Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ploits/15473 - http://www.securityfocus.com/archive/1/514688/100/0/threaded - http://www.securityfocus.com/bid/44740 - http://security.fatihkilic.de/advisory/fkilic-sa-2010-ibm-omnifind.txt - http://www.vupen.com/english/advisories/2010/2933
CVE ID: CVE-2010-3892 State: PUBLISHED Published: 2010-11-12T21:00:00 Last Updated: 2024-08-07T03:26:12.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in the login form in the administrator interface in IBM OmniFind Enterprise Edition 8.x and 9.x allows remote attackers to hijack web sessions by replaying a session ID (aka SID) value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/514688/100/0/threaded - http://www.securityfocus.com/bid/44740 - http://security.fatihkilic.de/advisory/fkilic-sa-2010-ibm-omnifind.txt - http://www.vupen.com/english/advisories/2010/2933
CVE ID: CVE-2010-3893 State: PUBLISHED Published: 2010-11-12T21:00:00 Last Updated: 2024-08-07T03:26:12.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrator interface in IBM OmniFind Enterprise Edition 8.x and 9.x does not restrict use of a session ID (aka SID) value to a single IP address, which allows remote attackers to perform arbitrary administrative actions by leveraging cookie theft, related to a "session impersonation" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/514688/100/0/threaded - http://www.securityfocus.com/bid/44740 - http://security.fatihkilic.de/advisory/fkilic-sa-2010-ibm-omnifi
0/0/threaded - http://www.securityfocus.com/bid/44740 - http://security.fatihkilic.de/advisory/fkilic-sa-2010-ibm-omnifind.txt - http://www.vupen.com/english/advisories/2010/2933
CVE ID: CVE-2010-3894 State: PUBLISHED Published: 2010-11-12T21:00:00 Last Updated: 2024-08-07T03:26:12.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Java_com_ibm_es_oss_CryptionNative_ESEncrypt function in /opt/IBM/es/lib/libffq.cryptionjni.so in the login form in the administration interface in IBM OmniFind Enterprise Edition before 8.5 FP6 allows remote attackers to execute arbitrary code via a long password. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/15474 - http://www.securityfocus.com/archive/1/514688/100/0/threaded - http://www.securityfocus.com/bid/44740 - http://security.fat
p://www.securityfocus.com/archive/1/514688/100/0/threaded - http://www.securityfocus.com/bid/44740 - http://security.fatihkilic.de/advisory/fkilic-sa-2010-ibm-omnifind.txt - http://www.vupen.com/english/advisories/2010/2933 - http://www.osvdb.org/69079
CVE ID: CVE-2010-3895 State: PUBLISHED Published: 2010-11-12T21:00:00 Last Updated: 2024-08-07T03:26:12.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: esRunCommand in IBM OmniFind Enterprise Edition before 9.1 allows local users to gain privileges by specifying an arbitrary command name as the first argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/514688/100/0/threaded - http://www.exploit-db.com/exploits/15475 - http://www.securityfocus.com/bid/44740 - http://security.fatihkilic.de/advisory/fkilic-sa-2010-ibm-omnifind.txt - http://www.vupen.com/english/advisories/2010/2933
CVE ID: CVE-2010-3896 State: PUBLISHED Published: 2010-11-12T21:00:00 Last Updated: 2024-08-07T03:26:12.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ESSearchApplication directory tree in IBM OmniFind Enterprise Edition 8.x and 9.x does not require authentication, which allows remote attackers to modify the server configuration via a request to palette.do. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/514688/100/0/threaded - http://www.securityfocus.com/bid/44740 - http://security.fatihkilic.de/advisory/fkilic-sa-2010-ibm-omnifind.txt - http://www.vupen.com/english/advisories/2010/2933
CVE ID: CVE-2010-3897 State: PUBLISHED Published: 2010-11-12T21:00:00 Last Updated: 2024-08-07T03:26:12.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: ESSearchApplication/palette.do in IBM OmniFind Enterprise Edition 8.x and 9.x includes the administrator password in the HTML source code, which might allow remote attackers to obtain sensitive information by leveraging read access to this file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/514688/100/0/threaded - http://www.securityfocus.com/bid/44740 - http://security.fatihkilic.de/advisory/fkilic-sa-2010-ibm-omnifind.txt - http://www.vupen.com/english/advisories/2010
- http://security.fatihkilic.de/advisory/fkilic-sa-2010-ibm-omnifind.txt - http://www.vupen.com/english/advisories/2010/2933
CVE ID: CVE-2010-3898 State: PUBLISHED Published: 2010-11-12T21:00:00 Last Updated: 2024-08-07T03:26:11.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM OmniFind Enterprise Edition 8.x and 9.x does not properly restrict the cookie path of administrator (aka ESAdmin) cookies, which might allow remote attackers to bypass authentication by leveraging access to other pages on the web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/514688/100/0/threaded - http://www.securityfocus.com/bid/44740 - http://security.fatihkilic.de/advisory/fkilic-sa-2010-ibm-omnifind.txt - http://www.vupen.com/english/advisories/2010/2933
CVE ID: CVE-2010-3899 State: PUBLISHED Published: 2010-11-12T21:00:00 Last Updated: 2024-08-07T03:26:12.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM OmniFind Enterprise Edition 8.x and 9.x performs web crawls with an unlimited recursion depth, which allows remote web servers to cause a denial of service (infinite loop) via a crafted series of documents. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/69078 - http://www.exploit-db.com/exploits/15476 - http://www.securityfocus.com/archive/1/514688/100/0/threaded - http://www.securityfocus.com/bid/44740 - http://security.fatihkilic.de/advisory/fkilic-sa-2010-ibm-omnifind.txt - http://
ttp://www.securityfocus.com/bid/44740 - http://security.fatihkilic.de/advisory/fkilic-sa-2010-ibm-omnifind.txt - http://www.vupen.com/english/advisories/2010/2933
CVE ID: CVE-2010-3900 State: PUBLISHED Published: 2010-10-12T21:00:00 Last Updated: 2024-08-07T03:26:11.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Midori before 0.2.5, when WebKitGTK+ before 1.1.14 or LibSoup before 2.29.91 is used, does not verify X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted server certificate, a related issue to CVE-2010-3312. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://www.twotoasts.de/bugs/index.php?do=details&task_id=168 - http://www.vupen.com/english/advisories/2011/0212 - http://www.omgubuntu.co.uk/2010/05/midori-0-2-5
etails&task_id=168 - http://www.vupen.com/english/advisories/2011/0212 - http://www.omgubuntu.co.uk/2010/05/midori-0-2-5-released/ - http://git.xfce.org/apps/midori/tree/ChangeLog - http://www.twotoasts.de/index.php?/archives/30-Validation%2C-vending-and-Vala.html - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://www.openwall.com/lists/oss-security/2010/09/17/6 - http://www.twotoasts.de/bugs/index.php?do=details&task_id=743
CVE ID: CVE-2010-3901 State: PUBLISHED Published: 2010-10-12T21:00:00Z Last Updated: 2024-09-16T16:13:52.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenConnect before 2.25 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary AnyConnect SSL VPN servers via a crafted server certificate that (1) does not correspond to the server hostname or (2) is presented in circumstances involving a missing --cafile configuration option. Additional Analyst Notes: - CVE Program Container: References: - http://www.infradead.org/openconnect.html - http://www.openwall.com/lists/oss-security/2010/08/01/1 - http://www.openwall.com/lists/oss
adead.org/openconnect.html - http://www.openwall.com/lists/oss-security/2010/08/01/1 - http://www.openwall.com/lists/oss-security/2010/08/02/7
CVE ID: CVE-2010-3902 State: PUBLISHED Published: 2010-10-12T21:00:00 Last Updated: 2024-08-07T03:26:11.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenConnect before 2.26 places the webvpn cookie value in the debugging output, which might allow remote attackers to obtain sensitive information by reading this output, as demonstrated by output posted to the public openconnect-devel mailing list. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051637.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051640.html - http://lists.fedoraproject.org/pipermail/pack
s.fedoraproject.org/pipermail/package-announce/2010-November/051640.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051620.html - http://www.vupen.com/english/advisories/2010/3078 - http://www.securityfocus.com/bid/44111 - http://www.infradead.org/openconnect.html - http://secunia.com/advisories/42381
CVE ID: CVE-2010-3903 State: PUBLISHED Published: 2010-10-12T21:00:00Z Last Updated: 2024-09-17T04:09:40.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in OpenConnect before 2.23 allows remote AnyConnect SSL VPN servers to cause a denial of service (application crash) via a 404 HTTP status code. Additional Analyst Notes: - CVE Program Container: References: - http://www.infradead.org/openconnect.html
CVE ID: CVE-2010-3904 State: PUBLISHED Published: 2010-12-06T20:00:00.000Z Last Updated: 2025-10-22T00:05:50.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.kb.cert.org/vuls/id/362983 - http://www.vsecurity.com/download/tools/linux-rds-exploit.c - http://www.ubuntu.com/us
/www.kb.cert.org/vuls/id/362983 - http://www.vsecurity.com/download/tools/linux-rds-exploit.c - http://www.ubuntu.com/usn/USN-1000-1 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=799c10559d60f159ab2232203f222f18fa3c4a5f - https://www.exploit-db.com/exploits/44677/ - http://securitytracker.com/id?1024613 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://www.redhat.com/support/errata/RHSA-2010-0842.html - http://www.vupen.com/english/advisories/2011/0298 - https://bugzilla.redhat.com/show_bug.cgi?id=642896 - http://lists.op
http://www.vupen.com/english/advisories/2011/0298 - https://bugzilla.redhat.com/show_bug.cgi?id=642896 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00004.html - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36 - http://www.vsecurity.com/resources/advisory/20101019-1/ - http://www.redhat.com/support/errata/RHSA-2010-0792.html - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00008.html - http://packetstormsecurity.com/files/155751/vReliable-Datagram-Sockets-RDS-rds_page_copy_user-Privilege-Escalation.html
CVE ID: CVE-2010-3905 State: PUBLISHED Published: 2010-12-22T20:00:00 Last Updated: 2024-08-07T03:26:12.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: The password reset feature in the administrator interface for Eucalyptus 2.0.0 and 2.0.1 does not perform authentication, which allows remote attackers to gain privileges by sending password reset requests for other users. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45462 - http://www.ubuntu.com/usn/USN-1033-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64167 - http://secunia.com/advisories/42666 - http://www.vupen.com/english/advisories/2010/3260 - http://secuni
bilities/64167 - http://secunia.com/advisories/42666 - http://www.vupen.com/english/advisories/2010/3260 - http://secunia.com/advisories/42632 - http://open.eucalyptus.com/wiki/esa-01 - http://www.vupen.com/english/advisories/2010/3259
CVE ID: CVE-2010-3906 State: PUBLISHED Published: 2010-12-17T18:00:00 Last Updated: 2024-08-07T03:26:12.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) f and (2) fp parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43457 - http://secunia.com/advisories/42645 - http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052518.html - http://secunia.com/advisories/42731 - http://www.vupen.com/english/advisories/2010/3323 - http://www.redhat.com/support/errata/RHSA-20
.com/advisories/42731 - http://www.vupen.com/english/advisories/2010/3323 - http://www.redhat.com/support/errata/RHSA-2010-1003.html - http://www.vupen.com/english/advisories/2011/0010 - http://secunia.com/advisories/42743 - http://www.exploit-db.com/exploits/15744 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:256 - http://www.securitytracker.com/id?1024905 - http://www.securityfocus.com/bid/45439 - http://www.vupen.com/english/advisories/2011/0464 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052782.html
CVE ID: CVE-2010-3907 State: PUBLISHED Published: 2011-01-03T19:26:00 Last Updated: 2024-08-07T03:26:12.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in real.c in the Real demuxer plugin in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a zero i_subpackets value in a Real Media file, leading to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=6568965770f906d34d4aef83237842a5376adb55 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.
mmit%3Bh=6568965770f906d34d4aef83237842a5376adb55 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13950 - http://www.vupen.com/english/advisories/2010/3345 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64461 - http://www.securityfocus.com/bid/45632 - http://www.videolan.org/security/sa1007.html - http://www.cs.brown.edu/people/drosenbe/research.html
CVE ID: CVE-2010-3908 State: PUBLISHED Published: 2011-05-20T22:00:00 Last Updated: 2024-08-07T03:26:12.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a malformed WMV file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2011/dsa-2306 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:061 - http://www.ubuntu.com/usn/usn-1104-1/ - http://ffmpeg.mplayerhq.hu/
CVE ID: CVE-2010-3909 State: PUBLISHED Published: 2010-11-26T19:00:00 Last Updated: 2024-08-07T03:26:12.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in config.template.php in vtiger CRM before 5.2.1 allows remote authenticated users to execute arbitrary code by using the draft save feature in the Compose Mail component to upload a file with a .phtml extension, and then accessing this file via a direct request to the file in the storage/ directory tree. Additional Analyst Notes: - CVE Program Container: References: - http://www.ush.it/team/ush/hack-vtigercrm_520/vtigercrm_520.txt - http://vtiger.com/blogs/2010/11/16/vtiger-crm-521-is-relea
://www.ush.it/team/ush/hack-vtigercrm_520/vtigercrm_520.txt - http://vtiger.com/blogs/2010/11/16/vtiger-crm-521-is-released/ - http://secunia.com/advisories/42246 - http://wiki.vtiger.com/index.php/Vtiger521:Release_Notes - http://www.securityfocus.com/archive/1/514846/100/0/threaded
CVE ID: CVE-2010-3910 State: PUBLISHED Published: 2010-11-26T19:00:00 Last Updated: 2024-08-07T03:26:12.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in the return_application_language function in include/utils/utils.php in vtiger CRM before 5.2.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the lang_crm parameter to phprint.php or (2) the current_language parameter in an Accounts Import action to graph.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.ush.it/team/ush/hack-vtigercrm_520/vtigercrm_520.txt - http://vtiger.com/blogs/2010/11/16/vtiger-crm
ences: - http://www.ush.it/team/ush/hack-vtigercrm_520/vtigercrm_520.txt - http://vtiger.com/blogs/2010/11/16/vtiger-crm-521-is-released/ - http://secunia.com/advisories/42246 - http://wiki.vtiger.com/index.php/Vtiger521:Release_Notes - http://www.securityfocus.com/archive/1/514846/100/0/threaded
CVE ID: CVE-2010-3911 State: PUBLISHED Published: 2010-11-26T19:00:00 Last Updated: 2024-08-07T03:26:12.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in vtiger CRM before 5.2.1 allow remote attackers to inject arbitrary web script or HTML via (1) the username (aka default_user_name) field or (2) the password field in a Users Login action to index.php, or (3) the label parameter in a Settings GetFieldInfo action to index.php, related to modules/Settings/GetFieldInfo.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.ush.it/team/ush/hack-vtigercrm_520/vtigercrm_520.txt - http://vtiger.com/blogs/
gram Container: References: - http://www.ush.it/team/ush/hack-vtigercrm_520/vtigercrm_520.txt - http://vtiger.com/blogs/2010/11/16/vtiger-crm-521-is-released/ - http://secunia.com/advisories/42246 - http://wiki.vtiger.com/index.php/Vtiger521:Release_Notes - http://www.securityfocus.com/archive/1/514846/100/0/threaded
CVE ID: CVE-2010-3912 State: PUBLISHED Published: 2011-01-12T23:00:00 Last Updated: 2024-08-07T03:26:12.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: The supportconfig script in supportutils in SUSE Linux Enterprise 11 SP1 and 10 SP3 does not "disguise passwords" in configuration files, which has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/64690 - http://secunia.com/advisories/42877 - http://osvdb.org/70405 - http://www.vupen.com/english/advisories/2011/0076
CVE ID: CVE-2010-3913 State: PUBLISHED Published: 2010-11-05T16:28:00Z Last Updated: 2024-09-17T02:57:52.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in TransWARE Active! mail 6 build 6.40.010047750 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/68943 - http://secunia.com/advisories/42039 - http://jvn.jp/en/jp/JVN72541530/index.html - http://www.transware.co.jp/security/am0610001.html - http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000050.html
CVE ID: CVE-2010-3914 State: PUBLISHED Published: 2010-11-03T01:00:00Z Last Updated: 2024-09-16T16:49:08.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in VIM Development Group GVim before 7.3.034, and possibly other versions before 7.3.46, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse User32.dll or other DLL that is located in the same folder as a .TXT file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44588 - ftp://ftp.vim.org/pub/vi
Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44588 - ftp://ftp.vim.org/pub/vim/patches/7.3/7.3.034 - http://secunia.com/advisories/42084 - http://jvn.jp/en/jp/JVN27868039/index.html - http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000051.html
CVE ID: CVE-2010-3915 State: PUBLISHED Published: 2010-11-05T22:00:00 Last Updated: 2024-08-07T03:26:12.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in JustSystems Ichitaro and Ichitaro Government allows remote attackers to execute arbitrary code via a crafted document, a different vulnerability than CVE-2010-3916. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000052.html - http://secunia.com/advisories/42099 - http://www.ipa.go.jp/about/press/20101104_2.html - http://jvn.jp/en/jp/JVN19173793/index.html - http://www.securityfocus.com/bid/44637 - https://exchange.xforce.ibmcloud.com
tp://jvn.jp/en/jp/JVN19173793/index.html - http://www.securityfocus.com/bid/44637 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62997 - http://www.symantec.com/connect/blogs/new-ichitaro-vulnerability-confirmed - http://osvdb.org/69020 - http://www.justsystems.com/jp/info/js10003.html - http://www.vupen.com/english/advisories/2010/2885
CVE ID: CVE-2010-3916 State: PUBLISHED Published: 2010-11-05T22:00:00 Last Updated: 2024-08-07T03:26:12.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in JustSystems Ichitaro and Ichitaro Government allows remote attackers to execute arbitrary code via a crafted document, a different vulnerability than CVE-2010-3915. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN01948274/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/62998 - http://secunia.com/advisories/42099 - http://www.ipa.go.jp/about/press/20101104_2.html - http://www.securityfocus.com/bid/44637 - http://osvdb.org/69021 - http://www.j
w.ipa.go.jp/about/press/20101104_2.html - http://www.securityfocus.com/bid/44637 - http://osvdb.org/69021 - http://www.justsystems.com/jp/info/js10003.html - http://www.vupen.com/english/advisories/2010/2885 - http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000053.html
CVE ID: CVE-2010-3917 State: PUBLISHED Published: 2020-02-06T12:52:24 Last Updated: 2024-08-07T03:26:12.227Z Vendors: Google Products: Chrome Problem Types: Other Description: Google Chrome before 3.0 does not properly handle XML documents, which allows remote attackers to obtain sensitive information via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN36765384/index.html - http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000056.html