rainbutterfly/cve_corpus huggingface dataset:
CVE-2010-4023 
Cross-site scripting (XSS) vulnerability in HP Insight Control Power Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-28T19:00:00.000Z
CVE-2010-4024 
Cross-site request forgery (CSRF) vulnerability in HP Insight Control Power Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-28T19:00:00.000Z
CVE-2010-4025 
Unspecified vulnerability in Doc Viewer in HP Palm webOS 1.4.1 allows remote attackers to execute arbitrary code via a crafted document, as demonstrated by a Word document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-28T19:00:00.000Z
CVE-2010-4026 
Unspecified vulnerability in the service API in HP Palm webOS 1.4.1 allows local users to gain privileges by leveraging the ability to perform certain service calls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-28T19:00:00.000Z
CVE-2010-4027 
Unspecified vulnerability in the camera application in HP Palm webOS 1.4.1 allows local users to overwrite arbitrary files via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-28T19:00:00.000Z
CVE-2010-4028 
Unspecified vulnerability in LoadRunner Web Tours 9.10 in HP LoadRunner 9.1 and earlier allows remote attackers to cause a denial of service, and possibly obtain sensitive information or modify data, via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-28T19:00:00.000Z
CVE-2010-4029 
Unspecified vulnerability in HP Storage Essentials before 6.3.0, when LDAP authentication is enabled, allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-28T19:00:00.000Z
CVE-2010-4030 
Cross-site scripting (XSS) vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-01T19:00:00.000Z
CVE-2010-4031 
Unspecified vulnerability in HP Insight Control Performance Management before 6.2 allows remote authenticated users to gain privileges via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-01T19:00:00.000Z
CVE-2010-4032 
Cross-site request forgery (CSRF) vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-01T19:00:00.000Z
CVE-2010-4033 
Google Chrome before 7.0.517.41 does not properly implement the autofill and autocomplete functionality, which allows remote attackers to conduct "profile spamming" attacks via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-21T18:12:00.000Z
CVE-2010-4034 
Google Chrome before 7.0.517.41 does not properly handle forms, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted HTML document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-21T18:12:00.000Z
CVE-2010-4035 
Google Chrome before 7.0.517.41 does not properly perform autofill operations for forms, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted HTML document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-21T18:12:00.000Z
CVE-2010-4036 
Google Chrome before 7.0.517.41 does not properly handle the unloading of a page, which allows remote attackers to spoof URLs via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-21T18:12:00.000Z
CVE-2010-4037 
Unspecified vulnerability in Google Chrome before 7.0.517.41 allows remote attackers to bypass the pop-up blocker via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-21T18:12:00.000Z
CVE-2010-4038 
The Web Sockets implementation in Google Chrome before 7.0.517.41 does not properly handle a shutdown action, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-21T18:12:00.000Z
CVE-2010-4039 
Google Chrome before 7.0.517.41 on Linux does not properly set the PATH environment variable, which has unspecified impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-21T18:12:00.000Z
CVE-2010-4040 
Google Chrome before 7.0.517.41 does not properly handle animated GIF images, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-21T18:12:00.000Z
CVE-2010-4041 
The sandbox implementation in Google Chrome before 7.0.517.41 on Linux does not properly constrain worker processes, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-21T18:12:00.000Z
CVE-2010-4042 
Google Chrome before 7.0.517.41 does not properly handle element maps, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to "stale elements."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-21T18:12:00.000Z
CVE-2010-4043 
Opera before 10.63 does not prevent interpretation of a cross-origin document as a CSS stylesheet when the document lacks a CSS token sequence, which allows remote attackers to obtain sensitive information via a crafted document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-21T18:12:00.000Z
CVE-2010-4044 
Opera before 10.63 does not ensure that the portion of a URL shown in the Address Bar contains the beginning of the URL, which allows remote attackers to spoof URLs by changing a window's size.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-21T18:12:00.000Z
CVE-2010-4045 
Opera before 10.63 does not properly restrict web script in unspecified circumstances involving reloads and redirects, which allows remote attackers to spoof the Address Bar, conduct cross-site scripting (XSS) attacks, and possibly execute arbitrary code by leveraging the ability of a script to interact with a web page from (1) a different domain or (2) a different security context.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-21T18:12:00.000Z
CVE-2010-4046 
Opera before 10.63 does not properly verify the origin of video content, which allows remote attackers to obtain sensitive information by using a video stream as HTML5 canvas content.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-21T18:12:00.000Z
CVE-2010-4047 
Opera before 10.63 does not properly select the security context of JavaScript code associated with an error page, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-21T18:12:00.000Z
CVE-2010-4048 
Opera before 10.63 allows user-assisted remote web servers to cause a denial of service (application crash) by sending a redirect during the saving of a file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-21T18:12:00.000Z
CVE-2010-4049 
Opera before 10.63 allows remote attackers to cause a denial of service (application crash) via a Flash movie with a transparent Window Mode (aka wmode) property, which is not properly handled during navigation away from the containing HTML document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-21T18:12:00.000Z
CVE-2010-4050 
Opera before 10.63 allows remote attackers to cause a denial of service (memory corruption) by referencing an SVG document in an IMG element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-21T18:12:00.000Z
CVE-2010-4051 
The regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (application crash) via a regular expression containing adjacent bounded repetitions that bypass the intended RE_DUP_MAX limitation, as demonstrated by a {10,}{10,}{10,}{10,}{10,} sequence in the proftpd.gnu.c exploit for ProFTPD, related to a "RE_DUP_MAX overflow."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-13T18:35:00.000Z
CVE-2010-4052 
Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (resource exhaustion) via a regular expression containing adjacent repetition operators, as demonstrated by a {10,}{10,}{10,}{10,} sequence in the proftpd.gnu.c exploit for ProFTPD.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-13T18:35:00.000Z
CVE-2010-4053 
Stack-based buffer overflow in an unspecified logging function in oninit.exe in IBM Informix Dynamic Server (IDS) 11.10 before 11.10.xC2W2 and 11.50 before 11.50.xC1 allows remote authenticated users to execute arbitrary code via a crafted EXPLAIN directive, aka idsdb00154125 and idsdb00154243.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-22T22:00:00.000Z
CVE-2010-4054 
The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) via crafted font data in a compressed data stream, aka bug 691043.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-22T22:00:00.000Z
CVE-2010-4055 
Stack consumption vulnerability in solid.exe in IBM solidDB 6.5.0.3 and earlier allows remote attackers to cause a denial of service (memory consumption and daemon crash) by connecting to TCP port 1315 and sending a packet with many integer fields, which trigger many recursive calls of a certain function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-22T22:00:00.000Z
CVE-2010-4056 
solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon receiving packet data containing a single integer field, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a TCP session on port 1315.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-22T22:00:00.000Z
CVE-2010-4057 
solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon receiving packet data containing many integer fields with two different values, which allows remote attackers to cause a denial of service (invalid memory access and daemon crash) via a TCP session on port 1315.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-22T22:00:00.000Z
CVE-2010-4068 
Unspecified vulnerability in the Extension Manager in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 allows remote authenticated administrators to read and possibly modify arbitrary files via a crafted parameter, a different vulnerability than CVE-2010-3714.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-25T19:00:00.000Z
CVE-2010-4069 
Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 7.x through 7.31, 9.x through 9.40, 10.00 before 10.00.xC10, 11.10 before 11.10.xC3, and 11.50 before 11.50.xC3 allows remote authenticated users to execute arbitrary code via long DBINFO keyword arguments in a SQL statement, aka idsdb00165017, idsdb00165019, idsdb00165021, idsdb00165022, and idsdb00165023.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-25T19:00:00.000Z
CVE-2010-4070 
Integer overflow in librpc.dll in portmap.exe (aka the ISM Portmapper service) in ISM before 2.20.TC1.117 in IBM Informix Dynamic Server (IDS) 7.x before 7.31.xD11, 9.x before 9.40.xC10, 10.00 before 10.00.xC8, and 11.10 before 11.10.xC2 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted parameter size, aka idsdb00146931, idsdb00146930, idsdb00146929, and idsdb00138308.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-25T19:00:00.000Z
CVE-2010-4071 
Cross-site scripting (XSS) vulnerability in AgentTicketZoom in OTRS 2.4.x before 2.4.9, when RichText is enabled, allows remote attackers to inject arbitrary web script or HTML via JavaScript in an HTML e-mail.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-20T18:00:00.000Z
CVE-2010-4072 
The copy_shmid_to_user function in ipc/shm.c in the Linux kernel before 2.6.37-rc1 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the shmctl system call and the "old shm interface."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-29T15:00:00.000Z
CVE-2010-4073 
The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initialize certain structures, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the (1) compat_sys_semctl, (2) compat_sys_msgctl, and (3) compat_sys_shmctl functions in ipc/compat.c; and the (4) compat_sys_mq_open and (5) compat_sys_mq_getsetattr functions in ipc/compat_mq.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-29T15:00:00.000Z
CVE-2010-4074 
The USB subsystem in the Linux kernel before 2.6.36-rc5 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to TIOCGICOUNT ioctl calls, and the (1) mos7720_ioctl function in drivers/usb/serial/mos7720.c and (2) mos7840_ioctl function in drivers/usb/serial/mos7840.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-29T15:00:00.000Z
CVE-2010-4075 
The uart_get_count function in drivers/serial/serial_core.c in the Linux kernel before 2.6.37-rc1 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-29T15:00:00.000Z
CVE-2010-4076 
The rs_ioctl function in drivers/char/amiserial.c in the Linux kernel 2.6.36.1 and earlier does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-29T15:00:00.000Z
CVE-2010-4077 
The ntty_ioctl_tiocgicount function in drivers/char/nozomi.c in the Linux kernel 2.6.36.1 and earlier does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-29T15:00:00.000Z
CVE-2010-4078 
The sisfb_ioctl function in drivers/video/sis/sis_main.c in the Linux kernel before 2.6.36-rc6 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FBIOGET_VBLANK ioctl call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-29T15:00:00.000Z
CVE-2010-4079 
The ivtvfb_ioctl function in drivers/media/video/ivtv/ivtvfb.c in the Linux kernel before 2.6.36-rc8 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FBIOGET_VBLANK ioctl call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-29T15:00:00.000Z
CVE-2010-4080 
The snd_hdsp_hwdep_ioctl function in sound/pci/rme9652/hdsp.c in the Linux kernel before 2.6.36-rc6 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via an SNDRV_HDSP_IOCTL_GET_CONFIG_INFO ioctl call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-30T22:00:00.000Z
CVE-2010-4081 
The snd_hdspm_hwdep_ioctl function in sound/pci/rme9652/hdspm.c in the Linux kernel before 2.6.36-rc6 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via an SNDRV_HDSPM_IOCTL_GET_CONFIG_INFO ioctl call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-30T22:00:00.000Z
CVE-2010-4082 
The viafb_ioctl_get_viafb_info function in drivers/video/via/ioctl.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a VIAFB_GET_INFO ioctl call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-30T22:00:00.000Z
CVE-2010-4083 
The copy_semid_to_user function in ipc/sem.c in the Linux kernel before 2.6.36 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via a (1) IPC_INFO, (2) SEM_INFO, (3) IPC_STAT, or (4) SEM_STAT command in a semctl system call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-30T22:00:00.000Z
CVE-2010-4084 
dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2581, CVE-2010-4085, CVE-2010-4086, and CVE-2010-4088.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-29T18:00:00.000Z
CVE-2010-4085 
dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2581, CVE-2010-4084, CVE-2010-4086, and CVE-2010-4088.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-29T18:00:00.000Z
CVE-2010-4086 
dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Director (.dir) media file with an invalid element size, a different vulnerability than CVE-2010-2581, CVE-2010-2880, CVE-2010-4084, CVE-2010-4085, and CVE-2010-4088.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-29T18:00:00.000Z
CVE-2010-4087 
IML32.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a .dir file with a crafted mmap record containing an invalid length of a VSWV entry, a different vulnerability than CVE-2010-4089.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-29T18:00:00.000Z
CVE-2010-4088 
dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a .dir file with "duplicated references to the same KEY* chunk," a different vulnerability than CVE-2010-2581, CVE-2010-4084, CVE-2010-4085, and CVE-2010-4086.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-29T18:00:00.000Z
CVE-2010-4089 
IML32.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a .dir file containing "duplicated LCSM entries in mmap record," a different vulnerability than CVE-2010-4087.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-29T18:00:00.000Z
CVE-2010-4090 
Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-29T18:00:00.000Z
CVE-2010-4091 
The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document that triggers memory corruption, involving the printSeps function. NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-07T21:00:00.000Z
CVE-2010-4092 
Use-after-free vulnerability in an unspecified compatibility component in Adobe Shockwave Player before 11.5.9.620 allows user-assisted remote attackers to execute arbitrary code via a crafted web site, related to the Shockwave Settings window and an unloaded library. NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-05T20:00:00.000Z
CVE-2010-4093 
Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0555, CVE-2010-4187, CVE-2010-4190, CVE-2010-4191, CVE-2010-4192, and CVE-2010-4306.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-10T15:00:00.000Z
CVE-2010-4094 
The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN account, which makes it easier for remote attackers to execute arbitrary code by leveraging access to the manager role.  NOTE: this might overlap CVE-2009-3548.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-26T17:00:00.000Z
CVE-2010-4095 
Directory traversal vulnerability in the FTP client in Serengeti Systems Incorporated Robo-FTP 3.7.3, and probably other versions before 3.7.5, allows remote FTP servers to write arbitrary files via a .. (dot dot) in a filename in a server response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-26T19:00:00.000Z