rainbutterfly/cve_corpus huggingface dataset:
CVE-2010-1114 
Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) pg parameter to index.php and the (2) path parameter to news/form.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-25T17:00:00.000Z
CVE-2010-1115 
Directory traversal vulnerability in news/include/customize.php in Web Server Creator - Web Portal 0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the l parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-25T17:00:00.000Z
CVE-2010-1116 
LookMer Music Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for dbmdb/LookMerSarkiMDB.mdb.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-25T17:00:00.000Z
CVE-2010-1117 
Heap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to discover the base address of a Windows .dll file, and possibly have unspecified other impact, via unknown vectors, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 2010.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-25T20:31:00.000Z
CVE-2010-1118 
Unspecified vulnerability in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a use-after-free issue, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 2010.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-25T20:31:00.000Z
CVE-2010-1119 
Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Safari before 4.1 on Mac OS X 10.4, and Safari on Apple iPhone OS allows remote attackers to execute arbitrary code or cause a denial of service (application crash), or read the SMS database or other data, via vectors related to "attribute manipulation," as demonstrated by Vincenzo Iozzo and Ralf Philipp Weinmann during a Pwn2Own competition at CanSecWest 2010.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-25T20:31:00.000Z
CVE-2010-1120 
Unspecified vulnerability in Safari 4 on Apple Mac OS X 10.6 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by Charlie Miller during a Pwn2Own competition at CanSecWest 2010.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-25T20:31:00.000Z
CVE-2010-1121 
Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are moved from one document to another, which allows remote attackers to conduct use-after-free attacks and execute arbitrary code via unspecified vectors involving improper interaction with garbage collection, as demonstrated by Nils during a Pwn2Own competition at CanSecWest 2010.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-25T20:31:00.000Z
CVE-2010-1122 
Unspecified vulnerability in Mozilla Firefox 3.5.x through 3.5.8 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly have unknown other impact via vectors that might involve compressed data, a different vulnerability than CVE-2010-1028.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-25T22:00:00.000Z
CVE-2010-1123 
Chip Salzenberg Deliver does not properly associate a lockfile with the user who created the file, which allows local users to cause a denial of service (blockage of incoming e-mail) by creating lockfiles for arbitrary mailboxes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-26T18:00:00.000Z
CVE-2010-1124 
bos.rte.libc 5.3.9.4 on IBM AIX 5.3 does not properly support reading a certain address field after a successful getaddrinfo function call, which allows context-dependent attackers to cause a denial of service (application crash) via unspecified vectors, as demonstrated by IBM DB2 crashes on "systems with databases cataloged with alternate servers using IP addresses."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-26T18:00:00.000Z
CVE-2010-1125 
The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-26T20:00:00.000Z
CVE-2010-1126 
The JavaScript implementation in WebKit allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-26T20:00:00.000Z
CVE-2010-1127 
Microsoft Internet Explorer 6 and 7 does not initialize certain data structures during execution of the createElement method, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted JavaScript code, as demonstrated by setting the (1) outerHTML or (2) value property of an object returned by createElement.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-26T20:00:00.000Z
CVE-2010-1128 
The Linear Congruential Generator (LCG) in PHP before 5.2.13 does not provide the expected entropy, which makes it easier for context-dependent attackers to guess values that were intended to be unpredictable, as demonstrated by session cookies generated by using the uniqid function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-26T20:00:00.000Z
CVE-2010-1129 
The safe_mode implementation in PHP before 5.2.13 does not properly handle directory pathnames that lack a trailing / (slash) character, which allows context-dependent attackers to bypass intended access restrictions via vectors related to use of the tempnam function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-26T20:00:00.000Z
CVE-2010-1130 
session.c in the session extension in PHP before 5.2.13, and 5.3.1, does not properly interpret ; (semicolon) characters in the argument to the session_save_path function, which allows context-dependent attackers to bypass open_basedir and safe_mode restrictions via an argument that contains multiple ; characters in conjunction with a .. (dot dot).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-26T20:00:00.000Z
CVE-2010-1131 
JavaScriptCore.dll, as used in Apple Safari 4.0.5 on Windows XP SP3, allows remote attackers to cause a denial of service (application crash) via an HTML document composed of many successive occurrences of the <object> substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-26T21:00:00.000Z
CVE-2010-1132 
The mlfi_envrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-26T21:00:00.000Z
CVE-2010-1133 
Multiple SQL injection vulnerabilities in TikiWiki CMS/Groupware 4.x before 4.2 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, probably related to (1) tiki-searchindex.php and (2) tiki-searchresults.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-26T21:00:00.000Z
CVE-2010-1134 
SQL injection vulnerability in the _find function in searchlib.php in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to execute arbitrary SQL commands via the $searchDate variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-26T21:00:00.000Z
CVE-2010-1135 
The user_logout function in TikiWiki CMS/Groupware 4.x before 4.2 does not properly delete user login cookies, which allows remote attackers to gain access via cookie reuse.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-26T21:00:00.000Z
CVE-2010-1136 
The Standard Remember method in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to bypass access restrictions related to "persistent login," probably due to the generation of predictable cookies based on the IP address and User agent in userslib.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-26T21:00:00.000Z
CVE-2010-1137 
Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5, and the Server Console in VMware Server 1.0, allows remote attackers to inject arbitrary web script or HTML via the name of a virtual machine.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-01T19:00:00.000Z
CVE-2010-1138 
The virtual networking stack in VMware Workstation 7.0 before 7.0.1 build 227600, VMware Workstation 6.5.x before 6.5.4 build 246459 on Windows, VMware Player 3.0 before 3.0.1 build 227600, VMware Player 2.5.x before 2.5.4 build 246459 on Windows, VMware ACE 2.6 before 2.6.1 build 227600 and 2.5.x before 2.5.4 build 246459, VMware Server 2.x, and VMware Fusion 3.0 before 3.0.1 build 232708 and 2.x before 2.0.7 build 246742 allows remote attackers to obtain sensitive information from memory on the host OS by examining received network packets, related to interaction between the guest OS and the host vmware-vmx process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-12T18:00:00.000Z
CVE-2010-1139 
Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Linux, and VMware Fusion 2.x before 2.0.7 build 246742, allows local users to gain privileges via format string specifiers in process metadata.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-12T18:00:00.000Z
CVE-2010-1140 
The USB service in VMware Workstation 7.0 before 7.0.1 build 227600 and VMware Player 3.0 before 3.0.1 build 227600 on Windows might allow host OS users to gain privileges by placing a Trojan horse program at an unspecified location on the host OS disk.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-12T18:00:00.000Z
CVE-2010-1141 
VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x before 2.0.2 build 203138; VMware Fusion 2.x before 2.0.6 build 246742; VMware ESXi 3.5 and 4.0; and VMware ESX 2.5.5, 3.0.3, 3.5, and 4.0 does not properly access libraries, which allows user-assisted remote attackers to execute arbitrary code by tricking a Windows guest OS user into clicking on a file that is stored on a network share.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-12T18:00:00.000Z
CVE-2010-1142 
VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x before 2.0.2 build 203138; VMware Fusion 2.x before 2.0.6 build 246742; VMware ESXi 3.5 and 4.0; and VMware ESX 2.5.5, 3.0.3, 3.5, and 4.0 does not properly load VMware programs, which might allow Windows guest OS users to gain privileges by placing a Trojan horse program at an unspecified location on the guest OS disk.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-12T18:00:00.000Z
CVE-2010-1143 
Cross-site scripting (XSS) vulnerability in VMware View (formerly Virtual Desktop Manager or VDM) 3.1.x before 3.1.3 build 252693 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-07T17:43:00.000Z
CVE-2010-1146 
The Linux kernel 2.6.33.2 and earlier, when a ReiserFS filesystem exists, does not restrict read or write access to the .reiserfs_priv directory, which allows local users to gain privileges by modifying (1) extended attributes or (2) ACLs, as demonstrated by deleting a file under .reiserfs_priv/xattrs/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-12T18:00:00.000Z
CVE-2010-1147 
Stack-based buffer overflow in Open Direct Connect Hub (aka Open DC Hub or OpenDCHub) 0.8.1 allows remote authenticated users to execute arbitrary code via a long MyINFO message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-06T16:00:00.000Z
CVE-2010-1148 
The cifs_create function in fs/cifs/dir.c in the Linux kernel 2.6.33.2 and earlier allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a NULL nameidata (aka nd) field in a POSIX file-creation request to a server that supports UNIX extensions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-12T17:00:00.000Z
CVE-2010-1149 
probers/udisks-dm-export.c in udisks before 1.0.1 exports UDISKS_DM_TARGETS_PARAMS information to udev even for a crypt UDISKS_DM_TARGETS_TYPE, which allows local users to discover encryption keys by (1) running a certain udevadm command or (2) reading a certain file under /dev/.udev/db/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-12T18:00:00.000Z
CVE-2010-1150 
MediaWiki before 1.15.3, and 1.6.x before 1.16.0beta2, does not properly handle a correctly authenticated but unintended login attempt, which makes it easier for remote authenticated users to conduct phishing attacks by arranging for a victim to login to the attacker's account and then execute a crafted user script, related to a "login CSRF" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-20T15:00:00.000Z
CVE-2010-1151 
Race condition in the mod_auth_shadow module for the Apache HTTP Server allows remote attackers to bypass authentication, and read and possibly modify data, via vectors related to improper interaction with an external helper application for validation of credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-20T16:00:00.000Z
CVE-2010-1152 
memcached.c in memcached before 1.4.3 allows remote attackers to cause a denial of service (daemon hang or crash) via a long line that triggers excessive memory allocation.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-12T18:00:00.000Z
CVE-2010-1153 
PHP remote file inclusion vulnerability in the autoloader in TYPO3 4.3.x before 4.3.3 allows remote attackers to execute arbitrary PHP code via a URL in an input field associated with the className variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-20T19:00:00.000Z
CVE-2010-1155 
Irssi before 0.8.15, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof IRC servers via an arbitrary certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-16T19:00:00.000Z
CVE-2010-1156 
core/nicklist.c in Irssi before 0.8.15 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to an attempted fuzzy nick match at the instant that a victim leaves a channel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-16T19:00:00.000Z
CVE-2010-1157 
Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and then reading the realm field in the WWW-Authenticate header in the reply.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-23T14:00:00.000Z
CVE-2010-1158 
Integer overflow in the regular expression engine in Perl 5.8.x allows context-dependent attackers to cause a denial of service (stack consumption and application crash) by matching a crafted regular expression against a long string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-20T15:00:00.000Z
CVE-2010-1159 
Multiple heap-based buffer overflows in Aircrack-ng before 1.1 allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a (1) large length value in an EAPOL packet or (2) long EAPOL packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-28T22:00:00.000Z
CVE-2010-1160 
GNU nano before 2.2.4 does not verify whether a file has been changed before it is overwritten in a file-save operation, which allows local user-assisted attackers to overwrite arbitrary files via a symlink attack on an attacker-owned file that is being edited by the victim.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-16T19:00:00.000Z
CVE-2010-1161 
Race condition in GNU nano before 2.2.4, when run by root to edit a file that is not owned by root, allows local user-assisted attackers to change the ownership of arbitrary files via vectors related to the creation of backup files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-16T19:00:00.000Z
CVE-2010-1162 
The release_one_tty function in drivers/char/tty_io.c in the Linux kernel before 2.6.34-rc4 omits certain required calls to the put_pid function, which has unspecified impact and local attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-20T15:00:00.000Z
CVE-2010-1163 
The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users to execute arbitrary commands via a Trojan horse executable, as demonstrated using sudoedit, a different vulnerability than CVE-2010-0426.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-16T19:00:00.000Z
CVE-2010-1164 
Multiple cross-site scripting (XSS) vulnerabilities in Atlassian JIRA 3.12 through 4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) element or (2) defaultColor parameter to the Colour Picker page; the (3) formName parameter, (4) element parameter, or (5) full name field to the User Picker page; the (6) formName parameter, (7) element parameter, or (8) group name field to the Group Picker page; the (9) announcement_preview_banner_st parameter to unspecified components, related to the Announcement Banner Preview page; unspecified vectors involving the (10) groupnames.jsp, (11) indexbrowser.jsp, (12) classpath-debug.jsp, (13) viewdocument.jsp, or (14) cleancommentspam.jsp page; the (15) portletKey parameter to runportleterror.jsp; the (16) URI to issuelinksmall.jsp; the (17) afterURL parameter to screenshot-redirecter.jsp; or the (18) HTTP Referrer header to 500page.jsp, as exploited in the wild in April 2010.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-20T15:00:00.000Z
CVE-2010-1165 
Atlassian JIRA 3.12 through 4.1 allows remote authenticated administrators to execute arbitrary code by modifying the (1) attachment (aka attachments), (2) index (aka indexing), or (3) backup path and then uploading a file, as exploited in the wild in April 2010.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-20T15:00:00.000Z
CVE-2010-1166 
The fbComposite function in fbpict.c in the Render extension in the X server in X.Org X11R7.1 allows remote authenticated users to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted request, related to an incorrect macro definition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-29T21:00:00.000Z
CVE-2010-1167 
fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a crafted (1) message header or (2) POP3 UIDL list.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-07T17:43:00.000Z
CVE-2010-1168 
The Safe (aka Safe.pm) module before 2.25 for Perl allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving implicitly called methods and implicitly blessed objects, as demonstrated by the (a) DESTROY and (b) AUTOLOAD methods, related to "automagic methods."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-21T16:00:00.000Z
CVE-2010-1169 
PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 does not properly restrict PL/perl procedures, which allows remote authenticated users, with database-creation privileges, to execute arbitrary Perl code via a crafted script, related to the Safe module (aka Safe.pm) for Perl. NOTE: some sources report that this issue is the same as CVE-2010-1447.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-19T18:13:00.000Z
CVE-2010-1170 
The PL/Tcl implementation in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 loads Tcl code from the pltcl_modules table regardless of the table's ownership and permissions, which allows remote authenticated users, with database-creation privileges, to execute arbitrary Tcl code by creating this table and inserting a crafted Tcl script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-19T18:13:00.000Z
CVE-2010-1171 
Red Hat Network (RHN) Satellite 5.3 and 5.4 exposes a dangerous, obsolete XML-RPC API, which allows remote authenticated users to access arbitrary files and cause a denial of service (failed yum operations) via vectors related to configuration and package group (comps.xml) files for channels.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-04-18T17:00:00.000Z
CVE-2010-1172 
DBus-GLib 0.73 disregards the access flag of exported GObject properties, which allows local users to bypass intended access restrictions and possibly cause a denial of service by modifying properties, as demonstrated by properties of the (1) DeviceKit-Power, (2) NetworkManager, and (3) ModemManager services.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-08-20T17:00:00.000Z