deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-2973
Published: 2010-08-05
Description: Integer overflow in IOSurface in Apple iOS before 4.0.2 on the iPhone and iPod touch, and before 3.2.2 on the iPad, allows local users to gain privileges via vectors involving IOSurface properties, as demonstrated by JailbreakMe.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2010//Aug/msg00000.html; http://lists.apple.com/archives/security-announce/2010//Aug/msg00001.html; http://osvdb.org/66827
CVE: CVE-2010-2974
Published: 2010-08-05
Description: Stack-based buffer overflow in the IConfigurationAccess interface in the Invensys Wonderware Archestra ConfigurationAccessComponent ActiveX control in Wonderware Application Server (WAS) before 3.1 SP2 P01, as used in the Wonderware Archestra Integrated Development Environment (IDE) and the InFusion Integrated Engineering Environment (IEE), allows remote attackers to execute arbitrary code via the first argument to the UnsubscribeData method.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.kb.cert.org/vuls/id/703189; http://www.kb.cert.org/vuls/id/MORO-87MHPT; http://www.pacwest.wonderware.com/web/News/NewsDetails.aspx?NewsID=203108
CVE: CVE-2010-1578
Published: 2010-08-09
Description: Unspecified vulnerability in the SunRPC inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.19), 8.1 before 8.1(2.47), and 8.2 before 8.2(2) and Cisco PIX Security Appliances 500 series devices allows remote attackers to cause a denial of service (device reload) via crafted SunRPC UDP packets, aka Bug ID CSCtc77567.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/40842; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3f12f.shtml; http://secunia.com/advisories/40842
CVE: CVE-2010-1579
Published: 2010-08-09
Description: Unspecified vulnerability in the SunRPC inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.19), 8.1 before 8.1(2.47), and 8.2 before 8.2(2) and Cisco PIX Security Appliances 500 series devices allows remote attackers to cause a denial of service (device reload) via crafted SunRPC UDP packets, aka Bug ID CSCtc79922.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/40842; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3f12f.shtml; http://secunia.com/advisories/40842
CVE: CVE-2010-1580
Published: 2010-08-09
Description: Unspecified vulnerability in the SunRPC inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.19), 8.1 before 8.1(2.47), and 8.2 before 8.2(2) and Cisco PIX Security Appliances 500 series devices allows remote attackers to cause a denial of service (device reload) via crafted SunRPC UDP packets, aka Bug ID CSCtc85753.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/40842; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3f12f.shtml; http://secunia.com/advisories/40842
CVE: CVE-2010-1581
Published: 2010-08-09
Description: Unspecified vulnerability in the Transport Layer Security (TLS) implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.15), 8.1 before 8.1(2.44), 8.2 before 8.2(2.17), and 8.3 before 8.3(1.6) and Cisco PIX Security Appliances 500 series devices allows remote attackers to cause a denial of service (device reload) via a sequence of crafted TLS packets, aka Bug ID CSCtd32627.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/40842; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3f12f.shtml; http://www.securityfocus.com/bid/42187
CVE: CVE-2010-2705
Published: 2010-08-09
Description: Unspecified vulnerability on the HP ProCurve 1800-24G switch with software PB.03.02 and earlier, and the ProCurve 1800-8G switch with software PA.03.02 and earlier, when SNMP is enabled, allows remote attackers to obtain sensitive information via unknown vectors.
CVSS Score: 6.1 (MEDIUM)
References: http://secunia.com/advisories/40867; https://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02436028; http://secunia.com/advisories/40867
CVE: CVE-2010-2706
Published: 2010-08-09
Description: Unspecified vulnerability in the In-band Agent on the HP ProCurve 2610 switch before R.11.30 allows remote attackers to cause a denial of service via unknown vectors.
CVSS Score: 6.1 (MEDIUM)
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02436043; http://secunia.com/advisories/40864; http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02436043
CVE: CVE-2010-2707
Published: 2010-08-09
Description: Unspecified vulnerability on the HP ProCurve 2626 and 2650 switches before H.10.80 allows remote attackers to obtain sensitive information, modify data, and cause a denial of service via unknown vectors.
CVSS Score: 8.3 (HIGH)
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02436047; http://secunia.com/advisories/40865; http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02436047
CVE: CVE-2010-2708
Published: 2010-08-09
Description: Unspecified vulnerability on the HP ProCurve 2610 switch before R.11.22, when DHCP is enabled, allows remote attackers to cause a denial of service via unknown vectors.
CVSS Score: 6.1 (MEDIUM)
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02436045; http://secunia.com/advisories/40864; http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02436045
CVE: CVE-2010-2800
Published: 2010-08-09
Description: The MS-ZIP decompressor in cabextract before 1.3 allows remote attackers to cause a denial of service (infinite loop) via a malformed MSZIP archive in a .cab file during a (1) test or (2) extract action, related to the libmspack library.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://bugs.gentoo.org/show_bug.cgi?id=329891; http://libmspack.svn.sourceforge.net/viewvc/libmspack?view=revision&revision=90; http://libmspack.svn.sourceforge.net/viewvc/libmspack?view=revision&revision=95
CVE: CVE-2010-2801
Published: 2010-08-09
Description: Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Quantum archive in a .cab file, related to the libmspack library.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-189
References: http://bugs.gentoo.org/show_bug.cgi?id=329891; http://libmspack.svn.sourceforge.net/viewvc/libmspack/libmspack/trunk/mspack/qtmd.c?r1=114&r2=113; http://libmspack.svn.sourceforge.net/viewvc/libmspack?view=revision&revision=118
CVE: CVE-2010-2814
Published: 2010-08-09
Description: Unspecified vulnerability in the Transport Layer Security (TLS) implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.15), 8.1 before 8.1(2.44), 8.2 before 8.2(2.17), and 8.3 before 8.3(1.6) and Cisco PIX Security Appliances 500 series devices allows remote attackers to cause a denial of service (device reload) via a sequence of crafted TLS packets, aka Bug ID CSCtf37506.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/40842; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3f12f.shtml; http://www.securityfocus.com/bid/42196
CVE: CVE-2010-2815
Published: 2010-08-09
Description: Unspecified vulnerability in the Transport Layer Security (TLS) implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.15), 8.1 before 8.1(2.44), 8.2 before 8.2(2.17), and 8.3 before 8.3(1.6) and Cisco PIX Security Appliances 500 series devices allows remote attackers to cause a denial of service (device reload) via a sequence of crafted TLS packets, aka Bug ID CSCtf55259.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/40842; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3f12f.shtml; http://www.securityfocus.com/bid/42198
CVE: CVE-2010-2816
Published: 2010-08-09
Description: Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.17), 8.1 before 8.1(2.45), and 8.2 before 8.2(2.13) allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCtd32106.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/40842; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3f12f.shtml; http://www.securityfocus.com/bid/42189
CVE: CVE-2010-2817
Published: 2010-08-09
Description: Unspecified vulnerability in the IKE implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2(5), 8.0 before 8.0(5.15), 8.1 before 8.1(2.44), 8.2 before 8.2(2.10), and 8.3 before 8.3(1.1) and Cisco PIX Security Appliances 500 series devices allows remote attackers to cause a denial of service (device reload) via a crafted IKE message, aka Bug ID CSCte46507.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/40842; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3f12f.shtml; http://www.securityfocus.com/bid/42190
CVE: CVE-2010-2818
Published: 2010-08-09
Description: Unspecified vulnerability in the SunRPC inspection feature on the Cisco Firewall Services Module (FWSM) with software 3.1 before 3.1(17.2), 3.2 before 3.2(16.1), 4.0 before 4.0(10.1), and 4.1 before 4.1(1.1) for Catalyst 6500 series switches and 7600 series routers allows remote attackers to cause a denial of service (device reload) via crafted SunRPC messages, aka Bug ID CSCte61710.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/40843; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3f130.shtml; http://secunia.com/advisories/40843
CVE: CVE-2010-2819
Published: 2010-08-09
Description: Unspecified vulnerability in the SunRPC inspection feature on the Cisco Firewall Services Module (FWSM) with software 3.1 before 3.1(17.2), 3.2 before 3.2(16.1), 4.0 before 4.0(10.1), and 4.1 before 4.1(1.1) for Catalyst 6500 series switches and 7600 series routers allows remote attackers to cause a denial of service (device reload) via crafted SunRPC messages, aka Bug ID CSCte61622.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/40843; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3f130.shtml; http://secunia.com/advisories/40843
CVE: CVE-2010-2820
Published: 2010-08-09
Description: Unspecified vulnerability in the SunRPC inspection feature on the Cisco Firewall Services Module (FWSM) with software 3.1 before 3.1(17.2), 3.2 before 3.2(16.1), 4.0 before 4.0(10.1), and 4.1 before 4.1(1.1) for Catalyst 6500 series switches and 7600 series routers allows remote attackers to cause a denial of service (device reload) via crafted SunRPC messages, aka Bug ID CSCte61662.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/40843; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3f130.shtml; http://secunia.com/advisories/40843
CVE: CVE-2010-2821
Published: 2010-08-09
Description: Unspecified vulnerability on the Cisco Firewall Services Module (FWSM) with software 3.2 before 3.2(17.2), 4.0 before 4.0(11.1), and 4.1 before 4.1(1.2) for Catalyst 6500 series switches and 7600 series routers, when multi-mode is enabled, allows remote attackers to cause a denial of service (device reload) via crafted (1) Telnet, (2) SSH, or (3) ASDM traffic over TCP, aka Bug ID CSCtg68694.
CVSS Score: 7.1 (HIGH)
References: http://secunia.com/advisories/40843; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3f130.shtml; http://secunia.com/advisories/40843
CVE: CVE-2010-2975
Published: 2010-08-10
Description: Cisco Unified Wireless Network (UWN) Solution 7.x through 7.0.98.0 does not properly handle multiple SSH sessions, which allows physically proximate attackers to read a password, related to an "arrow key failure," aka Bug ID CSCtg51544.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html; http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html
CVE: CVE-2010-2976
Published: 2010-08-10
Description: The controller in Cisco Unified Wireless Network (UWN) Solution 7.x through 7.0.98.0 has (1) a default SNMP read-only community of public, (2) a default SNMP read-write community of private, and a value of "default" for the (3) SNMP v3 username, (4) SNMP v3 authentication password, and (5) SNMP v3 privacy password, which makes it easier for remote attackers to obtain access.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html; http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html
CVE: CVE-2010-2977
Published: 2010-08-10
Description: Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 does not properly implement TLS and SSL, which has unspecified impact and remote attack vectors, aka Bug ID CSCtd01611.
CVSS Score: 10.0 (HIGH)
CWE: CWE-16
References: http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html; http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html
CVE: CVE-2010-2978
Published: 2010-08-10
Description: Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 does not use an adequate message-digest algorithm for a self-signed certificate, which allows remote attackers to bypass intended access restrictions via vectors involving collisions, aka Bug ID CSCtd67660.
CVSS Score: 10.0 (HIGH)
CWE: CWE-310
References: http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html; http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html
CVE: CVE-2010-2979
Published: 2010-08-10
Description: Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 on 5508 series controllers allows remote attackers to cause a denial of service (buffer leak and device crash) via ARP requests that trigger an ARP storm, aka Bug ID CSCte43508.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html; http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html
CVE: CVE-2010-2980
Published: 2010-08-10
Description: Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 on 5508 series controllers allows remote attackers to cause a denial of service (pbuf exhaustion and device crash) via fragmented traffic, aka Bug ID CSCtd26794.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html; http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html
CVE: CVE-2010-2981
Published: 2010-08-10
Description: Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 allows remote attackers to cause a denial of service (device crash) by pinging a virtual interface, aka Bug ID CSCte55370.
CVSS Score: 7.1 (HIGH)
References: http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html; http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html
CVE: CVE-2010-2982
Published: 2010-08-10
Description: Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 allows remote attackers to discover a group password via a series of SNMP requests, as demonstrated by an SNMP walk, aka Bug ID CSCtb74037.
CVSS Score: 7.1 (HIGH)
CWE: CWE-200
References: http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html; http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html
CVE: CVE-2010-2983
Published: 2010-08-10
Description: The workgroup bridge (aka WGB) functionality in Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 allows remote attackers to cause a denial of service (dropped connection) via a series of spoofed EAPoL-Logoff frames, related to an "EAPoL logoff attack," aka Bug ID CSCte43374.
CVSS Score: 7.8 (HIGH)
References: http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html; http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html
CVE: CVE-2010-2984
Published: 2010-08-10
Description: Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 on 4404 series controllers does not properly implement the WEBAUTH_REQD state, which allows remote attackers to bypass intended access restrictions via WLAN traffic, aka Bug ID CSCtb75305.
CVSS Score: 10.0 (HIGH)
References: http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html; http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html
CVE: CVE-2010-0834
Published: 2010-08-10
Description: The base-files package before 5.0.0ubuntu7.1 on Ubuntu 9.10 and before 5.0.0ubuntu20.10.04.2 on Ubuntu 10.04 LTS, as shipped on Dell Latitude 2110 netbooks, does not require authentication for package installation, which allows remote archive servers and man-in-the-middle attackers to execute arbitrary code via a crafted package.
CVSS Score: 9.3 (HIGH)
CWE: CWE-287
References: http://secunia.com/advisories/40889; http://www.securityfocus.com/bid/42280; http://www.ubuntu.com/usn/usn-968-1
CVE: CVE-2010-2474
Published: 2010-08-10
Description: JBoss Enterprise Service Bus (ESB) before 4.7 CP02 in JBoss Enterprise SOA Platform before 5.0.2 does not properly consider the security domain with which a service is secured, which might allow remote attackers to gain privileges by executing a service.
CVSS Score: 3.5 (LOW)
CWE: CWE-20
References: http://secunia.com/advisories/40568; http://secunia.com/advisories/40681; http://www.redhat.com/docs/en-US/JBoss_SOA_Platform/5.0.2/html/5.0.2_Release_Notes/index.html
CVE: CVE-2010-2493
Published: 2010-08-10
Description: The default configuration of the deployment descriptor (aka web.xml) in picketlink-sts.war in (1) the security_saml quickstart, (2) the webservice_proxy_security quickstart, (3) the web-console application, (4) the http-invoker application, (5) the gpd-deployer application, (6) the jbpm-console application, (7) the contract application, and (8) the uddi-console application in JBoss Enterprise SOA Platform before 5.0.2 contains GET and POST http-method elements, which allows remote attackers to bypass intended access restrictions via a crafted HTTP request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-16
References: http://secunia.com/advisories/40681; http://www.redhat.com/docs/en-US/JBoss_SOA_Platform/5.0.2/html/5.0.2_Release_Notes/index.html; https://bugzilla.redhat.com/show_bug.cgi?id=614774
CVE: CVE-2010-2574
Published: 2010-08-10
Description: Cross-site scripting (XSS) vulnerability in manage_proj_cat_add.php in MantisBT 1.2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via the name parameter in an Add Category action.
CVSS Score: 2.1 (LOW)
CWE: CWE-79
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048548.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048639.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048659.html
CVE: CVE-2010-2634
Published: 2010-08-10
Description: RSA enVision before 3.7 SP1 allows remote authenticated users to cause a denial of service via unspecified vectors.
CVSS Score: 4.0 (MEDIUM)
References: http://www.securityfocus.com/archive/1/512929/100/0/threaded; http://www.securityfocus.com/archive/1/512929/100/0/threaded
CVE: CVE-2010-2985
Published: 2010-08-10
Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3 allow remote attackers to inject arbitrary web script or HTML via (1) the searchTerm parameter to ServiceRegistry/HelpSearch.do or (2) the queryItems[0].value parameter to ServiceRegistry/QueryWizardProcessStep1.do.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/40862; http://www-01.ibm.com/support/docview.wss?uid=swg1IZ75984; http://www-01.ibm.com/support/docview.wss?uid=swg1IZ76926
CVE: CVE-2010-2986
Published: 2010-08-10
Description: Cross-site scripting (XSS) vulnerability in webacs/QuickSearchAction.do in the search feature in the web interface in Cisco Wireless Control System (WCS) before 6.0(194.0) and 7.x before 7.0.164 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter, aka Bug ID CSCtf14288.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/40827; http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html; http://www.securityfocus.com/archive/1/512878/100/0/threaded
CVE: CVE-2010-2987
Published: 2010-08-10
Description: Multiple cross-site scripting (XSS) vulnerabilities in Cisco Wireless Control System (WCS) 7.x before 7.0.164, as used in Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCtg33854.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/40827; http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html; http://secunia.com/advisories/40827
CVE: CVE-2010-2988
Published: 2010-08-10
Description: Cross-site scripting (XSS) vulnerability in Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCtf35333.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/40827; http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html; http://secunia.com/advisories/40827
CVE: CVE-2010-2989
Published: 2010-08-10
Description: nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote attackers to obtain sensitive information via a request to the /feed method, which reveals the version in a response.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/archive/1/512645/100/0/threaded; https://discussions.nessus.org/message/7245#7245; http://www.securityfocus.com/archive/1/512645/100/0/threaded
CVE: CVE-2010-0019
Published: 2010-08-11
Description: Microsoft Silverlight 3 before 3.0.50611.0 on Windows, and before 3.0.41130.0 on Mac OS X, does not properly handle pointers, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and framework outage) via a crafted web site, aka "Microsoft Silverlight Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA10-222A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-060; http://www.us-cert.gov/cas/techalerts/TA10-222A.html
CVE: CVE-2010-0209
Published: 2010-08-11
Description: Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2213, CVE-2010-2214, and CVE-2010-2216.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2751&w=2; http://secunia.com/advisories/43026
CVE: CVE-2010-1258
Published: 2010-08-11
Description: Microsoft Internet Explorer 6, 7, and 8 does not properly determine the origin of script code, which allows remote attackers to execute script in an unintended domain or security zone, and obtain sensitive information, via unspecified vectors, aka "Event Handler Cross-Domain Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.us-cert.gov/cas/techalerts/TA10-222A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-053; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11954