraq&m=136485229118404&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:177 - http://www.vupen.com/english/advisories/2010/3056 - http://secunia.com/advisories/43310 - http://secunia.com/advisories/39574 - http://marc.info/?l=bugtraq&m=133469267822771&w=2 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:176 - http://secunia.com/advisories/42368 - http://www.redhat.com/support/errata/RHSA-2011-0897.html - http://www.vupen.com/english/advis
nia.com/advisories/42368 - http://www.redhat.com/support/errata/RHSA-2011-0897.html - http://www.vupen.com/english/advisories/2010/0980 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19492 - http://tomcat.apache.org/security-6.html - http://secunia.com/advisories/57126 - http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html - http://svn.apache.org/viewvc?view=revision&revision=936541 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://marc.info/?l=bugtraq&m=133469267822771&w=2 - http://www.securityfocus.com/bid/39635 - http://www.redhat.com/support/errata/RHSA-2011-0896.html - http://tomcat.apache.org
://www.securityfocus.com/bid/39635 - http://www.redhat.com/support/errata/RHSA-2011-0896.html - http://tomcat.apache.org/security-5.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://marc.info/?l=bugtraq&m=129070310906557&w=2 - http://support.apple.com/kb/HT5002 - http://marc.info/?l=bugtraq&m=136485229118404&w=2 - http://www.securityfocus.com/archive/1/516397/100/0/threaded - http://marc.info/?l=bugtraq&m=129070310906557&w=2 - http://marc.info/?l=bugtraq&m=139344343412337&w=2 - https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea15
46ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2010-1158 State: PUBLISHED Published: 2010-04-20T15:00:00 Last Updated: 2024-08-07T01:14:06.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the regular expression engine in Perl 5.8.x allows context-dependent attackers to cause a denial of service (stack consumption and application crash) by matching a crafted regular expression against a long string. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=313565 - http://www.openwall.com/lists/oss-security/2010/04/14/3 - http://www.openwall.com/lists/oss-security/2010/04/08/9 - http://secunia.com/advisories/55314 - https://bugzilla.redhat.com/sho
www.openwall.com/lists/oss-security/2010/04/08/9 - http://secunia.com/advisories/55314 - https://bugzilla.redhat.com/show_bug.cgi?id=580605 - http://perldoc.perl.org/perl5100delta.html
CVE ID: CVE-2010-1159 State: PUBLISHED Published: 2013-10-28T22:00:00Z Last Updated: 2024-08-07T01:14:06.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in Aircrack-ng before 1.1 allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a (1) large length value in an EAPOL packet or (2) long EAPOL packet. Additional Analyst Notes: - CVE Program Container: References: - http://pyrit.googlecode.com/svn/tags/opt/aircrackng_exploit.py - http://security.gentoo.org/glsa/glsa-201310-06.xml - http://secunia.com/advisories/39150 - http://secunia.com/advisories/55053 - http://svn.aircrack-ng.org/trunk/ChangeLog
CVE ID: CVE-2010-1160 State: PUBLISHED Published: 2010-04-16T19:00:00Z Last Updated: 2024-08-07T01:14:06.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU nano before 2.2.4 does not verify whether a file has been changed before it is overwritten in a file-save operation, which allows local user-assisted attackers to overwrite arbitrary files via a symlink attack on an attacker-owned file that is being edited by the victim. Additional Analyst Notes: - CVE Program Container: References: - http://lists.gnu.org/archive/html/nano-devel/2010-04/msg00000.html - http://svn.savannah.gnu.org/viewvc/trunk/nano/ChangeLog?revision=4503&root=nano&view=markup - http://www.openwall.com/lis
ttp://svn.savannah.gnu.org/viewvc/trunk/nano/ChangeLog?revision=4503&root=nano&view=markup - http://www.openwall.com/lists/oss-security/2010/04/14/4 - http://www.securitytracker.com/id?1023891 - http://drosenbe.blogspot.com/2010/03/nano-as-root.html - http://secunia.com/advisories/39444
CVE ID: CVE-2010-1161 State: PUBLISHED Published: 2010-04-16T19:00:00Z Last Updated: 2024-08-07T01:14:06.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in GNU nano before 2.2.4, when run by root to edit a file that is not owned by root, allows local user-assisted attackers to change the ownership of arbitrary files via vectors related to the creation of backup files. Additional Analyst Notes: - CVE Program Container: References: - http://lists.gnu.org/archive/html/nano-devel/2010-04/msg00000.html - http://svn.savannah.gnu.org/viewvc/trunk/nano/ChangeLog?revision=4503&root=nano&view=markup - http://www.openwall.com/lists/oss-security/2010/04/14/4 - http://www.s
o/ChangeLog?revision=4503&root=nano&view=markup - http://www.openwall.com/lists/oss-security/2010/04/14/4 - http://www.securitytracker.com/id?1023891 - http://drosenbe.blogspot.com/2010/03/nano-as-root.html - http://secunia.com/advisories/39444
CVE ID: CVE-2010-1162 State: PUBLISHED Published: 2010-04-20T15:00:00 Last Updated: 2024-08-07T01:14:06.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: The release_one_tty function in drivers/char/tty_io.c in the Linux kernel before 2.6.34-rc4 omits certain required calls to the put_pid function, which has unspecified impact and local attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html - http://www.openwall.com/lists/oss-security/2010/04/16/1 - http://www.openwall.com/lists/oss-security/2010/04/15/1 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 - http://
openwall.com/lists/oss-security/2010/04/15/1 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:198 - http://www.openwall.com/lists/oss-security/2010/04/14/1 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.34-rc4 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6da8d866d0d39e9509ff826660f6a86a6757c966 - http://secunia.com/advisories/40645 - https://bugzilla.redhat.com/show_bug.cgi?id=582076 - http://www.openwall.com/lists/oss-security/2010/04/15/2 - http://www.debian.org/security/2010/dsa-2053 - http://secunia.com/advisories/39830 - http://www.vupen.com/english/advisories/2010/1857
CVE ID: CVE-2010-1163 State: PUBLISHED Published: 2010-04-16T19:00:00 Last Updated: 2024-08-07T01:14:06.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users to execute arbitrary commands via a Trojan horse executable, as demonstrated using sudoedit, a different vulnerability than CVE-2010-0426. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-928-1 - http://secunia.com/advisories/43
yst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-928-1 - http://secunia.com/advisories/43068 - http://www.redhat.com/support/errata/RHSA-2010-0361.html - http://www.vupen.com/english/advisories/2011/0212 - http://secunia.com/advisories/39384 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9382 - http://secunia.com/advisories/39543 - http://secunia.com/advisories/39399 - http://www.vupen.com/english/advisories/2010/1019 - http://www.osvdb.org/63878 - http://www.vupen.com/english/advisories/2010/0956 - http://www.securityfocus.com/archive/1/510880/100/0/threaded - http://www.securityfocus.com/archive/1/514489/100/0/threade
tp://www.securityfocus.com/archive/1/510880/100/0/threaded - http://www.securityfocus.com/archive/1/514489/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDVSA-2010:078 - http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039986.html - http://www.vupen.com/english/advisories/2010/0895 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://www.vupen.com/english/advisories/2010/0949 - http://wiki.rpath.com/Advisories:rPSA-2010-0075 - http://www.securityfocus.com/archive/1/510827/100/0/threaded - http://www.securityfocus.com/bid/39468 - http://www.vupen.com/english/advisories/2010/0881 - http://secunia.com/advisories/39474 - ht
curityfocus.com/bid/39468 - http://www.vupen.com/english/advisories/2010/0881 - http://secunia.com/advisories/39474 - http://www.securityfocus.com/archive/1/510846/100/0/threaded - http://www.sudo.ws/sudo/alerts/sudoedit_escalate2.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/57836 - http://www.vupen.com/english/advisories/2010/0904 - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.577019
CVE ID: CVE-2010-1164 State: PUBLISHED Published: 2010-04-20T15:00:00 Last Updated: 2024-08-07T01:14:06.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Atlassian JIRA 3.12 through 4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) element or (2) defaultColor parameter to the Colour Picker page; the (3) formName parameter, (4) element parameter, or (5) full name field to the User Picker page; the (6) formName parameter, (7) element parameter, or (8) group name field to the Group Picker page; the (9) announcement_preview_banner_st parameter to unspecified components, related to the Announcement Ba
Picker page; the (9) announcement_preview_banner_st parameter to unspecified components, related to the Announcement Banner Preview page; unspecified vectors involving the (10) groupnames.jsp, (11) indexbrowser.jsp, (12) classpath-debug.jsp, (13) viewdocument.jsp, or (14) cleancommentspam.jsp page; the (15) portletKey parameter to runportleterror.jsp; the (16) URI to issuelinksmall.jsp; the (17) afterURL parameter to screenshot-redirecter.jsp; or the (18) HTTP Referrer header to 500page.jsp, as exploited in the wild in April 2010. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57827 - http://jira.atlassian.com/browse/JRA
ntainer: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57827 - http://jira.atlassian.com/browse/JRA-20994 - http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2010-04-16 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57826 - http://www.openwall.com/lists/oss-security/2010/04/16/3 - http://www.openwall.com/lists/oss-security/2010/04/16/4 - http://secunia.com/advisories/39353 - http://www.securityfocus.com/bid/39485 - http://jira.atlassian.com/browse/JRA-21004
CVE ID: CVE-2010-1165 State: PUBLISHED Published: 2010-04-20T15:00:00 Last Updated: 2024-08-07T01:14:06.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Atlassian JIRA 3.12 through 4.1 allows remote authenticated administrators to execute arbitrary code by modifying the (1) attachment (aka attachments), (2) index (aka indexing), or (3) backup path and then uploading a file, as exploited in the wild in April 2010. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/57828 - http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2010-04-16 - http://jira.atlassian.com/browse/JRA-20995 - http://www.openw
ssian.com/display/JIRA/JIRA+Security+Advisory+2010-04-16 - http://jira.atlassian.com/browse/JRA-20995 - http://www.openwall.com/lists/oss-security/2010/04/16/3 - http://www.openwall.com/lists/oss-security/2010/04/16/4 - http://secunia.com/advisories/39353 - http://www.securityfocus.com/bid/39485 - http://jira.atlassian.com/browse/JRA-21004
CVE ID: CVE-2010-1166 State: PUBLISHED Published: 2010-04-29T21:00:00 Last Updated: 2024-08-07T01:14:06.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fbComposite function in fbpict.c in the Render extension in the X server in X.Org X11R7.1 allows remote authenticated users to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted request, related to an incorrect macro definition. Additional Analyst Notes: - CVE Program Container: References: - https://rhn.redhat.com/errata/RHSA-2010-0382.html - http://securitytracker.com/id?1023929 - http://secunia.com/advisories/39650 - http://secunia.com/advisories/39834 - https
ttp://securitytracker.com/id?1023929 - http://secunia.com/advisories/39650 - http://secunia.com/advisories/39834 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10112 - http://cgit.freedesktop.org/xorg/xserver/commit/?id=d2f813f7db - https://bugzilla.redhat.com/show_bug.cgi?id=495733 - https://bugzilla.redhat.com/show_bug.cgi?id=582601 - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - http://www.vupen.com/english/advisories/2010/1185 - http://www.ubuntu.com/usn/USN-939-1
CVE ID: CVE-2010-1167 State: PUBLISHED Published: 2010-05-07T17:43:00 Last Updated: 2024-08-07T01:14:06.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a crafted (1) message header or (2) POP3 UIDL list. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39556 - http://www.fetchmail.info/fetchmail-SA-2010-02.txt - http://www.securityfocus.com/archive/1/511140/100/0/threaded - http://www.mandriva
hmail.info/fetchmail-SA-2010-02.txt - http://www.securityfocus.com/archive/1/511140/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDVSA-2011:107 - http://developer.berlios.de/project/shownotes.php?group_id=1824&release_id=17512
CVE ID: CVE-2010-1168 State: PUBLISHED Published: 2010-06-21T16:00:00 Last Updated: 2024-08-07T01:14:06.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Safe (aka Safe.pm) module before 2.25 for Perl allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving implicitly called methods and implicitly blessed objects, as demonstrated by the (a) DESTROY and (b) AUTOLOAD methods, related to "automagic methods." Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:115 - http://secunia.com/advisories
Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:115 - http://secunia.com/advisories/42402 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9807 - http://cpansearch.perl.org/src/RGARCIA/Safe-2.27/Changes - http://securitytracker.com/id?1024062 - http://www.redhat.com/support/errata/RHSA-2010-0457.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7424 - https://bugzilla.redhat.com/show_bug.cgi?id=576508 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://blogs.perl.org/users/rafael_garcia-suarez/2010/03/new-safepm-fixes-security-hole.html - http://secu
id=JSA10705 - http://blogs.perl.org/users/rafael_garcia-suarez/2010/03/new-safepm-fixes-security-hole.html - http://secunia.com/advisories/40049 - http://www.vupen.com/english/advisories/2010/3075 - http://secunia.com/advisories/40052 - http://www.redhat.com/support/errata/RHSA-2010-0458.html - http://www.openwall.com/lists/oss-security/2010/05/20/5 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735 - http://blogs.sun.com/security/entry/cve_2010_1168_vulnerability_in - http://www.mandriva.com/security/advisories?name=MDVSA-2010:116
CVE ID: CVE-2010-1169 State: PUBLISHED Published: 2010-05-19T18:13:00 Last Updated: 2024-08-07T01:14:06.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 does not properly restrict PL/perl procedures, which allows remote authenticated users, with database-creation privileges, to execute arbitrary Perl code via a crafted script, related to the Safe module (aka Safe.pm) for Perl. NOTE: some sources report that this issue is the same as CVE-2010-1447. Additional Analyst Notes: - CVE Program Container: References: - http://www.po