Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-3417 State: PUBLISHED Published: 2010-09-16T20:00:00 Last Updated: 2024-08-07T03:11:43.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 6.0.472.59 does not prompt the user before granting access to the extension history, which allows attackers to obtain potentially sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7371 - http://googlechromereleases.blogspot.com/2010/09/stable-beta-channel-updates_14.html - http://code.google.com/p/chromium/issues/detail?id=54006
CVE ID: CVE-2010-3418 State: PUBLISHED Published: 2010-09-16T21:00:00 Last Updated: 2024-08-07T03:11:43.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in NetArt Media Car Portal 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) car_id parameter to index.php and (2) y parameter to include/images.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41366 - http://osvdb.org/67937 - http://pridels-team.blogspot.com/2010/09/netartmedia-car-portal-v20-xss-vuln.html - http://www.securityfocus.com/bid/43145 - https://exchange.xforce.ibmcloud.com/
etartmedia-car-portal-v20-xss-vuln.html - http://www.securityfocus.com/bid/43145 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61728
CVE ID: CVE-2010-3419 State: PUBLISHED Published: 2010-09-16T21:00:00 Last Updated: 2024-08-07T03:11:43.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 2.2.3 allow remote attackers to execute arbitrary PHP code via a URL in the current_user_id parameter to (1) familynews.php and (2) settings.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14965 - http://packetstormsecurity.org/1009-exploits/fcms-rfi.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/61722
CVE ID: CVE-2010-3420 State: PUBLISHED Published: 2010-09-16T21:00:00 Last Updated: 2024-08-07T03:11:43.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Products_Results.php in PowerStore 3.0 allows remote attackers to inject arbitrary web script or HTML via the totalRows_WADAProducts parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41369 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61736 - http://osvdb.org/67939 - http://pridels-team.blogspot.com/2010/09/powerstore-3-xss-vuln.html
CVE ID: CVE-2010-3421 State: PUBLISHED Published: 2010-09-16T21:00:00 Last Updated: 2024-08-07T03:11:43.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in AffiliateLogin.asp in ProductCart 3, 4.1 SP1, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the redirectUrl parameter, a different vector than CVE-2004-2174 and CVE-2005-0995. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.upsploit.com/index.php/advisories/view/UPS-2010-0002 - http://osvdb.org/67938 - http://www.securityfocus.com/bid/43
/www.upsploit.com/index.php/advisories/view/UPS-2010-0002 - http://osvdb.org/67938 - http://www.securityfocus.com/bid/43144 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61727 - http://secunia.com/advisories/41394
CVE ID: CVE-2010-3422 State: PUBLISHED Published: 2010-09-16T21:00:00Z Last Updated: 2024-09-16T23:11:34.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the JGen (com_jgen) component 0.9.33 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43210 - http://www.exploit-db.com/exploits/14998
CVE ID: CVE-2010-3423 State: PUBLISHED Published: 2010-09-16T21:00:00 Last Updated: 2024-08-07T03:11:44.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Yr Weatherdata module for Drupal 6.x before 6.x-1.6 allows remote attackers to execute arbitrary SQL commands via the sorting method. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/905686 - http://www.osvdb.org/67918 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61673 - http://secunia.com/advisories/41385 - http://drupal.org/node/606290
CVE ID: CVE-2010-3424 State: PUBLISHED Published: 2010-09-16T21:00:00Z Last Updated: 2024-09-17T00:55:54.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/sources/classes/bbcode/custom/defaults.php in Invision Power Board (IP.Board) 3.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://community.invisionpower.com/topic/320838-ipboard-31x-security-patch-released/ - http://www.vupen.com/english/advisories/2010/2328 - http://www.securityfocus.com/bid/43053 - http://secunia.com/advisories/41314
CVE ID: CVE-2010-3425 State: PUBLISHED Published: 2010-09-16T21:00:00 Last Updated: 2024-08-07T03:11:43.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in UserControls/Popups/frmHelp.aspx in SmarterStats 5.3, 5.3.3819, and possibly other 5.3 versions, allows remote attackers to inject arbitrary web script or HTML via the url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41389 - http://cloudscan.blogspot.com/2010/09/vendorsmarterstats-bug-cross-site.html - http://www.osvdb.org/67895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61724
CVE ID: CVE-2010-3426 State: PUBLISHED Published: 2010-09-16T21:00:00 Last Updated: 2024-08-07T03:11:43.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in jphone.php in the JPhone (com_jphone) component 1.0 Alpha 3 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14964 - http://www.securityfocus.com/bid/43147 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61723 - http://packetstormsecurity.org/1009-exploits/joomlajphone-lfi.txt
CVE ID: CVE-2010-3427 State: PUBLISHED Published: 2010-09-16T21:00:00Z Last Updated: 2024-09-16T17:47:51.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Open Classifieds 1.7.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) desc, (2) price, (3) title, and (4) place parameters to index.php and the (5) subject parameter to contact.htm, related to content/contact.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/67971 - http://pridels-team.blogspot.com/2010/09/open-classifieds-version-1702-xss-vuln.html - http://osvdb.org/67972 - http://www.securityfocus.com/bi
gspot.com/2010/09/open-classifieds-version-1702-xss-vuln.html - http://osvdb.org/67972 - http://www.securityfocus.com/bid/43176 - http://secunia.com/advisories/41386
CVE ID: CVE-2010-3428 State: PUBLISHED Published: 2010-09-16T21:00:00Z Last Updated: 2024-09-16T22:36:20.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modules/notes/json.php in Intermesh Group-Office 3.5.9 allows remote attackers to execute arbitrary SQL commands via the category_id parameter in a category action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43174/exploit - http://www.exploit-db.com/exploits/14988 - http://www.securityfocus.com/bid/43174
CVE ID: CVE-2010-3429 State: PUBLISHED Published: 2010-09-30T14:00:00 Last Updated: 2024-08-07T03:11:44.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset dereference vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:088 - http://www.openwall.com/lists/oss-security/2010/09/28/4 - http://git.ffmpeg.org/?p=ffmpeg%3Ba=commit%3Bh=16c592155f117ccd7b86006c45aacc692a81c23b - http://www.mandriva.com/se
4 - http://git.ffmpeg.org/?p=ffmpeg%3Ba=commit%3Bh=16c592155f117ccd7b86006c45aacc692a81c23b - http://www.mandriva.com/security/advisories?name=MDVSA-2011:061 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:062 - http://www.securityfocus.com/archive/1/514009/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDVSA-2011:112 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:114 - http://secunia.com/advisories/43323 - http://www.ubuntu.com/usn/usn-1104-1/ - http://www.vupen.com/english/advisories/2010/2518 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:089 - http://www.vupen.com/english/advisories/2010/2517 - http://www.debian.org/security/
ity/advisories?name=MDVSA-2011:089 - http://www.vupen.com/english/advisories/2010/2517 - http://www.debian.org/security/2011/dsa-2165 - http://www.vupen.com/english/advisories/2011/1241 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:060 - http://secunia.com/advisories/41626 - https://bugzilla.redhat.com/show_bug.cgi?id=635775 - http://www.ocert.org/advisories/ocert-2010-004.html
CVE ID: CVE-2010-3430 State: PUBLISHED Published: 2011-01-24T17:00:00 Last Updated: 2024-08-07T03:11:44.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: The privilege-dropping implementation in the (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) 1.1.2 does not perform the required setfsgid and setgroups system calls, which might allow local users to obtain sensitive information by leveraging unintended group permissions, as demonstrated by a symlink attack on the .pam_environment file in a user's home directory. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-3435. Additional Analyst Notes: - CVE Program Container: References: - http://ope
ause of an incomplete fix for CVE-2010-3435. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2010/09/27/5 - http://openwall.com/lists/oss-security/2010/09/21/3 - http://security.gentoo.org/glsa/glsa-201206-31.xml - http://openwall.com/lists/oss-security/2010/10/03/1 - http://www.openwall.com/lists/oss-security/2010/09/24/2 - http://openwall.com/lists/oss-security/2010/09/21/9 - http://openwall.com/lists/oss-security/2010/09/21/8 - http://openwall.com/lists/oss-security/2010/09/27/10 - http://git.altlinux.org/people/ldv/packages/?p=pam.git%3Ba=commit%3Bh=843807a3a90f52e7538be756616510730a24739a - http://openwall.com/lists/oss-security/20
/packages/?p=pam.git%3Ba=commit%3Bh=843807a3a90f52e7538be756616510730a24739a - http://openwall.com/lists/oss-security/2010/09/27/4 - http://openwall.com/lists/oss-security/2010/09/21/10 - http://secunia.com/advisories/49711 - https://bugzilla.redhat.com/show_bug.cgi?id=641361 - http://openwall.com/lists/oss-security/2010/09/27/7 - http://openwall.com/lists/oss-security/2010/10/25/2 - http://www.openwall.com/lists/oss-security/2010/09/21/11
CVE ID: CVE-2010-3431 State: PUBLISHED Published: 2011-01-24T17:00:00 Last Updated: 2024-08-07T03:11:44.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: The privilege-dropping implementation in the (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) 1.1.2 does not check the return value of the setfsuid system call, which might allow local users to obtain sensitive information by leveraging an unintended uid, as demonstrated by a symlink attack on the .pam_environment file in a user's home directory. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-3435. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/o
lete fix for CVE-2010-3435. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2010/09/27/5 - http://openwall.com/lists/oss-security/2010/09/21/3 - http://security.gentoo.org/glsa/glsa-201206-31.xml - http://openwall.com/lists/oss-security/2010/10/03/1 - http://www.openwall.com/lists/oss-security/2010/09/24/2 - http://openwall.com/lists/oss-security/2010/09/21/9 - http://openwall.com/lists/oss-security/2010/09/21/8 - http://openwall.com/lists/oss-security/2010/09/27/10 - http://git.altlinux.org/people/ldv/packages/?p=pam.git%3Ba=commit%3Bh=843807a3a90f52e7538be756616510730a24739a - http://openwall.com/lists/oss-security/2010/09/27/4 - http
git%3Ba=commit%3Bh=843807a3a90f52e7538be756616510730a24739a - http://openwall.com/lists/oss-security/2010/09/27/4 - http://openwall.com/lists/oss-security/2010/09/21/10 - http://secunia.com/advisories/49711 - https://bugzilla.redhat.com/show_bug.cgi?id=641361 - http://openwall.com/lists/oss-security/2010/09/27/7 - http://openwall.com/lists/oss-security/2010/10/25/2 - http://www.openwall.com/lists/oss-security/2010/09/21/11
CVE ID: CVE-2010-3432 State: PUBLISHED Published: 2010-11-20T21:00:00 Last Updated: 2024-08-07T03:11:44.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sctp_packet_config function in net/sctp/output.c in the Linux kernel before 2.6.35.6 performs extraneous initializations of packet data structures, which allows remote attackers to cause a denial of service (panic) via a certain sequence of SCTP traffic. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/42789 - http://www.vupen.com/english/advisories/2011/0024 - http://secunia.com/advisories/42778 - http://marc.info/?l=oss-security&m=128534569803598&w=2 - http://www.redhat.com/s
- http://secunia.com/advisories/42778 - http://marc.info/?l=oss-security&m=128534569803598&w=2 - http://www.redhat.com/support/errata/RHSA-2011-0004.html - http://www.ubuntu.com/usn/USN-1000-1 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://www.vupen.com/english/advisories/2010/3113 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html - http://www.redhat.com/support/errata/RHSA-2010-0936.html - http://www.securityfocus.com/bid/43480 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35.6 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://www.redhat.com/support/err
.6.35.6 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://www.redhat.com/support/errata/RHSA-2010-0842.html - http://www.vupen.com/english/advisories/2011/0298 - http://www.redhat.com/support/errata/RHSA-2010-0958.html - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://marc.info/?l=oss-security&m=128537701808336&w=2 - http://www.vupen.com/english/advisories/2011/0012 - https://bugzilla.redhat.com/show_bug.cgi?id=637675 - http://marc.info/?l=linux-netdev&m=128453869227715&w=3 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4bdab43323b459900578b200a4b8cf9713ac8fab - http://secunia.com/advisories/42400 -
t/torvalds/linux-2.6.git%3Ba=commit%3Bh=4bdab43323b459900578b200a4b8cf9713ac8fab - http://secunia.com/advisories/42400 - http://www.debian.org/security/2010/dsa-2126
CVE ID: CVE-2010-3433 State: PUBLISHED Published: 2010-10-06T16:00:00 Last Updated: 2024-08-07T03:11:43.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PL/perl and PL/Tcl implementations in PostgreSQL 7.4 before 7.4.30, 8.0 before 8.0.26, 8.1 before 8.1.22, 8.2 before 8.2.18, 8.3 before 8.3.12, 8.4 before 8.4.5, and 9.0 before 9.0.1 do not properly protect script execution by a different SQL user identity within the same session, which allows remote authenticated users to gain privileges via crafted script code in a SECURITY DEFINER function, as demonstrated by (1) redefining standard functions or (2) redefining operators, a different vulnerability than CVE-2010-1168, CVE
ated by (1) redefining standard functions or (2) redefining operators, a different vulnerability than CVE-2010-1168, CVE-2010-1169, CVE-2010-1170, and CVE-2010-1447. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049592.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7291 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html - http://marc.info/?l=bugtraq&m=134124585221119&w=2 - http://www.ubuntu.com/usn/USN-1002-2 - https://bugzilla.redhat.com/show_bug.cgi?id=639371 - http://lists.fedoraproject.org/pipermail/package-announce/2010-Octobe
tps://bugzilla.redhat.com/show_bug.cgi?id=639371 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049591.html - http://www.vupen.com/english/advisories/2010/3051 - http://www.redhat.com/support/errata/RHSA-2010-0742.html - http://www.postgresql.org/docs/9.0/static/release-9-0-1.html - http://www.ubuntu.com/usn/USN-1002-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:197 - http://secunia.com/advisories/42325 - http://www.redhat.com/support/errata/RHSA-2010-0908.html - http://www.debian.org/security/2010/dsa-2120 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
/InfoCenter/index?page=content&id=JSA10705 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html - http://www.securityfocus.com/bid/43747 - http://marc.info/?l=bugtraq&m=134124585221119&w=2 - http://www.postgresql.org/about/news.1244
CVE ID: CVE-2010-3434 State: PUBLISHED Published: 2010-09-30T14:00:00 Last Updated: 2024-08-07T03:11:43.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the find_stream_bounds function in pdf.c in libclamav in ClamAV before 0.96.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/09/28/5 - http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob_plain%3Bf=ChangeLog%3Bhb=clamav-0.96.3 - http://
2010/09/28/5 - http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob_plain%3Bf=ChangeLog%3Bhb=clamav-0.96.3 - http://www.openwall.com/lists/oss-security/2010/09/27/6 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html - https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2226 - http://www.vupen.com/english/advisories/2010/2455 - http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html - http://security-tracker.debian.org/tracker/CVE-2010-3434 - http://www.openwall.com/lists/oss-security/2010/09/22/1 - http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=commit%3Bh=dc5143b4669ae39c79c9af50d569c28c798f33da - http://www.openwall.com/lists/oss-security/201
lamav-devel.git%3Ba=commit%3Bh=dc5143b4669ae39c79c9af50d569c28c798f33da - http://www.openwall.com/lists/oss-security/2010/09/28/3 - http://support.apple.com/kb/HT4581
CVE ID: CVE-2010-3435 State: PUBLISHED Published: 2011-01-24T17:00:00 Last Updated: 2024-08-07T03:11:44.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) pam_env and (2) pam_mail modules in Linux-PAM (aka pam) before 1.1.2 use root privileges during read access to files and directories that belong to arbitrary user accounts, which might allow local users to obtain sensitive information by leveraging this filesystem activity, as demonstrated by a symlink attack on the .pam_environment file in a user's home directory. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2010/09/27/5 - http://openwall.com/lists/oss-securit
ram Container: References: - http://openwall.com/lists/oss-security/2010/09/27/5 - http://openwall.com/lists/oss-security/2010/09/21/3 - http://security.gentoo.org/glsa/glsa-201206-31.xml - http://lists.vmware.com/pipermail/security-announce/2011/000126.html - http://www.vupen.com/english/advisories/2011/0606 - http://www.securityfocus.com/archive/1/516909/100/0/threaded - http://www.openwall.com/lists/oss-security/2010/09/24/2 - http://openwall.com/lists/oss-security/2010/09/27/10 - http://openwall.com/lists/oss-security/2010/09/27/4 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:220 - http://secunia.com/advisories/49711 - http://git.altlinux.org/people/ldv/packages/?p=pam.gi
sories?name=MDVSA-2010:220 - http://secunia.com/advisories/49711 - http://git.altlinux.org/people/ldv/packages/?p=pam.git%3Ba=commit%3Bh=06f882f30092a39a1db867c9744b2ca8d60e4ad6 - http://openwall.com/lists/oss-security/2010/09/27/7 - http://www.redhat.com/support/errata/RHSA-2010-0891.html - https://bugzilla.redhat.com/show_bug.cgi?id=641335 - http://openwall.com/lists/oss-security/2010/10/25/2 - http://www.redhat.com/support/errata/RHSA-2010-0819.html - http://www.vmware.com/security/advisories/VMSA-2011-0004.html - http://openwall.com/lists/oss-security/2010/09/27/8
CVE ID: CVE-2010-3436 State: PUBLISHED Published: 2010-11-08T23:00:00 Last Updated: 2024-08-07T03:11:44.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: fopen_wrappers.c in PHP 5.3.x through 5.3.3 might allow remote attackers to bypass open_basedir restrictions via vectors related to the length of a filename. Additional Analyst Notes: - CVE Program Container: References: - http://svn.php.net/viewvc?view=revision&revision=303824 - http://www.vupen.com/english/advisories/2011/0077 - http://secunia.com/advisories/42812 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:218 - http://www.php.net/releases/5_3_4.php - http://svn.php.net/viewvc/php/php-src/trunk/main/fopen_
es?name=MDVSA-2010:218 - http://www.php.net/releases/5_3_4.php - http://svn.php.net/viewvc/php/php-src/trunk/main/fopen_wrappers.c?r1=303824&r2=303823&pathrev=303824 - http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html - http://www.ubuntu.com/usn/USN-1042-1 - http://www.securityfocus.com/bid/44723 - http://www.php.net/ChangeLog-5.php - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.490619 - http://www.vupen.com/english/advisories/2010/3313 - http://www.php.net/archive/2010.php#id2010-12-10-1 - http://www.php.net/releases/5_2_15.php - http://support.appl
3313 - http://www.php.net/archive/2010.php#id2010-12-10-1 - http://www.php.net/releases/5_2_15.php - http://support.apple.com/kb/HT5002 - http://secunia.com/advisories/42729 - http://security-tracker.debian.org/tracker/CVE-2010-3436 - http://support.apple.com/kb/HT4581
CVE ID: CVE-2010-3437 State: PUBLISHED Published: 2010-10-04T20:00:00 Last Updated: 2024-08-07T03:11:43.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the pkt_find_dev_from_minor function in drivers/block/pktcdvd.c in the Linux kernel before 2.6.36-rc6 allows local users to obtain sensitive information from kernel memory or cause a denial of service (invalid pointer dereference and system crash) via a crafted index value in a PKT_CTRL_CMD_STATUS ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html - http://secunia.com/advisories/42778 - http://www.ub