Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
5_2/phase3/RELEASE-NOTES - http://secunia.com/advisories/39656 - http://www.debian.org/security/2010/dsa-2022 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-March/000088.html - http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html - http://www.vupen.com/english/advisories/2010/0685 - http://secunia.com/advisories/39022 - http://www.vupen.com/english/advisories/2010/1001
CVE ID: CVE-2010-1191 State: PUBLISHED Published: 2010-03-31T17:35:00 Last Updated: 2024-08-07T01:14:06.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sahana disaster management system 0.6.2.2, and possibly other versions, allows remote attackers to bypass intended access restrictions and disable administrator authentication via a direct request to stream.php in an acl_enable_acl action to the admin module. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/510164/100/0/threaded - http://sourceforge.net/tracker/?func=detail&aid=2970786&group_id=127855&atid=709778 - http://secunia.com/advisories/39020
CVE ID: CVE-2010-1192 State: PUBLISHED Published: 2010-03-31T17:35:00 Last Updated: 2024-08-07T01:14:06.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: libESMTP, probably 1.0.4 and earlier, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/03/09/3 - http://www.vupen.com/english/advisories/2010/1107 - http://lists.op
//www.openwall.com/lists/oss-security/2010/03/09/3 - http://www.vupen.com/english/advisories/2010/1107 - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html - http://www.openwall.com/lists/oss-security/2010/03/03/6
CVE ID: CVE-2010-1193 State: PUBLISHED Published: 2010-04-01T19:00:00 Last Updated: 2024-08-07T01:14:06.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebAccess in VMware Server 2.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to JSON error messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39037 - http://lists.vmware.com/pipermail/security-announce/2010/000086.html - http://www.vmware.com/security/advisories/VMSA-2010-0005.html - http://www.securitytracker.com/id?1023769
CVE ID: CVE-2010-1194 State: PUBLISHED Published: 2010-03-31T17:35:00 Last Updated: 2024-08-07T01:14:06.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: The match_component function in smtp-tls.c in libESMTP 1.0.3.r1, and possibly other versions including 1.0.4, treats two strings as equal if one is a substring of the other, which allows remote attackers to spoof trusted certificates via a crafted subjectAltName. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/03/09/3 - http://www.vupen.com/english/advisories/2010/1107 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=311191 - http://lists.opensuse.org/opensuse-
ish/advisories/2010/1107 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=311191 - http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html - http://www.openwall.com/lists/oss-security/2010/03/03/6
CVE ID: CVE-2010-1195 State: PUBLISHED Published: 2010-03-31T17:35:00Z Last Updated: 2024-09-16T17:59:11.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the htmlscrubber component in ikiwiki 2.x before 2.53.5 and 3.x before 3.20100312 allows remote attackers to inject arbitrary web script or HTML via a crafted data:image/svg+xml URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2010/dsa-2020 - http://secunia.com/advisories/38983 - http://secunia.com/advisories/39048 - http://www.vupen.com/english/advisories/2010/0662 - http://ikiwiki.info/security/#index36h2
CVE ID: CVE-2010-1196 State: PUBLISHED Published: 2010-06-23T18:00:00 Last Updated: 2024-08-07T01:14:06.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a DOM node with a long text value that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40481 - http://ubuntu.com/usn/usn-930-1 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.h
s/40481 - http://ubuntu.com/usn/usn-930-1 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html - http://www.securitytracker.com/id?1024138 - http://www.vupen.com/english/advisories/2010/1640 - http://www.securityfocus.com/bid/41050 - http://www.mozilla.org/security/announce/2010/mfsa2010-29.html - http://www.redhat.com/support/errata/RHSA-2010-0501.html - http://www.vupen.com/english/advisories/2010/1557 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:125 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11424 - http://www.vupen.com/english/advisories/2010/1773 - https://exchange.xforce.ibmcloud.com/vulnerabili
val%3Adef%3A11424 - http://www.vupen.com/english/advisories/2010/1773 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59665 - http://www.vupen.com/english/advisories/2010/1592 - http://www.ubuntu.com/usn/usn-930-2 - https://bugzilla.mozilla.org/show_bug.cgi?id=534666 - http://www.vupen.com/english/advisories/2010/1551 - http://www.redhat.com/support/errata/RHSA-2010-0500.html - http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html - http://secunia.com/advisories/40323 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14017 - http://secunia.com/advisories/40401 - http://lists.fedoraproject.org/pipermail/package-announce/2010-J
l%3Adef%3A14017 - http://secunia.com/advisories/40401 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html - http://secunia.com/advisories/40326 - http://www.securityfocus.com/bid/41087 - http://support.avaya.com/css/P8/documents/100091069 - http://www.securitytracker.com/id?1024139
CVE ID: CVE-2010-1197 State: PUBLISHED Published: 2010-06-23T18:00:00 Last Updated: 2024-08-07T01:14:06.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both "Content-Disposition: attachment" and "Content-Type: multipart" are present in HTTP headers, which allows remote attackers to conduct cross-site scripting (XSS) attacks via an uploaded HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40481 - http://ubuntu.com/usn/usn-930-1 - https://oval.cisecurity.org/repository/search/definition/
cunia.com/advisories/40481 - http://ubuntu.com/usn/usn-930-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14186 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html - http://www.securitytracker.com/id?1024138 - http://www.vupen.com/english/advisories/2010/1640 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10168 - http://www.securityfocus.com/bid/41050 - http://www.redhat.com/support/errata/RHSA-2010-0501.html - http://www.vupen.com/english/advisories/2010/1557 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:125 - http://www.vupen.com/english/advisories/2010/1773 -
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:125 - http://www.vupen.com/english/advisories/2010/1773 - https://bugzilla.mozilla.org/show_bug.cgi?id=537120 - http://www.redhat.com/support/errata/RHSA-2010-0499.html - http://www.vupen.com/english/advisories/2010/1556 - http://www.vupen.com/english/advisories/2010/1592 - http://www.ubuntu.com/usn/usn-930-2 - http://www.securityfocus.com/bid/41103 - http://www.vupen.com/english/advisories/2010/1551 - http://www.redhat.com/support/errata/RHSA-2010-0500.html - http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html - http://secunia.com/advisories/40401 - http://lists.fedoraproject.org/pipermail/package-announce
/2010-07/msg00005.html - http://secunia.com/advisories/40401 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/59667 - http://secunia.com/advisories/40326 - http://www.mozilla.org/security/announce/2010/mfsa2010-32.html - http://support.avaya.com/css/P8/documents/100091069
CVE ID: CVE-2010-1198 State: PUBLISHED Published: 2010-06-23T18:00:00 Last Updated: 2024-08-07T01:14:06.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to execute arbitrary code via vectors involving multiple plugin instances. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40481 - http://ubuntu.com/usn/usn-930-1 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html - http://www.securitytracker.com/id?1024138 - http://www.vupen.com/english/advisories/2010/1640
e/2010-June/043405.html - http://www.securitytracker.com/id?1024138 - http://www.vupen.com/english/advisories/2010/1640 - http://www.securityfocus.com/bid/41050 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59664 - http://www.redhat.com/support/errata/RHSA-2010-0501.html - http://www.vupen.com/english/advisories/2010/1557 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:125 - http://www.vupen.com/english/advisories/2010/1773 - http://www.redhat.com/support/errata/RHSA-2010-0499.html - http://www.vupen.com/english/advisories/2010/1556 - http://www.vupen.com/english/advisories/2010/1592 - http://www.ubuntu.com/usn/usn-930-2 - http://www.vupen.com/english/advisories/2010/1
.com/english/advisories/2010/1592 - http://www.ubuntu.com/usn/usn-930-2 - http://www.vupen.com/english/advisories/2010/1551 - http://www.mozilla.org/security/announce/2010/mfsa2010-28.html - http://www.redhat.com/support/errata/RHSA-2010-0500.html - http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10990 - http://www.securityfocus.com/bid/41102 - http://secunia.com/advisories/40401 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html - https://bugzilla.mozilla.org/show_bug.cgi?id=532246 - http://secunia.com/advisories/40326 - https://oval.cisecurity.o
- https://bugzilla.mozilla.org/show_bug.cgi?id=532246 - http://secunia.com/advisories/40326 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14176 - http://support.avaya.com/css/P8/documents/100091069
CVE ID: CVE-2010-1199 State: PUBLISHED Published: 2010-06-23T18:00:00 Last Updated: 2024-08-07T01:14:06.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/59666 - http://secunia.com/advisories/40481 - http://ubuntu.com/usn/usn-930-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ov
s/40481 - http://ubuntu.com/usn/usn-930-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13287 - http://www.exploit-db.com/exploits/14949 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html - http://www.securitytracker.com/id?1024138 - http://www.vupen.com/english/advisories/2010/1640 - http://www.securityfocus.com/bid/41050 - http://www.redhat.com/support/errata/RHSA-2010-0501.html - http://www.vupen.com/english/advisories/2010/1557 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:125 - http://www.vupen.com/english/advisories/2010/1773 - https://bugzilla.mozilla.org/show_bug.cgi?id=554255 - http://www.redha
tp://www.vupen.com/english/advisories/2010/1773 - https://bugzilla.mozilla.org/show_bug.cgi?id=554255 - http://www.redhat.com/support/errata/RHSA-2010-0499.html - http://www.vupen.com/english/advisories/2010/1556 - http://www.vupen.com/english/advisories/2010/1592 - http://www.ubuntu.com/usn/usn-930-2 - http://www.vupen.com/english/advisories/2010/1551 - http://www.securityfocus.com/bid/41082 - http://www.redhat.com/support/errata/RHSA-2010-0500.html - http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html - http://www.securityfocus.com/archive/1/511972/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-10-113 - https://oval.cisecurity.org/repository/search/
100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-10-113 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10885 - http://secunia.com/advisories/40323 - http://www.mozilla.org/security/announce/2010/mfsa2010-30.html - http://secunia.com/advisories/40401 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html - http://secunia.com/advisories/40326 - http://support.avaya.com/css/P8/documents/100091069 - http://www.securitytracker.com/id?1024139
CVE ID: CVE-2010-1200 State: PUBLISHED Published: 2010-06-23T18:00:00 Last Updated: 2024-08-07T01:14:06.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40481 - http://ubuntu.com/usn/usn-930-1 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/04
isories/40481 - http://ubuntu.com/usn/usn-930-1 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html - http://www.securitytracker.com/id?1024138 - https://bugzilla.mozilla.org/show_bug.cgi?id=553938 - http://www.vupen.com/english/advisories/2010/1640 - https://bugzilla.mozilla.org/show_bug.cgi?id=484890 - http://www.securityfocus.com/bid/41050 - https://bugzilla.mozilla.org/show_bug.cgi?id=551233 - http://www.redhat.com/support/errata/RHSA-2010-0501.html - http://www.vupen.com/english/advisories/2010/1557 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:125 - http://www.vupen.com/english/advisories/2010/1773 - https://bugzilla.mozilla.org/show_bug.cg
ories?name=MDVSA-2010:125 - http://www.vupen.com/english/advisories/2010/1773 - https://bugzilla.mozilla.org/show_bug.cgi?id=551661 - http://www.redhat.com/support/errata/RHSA-2010-0499.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/59659 - http://www.vupen.com/english/advisories/2010/1556 - http://www.vupen.com/english/advisories/2010/1592 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14326 - http://www.securityfocus.com/bid/41090 - http://www.ubuntu.com/usn/usn-930-2 - http://www.vupen.com/english/advisories/2010/1551 - http://www.redhat.com/support/errata/RHSA-2010-0500.html - http://lists.opensuse.org/opensuse-security-announce/2010
1 - http://www.redhat.com/support/errata/RHSA-2010-0500.html - http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html - https://bugzilla.mozilla.org/show_bug.cgi?id=534768 - http://secunia.com/advisories/40323 - https://bugzilla.mozilla.org/show_bug.cgi?id=509839 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10816 - http://secunia.com/advisories/40401 - http://www.mozilla.org/security/announce/2010/mfsa2010-26.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html - https://bugzilla.mozilla.org/show_bug.cgi?id=531176 - http://secunia.com/advisories/40326 - http://support.avaya.com/css/P8/documents/
la.mozilla.org/show_bug.cgi?id=531176 - http://secunia.com/advisories/40326 - http://support.avaya.com/css/P8/documents/100091069 - http://www.securitytracker.com/id?1024139
CVE ID: CVE-2010-1201 State: PUBLISHED Published: 2010-06-23T18:00:00 Last Updated: 2024-08-07T01:14:06.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.10, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40481 - http://ubuntu.com/usn/usn-930-1 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html - http://www.securitytr
/usn/usn-930-1 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html - http://www.securitytracker.com/id?1024138 - http://www.vupen.com/english/advisories/2010/1640 - http://www.securityfocus.com/bid/41050 - http://www.vupen.com/english/advisories/2010/1773 - http://www.vupen.com/english/advisories/2010/1592 - http://www.ubuntu.com/usn/usn-930-2 - http://www.vupen.com/english/advisories/2010/1551 - http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html - https://bugzilla.mozilla.org/show_bug.cgi?id=524921 - http://secunia.com/advisories/40323 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12671 - http:/
advisories/40323 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12671 - http://secunia.com/advisories/40401 - http://www.mozilla.org/security/announce/2010/mfsa2010-26.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html - http://secunia.com/advisories/40326 - http://www.securitytracker.com/id?1024139
CVE ID: CVE-2010-1202 State: PUBLISHED Published: 2010-06-23T18:00:00 Last Updated: 2024-08-07T01:14:06.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40481 - http://ubuntu.com/usn/usn-930-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=561031 - http://lists.
advisories/40481 - http://ubuntu.com/usn/usn-930-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=561031 - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html - http://www.securitytracker.com/id?1024138 - http://www.vupen.com/english/advisories/2010/1640 - http://www.securityfocus.com/bid/41050 - http://www.redhat.com/support/errata/RHSA-2010-0501.html - https://bugzilla.mozilla.org/show_bug.cgi?id=526449 - http://www.vupen.com/english/advisories/2010/1557 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:125 - http://www.vupen.com/english/advisories/2010/1773 - https://bugzilla.mozilla.org/show_bug.cgi?id=424558 - https://exchange.xforce.ibmcloud.com/
glish/advisories/2010/1773 - https://bugzilla.mozilla.org/show_bug.cgi?id=424558 - https://exchange.xforce.ibmcloud.com/vulnerabilities/59661 - http://www.vupen.com/english/advisories/2010/1592 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10889 - http://www.ubuntu.com/usn/usn-930-2 - http://www.vupen.com/english/advisories/2010/1551 - http://www.redhat.com/support/errata/RHSA-2010-0500.html - https://bugzilla.mozilla.org/show_bug.cgi?id=561592 - http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html - http://secunia.com/advisories/40323 - http://www.securityfocus.com/bid/41094 - http://secunia.com/advisories/40401 - https://oval
cunia.com/advisories/40323 - http://www.securityfocus.com/bid/41094 - http://secunia.com/advisories/40401 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14308 - http://www.mozilla.org/security/announce/2010/mfsa2010-26.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html - http://secunia.com/advisories/40326 - http://support.avaya.com/css/P8/documents/100091069 - http://www.securitytracker.com/id?1024139
CVE ID: CVE-2010-1203 State: PUBLISHED Published: 2010-06-23T18:00:00 Last Updated: 2024-08-07T01:14:06.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JavaScript engine in Mozilla Firefox 3.6.x before 3.6.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors that trigger an assertion failure in jstracer.cpp. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40481 - http://ubuntu.com/usn/usn-930-1 - http://www.securitytracker.com/id?1024138 - http://www.vupen.com/english/advisories/2010/1640 - http://www.securityfocus.com/bid/41050 - http:/
ker.com/id?1024138 - http://www.vupen.com/english/advisories/2010/1640 - http://www.securityfocus.com/bid/41050 - http://www.redhat.com/support/errata/RHSA-2010-0501.html - http://www.vupen.com/english/advisories/2010/1557 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:125 - http://www.vupen.com/english/advisories/2010/1773 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10401 - https://bugzilla.mozilla.org/show_bug.cgi?id=557946 - http://www.securityfocus.com/bid/41099 - http://www.ubuntu.com/usn/usn-930-2 - http://www.vupen.com/english/advisories/2010/1551 - http://www.redhat.com/support/errata/RHSA-2010-0500.html - http://lists.opens
w.vupen.com/english/advisories/2010/1551 - http://www.redhat.com/support/errata/RHSA-2010-0500.html - http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/59662 - http://secunia.com/advisories/40323 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8317 - http://secunia.com/advisories/40401 - http://www.mozilla.org/security/announce/2010/mfsa2010-26.html - http://secunia.com/advisories/40326 - http://support.avaya.com/css/P8/documents/100091069 - http://www.securitytracker.com/id?1024139 - https://bugzilla.mozilla.org/show_bug.cgi?id=546611
CVE ID: CVE-2010-1204 State: PUBLISHED Published: 2010-06-28T17:00:00Z Last Updated: 2024-09-16T20:01:48.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Search.pm in Bugzilla 2.17.1 through 3.2.6, 3.3.1 through 3.4.6, 3.5.1 through 3.6, and 3.7 allows remote attackers to obtain potentially sensitive time-tracking information via a crafted search URL, related to a "boolean chart search." Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=309952 - http://www.securityfocus.com/bid/41141 - http://www.bugzilla.org/security/3.2.6/ - http://secunia.com/advisories/40300 - http://www.vupen.com/english/advisories/2010/1595