rainbutterfly/cve_corpus huggingface dataset:
CVE-2010-1815 
Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving scrollbars.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-09-09T21:00:00.000Z
CVE-2010-1816 
Buffer overflow in ImageIO in Apple Mac OS X 10.6 through 10.6.3 and Mac OS X Server 10.6 through 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a crafted image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-13T15:00:00.000Z
CVE-2010-1817 
Buffer overflow in ImageIO in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted GIF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-09-09T21:00:00.000Z
CVE-2010-1818 
The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers to execute arbitrary code via the _Marshaled_pUnk attribute, which triggers unmarshalling of an untrusted pointer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-08-31T19:25:00.000Z
CVE-2010-1819 
Untrusted search path vulnerability in the Picture Viewer in Apple QuickTime before 7.6.8 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) CoreVideo.dll, (2) CoreGraphics.dll, or (3) CoreAudioToolbox.dll that is located in the same folder as a .pic image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-27T01:00:00.000Z
CVE-2010-1820 
Apple Filing Protocol (AFP) Server in Apple Mac OS X 10.6.x through 10.6.4 does not properly handle errors, which allows remote attackers to bypass the password requirement for shared-folder access by leveraging knowledge of a valid account name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-09-21T19:00:00.000Z
CVE-2010-1821 
Apple Mac OS X 10.6 through 10.6.3 and Mac OS X Server 10.6 through 10.6.3 allows local users to obtain system privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-13T15:00:00.000Z
CVE-2010-1822 
WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3 and Google Chrome before 6.0.472.62, does not properly perform a cast of an unspecified variable, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an SVG element in a non-SVG document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-04T20:00:00.000Z
CVE-2010-1823 
Use-after-free vulnerability in WebKit before r65958, as used in Google Chrome before 6.0.472.59, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger use of document APIs such as document.close during parsing, as demonstrated by a Cascading Style Sheets (CSS) file referencing an invalid SVG font, aka rdar problem 8442098.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-09-24T18:00:00.000Z
CVE-2010-1824 
Use-after-free vulnerability in WebKit, as used in Apple iTunes before 10.2 on Windows, Apple Safari, and Google Chrome before 6.0.472.59, allows remote attackers to execute arbitrary code or cause a denial of service via vectors related to SVG styles, the DOM tree, and error messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-09-24T18:00:00.000Z
CVE-2010-1825 
Use-after-free vulnerability in WebKit, as used in Google Chrome before 6.0.472.59, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to nested SVG elements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-09-24T18:00:00.000Z
CVE-2010-1828 
AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon restart) via crafted reconnect authentication packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-15T22:00:00.000Z
CVE-2010-1829 
Directory traversal vulnerability in AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote authenticated users to execute arbitrary code by creating files that are outside the bounds of a share.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-15T22:00:00.000Z
CVE-2010-1830 
AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 generates different error messages depending on whether a share exists, which allows remote attackers to enumerate valid share names via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-15T22:00:00.000Z
CVE-2010-1831 
Buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code via a long name of an embedded font in a document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-15T22:00:00.000Z
CVE-2010-1832 
Stack-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code via a crafted embedded font in a document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-15T22:00:00.000Z
CVE-2010-1833 
Apple Type Services (ATS) in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted embedded font in a document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-15T22:00:00.000Z
CVE-2010-1834 
CFNetwork in Apple Mac OS X 10.6.x before 10.6.5 does not properly validate the domains of cookies, which makes it easier for remote web servers to track users by setting a cookie that is associated with a partial IP address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-15T22:00:00.000Z
CVE-2010-1836 
Stack-based buffer overflow in CoreGraphics in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-15T22:00:00.000Z
CVE-2010-1837 
CoreText in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font in a PDF document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-15T22:00:00.000Z
CVE-2010-1838 
Directory Services in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly handle errors associated with disabled mobile accounts, which allows remote attackers to bypass authentication by providing a valid account name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-15T22:00:00.000Z
CVE-2010-1840 
Stack-based buffer overflow in the password-validation functionality in Directory Services in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-15T22:00:00.000Z
CVE-2010-1841 
Disk Images in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted UDIF image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-15T22:00:00.000Z
CVE-2010-1842 
Buffer overflow in AppKit in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a bidirectional text string with ellipsis truncation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-15T22:00:00.000Z
CVE-2010-1843 
Networking in Apple Mac OS X 10.6.2 through 10.6.4 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted PIM packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-16T21:00:00.000Z
CVE-2010-1844 
Unspecified vulnerability in Image Capture in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to cause a denial of service (memory consumption and system crash) via a crafted image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-16T21:00:00.000Z
CVE-2010-1845 
ImageIO in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted PSD image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-16T21:00:00.000Z
CVE-2010-1846 
Heap-based buffer overflow in Image RAW in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted RAW image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-16T21:00:00.000Z
CVE-2010-1847 
The kernel in Apple Mac OS X 10.6.x before 10.6.5 does not properly perform memory management associated with terminal devices, which allows local users to cause a denial of service (system crash) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-16T21:00:00.000Z
CVE-2010-1848 
Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tables, via a .. (dot dot) in a table name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-07T20:00:00.000Z
CVE-2010-1849 
The my_net_skip_rest function in sql/net_serv.cc in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by sending a large number of packets that exceed the maximum length.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-07T20:00:00.000Z
CVE-2010-1850 
Buffer overflow in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to execute arbitrary code via a COM_FIELD_LIST command with a long table name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-07T20:00:00.000Z
CVE-2010-1851 
Google Chrome, when the Invisible Hand extension is enabled, uses cookies during background HTTP requests in a possibly unexpected manner, which might allow remote web servers to identify specific persons and their product searches via HTTP request logging, related to a "cross-site data leakage" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-07T17:43:00.000Z
CVE-2010-1852 
Microsoft Internet Explorer, when the Invisible Hand extension is enabled, uses cookies during background HTTP requests in a possibly unexpected manner, which might allow remote web servers to identify specific persons and their product searches via HTTP request logging, related to a "cross-site data leakage" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-07T17:43:00.000Z
CVE-2010-1853 
Multiple stack-based buffer overflows in the tr_magnetParse function in libtransmission/magnet.c in Transmission 1.91 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted magnet URL with a large number of (1) tr or (2) ws links.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-07T20:00:00.000Z
CVE-2010-1854 
Cross-site scripting (XSS) vulnerability in auktion.php in Pay Per Watch & Bid Auktions System allows remote attackers to inject arbitrary web script or HTML via the id_auk parameter, which is not properly handled in a forced SQL error message.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  NOTE: this might be resultant from CVE-2010-1855.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-07T20:00:00.000Z
CVE-2010-1855 
SQL injection vulnerability in auktion.php in Pay Per Watch & Bid Auktions System allows remote attackers to execute arbitrary SQL commands via the id_auk parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-07T20:00:00.000Z
CVE-2010-1856 
Cross-site scripting (XSS) vulnerability in index.php in RepairShop2 1.9.023 Trial, when magic_quotes_gpc is disabled, allows remote attackers to inject arbitrary web script or HTML via the prod parameter in a products.details action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-07T20:00:00.000Z
CVE-2010-1857 
SQL injection vulnerability in index.php in RepairShop2 1.9.023 Trial, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the prod parameter in a products.details action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-07T20:00:00.000Z
CVE-2010-1858 
Directory traversal vulnerability in the SMEStorage (com_smestorage) component before 1.1 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-07T20:00:00.000Z
CVE-2010-1859 
SQL injection vulnerability in newpost.php in DeluxeBB 1.3 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the membercookie cookie when adding a new thread.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-07T22:00:00.000Z
CVE-2010-1860 
The html_entity_decode function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information (memory contents) or trigger memory corruption by causing a userspace interruption of an internal call, related to the call time pass by reference feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-07T22:00:00.000Z
CVE-2010-1861 
The sysvshm extension for PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to write to arbitrary memory addresses by using an object's __sleep function to interrupt an internal call to the shm_put_var function, which triggers access of a freed resource.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-07T22:00:00.000Z
CVE-2010-1862 
The chunk_split function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-07T22:00:00.000Z
CVE-2010-1863 
SQL injection vulnerability in the shoutbox module (modules/shoutbox.php) in ClanTiger 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the s_email parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-07T22:00:00.000Z
CVE-2010-1864 
The addcslashes function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-07T22:00:00.000Z
CVE-2010-1865 
Multiple SQL injection vulnerabilities in ClanSphere 2009.0.3 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the IP address to the cs_getip function in generate.php in the Captcha module, or (2) the s_email parameter to the cs_sql_select function in the MySQL database driver (mysql.php).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-07T22:00:00.000Z
CVE-2010-1866 
The dechunk filter in PHP 5.3 through 5.3.2, when decoding an HTTP chunked encoding stream, allows context-dependent attackers to cause a denial of service (crash) and possibly trigger memory corruption via a negative chunk size, which bypasses a signed comparison, related to an integer overflow in the chunk size decoder.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-07T22:00:00.000Z
CVE-2010-1867 
SQL injection vulnerability in the ArticleAttachment::GetAttachmentsByArticleNumber method in javascript/tinymcs/plugins/campsiteattachment/attachments.php in Campsite 3.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the article_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-07T22:00:00.000Z
CVE-2010-1868 
The (1) sqlite_single_query and (2) sqlite_array_query functions in ext/sqlite/sqlite.c in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to execute arbitrary code by calling these functions with an empty SQL query, which triggers access of uninitialized memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-07T22:00:00.000Z
CVE-2010-1869 
Stack-based buffer overflow in the parser function in GhostScript 8.70 and 8.64 allows context-dependent attackers to execute arbitrary code via a crafted PostScript file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-12T00:00:00.000Z
CVE-2010-1870 
The OGNL extensive expression evaluation capability in XWork in Struts 2.0.0 through 2.1.8.1, as used in Atlassian Fisheye, Crucible, and possibly other products, uses a permissive whitelist, which allows remote attackers to modify server-side context objects and bypass the "#" protection mechanism in ParameterInterceptors via the (1) #context, (2) #_memberAccess, (3) #root, (4) #this, (5) #_typeResolver, (6) #_classResolver, (7) #_traceEvaluations, (8) #_lastEvaluation, (9) #_keepLastEvaluation, and possibly other OGNL context variables, a different vulnerability than CVE-2008-6504.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-08-17T17:31:00.000Z
CVE-2010-1871 
JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL.  NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-08-04T19:00:00.000Z
CVE-2010-1872 
Cross-site scripting (XSS) vulnerability in cPlayer.php in FlashCard 2.6.5 and 3.0.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-11T20:00:00.000Z
CVE-2010-1873 
SQL injection vulnerability in the Jvehicles (com_jvehicles) component 1.0, 2.0, and 2.1111 for Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an agentlisting action to index.php.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-11T20:00:00.000Z
CVE-2010-1874 
SQL injection vulnerability in the Real Estate Property (com_properties) component 3.1.22-03 for Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an agentlisting action to index.php.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-11T20:00:00.000Z
CVE-2010-1875 
Directory traversal vulnerability in the Real Estate Property (com_properties) component 3.1.22-03 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-11T20:00:00.000Z
CVE-2010-1876 
SQL injection vulnerability in index.php in AJ Shopping Cart 1.0 allows remote attackers to execute arbitrary SQL commands via the maincatid parameter in a showmaincatlanding action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-11T20:00:00.000Z
CVE-2010-1877 
SQL injection vulnerability in the JTM Reseller (com_jtm) component 1.9 Beta for Joomla! allows remote attackers to execute arbitrary SQL commands via the author parameter in a search action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-11T20:00:00.000Z
CVE-2010-1878 
Directory traversal vulnerability in the OrgChart (com_orgchart) component 1.0.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-11T20:00:00.000Z
CVE-2010-1879 
Unspecified vulnerability in Quartz.dll for DirectShow; Windows Media Format Runtime 9, 9.5, and 11; Media Encoder 9; and the Asycfilt.dll COM component allows remote attackers to execute arbitrary code via a media file with crafted compression data, aka "Media Decompression Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-08T22:00:00.000Z
CVE-2010-1880 
Unspecified vulnerability in Quartz.dll for DirectShow on Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1, and Server 2008 allows remote attackers to execute arbitrary code via a media file with crafted compression data, aka "MJPEG Media Decompression Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-08T22:00:00.000Z
CVE-2010-1881 
The FieldList ActiveX control in the Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 does not properly interact with the memory-access approach used by Internet Explorer and Office during instantiation, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an HTML document that references this control along with crafted persistent storage data, aka "ACCWIZ.dll Uninitialized Variable Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-07-14T18:31:00.000Z