Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-3678 State: PUBLISHED Published: 2011-01-11T19:00:00 Last Updated: 2024-08-07T03:18:52.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (crash) via (1) IN or (2) CASE operations with NULL arguments that are explicitly specified or indirectly provided by the WITH ROLLUP modifier. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.mysql.com/bug.php?id=54477 - http://www.ubuntu.com/usn/USN-1397-1 - http://www.securityfocus.com/bid/42596 - http://www.ubuntu.com/usn/USN-1017-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:012 - htt
bid/42596 - http://www.ubuntu.com/usn/USN-1017-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:012 - http://www.redhat.com/support/errata/RHSA-2011-0164.html - http://www.vupen.com/english/advisories/2011/0170 - http://www.vupen.com/english/advisories/2011/0133 - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:155 - http://secunia.com/advisories/42936 - https://bugzilla.redhat.com/show_bug.cgi?id=628172 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html - http://www.openwall.com/lists/oss-security/2010/09/28/10
CVE ID: CVE-2010-3679 State: PUBLISHED Published: 2011-01-11T19:00:00 Last Updated: 2024-08-07T03:18:52.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments to the BINLOG command, which triggers an access of uninitialized memory, as demonstrated by valgrind. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1397-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64687 - http://www.ubuntu.com/usn/USN-1017-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:012 - http://www.redhat.com/
www.ubuntu.com/usn/USN-1017-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:012 - http://www.redhat.com/support/errata/RHSA-2011-0164.html - http://www.vupen.com/english/advisories/2011/0170 - http://www.securityfocus.com/bid/42638 - http://www.vupen.com/english/advisories/2011/0133 - http://bugs.mysql.com/bug.php?id=54393 - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:155 - https://bugzilla.redhat.com/show_bug.cgi?id=628062 - http://secunia.com/advisories/42936 - http://www.openwall.com/lists/oss-security/2010/09/28/10
CVE ID: CVE-2010-3680 State: PUBLISHED Published: 2011-01-11T19:00:00 Last Updated: 2024-08-07T03:18:52.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by creating temporary tables with nullable columns while using InnoDB, which triggers an assertion failure. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1397-1 - http://www.securityfocus.com/bid/42598 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64686 - http://secunia.com/advisories/42875 - http://www.ubuntu.com/usn/USN-1017-1 - http://www.turbolinux.co.
abilities/64686 - http://secunia.com/advisories/42875 - http://www.ubuntu.com/usn/USN-1017-1 - http://www.turbolinux.co.jp/security/2011/TLSA-2011-3j.txt - http://www.mandriva.com/security/advisories?name=MDVSA-2011:012 - https://bugzilla.redhat.com/show_bug.cgi?id=628192 - http://www.vupen.com/english/advisories/2011/0105 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:222 - http://www.redhat.com/support/errata/RHSA-2011-0164.html - http://www.vupen.com/english/advisories/2011/0170 - http://www.vupen.com/english/advisories/2011/0133 - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.html - http://www.debian.org/security/2011/dsa-2143 - http://www.vupen.com/english/advisories
/refman/5.1/en/news-5-1-49.html - http://www.debian.org/security/2011/dsa-2143 - http://www.vupen.com/english/advisories/2011/0345 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:155 - http://secunia.com/advisories/42936 - http://bugs.mysql.com/bug.php?id=54044 - http://www.redhat.com/support/errata/RHSA-2010-0825.html - http://www.openwall.com/lists/oss-security/2010/09/28/10
CVE ID: CVE-2010-3681 State: PUBLISHED Published: 2011-01-11T19:00:00 Last Updated: 2024-08-07T03:18:52.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using the HANDLER interface and performing "alternate reads from two indexes on a table," which triggers an assertion failure. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=628680 - http://www.ubuntu.com/usn/USN-1397-1 - http://secunia.com/advisories/42875 - http://www.redhat.com/support/errata/RHSA-2010-0824.html - http://www.
SN-1397-1 - http://secunia.com/advisories/42875 - http://www.redhat.com/support/errata/RHSA-2010-0824.html - http://www.ubuntu.com/usn/USN-1017-1 - http://www.turbolinux.co.jp/security/2011/TLSA-2011-3j.txt - http://dev.mysql.com/doc/refman/5.5/en/news-5-5-5.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:012 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64685 - http://www.vupen.com/english/advisories/2011/0105 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:222 - http://www.redhat.com/support/errata/RHSA-2011-0164.html - http://www.vupen.com/english/advisories/2011/0170 - http://www.vupen.com/english/advisories/2011/0133 - http://dev.mysql.com/doc/r
.vupen.com/english/advisories/2011/0170 - http://www.vupen.com/english/advisories/2011/0133 - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.html - http://bugs.mysql.com/bug.php?id=54007 - http://www.debian.org/security/2011/dsa-2143 - http://www.vupen.com/english/advisories/2011/0345 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:155 - http://secunia.com/advisories/42936 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html - http://www.redhat.com/support/errata/RHSA-2010-0825.html - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html - http://www.securityfocus.com/bid/42633 - http://www.openwall.com/lists/oss-security/2010/09
unce/2010-10/msg00006.html - http://www.securityfocus.com/bid/42633 - http://www.openwall.com/lists/oss-security/2010/09/28/10
CVE ID: CVE-2010-3682 State: PUBLISHED Published: 2011-01-11T19:00:00 Last Updated: 2024-08-07T03:18:52.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using EXPLAIN with crafted "SELECT ... UNION ... ORDER BY (SELECT ... WHERE ...)" statements, which triggers a NULL pointer dereference in the Item_singlerow_subselect::store function. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1397-1 - http://support.apple.com/kb/HT4723 - http://secunia.com/advisories/42875 - http://www.ubuntu.com/usn/U
/usn/USN-1397-1 - http://support.apple.com/kb/HT4723 - http://secunia.com/advisories/42875 - http://www.ubuntu.com/usn/USN-1017-1 - http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - http://www.turbolinux.co.jp/security/2011/TLSA-2011-3j.txt - http://www.mandriva.com/security/advisories?name=MDVSA-2011:012 - http://www.vupen.com/english/advisories/2011/0105 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:222 - http://www.redhat.com/support/errata/RHSA-2011-0164.html - http://www.vupen.com/english/advisories/2011/0170 - http://www.vupen.com/english/advisories/2011/0133 - http://dev.mysql.com/doc/refman/5.0/en/news-5-0-92.html - http://dev.mysql.com/doc/r
.com/english/advisories/2011/0133 - http://dev.mysql.com/doc/refman/5.0/en/news-5-0-92.html - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.html - http://www.debian.org/security/2011/dsa-2143 - https://exchange.xforce.ibmcloud.com/vulnerabilities/64684 - http://www.vupen.com/english/advisories/2011/0345 - http://www.securityfocus.com/bid/42599 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:155 - http://bugs.mysql.com/bug.php?id=52711 - http://secunia.com/advisories/42936 - https://bugzilla.redhat.com/show_bug.cgi?id=628328 - http://www.redhat.com/support/errata/RHSA-2010-0825.html - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html - http://www.op
/errata/RHSA-2010-0825.html - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html - http://www.openwall.com/lists/oss-security/2010/09/28/10
CVE ID: CVE-2010-3683 State: PUBLISHED Published: 2011-01-11T19:00:00 Last Updated: 2024-08-07T03:18:52.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1397-1 - http://www.ubuntu.com/usn/USN-1017-1 - http://dev.mysql.com/doc/refman/5.5/en/news-5-5-5.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:012 - http://bugs.mysql.com/bug.p
n/5.5/en/news-5-5-5.html - http://www.mandriva.com/security/advisories?name=MDVSA-2011:012 - http://bugs.mysql.com/bug.php?id=52512 - http://www.redhat.com/support/errata/RHSA-2011-0164.html - http://www.vupen.com/english/advisories/2011/0170 - http://www.vupen.com/english/advisories/2011/0133 - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:155 - http://secunia.com/advisories/42936 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html - https://bugzilla.redhat.com/show_bug.cgi?id=628698 - http://www.securityfocus.com/bid/42625 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.
628698 - http://www.securityfocus.com/bid/42625 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/64683 - http://www.openwall.com/lists/oss-security/2010/09/28/10
CVE ID: CVE-2010-3684 State: PUBLISHED Published: 2010-09-29T16:00:00 Last Updated: 2024-08-07T03:18:52.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FTP authentication module in Synology Disk Station 2.x logs passwords to the web application interface in cases of incorrect login attempts, which allows local users to obtain sensitive information by reading a log, a different vulnerability than CVE-2010-2453. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/513970/100/0/threaded
CVE ID: CVE-2010-3685 State: PUBLISHED Published: 2010-09-29T16:00:00Z Last Updated: 2024-09-16T23:40:40.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not checking for reuse of openid.response_nonce values, which allows remote attackers to bypass authentication by leveraging an assertion from an OpenID provider. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/880480 - http://www.debian.org/security/2010/dsa-2113 - http://marc.info/?l=oss-security&m=128440896914512&w=2 - http://www.securityfocus.com/bid/
.org/security/2010/dsa-2113 - http://marc.info/?l=oss-security&m=128440896914512&w=2 - http://www.securityfocus.com/bid/42388 - http://drupal.org/node/880476 - http://marc.info/?l=oss-security&m=128418560705305&w=2
CVE ID: CVE-2010-3686 State: PUBLISHED Published: 2010-09-29T16:00:00Z Last Updated: 2024-09-16T20:41:42.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not ensuring that fields are signed, which allows remote attackers to bypass authentication by leveraging an assertion from an OpenID provider. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/880480 - http://www.debian.org/security/2010/dsa-2113 - http://marc.info/?l=oss-security&m=128440896914512&w=2 - http://www.securityfocus.com/bid/42388 - http://drup
dsa-2113 - http://marc.info/?l=oss-security&m=128440896914512&w=2 - http://www.securityfocus.com/bid/42388 - http://drupal.org/node/880476 - http://marc.info/?l=oss-security&m=128418560705305&w=2
CVE ID: CVE-2010-3687 State: PUBLISHED Published: 2010-09-29T16:00:00Z Last Updated: 2024-09-17T04:09:31.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to bypass validation have an unspecified impact by "[injecting] arbitrary values into validated fields," as demonstrated using the (1) Email and (2) URL fields. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-019 - http://typo3.org/extensions/repository/view/powermail/1.5.4 - http://secunia.com/advisories/41530
CVE ID: CVE-2010-3688 State: PUBLISHED Published: 2010-09-29T16:00:00Z Last Updated: 2024-09-16T16:53:07.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ADMIN/login.php in NetArtMEDIA WebSiteAdmin allows remote emote attackers to include and execute arbitrary local files via directory traversal sequences in the lng parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels-team.blogspot.com/2010/09/netartmedia-real-estate-portal-v20-xss.html
CVE ID: CVE-2010-3689 State: PUBLISHED Published: 2011-01-28T21:13:00 Last Updated: 2024-08-07T03:18:52.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: soffice in OpenOffice.org (OOo) 3.x before 3.3 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/40775 - http://www.securityfocus.com/bid/46031 - http://www.debian.org/security/2011/dsa-2151 - http://secunia.com/advisories/60799 - http://www.openoffice.org/security/cves/CVE-2010-3689.html - http://www.oracle.com/t
tp://secunia.com/advisories/60799 - http://www.openoffice.org/security/cves/CVE-2010-3689.html - http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html - http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml - http://secunia.com/advisories/43065 - http://www.securitytracker.com/id?1025004 - http://www.vupen.com/english/advisories/2011/0230 - http://www.vupen.com/english/advisories/2011/0232 - http://www.redhat.com/support/errata/RHSA-2011-0182.html - http://ubuntu.com/usn/usn-1056-1 - http://www.vupen.com/english/advisories/2011/0279 - https://bugzilla.redhat.com/show_bug.cgi?id=641224 - http://secunia.com/advisories/43105 - http://osvdb.org/70716 - http://www.mandriva.
.redhat.com/show_bug.cgi?id=641224 - http://secunia.com/advisories/43105 - http://osvdb.org/70716 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:027 - http://secunia.com/advisories/42999
CVE ID: CVE-2010-3690 State: PUBLISHED Published: 2010-10-07T20:21:00 Last Updated: 2024-08-07T03:18:52.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpCAS before 1.1.3, when proxy mode is enabled, allow remote attackers to inject arbitrary web script or HTML via (1) a crafted Proxy Granting Ticket IOU (PGTiou) parameter to the callback function in client.php, (2) vectors involving functions that make getCallbackURL calls, or (3) vectors involving functions that make getURL calls. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495542#82 - http://www.deb
otes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495542#82 - http://www.debian.org/security/2011/dsa-2172 - https://issues.jasig.org/browse/PHPCAS-80 - http://www.vupen.com/english/advisories/2011/0456 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049600.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049602.html - http://www.vupen.com/english/advisories/2010/2909 - http://www.securityfocus.com/bid/43585 - http://secunia.com/advisories/42149 - https://forge.indepnet.net/projects/glpi/repository/revisions/12601 - http://www.vupen.com/english/advisories/2010/2705 - http://secunia.com/advisorie
jects/glpi/repository/revisions/12601 - http://www.vupen.com/english/advisories/2010/2705 - http://secunia.com/advisories/43427 - http://www.openwall.com/lists/oss-security/2010/09/29/6 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050428.html - https://developer.jasig.org/source/changelog/jasigsvn?cs=21538 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050415.html - http://secunia.com/advisories/41878 - http://www.openwall.com/lists/oss-security/2010/10/01/5 - http://www.openwall.com/lists/oss-security/2010/10/01/2 - http://secunia.com/advisories/42184
CVE ID: CVE-2010-3691 State: PUBLISHED Published: 2010-10-07T20:21:00 Last Updated: 2024-08-07T03:18:53.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: PGTStorage/pgt-file.php in phpCAS before 1.1.3, when proxy mode is enabled, allows local users to overwrite arbitrary files via a symlink attack on an unspecified file. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495542#82 - http://www.debian.org/security/2011/dsa-2172 - https://issues.jasig.org/browse/PHPCAS-80 - http://www.vupen.com/english/advisories/2011/0456 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049600.html - http://li
sh/advisories/2011/0456 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049600.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049602.html - http://www.vupen.com/english/advisories/2010/2909 - http://www.securityfocus.com/bid/43585 - http://secunia.com/advisories/42149 - https://forge.indepnet.net/projects/glpi/repository/revisions/12601 - http://www.vupen.com/english/advisories/2010/2705 - http://secunia.com/advisories/43427 - http://www.openwall.com/lists/oss-security/2010/09/29/6 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050428.html - https://developer.jasig.org/source/changelog/jasigsvn?cs=21538 - http
rmail/package-announce/2010-November/050428.html - https://developer.jasig.org/source/changelog/jasigsvn?cs=21538 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050415.html - http://secunia.com/advisories/41878 - http://www.openwall.com/lists/oss-security/2010/10/01/5 - http://www.openwall.com/lists/oss-security/2010/10/01/2 - http://secunia.com/advisories/42184
CVE ID: CVE-2010-3692 State: PUBLISHED Published: 2010-10-07T20:21:00 Last Updated: 2024-08-07T03:18:52.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the callback function in client.php in phpCAS before 1.1.3, when proxy mode is enabled, allows remote attackers to create or overwrite arbitrary files via directory traversal sequences in a Proxy Granting Ticket IOU (PGTiou) parameter. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495542#82 - http://www.debian.org/security/2011/dsa-2172 - https://issues.jasig.org/browse/PHPCAS-80 - http://www.vupen.com/english/advisories/20
bian.org/security/2011/dsa-2172 - https://issues.jasig.org/browse/PHPCAS-80 - http://www.vupen.com/english/advisories/2011/0456 - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049600.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049602.html - http://www.vupen.com/english/advisories/2010/2909 - http://www.securityfocus.com/bid/43585 - http://secunia.com/advisories/42149 - https://forge.indepnet.net/projects/glpi/repository/revisions/12601 - http://www.vupen.com/english/advisories/2010/2705 - http://secunia.com/advisories/43427 - http://www.openwall.com/lists/oss-security/2010/09/29/6 - http://lists.fedoraproject.org/pipermail/package-an
es/43427 - http://www.openwall.com/lists/oss-security/2010/09/29/6 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050428.html - https://developer.jasig.org/source/changelog/jasigsvn?cs=21538 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050415.html - http://secunia.com/advisories/41878 - http://www.openwall.com/lists/oss-security/2010/10/01/5 - http://www.openwall.com/lists/oss-security/2010/10/01/2 - http://secunia.com/advisories/42184
CVE ID: CVE-2010-3693 State: PUBLISHED Published: 2011-04-01T21:00:00 Last Updated: 2024-08-07T03:18:52.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Horde Dynamic IMP (DIMP) before 1.1.5, and Horde Groupware Webmail Edition before 1.2.7, allows remote attackers to inject arbitrary web script or HTML via vectors related to displaying mailbox names. Additional Analyst Notes: - CVE Program Container: References: - http://lists.horde.org/archives/announce/2010/000568.html - http://openwall.com/lists/oss-security/2010/10/01/6 - http://bugs.horde.org/ticket/9240 - http://www.vupen.com/english/advisories/2010/2522 - https://exchange.xfo
0/10/01/6 - http://bugs.horde.org/ticket/9240 - http://www.vupen.com/english/advisories/2010/2522 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62080 - http://www.osvdb.org/68267 - http://git.horde.org/diff.php/imp/lib/Views/ListMessages.php?rt=horde-git&r1=b496687e2e71f3ebaecdff5ee49561fbfc1c74cb&r2=48913cf3af81875d6e5c6f32e030c5913f22f25d - http://git.horde.org/diff.php/groupware/docs/webmail/CHANGES?rt=horde&r1=1.35.2.11&r2=1.35.2.13&ty=h - http://lists.horde.org/archives/announce/2010/000561.html - http://secunia.com/advisories/41639 - http://cvs.horde.org/diff.php/dimp/docs/CHANGES?rt=horde&r1=1.69.2.82&r2=1.69.2.87&ty=h - http://openwall.com/lists/oss-security/2010/09/30/8 - h
.php/dimp/docs/CHANGES?rt=horde&r1=1.69.2.82&r2=1.69.2.87&ty=h - http://openwall.com/lists/oss-security/2010/09/30/8 - http://openwall.com/lists/oss-security/2010/09/30/7
CVE ID: CVE-2010-3694 State: PUBLISHED Published: 2010-11-09T20:00:00 Last Updated: 2024-08-07T03:18:52.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Horde Application Framework before 3.3.9 allows remote attackers to hijack the authentication of unspecified victims for requests to a preference form. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=630687 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050408.html - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050423.html - http://secunia.com/advisories/42140
ttp://lists.fedoraproject.org/pipermail/package-announce/2010-November/050423.html - http://secunia.com/advisories/42140 - http://lists.horde.org/archives/announce/2010/000557.html